mirrors/kyverno
mirrors/kyverno
1
0
Fork 0
mirror of https://github.com/kyverno/kyverno.git synced 2025-03-31 03:45:17 +00:00
Code Activity

chore: replace usage of v1beta1 with v1alpha1 for cel subrule ()

Browse source 
Signed-off-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
This commit is contained in:
Mariam Fahmy 2023-08-22 14:33:33 +03:00 • committed by GitHub
parent db2f47b8b5
commit 19b1944bc3
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
8 changed files with 149 additions and 257 deletions
api/kyverno/v1
common_types.gozz_generated.deepcopy.go
charts/kyverno/templates/crds
crds.yaml
config
crds
kyverno.io_clusterpolicies.yamlkyverno.io_policies.yaml
install-latest-testing.yaml
docs/user/crd
index.html
pkg/client/applyconfigurations/kyverno/v1
cel.go

14
api/kyverno/v1/common_types.go
View file

@ -7,7 +7,7 @@ import (
"github.com/kyverno/kyverno/pkg/engine/variables/regex"
"github.com/sigstore/k8s-manifest-sigstore/pkg/k8smanifest"
admissionv1 "k8s.io/api/admission/v1"
"k8s.io/api/admissionregistration/v1beta1"
"k8s.io/api/admissionregistration/v1alpha1"
"k8s.io/apiextensions-apiserver/pkg/apis/apiextensions"
apiextv1 "k8s.io/apiextensions-apiserver/pkg/apis/apiextensions/v1"
metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
@ -434,30 +434,30 @@ type PodSecurityStandard struct {
// CEL allows validation checks using the Common Expression Language (https://kubernetes.io/docs/reference/using-api/cel/).
type CEL struct {
// Expressions is a list of CELExpression types.
Expressions []v1beta1.Validation `json:"expressions,omitempty" yaml:"expressions,omitempty"`
Expressions []v1alpha1.Validation `json:"expressions,omitempty" yaml:"expressions,omitempty"`
// ParamKind is a tuple of Group Kind and Version.
// +optional
ParamKind *v1beta1.ParamKind `json:"paramKind,omitempty" yaml:"paramKind,omitempty"`
ParamKind *v1alpha1.ParamKind `json:"paramKind,omitempty" yaml:"paramKind,omitempty"`
// ParamRef references a parameter resource.
// +optional
ParamRef *v1beta1.ParamRef `json:"paramRef,omitempty" yaml:"paramRef,omitempty"`
ParamRef *v1alpha1.ParamRef `json:"paramRef,omitempty" yaml:"paramRef,omitempty"`
// AuditAnnotations contains CEL expressions which are used to produce audit annotations for the audit event of the API request.
// +optional
AuditAnnotations []v1beta1.AuditAnnotation `json:"auditAnnotations,omitempty" yaml:"auditAnnotations,omitempty"`
AuditAnnotations []v1alpha1.AuditAnnotation `json:"auditAnnotations,omitempty" yaml:"auditAnnotations,omitempty"`
}
func (c *CEL) HasParam() bool {
return c.ParamKind != nil && c.ParamRef != nil
}
func (c *CEL) GetParamKind() v1beta1.ParamKind {
func (c *CEL) GetParamKind() v1alpha1.ParamKind {
return *c.ParamKind
}
func (c *CEL) GetParamRef() v1beta1.ParamRef {
func (c *CEL) GetParamRef() v1alpha1.ParamRef {
return *c.ParamRef
}

