mirror of
https://github.com/kyverno/kyverno.git
synced 2025-01-20 18:52:16 +00:00
- reverse tag removal changes; - remove defaults
This commit is contained in:
parent
c23c318052
commit
4be7528604
6 changed files with 88 additions and 9 deletions
|
@ -379,10 +379,12 @@ spec:
|
|||
description: Overlay specifies an overlay pattern to modify
|
||||
resources. DEPRECATED. Use PatchStrategicMerge instead.
|
||||
Scheduled for removal in release 1.5+.
|
||||
x-kubernetes-preserve-unknown-fields: true
|
||||
patchStrategicMerge:
|
||||
description: PatchStrategicMerge is a strategic merge patch
|
||||
used to modify resources. See https://kubernetes.io/docs/tasks/manage-kubernetes-objects/update-api-object-kubectl-patch/
|
||||
and https://kubectl.docs.kubernetes.io/references/kustomize/patchesstrategicmerge/.
|
||||
x-kubernetes-preserve-unknown-fields: true
|
||||
patches:
|
||||
description: Patches specifies a RFC 6902 JSON Patch to
|
||||
modify resources. DEPRECATED. Use PatchesJSON6902 instead.
|
||||
|
@ -399,9 +401,11 @@ spec:
|
|||
type: string
|
||||
value:
|
||||
description: Value specifies the value to be applied.
|
||||
x-kubernetes-preserve-unknown-fields: true
|
||||
type: object
|
||||
nullable: true
|
||||
type: array
|
||||
x-kubernetes-preserve-unknown-fields: true
|
||||
patchesJson6902:
|
||||
description: PatchesJSON6902 is a list of RFC 6902 JSON
|
||||
Patch declarations used to modify resources. See https://tools.ietf.org/html/rfc6902
|
||||
|
@ -422,6 +426,7 @@ spec:
|
|||
key:
|
||||
description: Key is the context entry (using JMESPath)
|
||||
for conditional rule evaluation.
|
||||
x-kubernetes-preserve-unknown-fields: true
|
||||
operator:
|
||||
description: Operator is the operation to perform.
|
||||
type: string
|
||||
|
@ -429,6 +434,7 @@ spec:
|
|||
description: Value is the conditional value, or set of
|
||||
values. The values can be fixed set or can be variables
|
||||
declared using using JMESPath.
|
||||
x-kubernetes-preserve-unknown-fields: true
|
||||
type: object
|
||||
type: array
|
||||
validate:
|
||||
|
@ -438,6 +444,7 @@ spec:
|
|||
description: AnyPattern specifies list of validation patterns.
|
||||
At least one of the patterns must be satisfied for the
|
||||
validation rule to succeed.
|
||||
x-kubernetes-preserve-unknown-fields: true
|
||||
deny:
|
||||
description: Deny defines conditions to fail the validation
|
||||
rule.
|
||||
|
@ -451,6 +458,7 @@ spec:
|
|||
key:
|
||||
description: Key is the context entry (using JMESPath)
|
||||
for conditional rule evaluation.
|
||||
x-kubernetes-preserve-unknown-fields: true
|
||||
operator:
|
||||
description: Operator is the operation to perform.
|
||||
type: string
|
||||
|
@ -458,6 +466,7 @@ spec:
|
|||
description: Value is the conditional value, or
|
||||
set of values. The values can be fixed set or
|
||||
can be variables declared using using JMESPath.
|
||||
x-kubernetes-preserve-unknown-fields: true
|
||||
type: object
|
||||
type: array
|
||||
type: object
|
||||
|
@ -468,11 +477,11 @@ spec:
|
|||
pattern:
|
||||
description: Pattern specifies an overlay-style pattern
|
||||
used to check resources.
|
||||
x-kubernetes-preserve-unknown-fields: true
|
||||
type: object
|
||||
type: object
|
||||
type: array
|
||||
validationFailureAction:
|
||||
default: audit
|
||||
description: ValidationFailureAction controls if a validation policy
|
||||
rule failure should disallow the admission review request (enforce),
|
||||
or allow (audit) the admission review request and report an error
|
||||
|
@ -1800,10 +1809,12 @@ spec:
|
|||
description: Overlay specifies an overlay pattern to modify
|
||||
resources. DEPRECATED. Use PatchStrategicMerge instead.
|
||||
Scheduled for removal in release 1.5+.
