Documentation ¶
Overview ¶
Package v1 is the v1 version of the API. AdmissionConfiguration and AdmissionPluginConfiguration are legacy static admission plugin configuration MutatingWebhookConfiguration and ValidatingWebhookConfiguration are for the new dynamic admission controller configuration.
Index ¶
- Constants
- Variables
- func Resource(resource string) schema.GroupResource
- type FailurePolicyType
- type MatchPolicyType
- type MutatingWebhook
- func (in *MutatingWebhook) DeepCopy() *MutatingWebhook
- func (in *MutatingWebhook) DeepCopyInto(out *MutatingWebhook)
- func (*MutatingWebhook) Descriptor() ([]byte, []int)
- func (m *MutatingWebhook) Marshal() (dAtA []byte, err error)
- func (m *MutatingWebhook) MarshalTo(dAtA []byte) (int, error)
- func (m *MutatingWebhook) MarshalToSizedBuffer(dAtA []byte) (int, error)
- func (*MutatingWebhook) ProtoMessage()
- func (m *MutatingWebhook) Reset()
- func (m *MutatingWebhook) Size() (n int)
- func (this *MutatingWebhook) String() string
- func (MutatingWebhook) SwaggerDoc() map[string]string
- func (m *MutatingWebhook) Unmarshal(dAtA []byte) error
- func (m *MutatingWebhook) XXX_DiscardUnknown()
- func (m *MutatingWebhook) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)
- func (m *MutatingWebhook) XXX_Merge(src proto.Message)
- func (m *MutatingWebhook) XXX_Size() int
- func (m *MutatingWebhook) XXX_Unmarshal(b []byte) error
- type MutatingWebhookConfiguration
- func (in *MutatingWebhookConfiguration) DeepCopy() *MutatingWebhookConfiguration
- func (in *MutatingWebhookConfiguration) DeepCopyInto(out *MutatingWebhookConfiguration)
- func (in *MutatingWebhookConfiguration) DeepCopyObject() runtime.Object
- func (*MutatingWebhookConfiguration) Descriptor() ([]byte, []int)
- func (m *MutatingWebhookConfiguration) Marshal() (dAtA []byte, err error)
- func (m *MutatingWebhookConfiguration) MarshalTo(dAtA []byte) (int, error)
- func (m *MutatingWebhookConfiguration) MarshalToSizedBuffer(dAtA []byte) (int, error)
- func (*MutatingWebhookConfiguration) ProtoMessage()
- func (m *MutatingWebhookConfiguration) Reset()
- func (m *MutatingWebhookConfiguration) Size() (n int)
- func (this *MutatingWebhookConfiguration) String() string
- func (MutatingWebhookConfiguration) SwaggerDoc() map[string]string
- func (m *MutatingWebhookConfiguration) Unmarshal(dAtA []byte) error
- func (m *MutatingWebhookConfiguration) XXX_DiscardUnknown()
- func (m *MutatingWebhookConfiguration) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)
- func (m *MutatingWebhookConfiguration) XXX_Merge(src proto.Message)
- func (m *MutatingWebhookConfiguration) XXX_Size() int
- func (m *MutatingWebhookConfiguration) XXX_Unmarshal(b []byte) error
- type MutatingWebhookConfigurationList
- func (in *MutatingWebhookConfigurationList) DeepCopy() *MutatingWebhookConfigurationList
- func (in *MutatingWebhookConfigurationList) DeepCopyInto(out *MutatingWebhookConfigurationList)
- func (in *MutatingWebhookConfigurationList) DeepCopyObject() runtime.Object
- func (*MutatingWebhookConfigurationList) Descriptor() ([]byte, []int)
- func (m *MutatingWebhookConfigurationList) Marshal() (dAtA []byte, err error)
- func (m *MutatingWebhookConfigurationList) MarshalTo(dAtA []byte) (int, error)
- func (m *MutatingWebhookConfigurationList) MarshalToSizedBuffer(dAtA []byte) (int, error)
- func (*MutatingWebhookConfigurationList) ProtoMessage()
- func (m *MutatingWebhookConfigurationList) Reset()
- func (m *MutatingWebhookConfigurationList) Size() (n int)
- func (this *MutatingWebhookConfigurationList) String() string
- func (MutatingWebhookConfigurationList) SwaggerDoc() map[string]string
- func (m *MutatingWebhookConfigurationList) Unmarshal(dAtA []byte) error
- func (m *MutatingWebhookConfigurationList) XXX_DiscardUnknown()
- func (m *MutatingWebhookConfigurationList) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)
- func (m *MutatingWebhookConfigurationList) XXX_Merge(src proto.Message)
- func (m *MutatingWebhookConfigurationList) XXX_Size() int
- func (m *MutatingWebhookConfigurationList) XXX_Unmarshal(b []byte) error
- type OperationType
- type ReinvocationPolicyType
- type Rule
- func (in *Rule) DeepCopy() *Rule
- func (in *Rule) DeepCopyInto(out *Rule)
- func (*Rule) Descriptor() ([]byte, []int)
- func (m *Rule) Marshal() (dAtA []byte, err error)
- func (m *Rule) MarshalTo(dAtA []byte) (int, error)
- func (m *Rule) MarshalToSizedBuffer(dAtA []byte) (int, error)
- func (*Rule) ProtoMessage()
- func (m *Rule) Reset()
- func (m *Rule) Size() (n int)
- func (this *Rule) String() string
- func (Rule) SwaggerDoc() map[string]string
- func (m *Rule) Unmarshal(dAtA []byte) error
- func (m *Rule) XXX_DiscardUnknown()
- func (m *Rule) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)
- func (m *Rule) XXX_Merge(src proto.Message)
- func (m *Rule) XXX_Size() int
- func (m *Rule) XXX_Unmarshal(b []byte) error
- type RuleWithOperations
- func (in *RuleWithOperations) DeepCopy() *RuleWithOperations
- func (in *RuleWithOperations) DeepCopyInto(out *RuleWithOperations)
- func (*RuleWithOperations) Descriptor() ([]byte, []int)
- func (m *RuleWithOperations) Marshal() (dAtA []byte, err error)
- func (m *RuleWithOperations) MarshalTo(dAtA []byte) (int, error)
- func (m *RuleWithOperations) MarshalToSizedBuffer(dAtA []byte) (int, error)
- func (*RuleWithOperations) ProtoMessage()
- func (m *RuleWithOperations) Reset()
- func (m *RuleWithOperations) Size() (n int)
- func (this *RuleWithOperations) String() string
- func (RuleWithOperations) SwaggerDoc() map[string]string
- func (m *RuleWithOperations) Unmarshal(dAtA []byte) error
- func (m *RuleWithOperations) XXX_DiscardUnknown()
- func (m *RuleWithOperations) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)
- func (m *RuleWithOperations) XXX_Merge(src proto.Message)
- func (m *RuleWithOperations) XXX_Size() int
- func (m *RuleWithOperations) XXX_Unmarshal(b []byte) error
- type ScopeType
- type ServiceReference
- func (in *ServiceReference) DeepCopy() *ServiceReference
- func (in *ServiceReference) DeepCopyInto(out *ServiceReference)
- func (*ServiceReference) Descriptor() ([]byte, []int)
- func (m *ServiceReference) Marshal() (dAtA []byte, err error)
- func (m *ServiceReference) MarshalTo(dAtA []byte) (int, error)
- func (m *ServiceReference) MarshalToSizedBuffer(dAtA []byte) (int, error)
- func (*ServiceReference) ProtoMessage()
- func (m *ServiceReference) Reset()
- func (m *ServiceReference) Size() (n int)
- func (this *ServiceReference) String() string
- func (ServiceReference) SwaggerDoc() map[string]string
- func (m *ServiceReference) Unmarshal(dAtA []byte) error
- func (m *ServiceReference) XXX_DiscardUnknown()
- func (m *ServiceReference) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)
- func (m *ServiceReference) XXX_Merge(src proto.Message)
- func (m *ServiceReference) XXX_Size() int
- func (m *ServiceReference) XXX_Unmarshal(b []byte) error
- type SideEffectClass
- type ValidatingWebhook