10
api/kyverno/v1/zz_generated.deepcopy.go
View file

@ -24,7 +24,7 @@ package v1
import (
k8smanifest "github.com/sigstore/k8s-manifest-sigstore/pkg/k8smanifest"
admissionregistrationv1 "k8s.io/api/admissionregistration/v1"
v1beta1 "k8s.io/api/admissionregistration/v1beta1"
v1alpha1 "k8s.io/api/admissionregistration/v1alpha1"
rbacv1 "k8s.io/api/rbac/v1"
apiextensionsv1 "k8s.io/apiextensions-apiserver/pkg/apis/apiextensions/v1"
metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
@ -218,24 +218,24 @@ func (in *CEL) DeepCopyInto(out *CEL) {
*out = *in
if in.Expressions != nil {
in, out := &in.Expressions, &out.Expressions
*out = make([]v1beta1.Validation, len(*in))
*out = make([]v1alpha1.Validation, len(*in))
for i := range *in {
(*in)[i].DeepCopyInto(&(*out)[i])
}
}
if in.ParamKind != nil {
in, out := &in.ParamKind, &out.ParamKind
*out = new(v1beta1.ParamKind)
*out = new(v1alpha1.ParamKind)
**out = **in
}
if in.ParamRef != nil {
in, out := &in.ParamRef, &out.ParamRef
*out = new(v1beta1.ParamRef)
*out = new(v1alpha1.ParamRef)
(*in).DeepCopyInto(*out)
}
if in.AuditAnnotations != nil {
in, out := &in.AuditAnnotations, &out.AuditAnnotations
*out = make([]v1beta1.AuditAnnotation, len(*in))
*out = make([]v1alpha1.AuditAnnotation, len(*in))
copy(*out, *in)
}
return

