2022-11-08 14:12:35 +05:30
|
|
|
---
|
|
|
|
|
apiVersion: apiextensions.k8s.io/v1
|
|
|
|
|
kind: CustomResourceDefinition
|
|
|
|
|
metadata:
|
|
|
|
|
annotations:
|
2024-08-03 00:19:35 +02:00
|
|
|
controller-gen.kubebuilder.io/version: (devel)
|
2022-11-08 14:12:35 +05:30
|
|
|
name: cleanuppolicies.kyverno.io
|
|
|
|
|
spec:
|
|
|
|
|
group: kyverno.io
|
|
|
|
|
names:
|
2022-11-25 15:29:45 +05:30
|
|
|
categories:
|
|
|
|
|
- kyverno
|
2022-11-08 14:12:35 +05:30
|
|
|
kind: CleanupPolicy
|
|
|
|
|
listKind: CleanupPolicyList
|
|
|
|
|
plural: cleanuppolicies
|
2022-11-25 15:29:45 +05:30
|
|
|
shortNames:
|
|
|
|
|
- cleanpol
|
2022-11-08 14:12:35 +05:30
|
|
|
singular: cleanuppolicy
|
|
|
|
|
scope: Namespaced
|
|
|
|
|
versions:
|
2023-12-22 19:43:27 +01:00
|
|
|
- additionalPrinterColumns:
|
|
|
|
|
- jsonPath: .spec.schedule
|
|
|
|
|
name: Schedule
|
|
|
|
|
type: string
|
|
|
|
|
- jsonPath: .metadata.creationTimestamp
|
|
|
|
|
name: Age
|
|
|
|
|
type: date
|
|
|
|
|
name: v2
|
|
|
|
|
schema:
|
|
|
|
|
openAPIV3Schema:
|
|
|
|
|
description: CleanupPolicy defines a rule for resource cleanup.
|
|
|
|
|
properties:
|
|
|
|
|
apiVersion:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
APIVersion defines the versioned schema of this representation of an object.
|
|
|
|
|
Servers should convert recognized schemas to the latest internal value, and
|
|
|
|
|
may reject unrecognized values.
|
|
|
|
|
More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
|
2023-12-22 19:43:27 +01:00
|
|
|
type: string
|
|
|
|
|
kind:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
Kind is a string value representing the REST resource this object represents.
|
|
|
|
|
Servers may infer this from the endpoint the client submits requests to.
|
|
|
|
|
Cannot be updated.
|
|
|
|
|
In CamelCase.
|
|
|
|
|
More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
|
2023-12-22 19:43:27 +01:00
|
|
|
type: string
|
|
|
|
|
metadata:
|
|
|
|
|
type: object
|
|
|
|
|
spec:
|
|
|
|
|
description: Spec declares policy behaviors.
|
|
|
|
|
properties:
|
|
|
|
|
conditions:
|
|
|
|
|
description: Conditions defines the conditions used to select the
|
|
|
|
|
resources which will be cleaned up.
|
|
|
|
|
properties:
|
|
|
|
|
all:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
AllConditions enable variable-based conditional rule execution. This is useful for
|
|
|
|
|
finer control of when an rule is applied. A condition can reference object data
|
|
|
|
|
using JMESPath notation.
|
|
|
|
|
Here, all of the conditions need to pass.
|
2023-12-22 19:43:27 +01:00
|
|
|
items:
|
|
|
|
|
properties:
|
|
|
|
|
key:
|
|
|
|
|
description: Key is the context entry (using JMESPath) for
|
|
|
|
|
conditional rule evaluation.
|
|
|
|
|
x-kubernetes-preserve-unknown-fields: true
|
|
|
|
|
message:
|
|
|
|
|
description: Message is an optional display message
|
|
|
|
|
type: string
|
|
|
|
|
operator:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
Operator is the conditional operation to perform. Valid operators are:
|
|
|
|
|
Equals, NotEquals, In, AnyIn, AllIn, NotIn, AnyNotIn, AllNotIn, GreaterThanOrEquals,
|
|
|
|
|
GreaterThan, LessThanOrEquals, LessThan, DurationGreaterThanOrEquals, DurationGreaterThan,
|
|
|
|
|
DurationLessThanOrEquals, DurationLessThan
|
2023-12-22 19:43:27 +01:00
|
|
|
enum:
|
|
|
|
|
- Equals
|
|
|
|
|
- NotEquals
|
|
|
|
|
- AnyIn
|
|
|
|
|
- AllIn
|
|
|
|
|
- AnyNotIn
|
|
|
|
|
- AllNotIn
|
|
|
|
|
- GreaterThanOrEquals
|
|
|
|
|
- GreaterThan
|
|
|
|
|
- LessThanOrEquals
|
|
|
|
|
- LessThan
|
|
|
|
|
- DurationGreaterThanOrEquals
|
|
|
|
|
- DurationGreaterThan
|
|
|
|
|
- DurationLessThanOrEquals
|
|
|
|
|
- DurationLessThan
|
|
|
|
|
type: string
|
|
|
|
|
value:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
Value is the conditional value, or set of values. The values can be fixed set
|
|
|
|
|
or can be variables declared using JMESPath.
|
2023-12-22 19:43:27 +01:00
|
|
|
x-kubernetes-preserve-unknown-fields: true
|
|
|
|
|
type: object
|
|
|
|
|
type: array
|
|
|
|
|
any:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
AnyConditions enable variable-based conditional rule execution. This is useful for
|
|
|
|
|
finer control of when an rule is applied. A condition can reference object data
|
|
|
|
|
using JMESPath notation.
|
|
|
|
|
Here, at least one of the conditions need to pass.
|
2023-12-22 19:43:27 +01:00
|
|
|
items:
|
|
|
|
|
properties:
|
|
|
|
|
key:
|
|
|
|
|
description: Key is the context entry (using JMESPath) for
|
|
|
|
|
conditional rule evaluation.
|
|
|
|
|
x-kubernetes-preserve-unknown-fields: true
|
|
|
|
|
message:
|
|
|
|
|
description: Message is an optional display message
|
|
|
|
|
type: string
|
|
|
|
|
operator:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
Operator is the conditional operation to perform. Valid operators are:
|
|
|
|
|
Equals, NotEquals, In, AnyIn, AllIn, NotIn, AnyNotIn, AllNotIn, GreaterThanOrEquals,
|
|
|
|
|
GreaterThan, LessThanOrEquals, LessThan, DurationGreaterThanOrEquals, DurationGreaterThan,
|
|
|
|
|
DurationLessThanOrEquals, DurationLessThan
|
2023-12-22 19:43:27 +01:00
|
|
|
enum:
|
|
|
|
|
- Equals
|
|
|
|
|
- NotEquals
|
|
|
|
|
- AnyIn
|
|
|
|
|
- AllIn
|
|
|
|
|
- AnyNotIn
|
|
|
|
|
- AllNotIn
|
|
|
|
|
- GreaterThanOrEquals
|
|
|
|
|
- GreaterThan
|
|
|
|
|
- LessThanOrEquals
|
|
|
|
|
- LessThan
|
|
|
|
|
- DurationGreaterThanOrEquals
|
|
|
|
|
- DurationGreaterThan
|
|
|
|
|
- DurationLessThanOrEquals
|
|
|
|
|
- DurationLessThan
|
|
|
|
|
type: string
|
|
|
|
|
value:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
Value is the conditional value, or set of values. The values can be fixed set
|
|
|
|
|
or can be variables declared using JMESPath.
|
2023-12-22 19:43:27 +01:00
|
|
|
x-kubernetes-preserve-unknown-fields: true
|
|
|
|
|
type: object
|
|
|
|
|
type: array
|
|
|
|
|
type: object
|
|
|
|
|
context:
|
|
|
|
|
description: Context defines variables and data sources that can be
|
|
|
|
|
used during rule execution.
|
|
|
|
|
items:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
ContextEntry adds variables and data sources to a rule Context. Either a
|
|
|
|
|
ConfigMap reference or a APILookup must be provided.
|
2024-09-03 18:51:28 +02:00
|
|
|
oneOf:
|
|
|
|
|
- required:
|
|
|
|
|
- configMap
|
|
|
|
|
- required:
|
|
|
|
|
- apiCall
|
|
|
|
|
- required:
|
|
|
|
|
- imageRegistry
|
|
|
|
|
- required:
|
|
|
|
|
- variable
|
|
|
|
|
- required:
|
|
|
|
|
- globalReference
|
2023-12-22 19:43:27 +01:00
|
|
|
properties:
|
|
|
|
|
apiCall:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
APICall is an HTTP request to the Kubernetes API server, or other JSON web service.
|
|
|
|
|
The data returned is stored in the context with the name for the context entry.
|
2023-12-22 19:43:27 +01:00
|
|
|
properties:
|
|
|
|
|
data:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
The data object specifies the POST data sent to the server.
|
|
|
|
|
Only applicable when the method field is set to POST.
|
2023-12-22 19:43:27 +01:00
|
|
|
items:
|
|
|
|
|
description: RequestData contains the HTTP POST data
|
|
|
|
|
properties:
|
|
|
|
|
key:
|
|
|
|
|
description: Key is a unique identifier for the data
|
|
|
|
|
value
|
|
|
|
|
type: string
|
|
|
|
|
value:
|
|
|
|
|
description: Value is the data value
|
|
|
|
|
x-kubernetes-preserve-unknown-fields: true
|
|
|
|
|
required:
|
|
|
|
|
- key
|
|
|
|
|
- value
|
|
|
|
|
type: object
|
|
|
|
|
type: array
|
2024-09-05 11:27:44 +05:30
|
|
|
default:
|
|
|
|
|
description: |-
|
2024-09-09 14:04:08 -07:00
|
|
|
Default is an optional arbitrary JSON object that the context
|
|
|
|
|
value is set to, if the apiCall returns error.
|
2024-09-05 11:27:44 +05:30
|
|
|
x-kubernetes-preserve-unknown-fields: true
|
2023-12-22 19:43:27 +01:00
|
|
|
jmesPath:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
JMESPath is an optional JSON Match Expression that can be used to
|
|
|
|
|
transform the JSON response returned from the server. For example
|
|
|
|
|
a JMESPath of "items | length(@)" applied to the API server response
|
|
|
|
|
for the URLPath "/apis/apps/v1/deployments" will return the total count
|
|
|
|
|
of deployments across all namespaces.
|
2023-12-22 19:43:27 +01:00
|
|
|
type: string
|
|
|
|
|
method:
|
|
|
|
|
default: GET
|
|
|
|
|
description: Method is the HTTP request type (GET or POST).
|
2024-03-20 21:34:40 +02:00
|
|
|
Defaults to GET.
|
2023-12-22 19:43:27 +01:00
|
|
|
enum:
|
|
|
|
|
- GET
|
|
|
|
|
- POST
|
|
|
|
|
type: string
|
|
|
|
|
service:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
Service is an API call to a JSON web service.
|
|
|
|
|
This is used for non-Kubernetes API server calls.
|
|
|
|
|
It's mutually exclusive with the URLPath field.
|
2023-12-22 19:43:27 +01:00
|
|
|
properties:
|
|
|
|
|
caBundle:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
CABundle is a PEM encoded CA bundle which will be used to validate
|
|
|
|
|
the server certificate.
|
2023-12-22 19:43:27 +01:00
|
|
|
type: string
|
2024-09-09 14:04:08 -07:00
|
|
|
headers:
|
|
|
|
|
description: Headers is a list of optional HTTP headers
|
|
|
|
|
to be included in the request.
|
|
|
|
|
items:
|
|
|
|
|
properties:
|
|
|
|
|
key:
|
|
|
|
|
description: Key is the header key
|
|
|
|
|
type: string
|
|
|
|
|
value:
|
|
|
|
|
description: Value is the header value
|
|
|
|
|
type: string
|
|
|
|
|
required:
|
|
|
|
|
- key
|
|
|
|
|
- value
|
|
|
|
|
type: object
|
|
|
|
|
type: array
|
2023-12-22 19:43:27 +01:00
|
|
|
url:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
URL is the JSON web service URL. A typical form is
|
|
|
|
|
`https://{service}.{namespace}:{port}/{path}`.
|
2023-12-22 19:43:27 +01:00
|
|
|
type: string
|
|
|
|
|
required:
|
|
|
|
|
- url
|
|
|
|
|
type: object
|
|
|
|
|
urlPath:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
URLPath is the URL path to be used in the HTTP GET or POST request to the
|
|
|
|
|
Kubernetes API server (e.g. "/api/v1/namespaces" or "/apis/apps/v1/deployments").
|
|
|
|
|
The format required is the same format used by the `kubectl get --raw` command.
|
|
|
|
|
See https://kyverno.io/docs/writing-policies/external-data-sources/#variables-from-kubernetes-api-server-calls
|
|
|
|
|
for details.
|
|
|
|
|
It's mutually exclusive with the Service field.
|
2023-12-22 19:43:27 +01:00
|
|
|
type: string
|
|
|
|
|
type: object
|
|
|
|
|
configMap:
|
|
|
|
|
description: ConfigMap is the ConfigMap reference.
|
|
|
|
|
properties:
|
|
|
|
|
name:
|
|
|
|
|
description: Name is the ConfigMap name.
|
|
|
|
|
type: string
|
|
|
|
|
namespace:
|
|
|
|
|
description: Namespace is the ConfigMap namespace.
|
|
|
|
|
type: string
|
|
|
|
|
required:
|
|
|
|
|
- name
|
|
|
|
|
type: object
|
2024-02-05 13:24:37 +02:00
|
|
|
globalReference:
|
|
|
|
|
description: GlobalContextEntryReference is a reference to a
|
|
|
|
|
cached global context entry.
|
|
|
|
|
properties:
|
|
|
|
|
jmesPath:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
JMESPath is an optional JSON Match Expression that can be used to
|
|
|
|
|
transform the JSON response returned from the server. For example
|
|
|
|
|
a JMESPath of "items | length(@)" applied to the API server response
|
|
|
|
|
for the URLPath "/apis/apps/v1/deployments" will return the total count
|
|
|
|
|
of deployments across all namespaces.
|
2024-02-05 13:24:37 +02:00
|
|
|
type: string
|
|
|
|
|
name:
|
|
|
|
|
description: Name of the global context entry
|
|
|
|
|
type: string
|
2024-08-28 08:23:19 +02:00
|
|
|
required:
|
|
|
|
|
- name
|
2024-02-05 13:24:37 +02:00
|
|
|
type: object
|
2023-12-22 19:43:27 +01:00
|
|
|
imageRegistry:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
ImageRegistry defines requests to an OCI/Docker V2 registry to fetch image
|
|
|
|
|
details.
|
2023-12-22 19:43:27 +01:00
|
|
|
properties:
|
|
|
|
|
imageRegistryCredentials:
|
|
|
|
|
description: ImageRegistryCredentials provides credentials
|
|
|
|
|
that will be used for authentication with registry
|
|
|
|
|
properties:
|
|
|
|
|
allowInsecureRegistry:
|
|
|
|
|
description: AllowInsecureRegistry allows insecure access
|
|
|
|
|
to a registry.
|
|
|
|
|
type: boolean
|
|
|
|
|
providers:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
Providers specifies a list of OCI Registry names, whose authentication providers are provided.
|
|
|
|
|
It can be of one of these values: default,google,azure,amazon,github.
|
2023-12-22 19:43:27 +01:00
|
|
|
items:
|
|
|
|
|
description: ImageRegistryCredentialsProvidersType
|
|
|
|
|
provides the list of credential providers required.
|
|
|
|
|
enum:
|
|
|
|
|
- default
|
|
|
|
|
- amazon
|
|
|
|
|
- azure
|
|
|
|
|
- google
|
|
|
|
|
- github
|
|
|
|
|
type: string
|
|
|
|
|
type: array
|
|
|
|
|
secrets:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
Secrets specifies a list of secrets that are provided for credentials.
|
|
|
|
|
Secrets must live in the Kyverno namespace.
|
2023-12-22 19:43:27 +01:00
|
|
|
items:
|
|
|
|
|
type: string
|
|
|
|
|
type: array
|
|
|
|
|
type: object
|
|
|
|
|
jmesPath:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
JMESPath is an optional JSON Match Expression that can be used to
|
|
|
|
|
transform the ImageData struct returned as a result of processing
|
|
|
|
|
the image reference.
