ObjectResourceFromObj mutates a Kubernetes object into an ObjectResource type to populate the policy status with related objects.

MustHave is a ComplianceType to match an object definition as a subset of the whole object.

MustNotHave is a ComplianceType to not match an object definition.

MustOnlyHave is a ComplianceType to match an object definition exactly with the object.

Censored is only used as an internal value to indicate a diff shouldn't be automatically generated.

AddToScheme adds the types in this group-version to the given scheme.

GroupVersion is group version used to register these objects.

SchemeBuilder is used to add go types to the GroupVersionKind scheme.

Condition contains the details of an evaluation of an `object-template`.

ConfigurationPolicy is the schema for the configurationpolicies API.

ConfigurationPolicyList contains a list of configuration policies.

ConfigurationPolicySpec defines the desired configuration of objects on the cluster, along with how the controller should handle when the cluster doesn't match the configuration policy.

ConfigurationPolicyStatus is the observed status of the configuration policy from its object definitions.

EvaluationInterval configures the minimum elapsed time before a configuration policy is reevaluated.

ObjectMetadata contains the metadata for an object matched by the configuration policy.

Properties are additional properties of the related object relevant to the configuration policy.

ObjectResource contains details about an object matched by the configuration policy.

ObjectTemplate describes the desired state of an object on the cluster.

RelatedObject contains the details of an object matched by the policy.

TemplateStatus reports the compliance details from the definitions in an `object-template`.

ComplianceState reports the observed status from the definitions of the policy.

ComplianceType describes how objects on the cluster should be compared with the object definition of the configuration policy.

MetadataComplianceType describes how the labels and annotations of objects on the cluster should be compared with the object definition of the configuration policy.

+kubebuilder:validation:MinLength=1.

PruneObjectBehavior is used to remove objects that are managed by the policy upon either case: a change to the policy that causes an object to no longer be managed by the policy, or the deletion of the policy.

+kubebuilder:validation:Enum=Log;InStatus;None.

+kubebuilder:validation:Enum=None;IfRequired;Always.

RemediationAction is the remediation of the policy.

Severity is a user-defined severity for when an object is noncompliant with this configuration policy.