1/* 2Copyright The Kubernetes Authors. 3 4Licensed under the Apache License, Version 2.0 (the "License"); 5you may not use this file except in compliance with the License. 6You may obtain a copy of the License at 7 8 http://www.apache.org/licenses/LICENSE-2.0 9 10Unless required by applicable law or agreed to in writing, software 11distributed under the License is distributed on an "AS IS" BASIS, 12WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. 13See the License for the specific language governing permissions and 14limitations under the License. 15*/ 16 17 18// This file was autogenerated by go-to-protobuf. Do not edit it manually! 19 20syntax = 'proto2'; 21 22package k8s.io.apiextensions_apiserver.pkg.apis.apiextensions.v1beta1; 23 24import "k8s.io/apimachinery/pkg/apis/meta/v1/generated.proto"; 25import "k8s.io/apimachinery/pkg/runtime/generated.proto"; 26import "k8s.io/apimachinery/pkg/runtime/schema/generated.proto"; 27 28// Package-wide variables from generator "generated". 29option go_package = "v1beta1"; 30 31// ConversionRequest describes the conversion request parameters. 32message ConversionRequest { 33 // uid is an identifier for the individual request/response. It allows distinguishing instances of requests which are 34 // otherwise identical (parallel requests, etc). 35 // The UID is meant to track the round trip (request/response) between the Kubernetes API server and the webhook, not the user request. 36 // It is suitable for correlating log entries between the webhook and apiserver, for either auditing or debugging. 37 optional string uid = 1; 38 39 // desiredAPIVersion is the version to convert given objects to. e.g. "myapi.example.com/v1" 40 optional string desiredAPIVersion = 2; 41 42 // objects is the list of custom resource objects to be converted. 43 repeated k8s.io.apimachinery.pkg.runtime.RawExtension objects = 3; 44} 45 46// ConversionResponse describes a conversion response. 47message ConversionResponse { 48 // uid is an identifier for the individual request/response. 49 // This should be copied over from the corresponding `request.uid`. 50 optional string uid = 1; 51 52 // convertedObjects is the list of converted version of `request.objects` if the `result` is successful, otherwise empty. 53 // The webhook is expected to set `apiVersion` of these objects to the `request.desiredAPIVersion`. The list 54 // must also have the same size as the input list with the same objects in the same order (equal kind, metadata.uid, metadata.name and metadata.namespace). 55 // The webhook is allowed to mutate labels and annotations. Any other change to the metadata is silently ignored. 56 repeated k8s.io.apimachinery.pkg.runtime.RawExtension convertedObjects = 2; 57 58 // result contains the result of conversion with extra details if the conversion failed. `result.status` determines if 59 // the conversion failed or succeeded. The `result.status` field is required and represents the success or failure of the 60 // conversion. A successful conversion must set `result.status` to `Success`. A failed conversion must set 61 // `result.status` to `Failure` and provide more details in `result.message` and return http status 200. The `result.message` 62 // will be used to construct an error message for the end user. 63 optional k8s.io.apimachinery.pkg.apis.meta.v1.Status result = 3; 64} 65 66// ConversionReview describes a conversion request/response. 67message ConversionReview { 68 // request describes the attributes for the conversion request. 69 // +optional 70 optional ConversionRequest request = 1; 71 72 // response describes the attributes for the conversion response. 73 // +optional 74 optional ConversionResponse response = 2; 75} 76 77// CustomResourceColumnDefinition specifies a column for server side printing. 78message CustomResourceColumnDefinition { 79 // name is a human readable name for the column. 80 optional string name = 1; 81 82 // type is an OpenAPI type definition for this column. 83 // See https://github.com/OAI/OpenAPI-Specification/blob/master/versions/2.0.md#data-types for details. 84 optional string type = 2; 85 86 // format is an optional OpenAPI type definition for this column. The 'name' format is applied 87 // to the primary identifier column to assist in clients identifying column is the resource name. 88 // See https://github.com/OAI/OpenAPI-Specification/blob/master/versions/2.0.md#data-types for details. 89 // +optional 90 optional string format = 3; 91 92 // description is a human readable description of this column. 93 // +optional 94 optional string description = 4; 95 96 // priority is an integer defining the relative importance of this column compared to others. Lower 97 // numbers are considered higher priority. Columns that may be omitted in limited space scenarios 98 // should be given a priority greater than 0. 