diff --git a/api/kyverno/v1/common_types.go b/api/kyverno/v1/common_types.go
index 9c3071fa24..46d47a710a 100644
--- a/api/kyverno/v1/common_types.go
+++ b/api/kyverno/v1/common_types.go
@@ -7,7 +7,7 @@ import (
"github.com/kyverno/kyverno/pkg/engine/variables/regex"
"github.com/sigstore/k8s-manifest-sigstore/pkg/k8smanifest"
admissionv1 "k8s.io/api/admission/v1"
- "k8s.io/api/admissionregistration/v1beta1"
+ "k8s.io/api/admissionregistration/v1alpha1"
"k8s.io/apiextensions-apiserver/pkg/apis/apiextensions"
apiextv1 "k8s.io/apiextensions-apiserver/pkg/apis/apiextensions/v1"
metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
@@ -434,30 +434,30 @@ type PodSecurityStandard struct {
// CEL allows validation checks using the Common Expression Language (https://kubernetes.io/docs/reference/using-api/cel/).
type CEL struct {
// Expressions is a list of CELExpression types.
- Expressions []v1beta1.Validation `json:"expressions,omitempty" yaml:"expressions,omitempty"`
+ Expressions []v1alpha1.Validation `json:"expressions,omitempty" yaml:"expressions,omitempty"`
// ParamKind is a tuple of Group Kind and Version.
// +optional
- ParamKind *v1beta1.ParamKind `json:"paramKind,omitempty" yaml:"paramKind,omitempty"`
+ ParamKind *v1alpha1.ParamKind `json:"paramKind,omitempty" yaml:"paramKind,omitempty"`
// ParamRef references a parameter resource.
// +optional
- ParamRef *v1beta1.ParamRef `json:"paramRef,omitempty" yaml:"paramRef,omitempty"`
+ ParamRef *v1alpha1.ParamRef `json:"paramRef,omitempty" yaml:"paramRef,omitempty"`
// AuditAnnotations contains CEL expressions which are used to produce audit annotations for the audit event of the API request.
// +optional
- AuditAnnotations []v1beta1.AuditAnnotation `json:"auditAnnotations,omitempty" yaml:"auditAnnotations,omitempty"`
+ AuditAnnotations []v1alpha1.AuditAnnotation `json:"auditAnnotations,omitempty" yaml:"auditAnnotations,omitempty"`
}
func (c *CEL) HasParam() bool {
return c.ParamKind != nil && c.ParamRef != nil
}
-func (c *CEL) GetParamKind() v1beta1.ParamKind {
+func (c *CEL) GetParamKind() v1alpha1.ParamKind {
return *c.ParamKind
}
-func (c *CEL) GetParamRef() v1beta1.ParamRef {
+func (c *CEL) GetParamRef() v1alpha1.ParamRef {
return *c.ParamRef
}
diff --git a/api/kyverno/v1/zz_generated.deepcopy.go b/api/kyverno/v1/zz_generated.deepcopy.go
index ea27c77707..00f6d2b168 100755
--- a/api/kyverno/v1/zz_generated.deepcopy.go
+++ b/api/kyverno/v1/zz_generated.deepcopy.go
@@ -24,7 +24,7 @@ package v1
import (
k8smanifest "github.com/sigstore/k8s-manifest-sigstore/pkg/k8smanifest"
admissionregistrationv1 "k8s.io/api/admissionregistration/v1"
- v1beta1 "k8s.io/api/admissionregistration/v1beta1"
+ v1alpha1 "k8s.io/api/admissionregistration/v1alpha1"
rbacv1 "k8s.io/api/rbac/v1"
apiextensionsv1 "k8s.io/apiextensions-apiserver/pkg/apis/apiextensions/v1"
metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
@@ -218,24 +218,24 @@ func (in *CEL) DeepCopyInto(out *CEL) {
*out = *in
if in.Expressions != nil {
in, out := &in.Expressions, &out.Expressions
- *out = make([]v1beta1.Validation, len(*in))
+ *out = make([]v1alpha1.Validation, len(*in))
for i := range *in {
(*in)[i].DeepCopyInto(&(*out)[i])
}
}
if in.ParamKind != nil {
in, out := &in.ParamKind, &out.ParamKind
- *out = new(v1beta1.ParamKind)
+ *out = new(v1alpha1.ParamKind)
**out = **in
}
if in.ParamRef != nil {
in, out := &in.ParamRef, &out.ParamRef
- *out = new(v1beta1.ParamRef)
+ *out = new(v1alpha1.ParamRef)
(*in).DeepCopyInto(*out)
}
if in.AuditAnnotations != nil {
in, out := &in.AuditAnnotations, &out.AuditAnnotations
- *out = make([]v1beta1.AuditAnnotation, len(*in))
+ *out = make([]v1alpha1.AuditAnnotation, len(*in))
copy(*out, *in)
}
return
diff --git a/charts/kyverno/templates/crds/crds.yaml b/charts/kyverno/templates/crds/crds.yaml
index aabce313e3..41ee260efe 100644
--- a/charts/kyverno/templates/crds/crds.yaml
+++ b/charts/kyverno/templates/crds/crds.yaml
@@ -6421,14 +6421,10 @@ spec:
description: ParamRef references a parameter resource.