116
charts/kyverno/templates/crds/crds.yaml
View file

@ -6421,14 +6421,10 @@ spec:
description: ParamRef references a parameter resource.
properties:
name:
description: "name is the name of the resource being
referenced. \n One of `name` or `selector` must
be set, but `name` and `selector` are mutually
exclusive properties. If one is set, the other
must be unset. \n A single parameter used for
all admission requests can be configured by setting
the `name` field, leaving `selector` blank, and
setting namespace if `paramKind` is namespace-scoped."
description: "`name` is the name of the resource
being referenced. \n `name` and `selector` are
mutually exclusive properties. If one is set,
the other must be unset."
type: string
namespace:
description: "namespace is the namespace of the
@ -6456,7 +6452,7 @@ spec:
binding. If set to `Deny`, then no matched parameters
will be subject to the `failurePolicy` of the
policy. \n Allowed values are `Allow` or `Deny`
\n Required"
Default to `Deny`"
type: string
selector:
description: "selector can be used to match multiple
@ -10733,15 +10729,10 @@ spec:
description: ParamRef references a parameter resource.
properties:
name:
description: "name is the name of the resource
being referenced. \n One of `name` or `selector`
must be set, but `name` and `selector` are
mutually exclusive properties. If one is set,
the other must be unset. \n A single parameter
used for all admission requests can be configured
by setting the `name` field, leaving `selector`
blank, and setting namespace if `paramKind`
is namespace-scoped."
description: "`name` is the name of the resource
being referenced. \n `name` and `selector`
are mutually exclusive properties. If one
is set, the other must be unset."
type: string
namespace:
description: "namespace is the namespace of
@ -10771,7 +10762,7 @@ spec:
by the binding. If set to `Deny`, then no
matched parameters will be subject to the
`failurePolicy` of the policy. \n Allowed
values are `Allow` or `Deny` \n Required"
values are `Allow` or `Deny` Default to `Deny`"
type: string
selector:
description: "selector can be used to match
@ -14772,14 +14763,10 @@ spec:
description: ParamRef references a parameter resource.
properties:
name:
description: "name is the name of the resource being
referenced. \n One of `name` or `selector` must
be set, but `name` and `selector` are mutually
exclusive properties. If one is set, the other
must be unset. \n A single parameter used for
all admission requests can be configured by setting
the `name` field, leaving `selector` blank, and
setting namespace if `paramKind` is namespace-scoped."
description: "`name` is the name of the resource
being referenced. \n `name` and `selector` are
mutually exclusive properties. If one is set,
the other must be unset."
type: string
namespace:
description: "namespace is the namespace of the
@ -14807,7 +14794,7 @@ spec:
binding. If set to `Deny`, then no matched parameters
will be subject to the `failurePolicy` of the
policy. \n Allowed values are `Allow` or `Deny`
\n Required"
Default to `Deny`"
type: string
selector:
description: "selector can be used to match multiple
@ -19138,15 +19125,10 @@ spec:
description: ParamRef references a parameter resource.
properties:
name:
description: "name is the name of the resource
being referenced. \n One of `name` or `selector`
must be set, but `name` and `selector` are
mutually exclusive properties. If one is set,
the other must be unset. \n A single parameter
used for all admission requests can be configured
by setting the `name` field, leaving `selector`
blank, and setting namespace if `paramKind`
is namespace-scoped."
description: "`name` is the name of the resource
being referenced. \n `name` and `selector`
are mutually exclusive properties. If one
is set, the other must be unset."
type: string
namespace:
description: "namespace is the namespace of
@ -19176,7 +19158,7 @@ spec:
by the binding. If set to `Deny`, then no
matched parameters will be subject to the
`failurePolicy` of the policy. \n Allowed
values are `Allow` or `Deny` \n Required"
values are `Allow` or `Deny` Default to `Deny`"
type: string
selector:
description: "selector can be used to match
@ -23542,14 +23524,10 @@ spec:
description: ParamRef references a parameter resource.
properties:
name:
description: "name is the name of the resource being
referenced. \n One of `name` or `selector` must
be set, but `name` and `selector` are mutually
exclusive properties. If one is set, the other
must be unset. \n A single parameter used for
all admission requests can be configured by setting
the `name` field, leaving `selector` blank, and
setting namespace if `paramKind` is namespace-scoped."
description: "`name` is the name of the resource
being referenced. \n `name` and `selector` are
mutually exclusive properties. If one is set,
the other must be unset."
type: string
namespace:
description: "namespace is the namespace of the
@ -23577,7 +23555,7 @@ spec:
binding. If set to `Deny`, then no matched parameters
will be subject to the `failurePolicy` of the
policy. \n Allowed values are `Allow` or `Deny`
\n Required"
Default to `Deny`"
type: string
selector:
description: "selector can be used to match multiple
@ -27855,15 +27833,10 @@ spec:
description: ParamRef references a parameter resource.
properties:
name:
description: "name is the name of the resource
being referenced. \n One of `name` or `selector`
must be set, but `name` and `selector` are
mutually exclusive properties. If one is set,
the other must be unset. \n A single parameter
used for all admission requests can be configured
by setting the `name` field, leaving `selector`
blank, and setting namespace if `paramKind`
is namespace-scoped."
description: "`name` is the name of the resource
being referenced. \n `name` and `selector`
are mutually exclusive properties. If one
is set, the other must be unset."
type: string
namespace:
description: "namespace is the namespace of
@ -27893,7 +27866,7 @@ spec:
by the binding. If set to `Deny`, then no
matched parameters will be subject to the
`failurePolicy` of the policy. \n Allowed
values are `Allow` or `Deny` \n Required"
values are `Allow` or `Deny` Default to `Deny`"
type: string
selector:
description: "selector can be used to match
@ -31895,14 +31868,10 @@ spec:
description: ParamRef references a parameter resource.
properties:
name:
description: "name is the name of the resource being
referenced. \n One of `name` or `selector` must
be set, but `name` and `selector` are mutually
exclusive properties. If one is set, the other
must be unset. \n A single parameter used for
all admission requests can be configured by setting
the `name` field, leaving `selector` blank, and
setting namespace if `paramKind` is namespace-scoped."
description: "`name` is the name of the resource
being referenced. \n `name` and `selector` are
mutually exclusive properties. If one is set,
the other must be unset."
type: string
namespace:
description: "namespace is the namespace of the
@ -31930,7 +31899,7 @@ spec:
binding. If set to `Deny`, then no matched parameters
will be subject to the `failurePolicy` of the
policy. \n Allowed values are `Allow` or `Deny`
\n Required"
Default to `Deny`"
type: string
selector:
description: "selector can be used to match multiple
@ -36261,15 +36230,10 @@ spec:
description: ParamRef references a parameter resource.
properties:
name:
description: "name is the name of the resource
being referenced. \n One of `name` or `selector`
must be set, but `name` and `selector` are
mutually exclusive properties. If one is set,
the other must be unset. \n A single parameter
used for all admission requests can be configured
by setting the `name` field, leaving `selector`
blank, and setting namespace if `paramKind`
is namespace-scoped."
description: "`name` is the name of the resource
being referenced. \n `name` and `selector`
are mutually exclusive properties. If one
is set, the other must be unset."
type: string
namespace:
description: "namespace is the namespace of
@ -36299,7 +36263,7 @@ spec:
by the binding. If set to `Deny`, then no
matched parameters will be subject to the
`failurePolicy` of the policy. \n Allowed
values are `Allow` or `Deny` \n Required"
values are `Allow` or `Deny` Default to `Deny`"
type: string
selector:
description: "selector can be used to match