99 // +optional 100 optional int32 priority = 5; 101 102 // JSONPath is a simple JSON path (i.e. with array notation) which is evaluated against 103 // each custom resource to produce the value for this column. 104 optional string JSONPath = 6; 105} 106 107// CustomResourceConversion describes how to convert different versions of a CR. 108message CustomResourceConversion { 109 // strategy specifies how custom resources are converted between versions. Allowed values are: 110 // - `None`: The converter only change the apiVersion and would not touch any other field in the custom resource. 111 // - `Webhook`: API Server will call to an external webhook to do the conversion. Additional information 112 // is needed for this option. This requires spec.preserveUnknownFields to be false, and spec.conversion.webhookClientConfig to be set. 113 optional string strategy = 1; 114 115 // webhookClientConfig is the instructions for how to call the webhook if strategy is `Webhook`. 116 // Required when `strategy` is set to `Webhook`. 117 // +optional 118 optional WebhookClientConfig webhookClientConfig = 2; 119 120 // conversionReviewVersions is an ordered list of preferred `ConversionReview` 121 // versions the Webhook expects. The API server will use the first version in 122 // the list which it supports. If none of the versions specified in this list 123 // are supported by API server, conversion will fail for the custom resource. 124 // If a persisted Webhook configuration specifies allowed versions and does not 125 // include any versions known to the API Server, calls to the webhook will fail. 126 // Defaults to `["v1beta1"]`. 127 // +optional 128 repeated string conversionReviewVersions = 3; 129} 130 131// CustomResourceDefinition represents a resource that should be exposed on the API server. Its name MUST be in the format 132// <.spec.name>.<.spec.group>. 133// Deprecated in v1.16, planned for removal in v1.19. Use apiextensions.k8s.io/v1 CustomResourceDefinition instead. 134message CustomResourceDefinition { 135 optional k8s.io.apimachinery.pkg.apis.meta.v1.ObjectMeta metadata = 1; 136 137 // spec describes how the user wants the resources to appear 138 optional CustomResourceDefinitionSpec spec = 2; 139 140 // status indicates the actual state of the CustomResourceDefinition 141 // +optional 142 optional CustomResourceDefinitionStatus status = 3; 143} 144 145// CustomResourceDefinitionCondition contains details for the current condition of this pod. 146message CustomResourceDefinitionCondition { 147 // type is the type of the condition. Types include Established, NamesAccepted and Terminating. 148 optional string type = 1; 149 150 // status is the status of the condition. 151 // Can be True, False, Unknown. 152 optional string status = 2; 153 154 // lastTransitionTime last time the condition transitioned from one status to another. 155 // +optional 156 optional k8s.io.apimachinery.pkg.apis.meta.v1.Time lastTransitionTime = 3; 157 158 // reason is a unique, one-word, CamelCase reason for the condition's last transition. 159 // +optional 160 optional string reason = 4; 161 162 // message is a human-readable message indicating details about last transition. 163 // +optional 164 optional string message = 5; 165} 166 167// CustomResourceDefinitionList is a list of CustomResourceDefinition objects. 168message CustomResourceDefinitionList { 169 optional k8s.io.apimachinery.pkg.apis.meta.v1.ListMeta metadata = 1; 170 171 // items list individual CustomResourceDefinition objects 172 repeated CustomResourceDefinition items = 2; 173} 174 175// CustomResourceDefinitionNames indicates the names to serve this CustomResourceDefinition 176message CustomResourceDefinitionNames { 177 // plural is the plural name of the resource to serve. 178 // The custom resources are served under `/apis/<group>/<version>/.../<plural>`. 179 // Must match the name of the CustomResourceDefinition (in the form `<names.plural>.<group>`). 180 // Must be all lowercase. 181 optional string plural = 1; 182 183 // singular is the singular name of the resource. It must be all lowercase. Defaults to lowercased `kind`. 184 // +optional 185 optional string singular = 2; 186 187 // shortNames are short names for the resource, exposed in API discovery documents, 188 // and used by clients to support invocations like `kubectl get <shortname>`. 189 // It must be all lowercase. 190 // +optional 191 repeated string shortNames = 3; 192 193 // kind is the serialized kind of the resource. It is normally CamelCase and singular. 194 // Custom resource instances will use this value as the `kind` attribute in API calls. 195 optional string kind = 4; 196 197 // listKind is the serialized kind of the list for this resource. Defaults to "`kind`List". 198 // +optional 199 optional string listKind = 5; 200 201 // categories is a list of grouped resources this custom resource belongs to (e.g. 