GroupName is the group name for this API.
const GroupName = "imagepolicy.k8s.io"
var (
ErrInvalidLengthGenerated = fmt.Errorf("proto: negative length found during unmarshaling")
ErrIntOverflowGenerated = fmt.Errorf("proto: integer overflow")
ErrUnexpectedEndOfGroupGenerated = fmt.Errorf("proto: unexpected end of group")
)
var (
// TODO: move SchemeBuilder with zz_generated.deepcopy.go to k8s.io/api.
// localSchemeBuilder and AddToScheme will stay in k8s.io/kubernetes.
SchemeBuilder = runtime.NewSchemeBuilder(addKnownTypes)
AddToScheme = localSchemeBuilder.AddToScheme
)
SchemeGroupVersion is group version used to register these objects
var SchemeGroupVersion = schema.GroupVersion{Group: GroupName, Version: "v1alpha1"}
func Resource(resource string) schema.GroupResource
Resource takes an unqualified resource and returns a Group qualified GroupResource
ImageReview checks if the set of images in a pod are allowed.
type ImageReview struct {
metav1.TypeMeta `json:",inline"`
// Standard object's metadata.
// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
// +optional
metav1.ObjectMeta `json:"metadata,omitempty" protobuf:"bytes,1,opt,name=metadata"`
// Spec holds information about the pod being evaluated
Spec ImageReviewSpec `json:"spec" protobuf:"bytes,2,opt,name=spec"`
// Status is filled in by the backend and indicates whether the pod should be allowed.
// +optional
Status ImageReviewStatus `json:"status,omitempty" protobuf:"bytes,3,opt,name=status"`
}
func (in *ImageReview) DeepCopy() *ImageReview
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ImageReview.
func (in *ImageReview) DeepCopyInto(out *ImageReview)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (in *ImageReview) DeepCopyObject() runtime.Object
DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.
func (*ImageReview) Descriptor() ([]byte, []int)
func (m *ImageReview) Marshal() (dAtA []byte, err error)
func (m *ImageReview) MarshalTo(dAtA []byte) (int, error)
func (m *ImageReview) MarshalToSizedBuffer(dAtA []byte) (int, error)
func (*ImageReview) ProtoMessage()
func (m *ImageReview) Reset()
func (m *ImageReview) Size() (n int)
func (this *ImageReview) String() string
func (ImageReview) SwaggerDoc() map[string]string
func (m *ImageReview) Unmarshal(dAtA []byte) error
func (m *ImageReview) XXX_DiscardUnknown()
func (m *ImageReview) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)
func (m *ImageReview) XXX_Merge(src proto.Message)
func (m *ImageReview) XXX_Size() int
func (m *ImageReview) XXX_Unmarshal(b []byte) error
ImageReviewContainerSpec is a description of a container within the pod creation request.
type ImageReviewContainerSpec struct {
// This can be in the form image:tag or image@SHA:012345679abcdef.
// +optional
Image string `json:"image,omitempty" protobuf:"bytes,1,opt,name=image"`
}
func (in *ImageReviewContainerSpec) DeepCopy() *ImageReviewContainerSpec
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ImageReviewContainerSpec.
func (in *ImageReviewContainerSpec) DeepCopyInto(out *ImageReviewContainerSpec)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (*ImageReviewContainerSpec) Descriptor() ([]byte, []int)
func (m *ImageReviewContainerSpec) Marshal() (dAtA []byte, err error)
func (m *ImageReviewContainerSpec) MarshalTo(dAtA []byte) (int, error)
func (m *ImageReviewContainerSpec) MarshalToSizedBuffer(dAtA []byte) (int, error)
func (*ImageReviewContainerSpec) ProtoMessage()
func (m *ImageReviewContainerSpec) Reset()
func (m *ImageReviewContainerSpec) Size() (n int)
func (this *ImageReviewContainerSpec) String() string
func (ImageReviewContainerSpec) SwaggerDoc() map[string]string
func (m *ImageReviewContainerSpec) Unmarshal(dAtA []byte) error
func (m *ImageReviewContainerSpec) XXX_DiscardUnknown()
func (m *ImageReviewContainerSpec) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)
func (m *ImageReviewContainerSpec) XXX_Merge(src proto.Message)
func (m *ImageReviewContainerSpec) XXX_Size() int
func (m *ImageReviewContainerSpec) XXX_Unmarshal(b []byte) error
ImageReviewSpec is a description of the pod creation request.
type ImageReviewSpec struct {
// Containers is a list of a subset of the information in each container of the Pod being created.