|
2023-12-22 19:43:27 +01:00
|
|
|
type: string
|
|
|
|
|
reference:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
Reference is image reference to a container image in the registry.
|
|
|
|
|
Example: ghcr.io/kyverno/kyverno:latest
|
2023-12-22 19:43:27 +01:00
|
|
|
type: string
|
|
|
|
|
required:
|
|
|
|
|
- reference
|
|
|
|
|
type: object
|
|
|
|
|
name:
|
|
|
|
|
description: Name is the variable name.
|
|
|
|
|
type: string
|
|
|
|
|
variable:
|
|
|
|
|
description: Variable defines an arbitrary JMESPath context
|
|
|
|
|
variable that can be defined inline.
|
|
|
|
|
properties:
|
|
|
|
|
default:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
Default is an optional arbitrary JSON object that the variable may take if the JMESPath
|
|
|
|
|
expression evaluates to nil
|
2023-12-22 19:43:27 +01:00
|
|
|
x-kubernetes-preserve-unknown-fields: true
|
|
|
|
|
jmesPath:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
JMESPath is an optional JMESPath Expression that can be used to
|
|
|
|
|
transform the variable.
|
2023-12-22 19:43:27 +01:00
|
|
|
type: string
|
|
|
|
|
value:
|
|
|
|
|
description: Value is any arbitrary JSON object representable
|
|
|
|
|
in YAML or JSON form.
|
|
|
|
|
x-kubernetes-preserve-unknown-fields: true
|
|
|
|
|
type: object
|
2024-09-03 21:58:11 +02:00
|
|
|
required:
|
|
|
|
|
- name
|
2023-12-22 19:43:27 +01:00
|
|
|
type: object
|
|
|
|
|
type: array
|
2024-10-22 16:34:01 +05:30
|
|
|
deletionPropagationPolicy:
|
|
|
|
|
description: DeletionPropagationPolicy defines how resources will
|
|
|
|
|
be deleted (Foreground, Background, Orphan).
|
|
|
|
|
enum:
|
|
|
|
|
- Foreground
|
|
|
|
|
- Background
|
|
|
|
|
- Orphan
|
|
|
|
|
type: string
|
2023-12-22 19:43:27 +01:00
|
|
|
exclude:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
ExcludeResources defines when cleanuppolicy should not be applied. The exclude
|
|
|
|
|
criteria can include resource information (e.g. kind, name, namespace, labels)
|
|
|
|
|
and admission review request information like the name or role.
|
2024-09-04 20:00:50 +02:00
|
|
|
not:
|
|
|
|
|
required:
|
|
|
|
|
- any
|
|
|
|
|
- all
|
2023-12-22 19:43:27 +01:00
|
|
|
properties:
|
|
|
|
|
all:
|
|
|
|
|
description: All allows specifying resources which will be ANDed
|
|
|
|
|
items:
|
|
|
|
|
description: ResourceFilter allow users to "AND" or "OR" between
|
|
|
|
|
resources
|
|
|
|
|
properties:
|
|
|
|
|
clusterRoles:
|
|
|
|
|
description: ClusterRoles is the list of cluster-wide role
|
|
|
|
|
names for the user.
|
|
|
|
|
items:
|
|
|
|
|
type: string
|
|
|
|
|
type: array
|
|
|
|
|
resources:
|
|
|
|
|
description: ResourceDescription contains information about
|
|
|
|
|
the resource being created or modified.
|
2024-09-04 11:02:57 +02:00
|
|
|
not:
|
|
|
|
|
required:
|
|
|
|
|
- name
|
|
|
|
|
- names
|
2023-12-22 19:43:27 +01:00
|
|
|
properties:
|
|
|
|
|
annotations:
|
|
|
|
|
additionalProperties:
|
|
|
|
|
type: string
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
Annotations is a map of annotations (key-value pairs of type string). Annotation keys
|
|
|
|
|
and values support the wildcard characters "*" (matches zero or many characters) and
|
|
|
|
|
"?" (matches at least one character).
|
2023-12-22 19:43:27 +01:00
|
|
|
type: object
|
|
|
|
|
kinds:
|
|
|
|
|
description: Kinds is a list of resource kinds.
|
|
|
|
|
items:
|
|
|
|
|
type: string
|
|
|
|
|
type: array
|
|
|
|
|
name:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
Name is the name of the resource. The name supports wildcard characters
|
|
|
|
|
"*" (matches zero or many characters) and "?" (at least one character).
|
|
|
|
|
NOTE: "Name" is being deprecated in favor of "Names".
|
2023-12-22 19:43:27 +01:00
|
|
|
type: string
|
|
|
|
|
names:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
Names are the names of the resources. Each name supports wildcard characters
|
|
|
|
|
"*" (matches zero or many characters) and "?" (at least one character).
|
2023-12-22 19:43:27 +01:00
|
|
|
items:
|
|
|
|
|
type: string
|
|
|
|
|
type: array
|
|
|
|
|
namespaceSelector:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
NamespaceSelector is a label selector for the resource namespace. Label keys and values
|
|
|
|
|
in `matchLabels` support the wildcard characters `*` (matches zero or many characters)
|
|
|
|
|
and `?` (matches one character).Wildcards allows writing label selectors like
|
|
|
|
|
["storage.k8s.io/*": "*"]. Note that using ["*" : "*"] matches any key and value but
|
|
|
|
|
does not match an empty label set.
|
2023-12-22 19:43:27 +01:00
|
|
|
properties:
|
|
|
|
|
matchExpressions:
|
|
|
|
|
description: matchExpressions is a list of label
|
|
|
|
|
selector requirements. The requirements are ANDed.
|
|
|
|
|
items:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
A label selector requirement is a selector that contains values, a key, and an operator that
|
|
|
|
|
relates the key and values.
|
2023-12-22 19:43:27 +01:00
|
|
|
properties:
|
|
|
|
|
key:
|
|
|
|
|
description: key is the label key that the
|
|
|
|
|
selector applies to.
|
|
|
|
|
type: string
|
|
|
|
|
operator:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
operator represents a key's relationship to a set of values.
|
|
|
|
|
Valid operators are In, NotIn, Exists and DoesNotExist.
|
2023-12-22 19:43:27 +01:00
|
|
|
type: string
|
|
|
|
|
values:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
values is an array of string values. If the operator is In or NotIn,
|
|
|
|
|
the values array must be non-empty. If the operator is Exists or DoesNotExist,
|
|
|
|
|
the values array must be empty. This array is replaced during a strategic
|
|
|
|
|
merge patch.
|
2023-12-22 19:43:27 +01:00
|
|
|
items:
|
|
|
|
|
type: string
|
|
|
|
|
type: array
|
2024-04-24 14:07:59 +08:00
|
|
|
x-kubernetes-list-type: atomic
|
2023-12-22 19:43:27 +01:00
|
|
|
required:
|
|
|
|
|
- key
|
|
|
|
|
- operator
|
|
|
|
|
type: object
|
|
|
|
|
type: array
|
2024-04-24 14:07:59 +08:00
|
|
|
x-kubernetes-list-type: atomic
|
2023-12-22 19:43:27 +01:00
|
|
|
matchLabels:
|
|
|
|
|
additionalProperties:
|
|
|
|
|
type: string
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels
|
|
|
|
|
map is equivalent to an element of matchExpressions, whose key field is "key", the
|
|
|
|
|
operator is "In", and the values array contains only "value". The requirements are ANDed.
|
2023-12-22 19:43:27 +01:00
|
|
|
type: object
|
|
|
|
|
type: object
|
|
|
|
|
x-kubernetes-map-type: atomic
|
|
|
|
|
namespaces:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
Namespaces is a list of namespaces names. Each name supports wildcard characters
|
|
|
|
|
"*" (matches zero or many characters) and "?" (at least one character).
|
2023-12-22 19:43:27 +01:00
|
|
|
items:
|
|
|
|
|
type: string
|
|
|
|
|
type: array
|
|
|
|
|
operations:
|
|
|
|
|
description: Operations can contain values ["CREATE,
|
|
|
|
|
"UPDATE", "CONNECT", "DELETE"], which are used to
|
|
|
|
|
match a specific action.
|
|
|
|
|
items:
|
|
|
|
|
description: AdmissionOperation can have one of the
|
|
|
|
|
values CREATE, UPDATE, CONNECT, DELETE, which are
|
|
|
|
|
used to match a specific action.
|
|
|
|
|
enum:
|
|
|
|
|
- CREATE
|
|
|
|
|
- CONNECT
|
|
|
|
|
- UPDATE
|
|
|
|
|
- DELETE
|
|
|
|
|
type: string
|
|
|
|
|
type: array
|
|
|
|
|
selector:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
Selector is a label selector. Label keys and values in `matchLabels` support the wildcard
|
|
|
|
|
characters `*` (matches zero or many characters) and `?` (matches one character).
|
|
|
|
|
Wildcards allows writing label selectors like ["storage.k8s.io/*": "*"]. Note that
|
|
|
|
|
using ["*" : "*"] matches any key and value but does not match an empty label set.
|
2023-12-22 19:43:27 +01:00
|
|
|
properties:
|
|
|
|
|
matchExpressions:
|
|
|
|
|
description: matchExpressions is a list of label
|
|
|
|
|
selector requirements. The requirements are ANDed.
|
|
|
|
|
items:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
A label selector requirement is a selector that contains values, a key, and an operator that
|
|
|
|
|
relates the key and values.
|
2023-12-22 19:43:27 +01:00
|
|
|
properties:
|
|
|
|
|
key:
|
|
|
|
|
description: key is the label key that the
|
|
|
|
|
selector applies to.
|
|
|
|
|
type: string
|
|
|
|
|
operator:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
operator represents a key's relationship to a set of values.
|
|
|
|
|
Valid operators are In, NotIn, Exists and DoesNotExist.
|
2023-12-22 19:43:27 +01:00
|
|
|
type: string
|
|
|
|
|
values:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
values is an array of string values. If the operator is In or NotIn,
|
|
|
|
|
the values array must be non-empty. If the operator is Exists or DoesNotExist,
|
|
|
|
|
the values array must be empty. This array is replaced during a strategic
|
|
|
|
|
merge patch.
|
2023-12-22 19:43:27 +01:00
|
|
|
items:
|
|
|
|
|
type: string
|
|
|
|
|
type: array
|
2024-04-24 14:07:59 +08:00
|
|
|
x-kubernetes-list-type: atomic
|
2023-12-22 19:43:27 +01:00
|
|
|
required:
|
|
|
|
|
- key
|
|
|
|
|
- operator
|
|
|
|
|
type: object
|
|
|
|
|
type: array
|
2024-04-24 14:07:59 +08:00
|
|
|
x-kubernetes-list-type: atomic
|
2023-12-22 19:43:27 +01:00
|
|
|
matchLabels:
|
|
|
|
|
additionalProperties:
|
|
|
|
|
type: string
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels
|
|
|
|
|
map is equivalent to an element of matchExpressions, whose key field is "key", the
|
|
|
|
|
operator is "In", and the values array contains only "value". The requirements are ANDed.
|
2023-12-22 19:43:27 +01:00
|
|
|
type: object
|
|
|
|
|
type: object
|
|
|
|
|
x-kubernetes-map-type: atomic
|
|
|
|
|
type: object
|
|
|
|
|
roles:
|
|
|
|
|
description: Roles is the list of namespaced role names
|
|
|
|
|
for the user.
|
|
|
|
|
items:
|
|
|
|
|
type: string
|
|
|
|
|
type: array
|
|
|
|
|
subjects:
|
|
|
|
|
description: Subjects is the list of subject names like
|
|
|
|
|
users, user groups, and service accounts.
|
|
|
|
|
items:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
Subject contains a reference to the object or user identities a role binding applies to. This can either hold a direct API object reference,
|
|
|
|
|
or a value for non-objects such as user and group names.
|
2023-12-22 19:43:27 +01:00
|
|
|
properties:
|
|
|
|
|
apiGroup:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
APIGroup holds the API group of the referenced subject.
|
|
|
|
|
Defaults to "" for ServiceAccount subjects.
|
|
|
|
|
Defaults to "rbac.authorization.k8s.io" for User and Group subjects.
|
2023-12-22 19:43:27 +01:00
|
|
|
type: string
|
|
|
|
|
kind:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
Kind of object being referenced. Values defined by this API group are "User", "Group", and "ServiceAccount".
|
|
|
|
|
If the Authorizer does not recognized the kind value, the Authorizer should report an error.
|
2023-12-22 19:43:27 +01:00
|
|
|
type: string
|
|
|
|
|
name:
|
|
|
|
|
description: Name of the object being referenced.
|
|
|
|
|
type: string
|
|
|
|
|
namespace:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
Namespace of the referenced object. If the object kind is non-namespace, such as "User" or "Group", and this value is not empty
|
|
|
|
|
the Authorizer should report an error.
|
2023-12-22 19:43:27 +01:00
|
|
|
type: string
|
|
|
|
|
required:
|
|
|
|
|
- kind
|
|
|
|
|
- name
|
|
|
|
|
type: object
|
|
|
|
|
x-kubernetes-map-type: atomic
|
|
|
|
|
type: array
|
|
|
|
|
type: object
|
|
|
|
|
type: array
|
|
|
|
|
any:
|
|
|
|
|
description: Any allows specifying resources which will be ORed
|
|
|
|
|
items:
|
|
|
|
|
description: ResourceFilter allow users to "AND" or "OR" between
|
|
|
|
|
resources
|
|
|
|
|
properties:
|
|
|
|
|
clusterRoles:
|
|
|
|
|
description: ClusterRoles is the list of cluster-wide role
|
|
|
|
|
names for the user.
|
|
|
|
|
items:
|
|
|
|
|
type: string
|
|
|
|
|
type: array
|
|
|
|
|
resources:
|
|
|
|
|
description: ResourceDescription contains information about
|
|
|
|
|
the resource being created or modified.
|
2024-09-04 11:02:57 +02:00
|
|
|
not:
|
|
|
|
|
required:
|
|
|
|
|
- name
|
|
|
|
|
- names
|
2023-12-22 19:43:27 +01:00
|
|
|
properties:
|
|
|
|
|
annotations:
|
|
|
|
|
additionalProperties:
|
|
|
|
|
type: string
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
Annotations is a map of annotations (key-value pairs of type string). Annotation keys
|
|
|
|
|
and values support the wildcard characters "*" (matches zero or many characters) and
|
|
|
|
|
"?" (matches at least one character).
|
2023-12-22 19:43:27 +01:00
|
|
|
type: object
|
|
|
|
|
kinds:
|
|
|
|
|
description: Kinds is a list of resource kinds.
|
|
|
|
|
items:
|
|
|
|
|
type: string
|
|
|
|
|
type: array
|
|
|
|
|
name:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
Name is the name of the resource. The name supports wildcard characters
|
|
|
|
|
"*" (matches zero or many characters) and "?" (at least one character).
|
|
|
|
|
NOTE: "Name" is being deprecated in favor of "Names".
|
2023-12-22 19:43:27 +01:00
|
|
|
type: string
|
|
|
|
|
names:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
Names are the names of the resources. Each name supports wildcard characters
|
|
|
|
|
"*" (matches zero or many characters) and "?" (at least one character).
|
2023-12-22 19:43:27 +01:00
|
|
|
items:
|
|
|
|
|
type: string
|
|
|
|
|
type: array
|
|
|
|
|
namespaceSelector:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
NamespaceSelector is a label selector for the resource namespace. Label keys and values
|
|
|
|
|
in `matchLabels` support the wildcard characters `*` (matches zero or many characters)
|
|
|
|
|
and `?` (matches one character).Wildcards allows writing label selectors like
|
|
|
|
|
["storage.k8s.io/*": "*"]. Note that using ["*" : "*"] matches any key and value but
|
|
|
|
|
does not match an empty label set.
|
2023-12-22 19:43:27 +01:00
|
|
|
properties:
|
|
|
|
|
matchExpressions:
|
|
|
|
|
description: matchExpressions is a list of label
|
|
|
|
|
selector requirements. The requirements are ANDed.
|
|
|
|
|
items:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
A label selector requirement is a selector that contains values, a key, and an operator that
|
|
|
|
|
relates the key and values.
|
2023-12-22 19:43:27 +01:00
|
|
|
properties:
|
|
|
|
|
key:
|
|
|
|
|
description: key is the label key that the
|
|
|
|
|
selector applies to.