- func (in *ValidatingWebhook) DeepCopy() *ValidatingWebhook
- func (in *ValidatingWebhook) DeepCopyInto(out *ValidatingWebhook)
- func (*ValidatingWebhook) Descriptor() ([]byte, []int)
- func (m *ValidatingWebhook) Marshal() (dAtA []byte, err error)
- func (m *ValidatingWebhook) MarshalTo(dAtA []byte) (int, error)
- func (m *ValidatingWebhook) MarshalToSizedBuffer(dAtA []byte) (int, error)
- func (*ValidatingWebhook) ProtoMessage()
- func (m *ValidatingWebhook) Reset()
- func (m *ValidatingWebhook) Size() (n int)
- func (this *ValidatingWebhook) String() string
- func (ValidatingWebhook) SwaggerDoc() map[string]string
- func (m *ValidatingWebhook) Unmarshal(dAtA []byte) error
- func (m *ValidatingWebhook) XXX_DiscardUnknown()
- func (m *ValidatingWebhook) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)
- func (m *ValidatingWebhook) XXX_Merge(src proto.Message)
- func (m *ValidatingWebhook) XXX_Size() int
- func (m *ValidatingWebhook) XXX_Unmarshal(b []byte) error
- type ValidatingWebhookConfiguration
- func (in *ValidatingWebhookConfiguration) DeepCopy() *ValidatingWebhookConfiguration
- func (in *ValidatingWebhookConfiguration) DeepCopyInto(out *ValidatingWebhookConfiguration)
- func (in *ValidatingWebhookConfiguration) DeepCopyObject() runtime.Object
- func (*ValidatingWebhookConfiguration) Descriptor() ([]byte, []int)
- func (m *ValidatingWebhookConfiguration) Marshal() (dAtA []byte, err error)
- func (m *ValidatingWebhookConfiguration) MarshalTo(dAtA []byte) (int, error)
- func (m *ValidatingWebhookConfiguration) MarshalToSizedBuffer(dAtA []byte) (int, error)
- func (*ValidatingWebhookConfiguration) ProtoMessage()
- func (m *ValidatingWebhookConfiguration) Reset()
- func (m *ValidatingWebhookConfiguration) Size() (n int)
- func (this *ValidatingWebhookConfiguration) String() string
- func (ValidatingWebhookConfiguration) SwaggerDoc() map[string]string
- func (m *ValidatingWebhookConfiguration) Unmarshal(dAtA []byte) error
- func (m *ValidatingWebhookConfiguration) XXX_DiscardUnknown()
- func (m *ValidatingWebhookConfiguration) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)
- func (m *ValidatingWebhookConfiguration) XXX_Merge(src proto.Message)
- func (m *ValidatingWebhookConfiguration) XXX_Size() int
- func (m *ValidatingWebhookConfiguration) XXX_Unmarshal(b []byte) error
- type ValidatingWebhookConfigurationList
- func (in *ValidatingWebhookConfigurationList) DeepCopy() *ValidatingWebhookConfigurationList
- func (in *ValidatingWebhookConfigurationList) DeepCopyInto(out *ValidatingWebhookConfigurationList)
- func (in *ValidatingWebhookConfigurationList) DeepCopyObject() runtime.Object
- func (*ValidatingWebhookConfigurationList) Descriptor() ([]byte, []int)
- func (m *ValidatingWebhookConfigurationList) Marshal() (dAtA []byte, err error)
- func (m *ValidatingWebhookConfigurationList) MarshalTo(dAtA []byte) (int, error)
- func (m *ValidatingWebhookConfigurationList) MarshalToSizedBuffer(dAtA []byte) (int, error)
- func (*ValidatingWebhookConfigurationList) ProtoMessage()
- func (m *ValidatingWebhookConfigurationList) Reset()
- func (m *ValidatingWebhookConfigurationList) Size() (n int)
- func (this *ValidatingWebhookConfigurationList) String() string
- func (ValidatingWebhookConfigurationList) SwaggerDoc() map[string]string
- func (m *ValidatingWebhookConfigurationList) Unmarshal(dAtA []byte) error
- func (m *ValidatingWebhookConfigurationList) XXX_DiscardUnknown()
- func (m *ValidatingWebhookConfigurationList) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)
- func (m *ValidatingWebhookConfigurationList) XXX_Merge(src proto.Message)
- func (m *ValidatingWebhookConfigurationList) XXX_Size() int
- func (m *ValidatingWebhookConfigurationList) XXX_Unmarshal(b []byte) error
- type WebhookClientConfig
- func (in *WebhookClientConfig) DeepCopy() *WebhookClientConfig
- func (in *WebhookClientConfig) DeepCopyInto(out *WebhookClientConfig)
- func (*WebhookClientConfig) Descriptor() ([]byte, []int)
- func (m *WebhookClientConfig) Marshal() (dAtA []byte, err error)
- func (m *WebhookClientConfig) MarshalTo(dAtA []byte) (int, error)
- func (m *WebhookClientConfig) MarshalToSizedBuffer(dAtA []byte) (int, error)
- func (*WebhookClientConfig) ProtoMessage()
- func (m *WebhookClientConfig) Reset()
- func (m *WebhookClientConfig) Size() (n int)
- func (this *WebhookClientConfig) String() string
- func (WebhookClientConfig) SwaggerDoc() map[string]string
- func (m *WebhookClientConfig) Unmarshal(dAtA []byte) error
- func (m *WebhookClientConfig) XXX_DiscardUnknown()
- func (m *WebhookClientConfig) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)
- func (m *WebhookClientConfig) XXX_Merge(src proto.Message)
- func (m *WebhookClientConfig) XXX_Size() int
- func (m *WebhookClientConfig) XXX_Unmarshal(b []byte) error
Constants ¶
const GroupName = "admissionregistration.k8s.io"
Variables ¶
var ( ErrInvalidLengthGenerated = fmt.Errorf("proto: negative length found during unmarshaling") ErrIntOverflowGenerated = fmt.Errorf("proto: integer overflow") ErrUnexpectedEndOfGroupGenerated = fmt.Errorf("proto: unexpected end of group") )
var ( // TODO: move SchemeBuilder with zz_generated.deepcopy.go to k8s.io/api. // localSchemeBuilder and AddToScheme will stay in k8s.io/kubernetes. SchemeBuilder = runtime.NewSchemeBuilder(addKnownTypes) AddToScheme = localSchemeBuilder.AddToScheme )
var SchemeGroupVersion = schema.GroupVersion{Group: GroupName, Version: "v1"}
SchemeGroupVersion is group version used to register these objects
Functions ¶
func Resource ¶
func Resource(resource string) schema.GroupResource
Resource takes an unqualified resource and returns a Group qualified GroupResource
Types ¶
type FailurePolicyType ¶
type FailurePolicyType string
const ( // Ignore means that an error calling the webhook is ignored. Ignore FailurePolicyType = "Ignore" // Fail means that an error calling the webhook causes the admission to fail. Fail FailurePolicyType = "Fail" )
type MatchPolicyType ¶
type MatchPolicyType string
MatchPolicyType specifies the type of match policy
const ( // Exact means requests should only be sent to the webhook if they exactly match a given rule Exact MatchPolicyType = "Exact" // Equivalent means requests should be sent to the webhook if they modify a resource listed in rules via another API group or version. Equivalent MatchPolicyType = "Equivalent" )
type MutatingWebhook ¶
