+ description: Config is the Schema for the configs API
+ properties:
+ apiVersion:
+ description: 'APIVersion defines the versioned schema of this representation
+ of an object. Servers should convert recognized schemas to the latest
+ internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
+ type: string
+ kind:
+ description: 'Kind is a string value representing the REST resource this
+ object represents. Servers may infer this from the endpoint the client
+ submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
+ type: string
+ metadata:
+ type: object
+ spec:
+ description: ConfigSpec defines the desired state of Config
+ properties:
+ match:
+ description: Configuration for namespace exclusion
+ items:
+ properties:
+ excludedNamespaces:
+ items:
+ type: string
+ type: array
+ processes:
+ items:
+ type: string
+ type: array
+ type: object
+ type: array
+ readiness:
+ description: Configuration for readiness tracker
+ properties:
+ statsEnabled:
+ type: boolean
+ type: object
+ sync:
+ description: Configuration for syncing k8s objects
+ properties:
+ syncOnly:
+ description: If non-empty, only entries on this list will be replicated
+ into OPA
+ items:
+ properties:
+ group:
+ type: string
+ kind:
+ type: string
+ version:
+ type: string
+ type: object
+ type: array
+ type: object
+ validation:
+ description: Configuration for validation
+ properties:
+ traces:
+ description: List of requests to trace. Both "user" and "kinds"
+ must be specified
+ items:
+ properties:
+ dump:
+ description: Also dump the state of OPA with the trace. Set
+ to `All` to dump everything.
+ type: string
+ kind:
+ description: Only trace requests of the following GroupVersionKind
+ properties:
+ group:
+ type: string
+ kind:
+ type: string
+ version:
+ type: string
+ type: object
+ user:
+ description: Only trace requests from the specified user
+ type: string
+ type: object
+ type: array
+ type: object
+ type: object
+ status:
+ description: ConfigStatus defines the observed state of Config
+ description: ConstraintPodStatus is the Schema for the constraintpodstatuses
+ API
+ properties:
+ apiVersion:
+ description: 'APIVersion defines the versioned schema of this representation
+ of an object. Servers should convert recognized schemas to the latest
+ internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
+ type: string
+ kind:
+ description: 'Kind is a string value representing the REST resource this
+ object represents. Servers may infer this from the endpoint the client
+ submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
+ type: string
+ metadata:
+ type: object
+ status:
+ description: ConstraintPodStatusStatus defines the observed state of ConstraintPodStatus
+ properties:
+ constraintUID:
+ description: Storing the constraint UID allows us to detect drift, such
+ as when a constraint has been recreated after its CRD was deleted
+ out from under it, interrupting the watch
+ type: string
+ enforced:
+ type: boolean
+ errors:
+ items:
+ description: Error represents a single error caught while adding a
+ description: 'APIVersion defines the versioned schema of this representation
+ of an object. Servers should convert recognized schemas to the latest
+ internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
+ type: string
+ kind:
+ description: 'Kind is a string value representing the REST resource this
+ object represents. Servers may infer this from the endpoint the client
+ submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
+ type: string
+ metadata:
+ type: object
+ spec:
+ properties:
+ crd:
+ properties:
+ spec:
+ properties:
+ names:
+ properties:
+ kind:
+ type: string
+ shortNames:
+ items:
+ type: string
+ type: array
+ type: object
+ validation:
+ type: object
+ type: object
+ type: object
+ targets:
+ items:
+ properties:
+ libs:
+ items:
+ type: string
+ type: array
+ rego:
+ type: string
+ target:
+ type: string
+ type: object
+ type: array
+ type: object
+ status:
+ properties:
+ byPod:
+ items:
+ properties:
+ errors:
+ items:
+ properties:
+ code:
+ type: string
+ location:
+ type: string
+ message:
+ type: string
+ required:
+ - code
+ - message
+ type: object
+ type: array
+ id:
+ description: a unique identifier for the pod that wrote the status
+ description: ConstraintTemplatePodStatus is the Schema for the constrainttemplatepodstatuses
+ API
+ properties:
+ apiVersion:
+ description: 'APIVersion defines the versioned schema of this representation
+ of an object. Servers should convert recognized schemas to the latest
+ internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
+ type: string
+ kind:
+ description: 'Kind is a string value representing the REST resource this
+ object represents. Servers may infer this from the endpoint the client
+ submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
+ type: string
+ metadata:
+ type: object
+ status:
+ description: ConstraintTemplatePodStatusStatus defines the observed state
+ of ConstraintTemplatePodStatus
+ properties:
+ errors:
+ items:
+ description: CreateCRDError represents a single error caught during
+ parsing, compiling, etc.