|
|
|
|
|
type: string
|
|
|
|
|
operator:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
operator represents a key's relationship to a set of values.
|
|
|
|
|
Valid operators are In, NotIn, Exists and DoesNotExist.
|
2023-12-22 19:43:27 +01:00
|
|
|
type: string
|
|
|
|
|
values:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
values is an array of string values. If the operator is In or NotIn,
|
|
|
|
|
the values array must be non-empty. If the operator is Exists or DoesNotExist,
|
|
|
|
|
the values array must be empty. This array is replaced during a strategic
|
|
|
|
|
merge patch.
|
2023-12-22 19:43:27 +01:00
|
|
|
items:
|
|
|
|
|
type: string
|
|
|
|
|
type: array
|
2024-04-24 14:07:59 +08:00
|
|
|
x-kubernetes-list-type: atomic
|
2023-12-22 19:43:27 +01:00
|
|
|
required:
|
|
|
|
|
- key
|
|
|
|
|
- operator
|
|
|
|
|
type: object
|
|
|
|
|
type: array
|
2024-04-24 14:07:59 +08:00
|
|
|
x-kubernetes-list-type: atomic
|
2023-12-22 19:43:27 +01:00
|
|
|
matchLabels:
|
|
|
|
|
additionalProperties:
|
|
|
|
|
type: string
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels
|
|
|
|
|
map is equivalent to an element of matchExpressions, whose key field is "key", the
|
|
|
|
|
operator is "In", and the values array contains only "value". The requirements are ANDed.
|
2023-12-22 19:43:27 +01:00
|
|
|
type: object
|
|
|
|
|
type: object
|
|
|
|
|
x-kubernetes-map-type: atomic
|
|
|
|
|
namespaces:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
Namespaces is a list of namespaces names. Each name supports wildcard characters
|
|
|
|
|
"*" (matches zero or many characters) and "?" (at least one character).
|
2023-12-22 19:43:27 +01:00
|
|
|
items:
|
|
|
|
|
type: string
|
|
|
|
|
type: array
|
|
|
|
|
operations:
|
|
|
|
|
description: Operations can contain values ["CREATE,
|
|
|
|
|
"UPDATE", "CONNECT", "DELETE"], which are used to
|
|
|
|
|
match a specific action.
|
|
|
|
|
items:
|
|
|
|
|
description: AdmissionOperation can have one of the
|
|
|
|
|
values CREATE, UPDATE, CONNECT, DELETE, which are
|
|
|
|
|
used to match a specific action.
|
|
|
|
|
enum:
|
|
|
|
|
- CREATE
|
|
|
|
|
- CONNECT
|
|
|
|
|
- UPDATE
|
|
|
|
|
- DELETE
|
|
|
|
|
type: string
|
|
|
|
|
type: array
|
|
|
|
|
selector:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
Selector is a label selector. Label keys and values in `matchLabels` support the wildcard
|
|
|
|
|
characters `*` (matches zero or many characters) and `?` (matches one character).
|
|
|
|
|
Wildcards allows writing label selectors like ["storage.k8s.io/*": "*"]. Note that
|
|
|
|
|
using ["*" : "*"] matches any key and value but does not match an empty label set.
|
2023-12-22 19:43:27 +01:00
|
|
|
properties:
|
|
|
|
|
matchExpressions:
|
|
|
|
|
description: matchExpressions is a list of label
|
|
|
|
|
selector requirements. The requirements are ANDed.
|
|
|
|
|
items:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
A label selector requirement is a selector that contains values, a key, and an operator that
|
|
|
|
|
relates the key and values.
|
2023-12-22 19:43:27 +01:00
|
|
|
properties:
|
|
|
|
|
key:
|
|
|
|
|
description: key is the label key that the
|
|
|
|
|
selector applies to.
|
|
|
|
|
type: string
|
|
|
|
|
operator:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
operator represents a key's relationship to a set of values.
|
|
|
|
|
Valid operators are In, NotIn, Exists and DoesNotExist.
|
2023-12-22 19:43:27 +01:00
|
|
|
type: string
|
|
|
|
|
values:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
values is an array of string values. If the operator is In or NotIn,
|
|
|
|
|
the values array must be non-empty. If the operator is Exists or DoesNotExist,
|
|
|
|
|
the values array must be empty. This array is replaced during a strategic
|
|
|
|
|
merge patch.
|
2023-12-22 19:43:27 +01:00
|
|
|
items:
|
|
|
|
|
type: string
|
|
|
|
|
type: array
|
2024-04-24 14:07:59 +08:00
|
|
|
x-kubernetes-list-type: atomic
|
2023-12-22 19:43:27 +01:00
|
|
|
required:
|
|
|
|
|
- key
|
|
|
|
|
- operator
|
|
|
|
|
type: object
|
|
|
|
|
type: array
|
2024-04-24 14:07:59 +08:00
|
|
|
x-kubernetes-list-type: atomic
|
2023-12-22 19:43:27 +01:00
|
|
|
matchLabels:
|
|
|
|
|
additionalProperties:
|
|
|
|
|
type: string
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels
|
|
|
|
|
map is equivalent to an element of matchExpressions, whose key field is "key", the
|
|
|
|
|
operator is "In", and the values array contains only "value". The requirements are ANDed.
|
2023-12-22 19:43:27 +01:00
|
|
|
type: object
|
|
|
|
|
type: object
|
|
|
|
|
x-kubernetes-map-type: atomic
|
|
|
|
|
type: object
|
|
|
|
|
roles:
|
|
|
|
|
description: Roles is the list of namespaced role names
|
|
|
|
|
for the user.
|
|
|
|
|
items:
|
|
|
|
|
type: string
|
|
|
|
|
type: array
|
|
|
|
|
subjects:
|
|
|
|
|
description: Subjects is the list of subject names like
|
|
|
|
|
users, user groups, and service accounts.
|
|
|
|
|
items:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
Subject contains a reference to the object or user identities a role binding applies to. This can either hold a direct API object reference,
|
|
|
|
|
or a value for non-objects such as user and group names.
|
2023-12-22 19:43:27 +01:00
|
|
|
properties:
|
|
|
|
|
apiGroup:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
APIGroup holds the API group of the referenced subject.
|
|
|
|
|
Defaults to "" for ServiceAccount subjects.
|
|
|
|
|
Defaults to "rbac.authorization.k8s.io" for User and Group subjects.
|
2023-12-22 19:43:27 +01:00
|
|
|
type: string
|
|
|
|
|
kind:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
Kind of object being referenced. Values defined by this API group are "User", "Group", and "ServiceAccount".
|
|
|
|
|
If the Authorizer does not recognized the kind value, the Authorizer should report an error.
|
2023-12-22 19:43:27 +01:00
|
|
|
type: string
|
|
|
|
|
name:
|
|
|
|
|
description: Name of the object being referenced.
|
|
|
|
|
type: string
|
|
|
|
|
namespace:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
Namespace of the referenced object. If the object kind is non-namespace, such as "User" or "Group", and this value is not empty
|
|
|
|
|
the Authorizer should report an error.
|
2023-12-22 19:43:27 +01:00
|
|
|
type: string
|
|
|
|
|
required:
|
|
|
|
|
- kind
|
|
|
|
|
- name
|
|
|
|
|
type: object
|
|
|
|
|
x-kubernetes-map-type: atomic
|
|
|
|
|
type: array
|
|
|
|
|
type: object
|
|
|
|
|
type: array
|
|
|
|
|
type: object
|
|
|
|
|
match:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
MatchResources defines when cleanuppolicy should be applied. The match
|
|
|
|
|
criteria can include resource information (e.g. kind, name, namespace, labels)
|
|
|
|
|
and admission review request information like the user name or role.
|
|
|
|
|
At least one kind is required.
|
2024-09-04 20:00:50 +02:00
|
|
|
not:
|
|
|
|
|
required:
|
|
|
|
|
- any
|
|
|
|
|
- all
|
2023-12-22 19:43:27 +01:00
|
|
|
properties:
|
|
|
|
|
all:
|
|
|
|
|
description: All allows specifying resources which will be ANDed
|
|
|
|
|
items:
|
|
|
|
|
description: ResourceFilter allow users to "AND" or "OR" between
|
|
|
|
|
resources
|
|
|
|
|
properties:
|
|
|
|
|
clusterRoles:
|
|
|
|
|
description: ClusterRoles is the list of cluster-wide role
|
|
|
|
|
names for the user.
|
|
|
|
|
items:
|
|
|
|
|
type: string
|
|
|
|
|
type: array
|
|
|
|
|
resources:
|
|
|
|
|
description: ResourceDescription contains information about
|
|
|
|
|
the resource being created or modified.
|
2024-09-04 11:02:57 +02:00
|
|
|
not:
|
|
|
|
|
required:
|
|
|
|
|
- name
|
|
|
|
|
- names
|
2023-12-22 19:43:27 +01:00
|
|
|
properties:
|
|
|
|
|
annotations:
|
|
|
|
|
additionalProperties:
|
|
|
|
|
type: string
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
Annotations is a map of annotations (key-value pairs of type string). Annotation keys
|
|
|
|
|
and values support the wildcard characters "*" (matches zero or many characters) and
|
|
|
|
|
"?" (matches at least one character).
|
2023-12-22 19:43:27 +01:00
|
|
|
type: object
|
|
|
|
|
kinds:
|
|
|
|
|
description: Kinds is a list of resource kinds.
|
|
|
|
|
items:
|
|
|
|
|
type: string
|
|
|
|
|
type: array
|
|
|
|
|
name:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
Name is the name of the resource. The name supports wildcard characters
|
|
|
|
|
"*" (matches zero or many characters) and "?" (at least one character).
|
|
|
|
|
NOTE: "Name" is being deprecated in favor of "Names".
|
2023-12-22 19:43:27 +01:00
|
|
|
type: string
|
|
|
|
|
names:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
Names are the names of the resources. Each name supports wildcard characters
|
|
|
|
|
"*" (matches zero or many characters) and "?" (at least one character).
|
2023-12-22 19:43:27 +01:00
|
|
|
items:
|
|
|
|
|
type: string
|
|
|
|
|
type: array
|
|
|
|
|
namespaceSelector:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
NamespaceSelector is a label selector for the resource namespace. Label keys and values
|
|
|
|
|
in `matchLabels` support the wildcard characters `*` (matches zero or many characters)
|
|
|
|
|
and `?` (matches one character).Wildcards allows writing label selectors like
|
|
|
|
|
["storage.k8s.io/*": "*"]. Note that using ["*" : "*"] matches any key and value but
|
|
|
|
|
does not match an empty label set.
|
2023-12-22 19:43:27 +01:00
|
|
|
properties:
|
|
|
|
|
matchExpressions:
|
|
|
|
|
description: matchExpressions is a list of label
|
|
|
|
|
selector requirements. The requirements are ANDed.
|
|
|
|
|
items:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
A label selector requirement is a selector that contains values, a key, and an operator that
|
|
|
|
|
relates the key and values.
|
2023-12-22 19:43:27 +01:00
|
|
|
properties:
|
|
|
|
|
key:
|
|
|
|
|
description: key is the label key that the
|
|
|
|
|
selector applies to.
|
|
|
|
|
type: string
|
|
|
|
|
operator:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
operator represents a key's relationship to a set of values.
|
|
|
|
|
Valid operators are In, NotIn, Exists and DoesNotExist.
|
2023-12-22 19:43:27 +01:00
|
|
|
type: string
|
|
|
|
|
values:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
values is an array of string values. If the operator is In or NotIn,
|
|
|
|
|
the values array must be non-empty. If the operator is Exists or DoesNotExist,
|
|
|
|
|
the values array must be empty. This array is replaced during a strategic
|
|
|
|
|
merge patch.
|
2023-12-22 19:43:27 +01:00
|
|
|
items:
|
|
|
|
|
type: string
|
|
|
|
|
type: array
|
2024-04-24 14:07:59 +08:00
|
|
|
x-kubernetes-list-type: atomic
|
2023-12-22 19:43:27 +01:00
|
|
|
required:
|
|
|
|
|
- key
|
|
|
|
|
- operator
|
|
|
|
|
type: object
|
|
|
|
|
type: array
|
2024-04-24 14:07:59 +08:00
|
|
|
x-kubernetes-list-type: atomic
|
2023-12-22 19:43:27 +01:00
|
|
|
matchLabels:
|
|
|
|
|
additionalProperties:
|
|
|
|
|
type: string
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels
|
|
|
|
|
map is equivalent to an element of matchExpressions, whose key field is "key", the
|
|
|
|
|
operator is "In", and the values array contains only "value". The requirements are ANDed.
|
2023-12-22 19:43:27 +01:00
|
|
|
type: object
|
|
|
|
|
type: object
|
|
|
|
|
x-kubernetes-map-type: atomic
|
|
|
|
|
namespaces:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
Namespaces is a list of namespaces names. Each name supports wildcard characters
|
|
|
|
|
"*" (matches zero or many characters) and "?" (at least one character).
|
2023-12-22 19:43:27 +01:00
|
|
|
items:
|
|
|
|
|
type: string
|
|
|
|
|
type: array
|
|
|
|
|
operations:
|
|
|
|
|
description: Operations can contain values ["CREATE,
|
|
|
|
|
"UPDATE", "CONNECT", "DELETE"], which are used to
|
|
|
|
|
match a specific action.
|
|
|
|
|
items:
|
|
|
|
|
description: AdmissionOperation can have one of the
|
|
|
|
|
values CREATE, UPDATE, CONNECT, DELETE, which are
|
|
|
|
|
used to match a specific action.
|
|
|
|
|
enum:
|
|
|
|
|
- CREATE
|
|
|
|
|
- CONNECT
|
|
|
|
|
- UPDATE
|
|
|
|
|
- DELETE
|
|
|
|
|
type: string
|
|
|
|
|
type: array
|
|
|
|
|
selector:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
Selector is a label selector. Label keys and values in `matchLabels` support the wildcard
|
|
|
|
|
characters `*` (matches zero or many characters) and `?` (matches one character).
|
|
|
|
|
Wildcards allows writing label selectors like ["storage.k8s.io/*": "*"]. Note that
|
|
|
|
|
using ["*" : "*"] matches any key and value but does not match an empty label set.
|
2023-12-22 19:43:27 +01:00
|
|
|
properties:
|
|
|
|
|
matchExpressions:
|
|
|
|
|
description: matchExpressions is a list of label
|
|
|
|
|
selector requirements. The requirements are ANDed.
|
|
|
|
|
items:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
A label selector requirement is a selector that contains values, a key, and an operator that
|
|
|
|
|
relates the key and values.
|
2023-12-22 19:43:27 +01:00
|
|
|
properties:
|
|
|
|
|
key:
|
|
|
|
|
description: key is the label key that the
|
|
|
|
|
selector applies to.
|
|
|
|
|
type: string
|
|
|
|
|
operator:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
operator represents a key's relationship to a set of values.
|
|
|
|
|
Valid operators are In, NotIn, Exists and DoesNotExist.
|
2023-12-22 19:43:27 +01:00
|
|
|
type: string
|
|
|
|
|
values:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
values is an array of string values. If the operator is In or NotIn,
|
|
|
|
|
the values array must be non-empty. If the operator is Exists or DoesNotExist,
|
|
|
|
|
the values array must be empty. This array is replaced during a strategic
|
|
|
|
|
merge patch.
|
2023-12-22 19:43:27 +01:00
|
|
|
items:
|
|
|
|
|
type: string
|
|
|
|
|
type: array
|
2024-04-24 14:07:59 +08:00
|
|
|
x-kubernetes-list-type: atomic
|
2023-12-22 19:43:27 +01:00
|
|
|
required:
|
|
|
|
|
- key
|
|
|
|
|
- operator
|
|
|
|
|
type: object
|
|
|
|
|
type: array
|
2024-04-24 14:07:59 +08:00
|
|
|
x-kubernetes-list-type: atomic
|
2023-12-22 19:43:27 +01:00
|
|
|
matchLabels:
|
|
|
|
|
additionalProperties:
|
|
|
|
|
type: string
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels
|
|
|
|
|
map is equivalent to an element of matchExpressions, whose key field is "key", the
|
|
|
|
|
operator is "In", and the values array contains only "value". The requirements are ANDed.