properties:
name:
- description: "name is the name of the resource being
- referenced. \n One of `name` or `selector` must
- be set, but `name` and `selector` are mutually
- exclusive properties. If one is set, the other
- must be unset. \n A single parameter used for
- all admission requests can be configured by setting
- the `name` field, leaving `selector` blank, and
- setting namespace if `paramKind` is namespace-scoped."
+ description: "`name` is the name of the resource
+ being referenced. \n `name` and `selector` are
+ mutually exclusive properties. If one is set,
+ the other must be unset."
type: string
namespace:
description: "namespace is the namespace of the
@@ -6456,7 +6452,7 @@ spec:
binding. If set to `Deny`, then no matched parameters
will be subject to the `failurePolicy` of the
policy. \n Allowed values are `Allow` or `Deny`
- \n Required"
+ Default to `Deny`"
type: string
selector:
description: "selector can be used to match multiple
@@ -10733,15 +10729,10 @@ spec:
description: ParamRef references a parameter resource.
properties:
name:
- description: "name is the name of the resource
- being referenced. \n One of `name` or `selector`
- must be set, but `name` and `selector` are
- mutually exclusive properties. If one is set,
- the other must be unset. \n A single parameter
- used for all admission requests can be configured
- by setting the `name` field, leaving `selector`
- blank, and setting namespace if `paramKind`
- is namespace-scoped."
+ description: "`name` is the name of the resource
+ being referenced. \n `name` and `selector`
+ are mutually exclusive properties. If one
+ is set, the other must be unset."
type: string
namespace:
description: "namespace is the namespace of
@@ -10771,7 +10762,7 @@ spec:
by the binding. If set to `Deny`, then no
matched parameters will be subject to the
`failurePolicy` of the policy. \n Allowed
- values are `Allow` or `Deny` \n Required"
+ values are `Allow` or `Deny` Default to `Deny`"
type: string
selector:
description: "selector can be used to match
@@ -14772,14 +14763,10 @@ spec:
description: ParamRef references a parameter resource.
properties:
name:
- description: "name is the name of the resource being
- referenced. \n One of `name` or `selector` must
- be set, but `name` and `selector` are mutually
- exclusive properties. If one is set, the other
- must be unset. \n A single parameter used for
- all admission requests can be configured by setting
- the `name` field, leaving `selector` blank, and
- setting namespace if `paramKind` is namespace-scoped."
+ description: "`name` is the name of the resource
+ being referenced. \n `name` and `selector` are
+ mutually exclusive properties. If one is set,
+ the other must be unset."
type: string
namespace:
description: "namespace is the namespace of the
@@ -14807,7 +14794,7 @@ spec:
binding. If set to `Deny`, then no matched parameters
will be subject to the `failurePolicy` of the
policy. \n Allowed values are `Allow` or `Deny`
- \n Required"
+ Default to `Deny`"
type: string
selector:
description: "selector can be used to match multiple
@@ -19138,15 +19125,10 @@ spec:
description: ParamRef references a parameter resource.
properties:
name:
- description: "name is the name of the resource
- being referenced. \n One of `name` or `selector`
- must be set, but `name` and `selector` are
- mutually exclusive properties. If one is set,
- the other must be unset. \n A single parameter
- used for all admission requests can be configured
- by setting the `name` field, leaving `selector`
- blank, and setting namespace if `paramKind`
- is namespace-scoped."