|
||||
x-kubernetes-preserve-unknown-fields: true
|
||||
patchStrategicMerge:
|
||||
description: PatchStrategicMerge is a strategic merge patch
|
||||
used to modify resources. See https://kubernetes.io/docs/tasks/manage-kubernetes-objects/update-api-object-kubectl-patch/
|
||||
and https://kubectl.docs.kubernetes.io/references/kustomize/patchesstrategicmerge/.
|
||||
x-kubernetes-preserve-unknown-fields: true
|
||||
patches:
|
||||
description: Patches specifies a RFC 6902 JSON Patch to
|
||||
modify resources. DEPRECATED. Use PatchesJSON6902 instead.
|
||||
|
@ -1820,9 +1831,11 @@ spec:
|
|||
type: string
|
||||
value:
|
||||
description: Value specifies the value to be applied.
|
||||
x-kubernetes-preserve-unknown-fields: true
|
||||
type: object
|
||||
nullable: true
|
||||
type: array
|
||||
x-kubernetes-preserve-unknown-fields: true
|
||||
patchesJson6902:
|
||||
description: PatchesJSON6902 is a list of RFC 6902 JSON
|
||||
Patch declarations used to modify resources. See https://tools.ietf.org/html/rfc6902
|
||||
|
@ -1843,6 +1856,7 @@ spec:
|
|||
key:
|
||||
description: Key is the context entry (using JMESPath)
|
||||
for conditional rule evaluation.
|
||||
x-kubernetes-preserve-unknown-fields: true
|
||||
operator:
|
||||
description: Operator is the operation to perform.
|
||||
type: string
|
||||
|
@ -1850,6 +1864,7 @@ spec:
|
|||
description: Value is the conditional value, or set of
|
||||
values. The values can be fixed set or can be variables
|
||||
declared using using JMESPath.
|
||||
x-kubernetes-preserve-unknown-fields: true
|
||||
type: object
|
||||
type: array
|
||||
validate:
|
||||
|
@ -1859,6 +1874,7 @@ spec:
|
|||
description: AnyPattern specifies list of validation patterns.
|
||||
At least one of the patterns must be satisfied for the
|
||||
validation rule to succeed.
|
||||
x-kubernetes-preserve-unknown-fields: true
|
||||
deny:
|
||||
description: Deny defines conditions to fail the validation
|
||||
rule.
|
||||
|
@ -1872,6 +1888,7 @@ spec:
|
|||
key:
|
||||
description: Key is the context entry (using JMESPath)
|
||||
for conditional rule evaluation.
|
||||
x-kubernetes-preserve-unknown-fields: true
|
||||
operator:
|
||||
description: Operator is the operation to perform.
|
||||
type: string
|
||||
|
@ -1879,6 +1896,7 @@ spec:
|
|||
description: Value is the conditional value, or
|
||||
set of values. The values can be fixed set or
|
||||
can be variables declared using using JMESPath.
|
||||
x-kubernetes-preserve-unknown-fields: true
|
||||
type: object
|
||||
type: array
|
||||
type: object
|
||||
|
@ -1889,11 +1907,11 @@ spec:
|
|||
pattern:
|
||||
description: Pattern specifies an overlay-style pattern
|
||||
used to check resources.
|
||||
x-kubernetes-preserve-unknown-fields: true
|
||||
type: object
|
||||
type: object
|
||||
type: array
|
||||
validationFailureAction:
|
||||
default: audit
|
||||
description: ValidationFailureAction controls if a validation policy
|
||||
rule failure should disallow the admission review request (enforce),
|
||||
or allow (audit) the admission review request and report an error
|
||||
|
|
|
@ -381,10 +381,12 @@ spec:
|
|||
description: Overlay specifies an overlay pattern to modify
|
||||
resources. DEPRECATED. Use PatchStrategicMerge instead.
|
||||
Scheduled for removal in release 1.5+.
|
||||
x-kubernetes-preserve-unknown-fields: true
|
||||
patchStrategicMerge:
|
||||
description: PatchStrategicMerge is a strategic merge patch
|
||||
used to modify resources. See https://kubernetes.io/docs/tasks/manage-kubernetes-objects/update-api-object-kubectl-patch/
|
||||
and https://kubectl.docs.kubernetes.io/references/kustomize/patchesstrategicmerge/.
|
||||
x-kubernetes-preserve-unknown-fields: true
|
||||
patches:
|
||||
description: Patches specifies a RFC 6902 JSON Patch to
|
||||
modify resources. DEPRECATED. Use PatchesJSON6902 instead.