type MutatingWebhook struct { // The name of the admission webhook. // Name should be fully qualified, e.g., imagepolicy.kubernetes.io, where // "imagepolicy" is the name of the webhook, and kubernetes.io is the name // of the organization. // Required. Name string `json:"name" protobuf:"bytes,1,opt,name=name"` // ClientConfig defines how to communicate with the hook. // Required ClientConfig WebhookClientConfig `json:"clientConfig" protobuf:"bytes,2,opt,name=clientConfig"` // Rules describes what operations on what resources/subresources the webhook cares about. // The webhook cares about an operation if it matches _any_ Rule. // However, in order to prevent ValidatingAdmissionWebhooks and MutatingAdmissionWebhooks // from putting the cluster in a state which cannot be recovered from without completely // disabling the plugin, ValidatingAdmissionWebhooks and MutatingAdmissionWebhooks are never called // on admission requests for ValidatingWebhookConfiguration and MutatingWebhookConfiguration objects. Rules []RuleWithOperations `json:"rules,omitempty" protobuf:"bytes,3,rep,name=rules"` // FailurePolicy defines how unrecognized errors from the admission endpoint are handled - // allowed values are Ignore or Fail. Defaults to Fail. // +optional FailurePolicy *FailurePolicyType `json:"failurePolicy,omitempty" protobuf:"bytes,4,opt,name=failurePolicy,casttype=FailurePolicyType"` // matchPolicy defines how the "rules" list is used to match incoming requests. // Allowed values are "Exact" or "Equivalent". // // - Exact: match a request only if it exactly matches a specified rule. // For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, // but "rules" only included `apiGroups:["apps"], apiVersions:["v1"], resources: ["deployments"]`, // a request to apps/v1beta1 or extensions/v1beta1 would not be sent to the webhook. // // - Equivalent: match a request if modifies a resource listed in rules, even via another API group or version. // For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, // and "rules" only included `apiGroups:["apps"], apiVersions:["v1"], resources: ["deployments"]`, // a request to apps/v1beta1 or extensions/v1beta1 would be converted to apps/v1 and sent to the webhook. // // Defaults to "Equivalent" // +optional MatchPolicy *MatchPolicyType `json:"matchPolicy,omitempty" protobuf:"bytes,9,opt,name=matchPolicy,casttype=MatchPolicyType"` // NamespaceSelector decides whether to run the webhook on an object based // on whether the namespace for that object matches the selector. If the // object itself is a namespace, the matching is performed on // object.metadata.labels. If the object is another cluster scoped resource, // it never skips the webhook. // // For example, to run the webhook on any objects whose namespace is not // associated with "runlevel" of "0" or "1"; you will set the selector as // follows: // "namespaceSelector": { // "matchExpressions": [ // { // "key": "runlevel", // "operator": "NotIn", // "values": [ // "0", // "1" // ] // } // ] // } // // If instead you want to only run the webhook on any objects whose // namespace is associated with the "environment" of "prod" or "staging"; // you will set the selector as follows: // "namespaceSelector": { // "matchExpressions": [ // { // "key": "environment", // "operator": "In", // "values": [ // "prod", // "staging" // ] // } // ] // } // // See // https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/ // for more examples of label selectors. // // Default to the empty LabelSelector, which matches everything. // +optional NamespaceSelector *metav1.LabelSelector `json:"namespaceSelector,omitempty" protobuf:"bytes,5,opt,name=namespaceSelector"` // ObjectSelector decides whether to run the webhook based on if the // object has matching labels. objectSelector is evaluated against both // the oldObject and newObject that would be sent to the webhook, and // is considered to match if either object matches the selector. A null // object (oldObject in the case of create, or newObject in the case of // delete) or an object that cannot have labels (like a // DeploymentRollback or a PodProxyOptions object) is not considered to // match. // Use the object selector only if the webhook is opt-in, because end // users may skip the admission webhook by setting the labels. // Default to the empty LabelSelector, which matches everything. // +optional ObjectSelector *metav1.LabelSelector `json:"objectSelector,omitempty" protobuf:"bytes,11,opt,name=objectSelector"` // SideEffects states whether this webhook has side effects. // Acceptable values are: None, NoneOnDryRun (webhooks created via v1beta1 may also specify Some or Unknown). // Webhooks with side effects MUST implement a reconciliation system, since a request may be // rejected by a future step in the admission change and the side effects therefore need to be undone. // Requests with the dryRun attribute will be auto-rejected if they match a webhook with // sideEffects == Unknown or Some. SideEffects *SideEffectClass `json:"sideEffects" protobuf:"bytes,6,opt,name=sideEffects,casttype=SideEffectClass"` // TimeoutSeconds specifies the timeout for this webhook. After the timeout passes, // the webhook call will be ignored or the API call will fail based on the // failure policy. // The timeout value must be between 1 and 30 seconds. // Default to 10 seconds. // +optional TimeoutSeconds *int32 `json:"timeoutSeconds,omitempty" protobuf:"varint,7,opt,name=timeoutSeconds"` // AdmissionReviewVersions is an ordered list of preferred `AdmissionReview` // versions the Webhook expects. API server will try to use first version in // the list which it supports. If none of the versions specified in this list // supported by API server, validation will fail for this object. // If a persisted webhook configuration specifies allowed versions and does not // include any versions known to the API Server, calls to the webhook will fail // and be subject to the failure policy. AdmissionReviewVersions []string `json:"admissionReviewVersions" protobuf:"bytes,8,rep,name=admissionReviewVersions"` // reinvocationPolicy indicates whether this webhook should be called multiple times as part of a single admission evaluation. // Allowed values are "Never" and "IfNeeded". // // Never: the webhook will not be called more than once in a single admission evaluation. // // IfNeeded: the webhook will be called at least one additional time as part of the admission evaluation // if the object being admitted is modified by other admission plugins after the initial webhook call. // Webhooks that specify this option *must* be idempotent, able to process objects they previously admitted. // Note: // * the number of additional invocations is not guaranteed to be exactly one. // * if additional invocations result in further modifications to the object, webhooks are not guaranteed to be invoked again. // * webhooks that use this option may be reordered to minimize the number of additional invocations. // * to validate an object after all mutations are guaranteed complete, use a validating admission webhook instead. // // Defaults to "Never". // +optional ReinvocationPolicy *ReinvocationPolicyType `json:"reinvocationPolicy,omitempty" protobuf:"bytes,10,opt,name=reinvocationPolicy,casttype=ReinvocationPolicyType"` }
MutatingWebhook describes an admission webhook and the resources and operations it applies to.
func (*MutatingWebhook) DeepCopy ¶
func (in *MutatingWebhook) DeepCopy() *MutatingWebhook
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new MutatingWebhook.
