k8s_openapi/v1_36/api/flowcontrol/v1/
policy_rules_with_subjects.rs

1// Generated from definition io.k8s.api.flowcontrol.v1.PolicyRulesWithSubjects
2
3/// PolicyRulesWithSubjects prescribes a test that applies to a request to an apiserver. The test considers the subject making the request, the verb being requested, and the resource to be acted upon. This PolicyRulesWithSubjects matches a request if and only if both (a) at least one member of subjects matches the request and (b) at least one member of resourceRules or nonResourceRules matches the request.
4#[derive(Clone, Debug, Default, PartialEq)]
5pub struct PolicyRulesWithSubjects {
6    /// `nonResourceRules` is a list of NonResourcePolicyRules that identify matching requests according to their verb and the target non-resource URL.
7    pub non_resource_rules: Option<std::vec::Vec<crate::api::flowcontrol::v1::NonResourcePolicyRule>>,
8
9    /// `resourceRules` is a slice of ResourcePolicyRules that identify matching requests according to their verb and the target resource. At least one of `resourceRules` and `nonResourceRules` has to be non-empty.
10    pub resource_rules: Option<std::vec::Vec<crate::api::flowcontrol::v1::ResourcePolicyRule>>,
11
12    /// subjects is the list of normal user, serviceaccount, or group that this rule cares about. There must be at least one member in this slice. A slice that includes both the system:authenticated and system:unauthenticated user groups matches every request. Required.
13    pub subjects: std::vec::Vec<crate::api::flowcontrol::v1::Subject>,
14}
15
16impl crate::DeepMerge for PolicyRulesWithSubjects {
17    fn merge_from(&mut self, other: Self) {
18        crate::merge_strategies::list::atomic(&mut self.non_resource_rules, other.non_resource_rules);
19        crate::merge_strategies::list::atomic(&mut self.resource_rules, other.resource_rules);
20        crate::merge_strategies::list::atomic(&mut self.subjects, other.subjects);
21    }
22}
23
24impl<'de> crate::serde::Deserialize<'de> for PolicyRulesWithSubjects {
25    fn deserialize<D>(deserializer: D) -> Result<Self, D::Error> where D: crate::serde::Deserializer<'de> {
26        #[allow(non_camel_case_types)]
27        enum Field {
28            Key_non_resource_rules,
29            Key_resource_rules,
30            Key_subjects,
31            Other,
32        }
33
34        impl<'de> crate::serde::Deserialize<'de> for Field {
35            fn deserialize<D>(deserializer: D) -> Result<Self, D::Error> where D: crate::serde::Deserializer<'de> {
36                struct Visitor;
37
38                impl crate::serde::de::Visitor<'_> for Visitor {
39                    type Value = Field;
40
41                    fn expecting(&self, f: &mut core::fmt::Formatter<'_>) -> core::fmt::Result {
42                        f.write_str("field identifier")
43                    }
44
45                    fn visit_str<E>(self, v: &str) -> Result<Self::Value, E> where E: crate::serde::de::Error {
46                        Ok(match v {
47                            "nonResourceRules" => Field::Key_non_resource_rules,
48                            "resourceRules" => Field::Key_resource_rules,
49                            "subjects" => Field::Key_subjects,
50                            _ => Field::Other,
51                        })
52                    }
53                }
54
55                deserializer.deserialize_identifier(Visitor)
56            }
57        }
58
59        struct Visitor;
60
61        impl<'de> crate::serde::de::Visitor<'de> for Visitor {
62            type Value = PolicyRulesWithSubjects;
63
64            fn expecting(&self, f: &mut core::fmt::Formatter<'_>) -> core::fmt::Result {
65                f.write_str("PolicyRulesWithSubjects")
66            }
67
68            fn visit_map<A>(self, mut map: A) -> Result<Self::Value, A::Error> where A: crate::serde::de::MapAccess<'de> {
69                let mut value_non_resource_rules: Option<std::vec::Vec<crate::api::flowcontrol::v1::NonResourcePolicyRule>> = None;
70                let mut value_resource_rules: Option<std::vec::Vec<crate::api::flowcontrol::v1::ResourcePolicyRule>> = None;
71                let mut value_subjects: Option<std::vec::Vec<crate::api::flowcontrol::v1::Subject>> = None;
72
73                while let Some(key) = crate::serde::de::MapAccess::next_key::<Field>(&mut map)? {
74                    match key {
75                        Field::Key_non_resource_rules => value_non_resource_rules = crate::serde::de::MapAccess::next_value(&mut map)?,
76                        Field::Key_resource_rules => value_resource_rules = crate::serde::de::MapAccess::next_value(&mut map)?,
77                        Field::Key_subjects => value_subjects = crate::serde::de::MapAccess::next_value(&mut map)?,