|
2023-12-22 19:43:27 +01:00
|
|
|
type: object
|
|
|
|
|
type: object
|
|
|
|
|
x-kubernetes-map-type: atomic
|
|
|
|
|
type: object
|
|
|
|
|
roles:
|
|
|
|
|
description: Roles is the list of namespaced role names
|
|
|
|
|
for the user.
|
|
|
|
|
items:
|
|
|
|
|
type: string
|
|
|
|
|
type: array
|
|
|
|
|
subjects:
|
|
|
|
|
description: Subjects is the list of subject names like
|
|
|
|
|
users, user groups, and service accounts.
|
|
|
|
|
items:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
Subject contains a reference to the object or user identities a role binding applies to. This can either hold a direct API object reference,
|
|
|
|
|
or a value for non-objects such as user and group names.
|
2023-12-22 19:43:27 +01:00
|
|
|
properties:
|
|
|
|
|
apiGroup:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
APIGroup holds the API group of the referenced subject.
|
|
|
|
|
Defaults to "" for ServiceAccount subjects.
|
|
|
|
|
Defaults to "rbac.authorization.k8s.io" for User and Group subjects.
|
2023-12-22 19:43:27 +01:00
|
|
|
type: string
|
|
|
|
|
kind:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
Kind of object being referenced. Values defined by this API group are "User", "Group", and "ServiceAccount".
|
|
|
|
|
If the Authorizer does not recognized the kind value, the Authorizer should report an error.
|
2023-12-22 19:43:27 +01:00
|
|
|
type: string
|
|
|
|
|
name:
|
|
|
|
|
description: Name of the object being referenced.
|
|
|
|
|
type: string
|
|
|
|
|
namespace:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
Namespace of the referenced object. If the object kind is non-namespace, such as "User" or "Group", and this value is not empty
|
|
|
|
|
the Authorizer should report an error.
|
2023-12-22 19:43:27 +01:00
|
|
|
type: string
|
|
|
|
|
required:
|
|
|
|
|
- kind
|
|
|
|
|
- name
|
|
|
|
|
type: object
|
|
|
|
|
x-kubernetes-map-type: atomic
|
|
|
|
|
type: array
|
|
|
|
|
type: object
|
|
|
|
|
type: array
|
|
|
|
|
any:
|
|
|
|
|
description: Any allows specifying resources which will be ORed
|
|
|
|
|
items:
|
|
|
|
|
description: ResourceFilter allow users to "AND" or "OR" between
|
|
|
|
|
resources
|
|
|
|
|
properties:
|
|
|
|
|
clusterRoles:
|
|
|
|
|
description: ClusterRoles is the list of cluster-wide role
|
|
|
|
|
names for the user.
|
|
|
|
|
items:
|
|
|
|
|
type: string
|
|
|
|
|
type: array
|
|
|
|
|
resources:
|
|
|
|
|
description: ResourceDescription contains information about
|
|
|
|
|
the resource being created or modified.
|
2024-09-04 11:02:57 +02:00
|
|
|
not:
|
|
|
|
|
required:
|
|
|
|
|
- name
|
|
|
|
|
- names
|
2023-12-22 19:43:27 +01:00
|
|
|
properties:
|
|
|
|
|
annotations:
|
|
|
|
|
additionalProperties:
|
|
|
|
|
type: string
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
Annotations is a map of annotations (key-value pairs of type string). Annotation keys
|
|
|
|
|
and values support the wildcard characters "*" (matches zero or many characters) and
|
|
|
|
|
"?" (matches at least one character).
|
2023-12-22 19:43:27 +01:00
|
|
|
type: object
|
|
|
|
|
kinds:
|
|
|
|
|
description: Kinds is a list of resource kinds.
|
|
|
|
|
items:
|
|
|
|
|
type: string
|
|
|
|
|
type: array
|
|
|
|
|
name:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
Name is the name of the resource. The name supports wildcard characters
|
|
|
|
|
"*" (matches zero or many characters) and "?" (at least one character).
|
|
|
|
|
NOTE: "Name" is being deprecated in favor of "Names".
|
2023-12-22 19:43:27 +01:00
|
|
|
type: string
|
|
|
|
|
names:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
Names are the names of the resources. Each name supports wildcard characters
|
|
|
|
|
"*" (matches zero or many characters) and "?" (at least one character).
|
2023-12-22 19:43:27 +01:00
|
|
|
items:
|
|
|
|
|
type: string
|
|
|
|
|
type: array
|
|
|
|
|
namespaceSelector:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
NamespaceSelector is a label selector for the resource namespace. Label keys and values
|
|
|
|
|
in `matchLabels` support the wildcard characters `*` (matches zero or many characters)
|
|
|
|
|
and `?` (matches one character).Wildcards allows writing label selectors like
|
|
|
|
|
["storage.k8s.io/*": "*"]. Note that using ["*" : "*"] matches any key and value but
|
|
|
|
|
does not match an empty label set.
|
2023-12-22 19:43:27 +01:00
|
|
|
properties:
|
|
|
|
|
matchExpressions:
|
|
|
|
|
description: matchExpressions is a list of label
|
|
|
|
|
selector requirements. The requirements are ANDed.
|
|
|
|
|
items:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
A label selector requirement is a selector that contains values, a key, and an operator that
|
|
|
|
|
relates the key and values.
|
2023-12-22 19:43:27 +01:00
|
|
|
properties:
|
|
|
|
|
key:
|
|
|
|
|
description: key is the label key that the
|
|
|
|
|
selector applies to.
|
|
|
|
|
type: string
|
|
|
|
|
operator:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
operator represents a key's relationship to a set of values.
|
|
|
|
|
Valid operators are In, NotIn, Exists and DoesNotExist.
|
2023-12-22 19:43:27 +01:00
|
|
|
type: string
|
|
|
|
|
values:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
values is an array of string values. If the operator is In or NotIn,
|
|
|
|
|
the values array must be non-empty. If the operator is Exists or DoesNotExist,
|
|
|
|
|
the values array must be empty. This array is replaced during a strategic
|
|
|
|
|
merge patch.
|
2023-12-22 19:43:27 +01:00
|
|
|
items:
|
|
|
|
|
type: string
|
|
|
|
|
type: array
|
2024-04-24 14:07:59 +08:00
|
|
|
x-kubernetes-list-type: atomic
|
2023-12-22 19:43:27 +01:00
|
|
|
required:
|
|
|
|
|
- key
|
|
|
|
|
- operator
|
|
|
|
|
type: object
|
|
|
|
|
type: array
|
2024-04-24 14:07:59 +08:00
|
|
|
x-kubernetes-list-type: atomic
|
2023-12-22 19:43:27 +01:00
|
|
|
matchLabels:
|
|
|
|
|
additionalProperties:
|
|
|
|
|
type: string
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels
|
|
|
|
|
map is equivalent to an element of matchExpressions, whose key field is "key", the
|
|
|
|
|
operator is "In", and the values array contains only "value". The requirements are ANDed.
|
2023-12-22 19:43:27 +01:00
|
|
|
type: object
|
|
|
|
|
type: object
|
|
|
|
|
x-kubernetes-map-type: atomic
|
|
|
|
|
namespaces:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
Namespaces is a list of namespaces names. Each name supports wildcard characters
|
|
|
|
|
"*" (matches zero or many characters) and "?" (at least one character).
|
2023-12-22 19:43:27 +01:00
|
|
|
items:
|
|
|
|
|
type: string
|
|
|
|
|
type: array
|
|
|
|
|
operations:
|
|
|
|
|
description: Operations can contain values ["CREATE,
|
|
|
|
|
"UPDATE", "CONNECT", "DELETE"], which are used to
|
|
|
|
|
match a specific action.
|
|
|
|
|
items:
|
|
|
|
|
description: AdmissionOperation can have one of the
|
|
|
|
|
values CREATE, UPDATE, CONNECT, DELETE, which are
|
|
|
|
|
used to match a specific action.
|
|
|
|
|
enum:
|
|
|
|
|
- CREATE
|
|
|
|
|
- CONNECT
|
|
|
|
|
- UPDATE
|
|
|
|
|
- DELETE
|
|
|
|
|
type: string
|
|
|
|
|
type: array
|
|
|
|
|
selector:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
Selector is a label selector. Label keys and values in `matchLabels` support the wildcard
|
|
|
|
|
characters `*` (matches zero or many characters) and `?` (matches one character).
|
|
|
|
|
Wildcards allows writing label selectors like ["storage.k8s.io/*": "*"]. Note that
|
|
|
|
|
using ["*" : "*"] matches any key and value but does not match an empty label set.
|
2023-12-22 19:43:27 +01:00
|
|
|
properties:
|
|
|
|
|
matchExpressions:
|
|
|
|
|
description: matchExpressions is a list of label
|
|
|
|
|
selector requirements. The requirements are ANDed.
|
|
|
|
|
items:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
A label selector requirement is a selector that contains values, a key, and an operator that
|
|
|
|
|
relates the key and values.
|
2023-12-22 19:43:27 +01:00
|
|
|
properties:
|
|
|
|
|
key:
|
|
|
|
|
description: key is the label key that the
|
|
|
|
|
selector applies to.
|
|
|
|
|
type: string
|
|
|
|
|
operator:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
operator represents a key's relationship to a set of values.
|
|
|
|
|
Valid operators are In, NotIn, Exists and DoesNotExist.
|
2023-12-22 19:43:27 +01:00
|
|
|
type: string
|
|
|
|
|
values:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
values is an array of string values. If the operator is In or NotIn,
|
|
|
|
|
the values array must be non-empty. If the operator is Exists or DoesNotExist,
|
|
|
|
|
the values array must be empty. This array is replaced during a strategic
|
|
|
|
|
merge patch.
|
2023-12-22 19:43:27 +01:00
|
|
|
items:
|
|
|
|
|
type: string
|
|
|
|
|
type: array
|
2024-04-24 14:07:59 +08:00
|
|
|
x-kubernetes-list-type: atomic
|
2023-12-22 19:43:27 +01:00
|
|
|
required:
|
|
|
|
|
- key
|
|
|
|
|
- operator
|
|
|
|
|
type: object
|
|
|
|
|
type: array
|
2024-04-24 14:07:59 +08:00
|
|
|
x-kubernetes-list-type: atomic
|
2023-12-22 19:43:27 +01:00
|
|
|
matchLabels:
|
|
|
|
|
additionalProperties:
|
|
|
|
|
type: string
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels
|
|
|
|
|
map is equivalent to an element of matchExpressions, whose key field is "key", the
|
|
|
|
|
operator is "In", and the values array contains only "value". The requirements are ANDed.
|
2023-12-22 19:43:27 +01:00
|
|
|
type: object
|
|
|
|
|
type: object
|
|
|
|
|
x-kubernetes-map-type: atomic
|
|
|
|
|
type: object
|
|
|
|
|
roles:
|
|
|
|
|
description: Roles is the list of namespaced role names
|
|
|
|
|
for the user.
|
|
|
|
|
items:
|
|
|
|
|
type: string
|
|
|
|
|
type: array
|
|
|
|
|
subjects:
|
|
|
|
|
description: Subjects is the list of subject names like
|
|
|
|
|
users, user groups, and service accounts.
|
|
|
|
|
items:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
Subject contains a reference to the object or user identities a role binding applies to. This can either hold a direct API object reference,
|
|
|
|
|
or a value for non-objects such as user and group names.
|
2023-12-22 19:43:27 +01:00
|
|
|
properties:
|
|
|
|
|
apiGroup:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
APIGroup holds the API group of the referenced subject.
|
|
|
|
|
Defaults to "" for ServiceAccount subjects.
|
|
|
|
|
Defaults to "rbac.authorization.k8s.io" for User and Group subjects.
|
2023-12-22 19:43:27 +01:00
|
|
|
type: string
|
|
|
|
|
kind:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
Kind of object being referenced. Values defined by this API group are "User", "Group", and "ServiceAccount".
|
|
|
|
|
If the Authorizer does not recognized the kind value, the Authorizer should report an error.
|
2023-12-22 19:43:27 +01:00
|
|
|
type: string
|
|
|
|
|
name:
|
|
|
|
|
description: Name of the object being referenced.
|
|
|
|
|
type: string
|
|
|
|
|
namespace:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
Namespace of the referenced object. If the object kind is non-namespace, such as "User" or "Group", and this value is not empty
|
|
|
|
|
the Authorizer should report an error.
|
2023-12-22 19:43:27 +01:00
|
|
|
type: string
|
|
|
|
|
required:
|
|
|
|
|
- kind
|
|
|
|
|
- name
|
|
|
|
|
type: object
|
|
|
|
|
x-kubernetes-map-type: atomic
|
|
|
|
|
type: array
|
|
|
|
|
type: object
|
|
|
|
|
type: array
|
|
|
|
|
type: object
|
|
|
|
|
schedule:
|
|
|
|
|
description: The schedule in Cron format
|
|
|
|
|
type: string
|
|
|
|
|
required:
|
2024-09-09 16:24:57 +02:00
|
|
|
- match
|
2023-12-22 19:43:27 +01:00
|
|
|
- schedule
|
|
|
|
|
type: object
|
|
|
|
|
status:
|
|
|
|
|
description: Status contains policy runtime data.
|
|
|
|
|
properties:
|
|
|
|
|
conditions:
|
|
|
|
|
items:
|
2024-08-28 08:23:19 +02:00
|
|
|
description: Condition contains details for one aspect of the current
|
|
|
|
|
state of this API Resource.
|
2023-12-22 19:43:27 +01:00
|
|
|
properties:
|
|
|
|
|
lastTransitionTime:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
lastTransitionTime is the last time the condition transitioned from one status to another.
|
|
|
|
|
This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable.
|
2023-12-22 19:43:27 +01:00
|
|
|
format: date-time
|
|
|
|
|
type: string
|
|
|
|
|
message:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
message is a human readable message indicating details about the transition.
|
|
|
|
|
This may be an empty string.
|
2023-12-22 19:43:27 +01:00
|
|
|
maxLength: 32768
|
|
|
|
|
type: string
|
|
|
|
|
observedGeneration:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
observedGeneration represents the .metadata.generation that the condition was set based upon.
|
|
|
|
|
For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date
|
|
|
|
|
with respect to the current state of the instance.
|
2023-12-22 19:43:27 +01:00
|
|
|
format: int64
|
|
|
|
|
minimum: 0
|
|
|
|
|
type: integer
|
|
|
|
|
reason:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
reason contains a programmatic identifier indicating the reason for the condition's last transition.
|
|
|
|
|
Producers of specific condition types may define expected values and meanings for this field,
|
|
|
|
|
and whether the values are considered a guaranteed API.
|
|
|
|
|
The value should be a CamelCase string.
|
2023-12-22 19:43:27 +01:00
|
|
|
This field may not be empty.
|
|
|
|
|
maxLength: 1024
|
|
|
|
|
minLength: 1
|
|
|
|
|
pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$
|
|
|
|
|
type: string
|
|
|
|
|
status:
|
|
|
|
|
description: status of the condition, one of True, False, Unknown.
|
|
|
|
|
enum:
|
|
|
|
|
- "True"
|
|
|
|
|
- "False"
|
|
|
|
|
- Unknown
|
|
|
|
|
type: string
|
|
|
|
|
type:
|
2024-08-28 08:23:19 +02:00
|
|
|
description: type of condition in CamelCase or in foo.example.com/CamelCase.
|
2023-12-22 19:43:27 +01:00
|
|
|
maxLength: 316
|
|
|
|
|
pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
|
|
|
|
|
type: string
|
|
|
|
|
required:
|
|
|
|
|
- lastTransitionTime
|
|
|
|
|
- message
|
|
|
|
|
- reason
|
|
|
|
|
- status
|
|
|
|
|
- type
|
|
|
|
|
type: object
|
|
|
|
|
type: array
|
|
|
|
|
lastExecutionTime:
|
|
|
|
|
format: date-time
|
|
|
|
|
type: string
|
|
|
|
|
type: object
|
|
|
|
|
required:
|
|
|
|
|
- spec
|
|
|
|
|
type: object
|
|
|
|
|
served: true
|
2024-06-14 11:39:36 +02:00
|
|
|
storage: true
|
2023-10-12 14:45:33 +03:00
|
|
|
subresources:
|
|
|
|
|
status: {}
|
|
|
|
|
- additionalPrinterColumns:
|
|
|
|
|
- jsonPath: .spec.schedule
|
|
|
|
|
name: Schedule
|
|
|
|
|
type: string
|
|
|
|
|
- jsonPath: .metadata.creationTimestamp
|
|
|
|
|
name: Age
|
|
|
|
|
type: date
|
2024-06-14 11:39:36 +02:00
|
|
|
deprecated: true
|
2023-10-12 14:45:33 +03:00
|
|
|
name: v2beta1
|
2022-11-08 14:12:35 +05:30
|
|
|
schema:
|
|
|
|
|
openAPIV3Schema:
|
|
|
|
|
description: CleanupPolicy defines a rule for resource cleanup.
