Struct ApplyConfiguration

pub struct ApplyConfiguration {
    pub expression: Option<String>,
}

ApplyConfiguration defines the desired configuration values of an object.

Fields

expression: Option<String>

expression will be evaluated by CEL to create an apply configuration. ref: https://github.com/google/cel-spec

Apply configurations are declared in CEL using object initialization. For example, this CEL expression returns an apply configuration to set a single field:

Object{ spec: Object.spec{ serviceAccountName: “example” } }

Apply configurations may not modify atomic structs, maps or arrays due to the risk of accidental deletion of values not included in the apply configuration.

CEL expressions have access to the object types needed to create apply configurations:

• ‘Object’ - CEL type of the resource object. - ‘Object.<fieldName>’ - CEL type of object field (such as ‘Object.spec’) - ’Object.<fieldName1>.<fieldName2>…<fieldNameN>` - CEL type of nested field (such as ‘Object.spec.containers’)

CEL expressions have access to the contents of the API request, organized into CEL variables as well as some other useful variables:

• ‘object’ - The object from the incoming request. The value is null for DELETE requests. - ‘oldObject’ - The existing object. The value is null for CREATE requests. - ‘request’ - Attributes of the API request([ref](/pkg/apis/admission/types.go#AdmissionRequest)). - ‘params’ - Parameter resource referred to by the policy binding being evaluated. Only populated if the policy has a ParamKind. - ‘namespaceObject’ - The namespace object that the incoming object belongs to. The value is null for cluster-scoped resources. - ‘variables’ - Map of composited variables, from its name to its lazily evaluated value. For example, a variable named ‘foo’ can be accessed as ‘variables.foo’.
• ‘authorizer’ - A CEL Authorizer. May be used to perform authorization checks for the principal (user or service account) of the request. See https://pkg.go.dev/k8s.io/apiserver/pkg/cel/library#Authz
• ‘authorizer.requestResource’ - A CEL ResourceCheck constructed from the ‘authorizer’ and configured with the request resource.

The apiVersion, kind, metadata.name and metadata.generateName are always accessible from the root of the object. No other metadata properties are accessible.

Only property names of the form \[a-zA-Z_.-/\]\[a-zA-Z0-9_.-/\]* are accessible. Required.

Trait Implementations

impl Clone for ApplyConfiguration

fn clone(&self) -> ApplyConfiguration

Returns a copy of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for ApplyConfiguration

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl DeepMerge for ApplyConfiguration

fn merge_from(&mut self, other: Self)

Merge other into self.

impl Default for ApplyConfiguration

fn default() -> ApplyConfiguration

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for ApplyConfiguration

fn deserialize<D>(deserializer: D) -> Result<Self, D::Error>

where D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl PartialEq for ApplyConfiguration

fn eq(&self, other: &ApplyConfiguration) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for ApplyConfiguration

fn serialize<S>(&self, serializer: S) -> Result<S::Ok, S::Error>

where S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for ApplyConfiguration