v1

package
v1.4.0-alpha.1 Latest Latest
Warning

This package is not in the latest version of its module.

Go to latest
Published: Nov 4, 2016 License: Apache-2.0 Imports: 12 Imported by: 0

Documentation

Overview

Package v1 is the v1 version of the API.

Package v1 is a generated protocol buffer package.

It is generated from these files:
	github.com/openshift/origin/pkg/security/api/v1/generated.proto

It has these top-level messages:
	PodSecurityPolicyReview
	PodSecurityPolicyReviewSpec
	PodSecurityPolicyReviewStatus
	PodSecurityPolicySelfSubjectReview
	PodSecurityPolicySelfSubjectReviewSpec
	PodSecurityPolicySubjectReview
	PodSecurityPolicySubjectReviewSpec
	PodSecurityPolicySubjectReviewStatus
	ServiceAccountPodSecurityPolicyReviewStatus

Index

Constants

View Source
const GroupName = ""

Variables

View Source
var (
	ErrInvalidLengthGenerated = fmt.Errorf("proto: negative length found during unmarshaling")
	ErrIntOverflowGenerated   = fmt.Errorf("proto: integer overflow")
)
View Source
var (
	SchemeBuilder = runtime.NewSchemeBuilder(addKnownTypes)
	AddToScheme   = SchemeBuilder.AddToScheme
)
View Source
var SchemeGroupVersion = unversioned.GroupVersion{Group: GroupName, Version: "v1"}

SchemeGroupVersion is group version used to register these objects

Functions

func Convert_api_PodSecurityPolicyReviewSpec_To_v1_PodSecurityPolicyReviewSpec

func Convert_api_PodSecurityPolicyReviewSpec_To_v1_PodSecurityPolicyReviewSpec(in *api.PodSecurityPolicyReviewSpec, out *PodSecurityPolicyReviewSpec, s conversion.Scope) error

func Convert_api_PodSecurityPolicyReviewStatus_To_v1_PodSecurityPolicyReviewStatus

func Convert_api_PodSecurityPolicyReviewStatus_To_v1_PodSecurityPolicyReviewStatus(in *api.PodSecurityPolicyReviewStatus, out *PodSecurityPolicyReviewStatus, s conversion.Scope) error

func Convert_api_PodSecurityPolicyReview_To_v1_PodSecurityPolicyReview

func Convert_api_PodSecurityPolicyReview_To_v1_PodSecurityPolicyReview(in *api.PodSecurityPolicyReview, out *PodSecurityPolicyReview, s conversion.Scope) error

func Convert_api_PodSecurityPolicySelfSubjectReview_To_v1_PodSecurityPolicySelfSubjectReview

func Convert_api_PodSecurityPolicySelfSubjectReview_To_v1_PodSecurityPolicySelfSubjectReview(in *api.PodSecurityPolicySelfSubjectReview, out *PodSecurityPolicySelfSubjectReview, s conversion.Scope) error

func Convert_api_PodSecurityPolicySubjectReviewSpec_To_v1_PodSecurityPolicySubjectReviewSpec

func Convert_api_PodSecurityPolicySubjectReviewSpec_To_v1_PodSecurityPolicySubjectReviewSpec(in *api.PodSecurityPolicySubjectReviewSpec, out *PodSecurityPolicySubjectReviewSpec, s conversion.Scope) error

func Convert_api_PodSecurityPolicySubjectReview_To_v1_PodSecurityPolicySubjectReview

func Convert_api_PodSecurityPolicySubjectReview_To_v1_PodSecurityPolicySubjectReview(in *api.PodSecurityPolicySubjectReview, out *PodSecurityPolicySubjectReview, s conversion.Scope) error

func Convert_v1_PodSecurityPolicyReviewSpec_To_api_PodSecurityPolicyReviewSpec

func Convert_v1_PodSecurityPolicyReviewSpec_To_api_PodSecurityPolicyReviewSpec(in *PodSecurityPolicyReviewSpec, out *api.PodSecurityPolicyReviewSpec, s conversion.Scope) error

func Convert_v1_PodSecurityPolicyReviewStatus_To_api_PodSecurityPolicyReviewStatus

func Convert_v1_PodSecurityPolicyReviewStatus_To_api_PodSecurityPolicyReviewStatus(in *PodSecurityPolicyReviewStatus, out *api.PodSecurityPolicyReviewStatus, s conversion.Scope) error