|
|
|
|
|
properties:
|
|
|
|
|
apiVersion:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
APIVersion defines the versioned schema of this representation of an object.
|
|
|
|
|
Servers should convert recognized schemas to the latest internal value, and
|
|
|
|
|
may reject unrecognized values.
|
|
|
|
|
More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
|
2022-11-08 14:12:35 +05:30
|
|
|
type: string
|
|
|
|
|
kind:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
Kind is a string value representing the REST resource this object represents.
|
|
|
|
|
Servers may infer this from the endpoint the client submits requests to.
|
|
|
|
|
Cannot be updated.
|
|
|
|
|
In CamelCase.
|
|
|
|
|
More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
|
2022-11-08 14:12:35 +05:30
|
|
|
type: string
|
|
|
|
|
metadata:
|
|
|
|
|
type: object
|
|
|
|
|
spec:
|
|
|
|
|
description: Spec declares policy behaviors.
|
|
|
|
|
properties:
|
|
|
|
|
conditions:
|
2023-01-04 17:03:56 +08:00
|
|
|
description: Conditions defines the conditions used to select the
|
|
|
|
|
resources which will be cleaned up.
|
2022-11-08 14:12:35 +05:30
|
|
|
properties:
|
|
|
|
|
all:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
AllConditions enable variable-based conditional rule execution. This is useful for
|
|
|
|
|
finer control of when an rule is applied. A condition can reference object data
|
|
|
|
|
using JMESPath notation.
|
|
|
|
|
Here, all of the conditions need to pass.
|
2022-11-08 14:12:35 +05:30
|
|
|
items:
|
|
|
|
|
properties:
|
|
|
|
|
key:
|
|
|
|
|
description: Key is the context entry (using JMESPath) for
|
|
|
|
|
conditional rule evaluation.
|
|
|
|
|
x-kubernetes-preserve-unknown-fields: true
|
2023-05-08 22:51:52 +08:00
|
|
|
message:
|
|
|
|
|
description: Message is an optional display message
|
|
|
|
|
type: string
|
2022-11-08 14:12:35 +05:30
|
|
|
operator:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
Operator is the conditional operation to perform. Valid operators are:
|
|
|
|
|
Equals, NotEquals, In, AnyIn, AllIn, NotIn, AnyNotIn, AllNotIn, GreaterThanOrEquals,
|
|
|
|
|
GreaterThan, LessThanOrEquals, LessThan, DurationGreaterThanOrEquals, DurationGreaterThan,
|
|
|
|
|
DurationLessThanOrEquals, DurationLessThan
|
2022-11-08 14:12:35 +05:30
|
|
|
enum:
|
|
|
|
|
- Equals
|
|
|
|
|
- NotEquals
|
|
|
|
|
- AnyIn
|
|
|
|
|
- AllIn
|
|
|
|
|
- AnyNotIn
|
|
|
|
|
- AllNotIn
|
|
|
|
|
- GreaterThanOrEquals
|
|
|
|
|
- GreaterThan
|
|
|
|
|
- LessThanOrEquals
|
|
|
|
|
- LessThan
|
|
|
|
|
- DurationGreaterThanOrEquals
|
|
|
|
|
- DurationGreaterThan
|
|
|
|
|
- DurationLessThanOrEquals
|
|
|
|
|
- DurationLessThan
|
|
|
|
|
type: string
|
|
|
|
|
value:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
Value is the conditional value, or set of values. The values can be fixed set
|
|
|
|
|
or can be variables declared using JMESPath.
|
2022-11-08 14:12:35 +05:30
|
|
|
x-kubernetes-preserve-unknown-fields: true
|
|
|
|
|
type: object
|
|
|
|
|
type: array
|
|
|
|
|
any:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
AnyConditions enable variable-based conditional rule execution. This is useful for
|
|
|
|
|
finer control of when an rule is applied. A condition can reference object data
|
|
|
|
|
using JMESPath notation.
|
|
|
|
|
Here, at least one of the conditions need to pass.
|
2022-11-08 14:12:35 +05:30
|
|
|
items:
|
|
|
|
|
properties:
|
|
|
|
|
key:
|
|
|
|
|
description: Key is the context entry (using JMESPath) for
|
|
|
|
|
conditional rule evaluation.
|
|
|
|
|
x-kubernetes-preserve-unknown-fields: true
|
2023-05-08 22:51:52 +08:00
|
|
|
message:
|
|
|
|
|
description: Message is an optional display message
|
|
|
|
|
type: string
|
2022-11-08 14:12:35 +05:30
|
|
|
operator:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
Operator is the conditional operation to perform. Valid operators are:
|
|
|
|
|
Equals, NotEquals, In, AnyIn, AllIn, NotIn, AnyNotIn, AllNotIn, GreaterThanOrEquals,
|
|
|
|
|
GreaterThan, LessThanOrEquals, LessThan, DurationGreaterThanOrEquals, DurationGreaterThan,
|
|
|
|
|
DurationLessThanOrEquals, DurationLessThan
|
2022-11-08 14:12:35 +05:30
|
|
|
enum:
|
|
|
|
|
- Equals
|
|
|
|
|
- NotEquals
|
|
|
|
|
- AnyIn
|
|
|
|
|
- AllIn
|
|
|
|
|
- AnyNotIn
|
|
|
|
|
- AllNotIn
|
|
|
|
|
- GreaterThanOrEquals
|
|
|
|
|
- GreaterThan
|
|
|
|
|
- LessThanOrEquals
|
|
|
|
|
- LessThan
|
|
|
|
|
- DurationGreaterThanOrEquals
|
|
|
|
|
- DurationGreaterThan
|
|
|
|
|
- DurationLessThanOrEquals
|
|
|
|
|
- DurationLessThan
|
|
|
|
|
type: string
|
|
|
|
|
value:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
Value is the conditional value, or set of values. The values can be fixed set
|
|
|
|
|
or can be variables declared using JMESPath.
|
2022-11-08 14:12:35 +05:30
|
|
|
x-kubernetes-preserve-unknown-fields: true
|
|
|
|
|
type: object
|
|
|
|
|
type: array
|
|
|
|
|
type: object
|
2023-04-20 12:36:13 +05:30
|
|
|
context:
|
|
|
|
|
description: Context defines variables and data sources that can be
|
|
|
|
|
used during rule execution.
|
|
|
|
|
items:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
ContextEntry adds variables and data sources to a rule Context. Either a
|
|
|
|
|
ConfigMap reference or a APILookup must be provided.
|
2024-09-03 18:51:28 +02:00
|
|
|
oneOf:
|
|
|
|
|
- required:
|
|
|
|
|
- configMap
|
|
|
|
|
- required:
|
|
|
|
|
- apiCall
|
|
|
|
|
- required:
|
|
|
|
|
- imageRegistry
|
|
|
|
|
- required:
|
|
|
|
|
- variable
|
|
|
|
|
- required:
|
|
|
|
|
- globalReference
|
2023-04-20 12:36:13 +05:30
|
|
|
properties:
|
|
|
|
|
apiCall:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
APICall is an HTTP request to the Kubernetes API server, or other JSON web service.
|
|
|
|
|
The data returned is stored in the context with the name for the context entry.
|
2023-04-20 12:36:13 +05:30
|
|
|
properties:
|
2023-04-26 16:31:44 -07:00
|
|
|
data:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
The data object specifies the POST data sent to the server.
|
|
|
|
|
Only applicable when the method field is set to POST.
|
2023-04-26 16:31:44 -07:00
|
|
|
items:
|
|
|
|
|
description: RequestData contains the HTTP POST data
|
|
|
|
|
properties:
|
|
|
|
|
key:
|
|
|
|
|
description: Key is a unique identifier for the data
|
|
|
|
|
value
|
|
|
|
|
type: string
|
|
|
|
|
value:
|
|
|
|
|
description: Value is the data value
|
|
|
|
|
x-kubernetes-preserve-unknown-fields: true
|
|
|
|
|
required:
|
|
|
|
|
- key
|
|
|
|
|
- value
|
|
|
|
|
type: object
|
|
|
|
|
type: array
|
2024-09-05 11:27:44 +05:30
|
|
|
default:
|
|
|
|
|
description: |-
|
2024-09-09 14:04:08 -07:00
|
|
|
Default is an optional arbitrary JSON object that the context
|
|
|
|
|
value is set to, if the apiCall returns error.
|
2024-09-05 11:27:44 +05:30
|
|
|
x-kubernetes-preserve-unknown-fields: true
|
2023-04-20 12:36:13 +05:30
|
|
|
jmesPath:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
JMESPath is an optional JSON Match Expression that can be used to
|
|
|
|
|
transform the JSON response returned from the server. For example
|
|
|
|
|
a JMESPath of "items | length(@)" applied to the API server response
|
|
|
|
|
for the URLPath "/apis/apps/v1/deployments" will return the total count
|
|
|
|
|
of deployments across all namespaces.
|
2023-04-20 12:36:13 +05:30
|
|
|
type: string
|
2023-04-26 16:31:44 -07:00
|
|
|
method:
|
|
|
|
|
default: GET
|
|
|
|
|
description: Method is the HTTP request type (GET or POST).
|
2024-03-20 21:34:40 +02:00
|
|
|
Defaults to GET.
|
2023-04-26 16:31:44 -07:00
|
|
|
enum:
|
|
|
|
|
- GET
|
|
|
|
|
- POST
|
|
|
|
|
type: string
|
2023-04-20 12:36:13 +05:30
|
|
|
service:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
Service is an API call to a JSON web service.
|
|
|
|
|
This is used for non-Kubernetes API server calls.
|
|
|
|
|
It's mutually exclusive with the URLPath field.
|
2023-04-20 12:36:13 +05:30
|
|
|
properties:
|
|
|
|
|
caBundle:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
CABundle is a PEM encoded CA bundle which will be used to validate
|
|
|
|
|
the server certificate.
|
2023-04-20 12:36:13 +05:30
|
|
|
type: string
|
2024-09-09 14:04:08 -07:00
|
|
|
headers:
|
|
|
|
|
description: Headers is a list of optional HTTP headers
|
|
|
|
|
to be included in the request.
|
|
|
|
|
items:
|
|
|
|
|
properties:
|
|
|
|
|
key:
|
|
|
|
|
description: Key is the header key
|
|
|
|
|
type: string
|
|
|
|
|
value:
|
|
|
|
|
description: Value is the header value
|
|
|
|
|
type: string
|
|
|
|
|
required:
|
|
|
|
|
- key
|
|
|
|
|
- value
|
|
|
|
|
type: object
|
|
|
|
|
type: array
|
2023-04-26 16:31:44 -07:00
|
|
|
url:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
URL is the JSON web service URL. A typical form is
|
|
|
|
|
`https://{service}.{namespace}:{port}/{path}`.
|
2023-04-20 12:36:13 +05:30
|
|
|
type: string
|
|
|
|
|
required:
|
2023-04-26 16:31:44 -07:00
|
|
|
- url
|
2023-04-20 12:36:13 +05:30
|
|
|
type: object
|
|
|
|
|
urlPath:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
URLPath is the URL path to be used in the HTTP GET or POST request to the
|
|
|
|
|
Kubernetes API server (e.g. "/api/v1/namespaces" or "/apis/apps/v1/deployments").
|
|
|
|
|
The format required is the same format used by the `kubectl get --raw` command.
|
|
|
|
|
See https://kyverno.io/docs/writing-policies/external-data-sources/#variables-from-kubernetes-api-server-calls
|
|
|
|
|
for details.
|
|
|
|
|
It's mutually exclusive with the Service field.
|
2023-04-20 12:36:13 +05:30
|
|
|
type: string
|
|
|
|
|
type: object
|
|
|
|
|
configMap:
|
|
|
|
|
description: ConfigMap is the ConfigMap reference.
|
|
|
|
|
properties:
|
|
|
|
|
name:
|
|
|
|
|
description: Name is the ConfigMap name.
|
|
|
|
|
type: string
|
|
|
|
|
namespace:
|
|
|
|
|
description: Namespace is the ConfigMap namespace.
|
|
|
|
|
type: string
|
|
|
|
|
required:
|
|
|
|
|
- name
|
|
|
|
|
type: object
|
2024-02-05 13:24:37 +02:00
|
|
|
globalReference:
|
|
|
|
|
description: GlobalContextEntryReference is a reference to a
|
|
|
|
|
cached global context entry.
|
|
|
|
|
properties:
|
|
|
|
|
jmesPath:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
JMESPath is an optional JSON Match Expression that can be used to
|
|
|
|
|
transform the JSON response returned from the server. For example
|
|
|
|
|
a JMESPath of "items | length(@)" applied to the API server response
|
|
|
|
|
for the URLPath "/apis/apps/v1/deployments" will return the total count
|
|
|
|
|
of deployments across all namespaces.
|
2024-02-05 13:24:37 +02:00
|
|
|
type: string
|
|
|
|
|
name:
|
|
|
|
|
description: Name of the global context entry
|
|
|
|
|
type: string
|
2024-08-28 08:23:19 +02:00
|
|
|
required:
|
|
|
|
|
- name
|
2024-02-05 13:24:37 +02:00
|
|
|
type: object
|
2023-04-20 12:36:13 +05:30
|
|
|
imageRegistry:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
ImageRegistry defines requests to an OCI/Docker V2 registry to fetch image
|
|
|
|
|
details.
|
2023-04-20 12:36:13 +05:30
|
|
|
properties:
|
2023-06-16 19:07:08 +05:30
|
|
|
imageRegistryCredentials:
|
|
|
|
|
description: ImageRegistryCredentials provides credentials
|
|
|
|
|
that will be used for authentication with registry
|
|
|
|
|
properties:
|
|
|
|
|
allowInsecureRegistry:
|
|
|
|
|
description: AllowInsecureRegistry allows insecure access
|
2023-10-31 10:22:07 +05:30
|
|
|
to a registry.
|
2023-06-16 19:07:08 +05:30
|
|
|
type: boolean
|
2023-06-17 01:55:46 +05:30
|
|
|
providers:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
Providers specifies a list of OCI Registry names, whose authentication providers are provided.
|
|
|
|
|
It can be of one of these values: default,google,azure,amazon,github.
|
2023-06-16 19:07:08 +05:30
|
|
|
items:
|
2023-06-17 01:55:46 +05:30
|
|
|
description: ImageRegistryCredentialsProvidersType
|
|
|
|
|
provides the list of credential providers required.
|
2023-06-16 19:07:08 +05:30
|
|
|
enum:
|
|
|
|
|
- default
|
|
|
|
|
- amazon
|
|
|
|
|
- azure
|
|
|
|
|
- google
|
|
|
|
|
- github
|
|
|
|
|
type: string
|
|
|
|
|
type: array
|
|
|
|
|
secrets:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
Secrets specifies a list of secrets that are provided for credentials.
|
|
|
|
|
Secrets must live in the Kyverno namespace.
|
2023-06-16 19:07:08 +05:30
|
|
|
items:
|
|
|
|
|
type: string
|
|
|
|
|
type: array
|
|
|
|
|
type: object
|
2023-04-20 12:36:13 +05:30
|
|
|
jmesPath:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
JMESPath is an optional JSON Match Expression that can be used to
|
|
|
|
|
transform the ImageData struct returned as a result of processing
|
|
|
|
|
the image reference.
|
2023-04-20 12:36:13 +05:30
|
|
|
type: string
|
|
|
|
|
reference:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
Reference is image reference to a container image in the registry.
|
|
|
|
|
Example: ghcr.io/kyverno/kyverno:latest
|
2023-04-20 12:36:13 +05:30
|
|
|
type: string
|
|
|
|
|
required:
|
|
|
|
|
- reference
|
|
|
|
|
type: object
|
|
|
|
|
name:
|
|
|
|
|
description: Name is the variable name.