// +optional
// +listType=atomic
Containers []ImageReviewContainerSpec `json:"containers,omitempty" protobuf:"bytes,1,rep,name=containers"`
// Annotations is a list of key-value pairs extracted from the Pod's annotations.
// It only includes keys which match the pattern `*.image-policy.k8s.io/*`.
// It is up to each webhook backend to determine how to interpret these annotations, if at all.
// +optional
Annotations map[string]string `json:"annotations,omitempty" protobuf:"bytes,2,rep,name=annotations"`
// Namespace is the namespace the pod is being created in.
// +optional
Namespace string `json:"namespace,omitempty" protobuf:"bytes,3,opt,name=namespace"`
}
func (in *ImageReviewSpec) DeepCopy() *ImageReviewSpec
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ImageReviewSpec.
func (in *ImageReviewSpec) DeepCopyInto(out *ImageReviewSpec)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (*ImageReviewSpec) Descriptor() ([]byte, []int)
func (m *ImageReviewSpec) Marshal() (dAtA []byte, err error)
func (m *ImageReviewSpec) MarshalTo(dAtA []byte) (int, error)
func (m *ImageReviewSpec) MarshalToSizedBuffer(dAtA []byte) (int, error)
func (*ImageReviewSpec) ProtoMessage()
func (m *ImageReviewSpec) Reset()
func (m *ImageReviewSpec) Size() (n int)
func (this *ImageReviewSpec) String() string
func (ImageReviewSpec) SwaggerDoc() map[string]string
func (m *ImageReviewSpec) Unmarshal(dAtA []byte) error
func (m *ImageReviewSpec) XXX_DiscardUnknown()
func (m *ImageReviewSpec) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)
func (m *ImageReviewSpec) XXX_Merge(src proto.Message)
func (m *ImageReviewSpec) XXX_Size() int
func (m *ImageReviewSpec) XXX_Unmarshal(b []byte) error
ImageReviewStatus is the result of the review for the pod creation request.
type ImageReviewStatus struct {
// Allowed indicates that all images were allowed to be run.
Allowed bool `json:"allowed" protobuf:"varint,1,opt,name=allowed"`
// Reason should be empty unless Allowed is false in which case it
// may contain a short description of what is wrong. Kubernetes
// may truncate excessively long errors when displaying to the user.
// +optional
Reason string `json:"reason,omitempty" protobuf:"bytes,2,opt,name=reason"`
// AuditAnnotations will be added to the attributes object of the
// admission controller request using 'AddAnnotation'. The keys should
// be prefix-less (i.e., the admission controller will add an
// appropriate prefix).
// +optional
AuditAnnotations map[string]string `json:"auditAnnotations,omitempty" protobuf:"bytes,3,rep,name=auditAnnotations"`
}
func (in *ImageReviewStatus) DeepCopy() *ImageReviewStatus
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ImageReviewStatus.
func (in *ImageReviewStatus) DeepCopyInto(out *ImageReviewStatus)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (*ImageReviewStatus) Descriptor() ([]byte, []int)
func (m *ImageReviewStatus) Marshal() (dAtA []byte, err error)
func (m *ImageReviewStatus) MarshalTo(dAtA []byte) (int, error)
func (m *ImageReviewStatus) MarshalToSizedBuffer(dAtA []byte) (int, error)
func (*ImageReviewStatus) ProtoMessage()
func (m *ImageReviewStatus) Reset()
func (m *ImageReviewStatus) Size() (n int)
func (this *ImageReviewStatus) String() string
func (ImageReviewStatus) SwaggerDoc() map[string]string
func (m *ImageReviewStatus) Unmarshal(dAtA []byte) error
func (m *ImageReviewStatus) XXX_DiscardUnknown()
func (m *ImageReviewStatus) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)
func (m *ImageReviewStatus) XXX_Merge(src proto.Message)
func (m *ImageReviewStatus) XXX_Size() int
func (m *ImageReviewStatus) XXX_Unmarshal(b []byte) error