'all'). 202 // This is published in API discovery documents, and used by clients to support invocations like 203 // `kubectl get all`. 204 // +optional 205 repeated string categories = 6; 206} 207 208// CustomResourceDefinitionSpec describes how a user wants their resource to appear 209message CustomResourceDefinitionSpec { 210 // group is the API group of the defined custom resource. 211 // The custom resources are served under `/apis/<group>/...`. 212 // Must match the name of the CustomResourceDefinition (in the form `<names.plural>.<group>`). 213 optional string group = 1; 214 215 // version is the API version of the defined custom resource. 216 // The custom resources are served under `/apis/<group>/<version>/...`. 217 // Must match the name of the first item in the `versions` list if `version` and `versions` are both specified. 218 // Optional if `versions` is specified. 219 // Deprecated: use `versions` instead. 220 // +optional 221 optional string version = 2; 222 223 // names specify the resource and kind names for the custom resource. 224 optional CustomResourceDefinitionNames names = 3; 225 226 // scope indicates whether the defined custom resource is cluster- or namespace-scoped. 227 // Allowed values are `Cluster` and `Namespaced`. Default is `Namespaced`. 228 optional string scope = 4; 229 230 // validation describes the schema used for validation and pruning of the custom resource. 231 // If present, this validation schema is used to validate all versions. 232 // Top-level and per-version schemas are mutually exclusive. 233 // +optional 234 optional CustomResourceValidation validation = 5; 235 236 // subresources specify what subresources the defined custom resource has. 237 // If present, this field configures subresources for all versions. 238 // Top-level and per-version subresources are mutually exclusive. 239 // +optional 240 optional CustomResourceSubresources subresources = 6; 241 242 // versions is the list of all API versions of the defined custom resource. 243 // Optional if `version` is specified. 244 // The name of the first item in the `versions` list must match the `version` field if `version` and `versions` are both specified. 245 // Version names are used to compute the order in which served versions are listed in API discovery. 246 // If the version string is "kube-like", it will sort above non "kube-like" version strings, which are ordered 247 // lexicographically. "Kube-like" versions start with a "v", then are followed by a number (the major version), 248 // then optionally the string "alpha" or "beta" and another number (the minor version). These are sorted first 249 // by GA > beta > alpha (where GA is a version with no suffix such as beta or alpha), and then by comparing 250 // major version, then minor version. An example sorted list of versions: 251 // v10, v2, v1, v11beta2, v10beta3, v3beta1, v12alpha1, v11alpha2, foo1, foo10. 252 // +optional 253 repeated CustomResourceDefinitionVersion versions = 7; 254 255 // additionalPrinterColumns specifies additional columns returned in Table output. 256 // See https://kubernetes.io/docs/reference/using-api/api-concepts/#receiving-resources-as-tables for details. 257 // If present, this field configures columns for all versions. 258 // Top-level and per-version columns are mutually exclusive. 259 // If no top-level or per-version columns are specified, a single column displaying the age of the custom resource is used. 260 // +optional 261 repeated CustomResourceColumnDefinition additionalPrinterColumns = 8; 262 263 // conversion defines conversion settings for the CRD. 264 // +optional 265 optional CustomResourceConversion conversion = 9; 266 267 // preserveUnknownFields indicates that object fields which are not specified 268 // in the OpenAPI schema should be preserved when persisting to storage. 269 // apiVersion, kind, metadata and known fields inside metadata are always preserved. 270 // If false, schemas must be defined for all versions. 271 // Defaults to true in v1beta for backwards compatibility. 272 // Deprecated: will be required to be false in v1. Preservation of unknown fields can be specified 273 // in the validation schema using the `x-kubernetes-preserve-unknown-fields: true` extension. 274 // See https://kubernetes.io/docs/tasks/access-kubernetes-api/custom-resources/custom-resource-definitions/#pruning-versus-preserving-unknown-fields for details. 275 // +optional 276 optional bool preserveUnknownFields = 10; 277} 278 279// CustomResourceDefinitionStatus indicates the state of the CustomResourceDefinition 280message CustomResourceDefinitionStatus { 281 // conditions indicate state for particular aspects of a CustomResourceDefinition 282 // +optional 283 repeated CustomResourceDefinitionCondition conditions = 1; 284 285 // acceptedNames are the names that are actually being used to serve discovery. 