k8s_io_api_admission_v1

package
v0.0.0-...-940152b Latest Latest
Warning

This package is not in the latest version of its module.

Go to latest
Published: Jun 10, 2020 License: Apache-2.0 Imports: 13 Imported by: 0

Documentation

Index

Constants

This section is empty.

Variables

View Source
var (
	ErrInvalidLengthGenerated = fmt.Errorf("proto: negative length found during unmarshaling")
	ErrIntOverflowGenerated   = fmt.Errorf("proto: integer overflow")
)

Functions

This section is empty.

Types

type AdmissionRequest

type AdmissionRequest struct {
	// UID is an identifier for the individual request/response. It allows us to distinguish instances of requests which are
	// otherwise identical (parallel requests, requests when earlier requests did not modify etc)
	// The UID is meant to track the round trip (request/response) between the KAS and the WebHook, not the user request.
	// It is suitable for correlating log entries between the webhook and apiserver, for either auditing or debugging.
	Uid string `protobuf:"bytes,1,opt,name=uid" json:"uid"`
	// Kind is the fully-qualified type of object being submitted (for example, v1.Pod or autoscaling.v1.Scale)
	Kind *v1.GroupVersionKind `protobuf:"bytes,2,opt,name=kind" json:"kind,omitempty"`
	// Resource is the fully-qualified resource being requested (for example, v1.pods)
	Resource *v1.GroupVersionResource `protobuf:"bytes,3,opt,name=resource" json:"resource,omitempty"`
	// SubResource is the subresource being requested, if any (for example, "status" or "scale")
	// +optional
	SubResource string `protobuf:"bytes,4,opt,name=subResource" json:"subResource"`
	// RequestKind is the fully-qualified type of the original API request (for example, v1.Pod or autoscaling.v1.Scale).
	// If this is specified and differs from the value in "kind", an equivalent match and conversion was performed.
	//
	// For example, if deployments can be modified via apps/v1 and apps/v1beta1, and a webhook registered a rule of
	// `apiGroups:["apps"], apiVersions:["v1"], resources: ["deployments"]` and `matchPolicy: Equivalent`,
	// an API request to apps/v1beta1 deployments would be converted and sent to the webhook
	// with `kind: {group:"apps", version:"v1", kind:"Deployment"}` (matching the rule the webhook registered for),
	// and `requestKind: {group:"apps", version:"v1beta1", kind:"Deployment"}` (indicating the kind of the original API request).
	//
	// See documentation for the "matchPolicy" field in the webhook configuration type for more details.
	// +optional
	RequestKind *v1.GroupVersionKind `protobuf:"bytes,13,opt,name=requestKind" json:"requestKind,omitempty"`
	// RequestResource is the fully-qualified resource of the original API request (for example, v1.pods).
	// If this is specified and differs from the value in "resource", an equivalent match and conversion was performed.
	//
	// For example, if deployments can be modified via apps/v1 and apps/v1beta1, and a webhook registered a rule of
	// `apiGroups:["apps"], apiVersions:["v1"], resources: ["deployments"]` and `matchPolicy: Equivalent`,
	// an API request to apps/v1beta1 deployments would be converted and sent to the webhook
	// with `resource: {group:"apps", version:"v1", resource:"deployments"}` (matching the resource the webhook registered for),
	// and `requestResource: {group:"apps", version:"v1beta1", resource:"deployments"}` (indicating the resource of the original API request).
	//
	// See documentation for the "matchPolicy" field in the webhook configuration type.
	// +optional
	RequestResource *v1.GroupVersionResource `protobuf:"bytes,14,opt,name=requestResource" json:"requestResource,omitempty"`
	// RequestSubResource is the name of the subresource of the original API request, if any (for example, "status" or "scale")
	// If this is specified and differs from the value in "subResource", an equivalent match and conversion was performed.
	// See documentation for the "matchPolicy" field in the webhook configuration type.
	// +optional
	RequestSubResource string `protobuf:"bytes,15,opt,name=requestSubResource" json:"requestSubResource"`
	// Name is the name of the object as presented in the request.  On a CREATE operation, the client may omit name and
	// rely on the server to generate the name.  If that is the case, this field will contain an empty string.
	// +optional
	Name string `protobuf:"bytes,5,opt,name=name" json:"name"`
	// Namespace is the namespace associated with the request (if any).
	// +optional
	Namespace string `protobuf:"bytes,6,opt,name=namespace" json:"namespace"`
	// Operation is the operation being performed. This may be different than the operation
	// requested. e.g. a patch can result in either a CREATE or UPDATE Operation.
	Operation string `protobuf:"bytes,7,opt,name=operation" json:"operation"`
	// UserInfo is information about the requesting user
	UserInfo *v11.UserInfo `protobuf:"bytes,8,opt,name=userInfo" json:"userInfo,omitempty"`
	// Object is the object from the incoming request.
	// +optional
	Object *runtime.RawExtension `protobuf:"bytes,9,opt,name=object" json:"object,omitempty"`
	// OldObject is the existing object. Only populated for DELETE and UPDATE requests.
	// +optional
	OldObject *runtime.RawExtension `protobuf:"bytes,10,opt,name=oldObject" json:"oldObject,omitempty"`
	// DryRun indicates that modifications will definitely not be persisted for this request.
	// Defaults to false.
	// +optional
	DryRun bool `protobuf:"varint,11,opt,name=dryRun" json:"dryRun"`
	// Options is the operation option structure of the operation being performed.
	// e.g. `meta.k8s.io/v1.DeleteOptions` or `meta.k8s.io/v1.CreateOptions`. This may be
	// different than the options the caller provided. e.g. for a patch request the performed
	// Operation might be a CREATE, in which case the Options will a
	// `meta.k8s.io/v1.CreateOptions` even though the caller provided `meta.k8s.io/v1.PatchOptions`.
	// +optional
	Options *runtime.RawExtension `protobuf:"bytes,12,opt,name=options" json:"options,omitempty"`
}

