kubernetes_asyncio.client.models.v1_validating_admission_policy_spec module

Kubernetes

No description provided (generated by Openapi Generator https://github.com/openapitools/openapi-generator) # noqa: E501

The version of the OpenAPI document: v1.34.3 Generated by: https://openapi-generator.tech

class kubernetes_asyncio.client.models.v1_validating_admission_policy_spec.V1ValidatingAdmissionPolicySpec(audit_annotations=None, failure_policy=None, match_conditions=None, match_constraints=None, param_kind=None, validations=None, variables=None, local_vars_configuration=None)

Bases: object

NOTE: This class is auto generated by OpenAPI Generator. Ref: https://openapi-generator.tech

Do not edit the class manually.

attribute_map = {'audit_annotations': 'auditAnnotations', 'failure_policy': 'failurePolicy', 'match_conditions': 'matchConditions', 'match_constraints': 'matchConstraints', 'param_kind': 'paramKind', 'validations': 'validations', 'variables': 'variables'}

property audit_annotations

Gets the audit_annotations of this V1ValidatingAdmissionPolicySpec. # noqa: E501

auditAnnotations contains CEL expressions which are used to produce audit annotations for the audit event of the API request. validations and auditAnnotations may not both be empty; a least one of validations or auditAnnotations is required. # noqa: E501

Returns:

The audit_annotations of this V1ValidatingAdmissionPolicySpec. # noqa: E501

Return type:

list[V1AuditAnnotation]

property failure_policy

Gets the failure_policy of this V1ValidatingAdmissionPolicySpec. # noqa: E501

failurePolicy defines how to handle failures for the admission policy. Failures can occur from CEL expression parse errors, type check errors, runtime errors and invalid or mis-configured policy definitions or bindings. A policy is invalid if spec.paramKind refers to a non-existent Kind. A binding is invalid if spec.paramRef.name refers to a non-existent resource. failurePolicy does not define how validations that evaluate to false are handled. When failurePolicy is set to Fail, ValidatingAdmissionPolicyBinding validationActions define how failures are enforced. Allowed values are Ignore or Fail. Defaults to Fail. # noqa: E501

Returns:

The failure_policy of this V1ValidatingAdmissionPolicySpec. # noqa: E501

Return type:

str

property match_conditions

Gets the match_conditions of this V1ValidatingAdmissionPolicySpec. # noqa: E501

MatchConditions is a list of conditions that must be met for a request to be validated. Match conditions filter requests that have already been matched by the rules, namespaceSelector, and objectSelector. An empty list of matchConditions matches all requests. There are a maximum of 64 match conditions allowed. If a parameter object is provided, it can be accessed via the params handle in the same manner as validation expressions. The exact matching logic is (in order): 1. If ANY matchCondition evaluates to FALSE, the policy is skipped. 2. If ALL matchConditions evaluate to TRUE, the policy is evaluated. 3. If any matchCondition evaluates to an error (but none are FALSE): - If failurePolicy=Fail, reject the request - If failurePolicy=Ignore, the policy is skipped # noqa: E501

Returns:

The match_conditions of this V1ValidatingAdmissionPolicySpec. # noqa: E501

Return type:

list[V1MatchCondition]

property match_constraints

Gets the match_constraints of this V1ValidatingAdmissionPolicySpec. # noqa: E501

Returns:

The match_constraints of this V1ValidatingAdmissionPolicySpec. # noqa: E501

Return type:

V1MatchResources

openapi_types = {'audit_annotations': 'list[V1AuditAnnotation]', 'failure_policy': 'str', 'match_conditions': 'list[V1MatchCondition]', 'match_constraints': 'V1MatchResources', 'param_kind': 'V1ParamKind', 'validations': 'list[V1Validation]', 'variables': 'list[V1Variable]'}

property param_kind

Gets the param_kind of this V1ValidatingAdmissionPolicySpec. # noqa: E501

Returns:

The param_kind of this V1ValidatingAdmissionPolicySpec. # noqa: E501

Return type:

V1ParamKind

to_dict(serialize=False)

Returns the model properties as a dict

to_str()

Returns the string representation of the model

property validations

Gets the validations of this V1ValidatingAdmissionPolicySpec. # noqa: E501

Validations contain CEL expressions which is used to apply the validation. Validations and AuditAnnotations may not both be empty; a minimum of one Validations or AuditAnnotations is required. # noqa: E501

Returns:

The validations of this V1ValidatingAdmissionPolicySpec. # noqa: E501

Return type:

list[V1Validation]

property variables

Gets the variables of this V1ValidatingAdmissionPolicySpec. # noqa: E501

Variables contain definitions of variables that can be used in composition of other expressions. Each variable is defined as a named CEL expression. The variables defined here will be available under variables in other expressions of the policy except MatchConditions because MatchConditions are evaluated before the rest of the policy. The expression of a variable can refer to other variables defined earlier in the list but not those after. Thus, Variables must be sorted by the order of first appearance and acyclic. # noqa: E501

Returns:

The variables of this V1ValidatingAdmissionPolicySpec. # noqa: E501

Return type:

list[V1Variable]