78                        Field::Other => { let _: crate::serde::de::IgnoredAny = crate::serde::de::MapAccess::next_value(&mut map)?; },
79                    }
80                }
81
82                Ok(PolicyRulesWithSubjects {
83                    non_resource_rules: value_non_resource_rules,
84                    resource_rules: value_resource_rules,
85                    subjects: value_subjects.unwrap_or_default(),
86                })
87            }
88        }
89
90        deserializer.deserialize_struct(
91            "PolicyRulesWithSubjects",
92            &[
93                "nonResourceRules",
94                "resourceRules",
95                "subjects",
96            ],
97            Visitor,
98        )
99    }
100}
101
102impl crate::serde::Serialize for PolicyRulesWithSubjects {
103    fn serialize<S>(&self, serializer: S) -> Result<S::Ok, S::Error> where S: crate::serde::Serializer {
104        let mut state = serializer.serialize_struct(
105            "PolicyRulesWithSubjects",
106            1 +
107            self.non_resource_rules.as_ref().map_or(0, |_| 1) +
108            self.resource_rules.as_ref().map_or(0, |_| 1),
109        )?;
110        if let Some(value) = &self.non_resource_rules {
111            crate::serde::ser::SerializeStruct::serialize_field(&mut state, "nonResourceRules", value)?;
112        }
113        if let Some(value) = &self.resource_rules {
114            crate::serde::ser::SerializeStruct::serialize_field(&mut state, "resourceRules", value)?;
115        }
116        crate::serde::ser::SerializeStruct::serialize_field(&mut state, "subjects", &self.subjects)?;
117        crate::serde::ser::SerializeStruct::end(state)
118    }
119}
120
121#[cfg(feature = "schemars")]
122impl crate::schemars::JsonSchema for PolicyRulesWithSubjects {
123    fn schema_name() -> std::borrow::Cow<'static, str> {
124        "io.k8s.api.flowcontrol.v1.PolicyRulesWithSubjects".into()
125    }
126
127    fn json_schema(__gen: &mut crate::schemars::SchemaGenerator) -> crate::schemars::Schema {
128        crate::schemars::json_schema!({
129            "description": "PolicyRulesWithSubjects prescribes a test that applies to a request to an apiserver. The test considers the subject making the request, the verb being requested, and the resource to be acted upon. This PolicyRulesWithSubjects matches a request if and only if both (a) at least one member of subjects matches the request and (b) at least one member of resourceRules or nonResourceRules matches the request.",
130            "type": "object",
131            "properties": {
132                "nonResourceRules": {
133                    "description": "`nonResourceRules` is a list of NonResourcePolicyRules that identify matching requests according to their verb and the target non-resource URL.",
134                    "type": "array",
135                    "items": (__gen.subschema_for::<crate::api::flowcontrol::v1::NonResourcePolicyRule>()),
136                },
137                "resourceRules": {
138                    "description": "`resourceRules` is a slice of ResourcePolicyRules that identify matching requests according to their verb and the target resource. At least one of `resourceRules` and `nonResourceRules` has to be non-empty.",
139                    "type": "array",
140                    "items": (__gen.subschema_for::<crate::api::flowcontrol::v1::ResourcePolicyRule>()),
141                },
142                "subjects": {
143                    "description": "subjects is the list of normal user, serviceaccount, or group that this rule cares about. There must be at least one member in this slice. A slice that includes both the system:authenticated and system:unauthenticated user groups matches every request. Required.",
144                    "type": "array",
145                    "items": (__gen.subschema_for::<crate::api::flowcontrol::v1::Subject>()),
146                },
147            },
148            "required": [
149                "subjects",
150            ],
151        })
152    }
153}
154
155#[cfg(feature = "schemars08")]
156impl crate::schemars08::JsonSchema for PolicyRulesWithSubjects {
157    fn schema_name() -> std::string::String {
158        "io.k8s.api.flowcontrol.v1.PolicyRulesWithSubjects".into()
159    }
160
161    fn json_schema(__gen: &mut crate::schemars08::gen::SchemaGenerator) -> crate::schemars08::schema::Schema {
162        crate::schemars08::schema::Schema::Object(crate::schemars08::schema::SchemaObject {
163            metadata: Some(std::boxed::Box::new(crate::schemars08::schema::Metadata {
164                description: Some("PolicyRulesWithSubjects prescribes a test that applies to a request to an apiserver. The test considers the subject making the request, the verb being requested, and the resource to be acted upon. This PolicyRulesWithSubjects matches a request if and only if both (a) at least one member of subjects matches the request and (b) at least one member of resourceRules or nonResourceRules matches the request.".into()),