+ description: "`name` is the name of the resource
+ being referenced. \n `name` and `selector`
+ are mutually exclusive properties. If one
+ is set, the other must be unset."
type: string
namespace:
description: "namespace is the namespace of
@@ -19176,7 +19158,7 @@ spec:
by the binding. If set to `Deny`, then no
matched parameters will be subject to the
`failurePolicy` of the policy. \n Allowed
- values are `Allow` or `Deny` \n Required"
+ values are `Allow` or `Deny` Default to `Deny`"
type: string
selector:
description: "selector can be used to match
@@ -23542,14 +23524,10 @@ spec:
description: ParamRef references a parameter resource.
properties:
name:
- description: "name is the name of the resource being
- referenced. \n One of `name` or `selector` must
- be set, but `name` and `selector` are mutually
- exclusive properties. If one is set, the other
- must be unset. \n A single parameter used for
- all admission requests can be configured by setting
- the `name` field, leaving `selector` blank, and
- setting namespace if `paramKind` is namespace-scoped."
+ description: "`name` is the name of the resource
+ being referenced. \n `name` and `selector` are
+ mutually exclusive properties. If one is set,
+ the other must be unset."
type: string
namespace:
description: "namespace is the namespace of the
@@ -23577,7 +23555,7 @@ spec:
binding. If set to `Deny`, then no matched parameters
will be subject to the `failurePolicy` of the
policy. \n Allowed values are `Allow` or `Deny`
- \n Required"
+ Default to `Deny`"
type: string
selector:
description: "selector can be used to match multiple
@@ -27855,15 +27833,10 @@ spec:
description: ParamRef references a parameter resource.
properties:
name:
- description: "name is the name of the resource
- being referenced. \n One of `name` or `selector`
- must be set, but `name` and `selector` are
- mutually exclusive properties. If one is set,
- the other must be unset. \n A single parameter
- used for all admission requests can be configured
- by setting the `name` field, leaving `selector`
- blank, and setting namespace if `paramKind`
- is namespace-scoped."
+ description: "`name` is the name of the resource
+ being referenced. \n `name` and `selector`
+ are mutually exclusive properties. If one
+ is set, the other must be unset."
type: string
namespace:
description: "namespace is the namespace of
@@ -27893,7 +27866,7 @@ spec:
by the binding. If set to `Deny`, then no
matched parameters will be subject to the
`failurePolicy` of the policy. \n Allowed
- values are `Allow` or `Deny` \n Required"
+ values are `Allow` or `Deny` Default to `Deny`"
type: string
selector:
description: "selector can be used to match
@@ -31895,14 +31868,10 @@ spec:
description: ParamRef references a parameter resource.
properties:
name:
- description: "name is the name of the resource being
- referenced. \n One of `name` or `selector` must
- be set, but `name` and `selector` are mutually
- exclusive properties. If one is set, the other
- must be unset. \n A single parameter used for
- all admission requests can be configured by setting
- the `name` field, leaving `selector` blank, and
- setting namespace if `paramKind` is namespace-scoped."
+ description: "`name` is the name of the resource
+ being referenced. \n `name` and `selector` are
+ mutually exclusive properties. If one is set,
+ the other must be unset."
type: string
namespace:
description: "namespace is the namespace of the
@@ -31930,7 +31899,7 @@ spec:
binding. If set to `Deny`, then no matched parameters
will be subject to the `failurePolicy` of the
policy. \n Allowed values are `Allow` or `Deny`
- \n Required"
+ Default to `Deny`"
type: string
selector:
description: "selector can be used to match multiple
@@ -36261,15 +36230,10 @@ spec:
description: ParamRef references a parameter resource.
properties:
name:
- description: "name is the name of the resource
- being referenced. \n One of `name` or `selector`
- must be set, but `name` and `selector` are
- mutually exclusive properties. If one is set,
- the other must be unset. \n A single parameter
- used for all admission requests can be configured
- by setting the `name` field, leaving `selector`
- blank, and setting namespace if `paramKind`
- is namespace-scoped."
+ description: "`name` is the name of the resource
+ being referenced. \n `name` and `selector`
+ are mutually exclusive properties. If one
+ is set, the other must be unset."
type: string
namespace:
description: "namespace is the namespace of
@@ -36299,7 +36263,7 @@ spec:
by the binding. If set to `Deny`, then no
matched parameters will be subject to the
`failurePolicy` of the policy. \n Allowed
- values are `Allow` or `Deny` \n Required"
+ values are `Allow` or `Deny` Default to `Deny`"
type: string
selector:
description: "selector can be used to match
diff --git a/config/crds/kyverno.io_clusterpolicies.yaml b/config/crds/kyverno.io_clusterpolicies.yaml
index 41fe0441c5..487fb97907 100644
--- a/config/crds/kyverno.io_clusterpolicies.yaml
+++ b/config/crds/kyverno.io_clusterpolicies.yaml
@@ -2604,14 +2604,10 @@ spec:
description: ParamRef references a parameter resource.
properties:
name:
- description: "name is the name of the resource being
- referenced. \n One of `name` or `selector` must
- be set, but `name` and `selector` are mutually
- exclusive properties. If one is set, the other
- must be unset. \n A single parameter used for
- all admission requests can be configured by setting
- the `name` field, leaving `selector` blank, and
- setting namespace if `paramKind` is namespace-scoped."
