v1alpha1

Documentation

Overview

Package v1alpha1 contains API Schema definitions for the operator v1alpha1 API group +kubebuilder:object:generate=true +groupName=operator.gatekeeper.sh

Index

• Variables
• type AuditConfig
  • func (in *AuditConfig) DeepCopy() *AuditConfig
  • func (in *AuditConfig) DeepCopyInto(out *AuditConfig)
• type AuditFromCacheMode
• type EmitEventsMode
• type Gatekeeper
  • func (in *Gatekeeper) DeepCopy() *Gatekeeper
  • func (in *Gatekeeper) DeepCopyInto(out *Gatekeeper)
  • func (in *Gatekeeper) DeepCopyObject() runtime.Object
• type GatekeeperList
  • func (in *GatekeeperList) DeepCopy() *GatekeeperList
  • func (in *GatekeeperList) DeepCopyInto(out *GatekeeperList)
  • func (in *GatekeeperList) DeepCopyObject() runtime.Object
• type GatekeeperSpec
  • func (in *GatekeeperSpec) DeepCopy() *GatekeeperSpec
  • func (in *GatekeeperSpec) DeepCopyInto(out *GatekeeperSpec)
• type GatekeeperStatus
  • func (in *GatekeeperStatus) DeepCopy() *GatekeeperStatus
  • func (in *GatekeeperStatus) DeepCopyInto(out *GatekeeperStatus)
• type ImageConfig
  • func (in *ImageConfig) DeepCopy() *ImageConfig
  • func (in *ImageConfig) DeepCopyInto(out *ImageConfig)
• type LogLevelMode
• type StatusCondition
  • func (in *StatusCondition) DeepCopy() *StatusCondition
  • func (in *StatusCondition) DeepCopyInto(out *StatusCondition)
• type StatusConditionType
• type WebhookConfig
  • func (in *WebhookConfig) DeepCopy() *WebhookConfig
  • func (in *WebhookConfig) DeepCopyInto(out *WebhookConfig)
• type WebhookMode

Variables

var (
	// GroupVersion is group version used to register these objects
	GroupVersion = schema.GroupVersion{Group: "operator.gatekeeper.sh", Version: "v1alpha1"}

	// SchemeBuilder is used to add go types to the GroupVersionKind scheme
	SchemeBuilder = &scheme.Builder{GroupVersion: GroupVersion}

	// AddToScheme adds the types in this group-version to the given scheme.
	AddToScheme = SchemeBuilder.AddToScheme
)

Types

type AuditConfig

type AuditConfig struct {
	// +kubebuilder:validation:Minimum:=0
	// +optional
	Replicas *int32 `json:"replicas,omitempty"`
	// +optional
	AuditInterval *metav1.Duration `json:"auditInterval,omitempty"`
	// +kubebuilder:validation:Minimum:=0
	// +optional
	ConstraintViolationLimit *uint64 `json:"constraintViolationLimit,omitempty"`
	// +optional
	AuditFromCache *AuditFromCacheMode `json:"auditFromCache,omitempty"`
	// +kubebuilder:validation:Minimum:=0
	// +optional
	AuditChunkSize *uint64 `json:"auditChunkSize,omitempty"`
	// +optional
	LogLevel *LogLevelMode `json:"logLevel,omitempty"`
	// +optional
	EmitAuditEvents *EmitEventsMode `json:"emitAuditEvents,omitempty"`
	// +optional
	Resources *corev1.ResourceRequirements `json:"resources,omitempty"`
}

func (*AuditConfig) DeepCopy

func (in *AuditConfig) DeepCopy() *AuditConfig

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new AuditConfig.

func (*AuditConfig) DeepCopyInto

func (in *AuditConfig) DeepCopyInto(out *AuditConfig)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type AuditFromCacheMode

type AuditFromCacheMode string

+kubebuilder:validation:Enum:=Enabled;Disabled

const (
	AuditFromCacheEnabled  AuditFromCacheMode = "Enabled"
	AuditFromCacheDisabled AuditFromCacheMode = "Disabled"
)

type EmitEventsMode

type EmitEventsMode string

+kubebuilder:validation:Enum:=Enabled;Disabled

const (
	EmitEventsEnabled  EmitEventsMode = "Enabled"
	EmitEventsDisabled EmitEventsMode = "Disabled"
)

type Gatekeeper

type Gatekeeper struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   GatekeeperSpec   `json:"spec,omitempty"`
	Status GatekeeperStatus `json:"status,omitempty"`
}