165                ..Default::default()
166            })),
167            instance_type: Some(crate::schemars08::schema::SingleOrVec::Single(std::boxed::Box::new(crate::schemars08::schema::InstanceType::Object))),
168            object: Some(std::boxed::Box::new(crate::schemars08::schema::ObjectValidation {
169                properties: [
170                    (
171                        "nonResourceRules".into(),
172                        crate::schemars08::schema::Schema::Object(crate::schemars08::schema::SchemaObject {
173                            metadata: Some(std::boxed::Box::new(crate::schemars08::schema::Metadata {
174                                description: Some("`nonResourceRules` is a list of NonResourcePolicyRules that identify matching requests according to their verb and the target non-resource URL.".into()),
175                                ..Default::default()
176                            })),
177                            instance_type: Some(crate::schemars08::schema::SingleOrVec::Single(std::boxed::Box::new(crate::schemars08::schema::InstanceType::Array))),
178                            array: Some(std::boxed::Box::new(crate::schemars08::schema::ArrayValidation {
179                                items: Some(crate::schemars08::schema::SingleOrVec::Single(std::boxed::Box::new(__gen.subschema_for::<crate::api::flowcontrol::v1::NonResourcePolicyRule>()))),
180                                ..Default::default()
181                            })),
182                            ..Default::default()
183                        }),
184                    ),
185                    (
186                        "resourceRules".into(),
187                        crate::schemars08::schema::Schema::Object(crate::schemars08::schema::SchemaObject {
188                            metadata: Some(std::boxed::Box::new(crate::schemars08::schema::Metadata {
189                                description: Some("`resourceRules` is a slice of ResourcePolicyRules that identify matching requests according to their verb and the target resource. At least one of `resourceRules` and `nonResourceRules` has to be non-empty.".into()),
190                                ..Default::default()
191                            })),
192                            instance_type: Some(crate::schemars08::schema::SingleOrVec::Single(std::boxed::Box::new(crate::schemars08::schema::InstanceType::Array))),
193                            array: Some(std::boxed::Box::new(crate::schemars08::schema::ArrayValidation {
194                                items: Some(crate::schemars08::schema::SingleOrVec::Single(std::boxed::Box::new(__gen.subschema_for::<crate::api::flowcontrol::v1::ResourcePolicyRule>()))),
195                                ..Default::default()
196                            })),
197                            ..Default::default()
198                        }),
199                    ),
200                    (
201                        "subjects".into(),
202                        crate::schemars08::schema::Schema::Object(crate::schemars08::schema::SchemaObject {
203                            metadata: Some(std::boxed::Box::new(crate::schemars08::schema::Metadata {
204                                description: Some("subjects is the list of normal user, serviceaccount, or group that this rule cares about. There must be at least one member in this slice. A slice that includes both the system:authenticated and system:unauthenticated user groups matches every request. Required.".into()),
205                                ..Default::default()
206                            })),
207                            instance_type: Some(crate::schemars08::schema::SingleOrVec::Single(std::boxed::Box::new(crate::schemars08::schema::InstanceType::Array))),
208                            array: Some(std::boxed::Box::new(crate::schemars08::schema::ArrayValidation {
209                                items: Some(crate::schemars08::schema::SingleOrVec::Single(std::boxed::Box::new(__gen.subschema_for::<crate::api::flowcontrol::v1::Subject>()))),
210                                ..Default::default()
211                            })),
212                            ..Default::default()
213                        }),
214                    ),
215                ].into(),
216                required: [
217                    "subjects".into(),
218                ].into(),
219                ..Default::default()
220            })),
221            ..Default::default()
222        })
223    }
224}
k8s_openapi/v1_36/api/flowcontrol/v1/policy_rules_with_subjects.rs

k8s_openapi/v1_36/api/flowcontrol/v1/
policy_rules_with_subjects.rs