58
config/crds/kyverno.io_clusterpolicies.yaml
View file

@ -2604,14 +2604,10 @@ spec:
description: ParamRef references a parameter resource.
properties:
name:
description: "name is the name of the resource being
referenced. \n One of `name` or `selector` must
be set, but `name` and `selector` are mutually
exclusive properties. If one is set, the other
must be unset. \n A single parameter used for
all admission requests can be configured by setting
the `name` field, leaving `selector` blank, and
setting namespace if `paramKind` is namespace-scoped."
description: "`name` is the name of the resource
being referenced. \n `name` and `selector` are
mutually exclusive properties. If one is set,
the other must be unset."
type: string
namespace:
description: "namespace is the namespace of the
@ -2639,7 +2635,7 @@ spec:
binding. If set to `Deny`, then no matched parameters
will be subject to the `failurePolicy` of the
policy. \n Allowed values are `Allow` or `Deny`
\n Required"
Default to `Deny`"
type: string
selector:
description: "selector can be used to match multiple
@ -6916,15 +6912,10 @@ spec:
description: ParamRef references a parameter resource.
properties:
name:
description: "name is the name of the resource
being referenced. \n One of `name` or `selector`
must be set, but `name` and `selector` are
mutually exclusive properties. If one is set,
the other must be unset. \n A single parameter
used for all admission requests can be configured
by setting the `name` field, leaving `selector`
blank, and setting namespace if `paramKind`
is namespace-scoped."
description: "`name` is the name of the resource
being referenced. \n `name` and `selector`
are mutually exclusive properties. If one
is set, the other must be unset."
type: string
namespace:
description: "namespace is the namespace of
@ -6954,7 +6945,7 @@ spec:
by the binding. If set to `Deny`, then no
matched parameters will be subject to the
`failurePolicy` of the policy. \n Allowed
values are `Allow` or `Deny` \n Required"
values are `Allow` or `Deny` Default to `Deny`"
type: string
selector:
description: "selector can be used to match
@ -10955,14 +10946,10 @@ spec:
description: ParamRef references a parameter resource.
properties:
name:
description: "name is the name of the resource being
referenced. \n One of `name` or `selector` must
be set, but `name` and `selector` are mutually
exclusive properties. If one is set, the other
must be unset. \n A single parameter used for
all admission requests can be configured by setting
the `name` field, leaving `selector` blank, and
setting namespace if `paramKind` is namespace-scoped."
description: "`name` is the name of the resource
being referenced. \n `name` and `selector` are
mutually exclusive properties. If one is set,
the other must be unset."
type: string
namespace:
description: "namespace is the namespace of the
@ -10990,7 +10977,7 @@ spec:
binding. If set to `Deny`, then no matched parameters
will be subject to the `failurePolicy` of the
policy. \n Allowed values are `Allow` or `Deny`
\n Required"
Default to `Deny`"
type: string
selector:
description: "selector can be used to match multiple
@ -15321,15 +15308,10 @@ spec:
description: ParamRef references a parameter resource.
properties:
name:
description: "name is the name of the resource
being referenced. \n One of `name` or `selector`
must be set, but `name` and `selector` are
mutually exclusive properties. If one is set,
the other must be unset. \n A single parameter
used for all admission requests can be configured
by setting the `name` field, leaving `selector`
blank, and setting namespace if `paramKind`
is namespace-scoped."
description: "`name` is the name of the resource
being referenced. \n `name` and `selector`
are mutually exclusive properties. If one
is set, the other must be unset."
type: string
namespace:
description: "namespace is the namespace of
@ -15359,7 +15341,7 @@ spec:
by the binding. If set to `Deny`, then no
matched parameters will be subject to the
`failurePolicy` of the policy. \n Allowed
values are `Allow` or `Deny` \n Required"
values are `Allow` or `Deny` Default to `Deny`"
type: string
selector:
description: "selector can be used to match