func (*MutatingWebhook) DeepCopyInto ¶
func (in *MutatingWebhook) DeepCopyInto(out *MutatingWebhook)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (*MutatingWebhook) Descriptor ¶
func (*MutatingWebhook) Descriptor() ([]byte, []int)
func (*MutatingWebhook) Marshal ¶
func (m *MutatingWebhook) Marshal() (dAtA []byte, err error)
func (*MutatingWebhook) MarshalToSizedBuffer ¶
func (m *MutatingWebhook) MarshalToSizedBuffer(dAtA []byte) (int, error)
func (*MutatingWebhook) ProtoMessage ¶
func (*MutatingWebhook) ProtoMessage()
func (*MutatingWebhook) Reset ¶
func (m *MutatingWebhook) Reset()
func (*MutatingWebhook) Size ¶
func (m *MutatingWebhook) Size() (n int)
func (*MutatingWebhook) String ¶
func (this *MutatingWebhook) String() string
func (MutatingWebhook) SwaggerDoc ¶
func (MutatingWebhook) SwaggerDoc() map[string]string
func (*MutatingWebhook) Unmarshal ¶
func (m *MutatingWebhook) Unmarshal(dAtA []byte) error
func (*MutatingWebhook) XXX_DiscardUnknown ¶
func (m *MutatingWebhook) XXX_DiscardUnknown()
func (*MutatingWebhook) XXX_Marshal ¶
func (m *MutatingWebhook) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)
func (*MutatingWebhook) XXX_Merge ¶
func (m *MutatingWebhook) XXX_Merge(src proto.Message)
func (*MutatingWebhook) XXX_Size ¶
func (m *MutatingWebhook) XXX_Size() int
func (*MutatingWebhook) XXX_Unmarshal ¶
func (m *MutatingWebhook) XXX_Unmarshal(b []byte) error
type MutatingWebhookConfiguration ¶
type MutatingWebhookConfiguration struct { metav1.TypeMeta `json:",inline"` // Standard object metadata; More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata. // +optional metav1.ObjectMeta `json:"metadata,omitempty" protobuf:"bytes,1,opt,name=metadata"` // Webhooks is a list of webhooks and the affected resources and operations. // +optional // +patchMergeKey=name // +patchStrategy=merge Webhooks []MutatingWebhook `json:"webhooks,omitempty" patchStrategy:"merge" patchMergeKey:"name" protobuf:"bytes,2,rep,name=Webhooks"` }
MutatingWebhookConfiguration describes the configuration of and admission webhook that accept or reject and may change the object.
func (*MutatingWebhookConfiguration) DeepCopy ¶
func (in *MutatingWebhookConfiguration) DeepCopy() *MutatingWebhookConfiguration
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new MutatingWebhookConfiguration.
func (*MutatingWebhookConfiguration) DeepCopyInto ¶
func (in *MutatingWebhookConfiguration) DeepCopyInto(out *MutatingWebhookConfiguration)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (*MutatingWebhookConfiguration) DeepCopyObject ¶
func (in *MutatingWebhookConfiguration) DeepCopyObject() runtime.Object
DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.
func (*MutatingWebhookConfiguration) Descriptor ¶
func (*MutatingWebhookConfiguration) Descriptor() ([]byte, []int)
func (*MutatingWebhookConfiguration) Marshal ¶
func (m *MutatingWebhookConfiguration) Marshal() (dAtA []byte, err error)
func (*MutatingWebhookConfiguration) MarshalTo ¶
func (m *MutatingWebhookConfiguration) MarshalTo(dAtA []byte) (int, error)
func (*MutatingWebhookConfiguration) MarshalToSizedBuffer ¶
func (m *MutatingWebhookConfiguration) MarshalToSizedBuffer(dAtA []byte) (int, error)
func (*MutatingWebhookConfiguration) ProtoMessage ¶
func (*MutatingWebhookConfiguration) ProtoMessage()
func (*MutatingWebhookConfiguration) Reset ¶
func (m *MutatingWebhookConfiguration) Reset()
func (*MutatingWebhookConfiguration) Size ¶
func (m *MutatingWebhookConfiguration) Size() (n int)
func (*MutatingWebhookConfiguration) String ¶
func (this *MutatingWebhookConfiguration) String() string
func (MutatingWebhookConfiguration) SwaggerDoc ¶
func (MutatingWebhookConfiguration) SwaggerDoc() map[string]string
func (*MutatingWebhookConfiguration) Unmarshal ¶
func (m *MutatingWebhookConfiguration) Unmarshal(dAtA []byte) error
func (*MutatingWebhookConfiguration) XXX_DiscardUnknown ¶
func (m *MutatingWebhookConfiguration) XXX_DiscardUnknown()
func (*MutatingWebhookConfiguration) XXX_Marshal ¶
func (m *MutatingWebhookConfiguration) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)
func (*MutatingWebhookConfiguration) XXX_Merge ¶
func (m *MutatingWebhookConfiguration) XXX_Merge(src proto.Message)
func (*MutatingWebhookConfiguration) XXX_Size ¶
func (m *MutatingWebhookConfiguration) XXX_Size() int
func (*MutatingWebhookConfiguration) XXX_Unmarshal ¶
func (m *MutatingWebhookConfiguration) XXX_Unmarshal(b []byte) error
type MutatingWebhookConfigurationList ¶
type MutatingWebhookConfigurationList struct { metav1.TypeMeta `json:",inline"` // Standard list metadata. // More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds // +optional metav1.ListMeta `json:"metadata,omitempty" protobuf:"bytes,1,opt,name=metadata"` // List of MutatingWebhookConfiguration. Items []MutatingWebhookConfiguration `json:"items" protobuf:"bytes,2,rep,name=items"` }
MutatingWebhookConfigurationList is a list of MutatingWebhookConfiguration.
func (*MutatingWebhookConfigurationList) DeepCopy ¶
func (in *MutatingWebhookConfigurationList) DeepCopy() *MutatingWebhookConfigurationList
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new MutatingWebhookConfigurationList.
func (*MutatingWebhookConfigurationList) DeepCopyInto ¶
func (in *MutatingWebhookConfigurationList) DeepCopyInto(out *MutatingWebhookConfigurationList)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (*MutatingWebhookConfigurationList) DeepCopyObject ¶
func (in *MutatingWebhookConfigurationList) DeepCopyObject() runtime.Object
DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.