|
|
|
|
|
type: string
|
|
|
|
|
variable:
|
|
|
|
|
description: Variable defines an arbitrary JMESPath context
|
|
|
|
|
variable that can be defined inline.
|
|
|
|
|
properties:
|
|
|
|
|
default:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
Default is an optional arbitrary JSON object that the variable may take if the JMESPath
|
|
|
|
|
expression evaluates to nil
|
2023-04-20 12:36:13 +05:30
|
|
|
x-kubernetes-preserve-unknown-fields: true
|
|
|
|
|
jmesPath:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
JMESPath is an optional JMESPath Expression that can be used to
|
|
|
|
|
transform the variable.
|
2023-04-20 12:36:13 +05:30
|
|
|
type: string
|
|
|
|
|
value:
|
|
|
|
|
description: Value is any arbitrary JSON object representable
|
|
|
|
|
in YAML or JSON form.
|
|
|
|
|
x-kubernetes-preserve-unknown-fields: true
|
|
|
|
|
type: object
|
2024-09-03 21:58:11 +02:00
|
|
|
required:
|
|
|
|
|
- name
|
2023-04-20 12:36:13 +05:30
|
|
|
type: object
|
|
|
|
|
type: array
|
2024-10-22 16:34:01 +05:30
|
|
|
deletionPropagationPolicy:
|
|
|
|
|
description: DeletionPropagationPolicy defines how resources will
|
|
|
|
|
be deleted (Foreground, Background, Orphan).
|
|
|
|
|
enum:
|
|
|
|
|
- Foreground
|
|
|
|
|
- Background
|
|
|
|
|
- Orphan
|
|
|
|
|
type: string
|
2022-11-08 14:12:35 +05:30
|
|
|
exclude:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
ExcludeResources defines when cleanuppolicy should not be applied. The exclude
|
|
|
|
|
criteria can include resource information (e.g. kind, name, namespace, labels)
|
|
|
|
|
and admission review request information like the name or role.
|
2024-09-04 20:00:50 +02:00
|
|
|
not:
|
|
|
|
|
required:
|
|
|
|
|
- any
|
|
|
|
|
- all
|
2022-11-08 14:12:35 +05:30
|
|
|
properties:
|
|
|
|
|
all:
|
|
|
|
|
description: All allows specifying resources which will be ANDed
|
|
|
|
|
items:
|
|
|
|
|
description: ResourceFilter allow users to "AND" or "OR" between
|
|
|
|
|
resources
|
|
|
|
|
properties:
|
|
|
|
|
clusterRoles:
|
|
|
|
|
description: ClusterRoles is the list of cluster-wide role
|
|
|
|
|
names for the user.
|
|
|
|
|
items:
|
|
|
|
|
type: string
|
|
|
|
|
type: array
|
|
|
|
|
resources:
|
|
|
|
|
description: ResourceDescription contains information about
|
|
|
|
|
the resource being created or modified.
|
2024-09-04 11:02:57 +02:00
|
|
|
not:
|
|
|
|
|
required:
|
|
|
|
|
- name
|
|
|
|
|
- names
|
2022-11-08 14:12:35 +05:30
|
|
|
properties:
|
|
|
|
|
annotations:
|
|
|
|
|
additionalProperties:
|
|
|
|
|
type: string
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
Annotations is a map of annotations (key-value pairs of type string). Annotation keys
|
|
|
|
|
and values support the wildcard characters "*" (matches zero or many characters) and
|
|
|
|
|
"?" (matches at least one character).
|
2022-11-08 14:12:35 +05:30
|
|
|
type: object
|
|
|
|
|
kinds:
|
|
|
|
|
description: Kinds is a list of resource kinds.
|
|
|
|
|
items:
|
|
|
|
|
type: string
|
|
|
|
|
type: array
|
|
|
|
|
name:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
Name is the name of the resource. The name supports wildcard characters
|
|
|
|
|
"*" (matches zero or many characters) and "?" (at least one character).
|
|
|
|
|
NOTE: "Name" is being deprecated in favor of "Names".
|
2022-11-08 14:12:35 +05:30
|
|
|
type: string
|
|
|
|
|
names:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
Names are the names of the resources. Each name supports wildcard characters
|
|
|
|
|
"*" (matches zero or many characters) and "?" (at least one character).
|
2022-11-08 14:12:35 +05:30
|
|
|
items:
|
|
|
|
|
type: string
|
|
|
|
|
type: array
|
|
|
|
|
namespaceSelector:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
NamespaceSelector is a label selector for the resource namespace. Label keys and values
|
|
|
|
|
in `matchLabels` support the wildcard characters `*` (matches zero or many characters)
|
|
|
|
|
and `?` (matches one character).Wildcards allows writing label selectors like
|
|
|
|
|
["storage.k8s.io/*": "*"]. Note that using ["*" : "*"] matches any key and value but
|
|
|
|
|
does not match an empty label set.
|
2022-11-08 14:12:35 +05:30
|
|
|
properties:
|
|
|
|
|
matchExpressions:
|
|
|
|
|
description: matchExpressions is a list of label
|
|
|
|
|
selector requirements. The requirements are ANDed.
|
|
|
|
|
items:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
A label selector requirement is a selector that contains values, a key, and an operator that
|
|
|
|
|
relates the key and values.
|
2022-11-08 14:12:35 +05:30
|
|
|
properties:
|
|
|
|
|
key:
|
|
|
|
|
description: key is the label key that the
|
|
|
|
|
selector applies to.
|
|
|
|
|
type: string
|
|
|
|
|
operator:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
operator represents a key's relationship to a set of values.
|
|
|
|
|
Valid operators are In, NotIn, Exists and DoesNotExist.
|
2022-11-08 14:12:35 +05:30
|
|
|
type: string
|
|
|
|
|
values:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
values is an array of string values. If the operator is In or NotIn,
|
|
|
|
|
the values array must be non-empty. If the operator is Exists or DoesNotExist,
|
|
|
|
|
the values array must be empty. This array is replaced during a strategic
|
|
|
|
|
merge patch.
|
2022-11-08 14:12:35 +05:30
|
|
|
items:
|
|
|
|
|
type: string
|
|
|
|
|
type: array
|
2024-04-24 14:07:59 +08:00
|
|
|
x-kubernetes-list-type: atomic
|
2022-11-08 14:12:35 +05:30
|
|
|
required:
|
|
|
|
|
- key
|
|
|
|
|
- operator
|
|
|
|
|
type: object
|
|
|
|
|
type: array
|
2024-04-24 14:07:59 +08:00
|
|
|
x-kubernetes-list-type: atomic
|
2022-11-08 14:12:35 +05:30
|
|
|
matchLabels:
|
|
|
|
|
additionalProperties:
|
|
|
|
|
type: string
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels
|
|
|
|
|
map is equivalent to an element of matchExpressions, whose key field is "key", the
|
|
|
|
|
operator is "In", and the values array contains only "value". The requirements are ANDed.
|
2022-11-08 14:12:35 +05:30
|
|
|
type: object
|
|
|
|
|
type: object
|
|
|
|
|
x-kubernetes-map-type: atomic
|
|
|
|
|
namespaces:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
Namespaces is a list of namespaces names. Each name supports wildcard characters
|
|
|
|
|
"*" (matches zero or many characters) and "?" (at least one character).
|
2022-11-08 14:12:35 +05:30
|
|
|
items:
|
|
|
|
|
type: string
|
|
|
|
|
type: array
|
2023-03-29 06:22:21 +02:00
|
|
|
operations:
|
|
|
|
|
description: Operations can contain values ["CREATE,
|
|
|
|
|
"UPDATE", "CONNECT", "DELETE"], which are used to
|
|
|
|
|
match a specific action.
|
|
|
|
|
items:
|
|
|
|
|
description: AdmissionOperation can have one of the
|
|
|
|
|
values CREATE, UPDATE, CONNECT, DELETE, which are
|
|
|
|
|
used to match a specific action.
|
|
|
|
|
enum:
|
|
|
|
|
- CREATE
|
|
|
|
|
- CONNECT
|
|
|
|
|
- UPDATE
|
|
|
|
|
- DELETE
|
|
|
|
|
type: string
|
|
|
|
|
type: array
|
2022-11-08 14:12:35 +05:30
|
|
|
selector:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
Selector is a label selector. Label keys and values in `matchLabels` support the wildcard
|
|
|
|
|
characters `*` (matches zero or many characters) and `?` (matches one character).
|
|
|
|
|
Wildcards allows writing label selectors like ["storage.k8s.io/*": "*"]. Note that
|
|
|
|
|
using ["*" : "*"] matches any key and value but does not match an empty label set.
|
2022-11-08 14:12:35 +05:30
|
|
|
properties:
|
|
|
|
|
matchExpressions:
|
|
|
|
|
description: matchExpressions is a list of label
|
|
|
|
|
selector requirements. The requirements are ANDed.
|
|
|
|
|
items:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
A label selector requirement is a selector that contains values, a key, and an operator that
|
|
|
|
|
relates the key and values.
|
2022-11-08 14:12:35 +05:30
|
|
|
properties:
|
|
|
|
|
key:
|
|
|
|
|
description: key is the label key that the
|
|
|
|
|
selector applies to.
|
|
|
|
|
type: string
|
|
|
|
|
operator:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
operator represents a key's relationship to a set of values.
|
|
|
|
|
Valid operators are In, NotIn, Exists and DoesNotExist.
|
2022-11-08 14:12:35 +05:30
|
|
|
type: string
|
|
|
|
|
values:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
values is an array of string values. If the operator is In or NotIn,
|
|
|
|
|
the values array must be non-empty. If the operator is Exists or DoesNotExist,
|
|
|
|
|
the values array must be empty. This array is replaced during a strategic
|
|
|
|
|
merge patch.
|
2022-11-08 14:12:35 +05:30
|
|
|
items:
|
|
|
|
|
type: string
|
|
|
|
|
type: array
|
2024-04-24 14:07:59 +08:00
|
|
|
x-kubernetes-list-type: atomic
|
2022-11-08 14:12:35 +05:30
|
|
|
required:
|
|
|
|
|
- key
|
|
|
|
|
- operator
|
|
|
|
|
type: object
|
|
|
|
|
type: array
|
2024-04-24 14:07:59 +08:00
|
|
|
x-kubernetes-list-type: atomic
|
2022-11-08 14:12:35 +05:30
|
|
|
matchLabels:
|
|
|
|
|
additionalProperties:
|
|
|
|
|
type: string
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels
|
|
|
|
|
map is equivalent to an element of matchExpressions, whose key field is "key", the
|
|
|
|
|
operator is "In", and the values array contains only "value". The requirements are ANDed.
|
2022-11-08 14:12:35 +05:30
|
|
|
type: object
|
|
|
|
|
type: object
|
|
|
|
|
x-kubernetes-map-type: atomic
|
|
|
|
|
type: object
|
|
|
|
|
roles:
|
|
|
|
|
description: Roles is the list of namespaced role names
|
|
|
|
|
for the user.
|
|
|
|
|
items:
|
|
|
|
|
type: string
|
|
|
|
|
type: array
|
|
|
|
|
subjects:
|
|
|
|
|
description: Subjects is the list of subject names like
|
|
|
|
|
users, user groups, and service accounts.
|
|
|
|
|
items:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
Subject contains a reference to the object or user identities a role binding applies to. This can either hold a direct API object reference,
|
|
|
|
|
or a value for non-objects such as user and group names.
|
2022-11-08 14:12:35 +05:30
|
|
|
properties:
|
|
|
|
|
apiGroup:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
APIGroup holds the API group of the referenced subject.
|
|
|
|
|
Defaults to "" for ServiceAccount subjects.
|
|
|
|
|
Defaults to "rbac.authorization.k8s.io" for User and Group subjects.
|
2022-11-08 14:12:35 +05:30
|
|
|
type: string
|
|
|
|
|
kind:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
Kind of object being referenced. Values defined by this API group are "User", "Group", and "ServiceAccount".
|
|
|
|
|
If the Authorizer does not recognized the kind value, the Authorizer should report an error.
|
2022-11-08 14:12:35 +05:30
|
|
|
type: string
|
|
|
|
|
name:
|
|
|
|
|
description: Name of the object being referenced.
|
|
|
|
|
type: string
|
|
|
|
|
namespace:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
Namespace of the referenced object. If the object kind is non-namespace, such as "User" or "Group", and this value is not empty
|
|
|
|
|
the Authorizer should report an error.
|
2022-11-08 14:12:35 +05:30
|
|
|
type: string
|
|
|
|
|
required:
|
|
|
|
|
- kind
|
|
|
|
|
- name
|
|
|
|
|
type: object
|
|
|
|
|
x-kubernetes-map-type: atomic
|
|
|
|
|
type: array
|
|
|
|
|
type: object
|
|
|
|
|
type: array
|
|
|
|
|
any:
|
|
|
|
|
description: Any allows specifying resources which will be ORed
|
|
|
|
|
items:
|
|
|
|
|
description: ResourceFilter allow users to "AND" or "OR" between
|
|
|
|
|
resources
|
|
|
|
|
properties:
|
|
|
|
|
clusterRoles:
|
|
|
|
|
description: ClusterRoles is the list of cluster-wide role
|
|
|
|
|
names for the user.
|
|
|
|
|
items:
|
|
|
|
|
type: string
|
|
|
|
|
type: array
|
|
|
|
|
resources:
|
|
|
|
|
description: ResourceDescription contains information about
|
|
|
|
|
the resource being created or modified.
|
2024-09-04 11:02:57 +02:00
|
|
|
not:
|
|
|
|
|
required:
|
|
|
|
|
- name
|
|
|
|
|
- names
|
2022-11-08 14:12:35 +05:30
|
|
|
properties:
|
|
|
|
|
annotations:
|
|
|
|
|
additionalProperties:
|
|
|
|
|
type: string
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
Annotations is a map of annotations (key-value pairs of type string). Annotation keys
|
|
|
|
|
and values support the wildcard characters "*" (matches zero or many characters) and
|
|
|
|
|
"?" (matches at least one character).
|
2022-11-08 14:12:35 +05:30
|
|
|
type: object
|
|
|
|
|
kinds:
|
|
|
|
|
description: Kinds is a list of resource kinds.
|
|
|
|
|
items:
|
|
|
|
|
type: string
|
|
|
|
|
type: array
|
|
|
|
|
name:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
Name is the name of the resource. The name supports wildcard characters
|
|
|
|
|
"*" (matches zero or many characters) and "?" (at least one character).
|
|
|
|
|
NOTE: "Name" is being deprecated in favor of "Names".
|
2022-11-08 14:12:35 +05:30
|
|
|
type: string
|
|
|
|
|
names:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
Names are the names of the resources. Each name supports wildcard characters
|
|
|
|
|
"*" (matches zero or many characters) and "?" (at least one character).
|
2022-11-08 14:12:35 +05:30
|
|
|
items:
|
|
|
|
|
type: string
|
|
|
|
|
type: array
|
|
|
|
|
namespaceSelector:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
NamespaceSelector is a label selector for the resource namespace. Label keys and values
|
|
|
|
|
in `matchLabels` support the wildcard characters `*` (matches zero or many characters)
|
|
|
|
|
and `?` (matches one character).Wildcards allows writing label selectors like
|
|
|
|
|
["storage.k8s.io/*": "*"]. Note that using ["*" : "*"] matches any key and value but
|
|
|
|
|
does not match an empty label set.
|
2022-11-08 14:12:35 +05:30
|
|
|
properties:
|
|
|
|
|
matchExpressions:
|
|
|
|
|
description: matchExpressions is a list of label
|
|
|
|
|
selector requirements. The requirements are ANDed.
|
|
|
|
|
items:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
A label selector requirement is a selector that contains values, a key, and an operator that
|
|
|
|
|
relates the key and values.
|
2022-11-08 14:12:35 +05:30
|
|
|
properties:
|
|
|
|
|
key:
|
|
|
|
|
description: key is the label key that the
|
|
|
|
|
selector applies to.
|
|
|
|
|
type: string
|
|
|
|
|
operator:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
operator represents a key's relationship to a set of values.
|
|
|
|
|
Valid operators are In, NotIn, Exists and DoesNotExist.
