Documentation
¶
Index ¶
Constants ¶
const GroupName = "imagepolicy.k8s.io"
GroupName is the group name use in this package
Variables ¶
var ( // SchemeBuilder points to a list of functions added to Scheme. SchemeBuilder = runtime.NewSchemeBuilder(addKnownTypes) // AddToScheme applies all the stored functions to the scheme. AddToScheme = SchemeBuilder.AddToScheme )
var SchemeGroupVersion = schema.GroupVersion{Group: GroupName, Version: runtime.APIVersionInternal}
SchemeGroupVersion is group version used to register these objects
Functions ¶
func Resource ¶
func Resource(resource string) schema.GroupResource
Resource takes an unqualified resource and returns a Group qualified GroupResource
Types ¶
type ImageReview ¶
type ImageReview struct { metav1.TypeMeta metav1.ObjectMeta // Spec holds information about the pod being evaluated Spec ImageReviewSpec // Status is filled in by the backend and indicates whether the pod should be allowed. Status ImageReviewStatus }
ImageReview checks if the set of images in a pod are allowed.
func (*ImageReview) DeepCopy ¶
func (in *ImageReview) DeepCopy() *ImageReview
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ImageReview.
func (*ImageReview) DeepCopyInto ¶
func (in *ImageReview) DeepCopyInto(out *ImageReview)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (*ImageReview) DeepCopyObject ¶
func (in *ImageReview) DeepCopyObject() runtime.Object
DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.
type ImageReviewContainerSpec ¶
type ImageReviewContainerSpec struct { // This can be in the form image:tag or image@SHA:012345679abcdef. Image string }
ImageReviewContainerSpec is a description of a container within the pod creation request.
func (*ImageReviewContainerSpec) DeepCopy ¶
func (in *ImageReviewContainerSpec) DeepCopy() *ImageReviewContainerSpec
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ImageReviewContainerSpec.
func (*ImageReviewContainerSpec) DeepCopyInto ¶
func (in *ImageReviewContainerSpec) DeepCopyInto(out *ImageReviewContainerSpec)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
type ImageReviewSpec ¶
type ImageReviewSpec struct { // Containers is a list of a subset of the information in each container of the Pod being created. Containers []ImageReviewContainerSpec // Annotations is a list of key-value pairs extracted from the Pod's annotations. // It only includes keys which match the pattern `*.image-policy.k8s.io/*`. // It is up to each webhook backend to determine how to interpret these annotations, if at all. Annotations map[string]string // Namespace is the namespace the pod is being created in. Namespace string }
ImageReviewSpec is a description of the pod creation request.
func (*ImageReviewSpec) DeepCopy ¶
func (in *ImageReviewSpec) DeepCopy() *ImageReviewSpec
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ImageReviewSpec.
func (*ImageReviewSpec) DeepCopyInto ¶
func (in *ImageReviewSpec) DeepCopyInto(out *ImageReviewSpec)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
type ImageReviewStatus ¶
type ImageReviewStatus struct { // Allowed indicates that all images were allowed to be run. Allowed bool // Reason should be empty unless Allowed is false in which case it // may contain a short description of what is wrong. Kubernetes // may truncate excessively long errors when displaying to the user. Reason string // AuditAnnotations will be added to the attributes object of the // admission controller request using 'AddAnnotation'. The keys should // be prefix-less (i.e., the admission controller will add an // appropriate prefix). AuditAnnotations map[string]string }
ImageReviewStatus is the result of the review for the pod creation request.
func (*ImageReviewStatus) DeepCopy ¶
func (in *ImageReviewStatus) DeepCopy() *ImageReviewStatus
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ImageReviewStatus.
func (*ImageReviewStatus) DeepCopyInto ¶
func (in *ImageReviewStatus) DeepCopyInto(out *ImageReviewStatus)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
Directories
¶
Path | Synopsis |
---|---|
Package install installs the experimental API group, making it available as an option to all of the API encoding/decoding machinery.
|
Package install installs the experimental API group, making it available as an option to all of the API encoding/decoding machinery. |