func (*MutatingWebhookConfigurationList) Descriptor ¶
func (*MutatingWebhookConfigurationList) Descriptor() ([]byte, []int)
func (*MutatingWebhookConfigurationList) Marshal ¶
func (m *MutatingWebhookConfigurationList) Marshal() (dAtA []byte, err error)
func (*MutatingWebhookConfigurationList) MarshalTo ¶
func (m *MutatingWebhookConfigurationList) MarshalTo(dAtA []byte) (int, error)
func (*MutatingWebhookConfigurationList) MarshalToSizedBuffer ¶
func (m *MutatingWebhookConfigurationList) MarshalToSizedBuffer(dAtA []byte) (int, error)
func (*MutatingWebhookConfigurationList) ProtoMessage ¶
func (*MutatingWebhookConfigurationList) ProtoMessage()
func (*MutatingWebhookConfigurationList) Reset ¶
func (m *MutatingWebhookConfigurationList) Reset()
func (*MutatingWebhookConfigurationList) Size ¶
func (m *MutatingWebhookConfigurationList) Size() (n int)
func (*MutatingWebhookConfigurationList) String ¶
func (this *MutatingWebhookConfigurationList) String() string
func (MutatingWebhookConfigurationList) SwaggerDoc ¶
func (MutatingWebhookConfigurationList) SwaggerDoc() map[string]string
func (*MutatingWebhookConfigurationList) Unmarshal ¶
func (m *MutatingWebhookConfigurationList) Unmarshal(dAtA []byte) error
func (*MutatingWebhookConfigurationList) XXX_DiscardUnknown ¶
func (m *MutatingWebhookConfigurationList) XXX_DiscardUnknown()
func (*MutatingWebhookConfigurationList) XXX_Marshal ¶
func (m *MutatingWebhookConfigurationList) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)
func (*MutatingWebhookConfigurationList) XXX_Merge ¶
func (m *MutatingWebhookConfigurationList) XXX_Merge(src proto.Message)
func (*MutatingWebhookConfigurationList) XXX_Size ¶
func (m *MutatingWebhookConfigurationList) XXX_Size() int
func (*MutatingWebhookConfigurationList) XXX_Unmarshal ¶
func (m *MutatingWebhookConfigurationList) XXX_Unmarshal(b []byte) error
type OperationType ¶
type OperationType string
const ( OperationAll OperationType = "*" Create OperationType = "CREATE" Update OperationType = "UPDATE" Delete OperationType = "DELETE" Connect OperationType = "CONNECT" )
The constants should be kept in sync with those defined in k8s.io/kubernetes/pkg/admission/interface.go.
type ReinvocationPolicyType ¶
type ReinvocationPolicyType string
ReinvocationPolicyType specifies what type of policy the admission hook uses.
const ( // NeverReinvocationPolicy indicates that the webhook must not be called more than once in a // single admission evaluation. NeverReinvocationPolicy ReinvocationPolicyType = "Never" // IfNeededReinvocationPolicy indicates that the webhook may be called at least one // additional time as part of the admission evaluation if the object being admitted is // modified by other admission plugins after the initial webhook call. IfNeededReinvocationPolicy ReinvocationPolicyType = "IfNeeded" )
type Rule ¶
type Rule struct { // APIGroups is the API groups the resources belong to. '*' is all groups. // If '*' is present, the length of the slice must be one. // Required. APIGroups []string `json:"apiGroups,omitempty" protobuf:"bytes,1,rep,name=apiGroups"` // APIVersions is the API versions the resources belong to. '*' is all versions. // If '*' is present, the length of the slice must be one. // Required. APIVersions []string `json:"apiVersions,omitempty" protobuf:"bytes,2,rep,name=apiVersions"` // Resources is a list of resources this rule applies to. // // For example: // 'pods' means pods. // 'pods/log' means the log subresource of pods. // '*' means all resources, but not subresources. // 'pods/*' means all subresources of pods. // '*/scale' means all scale subresources. // '*/*' means all resources and their subresources. // // If wildcard is present, the validation rule will ensure resources do not // overlap with each other. // // Depending on the enclosing object, subresources might not be allowed. // Required. Resources []string `json:"resources,omitempty" protobuf:"bytes,3,rep,name=resources"` // scope specifies the scope of this rule. // Valid values are "Cluster", "Namespaced", and "*" // "Cluster" means that only cluster-scoped resources will match this rule. // Namespace API objects are cluster-scoped. // "Namespaced" means that only namespaced resources will match this rule. // "*" means that there are no scope restrictions. // Subresources match the scope of their parent resource. // Default is "*". // // +optional Scope *ScopeType `json:"scope,omitempty" protobuf:"bytes,4,rep,name=scope"` }
Rule is a tuple of APIGroups, APIVersion, and Resources.It is recommended to make sure that all the tuple expansions are valid.
func (*Rule) DeepCopy ¶
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new Rule.
func (*Rule) DeepCopyInto ¶
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (*Rule) Descriptor ¶
func (*Rule) ProtoMessage ¶
func (*Rule) ProtoMessage()
func (Rule) SwaggerDoc ¶
func (*Rule) XXX_DiscardUnknown ¶
func (m *Rule) XXX_DiscardUnknown()
func (*Rule) XXX_Unmarshal ¶
type RuleWithOperations ¶
type RuleWithOperations struct { // Operations is the operations the admission hook cares about - CREATE, UPDATE, DELETE, CONNECT or * // for all of those operations and any future admission operations that are added. // If '*' is present, the length of the slice must be one. // Required. Operations []OperationType `json:"operations,omitempty" protobuf:"bytes,1,rep,name=operations,casttype=OperationType"` // Rule is embedded, it describes other criteria of the rule, like // APIGroups, APIVersions, Resources, etc. Rule `json:",inline" protobuf:"bytes,2,opt,name=rule"` }
RuleWithOperations is a tuple of Operations and Resources. It is recommended to make sure that all the tuple expansions are valid.
func (*RuleWithOperations) DeepCopy ¶
func (in *RuleWithOperations) DeepCopy() *RuleWithOperations
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new RuleWithOperations.
func (*RuleWithOperations) DeepCopyInto ¶
func (in *RuleWithOperations) DeepCopyInto(out *RuleWithOperations)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (*RuleWithOperations) Descriptor ¶
func (*RuleWithOperations) Descriptor() ([]byte, []int)
func (*RuleWithOperations) Marshal ¶
func (m *RuleWithOperations) Marshal() (dAtA []byte, err error)
func (*RuleWithOperations) MarshalTo ¶
func (m *RuleWithOperations) MarshalTo(dAtA []byte) (int, error)
func (*RuleWithOperations) MarshalToSizedBuffer ¶
func (m *RuleWithOperations) MarshalToSizedBuffer(dAtA []byte) (int, error)
func (*RuleWithOperations) ProtoMessage ¶
func (*RuleWithOperations) ProtoMessage()
func (*RuleWithOperations) Reset ¶
func (m *RuleWithOperations) Reset()
func (*RuleWithOperations) Size ¶
func (m *RuleWithOperations) Size() (n int)
func (*RuleWithOperations) String ¶
func (this *RuleWithOperations) String() string
func (RuleWithOperations) SwaggerDoc ¶
func (RuleWithOperations) SwaggerDoc() map[string]string
func (*RuleWithOperations) Unmarshal ¶
func (m *RuleWithOperations) Unmarshal(dAtA []byte) error
func (*RuleWithOperations) XXX_DiscardUnknown ¶
func (m *RuleWithOperations) XXX_DiscardUnknown()
func (*RuleWithOperations) XXX_Marshal ¶
func (m *RuleWithOperations) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)
func (*RuleWithOperations) XXX_Merge ¶
func (m *RuleWithOperations) XXX_Merge(src proto.Message)
func (*RuleWithOperations) XXX_Size ¶
func (m *RuleWithOperations) XXX_Size() int
func (*RuleWithOperations) XXX_Unmarshal ¶
func (m *RuleWithOperations) XXX_Unmarshal(b []byte) error
type ScopeType ¶
type ScopeType string
const ( // ClusterScope means that scope is limited to cluster-scoped objects. // Namespace objects are cluster-scoped. ClusterScope ScopeType = "Cluster" // NamespacedScope means that scope is limited to namespaced objects. NamespacedScope ScopeType = "Namespaced" // AllScopes means that all scopes are included. AllScopes ScopeType = "*" )
type ServiceReference ¶
type ServiceReference struct { // `namespace` is the namespace of the service. // Required Namespace string `json:"namespace" protobuf:"bytes,1,opt,name=namespace"` // `name` is the name of the service. // Required Name string `json:"name" protobuf:"bytes,2,opt,name=name"` // `path` is an optional URL path which will be sent in any request to // this service. // +optional Path *string `json:"path,omitempty" protobuf:"bytes,3,opt,name=path"` // If specified, the port on the service that hosting webhook. // Default to 443 for backward compatibility. // `port` should be a valid port number (1-65535, inclusive). // +optional Port *int32 `json:"port,omitempty" protobuf:"varint,4,opt,name=port"` }
ServiceReference holds a reference to Service.legacy.k8s.io
func (*ServiceReference) DeepCopy ¶
func (in *ServiceReference) DeepCopy() *ServiceReference
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ServiceReference.