|
||||
|
@ -401,9 +403,11 @@ spec:
|
|||
type: string
|
||||
value:
|
||||
description: Value specifies the value to be applied.
|
||||
x-kubernetes-preserve-unknown-fields: true
|
||||
type: object
|
||||
nullable: true
|
||||
type: array
|
||||
x-kubernetes-preserve-unknown-fields: true
|
||||
patchesJson6902:
|
||||
description: PatchesJSON6902 is a list of RFC 6902 JSON
|
||||
Patch declarations used to modify resources. See https://tools.ietf.org/html/rfc6902
|
||||
|
@ -424,6 +428,7 @@ spec:
|
|||
key:
|
||||
description: Key is the context entry (using JMESPath)
|
||||
for conditional rule evaluation.
|
||||
x-kubernetes-preserve-unknown-fields: true
|
||||
operator:
|
||||
description: Operator is the operation to perform.
|
||||
type: string
|
||||
|
@ -431,6 +436,7 @@ spec:
|
|||
description: Value is the conditional value, or set of
|
||||
values. The values can be fixed set or can be variables
|
||||
declared using using JMESPath.
|
||||
x-kubernetes-preserve-unknown-fields: true
|
||||
type: object
|
||||
type: array
|
||||
validate:
|
||||
|
@ -440,6 +446,7 @@ spec:
|
|||
description: AnyPattern specifies list of validation patterns.
|
||||
At least one of the patterns must be satisfied for the
|
||||
validation rule to succeed.
|
||||
x-kubernetes-preserve-unknown-fields: true
|
||||
deny:
|
||||
description: Deny defines conditions to fail the validation
|
||||
rule.
|
||||
|
@ -453,6 +460,7 @@ spec:
|
|||
key:
|
||||
description: Key is the context entry (using JMESPath)
|
||||
for conditional rule evaluation.
|
||||
x-kubernetes-preserve-unknown-fields: true
|
||||
operator:
|
||||
description: Operator is the operation to perform.
|
||||
type: string
|
||||
|
@ -460,6 +468,7 @@ spec:
|
|||
description: Value is the conditional value, or
|
||||
set of values. The values can be fixed set or
|
||||
can be variables declared using using JMESPath.
|
||||
x-kubernetes-preserve-unknown-fields: true
|
||||
type: object
|
||||
type: array
|
||||
type: object
|
||||
|
@ -470,11 +479,11 @@ spec:
|
|||
pattern:
|
||||
description: Pattern specifies an overlay-style pattern
|
||||
used to check resources.
|
||||
x-kubernetes-preserve-unknown-fields: true
|
||||
type: object
|
||||
type: object
|
||||
type: array
|
||||
validationFailureAction:
|
||||
default: audit
|
||||
description: ValidationFailureAction controls if a validation policy
|
||||
rule failure should disallow the admission review request (enforce),
|
||||
or allow (audit) the admission review request and report an error
|
||||
|
|
|
@ -382,10 +382,12 @@ spec:
|
|||
description: Overlay specifies an overlay pattern to modify
|
||||
resources. DEPRECATED. Use PatchStrategicMerge instead.
|
||||
Scheduled for removal in release 1.5+.
|
||||
x-kubernetes-preserve-unknown-fields: true
|
||||
patchStrategicMerge:
|
||||
description: PatchStrategicMerge is a strategic merge patch
|
||||
used to modify resources. See https://kubernetes.io/docs/tasks/manage-kubernetes-objects/update-api-object-kubectl-patch/
|
||||
and https://kubectl.docs.kubernetes.io/references/kustomize/patchesstrategicmerge/.
|
||||
x-kubernetes-preserve-unknown-fields: true
|
||||
patches:
|
||||
description: Patches specifies a RFC 6902 JSON Patch to
|
||||
modify resources. DEPRECATED. Use PatchesJSON6902 instead.
|
||||
|
@ -402,9 +404,11 @@ spec:
|
|||
type: string
|
||||
value:
|
||||
description: Value specifies the value to be applied.
|
||||
x-kubernetes-preserve-unknown-fields: true
|
||||
type: object
|
||||
nullable: true
|
||||
type: array
|
||||
x-kubernetes-preserve-unknown-fields: true
|
||||
patchesJson6902:
|
||||
description: PatchesJSON6902 is a list of RFC 6902 JSON
|
||||
Patch declarations used to modify resources. See https://tools.ietf.org/html/rfc6902
|
||||
|
@ -425,6 +429,7 @@ spec:
|
|||
key:
|
||||
description: Key is the context entry (using JMESPath)
|
||||
for conditional rule evaluation.