+ description: "`name` is the name of the resource
+ being referenced. \n `name` and `selector` are
+ mutually exclusive properties. If one is set,
+ the other must be unset."
type: string
namespace:
description: "namespace is the namespace of the
@@ -2639,7 +2635,7 @@ spec:
binding. If set to `Deny`, then no matched parameters
will be subject to the `failurePolicy` of the
policy. \n Allowed values are `Allow` or `Deny`
- \n Required"
+ Default to `Deny`"
type: string
selector:
description: "selector can be used to match multiple
@@ -6916,15 +6912,10 @@ spec:
description: ParamRef references a parameter resource.
properties:
name:
- description: "name is the name of the resource
- being referenced. \n One of `name` or `selector`
- must be set, but `name` and `selector` are
- mutually exclusive properties. If one is set,
- the other must be unset. \n A single parameter
- used for all admission requests can be configured
- by setting the `name` field, leaving `selector`
- blank, and setting namespace if `paramKind`
- is namespace-scoped."
+ description: "`name` is the name of the resource
+ being referenced. \n `name` and `selector`
+ are mutually exclusive properties. If one
+ is set, the other must be unset."
type: string
namespace:
description: "namespace is the namespace of
@@ -6954,7 +6945,7 @@ spec:
by the binding. If set to `Deny`, then no
matched parameters will be subject to the
`failurePolicy` of the policy. \n Allowed
- values are `Allow` or `Deny` \n Required"
+ values are `Allow` or `Deny` Default to `Deny`"
type: string
selector:
description: "selector can be used to match
@@ -10955,14 +10946,10 @@ spec:
description: ParamRef references a parameter resource.
properties:
name:
- description: "name is the name of the resource being
- referenced. \n One of `name` or `selector` must
- be set, but `name` and `selector` are mutually
- exclusive properties. If one is set, the other
- must be unset. \n A single parameter used for
- all admission requests can be configured by setting
- the `name` field, leaving `selector` blank, and
- setting namespace if `paramKind` is namespace-scoped."
+ description: "`name` is the name of the resource
+ being referenced. \n `name` and `selector` are
+ mutually exclusive properties. If one is set,
+ the other must be unset."
type: string
namespace:
description: "namespace is the namespace of the
@@ -10990,7 +10977,7 @@ spec:
binding. If set to `Deny`, then no matched parameters
will be subject to the `failurePolicy` of the
policy. \n Allowed values are `Allow` or `Deny`
- \n Required"
+ Default to `Deny`"
type: string
selector:
description: "selector can be used to match multiple
@@ -15321,15 +15308,10 @@ spec:
description: ParamRef references a parameter resource.
properties:
name:
- description: "name is the name of the resource
- being referenced. \n One of `name` or `selector`
- must be set, but `name` and `selector` are
- mutually exclusive properties. If one is set,
- the other must be unset. \n A single parameter
- used for all admission requests can be configured
- by setting the `name` field, leaving `selector`
- blank, and setting namespace if `paramKind`
- is namespace-scoped."
+ description: "`name` is the name of the resource
+ being referenced. \n `name` and `selector`
+ are mutually exclusive properties. If one
+ is set, the other must be unset."
type: string
namespace:
description: "namespace is the namespace of
@@ -15359,7 +15341,7 @@ spec:
by the binding. If set to `Deny`, then no
matched parameters will be subject to the
`failurePolicy` of the policy. \n Allowed
- values are `Allow` or `Deny` \n Required"
+ values are `Allow` or `Deny` Default to `Deny`"
type: string
selector:
description: "selector can be used to match
diff --git a/config/crds/kyverno.io_policies.yaml b/config/crds/kyverno.io_policies.yaml
index bd1c1643e7..97120d76b2 100644
--- a/config/crds/kyverno.io_policies.yaml
+++ b/config/crds/kyverno.io_policies.yaml
@@ -2605,14 +2605,10 @@ spec:
description: ParamRef references a parameter resource.
properties:
name:
- description: "name is the name of the resource being
- referenced. \n One of `name` or `selector` must
- be set, but `name` and `selector` are mutually
- exclusive properties. If one is set, the other
- must be unset. \n A single parameter used for
- all admission requests can be configured by setting
- the `name` field, leaving `selector` blank, and
- setting namespace if `paramKind` is namespace-scoped."
