public static interface V1beta1Admissionregistration.WebhookOrBuilder
extends com.google.protobuf.MessageOrBuilder
| Modifier and Type | Method and Description |
|---|---|
V1beta1Admissionregistration.WebhookClientConfig |
getClientConfig()
ClientConfig defines how to communicate with the hook.
|
V1beta1Admissionregistration.WebhookClientConfigOrBuilder |
getClientConfigOrBuilder()
ClientConfig defines how to communicate with the hook.
|
String |
getFailurePolicy()
FailurePolicy defines how unrecognized errors from the admission endpoint are handled -
allowed values are Ignore or Fail.
|
com.google.protobuf.ByteString |
getFailurePolicyBytes()
FailurePolicy defines how unrecognized errors from the admission endpoint are handled -
allowed values are Ignore or Fail.
|
String |
getName()
The name of the admission webhook.
|
com.google.protobuf.ByteString |
getNameBytes()
The name of the admission webhook.
|
Meta.LabelSelector |
getNamespaceSelector()
NamespaceSelector decides whether to run the webhook on an object based
on whether the namespace for that object matches the selector.
|
Meta.LabelSelectorOrBuilder |
getNamespaceSelectorOrBuilder()
NamespaceSelector decides whether to run the webhook on an object based
on whether the namespace for that object matches the selector.
|
V1beta1Admissionregistration.RuleWithOperations |
getRules(int index)
Rules describes what operations on what resources/subresources the webhook cares about.
|
int |
getRulesCount()
Rules describes what operations on what resources/subresources the webhook cares about.
|
List<V1beta1Admissionregistration.RuleWithOperations> |
getRulesList()
Rules describes what operations on what resources/subresources the webhook cares about.
|
V1beta1Admissionregistration.RuleWithOperationsOrBuilder |
getRulesOrBuilder(int index)
Rules describes what operations on what resources/subresources the webhook cares about.
|
List<? extends V1beta1Admissionregistration.RuleWithOperationsOrBuilder> |
getRulesOrBuilderList()
Rules describes what operations on what resources/subresources the webhook cares about.
|
String |
getSideEffects()
SideEffects states whether this webhookk has side effects.
|
com.google.protobuf.ByteString |
getSideEffectsBytes()
SideEffects states whether this webhookk has side effects.
|
boolean |
hasClientConfig()
ClientConfig defines how to communicate with the hook.
|
boolean |
hasFailurePolicy()
FailurePolicy defines how unrecognized errors from the admission endpoint are handled -
allowed values are Ignore or Fail.
|
boolean |
hasName()
The name of the admission webhook.
|
boolean |
hasNamespaceSelector()
NamespaceSelector decides whether to run the webhook on an object based
on whether the namespace for that object matches the selector.
|
boolean |
hasSideEffects()
SideEffects states whether this webhookk has side effects.
|
findInitializationErrors, getAllFields, getDefaultInstanceForType, getDescriptorForType, getField, getInitializationErrorString, getOneofFieldDescriptor, getRepeatedField, getRepeatedFieldCount, getUnknownFields, hasField, hasOneofboolean hasName()
The name of the admission webhook. Name should be fully qualified, e.g., imagepolicy.kubernetes.io, where "imagepolicy" is the name of the webhook, and kubernetes.io is the name of the organization. Required.
optional string name = 1;String getName()
The name of the admission webhook. Name should be fully qualified, e.g., imagepolicy.kubernetes.io, where "imagepolicy" is the name of the webhook, and kubernetes.io is the name of the organization. Required.
optional string name = 1;com.google.protobuf.ByteString getNameBytes()
The name of the admission webhook. Name should be fully qualified, e.g., imagepolicy.kubernetes.io, where "imagepolicy" is the name of the webhook, and kubernetes.io is the name of the organization. Required.
optional string name = 1;boolean hasClientConfig()
ClientConfig defines how to communicate with the hook. Required
optional .k8s.io.api.admissionregistration.v1beta1.WebhookClientConfig clientConfig = 2;V1beta1Admissionregistration.WebhookClientConfig getClientConfig()
ClientConfig defines how to communicate with the hook. Required
optional .k8s.io.api.admissionregistration.v1beta1.WebhookClientConfig clientConfig = 2;V1beta1Admissionregistration.WebhookClientConfigOrBuilder getClientConfigOrBuilder()
ClientConfig defines how to communicate with the hook. Required
optional .k8s.io.api.admissionregistration.v1beta1.WebhookClientConfig clientConfig = 2;List<V1beta1Admissionregistration.RuleWithOperations> getRulesList()
Rules describes what operations on what resources/subresources the webhook cares about. The webhook cares about an operation if it matches _any_ Rule. However, in order to prevent ValidatingAdmissionWebhooks and MutatingAdmissionWebhooks from putting the cluster in a state which cannot be recovered from without completely disabling the plugin, ValidatingAdmissionWebhooks and MutatingAdmissionWebhooks are never called on admission requests for ValidatingWebhookConfiguration and MutatingWebhookConfiguration objects.
repeated .k8s.io.api.admissionregistration.v1beta1.RuleWithOperations rules = 3;V1beta1Admissionregistration.RuleWithOperations getRules(int index)
Rules describes what operations on what resources/subresources the webhook cares about. The webhook cares about an operation if it matches _any_ Rule. However, in order to prevent ValidatingAdmissionWebhooks and MutatingAdmissionWebhooks from putting the cluster in a state which cannot be recovered from without completely disabling the plugin, ValidatingAdmissionWebhooks and MutatingAdmissionWebhooks are never called on admission requests for ValidatingWebhookConfiguration and MutatingWebhookConfiguration objects.
repeated .k8s.io.api.admissionregistration.v1beta1.RuleWithOperations rules = 3;int getRulesCount()
Rules describes what operations on what resources/subresources the webhook cares about. The webhook cares about an operation if it matches _any_ Rule. However, in order to prevent ValidatingAdmissionWebhooks and MutatingAdmissionWebhooks from putting the cluster in a state which cannot be recovered from without completely disabling the plugin, ValidatingAdmissionWebhooks and MutatingAdmissionWebhooks are never called on admission requests for ValidatingWebhookConfiguration and MutatingWebhookConfiguration objects.
repeated .k8s.io.api.admissionregistration.v1beta1.RuleWithOperations rules = 3;List<? extends V1beta1Admissionregistration.RuleWithOperationsOrBuilder> getRulesOrBuilderList()
Rules describes what operations on what resources/subresources the webhook cares about. The webhook cares about an operation if it matches _any_ Rule. However, in order to prevent ValidatingAdmissionWebhooks and MutatingAdmissionWebhooks from putting the cluster in a state which cannot be recovered from without completely disabling the plugin, ValidatingAdmissionWebhooks and MutatingAdmissionWebhooks are never called on admission requests for ValidatingWebhookConfiguration and MutatingWebhookConfiguration objects.
repeated .k8s.io.api.admissionregistration.v1beta1.RuleWithOperations rules = 3;V1beta1Admissionregistration.RuleWithOperationsOrBuilder getRulesOrBuilder(int index)
Rules describes what operations on what resources/subresources the webhook cares about. The webhook cares about an operation if it matches _any_ Rule. However, in order to prevent ValidatingAdmissionWebhooks and MutatingAdmissionWebhooks from putting the cluster in a state which cannot be recovered from without completely disabling the plugin, ValidatingAdmissionWebhooks and MutatingAdmissionWebhooks are never called on admission requests for ValidatingWebhookConfiguration and MutatingWebhookConfiguration objects.
repeated .k8s.io.api.admissionregistration.v1beta1.RuleWithOperations rules = 3;boolean hasFailurePolicy()
FailurePolicy defines how unrecognized errors from the admission endpoint are handled - allowed values are Ignore or Fail. Defaults to Ignore. +optional
optional string failurePolicy = 4;String getFailurePolicy()
FailurePolicy defines how unrecognized errors from the admission endpoint are handled - allowed values are Ignore or Fail. Defaults to Ignore. +optional
optional string failurePolicy = 4;com.google.protobuf.ByteString getFailurePolicyBytes()
FailurePolicy defines how unrecognized errors from the admission endpoint are handled - allowed values are Ignore or Fail. Defaults to Ignore. +optional
optional string failurePolicy = 4;boolean hasNamespaceSelector()
NamespaceSelector decides whether to run the webhook on an object based
on whether the namespace for that object matches the selector. If the
object itself is a namespace, the matching is performed on
object.metadata.labels. If the object is another cluster scoped resource,
it never skips the webhook.
For example, to run the webhook on any objects whose namespace is not
associated with "runlevel" of "0" or "1"; you will set the selector as
follows:
"namespaceSelector": {
"matchExpressions": [
{
"key": "runlevel",
"operator": "NotIn",
"values": [
"0",
"1"
]
}
]
}
If instead you want to only run the webhook on any objects whose
namespace is associated with the "environment" of "prod" or "staging";
you will set the selector as follows:
"namespaceSelector": {
"matchExpressions": [
{
"key": "environment",
"operator": "In",
"values": [
"prod",
"staging"
]
}
]
}
See
https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/
for more examples of label selectors.
Default to the empty LabelSelector, which matches everything.
+optional
optional .k8s.io.apimachinery.pkg.apis.meta.v1.LabelSelector namespaceSelector = 5;Meta.LabelSelector getNamespaceSelector()
NamespaceSelector decides whether to run the webhook on an object based
on whether the namespace for that object matches the selector. If the
object itself is a namespace, the matching is performed on
object.metadata.labels. If the object is another cluster scoped resource,
it never skips the webhook.
For example, to run the webhook on any objects whose namespace is not
associated with "runlevel" of "0" or "1"; you will set the selector as
follows:
"namespaceSelector": {
"matchExpressions": [
{
"key": "runlevel",
"operator": "NotIn",
"values": [
"0",
"1"
]
}
]
}
If instead you want to only run the webhook on any objects whose
namespace is associated with the "environment" of "prod" or "staging";
you will set the selector as follows:
"namespaceSelector": {
"matchExpressions": [
{
"key": "environment",
"operator": "In",
"values": [
"prod",
"staging"
]
}
]
}
See
https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/
for more examples of label selectors.
Default to the empty LabelSelector, which matches everything.
+optional
optional .k8s.io.apimachinery.pkg.apis.meta.v1.LabelSelector namespaceSelector = 5;Meta.LabelSelectorOrBuilder getNamespaceSelectorOrBuilder()
NamespaceSelector decides whether to run the webhook on an object based
on whether the namespace for that object matches the selector. If the
object itself is a namespace, the matching is performed on
object.metadata.labels. If the object is another cluster scoped resource,
it never skips the webhook.
For example, to run the webhook on any objects whose namespace is not
associated with "runlevel" of "0" or "1"; you will set the selector as
follows:
"namespaceSelector": {
"matchExpressions": [
{
"key": "runlevel",
"operator": "NotIn",
"values": [
"0",
"1"
]
}
]
}
If instead you want to only run the webhook on any objects whose
namespace is associated with the "environment" of "prod" or "staging";
you will set the selector as follows:
"namespaceSelector": {
"matchExpressions": [
{
"key": "environment",
"operator": "In",
"values": [
"prod",
"staging"
]
}
]
}
See
https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/
for more examples of label selectors.
Default to the empty LabelSelector, which matches everything.
+optional
optional .k8s.io.apimachinery.pkg.apis.meta.v1.LabelSelector namespaceSelector = 5;boolean hasSideEffects()
SideEffects states whether this webhookk has side effects. Acceptable values are: Unknown, None, Some, NoneOnDryRun Webhooks with side effects MUST implement a reconciliation system, since a request may be rejected by a future step in the admission change and the side effects therefore need to be undone. Requests with the dryRun attribute will be auto-rejected if they match a webhook with sideEffects == Unknown or Some. Defaults to Unknown. +optional
optional string sideEffects = 6;String getSideEffects()
SideEffects states whether this webhookk has side effects. Acceptable values are: Unknown, None, Some, NoneOnDryRun Webhooks with side effects MUST implement a reconciliation system, since a request may be rejected by a future step in the admission change and the side effects therefore need to be undone. Requests with the dryRun attribute will be auto-rejected if they match a webhook with sideEffects == Unknown or Some. Defaults to Unknown. +optional
optional string sideEffects = 6;com.google.protobuf.ByteString getSideEffectsBytes()
SideEffects states whether this webhookk has side effects. Acceptable values are: Unknown, None, Some, NoneOnDryRun Webhooks with side effects MUST implement a reconciliation system, since a request may be rejected by a future step in the admission change and the side effects therefore need to be undone. Requests with the dryRun attribute will be auto-rejected if they match a webhook with sideEffects == Unknown or Some. Defaults to Unknown. +optional
optional string sideEffects = 6;Copyright © 2019. All rights reserved.