Package v1 is the v1 version of the API.

Package v1alpha1 is the v1alpha1 version of the API.

Package v1beta1 is the v1beta1 version of the API.

Kind takes an unqualified kind and returns back a Group qualified GroupKind.

Resource takes an unqualified resource and returns back a Group qualified GroupResource.

Allow means all requests will be admitted if no param resources could be found.

AllScopes means that all scopes are included.

Audit specifies that a validation failure is included in the published audit event for the request.

ClusterScope means that scope is limited to cluster-scoped objects.

The constants should be kept in sync with those defined in k8s.io/kubernetes/pkg/admission/interface.go.

The constants should be kept in sync with those defined in k8s.io/kubernetes/pkg/admission/interface.go.

The constants should be kept in sync with those defined in k8s.io/kubernetes/pkg/admission/interface.go.

Deny specifies that a validation failure results in a denied request.

Deny means all requests will be denied if no param resources are found.

Equivalent means requests should be sent to the webhook if they modify a resource listed in rules via another API group or version.

Exact means requests should only be sent to the webhook if they exactly match a given rule.

Fail means that an error calling the webhook causes the admission to fail.

GroupName is the name used for this API group.

Ignore means that an error calling the webhook is ignored.

NamespacedScope means that scope is limited to namespaced objects.

The constants should be kept in sync with those defined in k8s.io/kubernetes/pkg/admission/interface.go.

ApplyConfiguration indicates that the mutation is using apply configuration to mutate the object.

JSONPatch indicates that the object is mutated through JSON Patch.

SideEffectClassNone means that calling the webhook will have no side effects.

SideEffectClassNoneOnDryRun means that calling the webhook will possibly have side effects, but if the request being reviewed has the dry-run attribute, the side effects will be suppressed.

SideEffectClassSome means that calling the webhook will possibly have side effects.

SideEffectClassUnknown means that no information is known about the side effects of calling the webhook.

The constants should be kept in sync with those defined in k8s.io/kubernetes/pkg/admission/interface.go.

Warn specifies that a validation failure is reported to the request client in HTTP Warning headers, with a warning code of 299.

AddToScheme is a global function that registers this API group & version to a scheme.

IfNeededReinvocationPolicy indicates that the webhook may be called at least one additional time as part of the admission evaluation if the object being admitted is modified by other admission plugins after the initial webhook call.

NeverReinvocationPolicy indicates that the webhook must not be called more than once in a single admission evaluation.

SchemeBuilder is the scheme builder with scheme init functions to run for this API package.

SchemeGroupVersion is group version used to register these objects.

ApplyConfiguration defines the desired configuration values of an object.

AuditAnnotation describes how to produce an audit annotation for an API request.

ExpressionWarning is a warning information that targets a specific expression.

JSONPatch defines a JSON Patch.

MatchCondition represents a condition which must by fulfilled for a request to be sent to a webhook.

MatchResources decides whether to run the admission control policy on an object based on whether it meets the match criteria.

MutatingAdmissionPolicy describes an admission policy that may mutate an object.

MutatingAdmissionPolicyBinding binds the MutatingAdmissionPolicy with parametrized resources.

MutatingAdmissionPolicyBindingList is a list of MutatingAdmissionPolicyBinding.

MutatingAdmissionPolicyBindingSpec is the specification of the MutatingAdmissionPolicyBinding.

MutatingAdmissionPolicyList is a list of MutatingAdmissionPolicy.

MutatingAdmissionPolicySpec is the specification of the desired behavior of the admission policy.

MutatingWebhook describes an admission webhook and the resources and operations it applies to.

MutatingWebhookConfiguration describes the configuration of and admission webhook that accept or reject and may change the object.

MutatingWebhookConfigurationList is a list of MutatingWebhookConfiguration.

Mutation specifies the operation that performs a Mutation.

NamedRuleWithOperations is a tuple of Operations and Resources with ResourceNames.

ParamKind is a tuple of Group Kind and Version.

ParamRef describes how to locate the params to be used as input to expressions of rules applied by a policy binding.

Rule is a tuple of APIGroups, APIVersion, and Resources.It is recommended to make sure that all the tuple expansions are valid.

RuleWithOperations is a tuple of Operations and Resources.

ServiceReference holds a reference to Service.legacy.k8s.io.

TypeChecking contains results of type checking the expressions in the ValidatingAdmissionPolicy.

ValidatingAdmissionPolicy describes the definition of an admission validation policy that accepts or rejects an object without changing it.

ValidatingAdmissionPolicyBinding binds the ValidatingAdmissionPolicy with paramerized resources.

ValidatingAdmissionPolicyBindingList is a list of PolicyBinding.

ValidatingAdmissionPolicyBindingSpec is the specification of the ValidatingAdmissionPolicyBinding.

ValidatingAdmissionPolicyList is a list of ValidatingAdmissionPolicy.

ValidatingAdmissionPolicySpec is the specification of the desired behavior of the AdmissionPolicy.

ValidatingAdmissionPolicyStatus represents the status of an admission validation policy.

ValidatingWebhook describes an admission webhook and the resources and operations it applies to.

ValidatingWebhookConfiguration describes the configuration of an admission webhook that accepts or rejects and object without changing it.

ValidatingWebhookConfigurationList is a list of ValidatingWebhookConfiguration.

Validation specifies the CEL expression which is used to apply the validation.

Variable is the definition of a variable that is used for composition.

WebhookClientConfig contains the information to make a TLS connection with the webhook.

FailurePolicyType specifies the type of failure policy.

MatchPolicyType specifies the type of match policy.

OperationType specifies what type of operation the admission hook cares about.

ParameterNotFoundActionType specifies a failure policy that defines how a binding is evaluated when the param referred by its perNamespaceParamRef is not found.

PatchType specifies the type of patch operation for a mutation.

ReinvocationPolicyType specifies what type of policy the admission hook uses.

ScopeType specifies the type of scope being used.

SideEffectClass denotes the type of side effects resulting from calling the webhook.

ValidatingAdmissionPolicyConditionType is the condition type of admission validation policy.

ValidationAction specifies a policy enforcement action.