+ description: "`name` is the name of the resource
+ being referenced. \n `name` and `selector` are
+ mutually exclusive properties. If one is set,
+ the other must be unset."
type: string
namespace:
description: "namespace is the namespace of the
@@ -2640,7 +2636,7 @@ spec:
binding. If set to `Deny`, then no matched parameters
will be subject to the `failurePolicy` of the
policy. \n Allowed values are `Allow` or `Deny`
- \n Required"
+ Default to `Deny`"
type: string
selector:
description: "selector can be used to match multiple
@@ -6918,15 +6914,10 @@ spec:
description: ParamRef references a parameter resource.
properties:
name:
- description: "name is the name of the resource
- being referenced. \n One of `name` or `selector`
- must be set, but `name` and `selector` are
- mutually exclusive properties. If one is set,
- the other must be unset. \n A single parameter
- used for all admission requests can be configured
- by setting the `name` field, leaving `selector`
- blank, and setting namespace if `paramKind`
- is namespace-scoped."
+ description: "`name` is the name of the resource
+ being referenced. \n `name` and `selector`
+ are mutually exclusive properties. If one
+ is set, the other must be unset."
type: string
namespace:
description: "namespace is the namespace of
@@ -6956,7 +6947,7 @@ spec:
by the binding. If set to `Deny`, then no
matched parameters will be subject to the
`failurePolicy` of the policy. \n Allowed
- values are `Allow` or `Deny` \n Required"
+ values are `Allow` or `Deny` Default to `Deny`"
type: string
selector:
description: "selector can be used to match
@@ -10958,14 +10949,10 @@ spec:
description: ParamRef references a parameter resource.
properties:
name:
- description: "name is the name of the resource being
- referenced. \n One of `name` or `selector` must
- be set, but `name` and `selector` are mutually
- exclusive properties. If one is set, the other
- must be unset. \n A single parameter used for
- all admission requests can be configured by setting
- the `name` field, leaving `selector` blank, and
- setting namespace if `paramKind` is namespace-scoped."
+ description: "`name` is the name of the resource
+ being referenced. \n `name` and `selector` are
+ mutually exclusive properties. If one is set,
+ the other must be unset."
type: string
namespace:
description: "namespace is the namespace of the
@@ -10993,7 +10980,7 @@ spec:
binding. If set to `Deny`, then no matched parameters
will be subject to the `failurePolicy` of the
policy. \n Allowed values are `Allow` or `Deny`
- \n Required"
+ Default to `Deny`"
type: string
selector:
description: "selector can be used to match multiple
@@ -15324,15 +15311,10 @@ spec:
description: ParamRef references a parameter resource.
properties:
name:
- description: "name is the name of the resource
- being referenced. \n One of `name` or `selector`
- must be set, but `name` and `selector` are
- mutually exclusive properties. If one is set,
- the other must be unset. \n A single parameter
- used for all admission requests can be configured
- by setting the `name` field, leaving `selector`
- blank, and setting namespace if `paramKind`
- is namespace-scoped."
+ description: "`name` is the name of the resource
+ being referenced. \n `name` and `selector`
+ are mutually exclusive properties. If one
+ is set, the other must be unset."
type: string
namespace:
description: "namespace is the namespace of
@@ -15362,7 +15344,7 @@ spec:
by the binding. If set to `Deny`, then no
matched parameters will be subject to the
`failurePolicy` of the policy. \n Allowed
- values are `Allow` or `Deny` \n Required"
+ values are `Allow` or `Deny` Default to `Deny`"
type: string
selector:
description: "selector can be used to match
diff --git a/config/install-latest-testing.yaml b/config/install-latest-testing.yaml
index d8351a49ac..89e1009584 100644
--- a/config/install-latest-testing.yaml
+++ b/config/install-latest-testing.yaml
@@ -6624,14 +6624,10 @@ spec:
description: ParamRef references a parameter resource.
properties:
name:
- description: "name is the name of the resource being
- referenced. \n One of `name` or `selector` must
- be set, but `name` and `selector` are mutually
- exclusive properties. If one is set, the other
- must be unset. \n A single parameter used for
- all admission requests can be configured by setting
- the `name` field, leaving `selector` blank, and
- setting namespace if `paramKind` is namespace-scoped."