286 // They may be different than the names in spec. 287 optional CustomResourceDefinitionNames acceptedNames = 2; 288 289 // storedVersions lists all versions of CustomResources that were ever persisted. Tracking these 290 // versions allows a migration path for stored versions in etcd. The field is mutable 291 // so a migration controller can finish a migration to another version (ensuring 292 // no old objects are left in storage), and then remove the rest of the 293 // versions from this list. 294 // Versions may not be removed from `spec.versions` while they exist in this list. 295 repeated string storedVersions = 3; 296} 297 298// CustomResourceDefinitionVersion describes a version for CRD. 299message CustomResourceDefinitionVersion { 300 // name is the version name, e.g. “v1”, “v2beta1”, etc. 301 // The custom resources are served under this version at `/apis/<group>/<version>/...` if `served` is true. 302 optional string name = 1; 303 304 // served is a flag enabling/disabling this version from being served via REST APIs 305 optional bool served = 2; 306 307 // storage indicates this version should be used when persisting custom resources to storage. 308 // There must be exactly one version with storage=true. 309 optional bool storage = 3; 310 311 // schema describes the schema used for validation and pruning of this version of the custom resource. 312 // Top-level and per-version schemas are mutually exclusive. 313 // Per-version schemas must not all be set to identical values (top-level validation schema should be used instead). 314 // +optional 315 optional CustomResourceValidation schema = 4; 316 317 // subresources specify what subresources this version of the defined custom resource have. 318 // Top-level and per-version subresources are mutually exclusive. 319 // Per-version subresources must not all be set to identical values (top-level subresources should be used instead). 320 // +optional 321 optional CustomResourceSubresources subresources = 5; 322 323 // additionalPrinterColumns specifies additional columns returned in Table output. 324 // See https://kubernetes.io/docs/reference/using-api/api-concepts/#receiving-resources-as-tables for details. 325 // Top-level and per-version columns are mutually exclusive. 326 // Per-version columns must not all be set to identical values (top-level columns should be used instead). 327 // If no top-level or per-version columns are specified, a single column displaying the age of the custom resource is used. 328 // +optional 329 repeated CustomResourceColumnDefinition additionalPrinterColumns = 6; 330} 331 332// CustomResourceSubresourceScale defines how to serve the scale subresource for CustomResources. 333message CustomResourceSubresourceScale { 334 // specReplicasPath defines the JSON path inside of a custom resource that corresponds to Scale `spec.replicas`. 335 // Only JSON paths without the array notation are allowed. 336 // Must be a JSON Path under `.spec`. 337 // If there is no value under the given path in the custom resource, the `/scale` subresource will return an error on GET. 338 optional string specReplicasPath = 1; 339 340 // statusReplicasPath defines the JSON path inside of a custom resource that corresponds to Scale `status.replicas`. 341 // Only JSON paths without the array notation are allowed. 342 // Must be a JSON Path under `.status`. 343 // If there is no value under the given path in the custom resource, the `status.replicas` value in the `/scale` subresource 344 // will default to 0. 345 optional string statusReplicasPath = 2; 346 347 // labelSelectorPath defines the JSON path inside of a custom resource that corresponds to Scale `status.selector`. 348 // Only JSON paths without the array notation are allowed. 349 // Must be a JSON Path under `.status` or `.spec`. 350 // Must be set to work with HorizontalPodAutoscaler. 351 // The field pointed by this JSON path must be a string field (not a complex selector struct) 352 // which contains a serialized label selector in string form. 353 // More info: https://kubernetes.io/docs/tasks/access-kubernetes-api/custom-resources/custom-resource-definitions#scale-subresource 354 // If there is no value under the given path in the custom resource, the `status.selector` value in the `/scale` 355 // subresource will default to the empty string. 356 // +optional 357 optional string labelSelectorPath = 3; 358} 359 360// CustomResourceSubresourceStatus defines how to serve the status subresource for CustomResources. 361// Status is represented by the `.status` JSON path inside of a CustomResource. When set, 362// * exposes a /status subresource for the custom resource 363// * PUT requests to the /status subresource take a custom resource object, and ignore changes to anything except the status stanza 364// * PUT/POST/PATCH requests to the custom resource ignore changes to the status stanza 365message CustomResourceSubresourceStatus { 366} 367 368// CustomResourceSubresources defines the status and scale subresources for CustomResources. 