|
2022-11-08 14:12:35 +05:30
|
|
|
type: string
|
|
|
|
|
values:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
values is an array of string values. If the operator is In or NotIn,
|
|
|
|
|
the values array must be non-empty. If the operator is Exists or DoesNotExist,
|
|
|
|
|
the values array must be empty. This array is replaced during a strategic
|
|
|
|
|
merge patch.
|
2022-11-08 14:12:35 +05:30
|
|
|
items:
|
|
|
|
|
type: string
|
|
|
|
|
type: array
|
2024-04-24 14:07:59 +08:00
|
|
|
x-kubernetes-list-type: atomic
|
2022-11-08 14:12:35 +05:30
|
|
|
required:
|
|
|
|
|
- key
|
|
|
|
|
- operator
|
|
|
|
|
type: object
|
|
|
|
|
type: array
|
2024-04-24 14:07:59 +08:00
|
|
|
x-kubernetes-list-type: atomic
|
2022-11-08 14:12:35 +05:30
|
|
|
matchLabels:
|
|
|
|
|
additionalProperties:
|
|
|
|
|
type: string
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels
|
|
|
|
|
map is equivalent to an element of matchExpressions, whose key field is "key", the
|
|
|
|
|
operator is "In", and the values array contains only "value". The requirements are ANDed.
|
2022-11-08 14:12:35 +05:30
|
|
|
type: object
|
|
|
|
|
type: object
|
|
|
|
|
x-kubernetes-map-type: atomic
|
|
|
|
|
namespaces:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
Namespaces is a list of namespaces names. Each name supports wildcard characters
|
|
|
|
|
"*" (matches zero or many characters) and "?" (at least one character).
|
2022-11-08 14:12:35 +05:30
|
|
|
items:
|
|
|
|
|
type: string
|
|
|
|
|
type: array
|
2023-03-29 06:22:21 +02:00
|
|
|
operations:
|
|
|
|
|
description: Operations can contain values ["CREATE,
|
|
|
|
|
"UPDATE", "CONNECT", "DELETE"], which are used to
|
|
|
|
|
match a specific action.
|
|
|
|
|
items:
|
|
|
|
|
description: AdmissionOperation can have one of the
|
|
|
|
|
values CREATE, UPDATE, CONNECT, DELETE, which are
|
|
|
|
|
used to match a specific action.
|
|
|
|
|
enum:
|
|
|
|
|
- CREATE
|
|
|
|
|
- CONNECT
|
|
|
|
|
- UPDATE
|
|
|
|
|
- DELETE
|
|
|
|
|
type: string
|
|
|
|
|
type: array
|
2022-11-08 14:12:35 +05:30
|
|
|
selector:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
Selector is a label selector. Label keys and values in `matchLabels` support the wildcard
|
|
|
|
|
characters `*` (matches zero or many characters) and `?` (matches one character).
|
|
|
|
|
Wildcards allows writing label selectors like ["storage.k8s.io/*": "*"]. Note that
|
|
|
|
|
using ["*" : "*"] matches any key and value but does not match an empty label set.
|
2022-11-08 14:12:35 +05:30
|
|
|
properties:
|
|
|
|
|
matchExpressions:
|
|
|
|
|
description: matchExpressions is a list of label
|
|
|
|
|
selector requirements. The requirements are ANDed.
|
|
|
|
|
items:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
A label selector requirement is a selector that contains values, a key, and an operator that
|
|
|
|
|
relates the key and values.
|
2022-11-08 14:12:35 +05:30
|
|
|
properties:
|
|
|
|
|
key:
|
|
|
|
|
description: key is the label key that the
|
|
|
|
|
selector applies to.
|
|
|
|
|
type: string
|
|
|
|
|
operator:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
operator represents a key's relationship to a set of values.
|
|
|
|
|
Valid operators are In, NotIn, Exists and DoesNotExist.
|
2022-11-08 14:12:35 +05:30
|
|
|
type: string
|
|
|
|
|
values:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
values is an array of string values. If the operator is In or NotIn,
|
|
|
|
|
the values array must be non-empty. If the operator is Exists or DoesNotExist,
|
|
|
|
|
the values array must be empty. This array is replaced during a strategic
|
|
|
|
|
merge patch.
|
2022-11-08 14:12:35 +05:30
|
|
|
items:
|
|
|
|
|
type: string
|
|
|
|
|
type: array
|
2024-04-24 14:07:59 +08:00
|
|
|
x-kubernetes-list-type: atomic
|
2022-11-08 14:12:35 +05:30
|
|
|
required:
|
|
|
|
|
- key
|
|
|
|
|
- operator
|
|
|
|
|
type: object
|
|
|
|
|
type: array
|
2024-04-24 14:07:59 +08:00
|
|
|
x-kubernetes-list-type: atomic
|
2022-11-08 14:12:35 +05:30
|
|
|
matchLabels:
|
|
|
|
|
additionalProperties:
|
|
|
|
|
type: string
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels
|
|
|
|
|
map is equivalent to an element of matchExpressions, whose key field is "key", the
|
|
|
|
|
operator is "In", and the values array contains only "value". The requirements are ANDed.
|
2022-11-08 14:12:35 +05:30
|
|
|
type: object
|
|
|
|
|
type: object
|
|
|
|
|
x-kubernetes-map-type: atomic
|
|
|
|
|
type: object
|
|
|
|
|
roles:
|
|
|
|
|
description: Roles is the list of namespaced role names
|
|
|
|
|
for the user.
|
|
|
|
|
items:
|
|
|
|
|
type: string
|
|
|
|
|
type: array
|
|
|
|
|
subjects:
|
|
|
|
|
description: Subjects is the list of subject names like
|
|
|
|
|
users, user groups, and service accounts.
|
|
|
|
|
items:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
Subject contains a reference to the object or user identities a role binding applies to. This can either hold a direct API object reference,
|
|
|
|
|
or a value for non-objects such as user and group names.
|
2022-11-08 14:12:35 +05:30
|
|
|
properties:
|
|
|
|
|
apiGroup:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
APIGroup holds the API group of the referenced subject.
|
|
|
|
|
Defaults to "" for ServiceAccount subjects.
|
|
|
|
|
Defaults to "rbac.authorization.k8s.io" for User and Group subjects.
|
2022-11-08 14:12:35 +05:30
|
|
|
type: string
|
|
|
|
|
kind:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
Kind of object being referenced. Values defined by this API group are "User", "Group", and "ServiceAccount".
|
|
|
|
|
If the Authorizer does not recognized the kind value, the Authorizer should report an error.
|
2022-11-08 14:12:35 +05:30
|
|
|
type: string
|
|
|
|
|
name:
|
|
|
|
|
description: Name of the object being referenced.
|
|
|
|
|
type: string
|
|
|
|
|
namespace:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
Namespace of the referenced object. If the object kind is non-namespace, such as "User" or "Group", and this value is not empty
|
|
|
|
|
the Authorizer should report an error.
|
2022-11-08 14:12:35 +05:30
|
|
|
type: string
|
|
|
|
|
required:
|
|
|
|
|
- kind
|
|
|
|
|
- name
|
|
|
|
|
type: object
|
|
|
|
|
x-kubernetes-map-type: atomic
|
|
|
|
|
type: array
|
|
|
|
|
type: object
|
|
|
|
|
type: array
|
|
|
|
|
type: object
|
|
|
|
|
match:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
MatchResources defines when cleanuppolicy should be applied. The match
|
|
|
|
|
criteria can include resource information (e.g. kind, name, namespace, labels)
|
|
|
|
|
and admission review request information like the user name or role.
|
|
|
|
|
At least one kind is required.
|
2024-09-04 20:00:50 +02:00
|
|
|
not:
|
|
|
|
|
required:
|
|
|
|
|
- any
|
|
|
|
|
- all
|
2022-11-08 14:12:35 +05:30
|
|
|
properties:
|
|
|
|
|
all:
|
|
|
|
|
description: All allows specifying resources which will be ANDed
|
|
|
|
|
items:
|
|
|
|
|
description: ResourceFilter allow users to "AND" or "OR" between
|
|
|
|
|
resources
|
|
|
|
|
properties:
|
|
|
|
|
clusterRoles:
|
|
|
|
|
description: ClusterRoles is the list of cluster-wide role
|
|
|
|
|
names for the user.
|
|
|
|
|
items:
|
|
|
|
|
type: string
|
|
|
|
|
type: array
|
|
|
|
|
resources:
|
|
|
|
|
description: ResourceDescription contains information about
|
|
|
|
|
the resource being created or modified.
|
2024-09-04 11:02:57 +02:00
|
|
|
not:
|
|
|
|
|
required:
|
|
|
|
|
- name
|
|
|
|
|
- names
|
2022-11-08 14:12:35 +05:30
|
|
|
properties:
|
|
|
|
|
annotations:
|
|
|
|
|
additionalProperties:
|
|
|
|
|
type: string
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
Annotations is a map of annotations (key-value pairs of type string). Annotation keys
|
|
|
|
|
and values support the wildcard characters "*" (matches zero or many characters) and
|
|
|
|
|
"?" (matches at least one character).
|
2022-11-08 14:12:35 +05:30
|
|
|
type: object
|
|
|
|
|
kinds:
|
|
|
|
|
description: Kinds is a list of resource kinds.
|
|
|
|
|
items:
|
|
|
|
|
type: string
|
|
|
|
|
type: array
|
|
|
|
|
name:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
Name is the name of the resource. The name supports wildcard characters
|
|
|
|
|
"*" (matches zero or many characters) and "?" (at least one character).
|
|
|
|
|
NOTE: "Name" is being deprecated in favor of "Names".
|
2022-11-08 14:12:35 +05:30
|
|
|
type: string
|
|
|
|
|
names:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
Names are the names of the resources. Each name supports wildcard characters
|
|
|
|
|
"*" (matches zero or many characters) and "?" (at least one character).
|
2022-11-08 14:12:35 +05:30
|
|
|
items:
|
|
|
|
|
type: string
|
|
|
|
|
type: array
|
|
|
|
|
namespaceSelector:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
NamespaceSelector is a label selector for the resource namespace. Label keys and values
|
|
|
|
|
in `matchLabels` support the wildcard characters `*` (matches zero or many characters)
|
|
|
|
|
and `?` (matches one character).Wildcards allows writing label selectors like
|
|
|
|
|
["storage.k8s.io/*": "*"]. Note that using ["*" : "*"] matches any key and value but
|
|
|
|
|
does not match an empty label set.
|
2022-11-08 14:12:35 +05:30
|
|
|
properties:
|
|
|
|
|
matchExpressions:
|
|
|
|
|
description: matchExpressions is a list of label
|
|
|
|
|
selector requirements. The requirements are ANDed.
|
|
|
|
|
items:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
A label selector requirement is a selector that contains values, a key, and an operator that
|
|
|
|
|
relates the key and values.
|
2022-11-08 14:12:35 +05:30
|
|
|
properties:
|
|
|
|
|
key:
|
|
|
|
|
description: key is the label key that the
|
|
|
|
|
selector applies to.
|
|
|
|
|
type: string
|
|
|
|
|
operator:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
operator represents a key's relationship to a set of values.
|
|
|
|
|
Valid operators are In, NotIn, Exists and DoesNotExist.
|
2022-11-08 14:12:35 +05:30
|
|
|
type: string
|
|
|
|
|
values:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
values is an array of string values. If the operator is In or NotIn,
|
|
|
|
|
the values array must be non-empty. If the operator is Exists or DoesNotExist,
|
|
|
|
|
the values array must be empty. This array is replaced during a strategic
|
|
|
|
|
merge patch.
|
2022-11-08 14:12:35 +05:30
|
|
|
items:
|
|
|
|
|
type: string
|
|
|
|
|
type: array
|
2024-04-24 14:07:59 +08:00
|
|
|
x-kubernetes-list-type: atomic
|
2022-11-08 14:12:35 +05:30
|
|
|
required:
|
|
|
|
|
- key
|
|
|
|
|
- operator
|
|
|
|
|
type: object
|
|
|
|
|
type: array
|
2024-04-24 14:07:59 +08:00
|
|
|
x-kubernetes-list-type: atomic
|
2022-11-08 14:12:35 +05:30
|
|
|
matchLabels:
|
|
|
|
|
additionalProperties:
|
|
|
|
|
type: string
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels
|
|
|
|
|
map is equivalent to an element of matchExpressions, whose key field is "key", the
|
|
|
|
|
operator is "In", and the values array contains only "value". The requirements are ANDed.
|
2022-11-08 14:12:35 +05:30
|
|
|
type: object
|
|
|
|
|
type: object
|
|
|
|
|
x-kubernetes-map-type: atomic
|
|
|
|
|
namespaces:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
Namespaces is a list of namespaces names. Each name supports wildcard characters
|
|
|
|
|
"*" (matches zero or many characters) and "?" (at least one character).
|
2022-11-08 14:12:35 +05:30
|
|
|
items:
|
|
|
|
|
type: string
|
|
|
|
|
type: array
|
2023-03-29 06:22:21 +02:00
|
|
|
operations:
|
|
|
|
|
description: Operations can contain values ["CREATE,
|
|
|
|
|
"UPDATE", "CONNECT", "DELETE"], which are used to
|
|
|
|
|
match a specific action.
|
|
|
|
|
items:
|
|
|
|
|
description: AdmissionOperation can have one of the
|
|
|
|
|
values CREATE, UPDATE, CONNECT, DELETE, which are
|
|
|
|
|
used to match a specific action.
|
|
|
|
|
enum:
|
|
|
|
|
- CREATE
|
|
|
|
|
- CONNECT
|
|
|
|
|
- UPDATE
|
|
|
|
|
- DELETE
|
|
|
|
|
type: string
|
|
|
|
|
type: array
|
2022-11-08 14:12:35 +05:30
|
|
|
selector:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
Selector is a label selector. Label keys and values in `matchLabels` support the wildcard
|
|
|
|
|
characters `*` (matches zero or many characters) and `?` (matches one character).
|
|
|
|
|
Wildcards allows writing label selectors like ["storage.k8s.io/*": "*"]. Note that
|
|
|
|
|
using ["*" : "*"] matches any key and value but does not match an empty label set.
|
2022-11-08 14:12:35 +05:30
|
|
|
properties:
|
|
|
|
|
matchExpressions:
|
|
|
|
|
description: matchExpressions is a list of label
|
|
|
|
|
selector requirements. The requirements are ANDed.
|
|
|
|
|
items:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
A label selector requirement is a selector that contains values, a key, and an operator that
|
|
|
|
|
relates the key and values.
|
2022-11-08 14:12:35 +05:30
|
|
|
properties:
|
|
|
|
|
key:
|
|
|
|
|
description: key is the label key that the
|
|
|
|
|
selector applies to.
|
|
|
|
|
type: string
|
|
|
|
|
operator:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
operator represents a key's relationship to a set of values.
|
|
|
|
|
Valid operators are In, NotIn, Exists and DoesNotExist.
|
2022-11-08 14:12:35 +05:30
|
|
|
type: string
|
|
|
|
|
values:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
values is an array of string values. If the operator is In or NotIn,
|
|
|
|
|
the values array must be non-empty. If the operator is Exists or DoesNotExist,
|
|
|
|
|
the values array must be empty. This array is replaced during a strategic
|
|
|
|
|
merge patch.
|
2022-11-08 14:12:35 +05:30
|
|
|
items:
|
|
|
|
|
type: string
|
|
|
|
|
type: array
|
2024-04-24 14:07:59 +08:00
|
|
|
x-kubernetes-list-type: atomic
|
2022-11-08 14:12:35 +05:30
|
|
|
required:
|
|
|
|
|
- key
|
|
|
|
|
- operator
|
|
|
|
|
type: object
|
|
|
|
|
type: array
|
2024-04-24 14:07:59 +08:00
|
|
|
x-kubernetes-list-type: atomic
|
2022-11-08 14:12:35 +05:30
|
|
|
matchLabels:
|
|
|
|
|
additionalProperties:
|
|
|
|
|
type: string
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels
|
|
|
|
|
map is equivalent to an element of matchExpressions, whose key field is "key", the
|
|
|
|
|
operator is "In", and the values array contains only "value". The requirements are ANDed.
|
2022-11-08 14:12:35 +05:30
|
|
|
type: object
|
|
|
|
|
type: object
|
|
|
|
|
x-kubernetes-map-type: atomic
|
|
|
|
|
type: object
|
|
|
|
|
roles:
|
|
|
|
|
description: Roles is the list of namespaced role names
|
|
|
|
|
for the user.