58
config/crds/kyverno.io_policies.yaml
View file

@ -2605,14 +2605,10 @@ spec:
description: ParamRef references a parameter resource.
properties:
name:
description: "name is the name of the resource being
referenced. \n One of `name` or `selector` must
be set, but `name` and `selector` are mutually
exclusive properties. If one is set, the other
must be unset. \n A single parameter used for
all admission requests can be configured by setting
the `name` field, leaving `selector` blank, and
setting namespace if `paramKind` is namespace-scoped."
description: "`name` is the name of the resource
being referenced. \n `name` and `selector` are
mutually exclusive properties. If one is set,
the other must be unset."
type: string
namespace:
description: "namespace is the namespace of the
@ -2640,7 +2636,7 @@ spec:
binding. If set to `Deny`, then no matched parameters
will be subject to the `failurePolicy` of the
policy. \n Allowed values are `Allow` or `Deny`
\n Required"
Default to `Deny`"
type: string
selector:
description: "selector can be used to match multiple
@ -6918,15 +6914,10 @@ spec:
description: ParamRef references a parameter resource.
properties:
name:
description: "name is the name of the resource
being referenced. \n One of `name` or `selector`
must be set, but `name` and `selector` are
mutually exclusive properties. If one is set,
the other must be unset. \n A single parameter
used for all admission requests can be configured
by setting the `name` field, leaving `selector`
blank, and setting namespace if `paramKind`
is namespace-scoped."
description: "`name` is the name of the resource
being referenced. \n `name` and `selector`
are mutually exclusive properties. If one
is set, the other must be unset."
type: string
namespace:
description: "namespace is the namespace of
@ -6956,7 +6947,7 @@ spec:
by the binding. If set to `Deny`, then no
matched parameters will be subject to the
`failurePolicy` of the policy. \n Allowed
values are `Allow` or `Deny` \n Required"
values are `Allow` or `Deny` Default to `Deny`"
type: string
selector:
description: "selector can be used to match
@ -10958,14 +10949,10 @@ spec:
description: ParamRef references a parameter resource.
properties:
name:
description: "name is the name of the resource being
referenced. \n One of `name` or `selector` must
be set, but `name` and `selector` are mutually
exclusive properties. If one is set, the other
must be unset. \n A single parameter used for
all admission requests can be configured by setting
the `name` field, leaving `selector` blank, and
setting namespace if `paramKind` is namespace-scoped."
description: "`name` is the name of the resource
being referenced. \n `name` and `selector` are
mutually exclusive properties. If one is set,
the other must be unset."
type: string
namespace:
description: "namespace is the namespace of the
@ -10993,7 +10980,7 @@ spec:
binding. If set to `Deny`, then no matched parameters
will be subject to the `failurePolicy` of the
policy. \n Allowed values are `Allow` or `Deny`
\n Required"
Default to `Deny`"
type: string
selector:
description: "selector can be used to match multiple
@ -15324,15 +15311,10 @@ spec:
description: ParamRef references a parameter resource.
properties:
name:
description: "name is the name of the resource
being referenced. \n One of `name` or `selector`
must be set, but `name` and `selector` are
mutually exclusive properties. If one is set,
the other must be unset. \n A single parameter
used for all admission requests can be configured
by setting the `name` field, leaving `selector`
blank, and setting namespace if `paramKind`
is namespace-scoped."
description: "`name` is the name of the resource
being referenced. \n `name` and `selector`
are mutually exclusive properties. If one
is set, the other must be unset."
type: string
namespace:
description: "namespace is the namespace of
@ -15362,7 +15344,7 @@ spec:
by the binding. If set to `Deny`, then no
matched parameters will be subject to the
`failurePolicy` of the policy. \n Allowed
values are `Allow` or `Deny` \n Required"
values are `Allow` or `Deny` Default to `Deny`"
type: string
selector:
description: "selector can be used to match

