imagepolicy

Documentation

Index

• Constants
• Variables
• func DeepCopy_imagepolicy_ImageReview(in interface{}, out interface{}, c *conversion.Cloner) error
• func DeepCopy_imagepolicy_ImageReviewContainerSpec(in interface{}, out interface{}, c *conversion.Cloner) error
• func DeepCopy_imagepolicy_ImageReviewSpec(in interface{}, out interface{}, c *conversion.Cloner) error
• func DeepCopy_imagepolicy_ImageReviewStatus(in interface{}, out interface{}, c *conversion.Cloner) error
• func Kind(kind string) unversioned.GroupKind
• func RegisterDeepCopies(scheme *runtime.Scheme) error
• func Resource(resource string) unversioned.GroupResource
• type ImageReview
  • func (x *ImageReview) CodecDecodeSelf(d *codec1978.Decoder)
  • func (x *ImageReview) CodecEncodeSelf(e *codec1978.Encoder)
• type ImageReviewContainerSpec
  • func (x *ImageReviewContainerSpec) CodecDecodeSelf(d *codec1978.Decoder)
  • func (x *ImageReviewContainerSpec) CodecEncodeSelf(e *codec1978.Encoder)
• type ImageReviewSpec
  • func (x *ImageReviewSpec) CodecDecodeSelf(d *codec1978.Decoder)
  • func (x *ImageReviewSpec) CodecEncodeSelf(e *codec1978.Encoder)
• type ImageReviewStatus
  • func (x *ImageReviewStatus) CodecDecodeSelf(d *codec1978.Decoder)
  • func (x *ImageReviewStatus) CodecEncodeSelf(e *codec1978.Encoder)

Constants

const GroupName = "imagepolicy.k8s.io"

GroupName is the group name use in this package

Variables

var (
	SchemeBuilder = runtime.NewSchemeBuilder(addKnownTypes)
	AddToScheme   = SchemeBuilder.AddToScheme
)

var SchemeGroupVersion = unversioned.GroupVersion{Group: GroupName, Version: runtime.APIVersionInternal}

SchemeGroupVersion is group version used to register these objects

Functions

func DeepCopy_imagepolicy_ImageReview

func DeepCopy_imagepolicy_ImageReview(in interface{}, out interface{}, c *conversion.Cloner) error

func DeepCopy_imagepolicy_ImageReviewContainerSpec

func DeepCopy_imagepolicy_ImageReviewContainerSpec(in interface{}, out interface{}, c *conversion.Cloner) error

func DeepCopy_imagepolicy_ImageReviewSpec

func DeepCopy_imagepolicy_ImageReviewSpec(in interface{}, out interface{}, c *conversion.Cloner) error

func DeepCopy_imagepolicy_ImageReviewStatus

func DeepCopy_imagepolicy_ImageReviewStatus(in interface{}, out interface{}, c *conversion.Cloner) error

func Kind

func Kind(kind string) unversioned.GroupKind

Kind takes an unqualified kind and returns a Group qualified GroupKind

func RegisterDeepCopies

func RegisterDeepCopies(scheme *runtime.Scheme) error

RegisterDeepCopies adds deep-copy functions to the given scheme. Public to allow building arbitrary schemes.

func Resource

func Resource(resource string) unversioned.GroupResource

Resource takes an unqualified resource and returns a Group qualified GroupResource

Types

type ImageReview

type ImageReview struct {
	unversioned.TypeMeta
	api.ObjectMeta

	// Spec holds information about the pod being evaluated
	Spec ImageReviewSpec

	// Status is filled in by the backend and indicates whether the pod should be allowed.
	Status ImageReviewStatus
}

ImageReview checks if the set of images in a pod are allowed.

func (*ImageReview) CodecDecodeSelf

func (x *ImageReview) CodecDecodeSelf(d *codec1978.Decoder)

func (*ImageReview) CodecEncodeSelf

func (x *ImageReview) CodecEncodeSelf(e *codec1978.Encoder)

type ImageReviewContainerSpec

type ImageReviewContainerSpec struct {
	// This can be in the form image:tag or image@SHA:012345679abcdef.
	Image string
}

ImageReviewContainerSpec is a description of a container within the pod creation request.

func (*ImageReviewContainerSpec) CodecDecodeSelf

func (x *ImageReviewContainerSpec) CodecDecodeSelf(d *codec1978.Decoder)

func (*ImageReviewContainerSpec) CodecEncodeSelf

func (x *ImageReviewContainerSpec) CodecEncodeSelf(e *codec1978.Encoder)

type ImageReviewSpec

type ImageReviewSpec struct {
	// Containers is a list of a subset of the information in each container of the Pod being created.
	Containers []ImageReviewContainerSpec
	// Annotations is a list of key-value pairs extracted from the Pod's annotations.
	// It only includes keys which match the pattern `*.image-policy.k8s.io/*`.
	// It is up to each webhook backend to determine how to interpret these annotations, if at all.
	Annotations map[string]string
	// Namespace is the namespace the pod is being created in.
	Namespace string
}

ImageReviewSpec is a description of the pod creation request.

func (*ImageReviewSpec) CodecDecodeSelf

func (x *ImageReviewSpec) CodecDecodeSelf(d *codec1978.Decoder)

func (*ImageReviewSpec) CodecEncodeSelf

func (x *ImageReviewSpec) CodecEncodeSelf(e *codec1978.Encoder)

type ImageReviewStatus

type ImageReviewStatus struct {
	// Allowed indicates that all images were allowed to be run.
	Allowed bool
	// Reason should be empty unless Allowed is false in which case it
	// may contain a short description of what is wrong.  Kubernetes
	// may truncate excessively long errors when displaying to the user.
	Reason string
}

ImageReviewStatus is the result of the token authentication request.

func (*ImageReviewStatus) CodecDecodeSelf

func (x *ImageReviewStatus) CodecDecodeSelf(d *codec1978.Decoder)

func (*ImageReviewStatus) CodecEncodeSelf

func (x *ImageReviewStatus) CodecEncodeSelf(e *codec1978.Encoder)