func Convert_v1_PodSecurityPolicyReview_To_api_PodSecurityPolicyReview

func Convert_v1_PodSecurityPolicyReview_To_api_PodSecurityPolicyReview(in *PodSecurityPolicyReview, out *api.PodSecurityPolicyReview, s conversion.Scope) error

func Convert_v1_PodSecurityPolicySelfSubjectReview_To_api_PodSecurityPolicySelfSubjectReview

func Convert_v1_PodSecurityPolicySelfSubjectReview_To_api_PodSecurityPolicySelfSubjectReview(in *PodSecurityPolicySelfSubjectReview, out *api.PodSecurityPolicySelfSubjectReview, s conversion.Scope) error

func Convert_v1_PodSecurityPolicySubjectReviewSpec_To_api_PodSecurityPolicySubjectReviewSpec

func Convert_v1_PodSecurityPolicySubjectReviewSpec_To_api_PodSecurityPolicySubjectReviewSpec(in *PodSecurityPolicySubjectReviewSpec, out *api.PodSecurityPolicySubjectReviewSpec, s conversion.Scope) error

func Convert_v1_PodSecurityPolicySubjectReview_To_api_PodSecurityPolicySubjectReview

func Convert_v1_PodSecurityPolicySubjectReview_To_api_PodSecurityPolicySubjectReview(in *PodSecurityPolicySubjectReview, out *api.PodSecurityPolicySubjectReview, s conversion.Scope) error

func DeepCopy_v1_PodSecurityPolicyReview

func DeepCopy_v1_PodSecurityPolicyReview(in interface{}, out interface{}, c *conversion.Cloner) error

func DeepCopy_v1_PodSecurityPolicyReviewSpec

func DeepCopy_v1_PodSecurityPolicyReviewSpec(in interface{}, out interface{}, c *conversion.Cloner) error

func DeepCopy_v1_PodSecurityPolicyReviewStatus

func DeepCopy_v1_PodSecurityPolicyReviewStatus(in interface{}, out interface{}, c *conversion.Cloner) error

func DeepCopy_v1_PodSecurityPolicySelfSubjectReview

func DeepCopy_v1_PodSecurityPolicySelfSubjectReview(in interface{}, out interface{}, c *conversion.Cloner) error

func DeepCopy_v1_PodSecurityPolicySelfSubjectReviewSpec

func DeepCopy_v1_PodSecurityPolicySelfSubjectReviewSpec(in interface{}, out interface{}, c *conversion.Cloner) error

func DeepCopy_v1_PodSecurityPolicySubjectReview

func DeepCopy_v1_PodSecurityPolicySubjectReview(in interface{}, out interface{}, c *conversion.Cloner) error

func DeepCopy_v1_PodSecurityPolicySubjectReviewSpec

func DeepCopy_v1_PodSecurityPolicySubjectReviewSpec(in interface{}, out interface{}, c *conversion.Cloner) error

func DeepCopy_v1_PodSecurityPolicySubjectReviewStatus

func DeepCopy_v1_PodSecurityPolicySubjectReviewStatus(in interface{}, out interface{}, c *conversion.Cloner) error

func DeepCopy_v1_ServiceAccountPodSecurityPolicyReviewStatus

func DeepCopy_v1_ServiceAccountPodSecurityPolicyReviewStatus(in interface{}, out interface{}, c *conversion.Cloner) error

func Kind

func Kind(kind string) unversioned.GroupKind

Kind takes an unqualified kind and returns back a Group qualified GroupKind

func RegisterConversions added in v1.4.0

func RegisterConversions(scheme *runtime.Scheme) error

RegisterConversions adds conversion functions to the given scheme. Public to allow building arbitrary schemes.

func RegisterDeepCopies added in v1.4.0

func RegisterDeepCopies(scheme *runtime.Scheme) error

RegisterDeepCopies adds deep-copy functions to the given scheme. Public to allow building arbitrary schemes.

func Resource

func Resource(resource string) unversioned.GroupResource

Resource takes an unqualified resource and returns back a Group qualified GroupResource