|
|
|
|
|
items:
|
|
|
|
|
type: string
|
|
|
|
|
type: array
|
|
|
|
|
subjects:
|
|
|
|
|
description: Subjects is the list of subject names like
|
|
|
|
|
users, user groups, and service accounts.
|
|
|
|
|
items:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
Subject contains a reference to the object or user identities a role binding applies to. This can either hold a direct API object reference,
|
|
|
|
|
or a value for non-objects such as user and group names.
|
2022-11-08 14:12:35 +05:30
|
|
|
properties:
|
|
|
|
|
apiGroup:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
APIGroup holds the API group of the referenced subject.
|
|
|
|
|
Defaults to "" for ServiceAccount subjects.
|
|
|
|
|
Defaults to "rbac.authorization.k8s.io" for User and Group subjects.
|
2022-11-08 14:12:35 +05:30
|
|
|
type: string
|
|
|
|
|
kind:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
Kind of object being referenced. Values defined by this API group are "User", "Group", and "ServiceAccount".
|
|
|
|
|
If the Authorizer does not recognized the kind value, the Authorizer should report an error.
|
2022-11-08 14:12:35 +05:30
|
|
|
type: string
|
|
|
|
|
name:
|
|
|
|
|
description: Name of the object being referenced.
|
|
|
|
|
type: string
|
|
|
|
|
namespace:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
Namespace of the referenced object. If the object kind is non-namespace, such as "User" or "Group", and this value is not empty
|
|
|
|
|
the Authorizer should report an error.
|
2022-11-08 14:12:35 +05:30
|
|
|
type: string
|
|
|
|
|
required:
|
|
|
|
|
- kind
|
|
|
|
|
- name
|
|
|
|
|
type: object
|
|
|
|
|
x-kubernetes-map-type: atomic
|
|
|
|
|
type: array
|
|
|
|
|
type: object
|
|
|
|
|
type: array
|
|
|
|
|
any:
|
|
|
|
|
description: Any allows specifying resources which will be ORed
|
|
|
|
|
items:
|
|
|
|
|
description: ResourceFilter allow users to "AND" or "OR" between
|
|
|
|
|
resources
|
|
|
|
|
properties:
|
|
|
|
|
clusterRoles:
|
|
|
|
|
description: ClusterRoles is the list of cluster-wide role
|
|
|
|
|
names for the user.
|
|
|
|
|
items:
|
|
|
|
|
type: string
|
|
|
|
|
type: array
|
|
|
|
|
resources:
|
|
|
|
|
description: ResourceDescription contains information about
|
|
|
|
|
the resource being created or modified.
|
2024-09-04 11:02:57 +02:00
|
|
|
not:
|
|
|
|
|
required:
|
|
|
|
|
- name
|
|
|
|
|
- names
|
2022-11-08 14:12:35 +05:30
|
|
|
properties:
|
|
|
|
|
annotations:
|
|
|
|
|
additionalProperties:
|
|
|
|
|
type: string
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
Annotations is a map of annotations (key-value pairs of type string). Annotation keys
|
|
|
|
|
and values support the wildcard characters "*" (matches zero or many characters) and
|
|
|
|
|
"?" (matches at least one character).
|
2022-11-08 14:12:35 +05:30
|
|
|
type: object
|
|
|
|
|
kinds:
|
|
|
|
|
description: Kinds is a list of resource kinds.
|
|
|
|
|
items:
|
|
|
|
|
type: string
|
|
|
|
|
type: array
|
|
|
|
|
name:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
Name is the name of the resource. The name supports wildcard characters
|
|
|
|
|
"*" (matches zero or many characters) and "?" (at least one character).
|
|
|
|
|
NOTE: "Name" is being deprecated in favor of "Names".
|
2022-11-08 14:12:35 +05:30
|
|
|
type: string
|
|
|
|
|
names:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
Names are the names of the resources. Each name supports wildcard characters
|
|
|
|
|
"*" (matches zero or many characters) and "?" (at least one character).
|
2022-11-08 14:12:35 +05:30
|
|
|
items:
|
|
|
|
|
type: string
|
|
|
|
|
type: array
|
|
|
|
|
namespaceSelector:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
NamespaceSelector is a label selector for the resource namespace. Label keys and values
|
|
|
|
|
in `matchLabels` support the wildcard characters `*` (matches zero or many characters)
|
|
|
|
|
and `?` (matches one character).Wildcards allows writing label selectors like
|
|
|
|
|
["storage.k8s.io/*": "*"]. Note that using ["*" : "*"] matches any key and value but
|
|
|
|
|
does not match an empty label set.
|
2022-11-08 14:12:35 +05:30
|
|
|
properties:
|
|
|
|
|
matchExpressions:
|
|
|
|
|
description: matchExpressions is a list of label
|
|
|
|
|
selector requirements. The requirements are ANDed.
|
|
|
|
|
items:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
A label selector requirement is a selector that contains values, a key, and an operator that
|
|
|
|
|
relates the key and values.
|
2022-11-08 14:12:35 +05:30
|
|
|
properties:
|
|
|
|
|
key:
|
|
|
|
|
description: key is the label key that the
|
|
|
|
|
selector applies to.
|
|
|
|
|
type: string
|
|
|
|
|
operator:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
operator represents a key's relationship to a set of values.
|
|
|
|
|
Valid operators are In, NotIn, Exists and DoesNotExist.
|
2022-11-08 14:12:35 +05:30
|
|
|
type: string
|
|
|
|
|
values:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
values is an array of string values. If the operator is In or NotIn,
|
|
|
|
|
the values array must be non-empty. If the operator is Exists or DoesNotExist,
|
|
|
|
|
the values array must be empty. This array is replaced during a strategic
|
|
|
|
|
merge patch.
|
2022-11-08 14:12:35 +05:30
|
|
|
items:
|
|
|
|
|
type: string
|
|
|
|
|
type: array
|
2024-04-24 14:07:59 +08:00
|
|
|
x-kubernetes-list-type: atomic
|
2022-11-08 14:12:35 +05:30
|
|
|
required:
|
|
|
|
|
- key
|
|
|
|
|
- operator
|
|
|
|
|
type: object
|
|
|
|
|
type: array
|
2024-04-24 14:07:59 +08:00
|
|
|
x-kubernetes-list-type: atomic
|
2022-11-08 14:12:35 +05:30
|
|
|
matchLabels:
|
|
|
|
|
additionalProperties:
|
|
|
|
|
type: string
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels
|
|
|
|
|
map is equivalent to an element of matchExpressions, whose key field is "key", the
|
|
|
|
|
operator is "In", and the values array contains only "value". The requirements are ANDed.
|
2022-11-08 14:12:35 +05:30
|
|
|
type: object
|
|
|
|
|
type: object
|
|
|
|
|
x-kubernetes-map-type: atomic
|
|
|
|
|
namespaces:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
Namespaces is a list of namespaces names. Each name supports wildcard characters
|
|
|
|
|
"*" (matches zero or many characters) and "?" (at least one character).
|
2022-11-08 14:12:35 +05:30
|
|
|
items:
|
|
|
|
|
type: string
|
|
|
|
|
type: array
|
2023-03-29 06:22:21 +02:00
|
|
|
operations:
|
|
|
|
|
description: Operations can contain values ["CREATE,
|
|
|
|
|
"UPDATE", "CONNECT", "DELETE"], which are used to
|
|
|
|
|
match a specific action.
|
|
|
|
|
items:
|
|
|
|
|
description: AdmissionOperation can have one of the
|
|
|
|
|
values CREATE, UPDATE, CONNECT, DELETE, which are
|
|
|
|
|
used to match a specific action.
|
|
|
|
|
enum:
|
|
|
|
|
- CREATE
|
|
|
|
|
- CONNECT
|
|
|
|
|
- UPDATE
|
|
|
|
|
- DELETE
|
|
|
|
|
type: string
|
|
|
|
|
type: array
|
2022-11-08 14:12:35 +05:30
|
|
|
selector:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
Selector is a label selector. Label keys and values in `matchLabels` support the wildcard
|
|
|
|
|
characters `*` (matches zero or many characters) and `?` (matches one character).
|
|
|
|
|
Wildcards allows writing label selectors like ["storage.k8s.io/*": "*"]. Note that
|
|
|
|
|
using ["*" : "*"] matches any key and value but does not match an empty label set.
|
2022-11-08 14:12:35 +05:30
|
|
|
properties:
|
|
|
|
|
matchExpressions:
|
|
|
|
|
description: matchExpressions is a list of label
|
|
|
|
|
selector requirements. The requirements are ANDed.
|
|
|
|
|
items:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
A label selector requirement is a selector that contains values, a key, and an operator that
|
|
|
|
|
relates the key and values.
|
2022-11-08 14:12:35 +05:30
|
|
|
properties:
|
|
|
|
|
key:
|
|
|
|
|
description: key is the label key that the
|
|
|
|
|
selector applies to.
|
|
|
|
|
type: string
|
|
|
|
|
operator:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
operator represents a key's relationship to a set of values.
|
|
|
|
|
Valid operators are In, NotIn, Exists and DoesNotExist.
|
2022-11-08 14:12:35 +05:30
|
|
|
type: string
|
|
|
|
|
values:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
values is an array of string values. If the operator is In or NotIn,
|
|
|
|
|
the values array must be non-empty. If the operator is Exists or DoesNotExist,
|
|
|
|
|
the values array must be empty. This array is replaced during a strategic
|
|
|
|
|
merge patch.
|
2022-11-08 14:12:35 +05:30
|
|
|
items:
|
|
|
|
|
type: string
|
|
|
|
|
type: array
|
2024-04-24 14:07:59 +08:00
|
|
|
x-kubernetes-list-type: atomic
|
2022-11-08 14:12:35 +05:30
|
|
|
required:
|
|
|
|
|
- key
|
|
|
|
|
- operator
|
|
|
|
|
type: object
|
|
|
|
|
type: array
|
2024-04-24 14:07:59 +08:00
|
|
|
x-kubernetes-list-type: atomic
|
2022-11-08 14:12:35 +05:30
|
|
|
matchLabels:
|
|
|
|
|
additionalProperties:
|
|
|
|
|
type: string
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels
|
|
|
|
|
map is equivalent to an element of matchExpressions, whose key field is "key", the
|
|
|
|
|
operator is "In", and the values array contains only "value". The requirements are ANDed.
|
2022-11-08 14:12:35 +05:30
|
|
|
type: object
|
|
|
|
|
type: object
|
|
|
|
|
x-kubernetes-map-type: atomic
|
|
|
|
|
type: object
|
|
|
|
|
roles:
|
|
|
|
|
description: Roles is the list of namespaced role names
|
|
|
|
|
for the user.
|
|
|
|
|
items:
|
|
|
|
|
type: string
|
|
|
|
|
type: array
|
|
|
|
|
subjects:
|
|
|
|
|
description: Subjects is the list of subject names like
|
|
|
|
|
users, user groups, and service accounts.
|
|
|
|
|
items:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
Subject contains a reference to the object or user identities a role binding applies to. This can either hold a direct API object reference,
|
|
|
|
|
or a value for non-objects such as user and group names.
|
2022-11-08 14:12:35 +05:30
|
|
|
properties:
|
|
|
|
|
apiGroup:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
APIGroup holds the API group of the referenced subject.
|
|
|
|
|
Defaults to "" for ServiceAccount subjects.
|
|
|
|
|
Defaults to "rbac.authorization.k8s.io" for User and Group subjects.
|
2022-11-08 14:12:35 +05:30
|
|
|
type: string
|
|
|
|
|
kind:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
Kind of object being referenced. Values defined by this API group are "User", "Group", and "ServiceAccount".
|
|
|
|
|
If the Authorizer does not recognized the kind value, the Authorizer should report an error.
|
2022-11-08 14:12:35 +05:30
|
|
|
type: string
|
|
|
|
|
name:
|
|
|
|
|
description: Name of the object being referenced.
|
|
|
|
|
type: string
|
|
|
|
|
namespace:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
Namespace of the referenced object. If the object kind is non-namespace, such as "User" or "Group", and this value is not empty
|
|
|
|
|
the Authorizer should report an error.
|
2022-11-08 14:12:35 +05:30
|
|
|
type: string
|
|
|
|
|
required:
|
|
|
|
|
- kind
|
|
|
|
|
- name
|
|
|
|
|
type: object
|
|
|
|
|
x-kubernetes-map-type: atomic
|
|
|
|
|
type: array
|
|
|
|
|
type: object
|
|
|
|
|
type: array
|
|
|
|
|
type: object
|
|
|
|
|
schedule:
|
|
|
|
|
description: The schedule in Cron format
|
|
|
|
|
type: string
|
|
|
|
|
required:
|
2024-09-09 16:24:57 +02:00
|
|
|
- match
|
2022-11-08 14:12:35 +05:30
|
|
|
- schedule
|
|
|
|
|
type: object
|
|
|
|
|
status:
|
|
|
|
|
description: Status contains policy runtime data.
|
|
|
|
|
properties:
|
|
|
|
|
conditions:
|
|
|
|
|
items:
|
2024-08-28 08:23:19 +02:00
|
|
|
description: Condition contains details for one aspect of the current
|
|
|
|
|
state of this API Resource.
|
2022-11-08 14:12:35 +05:30
|
|
|
properties:
|
|
|
|
|
lastTransitionTime:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
lastTransitionTime is the last time the condition transitioned from one status to another.
|
|
|
|
|
This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable.
|
2022-11-08 14:12:35 +05:30
|
|
|
format: date-time
|
|
|
|
|
type: string
|
|
|
|
|
message:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
message is a human readable message indicating details about the transition.
|
|
|
|
|
This may be an empty string.
|
2022-11-08 14:12:35 +05:30
|
|
|
maxLength: 32768
|
|
|
|
|
type: string
|
|
|
|
|
observedGeneration:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
observedGeneration represents the .metadata.generation that the condition was set based upon.
|
|
|
|
|
For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date
|
|
|
|
|
with respect to the current state of the instance.
|
2022-11-08 14:12:35 +05:30
|
|
|
format: int64
|
|
|
|
|
minimum: 0
|
|
|
|
|
type: integer
|
|
|
|
|
reason:
|
2024-03-28 14:03:17 +05:30
|
|
|
description: |-
|
|
|
|
|
reason contains a programmatic identifier indicating the reason for the condition's last transition.
|
|
|
|
|
Producers of specific condition types may define expected values and meanings for this field,
|
|
|
|
|
and whether the values are considered a guaranteed API.
|
|
|
|
|
The value should be a CamelCase string.
|
2022-11-08 14:12:35 +05:30
|
|
|
This field may not be empty.
|
|
|
|
|
maxLength: 1024
|
|
|
|
|
minLength: 1
|
|
|
|
|
pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$
|
|
|
|
|
type: string
|
|
|
|
|
status:
|
|
|
|
|
description: status of the condition, one of True, False, Unknown.
|
|
|
|
|
enum:
|
|
|
|
|
- "True"
|
|
|
|
|
- "False"
|
|
|
|
|
- Unknown
|
|
|
|
|
type: string
|
|
|
|
|
type:
|
2024-08-28 08:23:19 +02:00
|
|
|
description: type of condition in CamelCase or in foo.example.com/CamelCase.
|
2022-11-08 14:12:35 +05:30
|
|
|
maxLength: 316
|
|
|
|
|
pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
|
|
|
|
|
type: string
|
|
|
|
|
required:
|
|
|
|
|
- lastTransitionTime
|
|
|
|
|
- message
|
|
|
|
|
- reason
|
|
|
|
|
- status
|
|
|
|
|
- type
|
|
|
|
|
type: object
|
|
|
|
|
type: array
|
2023-09-26 13:02:17 +03:00
|
|
|
lastExecutionTime:
|
|
|
|
|
format: date-time
|
|
|
|
|
type: string
|
2022-11-08 14:12:35 +05:30
|
|
|
type: object
|
|
|
|
|
required:
|
|
|
|
|
- spec
|
|
|
|
|
type: object
|
|
|
|
|
served: true
|
2024-06-14 11:39:36 +02:00
|
|
|
storage: false
|
2022-11-08 14:12:35 +05:30
|
|
|
subresources:
|
|
|
|
|
status: {}
|
