pulumi-kubernetes-kotlin/com.pulumi.kubernetes.admissionregistration.v1beta1.kotlin.outputs

Package-level declarations

Types

AuditAnnotation

data class AuditAnnotation(val key: String, val valueExpression: String)

AuditAnnotation describes how to produce an audit annotation for an API request.

AuditAnnotationPatch

data class AuditAnnotationPatch(val key: String? = null, val valueExpression: String? = null)

AuditAnnotation describes how to produce an audit annotation for an API request.

ExpressionWarning

data class ExpressionWarning(val fieldRef: String, val warning: String)

ExpressionWarning is a warning information that targets a specific expression.

ExpressionWarningPatch

data class ExpressionWarningPatch(val fieldRef: String? = null, val warning: String? = null)

ExpressionWarning is a warning information that targets a specific expression.

MatchCondition

data class MatchCondition(val expression: String, val name: String)

MatchCondition represents a condition which must be fulfilled for a request to be sent to a webhook.

MatchConditionPatch

data class MatchConditionPatch(val expression: String? = null, val name: String? = null)

MatchCondition represents a condition which must be fulfilled for a request to be sent to a webhook.

MatchResources

data class MatchResources(val excludeResourceRules: List<NamedRuleWithOperations>? = null, val matchPolicy: String? = null, val namespaceSelector: LabelSelector? = null, val objectSelector: LabelSelector? = null, val resourceRules: List<NamedRuleWithOperations>? = null)

MatchResources decides whether to run the admission control policy on an object based on whether it meets the match criteria. The exclude rules take precedence over include rules (if a resource matches both, it is excluded)

MatchResourcesPatch

data class MatchResourcesPatch(val excludeResourceRules: List<NamedRuleWithOperationsPatch>? = null, val matchPolicy: String? = null, val namespaceSelector: LabelSelectorPatch? = null, val objectSelector: LabelSelectorPatch? = null, val resourceRules: List<NamedRuleWithOperationsPatch>? = null)

MutatingWebhook

data class MutatingWebhook(val admissionReviewVersions: List<String>? = null, val clientConfig: WebhookClientConfig, val failurePolicy: String? = null, val matchPolicy: String? = null, val name: String, val namespaceSelector: LabelSelector? = null, val objectSelector: LabelSelector? = null, val reinvocationPolicy: String? = null, val rules: List<RuleWithOperations>? = null, val sideEffects: String? = null, val timeoutSeconds: Int? = null)

MutatingWebhook describes an admission webhook and the resources and operations it applies to.

MutatingWebhookConfiguration

data class MutatingWebhookConfiguration(val apiVersion: String? = null, val kind: String? = null, val metadata: ObjectMeta? = null, val webhooks: List<MutatingWebhook>? = null)

MutatingWebhookConfiguration describes the configuration of and admission webhook that accept or reject and may change the object. Deprecated in v1.16, planned for removal in v1.19. Use admissionregistration.k8s.io/v1 MutatingWebhookConfiguration instead.

MutatingWebhookPatch

data class MutatingWebhookPatch(val admissionReviewVersions: List<String>? = null, val clientConfig: WebhookClientConfigPatch? = null, val failurePolicy: String? = null, val matchPolicy: String? = null, val name: String? = null, val namespaceSelector: LabelSelectorPatch? = null, val objectSelector: LabelSelectorPatch? = null, val reinvocationPolicy: String? = null, val rules: List<RuleWithOperationsPatch>? = null, val sideEffects: String? = null, val timeoutSeconds: Int? = null)

MutatingWebhook describes an admission webhook and the resources and operations it applies to.

NamedRuleWithOperations

data class NamedRuleWithOperations(val apiGroups: List<String>? = null, val apiVersions: List<String>? = null, val operations: List<String>? = null, val resourceNames: List<String>? = null, val resources: List<String>? = null, val scope: String? = null)

/* /* NamedRuleWithOperations is a tuple of Operations and Resources with ResourceNames.

NamedRuleWithOperationsPatch

data class NamedRuleWithOperationsPatch(val apiGroups: List<String>? = null, val apiVersions: List<String>? = null, val operations: List<String>? = null, val resourceNames: List<String>? = null, val resources: List<String>? = null, val scope: String? = null)

/* /* NamedRuleWithOperations is a tuple of Operations and Resources with ResourceNames.