Types

type PodSecurityPolicyReview

type PodSecurityPolicyReview struct {
	unversioned.TypeMeta `json:",inline"`

	// spec is the PodSecurityPolicy to check.
	Spec PodSecurityPolicyReviewSpec `json:"spec" protobuf:"bytes,1,opt,name=spec"`

	// status represents the current information/status for the PodSecurityPolicyReview.
	Status PodSecurityPolicyReviewStatus `json:"status,omitempty" protobuf:"bytes,2,opt,name=status"`
}

PodSecurityPolicyReview checks which service accounts (not users, since that would be cluster-wide) can create the `PodTemplateSpec` in question.

func (*PodSecurityPolicyReview) Descriptor added in v1.4.0

func (*PodSecurityPolicyReview) Descriptor() ([]byte, []int)

func (*PodSecurityPolicyReview) GetObjectKind

func (obj *PodSecurityPolicyReview) GetObjectKind() unversioned.ObjectKind

func (*PodSecurityPolicyReview) Marshal

func (m *PodSecurityPolicyReview) Marshal() (data []byte, err error)

func (*PodSecurityPolicyReview) MarshalTo

func (m *PodSecurityPolicyReview) MarshalTo(data []byte) (int, error)

func (*PodSecurityPolicyReview) ProtoMessage

func (*PodSecurityPolicyReview) ProtoMessage()

func (*PodSecurityPolicyReview) Reset

func (m *PodSecurityPolicyReview) Reset()

func (*PodSecurityPolicyReview) Size

func (m *PodSecurityPolicyReview) Size() (n int)

func (*PodSecurityPolicyReview) String

func (this *PodSecurityPolicyReview) String() string

func (PodSecurityPolicyReview) SwaggerDoc

func (PodSecurityPolicyReview) SwaggerDoc() map[string]string

func (*PodSecurityPolicyReview) Unmarshal

func (m *PodSecurityPolicyReview) Unmarshal(data []byte) error

type PodSecurityPolicyReviewSpec

type PodSecurityPolicyReviewSpec struct {
	// template is the PodTemplateSpec to check. The template.spec.serviceAccountName field is used
	// if serviceAccountNames is empty, unless the template.spec.serviceAccountName is empty,
	// in which case "default" is used.
	// If serviceAccountNames is specified, template.spec.serviceAccountName is ignored.
	Template kapi.PodTemplateSpec `json:"template" protobuf:"bytes,1,opt,name=template"`

	// serviceAccountNames is an optional set of ServiceAccounts to run the check with.
	// If serviceAccountNames is empty, the template.spec.serviceAccountName is used,
	// unless it's empty, in which case "default" is used instead.
	// If serviceAccountNames is specified, template.spec.serviceAccountName is ignored.
	ServiceAccountNames []string `json:"serviceAccountNames,omitempty" protobuf:"bytes,2,rep,name=serviceAccountNames"` // TODO: find a way to express 'all service accounts'
}

PodSecurityPolicyReviewSpec defines specification for PodSecurityPolicyReview

func (*PodSecurityPolicyReviewSpec) Descriptor added in v1.4.0

func (*PodSecurityPolicyReviewSpec) Descriptor() ([]byte, []int)

func (*PodSecurityPolicyReviewSpec) Marshal

func (m *PodSecurityPolicyReviewSpec) Marshal() (data []byte, err error)

func (*PodSecurityPolicyReviewSpec) MarshalTo

func (m *PodSecurityPolicyReviewSpec) MarshalTo(data []byte) (int, error)

func (*PodSecurityPolicyReviewSpec) ProtoMessage

func (*PodSecurityPolicyReviewSpec) ProtoMessage()

func (*PodSecurityPolicyReviewSpec) Reset

func (m *PodSecurityPolicyReviewSpec) Reset()

func (*PodSecurityPolicyReviewSpec) Size

func (m *PodSecurityPolicyReviewSpec) Size() (n int)

func (*PodSecurityPolicyReviewSpec) String

func (this *PodSecurityPolicyReviewSpec) String() string

func (PodSecurityPolicyReviewSpec) SwaggerDoc

func (PodSecurityPolicyReviewSpec) SwaggerDoc() map[string]string

func (*PodSecurityPolicyReviewSpec) Unmarshal

func (m *PodSecurityPolicyReviewSpec) Unmarshal(data []byte) error

type PodSecurityPolicyReviewStatus

type PodSecurityPolicyReviewStatus struct {
	// allowedServiceAccounts returns the list of service accounts in *this* namespace that have the power to create the PodTemplateSpec.
	AllowedServiceAccounts []ServiceAccountPodSecurityPolicyReviewStatus `json:"allowedServiceAccounts" protobuf:"bytes,1,rep,name=allowedServiceAccounts"`
}