func (*ServiceReference) DeepCopyInto ¶
func (in *ServiceReference) DeepCopyInto(out *ServiceReference)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (*ServiceReference) Descriptor ¶
func (*ServiceReference) Descriptor() ([]byte, []int)
func (*ServiceReference) Marshal ¶
func (m *ServiceReference) Marshal() (dAtA []byte, err error)
func (*ServiceReference) MarshalToSizedBuffer ¶
func (m *ServiceReference) MarshalToSizedBuffer(dAtA []byte) (int, error)
func (*ServiceReference) ProtoMessage ¶
func (*ServiceReference) ProtoMessage()
func (*ServiceReference) Reset ¶
func (m *ServiceReference) Reset()
func (*ServiceReference) Size ¶
func (m *ServiceReference) Size() (n int)
func (*ServiceReference) String ¶
func (this *ServiceReference) String() string
func (ServiceReference) SwaggerDoc ¶
func (ServiceReference) SwaggerDoc() map[string]string
func (*ServiceReference) Unmarshal ¶
func (m *ServiceReference) Unmarshal(dAtA []byte) error
func (*ServiceReference) XXX_DiscardUnknown ¶
func (m *ServiceReference) XXX_DiscardUnknown()
func (*ServiceReference) XXX_Marshal ¶
func (m *ServiceReference) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)
func (*ServiceReference) XXX_Merge ¶
func (m *ServiceReference) XXX_Merge(src proto.Message)
func (*ServiceReference) XXX_Size ¶
func (m *ServiceReference) XXX_Size() int
func (*ServiceReference) XXX_Unmarshal ¶
func (m *ServiceReference) XXX_Unmarshal(b []byte) error
type SideEffectClass ¶
type SideEffectClass string
const ( // SideEffectClassUnknown means that no information is known about the side effects of calling the webhook. // If a request with the dry-run attribute would trigger a call to this webhook, the request will instead fail. SideEffectClassUnknown SideEffectClass = "Unknown" // SideEffectClassNone means that calling the webhook will have no side effects. SideEffectClassNone SideEffectClass = "None" // SideEffectClassSome means that calling the webhook will possibly have side effects. // If a request with the dry-run attribute would trigger a call to this webhook, the request will instead fail. SideEffectClassSome SideEffectClass = "Some" // SideEffectClassNoneOnDryRun means that calling the webhook will possibly have side effects, but if the // request being reviewed has the dry-run attribute, the side effects will be suppressed. SideEffectClassNoneOnDryRun SideEffectClass = "NoneOnDryRun" )
type ValidatingWebhook ¶
type ValidatingWebhook struct { // The name of the admission webhook. // Name should be fully qualified, e.g., imagepolicy.kubernetes.io, where // "imagepolicy" is the name of the webhook, and kubernetes.io is the name // of the organization. // Required. Name string `json:"name" protobuf:"bytes,1,opt,name=name"` // ClientConfig defines how to communicate with the hook. // Required ClientConfig WebhookClientConfig `json:"clientConfig" protobuf:"bytes,2,opt,name=clientConfig"` // Rules describes what operations on what resources/subresources the webhook cares about. // The webhook cares about an operation if it matches _any_ Rule. // However, in order to prevent ValidatingAdmissionWebhooks and MutatingAdmissionWebhooks // from putting the cluster in a state which cannot be recovered from without completely // disabling the plugin, ValidatingAdmissionWebhooks and MutatingAdmissionWebhooks are never called // on admission requests for ValidatingWebhookConfiguration and MutatingWebhookConfiguration objects. Rules []RuleWithOperations `json:"rules,omitempty" protobuf:"bytes,3,rep,name=rules"` // FailurePolicy defines how unrecognized errors from the admission endpoint are handled - // allowed values are Ignore or Fail. Defaults to Fail. // +optional FailurePolicy *FailurePolicyType `json:"failurePolicy,omitempty" protobuf:"bytes,4,opt,name=failurePolicy,casttype=FailurePolicyType"` // matchPolicy defines how the "rules" list is used to match incoming requests. // Allowed values are "Exact" or "Equivalent". // // - Exact: match a request only if it exactly matches a specified rule. // For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, // but "rules" only included `apiGroups:["apps"], apiVersions:["v1"], resources: ["deployments"]`, // a request to apps/v1beta1 or extensions/v1beta1 would not be sent to the webhook. // // - Equivalent: match a request if modifies a resource listed in rules, even via another API group or version. // For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, // and "rules" only included `apiGroups:["apps"], apiVersions:["v1"], resources: ["deployments"]`, // a request to apps/v1beta1 or extensions/v1beta1 would be converted to apps/v1 and sent to the webhook. // // Defaults to "Equivalent" // +optional MatchPolicy *MatchPolicyType `json:"matchPolicy,omitempty" protobuf:"bytes,9,opt,name=matchPolicy,casttype=MatchPolicyType"` // NamespaceSelector decides whether to run the webhook on an object based // on whether the namespace for that object matches the selector. If the // object itself is a namespace, the matching is performed on // object.metadata.labels. If the object is another cluster scoped resource, // it never skips the webhook. // // For example, to run the webhook on any objects whose namespace is not // associated with "runlevel" of "0" or "1"; you will set the selector as // follows: // "namespaceSelector": { // "matchExpressions": [ // { // "key": "runlevel", // "operator": "NotIn", // "values": [ // "0", // "1" // ] // } // ] // } // // If instead you want to only run the webhook on any objects whose // namespace is associated with the "environment" of "prod" or "staging"; // you will set the selector as follows: // "namespaceSelector": { // "matchExpressions": [ // { // "key": "environment", // "operator": "In", // "values": [ // "prod", // "staging" // ] // } // ] // } // // See // https://kubernetes.io/docs/concepts/overview/working-with-objects/labels // for more examples of label selectors. // // Default to the empty LabelSelector, which matches everything. // +optional NamespaceSelector *metav1.LabelSelector `json:"namespaceSelector,omitempty" protobuf:"bytes,5,opt,name=namespaceSelector"` // ObjectSelector decides whether to run the webhook based on if the // object has matching labels. objectSelector is evaluated against both // the oldObject and newObject that would be sent to the webhook, and // is considered to match if either object matches the selector. A null // object (oldObject in the case of create, or newObject in the case of // delete) or an object that cannot have labels (like a // DeploymentRollback or a PodProxyOptions object) is not considered to // match. // Use the object selector only if the webhook is opt-in, because end // users may skip the admission webhook by setting the labels. // Default to the empty LabelSelector, which matches everything. // +optional ObjectSelector *metav1.LabelSelector `json:"objectSelector,omitempty" protobuf:"bytes,10,opt,name=objectSelector"` // SideEffects states whether this webhook has side effects. // Acceptable values are: None, NoneOnDryRun (webhooks created via v1beta1 may also specify Some or Unknown). // Webhooks with side effects MUST implement a reconciliation system, since a request may be // rejected by a future step in the admission change and the side effects therefore need to be undone. // Requests with the dryRun attribute will be auto-rejected if they match a webhook with // sideEffects == Unknown or Some. SideEffects *SideEffectClass `json:"sideEffects" protobuf:"bytes,6,opt,name=sideEffects,casttype=SideEffectClass"` // TimeoutSeconds specifies the timeout for this webhook. After the timeout passes, // the webhook call will be ignored or the API call will fail based on the // failure policy. // The timeout value must be between 1 and 30 seconds. // Default to 10 seconds. // +optional TimeoutSeconds *int32 `json:"timeoutSeconds,omitempty" protobuf:"varint,7,opt,name=timeoutSeconds"` // AdmissionReviewVersions is an ordered list of preferred `AdmissionReview` // versions the Webhook expects. API server will try to use first version in // the list which it supports. If none of the versions specified in this list // supported by API server, validation will fail for this object. // If a persisted webhook configuration specifies allowed versions and does not // include any versions known to the API Server, calls to the webhook will fail // and be subject to the failure policy. AdmissionReviewVersions []string `json:"admissionReviewVersions" protobuf:"bytes,8,rep,name=admissionReviewVersions"` }
ValidatingWebhook describes an admission webhook and the resources and operations it applies to.