116
config/install-latest-testing.yaml
View file

@ -6624,14 +6624,10 @@ spec:
description: ParamRef references a parameter resource.
properties:
name:
description: "name is the name of the resource being
referenced. \n One of `name` or `selector` must
be set, but `name` and `selector` are mutually
exclusive properties. If one is set, the other
must be unset. \n A single parameter used for
all admission requests can be configured by setting
the `name` field, leaving `selector` blank, and
setting namespace if `paramKind` is namespace-scoped."
description: "`name` is the name of the resource
being referenced. \n `name` and `selector` are
mutually exclusive properties. If one is set,
the other must be unset."
type: string
namespace:
description: "namespace is the namespace of the
@ -6659,7 +6655,7 @@ spec:
binding. If set to `Deny`, then no matched parameters
will be subject to the `failurePolicy` of the
policy. \n Allowed values are `Allow` or `Deny`
\n Required"
Default to `Deny`"
type: string
selector:
description: "selector can be used to match multiple
@ -10936,15 +10932,10 @@ spec:
description: ParamRef references a parameter resource.
properties:
name:
description: "name is the name of the resource
being referenced. \n One of `name` or `selector`
must be set, but `name` and `selector` are
mutually exclusive properties. If one is set,
the other must be unset. \n A single parameter
used for all admission requests can be configured
by setting the `name` field, leaving `selector`
blank, and setting namespace if `paramKind`
is namespace-scoped."
description: "`name` is the name of the resource
being referenced. \n `name` and `selector`
are mutually exclusive properties. If one
is set, the other must be unset."
type: string
namespace:
description: "namespace is the namespace of
@ -10974,7 +10965,7 @@ spec:
by the binding. If set to `Deny`, then no
matched parameters will be subject to the
`failurePolicy` of the policy. \n Allowed
values are `Allow` or `Deny` \n Required"
values are `Allow` or `Deny` Default to `Deny`"
type: string
selector:
description: "selector can be used to match
@ -14975,14 +14966,10 @@ spec:
description: ParamRef references a parameter resource.
properties:
name:
description: "name is the name of the resource being
referenced. \n One of `name` or `selector` must
be set, but `name` and `selector` are mutually
exclusive properties. If one is set, the other
must be unset. \n A single parameter used for
all admission requests can be configured by setting
the `name` field, leaving `selector` blank, and
setting namespace if `paramKind` is namespace-scoped."
description: "`name` is the name of the resource
being referenced. \n `name` and `selector` are
mutually exclusive properties. If one is set,
the other must be unset."
type: string
namespace:
description: "namespace is the namespace of the
@ -15010,7 +14997,7 @@ spec:
binding. If set to `Deny`, then no matched parameters
will be subject to the `failurePolicy` of the
policy. \n Allowed values are `Allow` or `Deny`
\n Required"
Default to `Deny`"
type: string
selector:
description: "selector can be used to match multiple
@ -19341,15 +19328,10 @@ spec:
description: ParamRef references a parameter resource.
properties:
name:
description: "name is the name of the resource
being referenced. \n One of `name` or `selector`
must be set, but `name` and `selector` are
mutually exclusive properties. If one is set,
the other must be unset. \n A single parameter
used for all admission requests can be configured
by setting the `name` field, leaving `selector`
blank, and setting namespace if `paramKind`
is namespace-scoped."
description: "`name` is the name of the resource
being referenced. \n `name` and `selector`
are mutually exclusive properties. If one
is set, the other must be unset."
type: string
namespace:
description: "namespace is the namespace of
@ -19379,7 +19361,7 @@ spec:
by the binding. If set to `Deny`, then no
matched parameters will be subject to the
`failurePolicy` of the policy. \n Allowed
values are `Allow` or `Deny` \n Required"
values are `Allow` or `Deny` Default to `Deny`"
type: string
selector:
description: "selector can be used to match
@ -23745,14 +23727,10 @@ spec:
description: ParamRef references a parameter resource.
properties:
name:
description: "name is the name of the resource being
referenced. \n One of `name` or `selector` must
be set, but `name` and `selector` are mutually
exclusive properties. If one is set, the other
must be unset. \n A single parameter used for
all admission requests can be configured by setting
the `name` field, leaving `selector` blank, and
setting namespace if `paramKind` is namespace-scoped."
description: "`name` is the name of the resource
being referenced. \n `name` and `selector` are
mutually exclusive properties. If one is set,
the other must be unset."
type: string
namespace:
description: "namespace is the namespace of the
@ -23780,7 +23758,7 @@ spec:
binding. If set to `Deny`, then no matched parameters
will be subject to the `failurePolicy` of the
policy. \n Allowed values are `Allow` or `Deny`
\n Required"
Default to `Deny`"
type: string
selector:
description: "selector can be used to match multiple
@ -28058,15 +28036,10 @@ spec:
description: ParamRef references a parameter resource.
properties:
name:
description: "name is the name of the resource
being referenced. \n One of `name` or `selector`
must be set, but `name` and `selector` are
mutually exclusive properties. If one is set,
the other must be unset. \n A single parameter
used for all admission requests can be configured
by setting the `name` field, leaving `selector`
blank, and setting namespace if `paramKind`
is namespace-scoped."
description: "`name` is the name of the resource
being referenced. \n `name` and `selector`
are mutually exclusive properties. If one
is set, the other must be unset."
type: string
namespace:
description: "namespace is the namespace of
@ -28096,7 +28069,7 @@ spec:
by the binding. If set to `Deny`, then no
matched parameters will be subject to the
`failurePolicy` of the policy. \n Allowed
values are `Allow` or `Deny` \n Required"
values are `Allow` or `Deny` Default to `Deny`"
type: string
selector:
description: "selector can be used to match
@ -32098,14 +32071,10 @@ spec:
description: ParamRef references a parameter resource.
properties:
name:
description: "name is the name of the resource being
referenced. \n One of `name` or `selector` must
be set, but `name` and `selector` are mutually
exclusive properties. If one is set, the other
must be unset. \n A single parameter used for
all admission requests can be configured by setting
the `name` field, leaving `selector` blank, and
setting namespace if `paramKind` is namespace-scoped."
description: "`name` is the name of the resource
being referenced. \n `name` and `selector` are
mutually exclusive properties. If one is set,
the other must be unset."
type: string
namespace:
description: "namespace is the namespace of the
@ -32133,7 +32102,7 @@ spec:
binding. If set to `Deny`, then no matched parameters
will be subject to the `failurePolicy` of the
policy. \n Allowed values are `Allow` or `Deny`
\n Required"
Default to `Deny`"
type: string
selector:
description: "selector can be used to match multiple
@ -36464,15 +36433,10 @@ spec:
description: ParamRef references a parameter resource.
properties:
name:
description: "name is the name of the resource
being referenced. \n One of `name` or `selector`
must be set, but `name` and `selector` are
mutually exclusive properties. If one is set,
the other must be unset. \n A single parameter
used for all admission requests can be configured
by setting the `name` field, leaving `selector`
blank, and setting namespace if `paramKind`
is namespace-scoped."
description: "`name` is the name of the resource
being referenced. \n `name` and `selector`
are mutually exclusive properties. If one
is set, the other must be unset."
type: string
namespace:
description: "namespace is the namespace of
@ -36502,7 +36466,7 @@ spec:
by the binding. If set to `Deny`, then no
matched parameters will be subject to the
`failurePolicy` of the policy. \n Allowed
values are `Allow` or `Deny` \n Required"
values are `Allow` or `Deny` Default to `Deny`"
type: string
selector:
description: "selector can be used to match