+ description: "`name` is the name of the resource
+ being referenced. \n `name` and `selector` are
+ mutually exclusive properties. If one is set,
+ the other must be unset."
type: string
namespace:
description: "namespace is the namespace of the
@@ -6659,7 +6655,7 @@ spec:
binding. If set to `Deny`, then no matched parameters
will be subject to the `failurePolicy` of the
policy. \n Allowed values are `Allow` or `Deny`
- \n Required"
+ Default to `Deny`"
type: string
selector:
description: "selector can be used to match multiple
@@ -10936,15 +10932,10 @@ spec:
description: ParamRef references a parameter resource.
properties:
name:
- description: "name is the name of the resource
- being referenced. \n One of `name` or `selector`
- must be set, but `name` and `selector` are
- mutually exclusive properties. If one is set,
- the other must be unset. \n A single parameter
- used for all admission requests can be configured
- by setting the `name` field, leaving `selector`
- blank, and setting namespace if `paramKind`
- is namespace-scoped."
+ description: "`name` is the name of the resource
+ being referenced. \n `name` and `selector`
+ are mutually exclusive properties. If one
+ is set, the other must be unset."
type: string
namespace:
description: "namespace is the namespace of
@@ -10974,7 +10965,7 @@ spec:
by the binding. If set to `Deny`, then no
matched parameters will be subject to the
`failurePolicy` of the policy. \n Allowed
- values are `Allow` or `Deny` \n Required"
+ values are `Allow` or `Deny` Default to `Deny`"
type: string
selector:
description: "selector can be used to match
@@ -14975,14 +14966,10 @@ spec:
description: ParamRef references a parameter resource.
properties:
name:
- description: "name is the name of the resource being
- referenced. \n One of `name` or `selector` must
- be set, but `name` and `selector` are mutually
- exclusive properties. If one is set, the other
- must be unset. \n A single parameter used for
- all admission requests can be configured by setting
- the `name` field, leaving `selector` blank, and
- setting namespace if `paramKind` is namespace-scoped."
+ description: "`name` is the name of the resource
+ being referenced. \n `name` and `selector` are
+ mutually exclusive properties. If one is set,
+ the other must be unset."
type: string
namespace:
description: "namespace is the namespace of the
@@ -15010,7 +14997,7 @@ spec:
binding. If set to `Deny`, then no matched parameters
will be subject to the `failurePolicy` of the
policy. \n Allowed values are `Allow` or `Deny`
- \n Required"
+ Default to `Deny`"
type: string
selector:
description: "selector can be used to match multiple
@@ -19341,15 +19328,10 @@ spec:
description: ParamRef references a parameter resource.
properties:
name:
- description: "name is the name of the resource
- being referenced. \n One of `name` or `selector`
- must be set, but `name` and `selector` are
- mutually exclusive properties. If one is set,
- the other must be unset. \n A single parameter
- used for all admission requests can be configured
- by setting the `name` field, leaving `selector`
- blank, and setting namespace if `paramKind`
- is namespace-scoped."
+ description: "`name` is the name of the resource
+ being referenced. \n `name` and `selector`
+ are mutually exclusive properties. If one
+ is set, the other must be unset."
type: string
namespace:
description: "namespace is the namespace of
@@ -19379,7 +19361,7 @@ spec:
by the binding. If set to `Deny`, then no
matched parameters will be subject to the
`failurePolicy` of the policy. \n Allowed
- values are `Allow` or `Deny` \n Required"
+ values are `Allow` or `Deny` Default to `Deny`"
type: string
selector:
description: "selector can be used to match
@@ -23745,14 +23727,10 @@ spec:
description: ParamRef references a parameter resource.
properties:
name:
- description: "name is the name of the resource being
- referenced. \n One of `name` or `selector` must
- be set, but `name` and `selector` are mutually
- exclusive properties. If one is set, the other
- must be unset. \n A single parameter used for
- all admission requests can be configured by setting
- the `name` field, leaving `selector` blank, and
- setting namespace if `paramKind` is namespace-scoped."