func (*ValidatingWebhook) DeepCopy ¶
func (in *ValidatingWebhook) DeepCopy() *ValidatingWebhook
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ValidatingWebhook.
func (*ValidatingWebhook) DeepCopyInto ¶
func (in *ValidatingWebhook) DeepCopyInto(out *ValidatingWebhook)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (*ValidatingWebhook) Descriptor ¶
func (*ValidatingWebhook) Descriptor() ([]byte, []int)
func (*ValidatingWebhook) Marshal ¶
func (m *ValidatingWebhook) Marshal() (dAtA []byte, err error)
func (*ValidatingWebhook) MarshalTo ¶
func (m *ValidatingWebhook) MarshalTo(dAtA []byte) (int, error)
func (*ValidatingWebhook) MarshalToSizedBuffer ¶
func (m *ValidatingWebhook) MarshalToSizedBuffer(dAtA []byte) (int, error)
func (*ValidatingWebhook) ProtoMessage ¶
func (*ValidatingWebhook) ProtoMessage()
func (*ValidatingWebhook) Reset ¶
func (m *ValidatingWebhook) Reset()
func (*ValidatingWebhook) Size ¶
func (m *ValidatingWebhook) Size() (n int)
func (*ValidatingWebhook) String ¶
func (this *ValidatingWebhook) String() string
func (ValidatingWebhook) SwaggerDoc ¶
func (ValidatingWebhook) SwaggerDoc() map[string]string
func (*ValidatingWebhook) Unmarshal ¶
func (m *ValidatingWebhook) Unmarshal(dAtA []byte) error
func (*ValidatingWebhook) XXX_DiscardUnknown ¶
func (m *ValidatingWebhook) XXX_DiscardUnknown()
func (*ValidatingWebhook) XXX_Marshal ¶
func (m *ValidatingWebhook) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)
func (*ValidatingWebhook) XXX_Merge ¶
func (m *ValidatingWebhook) XXX_Merge(src proto.Message)
func (*ValidatingWebhook) XXX_Size ¶
func (m *ValidatingWebhook) XXX_Size() int
func (*ValidatingWebhook) XXX_Unmarshal ¶
func (m *ValidatingWebhook) XXX_Unmarshal(b []byte) error
type ValidatingWebhookConfiguration ¶
type ValidatingWebhookConfiguration struct { metav1.TypeMeta `json:",inline"` // Standard object metadata; More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata. // +optional metav1.ObjectMeta `json:"metadata,omitempty" protobuf:"bytes,1,opt,name=metadata"` // Webhooks is a list of webhooks and the affected resources and operations. // +optional // +patchMergeKey=name // +patchStrategy=merge Webhooks []ValidatingWebhook `json:"webhooks,omitempty" patchStrategy:"merge" patchMergeKey:"name" protobuf:"bytes,2,rep,name=Webhooks"` }
ValidatingWebhookConfiguration describes the configuration of and admission webhook that accept or reject and object without changing it.
func (*ValidatingWebhookConfiguration) DeepCopy ¶
func (in *ValidatingWebhookConfiguration) DeepCopy() *ValidatingWebhookConfiguration
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ValidatingWebhookConfiguration.
func (*ValidatingWebhookConfiguration) DeepCopyInto ¶
func (in *ValidatingWebhookConfiguration) DeepCopyInto(out *ValidatingWebhookConfiguration)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (*ValidatingWebhookConfiguration) DeepCopyObject ¶
func (in *ValidatingWebhookConfiguration) DeepCopyObject() runtime.Object
DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.
func (*ValidatingWebhookConfiguration) Descriptor ¶
func (*ValidatingWebhookConfiguration) Descriptor() ([]byte, []int)
func (*ValidatingWebhookConfiguration) Marshal ¶
func (m *ValidatingWebhookConfiguration) Marshal() (dAtA []byte, err error)
func (*ValidatingWebhookConfiguration) MarshalTo ¶
func (m *ValidatingWebhookConfiguration) MarshalTo(dAtA []byte) (int, error)
func (*ValidatingWebhookConfiguration) MarshalToSizedBuffer ¶
func (m *ValidatingWebhookConfiguration) MarshalToSizedBuffer(dAtA []byte) (int, error)
func (*ValidatingWebhookConfiguration) ProtoMessage ¶
func (*ValidatingWebhookConfiguration) ProtoMessage()
func (*ValidatingWebhookConfiguration) Reset ¶
func (m *ValidatingWebhookConfiguration) Reset()
func (*ValidatingWebhookConfiguration) Size ¶
func (m *ValidatingWebhookConfiguration) Size() (n int)
func (*ValidatingWebhookConfiguration) String ¶
func (this *ValidatingWebhookConfiguration) String() string
func (ValidatingWebhookConfiguration) SwaggerDoc ¶
func (ValidatingWebhookConfiguration) SwaggerDoc() map[string]string
func (*ValidatingWebhookConfiguration) Unmarshal ¶
func (m *ValidatingWebhookConfiguration) Unmarshal(dAtA []byte) error
func (*ValidatingWebhookConfiguration) XXX_DiscardUnknown ¶
func (m *ValidatingWebhookConfiguration) XXX_DiscardUnknown()
func (*ValidatingWebhookConfiguration) XXX_Marshal ¶
func (m *ValidatingWebhookConfiguration) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)
func (*ValidatingWebhookConfiguration) XXX_Merge ¶
func (m *ValidatingWebhookConfiguration) XXX_Merge(src proto.Message)
func (*ValidatingWebhookConfiguration) XXX_Size ¶
func (m *ValidatingWebhookConfiguration) XXX_Size() int
func (*ValidatingWebhookConfiguration) XXX_Unmarshal ¶
func (m *ValidatingWebhookConfiguration) XXX_Unmarshal(b []byte) error
type ValidatingWebhookConfigurationList ¶
type ValidatingWebhookConfigurationList struct { metav1.TypeMeta `json:",inline"` // Standard list metadata. // More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds // +optional metav1.ListMeta `json:"metadata,omitempty" protobuf:"bytes,1,opt,name=metadata"` // List of ValidatingWebhookConfiguration. Items []ValidatingWebhookConfiguration `json:"items" protobuf:"bytes,2,rep,name=items"` }
ValidatingWebhookConfigurationList is a list of ValidatingWebhookConfiguration.