16
docs/user/crd/index.html
View file

@ -1015,8 +1015,8 @@ attributes for keyless verification, or a nested attestor declaration.</p>
<td>
<code>expressions</code><br/>
<em>
<a href="https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.23/#validation-v1beta1-admissionregistration">
[]Kubernetes admissionregistration/v1beta1.Validation
<a href="https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.23/#validation-v1alpha1-admissionregistration">
[]Kubernetes admissionregistration/v1alpha1.Validation
</a>
</em>
</td>
@ -1028,8 +1028,8 @@ attributes for keyless verification, or a nested attestor declaration.</p>
<td>
<code>paramKind</code><br/>
<em>
<a href="https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.23/#paramkind-v1beta1-admissionregistration">
Kubernetes admissionregistration/v1beta1.ParamKind
<a href="https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.23/#paramkind-v1alpha1-admissionregistration">
Kubernetes admissionregistration/v1alpha1.ParamKind
</a>
</em>
</td>
@ -1042,8 +1042,8 @@ Kubernetes admissionregistration/v1beta1.ParamKind
<td>
<code>paramRef</code><br/>
<em>
<a href="https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.23/#paramref-v1beta1-admissionregistration">
Kubernetes admissionregistration/v1beta1.ParamRef
<a href="https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.23/#paramref-v1alpha1-admissionregistration">
Kubernetes admissionregistration/v1alpha1.ParamRef
</a>
</em>
</td>
@ -1056,8 +1056,8 @@ Kubernetes admissionregistration/v1beta1.ParamRef
<td>
<code>auditAnnotations</code><br/>
<em>
<a href="https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.23/#auditannotation-v1beta1-admissionregistration">
[]Kubernetes admissionregistration/v1beta1.AuditAnnotation
<a href="https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.23/#auditannotation-v1alpha1-admissionregistration">
[]Kubernetes admissionregistration/v1alpha1.AuditAnnotation
</a>
</em>
</td>