PodSecurityPolicyReviewStatus represents the status of PodSecurityPolicyReview.

func (*PodSecurityPolicyReviewStatus) Descriptor added in v1.4.0

func (*PodSecurityPolicyReviewStatus) Descriptor() ([]byte, []int)

func (*PodSecurityPolicyReviewStatus) Marshal

func (m *PodSecurityPolicyReviewStatus) Marshal() (data []byte, err error)

func (*PodSecurityPolicyReviewStatus) MarshalTo

func (m *PodSecurityPolicyReviewStatus) MarshalTo(data []byte) (int, error)

func (*PodSecurityPolicyReviewStatus) ProtoMessage

func (*PodSecurityPolicyReviewStatus) ProtoMessage()

func (*PodSecurityPolicyReviewStatus) Reset

func (m *PodSecurityPolicyReviewStatus) Reset()

func (*PodSecurityPolicyReviewStatus) Size

func (m *PodSecurityPolicyReviewStatus) Size() (n int)

func (*PodSecurityPolicyReviewStatus) String

func (this *PodSecurityPolicyReviewStatus) String() string

func (PodSecurityPolicyReviewStatus) SwaggerDoc

func (PodSecurityPolicyReviewStatus) SwaggerDoc() map[string]string

func (*PodSecurityPolicyReviewStatus) Unmarshal

func (m *PodSecurityPolicyReviewStatus) Unmarshal(data []byte) error

type PodSecurityPolicySelfSubjectReview

type PodSecurityPolicySelfSubjectReview struct {
	unversioned.TypeMeta `json:",inline"`

	// spec defines specification the PodSecurityPolicySelfSubjectReview.
	Spec PodSecurityPolicySelfSubjectReviewSpec `json:"spec" protobuf:"bytes,1,opt,name=spec"`

	// status represents the current information/status for the PodSecurityPolicySelfSubjectReview.
	Status PodSecurityPolicySubjectReviewStatus `json:"status,omitempty" protobuf:"bytes,2,opt,name=status"`
}

PodSecurityPolicySelfSubjectReview checks whether this user/SA tuple can create the PodTemplateSpec

func (*PodSecurityPolicySelfSubjectReview) Descriptor added in v1.4.0

func (*PodSecurityPolicySelfSubjectReview) Descriptor() ([]byte, []int)

func (*PodSecurityPolicySelfSubjectReview) GetObjectKind

func (*PodSecurityPolicySelfSubjectReview) Marshal

func (m *PodSecurityPolicySelfSubjectReview) Marshal() (data []byte, err error)

func (*PodSecurityPolicySelfSubjectReview) MarshalTo

func (m *PodSecurityPolicySelfSubjectReview) MarshalTo(data []byte) (int, error)

func (*PodSecurityPolicySelfSubjectReview) ProtoMessage

func (*PodSecurityPolicySelfSubjectReview) ProtoMessage()

func (*PodSecurityPolicySelfSubjectReview) Reset

func (*PodSecurityPolicySelfSubjectReview) Size

func (*PodSecurityPolicySelfSubjectReview) String

func (PodSecurityPolicySelfSubjectReview) SwaggerDoc

func (*PodSecurityPolicySelfSubjectReview) Unmarshal

func (m *PodSecurityPolicySelfSubjectReview) Unmarshal(data []byte) error

type PodSecurityPolicySelfSubjectReviewSpec

type PodSecurityPolicySelfSubjectReviewSpec struct {
	// template is the PodTemplateSpec to check.
	Template kapi.PodTemplateSpec `json:"template" protobuf:"bytes,1,opt,name=template"`
}

PodSecurityPolicySelfSubjectReviewSpec contains specification for PodSecurityPolicySelfSubjectReview.