|
||||
x-kubernetes-preserve-unknown-fields: true
|
||||
operator:
|
||||
description: Operator is the operation to perform.
|
||||
type: string
|
||||
|
@ -432,6 +437,7 @@ spec:
|
|||
description: Value is the conditional value, or set of
|
||||
values. The values can be fixed set or can be variables
|
||||
declared using using JMESPath.
|
||||
x-kubernetes-preserve-unknown-fields: true
|
||||
type: object
|
||||
type: array
|
||||
validate:
|
||||
|
@ -441,6 +447,7 @@ spec:
|
|||
description: AnyPattern specifies list of validation patterns.
|
||||
At least one of the patterns must be satisfied for the
|
||||
validation rule to succeed.
|
||||
x-kubernetes-preserve-unknown-fields: true
|
||||
deny:
|
||||
description: Deny defines conditions to fail the validation
|
||||
rule.
|
||||
|
@ -454,6 +461,7 @@ spec:
|
|||
key:
|
||||
description: Key is the context entry (using JMESPath)
|
||||
for conditional rule evaluation.
|
||||
x-kubernetes-preserve-unknown-fields: true
|
||||
operator:
|
||||
description: Operator is the operation to perform.
|
||||
type: string
|
||||
|
@ -461,6 +469,7 @@ spec:
|
|||
description: Value is the conditional value, or
|
||||
set of values. The values can be fixed set or
|
||||
can be variables declared using using JMESPath.
|
||||
x-kubernetes-preserve-unknown-fields: true
|
||||
type: object
|
||||
type: array
|
||||
type: object
|
||||
|
@ -471,11 +480,11 @@ spec:
|
|||
pattern:
|
||||
description: Pattern specifies an overlay-style pattern
|
||||
used to check resources.
|
||||
x-kubernetes-preserve-unknown-fields: true
|
||||
type: object
|
||||
type: object
|
||||
type: array
|
||||
validationFailureAction:
|
||||
default: audit
|
||||
description: ValidationFailureAction controls if a validation policy
|
||||
rule failure should disallow the admission review request (enforce),
|
||||
or allow (audit) the admission review request and report an error
|
||||
|
|
|
@ -384,10 +384,12 @@ spec:
|
|||
description: Overlay specifies an overlay pattern to modify
|
||||
resources. DEPRECATED. Use PatchStrategicMerge instead.
|
||||
Scheduled for removal in release 1.5+.
|
||||
x-kubernetes-preserve-unknown-fields: true
|
||||
patchStrategicMerge:
|
||||
description: PatchStrategicMerge is a strategic merge patch
|
||||
used to modify resources. See https://kubernetes.io/docs/tasks/manage-kubernetes-objects/update-api-object-kubectl-patch/
|
||||
and https://kubectl.docs.kubernetes.io/references/kustomize/patchesstrategicmerge/.
|
||||
x-kubernetes-preserve-unknown-fields: true
|
||||
patches:
|
||||
description: Patches specifies a RFC 6902 JSON Patch to
|
||||
modify resources. DEPRECATED. Use PatchesJSON6902 instead.
|
||||
|
@ -404,9 +406,11 @@ spec:
|
|||
type: string
|
||||
value:
|
||||
description: Value specifies the value to be applied.
|
||||
x-kubernetes-preserve-unknown-fields: true
|
||||
type: object
|
||||
nullable: true
|
||||
type: array
|
||||
x-kubernetes-preserve-unknown-fields: true
|
||||
patchesJson6902:
|
||||
description: PatchesJSON6902 is a list of RFC 6902 JSON
|
||||
Patch declarations used to modify resources. See https://tools.ietf.org/html/rfc6902
|
||||
|
@ -427,6 +431,7 @@ spec:
|
|||
key:
|
||||
description: Key is the context entry (using JMESPath)
|
||||
for conditional rule evaluation.
|
||||
x-kubernetes-preserve-unknown-fields: true
|
||||
operator:
|
||||
description: Operator is the operation to perform.
|
||||
type: string
|
||||
|
@ -434,6 +439,7 @@ spec:
|
|||
description: Value is the conditional value, or set of
|
||||
values. The values can be fixed set or can be variables
|
||||
declared using using JMESPath.