18
pkg/client/applyconfigurations/kyverno/v1/cel.go
View file

@ -19,16 +19,16 @@ limitations under the License.
package v1
import (
v1beta1 "k8s.io/api/admissionregistration/v1beta1"
v1alpha1 "k8s.io/api/admissionregistration/v1alpha1"
)
// CELApplyConfiguration represents an declarative configuration of the CEL type for use
// with apply.
type CELApplyConfiguration struct {
Expressions []v1beta1.Validation `json:"expressions,omitempty"`
ParamKind *v1beta1.ParamKind `json:"paramKind,omitempty"`
ParamRef *v1beta1.ParamRef `json:"paramRef,omitempty"`
AuditAnnotations []v1beta1.AuditAnnotation `json:"auditAnnotations,omitempty"`
Expressions []v1alpha1.Validation `json:"expressions,omitempty"`
ParamKind *v1alpha1.ParamKind `json:"paramKind,omitempty"`
ParamRef *v1alpha1.ParamRef `json:"paramRef,omitempty"`
AuditAnnotations []v1alpha1.AuditAnnotation `json:"auditAnnotations,omitempty"`
}
// CELApplyConfiguration constructs an declarative configuration of the CEL type for use with
@ -40,7 +40,7 @@ func CEL() *CELApplyConfiguration {
// WithExpressions adds the given value to the Expressions field in the declarative configuration
// and returns the receiver, so that objects can be build by chaining "With" function invocations.
// If called multiple times, values provided by each call will be appended to the Expressions field.
func (b *CELApplyConfiguration) WithExpressions(values ...v1beta1.Validation) *CELApplyConfiguration {
func (b *CELApplyConfiguration) WithExpressions(values ...v1alpha1.Validation) *CELApplyConfiguration {
for i := range values {
b.Expressions = append(b.Expressions, values[i])
}
@ -50,7 +50,7 @@ func (b *CELApplyConfiguration) WithExpressions(values ...v1beta1.Validation) *C
// WithParamKind sets the ParamKind field in the declarative configuration to the given value
// and returns the receiver, so that objects can be built by chaining "With" function invocations.
// If called multiple times, the ParamKind field is set to the value of the last call.
func (b *CELApplyConfiguration) WithParamKind(value v1beta1.ParamKind) *CELApplyConfiguration {
func (b *CELApplyConfiguration) WithParamKind(value v1alpha1.ParamKind) *CELApplyConfiguration {
b.ParamKind = &value
return b
}
@ -58,7 +58,7 @@ func (b *CELApplyConfiguration) WithParamKind(value v1beta1.ParamKind) *CELApply
// WithParamRef sets the ParamRef field in the declarative configuration to the given value
// and returns the receiver, so that objects can be built by chaining "With" function invocations.
// If called multiple times, the ParamRef field is set to the value of the last call.
func (b *CELApplyConfiguration) WithParamRef(value v1beta1.ParamRef) *CELApplyConfiguration {
func (b *CELApplyConfiguration) WithParamRef(value v1alpha1.ParamRef) *CELApplyConfiguration {
b.ParamRef = &value
return b
}
@ -66,7 +66,7 @@ func (b *CELApplyConfiguration) WithParamRef(value v1beta1.ParamRef) *CELApplyCo
// WithAuditAnnotations adds the given value to the AuditAnnotations field in the declarative configuration
// and returns the receiver, so that objects can be build by chaining "With" function invocations.
// If called multiple times, values provided by each call will be appended to the AuditAnnotations field.
func (b *CELApplyConfiguration) WithAuditAnnotations(values ...v1beta1.AuditAnnotation) *CELApplyConfiguration {
func (b *CELApplyConfiguration) WithAuditAnnotations(values ...v1alpha1.AuditAnnotation) *CELApplyConfiguration {
for i := range values {
b.AuditAnnotations = append(b.AuditAnnotations, values[i])
}