Gatekeeper is the Schema for the gatekeepers API

func (*Gatekeeper) DeepCopy

func (in *Gatekeeper) DeepCopy() *Gatekeeper

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new Gatekeeper.

func (*Gatekeeper) DeepCopyInto

func (in *Gatekeeper) DeepCopyInto(out *Gatekeeper)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*Gatekeeper) DeepCopyObject

func (in *Gatekeeper) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

type GatekeeperList

type GatekeeperList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []Gatekeeper `json:"items"`
}

GatekeeperList contains a list of Gatekeeper

func (*GatekeeperList) DeepCopy

func (in *GatekeeperList) DeepCopy() *GatekeeperList

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new GatekeeperList.

func (*GatekeeperList) DeepCopyInto

func (in *GatekeeperList) DeepCopyInto(out *GatekeeperList)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*GatekeeperList) DeepCopyObject

func (in *GatekeeperList) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

type GatekeeperSpec

type GatekeeperSpec struct {

	// +operator-sdk:csv:customresourcedefinitions:type=spec,displayName="Image Configuration"
	// +optional
	Image *ImageConfig `json:"image,omitempty"`

	// +operator-sdk:csv:customresourcedefinitions:type=spec,displayName="Audit Configuration"
	// +optional
	Audit *AuditConfig `json:"audit,omitempty"`

	// +operator-sdk:csv:customresourcedefinitions:type=spec,displayName="Validating Webhook"
	// +optional
	ValidatingWebhook *WebhookMode `json:"validatingWebhook,omitempty"`

	// +operator-sdk:csv:customresourcedefinitions:type=spec,displayName="Mutating Webhook"
	// +optional
	MutatingWebhook *WebhookMode `json:"mutatingWebhook,omitempty"`

	// +operator-sdk:csv:customresourcedefinitions:type=spec,displayName="Webhook Config"
	// +optional
	Webhook *WebhookConfig `json:"webhook,omitempty"`

	// +operator-sdk:csv:customresourcedefinitions:type=spec,displayName="Node Selector"
	// +optional
	NodeSelector map[string]string `json:"nodeSelector,omitempty"`

	// +operator-sdk:csv:customresourcedefinitions:type=spec,displayName="Affinity"
	// +optional
	Affinity *corev1.Affinity `json:"affinity,omitempty"`

	// +operator-sdk:csv:customresourcedefinitions:type=spec,displayName="Tolerations"
	// +optional
	Tolerations []corev1.Toleration `json:"tolerations,omitempty"`

	// +operator-sdk:csv:customresourcedefinitions:type=spec,displayName="Pod Annotations"
	// +optional
	PodAnnotations map[string]string `json:"podAnnotations,omitempty"`
}

GatekeeperSpec defines the desired state of Gatekeeper

func (*GatekeeperSpec) DeepCopy

func (in *GatekeeperSpec) DeepCopy() *GatekeeperSpec

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new GatekeeperSpec.

func (*GatekeeperSpec) DeepCopyInto

func (in *GatekeeperSpec) DeepCopyInto(out *GatekeeperSpec)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type GatekeeperStatus

type GatekeeperStatus struct {

	// ObservedGeneration is the generation as observed by the operator consuming this API.
	// +operator-sdk:csv:customresourcedefinitions:type=status,displayName="Observed Generation"
	ObservedGeneration int64 `json:"observedGeneration"`

	// +operator-sdk:csv:customresourcedefinitions:type=status,displayName="Audit Conditions"
	AuditConditions []StatusCondition `json:"auditConditions"`

	// +operator-sdk:csv:customresourcedefinitions:type=status,displayName="Webhook Conditions"
	WebhookConditions []StatusCondition `json:"webhookConditions"`
}