+ properties:
+ code:
+ type: string
+ location:
+ type: string
+ message:
+ type: string
+ required:
+ - code
+ - message
+ type: object
+ type: array
+ id:
+ description: 'Important: Run "make" to regenerate code after modifying
+ this file'
+ type: string
+ observedGeneration:
+ format: int64
+ type: integer
+ operations:
+ items:
+ type: string
+ type: array
+ templateUID:
+ description: UID is a type that holds unique ID values, including UUIDs. Because
+ we don't ONLY use UUIDs, this is an alias to string. Being a type
+ captures intent and helps make sure that UIDs and names do not get
- description: Config is the Schema for the configs API
- properties:
- apiVersion:
- description: 'APIVersion defines the versioned schema of this representation
- of an object. Servers should convert recognized schemas to the latest
- internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
- type: string
- kind:
- description: 'Kind is a string value representing the REST resource this
- object represents. Servers may infer this from the endpoint the client
- submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
- type: string
- metadata:
- type: object
- spec:
- description: ConfigSpec defines the desired state of Config
- properties:
- match:
- description: Configuration for namespace exclusion
- items:
- properties:
- excludedNamespaces:
- items:
- type: string
- type: array
- processes:
- items:
- type: string
- type: array
- type: object
- type: array
- readiness:
- description: Configuration for readiness tracker
- properties:
- statsEnabled:
- type: boolean
- type: object
- sync:
- description: Configuration for syncing k8s objects
- properties:
- syncOnly:
- description: If non-empty, only entries on this list will be replicated
- into OPA
- items:
- properties:
- group:
- type: string
- kind:
- type: string
- version:
- type: string
- type: object
- type: array
- type: object
- validation:
- description: Configuration for validation
- properties:
- traces:
- description: List of requests to trace. Both "user" and "kinds"
- must be specified
- items:
- properties:
- dump:
- description: Also dump the state of OPA with the trace. Set
- to `All` to dump everything.
- type: string
- kind:
- description: Only trace requests of the following GroupVersionKind
- properties:
- group:
- type: string
- kind:
- type: string
- version:
- type: string
- type: object
- user:
- description: Only trace requests from the specified user
- type: string
- type: object
- type: array
- type: object
- type: object
- status:
- description: ConfigStatus defines the observed state of Config
- description: ConstraintPodStatus is the Schema for the constraintpodstatuses
- API
- properties:
- apiVersion:
- description: 'APIVersion defines the versioned schema of this representation
- of an object. Servers should convert recognized schemas to the latest
- internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
- type: string
- kind:
- description: 'Kind is a string value representing the REST resource this
- object represents. Servers may infer this from the endpoint the client
- submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
- type: string
- metadata:
- type: object
- status:
- description: ConstraintPodStatusStatus defines the observed state of ConstraintPodStatus
- properties:
- constraintUID:
- description: Storing the constraint UID allows us to detect drift, such
- as when a constraint has been recreated after its CRD was deleted
- out from under it, interrupting the watch
- type: string
- enforced:
- type: boolean
- errors:
- items:
- description: Error represents a single error caught while adding a
- description: 'APIVersion defines the versioned schema of this representation
- of an object. Servers should convert recognized schemas to the latest
- internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
- type: string
- kind:
- description: 'Kind is a string value representing the REST resource this
- object represents. Servers may infer this from the endpoint the client
- submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
- type: string
- metadata:
- type: object
- spec:
- properties:
- crd:
- properties:
- spec:
- properties:
- names:
- properties:
- kind:
- type: string
- shortNames:
- items:
- type: string
- type: array
- type: object
- validation:
- type: object
- type: object
- type: object
- targets:
- items:
- properties:
- libs:
- items:
- type: string
- type: array
- rego:
- type: string
- target:
- type: string
- type: object
- type: array
- type: object
- status:
- properties:
- byPod:
- items:
- properties:
- errors:
- items:
- properties:
- code:
- type: string
- location:
- type: string
- message:
- type: string
- required:
- - code
- - message
- type: object
- type: array
- id:
- description: a unique identifier for the pod that wrote the status
- description: ConstraintTemplatePodStatus is the Schema for the constrainttemplatepodstatuses
- API
- properties:
- apiVersion:
- description: 'APIVersion defines the versioned schema of this representation
- of an object. Servers should convert recognized schemas to the latest
- internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
- type: string
- kind:
- description: 'Kind is a string value representing the REST resource this
- object represents. Servers may infer this from the endpoint the client
- submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
- type: string
- metadata:
- type: object
- status:
- description: ConstraintTemplatePodStatusStatus defines the observed state
- of ConstraintTemplatePodStatus
- properties:
- errors:
- items:
- description: CreateCRDError represents a single error caught during
- parsing, compiling, etc.
- properties:
- code:
- type: string
- location:
- type: string
- message:
- type: string
- required:
- - code
- - message
- type: object
- type: array
- id:
- description: 'Important: Run "make" to regenerate code after modifying
- this file'
- type: string
- observedGeneration:
- format: int64
- type: integer
- operations:
- items:
- type: string
- type: array
- templateUID:
- description: UID is a type that holds unique ID values, including UUIDs. Because
- we don't ONLY use UUIDs, this is an alias to string. Being a type
- captures intent and helps make sure that UIDs and names do not get