AdmissionRequest describes the admission.Attributes for the admission request.

func (*AdmissionRequest) Descriptor

func (*AdmissionRequest) Descriptor() ([]byte, []int)

func (*AdmissionRequest) Equal

func (this *AdmissionRequest) Equal(that interface{}) bool

func (*AdmissionRequest) GetDryRun

func (m *AdmissionRequest) GetDryRun() bool

func (*AdmissionRequest) GetKind

func (m *AdmissionRequest) GetKind() *v1.GroupVersionKind

func (*AdmissionRequest) GetName

func (m *AdmissionRequest) GetName() string

func (*AdmissionRequest) GetNamespace

func (m *AdmissionRequest) GetNamespace() string

func (*AdmissionRequest) GetObject

func (m *AdmissionRequest) GetObject() *runtime.RawExtension

func (*AdmissionRequest) GetOldObject

func (m *AdmissionRequest) GetOldObject() *runtime.RawExtension

func (*AdmissionRequest) GetOperation

func (m *AdmissionRequest) GetOperation() string

func (*AdmissionRequest) GetOptions

func (m *AdmissionRequest) GetOptions() *runtime.RawExtension

func (*AdmissionRequest) GetRequestKind

func (m *AdmissionRequest) GetRequestKind() *v1.GroupVersionKind

func (*AdmissionRequest) GetRequestResource

func (m *AdmissionRequest) GetRequestResource() *v1.GroupVersionResource

func (*AdmissionRequest) GetRequestSubResource

func (m *AdmissionRequest) GetRequestSubResource() string

func (*AdmissionRequest) GetResource

func (m *AdmissionRequest) GetResource() *v1.GroupVersionResource

func (*AdmissionRequest) GetSubResource

func (m *AdmissionRequest) GetSubResource() string

func (*AdmissionRequest) GetUid

func (m *AdmissionRequest) GetUid() string

func (*AdmissionRequest) GetUserInfo

func (m *AdmissionRequest) GetUserInfo() *v11.UserInfo

func (*AdmissionRequest) GoString

func (this *AdmissionRequest) GoString() string

func (*AdmissionRequest) Marshal

func (m *AdmissionRequest) Marshal() (dAtA []byte, err error)