|
||||
x-kubernetes-preserve-unknown-fields: true
|
||||
type: object
|
||||
type: array
|
||||
validate:
|
||||
|
@ -443,6 +449,7 @@ spec:
|
|||
description: AnyPattern specifies list of validation patterns.
|
||||
At least one of the patterns must be satisfied for the
|
||||
validation rule to succeed.
|
||||
x-kubernetes-preserve-unknown-fields: true
|
||||
deny:
|
||||
description: Deny defines conditions to fail the validation
|
||||
rule.
|
||||
|
@ -456,6 +463,7 @@ spec:
|
|||
key:
|
||||
description: Key is the context entry (using JMESPath)
|
||||
for conditional rule evaluation.
|
||||
x-kubernetes-preserve-unknown-fields: true
|
||||
operator:
|
||||
description: Operator is the operation to perform.
|
||||
type: string
|
||||
|
@ -463,6 +471,7 @@ spec:
|
|||
description: Value is the conditional value, or
|
||||
set of values. The values can be fixed set or
|
||||
can be variables declared using using JMESPath.
|
||||
x-kubernetes-preserve-unknown-fields: true
|
||||
type: object
|
||||
type: array
|
||||
type: object
|
||||
|
@ -473,11 +482,11 @@ spec:
|
|||
pattern:
|
||||
description: Pattern specifies an overlay-style pattern
|
||||
used to check resources.
|
||||
x-kubernetes-preserve-unknown-fields: true
|
||||
type: object
|
||||
type: object
|
||||
type: array
|
||||
validationFailureAction:
|
||||
default: audit
|
||||
description: ValidationFailureAction controls if a validation policy
|
||||
rule failure should disallow the admission review request (enforce),
|
||||
or allow (audit) the admission review request and report an error
|
||||
|
@ -1805,10 +1814,12 @@ spec:
|
|||
description: Overlay specifies an overlay pattern to modify
|
||||
resources. DEPRECATED. Use PatchStrategicMerge instead.
|
||||
Scheduled for removal in release 1.5+.
|
||||
x-kubernetes-preserve-unknown-fields: true
|
||||
patchStrategicMerge:
|
||||
description: PatchStrategicMerge is a strategic merge patch
|
||||
used to modify resources. See https://kubernetes.io/docs/tasks/manage-kubernetes-objects/update-api-object-kubectl-patch/
|
||||
and https://kubectl.docs.kubernetes.io/references/kustomize/patchesstrategicmerge/.
|
||||
x-kubernetes-preserve-unknown-fields: true
|
||||
patches:
|
||||
description: Patches specifies a RFC 6902 JSON Patch to
|
||||
modify resources. DEPRECATED. Use PatchesJSON6902 instead.
|
||||
|
@ -1825,9 +1836,11 @@ spec:
|
|||
type: string
|
||||
value:
|
||||
description: Value specifies the value to be applied.
|
||||
x-kubernetes-preserve-unknown-fields: true
|
||||
type: object
|
||||
nullable: true
|
||||
type: array
|
||||
x-kubernetes-preserve-unknown-fields: true
|
||||
patchesJson6902:
|
||||
description: PatchesJSON6902 is a list of RFC 6902 JSON
|
||||
Patch declarations used to modify resources. See https://tools.ietf.org/html/rfc6902
|
||||
|
@ -1848,6 +1861,7 @@ spec:
|
|||
key:
|
||||
description: Key is the context entry (using JMESPath)
|
||||
for conditional rule evaluation.
|
||||
x-kubernetes-preserve-unknown-fields: true
|
||||
operator:
|
||||
description: Operator is the operation to perform.
|
||||
type: string
|
||||
|
@ -1855,6 +1869,7 @@ spec:
|
|||
description: Value is the conditional value, or set of
|
||||
values. The values can be fixed set or can be variables
|
||||
declared using using JMESPath.
|
||||
x-kubernetes-preserve-unknown-fields: true
|
||||
type: object
|
||||
type: array
|
||||
validate:
|
||||
|
@ -1864,6 +1879,7 @@ spec:
|
|||
description: AnyPattern specifies list of validation patterns.
|
||||
At least one of the patterns must be satisfied for the
|
||||
validation rule to succeed.
|
||||
x-kubernetes-preserve-unknown-fields: true
|
||||
deny:
|
||||
description: Deny defines conditions to fail the validation
|
||||
rule.
|
||||
|
@ -1877,6 +1893,7 @@ spec:
|
|||
key:
|
||||
description: Key is the context entry (using JMESPath)
|
||||
for conditional rule evaluation.
|
||||
x-kubernetes-preserve-unknown-fields: true
|
||||
operator:
|
||||
description: Operator is the operation to perform.
|
||||
type: string
|
||||
|
@ -1884,6 +1901,7 @@ spec:
|
|||
description: Value is the conditional value, or
|
||||
set of values. The values can be fixed set or
|
||||
can be variables declared using using JMESPath.
|
||||
x-kubernetes-preserve-unknown-fields: true
|
||||
type: object
|
||||
type: array
|
||||
type: object
|
||||
|
@ -1894,11 +1912,11 @@ spec:
|
|||
pattern:
|
||||
description: Pattern specifies an overlay-style pattern
|
||||
used to check resources.
|
||||
x-kubernetes-preserve-unknown-fields: true
|
||||
type: object
|
||||
type: object
|
||||
type: array
|
||||
validationFailureAction:
|
||||
default: audit
|
||||
description: ValidationFailureAction controls if a validation policy
|
||||
rule failure should disallow the admission review request (enforce),
|
||||
or allow (audit) the admission review request and report an error
|
||||
|
|
|
@ -384,10 +384,12 @@ spec:
|
|||
description: Overlay specifies an overlay pattern to modify
|
||||
resources. DEPRECATED. Use PatchStrategicMerge instead.
|
||||
Scheduled for removal in release 1.5+.
|
||||
x-kubernetes-preserve-unknown-fields: true
|
||||
patchStrategicMerge:
|
||||
description: PatchStrategicMerge is a strategic merge patch
|
||||
used to modify resources. See https://kubernetes.io/docs/tasks/manage-kubernetes-objects/update-api-object-kubectl-patch/
|
||||
and https://kubectl.docs.kubernetes.io/references/kustomize/patchesstrategicmerge/.
|
||||
x-kubernetes-preserve-unknown-fields: true
|
||||
patches:
|
||||
description: Patches specifies a RFC 6902 JSON Patch to
|
||||
modify resources. DEPRECATED. Use PatchesJSON6902 instead.
|
||||
|
@ -404,9 +406,11 @@ spec:
|
|||
type: string
|
||||
value:
|
||||
description: Value specifies the value to be applied.
|
||||
x-kubernetes-preserve-unknown-fields: true
|
||||
type: object
|
||||
nullable: true
|
||||
type: array
|
||||
x-kubernetes-preserve-unknown-fields: true
|
||||
patchesJson6902:
|
||||
description: PatchesJSON6902 is a list of RFC 6902 JSON
|
||||
Patch declarations used to modify resources. See https://tools.ietf.org/html/rfc6902
|
||||
|
@ -427,6 +431,7 @@ spec:
|
|||
key:
|
||||
description: Key is the context entry (using JMESPath)
|
||||
for conditional rule evaluation.
|
||||
x-kubernetes-preserve-unknown-fields: true
|
||||
operator:
|
||||
description: Operator is the operation to perform.
|
||||
type: string
|
||||
|
@ -434,6 +439,7 @@ spec:
|
|||
description: Value is the conditional value, or set of
|
||||
values. The values can be fixed set or can be variables
|
||||
declared using using JMESPath.
|
||||
x-kubernetes-preserve-unknown-fields: true
|
||||
type: object
|
||||
type: array
|
||||
validate:
|
||||
|
@ -443,6 +449,7 @@ spec:
|
|||
description: AnyPattern specifies list of validation patterns.
|
||||
At least one of the patterns must be satisfied for the
|
||||
validation rule to succeed.
|
||||
x-kubernetes-preserve-unknown-fields: true
|
||||
deny:
|
||||
description: Deny defines conditions to fail the validation
|
||||
rule.
|
||||
|
@ -456,6 +463,7 @@ spec:
|
|||
key:
|
||||
description: Key is the context entry (using JMESPath)
|
||||
for conditional rule evaluation.
|
||||
x-kubernetes-preserve-unknown-fields: true
|
||||
operator:
|
||||
description: Operator is the operation to perform.
|
||||
type: string
|
||||
|
@ -463,6 +471,7 @@ spec:
|
|||
description: Value is the conditional value, or
|
||||
set of values. The values can be fixed set or
|
||||
can be variables declared using using JMESPath.