func (*PodSecurityPolicySelfSubjectReviewSpec) Descriptor added in v1.4.0

func (*PodSecurityPolicySelfSubjectReviewSpec) Descriptor() ([]byte, []int)

func (*PodSecurityPolicySelfSubjectReviewSpec) Marshal

func (m *PodSecurityPolicySelfSubjectReviewSpec) Marshal() (data []byte, err error)

func (*PodSecurityPolicySelfSubjectReviewSpec) MarshalTo

func (m *PodSecurityPolicySelfSubjectReviewSpec) MarshalTo(data []byte) (int, error)

func (*PodSecurityPolicySelfSubjectReviewSpec) ProtoMessage

func (*PodSecurityPolicySelfSubjectReviewSpec) Reset

func (*PodSecurityPolicySelfSubjectReviewSpec) Size

func (*PodSecurityPolicySelfSubjectReviewSpec) String

func (PodSecurityPolicySelfSubjectReviewSpec) SwaggerDoc

func (*PodSecurityPolicySelfSubjectReviewSpec) Unmarshal

func (m *PodSecurityPolicySelfSubjectReviewSpec) Unmarshal(data []byte) error

type PodSecurityPolicySubjectReview

type PodSecurityPolicySubjectReview struct {
	unversioned.TypeMeta `json:",inline"`

	// spec defines specification for the PodSecurityPolicySubjectReview.
	Spec PodSecurityPolicySubjectReviewSpec `json:"spec" protobuf:"bytes,1,opt,name=spec"`

	// status represents the current information/status for the PodSecurityPolicySubjectReview.
	Status PodSecurityPolicySubjectReviewStatus `json:"status,omitempty" protobuf:"bytes,2,opt,name=status"`
}

PodSecurityPolicySubjectReview checks whether a particular user/SA tuple can create the PodTemplateSpec.

func (*PodSecurityPolicySubjectReview) Descriptor added in v1.4.0

func (*PodSecurityPolicySubjectReview) Descriptor() ([]byte, []int)

func (*PodSecurityPolicySubjectReview) GetObjectKind

func (*PodSecurityPolicySubjectReview) Marshal

func (m *PodSecurityPolicySubjectReview) Marshal() (data []byte, err error)

func (*PodSecurityPolicySubjectReview) MarshalTo

func (m *PodSecurityPolicySubjectReview) MarshalTo(data []byte) (int, error)

func (*PodSecurityPolicySubjectReview) ProtoMessage

func (*PodSecurityPolicySubjectReview) ProtoMessage()

func (*PodSecurityPolicySubjectReview) Reset

func (m *PodSecurityPolicySubjectReview) Reset()

func (*PodSecurityPolicySubjectReview) Size

func (m *PodSecurityPolicySubjectReview) Size() (n int)

func (*PodSecurityPolicySubjectReview) String

func (this *PodSecurityPolicySubjectReview) String() string

func (PodSecurityPolicySubjectReview) SwaggerDoc

func (PodSecurityPolicySubjectReview) SwaggerDoc() map[string]string

func (*PodSecurityPolicySubjectReview) Unmarshal

func (m *PodSecurityPolicySubjectReview) Unmarshal(data []byte) error

type PodSecurityPolicySubjectReviewSpec

type PodSecurityPolicySubjectReviewSpec struct {
	// template is the PodTemplateSpec to check. If template.spec.serviceAccountName is empty it will not be defaulted.
	// If its non-empty, it will be checked.
	Template kapi.PodTemplateSpec `json:"template" protobuf:"bytes,1,opt,name=template"`

	// user is the user you're testing for.
	// If you specify "user" but not "group", then is it interpreted as "What if user were not a member of any groups.
	// If user and groups are empty, then the check is performed using *only* the serviceAccountName in the template.
	User string `json:"user,omitempty" protobuf:"bytes,2,opt,name=user"`

	// groups is the groups you're testing for.
	Groups []string `json:"groups,omitempty" protobuf:"bytes,3,rep,name=groups"`
}