func (*AdmissionRequest) MarshalTo

func (m *AdmissionRequest) MarshalTo(dAtA []byte) (int, error)

func (*AdmissionRequest) MarshalToSizedBuffer

func (m *AdmissionRequest) MarshalToSizedBuffer(dAtA []byte) (int, error)

func (*AdmissionRequest) ProtoMessage

func (*AdmissionRequest) ProtoMessage()

func (*AdmissionRequest) Reset

func (m *AdmissionRequest) Reset()

func (*AdmissionRequest) Size

func (m *AdmissionRequest) Size() (n int)

func (*AdmissionRequest) String

func (this *AdmissionRequest) String() string

func (*AdmissionRequest) Unmarshal

func (m *AdmissionRequest) Unmarshal(dAtA []byte) error

func (*AdmissionRequest) XXX_DiscardUnknown

func (m *AdmissionRequest) XXX_DiscardUnknown()

func (*AdmissionRequest) XXX_Marshal

func (m *AdmissionRequest) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

func (*AdmissionRequest) XXX_Merge

func (m *AdmissionRequest) XXX_Merge(src proto.Message)

func (*AdmissionRequest) XXX_Size

func (m *AdmissionRequest) XXX_Size() int

func (*AdmissionRequest) XXX_Unmarshal

func (m *AdmissionRequest) XXX_Unmarshal(b []byte) error

type AdmissionResponse

type AdmissionResponse struct {
	// UID is an identifier for the individual request/response.
	// This must be copied over from the corresponding AdmissionRequest.
	Uid string `protobuf:"bytes,1,opt,name=uid" json:"uid"`
	// Allowed indicates whether or not the admission request was permitted.
	Allowed bool `protobuf:"varint,2,opt,name=allowed" json:"allowed"`
	// Result contains extra details into why an admission request was denied.
	// This field IS NOT consulted in any way if "Allowed" is "true".
	// +optional
	Status *v1.Status `protobuf:"bytes,3,opt,name=status" json:"status,omitempty"`
	// The patch body. Currently we only support "JSONPatch" which implements RFC 6902.
	// +optional
	Patch []byte `protobuf:"bytes,4,opt,name=patch" json:"patch"`
	// The type of Patch. Currently we only allow "JSONPatch".
	// +optional
	PatchType string `protobuf:"bytes,5,opt,name=patchType" json:"patchType"`
	// AuditAnnotations is an unstructured key value map set by remote admission controller (e.g. error=image-blacklisted).
	// MutatingAdmissionWebhook and ValidatingAdmissionWebhook admission controller will prefix the keys with
	// admission webhook name (e.g. imagepolicy.example.com/error=image-blacklisted). AuditAnnotations will be provided by
	// the admission webhook to add additional context to the audit log for this request.
	// +optional
	AuditAnnotations map[string]string `` /* 152-byte string literal not displayed */
}

AdmissionResponse describes an admission response.

func (*AdmissionResponse) Descriptor

func (*AdmissionResponse) Descriptor() ([]byte, []int)

func (*AdmissionResponse) Equal

func (this *AdmissionResponse) Equal(that interface{}) bool

func (*AdmissionResponse) GetAllowed

func (m *AdmissionResponse) GetAllowed() bool

func (*AdmissionResponse) GetAuditAnnotations

func (m *AdmissionResponse) GetAuditAnnotations() map[string]string

func (*AdmissionResponse) GetPatch

func (m *AdmissionResponse) GetPatch() []byte

func (*AdmissionResponse) GetPatchType

func (m *AdmissionResponse) GetPatchType() string

func (*AdmissionResponse) GetStatus

func (m *AdmissionResponse) GetStatus() *v1.Status

func (*AdmissionResponse) GetUid

func (m *AdmissionResponse) GetUid() string

func (*AdmissionResponse) GoString

func (this *AdmissionResponse) GoString() string

func (*AdmissionResponse) Marshal

func (m *AdmissionResponse) Marshal() (dAtA []byte, err error)