+ description: "`name` is the name of the resource
+ being referenced. \n `name` and `selector` are
+ mutually exclusive properties. If one is set,
+ the other must be unset."
type: string
namespace:
description: "namespace is the namespace of the
@@ -23780,7 +23758,7 @@ spec:
binding. If set to `Deny`, then no matched parameters
will be subject to the `failurePolicy` of the
policy. \n Allowed values are `Allow` or `Deny`
- \n Required"
+ Default to `Deny`"
type: string
selector:
description: "selector can be used to match multiple
@@ -28058,15 +28036,10 @@ spec:
description: ParamRef references a parameter resource.
properties:
name:
- description: "name is the name of the resource
- being referenced. \n One of `name` or `selector`
- must be set, but `name` and `selector` are
- mutually exclusive properties. If one is set,
- the other must be unset. \n A single parameter
- used for all admission requests can be configured
- by setting the `name` field, leaving `selector`
- blank, and setting namespace if `paramKind`
- is namespace-scoped."
+ description: "`name` is the name of the resource
+ being referenced. \n `name` and `selector`
+ are mutually exclusive properties. If one
+ is set, the other must be unset."
type: string
namespace:
description: "namespace is the namespace of
@@ -28096,7 +28069,7 @@ spec:
by the binding. If set to `Deny`, then no
matched parameters will be subject to the
`failurePolicy` of the policy. \n Allowed
- values are `Allow` or `Deny` \n Required"
+ values are `Allow` or `Deny` Default to `Deny`"
type: string
selector:
description: "selector can be used to match
@@ -32098,14 +32071,10 @@ spec:
description: ParamRef references a parameter resource.
properties:
name:
- description: "name is the name of the resource being
- referenced. \n One of `name` or `selector` must
- be set, but `name` and `selector` are mutually
- exclusive properties. If one is set, the other
- must be unset. \n A single parameter used for
- all admission requests can be configured by setting
- the `name` field, leaving `selector` blank, and
- setting namespace if `paramKind` is namespace-scoped."
+ description: "`name` is the name of the resource
+ being referenced. \n `name` and `selector` are
+ mutually exclusive properties. If one is set,
+ the other must be unset."
type: string
namespace:
description: "namespace is the namespace of the
@@ -32133,7 +32102,7 @@ spec:
binding. If set to `Deny`, then no matched parameters
will be subject to the `failurePolicy` of the
policy. \n Allowed values are `Allow` or `Deny`
- \n Required"
+ Default to `Deny`"
type: string
selector:
description: "selector can be used to match multiple
@@ -36464,15 +36433,10 @@ spec:
description: ParamRef references a parameter resource.
properties:
name:
- description: "name is the name of the resource
- being referenced. \n One of `name` or `selector`
- must be set, but `name` and `selector` are
- mutually exclusive properties. If one is set,
- the other must be unset. \n A single parameter
- used for all admission requests can be configured
- by setting the `name` field, leaving `selector`
- blank, and setting namespace if `paramKind`
- is namespace-scoped."
+ description: "`name` is the name of the resource
+ being referenced. \n `name` and `selector`
+ are mutually exclusive properties. If one
+ is set, the other must be unset."
type: string
namespace:
description: "namespace is the namespace of
@@ -36502,7 +36466,7 @@ spec:
by the binding. If set to `Deny`, then no
matched parameters will be subject to the
`failurePolicy` of the policy. \n Allowed
- values are `Allow` or `Deny` \n Required"
+ values are `Allow` or `Deny` Default to `Deny`"
type: string
selector:
description: "selector can be used to match
diff --git a/docs/user/crd/index.html b/docs/user/crd/index.html
index e84eb7af8c..40b63ee24b 100644
--- a/docs/user/crd/index.html
+++ b/docs/user/crd/index.html
@@ -1015,8 +1015,8 @@ attributes for keyless verification, or a nested attestor declaration.
expressions
-
-[]Kubernetes admissionregistration/v1beta1.Validation
+
+[]Kubernetes admissionregistration/v1alpha1.Validation
|
@@ -1028,8 +1028,8 @@ attributes for keyless verification, or a nested attestor declaration.
