Package-level declarations
Types
AuditAnnotation describes how to produce an audit annotation for an API request.
AuditAnnotation describes how to produce an audit annotation for an API request.
ExpressionWarning is a warning information that targets a specific expression.
ExpressionWarning is a warning information that targets a specific expression.
MatchResources decides whether to run the admission control policy on an object based on whether it meets the match criteria. The exclude rules take precedence over include rules (if a resource matches both, it is excluded)
MatchResources decides whether to run the admission control policy on an object based on whether it meets the match criteria. The exclude rules take precedence over include rules (if a resource matches both, it is excluded)
/* /* NamedRuleWithOperations is a tuple of Operations and Resources with ResourceNames.
/* /* NamedRuleWithOperations is a tuple of Operations and Resources with ResourceNames.
ParamKind is a tuple of Group Kind and Version.
ParamRef describes how to locate the params to be used as input to expressions of rules applied by a policy binding.
ParamRef describes how to locate the params to be used as input to expressions of rules applied by a policy binding.
TypeChecking contains results of type checking the expressions in the ValidatingAdmissionPolicy
TypeChecking contains results of type checking the expressions in the ValidatingAdmissionPolicy
ValidatingAdmissionPolicy describes the definition of an admission validation policy that accepts or rejects an object without changing it.
ValidatingAdmissionPolicyBinding binds the ValidatingAdmissionPolicy with paramerized resources. ValidatingAdmissionPolicyBinding and parameter CRDs together define how cluster administrators configure policies for clusters. For a given admission request, each binding will cause its policy to be evaluated N times, where N is 1 for policies/bindings that don't use params, otherwise N is the number of parameters selected by the binding. The CEL expressions of a policy must have a computed CEL cost below the maximum CEL budget. Each evaluation of the policy is given an independent CEL cost budget. Adding/removing policies, bindings, or params can not affect whether a given (policy, binding, param) combination is within its own CEL budget.
ValidatingAdmissionPolicyBindingSpec is the specification of the ValidatingAdmissionPolicyBinding.
ValidatingAdmissionPolicyBindingSpec is the specification of the ValidatingAdmissionPolicyBinding.
ValidatingAdmissionPolicySpec is the specification of the desired behavior of the AdmissionPolicy.
ValidatingAdmissionPolicySpec is the specification of the desired behavior of the AdmissionPolicy.
ValidatingAdmissionPolicyStatus represents the status of a ValidatingAdmissionPolicy.
ValidatingAdmissionPolicyStatus represents the status of a ValidatingAdmissionPolicy.
Validation specifies the CEL expression which is used to apply the validation.
Validation specifies the CEL expression which is used to apply the validation.
Variable is the definition of a variable that is used for composition.