369message CustomResourceSubresources { 370 // status indicates the custom resource should serve a `/status` subresource. 371 // When enabled: 372 // 1. requests to the custom resource primary endpoint ignore changes to the `status` stanza of the object. 373 // 2. requests to the custom resource `/status` subresource ignore changes to anything other than the `status` stanza of the object. 374 // +optional 375 optional CustomResourceSubresourceStatus status = 1; 376 377 // scale indicates the custom resource should serve a `/scale` subresource that returns an `autoscaling/v1` Scale object. 378 // +optional 379 optional CustomResourceSubresourceScale scale = 2; 380} 381 382// CustomResourceValidation is a list of validation methods for CustomResources. 383message CustomResourceValidation { 384 // openAPIV3Schema is the OpenAPI v3 schema to use for validation and pruning. 385 // +optional 386 optional JSONSchemaProps openAPIV3Schema = 1; 387} 388 389// ExternalDocumentation allows referencing an external resource for extended documentation. 390message ExternalDocumentation { 391 optional string description = 1; 392 393 optional string url = 2; 394} 395 396// JSON represents any valid JSON value. 397// These types are supported: bool, int64, float64, string, []interface{}, map[string]interface{} and nil. 398message JSON { 399 optional bytes raw = 1; 400} 401 402// JSONSchemaProps is a JSON-Schema following Specification Draft 4 (http://json-schema.org/). 403message JSONSchemaProps { 404 optional string id = 1; 405 406 optional string schema = 2; 407 408 optional string ref = 3; 409 410 optional string description = 4; 411 412 optional string type = 5; 413 414 optional string format = 6; 415 416 optional string title = 7; 417 418 // default is a default value for undefined object fields. 419 // Defaulting is a beta feature under the CustomResourceDefaulting feature gate. 420 // CustomResourceDefinitions with defaults must be created using the v1 (or newer) CustomResourceDefinition API. 421 optional JSON default = 8; 422 423 optional double maximum = 9; 424 425 optional bool exclusiveMaximum = 10; 426 427 optional double minimum = 11; 428 429 optional bool exclusiveMinimum = 12; 430 431 optional int64 maxLength = 13; 432 433 optional int64 minLength = 14; 434 435 optional string pattern = 15; 436 437 optional int64 maxItems = 16; 438 439 optional int64 minItems = 17; 440 441 optional bool uniqueItems = 18; 442 443 optional double multipleOf = 19; 444 445 repeated JSON enum = 20; 446 447 optional int64 maxProperties = 21; 448 449 optional int64 minProperties = 22; 450 451 repeated string required = 23; 452 453 optional JSONSchemaPropsOrArray items = 24; 454 455 repeated JSONSchemaProps allOf = 25; 456 457 repeated JSONSchemaProps oneOf = 26; 458 459 repeated JSONSchemaProps anyOf = 27; 460 461 optional JSONSchemaProps not = 28; 462 463 map<string, JSONSchemaProps> properties = 29; 464 465 optional JSONSchemaPropsOrBool additionalProperties = 30; 466 467 map<string, JSONSchemaProps> patternProperties = 31; 468 469 map<string, JSONSchemaPropsOrStringArray> dependencies = 32; 470 471 optional JSONSchemaPropsOrBool additionalItems = 33; 472 473 map<string, JSONSchemaProps> definitions = 34; 474 475 optional ExternalDocumentation externalDocs = 35; 476 477 optional JSON example = 36; 478 479 optional bool nullable = 37; 480 481 // x-kubernetes-preserve-unknown-fields stops the API server 482 // decoding step from pruning fields which are not specified 483 // in the validation schema. This affects fields recursively, 484 // but switches back to normal pruning behaviour if nested 485 // properties or additionalProperties are specified in the schema. 486 // This can either be true or undefined. False is forbidden. 487 optional bool xKubernetesPreserveUnknownFields = 38; 488 489 // x-kubernetes-embedded-resource defines that the value is an 490 // embedded Kubernetes runtime.Object, with TypeMeta and 491 // ObjectMeta. The type must be object. It is allowed to further 492 // restrict the embedded object. kind, apiVersion and metadata 493 // are validated automatically. x-kubernetes-preserve-unknown-fields 494 // is allowed to be true, but does not have to be if the object 495 // is fully specified (up to kind, apiVersion, metadata). 496 optional bool xKubernetesEmbeddedResource = 39; 497 498 // x-kubernetes-int-or-string specifies that this value is 499 // either an integer or a string. If this is true, an empty 500 // type is allowed and type as child of anyOf is permitted 501 // if following one of the following patterns: 502 // 503 // 1) anyOf: 504 // - type: integer 505 // - type: string 506 // 2) allOf: 507 // - anyOf: 508 // - type: integer 509 // - type: string 510 // - ... zero or more 511 optional bool xKubernetesIntOrString = 40; 512 513 // x-kubernetes-list-map-keys annotates an array with the x-kubernetes-list-type `map` by specifying the keys used 514 // as the index of the map. 515 // 516 // This tag MUST only be used on lists that have the "x-kubernetes-list-type" 517 // extension set to "map". Also, the values specified for this attribute must 518 // be a scalar typed field of the child structure (no nesting is supported). 519 // 520 // +optional 521 repeated string xKubernetesListMapKeys = 41; 522 523 // x-kubernetes-list-type annotates an array to further describe its topology. 524 // This extension must only be used on lists and may have 3 possible values: 525 // 526 // 1) `atomic`: the list is treated as a single entity, like a scalar. 527 // Atomic lists will be entirely replaced when updated. This extension 528 // may be used on any type of list (struct, scalar, ...). 529 // 2) `set`: 530 // Sets are lists that must not have multiple items with the same value. Each 531 // value must be a scalar (or another atomic type). 532 // 3) `map`: 533 // These lists are like maps in that their elements have a non-index key 534 // used to identify them. Order is preserved upon merge. The map tag 535 // must only be used on a list with elements of type object. 536 // Defaults to atomic for arrays. 537 // +optional 538 optional string xKubernetesListType = 42; 539} 540 541// JSONSchemaPropsOrArray represents a value that can either be a JSONSchemaProps 542// or an array of JSONSchemaProps. Mainly here for serialization purposes. 543message JSONSchemaPropsOrArray { 544 optional JSONSchemaProps schema = 1; 545 546 repeated JSONSchemaProps jSONSchemas = 2; 547} 548 549// JSONSchemaPropsOrBool represents JSONSchemaProps or a boolean value. 550// Defaults to true for the boolean property. 551message JSONSchemaPropsOrBool { 552 optional bool allows = 1; 553 554 optional JSONSchemaProps schema = 2; 555} 556 557// JSONSchemaPropsOrStringArray represents a JSONSchemaProps or a string array. 558message JSONSchemaPropsOrStringArray { 559 optional JSONSchemaProps schema = 1; 560 561 repeated string property = 2; 562} 563 564// ServiceReference holds a reference to Service.legacy.k8s.io 565message ServiceReference { 566 // namespace is the namespace of the service. 567 // Required 568 optional string namespace = 1; 569 570 // name is the name of the service. 571 // Required 572 optional string name = 2; 573 574 // path is an optional URL path at which the webhook will be contacted. 575 // +optional 576 optional string path = 3; 577 578 // port is an optional service port at which the webhook will be contacted. 579 // `port` should be a valid port number (1-65535, inclusive). 580 // Defaults to 443 for backward compatibility. 581 // +optional 582 optional int32 port = 4; 583} 584 585// WebhookClientConfig contains the information to make a TLS connection with the webhook. 586message WebhookClientConfig { 587 // url gives the location of the webhook, in standard URL form 588 // (`scheme://host:port/path`). Exactly one of `url` or `service` 589 // must be specified. 590 // 591 // The `host` should not refer to a service running in the cluster; use 592 // the `service` field instead. The host might be resolved via external 593 // DNS in some apiservers (e.g., `kube-apiserver` cannot resolve 594 // in-cluster DNS as that would be a layering violation). `host` may 595 // also be an IP address. 596 // 597 // Please note that using `localhost` or `127.0.0.1` as a `host` is 598 // risky unless you take great care to run this webhook on all hosts 599 // which run an apiserver which might need to make calls to this 600 // webhook. Such installs are likely to be non-portable, i.e., not easy 601 // to turn up in a new cluster. 602 // 603 // The scheme must be "https"; the URL must begin with "https://". 604 // 605 // A path is optional, and if present may be any string permissible in 606 // a URL. You may use the path to pass an arbitrary string to the 607 // webhook, for example, a cluster identifier. 608 // 609 // Attempting to use a user or basic auth e.g. "user:password@" is not 610 // allowed. Fragments ("#...") and query parameters ("?...") are not 611 // allowed, either. 612 // 613 // +optional 614 optional string url = 3; 615 616 // service is a reference to the service for this webhook. Either 617 // service or url must be specified. 618 // 619 // If the webhook is running within the cluster, then you should use `service`. 620 // 621 // +optional 622 optional ServiceReference service = 1; 623 624 // caBundle is a PEM encoded CA bundle which will be used to validate the webhook's server certificate. 625 // If unspecified, system trust roots on the apiserver are used. 626 // +optional 627 optional bytes caBundle = 2; 628} 629 630