You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: k8s/1.32/api/admissionregistration/v1/match_resources.k
+5-5
Original file line number
Diff line number
Diff line change
@@ -3,7 +3,7 @@ This is the match_resources module in k8s.api.admissionregistration.v1 package.
3
3
This file was generated by the KCL auto-gen tool. DO NOT EDIT.
4
4
Editing this file might prove futile when you re-run the KCL auto-gen generate command.
5
5
"""
6
-
import apimachinery.pkg.apis.meta.v1
6
+
import apimachinery.pkg.apis.meta.v1 as metav1
7
7
8
8
9
9
schema MatchResources:
@@ -22,7 +22,7 @@ schema MatchResources:
22
22
- Equivalent: match a request if modifies a resource listed in rules, even via another API group or version. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, and "rules" only included `apiGroups:["apps"], apiVersions:["v1"], resources: ["deployments"]`, a request to apps/v1beta1 or extensions/v1beta1 would be converted to apps/v1 and sent to the ValidatingAdmissionPolicy.
23
23
24
24
Defaults to "Equivalent"
25
-
namespaceSelector : v1.LabelSelector, default is Undefined, optional
25
+
namespaceSelector : metav1.LabelSelector, default is Undefined, optional
26
26
NamespaceSelector decides whether to run the admission control policy on an object based on whether the namespace for that object matches the selector. If the object itself is a namespace, the matching is performed on object.metadata.labels. If the object is another cluster scoped resource, it never skips the policy.
27
27
28
28
For example, to run the webhook on any objects whose namespace is not associated with "runlevel" of "0" or "1"; you will set the selector as follows: "namespaceSelector": {
@@ -54,7 +54,7 @@ schema MatchResources:
54
54
See https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/ for more examples of label selectors.
55
55
56
56
Default to the empty LabelSelector, which matches everything.
57
-
objectSelector : v1.LabelSelector, default is Undefined, optional
57
+
objectSelector : metav1.LabelSelector, default is Undefined, optional
58
58
ObjectSelector decides whether to run the validation based on if the object has matching labels. objectSelector is evaluated against both the oldObject and newObject that would be sent to the cel validation, and is considered to match if either object matches the selector. A null object (oldObject in the case of create, or newObject in the case of delete) or an object that cannot have labels (like a DeploymentRollback or a PodProxyOptions object) is not considered to match. Use the object selector only if the webhook is opt-in, because end users may skip the admission webhook by setting the labels. Default to the empty LabelSelector, which matches everything.
59
59
resourceRules : [NamedRuleWithOperations], default is Undefined, optional
60
60
ResourceRules describes what operations on what resources/subresources the ValidatingAdmissionPolicy matches. The policy cares about an operation if it matches _any_ Rule.
Copy file name to clipboardExpand all lines: k8s/1.32/api/admissionregistration/v1/mutating_webhook.k
+5-5
Original file line number
Diff line number
Diff line change
@@ -3,7 +3,7 @@ This is the mutating_webhook module in k8s.api.admissionregistration.v1 package.
3
3
This file was generated by the KCL auto-gen tool. DO NOT EDIT.
4
4
Editing this file might prove futile when you re-run the KCL auto-gen generate command.
5
5
"""
6
-
import apimachinery.pkg.apis.meta.v1
6
+
import apimachinery.pkg.apis.meta.v1 as metav1
7
7
8
8
9
9
schema MutatingWebhook:
@@ -37,7 +37,7 @@ schema MutatingWebhook:
37
37
Defaults to "Equivalent"
38
38
name : str, default is Undefined, required
39
39
The name of the admission webhook. Name should be fully qualified, e.g., imagepolicy.kubernetes.io, where "imagepolicy" is the name of the webhook, and kubernetes.io is the name of the organization. Required.
40
-
namespaceSelector : v1.LabelSelector, default is Undefined, optional
40
+
namespaceSelector : metav1.LabelSelector, default is Undefined, optional
41
41
NamespaceSelector decides whether to run the webhook on an object based on whether the namespace for that object matches the selector. If the object itself is a namespace, the matching is performed on object.metadata.labels. If the object is another cluster scoped resource, it never skips the webhook.
42
42
43
43
For example, to run the webhook on any objects whose namespace is not associated with "runlevel" of "0" or "1"; you will set the selector as follows: "namespaceSelector": {
@@ -69,7 +69,7 @@ schema MutatingWebhook:
69
69
See https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/ for more examples of label selectors.
70
70
71
71
Default to the empty LabelSelector, which matches everything.
72
-
objectSelector : v1.LabelSelector, default is Undefined, optional
72
+
objectSelector : metav1.LabelSelector, default is Undefined, optional
73
73
ObjectSelector decides whether to run the webhook based on if the object has matching labels. objectSelector is evaluated against both the oldObject and newObject that would be sent to the webhook, and is considered to match if either object matches the selector. A null object (oldObject in the case of create, or newObject in the case of delete) or an object that cannot have labels (like a DeploymentRollback or a PodProxyOptions object) is not considered to match. Use the object selector only if the webhook is opt-in, because end users may skip the admission webhook by setting the labels. Default to the empty LabelSelector, which matches everything.
74
74
reinvocationPolicy : str, default is Undefined, optional
75
75
reinvocationPolicy indicates whether this webhook should be called multiple times as part of a single admission evaluation. Allowed values are "Never" and "IfNeeded".
APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
17
17
kind : str, default is "MutatingWebhookConfiguration", required
18
18
Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
19
-
metadata : v1.ObjectMeta, default is Undefined, optional
19
+
metadata : metav1.ObjectMeta, default is Undefined, optional
20
20
Standard object metadata; More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata.
21
21
webhooks : [MutatingWebhook], default is Undefined, optional
22
22
Webhooks is a list of webhooks and the affected resources and operations.
kind : str, default is "MutatingWebhookConfigurationList", required
20
20
Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
21
-
metadata : v1.ListMeta, default is Undefined, optional
21
+
metadata : metav1.ListMeta, default is Undefined, optional
22
22
Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
17
17
kind : str, default is "ValidatingAdmissionPolicy", required
18
18
Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
19
-
metadata : v1.ObjectMeta, default is Undefined, optional
19
+
metadata : metav1.ObjectMeta, default is Undefined, optional
20
20
Standard object metadata; More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata.
21
21
spec : ValidatingAdmissionPolicySpec, default is Undefined, optional
22
22
Specification of the desired behavior of the ValidatingAdmissionPolicy.
APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
21
21
kind : str, default is "ValidatingAdmissionPolicyBinding", required
22
22
Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
23
-
metadata : v1.ObjectMeta, default is Undefined, optional
23
+
metadata : metav1.ObjectMeta, default is Undefined, optional
24
24
Standard object metadata; More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata.
25
25
spec : ValidatingAdmissionPolicyBindingSpec, default is Undefined, optional
26
26
Specification of the desired behavior of the ValidatingAdmissionPolicyBinding.
kind : str, default is "ValidatingAdmissionPolicyBindingList", required
20
20
Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
21
-
metadata : v1.ListMeta, default is Undefined, optional
21
+
metadata : metav1.ListMeta, default is Undefined, optional
22
22
Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
kind : str, default is "ValidatingAdmissionPolicyList", required
20
20
Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
21
-
metadata : v1.ListMeta, default is Undefined, optional
21
+
metadata : metav1.ListMeta, default is Undefined, optional
22
22
Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
0 commit comments