ParamKind

data class ParamKind(val apiVersion: String? = null, val kind: String? = null)

ParamKind is a tuple of Group Kind and Version.

ParamKindPatch

data class ParamKindPatch(val apiVersion: String? = null, val kind: String? = null)

ParamKind is a tuple of Group Kind and Version.

ParamRef

data class ParamRef(val name: String? = null, val namespace: String? = null, val parameterNotFoundAction: String? = null, val selector: LabelSelector? = null)

ParamRef describes how to locate the params to be used as input to expressions of rules applied by a policy binding.

ParamRefPatch

data class ParamRefPatch(val name: String? = null, val namespace: String? = null, val parameterNotFoundAction: String? = null, val selector: LabelSelectorPatch? = null)

ParamRef describes how to locate the params to be used as input to expressions of rules applied by a policy binding.

RuleWithOperations

data class RuleWithOperations(val apiGroups: List<String>? = null, val apiVersions: List<String>? = null, val operations: List<String>? = null, val resources: List<String>? = null, val scope: String? = null)

/* /* RuleWithOperations is a tuple of Operations and Resources. It is recommended to make sure that all the tuple expansions are valid.

RuleWithOperationsPatch

data class RuleWithOperationsPatch(val apiGroups: List<String>? = null, val apiVersions: List<String>? = null, val operations: List<String>? = null, val resources: List<String>? = null, val scope: String? = null)

/* /* RuleWithOperations is a tuple of Operations and Resources. It is recommended to make sure that all the tuple expansions are valid.

ServiceReference

data class ServiceReference(val name: String, val namespace: String, val path: String? = null, val port: Int? = null)

ServiceReference holds a reference to Service.legacy.k8s.io

ServiceReferencePatch

data class ServiceReferencePatch(val name: String? = null, val namespace: String? = null, val path: String? = null, val port: Int? = null)

ServiceReference holds a reference to Service.legacy.k8s.io

TypeChecking

data class TypeChecking(val expressionWarnings: List<ExpressionWarning>? = null)

TypeChecking contains results of type checking the expressions in the ValidatingAdmissionPolicy

TypeCheckingPatch

data class TypeCheckingPatch(val expressionWarnings: List<ExpressionWarningPatch>? = null)

TypeChecking contains results of type checking the expressions in the ValidatingAdmissionPolicy

ValidatingAdmissionPolicy

data class ValidatingAdmissionPolicy(val apiVersion: String? = null, val kind: String? = null, val metadata: ObjectMeta? = null, val spec: ValidatingAdmissionPolicySpec? = null, val status: ValidatingAdmissionPolicyStatus? = null)

ValidatingAdmissionPolicy describes the definition of an admission validation policy that accepts or rejects an object without changing it.

ValidatingAdmissionPolicyBinding

data class ValidatingAdmissionPolicyBinding(val apiVersion: String? = null, val kind: String? = null, val metadata: ObjectMeta? = null, val spec: ValidatingAdmissionPolicyBindingSpec? = null)

ValidatingAdmissionPolicyBinding binds the ValidatingAdmissionPolicy with paramerized resources. ValidatingAdmissionPolicyBinding and parameter CRDs together define how cluster administrators configure policies for clusters. For a given admission request, each binding will cause its policy to be evaluated N times, where N is 1 for policies/bindings that don't use params, otherwise N is the number of parameters selected by the binding. The CEL expressions of a policy must have a computed CEL cost below the maximum CEL budget. Each evaluation of the policy is given an independent CEL cost budget. Adding/removing policies, bindings, or params can not affect whether a given (policy, binding, param) combination is within its own CEL budget.

ValidatingAdmissionPolicyBindingSpec

data class ValidatingAdmissionPolicyBindingSpec(val matchResources: MatchResources? = null, val paramRef: ParamRef? = null, val policyName: String? = null, val validationActions: List<String>? = null)

ValidatingAdmissionPolicyBindingSpec is the specification of the ValidatingAdmissionPolicyBinding.

ValidatingAdmissionPolicyBindingSpecPatch

data class ValidatingAdmissionPolicyBindingSpecPatch(val matchResources: MatchResourcesPatch? = null, val paramRef: ParamRefPatch? = null, val policyName: String? = null, val validationActions: List<String>? = null)

ValidatingAdmissionPolicyBindingSpec is the specification of the ValidatingAdmissionPolicyBinding.