GatekeeperStatus defines the observed state of Gatekeeper

func (*GatekeeperStatus) DeepCopy

func (in *GatekeeperStatus) DeepCopy() *GatekeeperStatus

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new GatekeeperStatus.

func (*GatekeeperStatus) DeepCopyInto

func (in *GatekeeperStatus) DeepCopyInto(out *GatekeeperStatus)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type ImageConfig

type ImageConfig struct {
	// DEPRECATED: Image is deprecated. Its continued use will be honored by
	// the operator with a warning and removed in a future release. Instead,
	// the operator will rely on the environment variable set in its manifest
	// at deployment time and will be the default behavior after this field is
	// removed.
	// Image to pull including registry (optional), repository, name, and tag
	// e.g. quay.io/gatekeeper/gatekeeper-operator:latest
	// +optional
	Image *string `json:"image,omitempty"`
	// +optional
	ImagePullPolicy *corev1.PullPolicy `json:"imagePullPolicy,omitempty"`
}

func (*ImageConfig) DeepCopy

func (in *ImageConfig) DeepCopy() *ImageConfig

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ImageConfig.

func (*ImageConfig) DeepCopyInto

func (in *ImageConfig) DeepCopyInto(out *ImageConfig)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type LogLevelMode

type LogLevelMode string

+kubebuilder:validation:Enum:=DEBUG;INFO;WARNING;ERROR

const (
	LogLevelDEBUG   LogLevelMode = "DEBUG"
	LogLevelInfo    LogLevelMode = "INFO"
	LogLevelWarning LogLevelMode = "WARNING"
	LogLevelError   LogLevelMode = "ERROR"
)

type StatusCondition

type StatusCondition struct {
	// Type of status condition.
	Type StatusConditionType `json:"type"`
	// Status of the condition, one of True, False, Unknown.
	Status corev1.ConditionStatus `json:"status"`
	// Last time the condition was checked.
	// +optional
	LastProbeTime metav1.Time `json:"lastProbeTime,omitempty"`
	// Last time the condition transit from one status to another.
	// +optional
	LastTransitionTime metav1.Time `json:"lastTransitionTime,omitempty"`
	// (brief) reason for the condition's last transition.
	// +optional
	Reason string `json:"reason,omitempty"`
	// Human readable message indicating details about last transition.
	// +optional
	Message string `json:"message,omitempty"`
}

StatusCondition describes the current state of a component.

func (*StatusCondition) DeepCopy

func (in *StatusCondition) DeepCopy() *StatusCondition

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new StatusCondition.

func (*StatusCondition) DeepCopyInto

func (in *StatusCondition) DeepCopyInto(out *StatusCondition)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type StatusConditionType

type StatusConditionType string

+kubebuilder:validation:Enum:=Ready;Not Ready

const (
	StatusReady    StatusConditionType = "Ready"
	StatusNotReady StatusConditionType = "Not Ready"
)

type WebhookConfig

type WebhookConfig struct {
	// +kubebuilder:validation:Minimum:=0
	// +optional
	Replicas *int32 `json:"replicas,omitempty"`
	// +optional
	LogLevel *LogLevelMode `json:"logLevel,omitempty"`
	// +optional
	EmitAdmissionEvents *EmitEventsMode `json:"emitAdmissionEvents,omitempty"`
	// +optional
	FailurePolicy *admregv1.FailurePolicyType `json:"failurePolicy,omitempty"`
	// +optional
	NamespaceSelector *metav1.LabelSelector `json:"namespaceSelector,omitempty"`
	// +optional
	Resources *corev1.ResourceRequirements `json:"resources,omitempty"`
	// +optional
	DisabledBuiltins []string `json:"disabledBuiltins,omitempty"`
}

func (*WebhookConfig) DeepCopy

func (in *WebhookConfig) DeepCopy() *WebhookConfig

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new WebhookConfig.

func (*WebhookConfig) DeepCopyInto

func (in *WebhookConfig) DeepCopyInto(out *WebhookConfig)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type WebhookMode

type WebhookMode string

+kubebuilder:validation:Enum:=Enabled;Disabled

const (
	WebhookEnabled  WebhookMode = "Enabled"
	WebhookDisabled WebhookMode = "Disabled"
)