Struct k8s_openapi::api::admissionregistration::v1alpha1::ParamRef
source · pub struct ParamRef {
pub name: Option<String>,
pub namespace: Option<String>,
pub parameter_not_found_action: Option<String>,
pub selector: Option<LabelSelector>,
}
Expand description
ParamRef describes how to locate the params to be used as input to expressions of rules applied by a policy binding.
Fields§
§name: Option<String>
name
is the name of the resource being referenced.
name
and selector
are mutually exclusive properties. If one is set, the other must be unset.
namespace: Option<String>
namespace is the namespace of the referenced resource. Allows limiting the search for params to a specific namespace. Applies to both name
and selector
fields.
A per-namespace parameter may be used by specifying a namespace-scoped paramKind
in the policy and leaving this field empty.
-
If
paramKind
is cluster-scoped, this field MUST be unset. Setting this field results in a configuration error. -
If
paramKind
is namespace-scoped, the namespace of the object being evaluated for admission will be used when this field is left unset. Take care that if this is left empty the binding must not match any cluster-scoped resources, which will result in an error.
parameter_not_found_action: Option<String>
parameterNotFoundAction
controls the behavior of the binding when the resource exists, and name or selector is valid, but there are no parameters matched by the binding. If the value is set to Allow
, then no matched parameters will be treated as successful validation by the binding. If set to Deny
, then no matched parameters will be subject to the failurePolicy
of the policy.
Allowed values are Allow
or Deny
Default to Deny
selector: Option<LabelSelector>
selector can be used to match multiple param objects based on their labels. Supply selector: {} to match all resources of the ParamKind.
If multiple params are found, they are all evaluated with the policy expressions and the results are ANDed together.
One of name
or selector
must be set, but name
and selector
are mutually exclusive properties. If one is set, the other must be unset.
Trait Implementations§
source§impl DeepMerge for ParamRef
impl DeepMerge for ParamRef
source§fn merge_from(&mut self, other: Self)
fn merge_from(&mut self, other: Self)
other
into self
.source§impl<'de> Deserialize<'de> for ParamRef
impl<'de> Deserialize<'de> for ParamRef
source§fn deserialize<D>(deserializer: D) -> Result<Self, D::Error>where
D: Deserializer<'de>,
fn deserialize<D>(deserializer: D) -> Result<Self, D::Error>where
D: Deserializer<'de>,
impl StructuralPartialEq for ParamRef
Auto Trait Implementations§
impl Freeze for ParamRef
impl RefUnwindSafe for ParamRef
impl Send for ParamRef
impl Sync for ParamRef
impl Unpin for ParamRef
impl UnwindSafe for ParamRef
Blanket Implementations§
source§impl<T> BorrowMut<T> for Twhere
T: ?Sized,
impl<T> BorrowMut<T> for Twhere
T: ?Sized,
source§fn borrow_mut(&mut self) -> &mut T
fn borrow_mut(&mut self) -> &mut T
source§impl<T> CloneToUninit for Twhere
T: Clone,
impl<T> CloneToUninit for Twhere
T: Clone,
source§unsafe fn clone_to_uninit(&self, dst: *mut T)
unsafe fn clone_to_uninit(&self, dst: *mut T)
clone_to_uninit
)