ValidatingAdmissionPolicySpec

data class ValidatingAdmissionPolicySpec(val auditAnnotations: List<AuditAnnotation>? = null, val failurePolicy: String? = null, val matchConditions: List<MatchCondition>? = null, val matchConstraints: MatchResources? = null, val paramKind: ParamKind? = null, val validations: List<Validation>? = null, val variables: List<Variable>? = null)

ValidatingAdmissionPolicySpec is the specification of the desired behavior of the AdmissionPolicy.

ValidatingAdmissionPolicySpecPatch

data class ValidatingAdmissionPolicySpecPatch(val auditAnnotations: List<AuditAnnotationPatch>? = null, val failurePolicy: String? = null, val matchConditions: List<MatchConditionPatch>? = null, val matchConstraints: MatchResourcesPatch? = null, val paramKind: ParamKindPatch? = null, val validations: List<ValidationPatch>? = null, val variables: List<VariablePatch>? = null)

ValidatingAdmissionPolicySpec is the specification of the desired behavior of the AdmissionPolicy.

ValidatingAdmissionPolicyStatus

data class ValidatingAdmissionPolicyStatus(val conditions: List<Condition>? = null, val observedGeneration: Int? = null, val typeChecking: TypeChecking? = null)

ValidatingAdmissionPolicyStatus represents the status of an admission validation policy.

ValidatingAdmissionPolicyStatusPatch

data class ValidatingAdmissionPolicyStatusPatch(val conditions: List<ConditionPatch>? = null, val observedGeneration: Int? = null, val typeChecking: TypeCheckingPatch? = null)

ValidatingAdmissionPolicyStatus represents the status of an admission validation policy.

ValidatingWebhook

data class ValidatingWebhook(val admissionReviewVersions: List<String>? = null, val clientConfig: WebhookClientConfig, val failurePolicy: String? = null, val matchPolicy: String? = null, val name: String, val namespaceSelector: LabelSelector? = null, val objectSelector: LabelSelector? = null, val rules: List<RuleWithOperations>? = null, val sideEffects: String? = null, val timeoutSeconds: Int? = null)

ValidatingWebhook describes an admission webhook and the resources and operations it applies to.

ValidatingWebhookConfiguration

data class ValidatingWebhookConfiguration(val apiVersion: String? = null, val kind: String? = null, val metadata: ObjectMeta? = null, val webhooks: List<ValidatingWebhook>? = null)

ValidatingWebhookConfiguration describes the configuration of and admission webhook that accept or reject and object without changing it. Deprecated in v1.16, planned for removal in v1.19. Use admissionregistration.k8s.io/v1 ValidatingWebhookConfiguration instead.

ValidatingWebhookPatch

data class ValidatingWebhookPatch(val admissionReviewVersions: List<String>? = null, val clientConfig: WebhookClientConfigPatch? = null, val failurePolicy: String? = null, val matchPolicy: String? = null, val name: String? = null, val namespaceSelector: LabelSelectorPatch? = null, val objectSelector: LabelSelectorPatch? = null, val rules: List<RuleWithOperationsPatch>? = null, val sideEffects: String? = null, val timeoutSeconds: Int? = null)

ValidatingWebhook describes an admission webhook and the resources and operations it applies to.

Validation

data class Validation(val expression: String, val message: String? = null, val messageExpression: String? = null, val reason: String? = null)

Validation specifies the CEL expression which is used to apply the validation.

ValidationPatch

data class ValidationPatch(val expression: String? = null, val message: String? = null, val messageExpression: String? = null, val reason: String? = null)

Validation specifies the CEL expression which is used to apply the validation.

Variable

data class Variable(val expression: String, val name: String)

Variable is the definition of a variable that is used for composition. A variable is defined as a named expression.

VariablePatch

data class VariablePatch(val expression: String? = null, val name: String? = null)

Variable is the definition of a variable that is used for composition. A variable is defined as a named expression.

WebhookClientConfig

data class WebhookClientConfig(val caBundle: String? = null, val service: ServiceReference? = null, val url: String? = null)

WebhookClientConfig contains the information to make a TLS connection with the webhook

WebhookClientConfigPatch

data class WebhookClientConfigPatch(val caBundle: String? = null, val service: ServiceReferencePatch? = null, val url: String? = null)

WebhookClientConfig contains the information to make a TLS connection with the webhook