paramKind
-
-Kubernetes admissionregistration/v1beta1.ParamKind
+
+Kubernetes admissionregistration/v1alpha1.ParamKind
|
@@ -1042,8 +1042,8 @@ Kubernetes admissionregistration/v1beta1.ParamKind
paramRef
-
-Kubernetes admissionregistration/v1beta1.ParamRef
+
+Kubernetes admissionregistration/v1alpha1.ParamRef
|
@@ -1056,8 +1056,8 @@ Kubernetes admissionregistration/v1beta1.ParamRef
auditAnnotations
-
-[]Kubernetes admissionregistration/v1beta1.AuditAnnotation
+
+[]Kubernetes admissionregistration/v1alpha1.AuditAnnotation
|
diff --git a/pkg/client/applyconfigurations/kyverno/v1/cel.go b/pkg/client/applyconfigurations/kyverno/v1/cel.go
index 2831a60f07..d776c63e13 100644
--- a/pkg/client/applyconfigurations/kyverno/v1/cel.go
+++ b/pkg/client/applyconfigurations/kyverno/v1/cel.go
@@ -19,16 +19,16 @@ limitations under the License.
package v1
import (
- v1beta1 "k8s.io/api/admissionregistration/v1beta1"
+ v1alpha1 "k8s.io/api/admissionregistration/v1alpha1"
)
// CELApplyConfiguration represents an declarative configuration of the CEL type for use
// with apply.
type CELApplyConfiguration struct {
- Expressions []v1beta1.Validation `json:"expressions,omitempty"`
- ParamKind *v1beta1.ParamKind `json:"paramKind,omitempty"`
- ParamRef *v1beta1.ParamRef `json:"paramRef,omitempty"`
- AuditAnnotations []v1beta1.AuditAnnotation `json:"auditAnnotations,omitempty"`
+ Expressions []v1alpha1.Validation `json:"expressions,omitempty"`
+ ParamKind *v1alpha1.ParamKind `json:"paramKind,omitempty"`
+ ParamRef *v1alpha1.ParamRef `json:"paramRef,omitempty"`
+ AuditAnnotations []v1alpha1.AuditAnnotation `json:"auditAnnotations,omitempty"`
}
// CELApplyConfiguration constructs an declarative configuration of the CEL type for use with
@@ -40,7 +40,7 @@ func CEL() *CELApplyConfiguration {
// WithExpressions adds the given value to the Expressions field in the declarative configuration
// and returns the receiver, so that objects can be build by chaining "With" function invocations.
// If called multiple times, values provided by each call will be appended to the Expressions field.
-func (b *CELApplyConfiguration) WithExpressions(values ...v1beta1.Validation) *CELApplyConfiguration {
+func (b *CELApplyConfiguration) WithExpressions(values ...v1alpha1.Validation) *CELApplyConfiguration {
for i := range values {
b.Expressions = append(b.Expressions, values[i])
}
@@ -50,7 +50,7 @@ func (b *CELApplyConfiguration) WithExpressions(values ...v1beta1.Validation) *C
// WithParamKind sets the ParamKind field in the declarative configuration to the given value
// and returns the receiver, so that objects can be built by chaining "With" function invocations.
// If called multiple times, the ParamKind field is set to the value of the last call.
-func (b *CELApplyConfiguration) WithParamKind(value v1beta1.ParamKind) *CELApplyConfiguration {
+func (b *CELApplyConfiguration) WithParamKind(value v1alpha1.ParamKind) *CELApplyConfiguration {
b.ParamKind = &value
return b
}
@@ -58,7 +58,7 @@ func (b *CELApplyConfiguration) WithParamKind(value v1beta1.ParamKind) *CELApply
// WithParamRef sets the ParamRef field in the declarative configuration to the given value
// and returns the receiver, so that objects can be built by chaining "With" function invocations.
// If called multiple times, the ParamRef field is set to the value of the last call.
-func (b *CELApplyConfiguration) WithParamRef(value v1beta1.ParamRef) *CELApplyConfiguration {
+func (b *CELApplyConfiguration) WithParamRef(value v1alpha1.ParamRef) *CELApplyConfiguration {
b.ParamRef = &value
return b
}
@@ -66,7 +66,7 @@ func (b *CELApplyConfiguration) WithParamRef(value v1beta1.ParamRef) *CELApplyCo
// WithAuditAnnotations adds the given value to the AuditAnnotations field in the declarative configuration
// and returns the receiver, so that objects can be build by chaining "With" function invocations.
// If called multiple times, values provided by each call will be appended to the AuditAnnotations field.
-func (b *CELApplyConfiguration) WithAuditAnnotations(values ...v1beta1.AuditAnnotation) *CELApplyConfiguration {
+func (b *CELApplyConfiguration) WithAuditAnnotations(values ...v1alpha1.AuditAnnotation) *CELApplyConfiguration {
for i := range values {
b.AuditAnnotations = append(b.AuditAnnotations, values[i])
}