|
||||
x-kubernetes-preserve-unknown-fields: true
|
||||
type: object
|
||||
type: array
|
||||
type: object
|
||||
|
@ -473,11 +482,11 @@ spec:
|
|||
pattern:
|
||||
description: Pattern specifies an overlay-style pattern
|
||||
used to check resources.
|
||||
x-kubernetes-preserve-unknown-fields: true
|
||||
type: object
|
||||
type: object
|
||||
type: array
|
||||
validationFailureAction:
|
||||
default: audit
|
||||
description: ValidationFailureAction controls if a validation policy
|
||||
rule failure should disallow the admission review request (enforce),
|
||||
or allow (audit) the admission review request and report an error
|
||||
|
@ -1805,10 +1814,12 @@ spec:
|
|||
description: Overlay specifies an overlay pattern to modify
|
||||
resources. DEPRECATED. Use PatchStrategicMerge instead.
|
||||
Scheduled for removal in release 1.5+.
|
||||
x-kubernetes-preserve-unknown-fields: true
|
||||
patchStrategicMerge:
|
||||
description: PatchStrategicMerge is a strategic merge patch
|
||||
used to modify resources. See https://kubernetes.io/docs/tasks/manage-kubernetes-objects/update-api-object-kubectl-patch/
|
||||
and https://kubectl.docs.kubernetes.io/references/kustomize/patchesstrategicmerge/.
|
||||
x-kubernetes-preserve-unknown-fields: true
|
||||
patches:
|
||||
description: Patches specifies a RFC 6902 JSON Patch to
|
||||
modify resources. DEPRECATED. Use PatchesJSON6902 instead.
|
||||
|
@ -1825,9 +1836,11 @@ spec:
|
|||
type: string
|
||||
value:
|
||||
description: Value specifies the value to be applied.
|
||||
x-kubernetes-preserve-unknown-fields: true
|
||||
type: object
|
||||
nullable: true
|
||||
type: array
|
||||
x-kubernetes-preserve-unknown-fields: true
|
||||
patchesJson6902:
|
||||
description: PatchesJSON6902 is a list of RFC 6902 JSON
|
||||
Patch declarations used to modify resources. See https://tools.ietf.org/html/rfc6902
|
||||
|
@ -1848,6 +1861,7 @@ spec:
|
|||
key:
|
||||
description: Key is the context entry (using JMESPath)
|
||||
for conditional rule evaluation.
|
||||
x-kubernetes-preserve-unknown-fields: true
|
||||
operator:
|
||||
description: Operator is the operation to perform.
|
||||
type: string
|
||||
|
@ -1855,6 +1869,7 @@ spec:
|
|||
description: Value is the conditional value, or set of
|
||||
values. The values can be fixed set or can be variables
|
||||
declared using using JMESPath.
|
||||
x-kubernetes-preserve-unknown-fields: true
|
||||
type: object
|
||||
type: array
|
||||
validate:
|
||||
|
@ -1864,6 +1879,7 @@ spec:
|
|||
description: AnyPattern specifies list of validation patterns.
|
||||
At least one of the patterns must be satisfied for the
|
||||
validation rule to succeed.
|
||||
x-kubernetes-preserve-unknown-fields: true
|
||||
deny:
|
||||
description: Deny defines conditions to fail the validation
|
||||
rule.
|
||||
|
@ -1877,6 +1893,7 @@ spec:
|
|||
key:
|
||||
description: Key is the context entry (using JMESPath)
|
||||
for conditional rule evaluation.
|
||||
x-kubernetes-preserve-unknown-fields: true
|
||||
operator:
|
||||
description: Operator is the operation to perform.
|
||||
type: string
|
||||
|
@ -1884,6 +1901,7 @@ spec:
|
|||
description: Value is the conditional value, or
|
||||
set of values. The values can be fixed set or
|
||||
can be variables declared using using JMESPath.
|
||||
x-kubernetes-preserve-unknown-fields: true
|
||||
type: object
|
||||
type: array
|
||||
type: object
|
||||
|
@ -1894,11 +1912,11 @@ spec:
|
|||
pattern:
|
||||
description: Pattern specifies an overlay-style pattern
|
||||
used to check resources.
|
||||
x-kubernetes-preserve-unknown-fields: true
|
||||
type: object
|
||||
type: object
|
||||
type: array
|
||||
validationFailureAction:
|
||||
default: audit
|
||||
description: ValidationFailureAction controls if a validation policy
|
||||
rule failure should disallow the admission review request (enforce),
|
||||
or allow (audit) the admission review request and report an error
|
||||
|
|
|
@ -42,7 +42,6 @@ type Spec struct {
|
|||
// ValidationFailureAction controls if a validation policy rule failure should disallow
|
||||
// the admission review request (enforce), or allow (audit) the admission review request
|
||||
// and report an error in a policy report. Optional. The default value is "audit".