PodSecurityPolicySubjectReviewSpec defines specification for PodSecurityPolicySubjectReview

func (*PodSecurityPolicySubjectReviewSpec) Descriptor added in v1.4.0

func (*PodSecurityPolicySubjectReviewSpec) Descriptor() ([]byte, []int)

func (*PodSecurityPolicySubjectReviewSpec) Marshal

func (m *PodSecurityPolicySubjectReviewSpec) Marshal() (data []byte, err error)

func (*PodSecurityPolicySubjectReviewSpec) MarshalTo

func (m *PodSecurityPolicySubjectReviewSpec) MarshalTo(data []byte) (int, error)

func (*PodSecurityPolicySubjectReviewSpec) ProtoMessage

func (*PodSecurityPolicySubjectReviewSpec) ProtoMessage()

func (*PodSecurityPolicySubjectReviewSpec) Reset

func (*PodSecurityPolicySubjectReviewSpec) Size

func (*PodSecurityPolicySubjectReviewSpec) String

func (PodSecurityPolicySubjectReviewSpec) SwaggerDoc

func (*PodSecurityPolicySubjectReviewSpec) Unmarshal

func (m *PodSecurityPolicySubjectReviewSpec) Unmarshal(data []byte) error

type PodSecurityPolicySubjectReviewStatus

type PodSecurityPolicySubjectReviewStatus struct {
	// allowedBy is a reference to the rule that allows the PodTemplateSpec.
	// A rule can be a SecurityContextConstraint or a PodSecurityPolicy
	// A `nil`, indicates that it was denied.
	AllowedBy *kapi.ObjectReference `json:"allowedBy,omitempty" protobuf:"bytes,1,opt,name=allowedBy"`

	// A machine-readable description of why this operation is in the
	// "Failure" status. If this value is empty there
	// is no information available.
	Reason string `json:"reason,omitempty" protobuf:"bytes,2,opt,name=reason"`

	// template is the PodTemplateSpec after the defaulting is applied.
	Template kapi.PodTemplateSpec `json:"template,omitempty" protobuf:"bytes,3,opt,name=template"`
}

PodSecurityPolicySubjectReviewStatus contains information/status for PodSecurityPolicySubjectReview.

func (*PodSecurityPolicySubjectReviewStatus) Descriptor added in v1.4.0

func (*PodSecurityPolicySubjectReviewStatus) Descriptor() ([]byte, []int)

func (*PodSecurityPolicySubjectReviewStatus) Marshal

func (m *PodSecurityPolicySubjectReviewStatus) Marshal() (data []byte, err error)

func (*PodSecurityPolicySubjectReviewStatus) MarshalTo

func (m *PodSecurityPolicySubjectReviewStatus) MarshalTo(data []byte) (int, error)

func (*PodSecurityPolicySubjectReviewStatus) ProtoMessage

func (*PodSecurityPolicySubjectReviewStatus) ProtoMessage()

func (*PodSecurityPolicySubjectReviewStatus) Reset

func (*PodSecurityPolicySubjectReviewStatus) Size

func (*PodSecurityPolicySubjectReviewStatus) String

func (PodSecurityPolicySubjectReviewStatus) SwaggerDoc

func (*PodSecurityPolicySubjectReviewStatus) Unmarshal

func (m *PodSecurityPolicySubjectReviewStatus) Unmarshal(data []byte) error

type ServiceAccountPodSecurityPolicyReviewStatus

type ServiceAccountPodSecurityPolicyReviewStatus struct {
	PodSecurityPolicySubjectReviewStatus `json:",inline" protobuf:"bytes,1,opt,name=podSecurityPolicySubjectReviewStatus"`

	// name contains the allowed and the denied ServiceAccount name
	Name string `json:"name" protobuf:"bytes,2,opt,name=name"`
}

ServiceAccountPodSecurityPolicyReviewStatus represents ServiceAccount name and related review status

func (*ServiceAccountPodSecurityPolicyReviewStatus) Descriptor added in v1.4.0

func (*ServiceAccountPodSecurityPolicyReviewStatus) Marshal

func (m *ServiceAccountPodSecurityPolicyReviewStatus) Marshal() (data []byte, err error)

func (*ServiceAccountPodSecurityPolicyReviewStatus) MarshalTo

func (*ServiceAccountPodSecurityPolicyReviewStatus) ProtoMessage

func (*ServiceAccountPodSecurityPolicyReviewStatus) Reset

func (*ServiceAccountPodSecurityPolicyReviewStatus) Size

func (*ServiceAccountPodSecurityPolicyReviewStatus) String

func (ServiceAccountPodSecurityPolicyReviewStatus) SwaggerDoc

func (*ServiceAccountPodSecurityPolicyReviewStatus) Unmarshal

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL