Kubernetes.Api.AdmissionRegistration.V1Beta1

newtype MutatingWebhookConfiguration

MutatingWebhookConfiguration describes the configuration of and admission webhook that accept or reject and may change the object.

Fields:

• metadata: Standard object metadata; More info: https://git.k8s.io/community/contributors/devel/api-conventions.md#metadata.
• webhooks: Webhooks is a list of webhooks and the affected resources and operations.

Constructors

• MutatingWebhookConfiguration { metadata :: Maybe ObjectMeta, webhooks :: Maybe (Array Webhook) }

Instances

• Newtype MutatingWebhookConfiguration _
• Generic MutatingWebhookConfiguration _
• Show MutatingWebhookConfiguration
• Decode MutatingWebhookConfiguration
• Encode MutatingWebhookConfiguration
• Default MutatingWebhookConfiguration

newtype MutatingWebhookConfigurationList

MutatingWebhookConfigurationList is a list of MutatingWebhookConfiguration.

Fields:

• items: List of MutatingWebhookConfiguration.
• metadata: Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/api-conventions.md#types-kinds

Constructors

• MutatingWebhookConfigurationList { items :: Maybe (Array MutatingWebhookConfiguration), metadata :: Maybe ListMeta }

Instances

• Newtype MutatingWebhookConfigurationList _
• Generic MutatingWebhookConfigurationList _
• Show MutatingWebhookConfigurationList
• Decode MutatingWebhookConfigurationList
• Encode MutatingWebhookConfigurationList
• Default MutatingWebhookConfigurationList

newtype RuleWithOperations

RuleWithOperations is a tuple of Operations and Resources. It is recommended to make sure that all the tuple expansions are valid.

Fields:

• apiGroups: APIGroups is the API groups the resources belong to. '' is all groups. If '' is present, the length of the slice must be one. Required.

• apiVersions: APIVersions is the API versions the resources belong to. '' is all versions. If '' is present, the length of the slice must be one. Required.

• operations: Operations is the operations the admission hook cares about - CREATE, UPDATE, or * for all operations. If '*' is present, the length of the slice must be one. Required.

• resources: Resources is a list of resources this rule applies to.

  For example: 'pods' means pods. 'pods/log' means the log subresource of pods. '' means all resources, but not subresources. 'pods/' means all subresources of pods. '/scale' means all scale subresources. '/*' means all resources and their subresources.

  If wildcard is present, the validation rule will ensure resources do not overlap with each other.

  Depending on the enclosing object, subresources might not be allowed. Required.

Constructors

• RuleWithOperations { apiGroups :: Maybe (Array String), apiVersions :: Maybe (Array String), operations :: Maybe (Array String), resources :: Maybe (Array String) }

Instances

• Newtype RuleWithOperations _
• Generic RuleWithOperations _
• Show RuleWithOperations
• Decode RuleWithOperations
• Encode RuleWithOperations
• Default RuleWithOperations

newtype ServiceReference

ServiceReference holds a reference to Service.legacy.k8s.io

Fields:

• name: name is the name of the service. Required
• namespace: namespace is the namespace of the service. Required
• path: path is an optional URL path which will be sent in any request to this service.

Constructors

• ServiceReference { name :: Maybe String, namespace :: Maybe String, path :: Maybe String }

Instances

• Newtype ServiceReference _
• Generic ServiceReference _
• Show ServiceReference
• Decode ServiceReference
• Encode ServiceReference
• Default ServiceReference

newtype ValidatingWebhookConfiguration

ValidatingWebhookConfiguration describes the configuration of and admission webhook that accept or reject and object without changing it.

Fields:

• metadata: Standard object metadata; More info: https://git.k8s.io/community/contributors/devel/api-conventions.md#metadata.
• webhooks: Webhooks is a list of webhooks and the affected resources and operations.

Constructors

• ValidatingWebhookConfiguration { metadata :: Maybe ObjectMeta, webhooks :: Maybe (Array Webhook) }

Instances

• Newtype ValidatingWebhookConfiguration _
• Generic ValidatingWebhookConfiguration _
• Show ValidatingWebhookConfiguration
• Decode ValidatingWebhookConfiguration
• Encode ValidatingWebhookConfiguration
• Default ValidatingWebhookConfiguration

newtype ValidatingWebhookConfigurationList

ValidatingWebhookConfigurationList is a list of ValidatingWebhookConfiguration.

Fields:

• items: List of ValidatingWebhookConfiguration.
• metadata: Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/api-conventions.md#types-kinds

Constructors

• ValidatingWebhookConfigurationList { items :: Maybe (Array ValidatingWebhookConfiguration), metadata :: Maybe ListMeta }

Instances

• Newtype ValidatingWebhookConfigurationList _
• Generic ValidatingWebhookConfigurationList _
• Show ValidatingWebhookConfigurationList
• Decode ValidatingWebhookConfigurationList
• Encode ValidatingWebhookConfigurationList
• Default ValidatingWebhookConfigurationList

newtype Webhook

Webhook describes an admission webhook and the resources and operations it applies to.

Fields:

• clientConfig: ClientConfig defines how to communicate with the hook. Required

• failurePolicy: FailurePolicy defines how unrecognized errors from the admission endpoint are handled - allowed values are Ignore or Fail. Defaults to Ignore.

• name: The name of the admission webhook. Name should be fully qualified, e.g., imagepolicy.kubernetes.io, where "imagepolicy" is the name of the webhook, and kubernetes.io is the name of the organization. Required.

• namespaceSelector: NamespaceSelector decides whether to run the webhook on an object based on whether the namespace for that object matches the selector. If the object itself is a namespace, the matching is performed on object.metadata.labels. If the object is other cluster scoped resource, it is not subjected to the webhook.

  For example, to run the webhook on any objects whose namespace is not associated with "runlevel" of "0" or "1"; you will set the selector as follows: "namespaceSelector": { "matchExpressions": [ { "key": "runlevel", "operator": "NotIn", "values": [ "0", "1" ] } ] }

  If instead you want to only run the webhook on any objects whose namespace is associated with the "environment" of "prod" or "staging"; you will set the selector as follows: "namespaceSelector": { "matchExpressions": [ { "key": "environment", "operator": "In", "values": [ "prod", "staging" ] } ] }

  See https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/ for more examples of label selectors.

  Default to the empty LabelSelector, which matches everything.

• rules: Rules describes what operations on what resources/subresources the webhook cares about. The webhook cares about an operation if it matches any Rule.

Constructors

• Webhook { clientConfig :: Maybe WebhookClientConfig, failurePolicy :: Maybe String, name :: Maybe String, namespaceSelector :: Maybe LabelSelector, rules :: Maybe (Array RuleWithOperations) }

Instances

• Newtype Webhook _
• Generic Webhook _
• Show Webhook
• Decode Webhook
• Encode Webhook
• Default Webhook

newtype WebhookClientConfig

WebhookClientConfig contains the information to make a TLS connection with the webhook

Fields:

• caBundle: caBundle is a PEM encoded CA bundle which will be used to validate the webhook's server certificate. Required.

• service: service is a reference to the service for this webhook. Either service or url must be specified.

  If the webhook is running within the cluster, then you should use service.

  If there is only one port open for the service, that port will be used. If there are multiple ports open, port 443 will be used if it is open, otherwise it is an error.

• url: url gives the location of the webhook, in standard URL form ([scheme://]host:port/path). Exactly one of url or service must be specified.

  The host should not refer to a service running in the cluster; use the service field instead. The host might be resolved via external DNS in some apiservers (e.g., kube-apiserver cannot resolve in-cluster DNS as that would be a layering violation). host may also be an IP address.

  Please note that using localhost or 127.0.0.1 as a host is risky unless you take great care to run this webhook on all hosts which run an apiserver which might need to make calls to this webhook. Such installs are likely to be non-portable, i.e., not easy to turn up in a new cluster.

  The scheme must be "https"; the URL must begin with "https://".

  A path is optional, and if present may be any string permissible in a URL. You may use the path to pass an arbitrary string to the webhook, for example, a cluster identifier.

  Attempting to use a user or basic auth e.g. "user:password@" is not allowed. Fragments ("#...") and query parameters ("?...") are not allowed, either.

Constructors

• WebhookClientConfig { caBundle :: Maybe String, service :: Maybe ServiceReference, url :: Maybe String }

Instances

• Newtype WebhookClientConfig _
• Generic WebhookClientConfig _
• Show WebhookClientConfig
• Decode WebhookClientConfig
• Encode WebhookClientConfig
• Default WebhookClientConfig

getAPIResources :: Config -> Aff (Either Status APIResourceList)

get available resources