|
||||
// +kubebuilder:default=audit
|
||||
// +optional
|
||||
ValidationFailureAction string `json:"validationFailureAction,omitempty" yaml:"validationFailureAction,omitempty"`
|
||||
|
||||
|
@ -102,6 +101,7 @@ type ConfigMapReference struct {
|
|||
// Condition defines variable-based conditional criteria for rule execution.
|
||||
type Condition struct {
|
||||
// Key is the context entry (using JMESPath) for conditional rule evaluation.
|
||||
// +kubebuilder:validation:XPreserveUnknownFields
|
||||
Key apiextensions.JSON `json:"key,omitempty" yaml:"key,omitempty"`
|
||||
|
||||
// Operator is the operation to perform.
|
||||
|
@ -109,6 +109,7 @@ type Condition struct {
|
|||
|
||||
// Value is the conditional value, or set of values. The values can be fixed set
|
||||
// or can be variables declared using using JMESPath.
|
||||
// +kubebuilder:validation:XPreserveUnknownFields
|
||||
// +optional
|
||||
Value apiextensions.JSON `json:"value,omitempty" yaml:"value,omitempty"`
|
||||
}
|
||||
|
@ -201,12 +202,14 @@ type Mutation struct {
|
|||
// Overlay specifies an overlay pattern to modify resources.
|
||||
// DEPRECATED. Use PatchStrategicMerge instead. Scheduled for
|
||||
// removal in release 1.5+.
|
||||
// +kubebuilder:validation:XPreserveUnknownFields
|
||||
// +optional
|
||||
Overlay apiextensions.JSON `json:"overlay,omitempty"`
|
||||
|
||||
// Patches specifies a RFC 6902 JSON Patch to modify resources.
|
||||
// DEPRECATED. Use PatchesJSON6902 instead. Scheduled for
|
||||
// removal in release 1.5+.
|
||||
// +kubebuilder:validation:XPreserveUnknownFields
|
||||
// +nullable
|
||||
// +optional
|
||||
Patches []Patch `json:"patches,omitempty" yaml:"patches,omitempty"`
|
||||
|
@ -214,6 +217,7 @@ type Mutation struct {
|
|||
// PatchStrategicMerge is a strategic merge patch used to modify resources.
|
||||
// See https://kubernetes.io/docs/tasks/manage-kubernetes-objects/update-api-object-kubectl-patch/
|
||||
// and https://kubectl.docs.kubernetes.io/references/kustomize/patchesstrategicmerge/.
|
||||
// +kubebuilder:validation:XPreserveUnknownFields
|
||||
// +optional
|
||||
PatchStrategicMerge apiextensions.JSON `json:"patchStrategicMerge,omitempty" yaml:"patchStrategicMerge,omitempty"`
|
||||
|
||||
|
@ -237,6 +241,7 @@ type Patch struct {
|
|||
Operation string `json:"op,omitempty" yaml:"op,omitempty"`
|
||||
|
||||
// Value specifies the value to be applied.
|
||||
// +kubebuilder:validation:XPreserveUnknownFields
|
||||
// +optional
|
||||
Value apiextensions.JSON `json:"value,omitempty" yaml:"value,omitempty"`
|
||||
}
|
||||
|
@ -249,11 +254,13 @@ type Validation struct {
|
|||
Message string `json:"message,omitempty" yaml:"message,omitempty"`
|
||||
|
||||
// Pattern specifies an overlay-style pattern used to check resources.
|
||||
// +kubebuilder:validation:XPreserveUnknownFields
|
||||
// +optional
|
||||
Pattern apiextensions.JSON `json:"pattern,omitempty" yaml:"pattern,omitempty"`
|
||||
|
||||
// AnyPattern specifies list of validation patterns. At least one of the patterns
|
||||
// must be satisfied for the validation rule to succeed.
|
||||
// +kubebuilder:validation:XPreserveUnknownFields
|
||||
// +optional
|
||||
AnyPattern apiextensions.JSON `json:"anyPattern,omitempty" yaml:"anyPattern,omitempty"`
|
||||
|
||||
|
|
Loading…
Add table
Reference in a new issue