func (*ValidatingWebhookConfigurationList) DeepCopy ¶
func (in *ValidatingWebhookConfigurationList) DeepCopy() *ValidatingWebhookConfigurationList
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ValidatingWebhookConfigurationList.
func (*ValidatingWebhookConfigurationList) DeepCopyInto ¶
func (in *ValidatingWebhookConfigurationList) DeepCopyInto(out *ValidatingWebhookConfigurationList)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (*ValidatingWebhookConfigurationList) DeepCopyObject ¶
func (in *ValidatingWebhookConfigurationList) DeepCopyObject() runtime.Object
DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.
func (*ValidatingWebhookConfigurationList) Descriptor ¶
func (*ValidatingWebhookConfigurationList) Descriptor() ([]byte, []int)
func (*ValidatingWebhookConfigurationList) Marshal ¶
func (m *ValidatingWebhookConfigurationList) Marshal() (dAtA []byte, err error)
func (*ValidatingWebhookConfigurationList) MarshalTo ¶
func (m *ValidatingWebhookConfigurationList) MarshalTo(dAtA []byte) (int, error)
func (*ValidatingWebhookConfigurationList) MarshalToSizedBuffer ¶
func (m *ValidatingWebhookConfigurationList) MarshalToSizedBuffer(dAtA []byte) (int, error)
func (*ValidatingWebhookConfigurationList) ProtoMessage ¶
func (*ValidatingWebhookConfigurationList) ProtoMessage()
func (*ValidatingWebhookConfigurationList) Reset ¶
func (m *ValidatingWebhookConfigurationList) Reset()
func (*ValidatingWebhookConfigurationList) Size ¶
func (m *ValidatingWebhookConfigurationList) Size() (n int)
func (*ValidatingWebhookConfigurationList) String ¶
func (this *ValidatingWebhookConfigurationList) String() string
func (ValidatingWebhookConfigurationList) SwaggerDoc ¶
func (ValidatingWebhookConfigurationList) SwaggerDoc() map[string]string
func (*ValidatingWebhookConfigurationList) Unmarshal ¶
func (m *ValidatingWebhookConfigurationList) Unmarshal(dAtA []byte) error
func (*ValidatingWebhookConfigurationList) XXX_DiscardUnknown ¶
func (m *ValidatingWebhookConfigurationList) XXX_DiscardUnknown()
func (*ValidatingWebhookConfigurationList) XXX_Marshal ¶
func (m *ValidatingWebhookConfigurationList) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)
func (*ValidatingWebhookConfigurationList) XXX_Merge ¶
func (m *ValidatingWebhookConfigurationList) XXX_Merge(src proto.Message)
func (*ValidatingWebhookConfigurationList) XXX_Size ¶
func (m *ValidatingWebhookConfigurationList) XXX_Size() int
func (*ValidatingWebhookConfigurationList) XXX_Unmarshal ¶
func (m *ValidatingWebhookConfigurationList) XXX_Unmarshal(b []byte) error
type WebhookClientConfig ¶
type WebhookClientConfig struct { // `url` gives the location of the webhook, in standard URL form // (`scheme://host:port/path`). Exactly one of `url` or `service` // must be specified. // // The `host` should not refer to a service running in the cluster; use // the `service` field instead. The host might be resolved via external // DNS in some apiservers (e.g., `kube-apiserver` cannot resolve // in-cluster DNS as that would be a layering violation). `host` may // also be an IP address. // // Please note that using `localhost` or `127.0.0.1` as a `host` is // risky unless you take great care to run this webhook on all hosts // which run an apiserver which might need to make calls to this // webhook. Such installs are likely to be non-portable, i.e., not easy // to turn up in a new cluster. // // The scheme must be "https"; the URL must begin with "https://". // // A path is optional, and if present may be any string permissible in // a URL. You may use the path to pass an arbitrary string to the // webhook, for example, a cluster identifier. // // Attempting to use a user or basic auth e.g. "user:password@" is not // allowed. Fragments ("#...") and query parameters ("?...") are not // allowed, either. // // +optional URL *string `json:"url,omitempty" protobuf:"bytes,3,opt,name=url"` // `service` is a reference to the service for this webhook. Either // `service` or `url` must be specified. // // If the webhook is running within the cluster, then you should use `service`. // // +optional Service *ServiceReference `json:"service,omitempty" protobuf:"bytes,1,opt,name=service"` // `caBundle` is a PEM encoded CA bundle which will be used to validate the webhook's server certificate. // If unspecified, system trust roots on the apiserver are used. // +optional CABundle []byte `json:"caBundle,omitempty" protobuf:"bytes,2,opt,name=caBundle"` }
WebhookClientConfig contains the information to make a TLS connection with the webhook
func (*WebhookClientConfig) DeepCopy ¶
func (in *WebhookClientConfig) DeepCopy() *WebhookClientConfig
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new WebhookClientConfig.
func (*WebhookClientConfig) DeepCopyInto ¶
func (in *WebhookClientConfig) DeepCopyInto(out *WebhookClientConfig)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (*WebhookClientConfig) Descriptor ¶
func (*WebhookClientConfig) Descriptor() ([]byte, []int)
func (*WebhookClientConfig) Marshal ¶
func (m *WebhookClientConfig) Marshal() (dAtA []byte, err error)
func (*WebhookClientConfig) MarshalTo ¶
func (m *WebhookClientConfig) MarshalTo(dAtA []byte) (int, error)
func (*WebhookClientConfig) MarshalToSizedBuffer ¶
func (m *WebhookClientConfig) MarshalToSizedBuffer(dAtA []byte) (int, error)
func (*WebhookClientConfig) ProtoMessage ¶
func (*WebhookClientConfig) ProtoMessage()
func (*WebhookClientConfig) Reset ¶
func (m *WebhookClientConfig) Reset()
func (*WebhookClientConfig) Size ¶
func (m *WebhookClientConfig) Size() (n int)
func (*WebhookClientConfig) String ¶
func (this *WebhookClientConfig) String() string
func (WebhookClientConfig) SwaggerDoc ¶
func (WebhookClientConfig) SwaggerDoc() map[string]string
func (*WebhookClientConfig) Unmarshal ¶
func (m *WebhookClientConfig) Unmarshal(dAtA []byte) error
func (*WebhookClientConfig) XXX_DiscardUnknown ¶
func (m *WebhookClientConfig) XXX_DiscardUnknown()
func (*WebhookClientConfig) XXX_Marshal ¶
func (m *WebhookClientConfig) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)
func (*WebhookClientConfig) XXX_Merge ¶
func (m *WebhookClientConfig) XXX_Merge(src proto.Message)
func (*WebhookClientConfig) XXX_Size ¶
func (m *WebhookClientConfig) XXX_Size() int
func (*WebhookClientConfig) XXX_Unmarshal ¶
func (m *WebhookClientConfig) XXX_Unmarshal(b []byte) error