func (*AdmissionResponse) MarshalTo

func (m *AdmissionResponse) MarshalTo(dAtA []byte) (int, error)

func (*AdmissionResponse) MarshalToSizedBuffer

func (m *AdmissionResponse) MarshalToSizedBuffer(dAtA []byte) (int, error)

func (*AdmissionResponse) ProtoMessage

func (*AdmissionResponse) ProtoMessage()

func (*AdmissionResponse) Reset

func (m *AdmissionResponse) Reset()

func (*AdmissionResponse) Size

func (m *AdmissionResponse) Size() (n int)

func (*AdmissionResponse) String

func (this *AdmissionResponse) String() string

func (*AdmissionResponse) Unmarshal

func (m *AdmissionResponse) Unmarshal(dAtA []byte) error

func (*AdmissionResponse) XXX_DiscardUnknown

func (m *AdmissionResponse) XXX_DiscardUnknown()

func (*AdmissionResponse) XXX_Marshal

func (m *AdmissionResponse) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

func (*AdmissionResponse) XXX_Merge

func (m *AdmissionResponse) XXX_Merge(src proto.Message)

func (*AdmissionResponse) XXX_Size

func (m *AdmissionResponse) XXX_Size() int

func (*AdmissionResponse) XXX_Unmarshal

func (m *AdmissionResponse) XXX_Unmarshal(b []byte) error

type AdmissionReview

type AdmissionReview struct {
	// Request describes the attributes for the admission request.
	// +optional
	Request *AdmissionRequest `protobuf:"bytes,1,opt,name=request" json:"request,omitempty"`
	// Response describes the attributes for the admission response.
	// +optional
	Response *AdmissionResponse `protobuf:"bytes,2,opt,name=response" json:"response,omitempty"`
}

AdmissionReview describes an admission review request/response.

func (*AdmissionReview) Descriptor

func (*AdmissionReview) Descriptor() ([]byte, []int)

func (*AdmissionReview) Equal

func (this *AdmissionReview) Equal(that interface{}) bool

func (*AdmissionReview) GetRequest

func (m *AdmissionReview) GetRequest() *AdmissionRequest

func (*AdmissionReview) GetResponse

func (m *AdmissionReview) GetResponse() *AdmissionResponse

func (*AdmissionReview) GoString

func (this *AdmissionReview) GoString() string

func (*AdmissionReview) Marshal

func (m *AdmissionReview) Marshal() (dAtA []byte, err error)

func (*AdmissionReview) MarshalTo

func (m *AdmissionReview) MarshalTo(dAtA []byte) (int, error)

func (*AdmissionReview) MarshalToSizedBuffer

func (m *AdmissionReview) MarshalToSizedBuffer(dAtA []byte) (int, error)

func (*AdmissionReview) ProtoMessage

func (*AdmissionReview) ProtoMessage()

func (*AdmissionReview) Reset

func (m *AdmissionReview) Reset()

func (*AdmissionReview) Size

func (m *AdmissionReview) Size() (n int)

func (*AdmissionReview) String

func (this *AdmissionReview) String() string

func (*AdmissionReview) Unmarshal

func (m *AdmissionReview) Unmarshal(dAtA []byte) error

func (*AdmissionReview) XXX_DiscardUnknown

func (m *AdmissionReview) XXX_DiscardUnknown()

func (*AdmissionReview) XXX_Marshal

func (m *AdmissionReview) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

func (*AdmissionReview) XXX_Merge

func (m *AdmissionReview) XXX_Merge(src proto.Message)

func (*AdmissionReview) XXX_Size

func (m *AdmissionReview) XXX_Size() int

func (*AdmissionReview) XXX_Unmarshal

func (m *AdmissionReview) XXX_Unmarshal(b []byte) error

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL