1/*
2Copyright The Kubernetes Authors.
3
4Licensed under the Apache License, Version 2.0 (the "License");
5you may not use this file except in compliance with the License.
6You may obtain a copy of the License at
7
8    http://www.apache.org/licenses/LICENSE-2.0
9
10Unless required by applicable law or agreed to in writing, software
11distributed under the License is distributed on an "AS IS" BASIS,
12WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
13See the License for the specific language governing permissions and
14limitations under the License.
15*/
16
17
18// This file was autogenerated by go-to-protobuf. Do not edit it manually!
19
20syntax = 'proto2';
21
22package k8s.io.apiextensions_apiserver.pkg.apis.apiextensions.v1beta1;
23
24import "k8s.io/apimachinery/pkg/apis/meta/v1/generated.proto";
25import "k8s.io/apimachinery/pkg/runtime/generated.proto";
26import "k8s.io/apimachinery/pkg/runtime/schema/generated.proto";
27
28// Package-wide variables from generator "generated".
29option go_package = "v1beta1";
30
31// ConversionRequest describes the conversion request parameters.
32message ConversionRequest {
33  // uid is an identifier for the individual request/response. It allows distinguishing instances of requests which are
34  // otherwise identical (parallel requests, etc).
35  // The UID is meant to track the round trip (request/response) between the Kubernetes API server and the webhook, not the user request.
36  // It is suitable for correlating log entries between the webhook and apiserver, for either auditing or debugging.
37  optional string uid = 1;
38
39  // desiredAPIVersion is the version to convert given objects to. e.g. "myapi.example.com/v1"
40  optional string desiredAPIVersion = 2;
41
42  // objects is the list of custom resource objects to be converted.
43  repeated k8s.io.apimachinery.pkg.runtime.RawExtension objects = 3;
44}
45
46// ConversionResponse describes a conversion response.
47message ConversionResponse {
48  // uid is an identifier for the individual request/response.
49  // This should be copied over from the corresponding `request.uid`.
50  optional string uid = 1;
51
52  // convertedObjects is the list of converted version of `request.objects` if the `result` is successful, otherwise empty.
53  // The webhook is expected to set `apiVersion` of these objects to the `request.desiredAPIVersion`. The list
54  // must also have the same size as the input list with the same objects in the same order (equal kind, metadata.uid, metadata.name and metadata.namespace).
55  // The webhook is allowed to mutate labels and annotations. Any other change to the metadata is silently ignored.
56  repeated k8s.io.apimachinery.pkg.runtime.RawExtension convertedObjects = 2;
57
58  // result contains the result of conversion with extra details if the conversion failed. `result.status` determines if
59  // the conversion failed or succeeded. The `result.status` field is required and represents the success or failure of the
60  // conversion. A successful conversion must set `result.status` to `Success`. A failed conversion must set
61  // `result.status` to `Failure` and provide more details in `result.message` and return http status 200. The `result.message`
62  // will be used to construct an error message for the end user.
63  optional k8s.io.apimachinery.pkg.apis.meta.v1.Status result = 3;
64}
65
66// ConversionReview describes a conversion request/response.
67message ConversionReview {
68  // request describes the attributes for the conversion request.
69  // +optional
70  optional ConversionRequest request = 1;
71
72  // response describes the attributes for the conversion response.
73  // +optional
74  optional ConversionResponse response = 2;
75}
76
77// CustomResourceColumnDefinition specifies a column for server side printing.
78message CustomResourceColumnDefinition {
79  // name is a human readable name for the column.
80  optional string name = 1;
81
82  // type is an OpenAPI type definition for this column.
83  // See https://github.com/OAI/OpenAPI-Specification/blob/master/versions/2.0.md#data-types for details.
84  optional string type = 2;
85
86  // format is an optional OpenAPI type definition for this column. The 'name' format is applied
87  // to the primary identifier column to assist in clients identifying column is the resource name.
88  // See https://github.com/OAI/OpenAPI-Specification/blob/master/versions/2.0.md#data-types for details.
89  // +optional
90  optional string format = 3;
91
92  // description is a human readable description of this column.
93  // +optional
94  optional string description = 4;
95
96  // priority is an integer defining the relative importance of this column compared to others. Lower
97  // numbers are considered higher priority. Columns that may be omitted in limited space scenarios
98  // should be given a priority greater than 0.
99  // +optional
100  optional int32 priority = 5;
101
102  // JSONPath is a simple JSON path (i.e. with array notation) which is evaluated against
103  // each custom resource to produce the value for this column.
104  optional string JSONPath = 6;
105}
106
107// CustomResourceConversion describes how to convert different versions of a CR.
108message CustomResourceConversion {
109  // strategy specifies how custom resources are converted between versions. Allowed values are:
110  // - `None`: The converter only change the apiVersion and would not touch any other field in the custom resource.
111  // - `Webhook`: API Server will call to an external webhook to do the conversion. Additional information
112  //   is needed for this option. This requires spec.preserveUnknownFields to be false, and spec.conversion.webhookClientConfig to be set.
113  optional string strategy = 1;
114
115  // webhookClientConfig is the instructions for how to call the webhook if strategy is `Webhook`.
116  // Required when `strategy` is set to `Webhook`.
117  // +optional
118  optional WebhookClientConfig webhookClientConfig = 2;
119
120  // conversionReviewVersions is an ordered list of preferred `ConversionReview`
121  // versions the Webhook expects. The API server will use the first version in
122  // the list which it supports. If none of the versions specified in this list
123  // are supported by API server, conversion will fail for the custom resource.
124  // If a persisted Webhook configuration specifies allowed versions and does not
125  // include any versions known to the API Server, calls to the webhook will fail.
126  // Defaults to `["v1beta1"]`.
127  // +optional
128  repeated string conversionReviewVersions = 3;
129}
130
131// CustomResourceDefinition represents a resource that should be exposed on the API server.  Its name MUST be in the format
132// <.spec.name>.<.spec.group>.
133// Deprecated in v1.16, planned for removal in v1.19. Use apiextensions.k8s.io/v1 CustomResourceDefinition instead.
134message CustomResourceDefinition {
135  optional k8s.io.apimachinery.pkg.apis.meta.v1.ObjectMeta metadata = 1;
136
137  // spec describes how the user wants the resources to appear
138  optional CustomResourceDefinitionSpec spec = 2;
139
140  // status indicates the actual state of the CustomResourceDefinition
141  // +optional
142  optional CustomResourceDefinitionStatus status = 3;
143}
144
145// CustomResourceDefinitionCondition contains details for the current condition of this pod.
146message CustomResourceDefinitionCondition {
147  // type is the type of the condition. Types include Established, NamesAccepted and Terminating.
148  optional string type = 1;
149
150  // status is the status of the condition.
151  // Can be True, False, Unknown.
152  optional string status = 2;
153
154  // lastTransitionTime last time the condition transitioned from one status to another.
155  // +optional
156  optional k8s.io.apimachinery.pkg.apis.meta.v1.Time lastTransitionTime = 3;
157
158  // reason is a unique, one-word, CamelCase reason for the condition's last transition.
159  // +optional
160  optional string reason = 4;
161
162  // message is a human-readable message indicating details about last transition.
163  // +optional
164  optional string message = 5;
165}
166
167// CustomResourceDefinitionList is a list of CustomResourceDefinition objects.
168message CustomResourceDefinitionList {
169  optional k8s.io.apimachinery.pkg.apis.meta.v1.ListMeta metadata = 1;
170
171  // items list individual CustomResourceDefinition objects
172  repeated CustomResourceDefinition items = 2;
173}
174
175// CustomResourceDefinitionNames indicates the names to serve this CustomResourceDefinition
176message CustomResourceDefinitionNames {
177  // plural is the plural name of the resource to serve.
178  // The custom resources are served under `/apis/<group>/<version>/.../<plural>`.
179  // Must match the name of the CustomResourceDefinition (in the form `<names.plural>.<group>`).
180  // Must be all lowercase.
181  optional string plural = 1;
182
183  // singular is the singular name of the resource. It must be all lowercase. Defaults to lowercased `kind`.
184  // +optional
185  optional string singular = 2;
186
187  // shortNames are short names for the resource, exposed in API discovery documents,
188  // and used by clients to support invocations like `kubectl get <shortname>`.
189  // It must be all lowercase.
190  // +optional
191  repeated string shortNames = 3;
192
193  // kind is the serialized kind of the resource. It is normally CamelCase and singular.
194  // Custom resource instances will use this value as the `kind` attribute in API calls.
195  optional string kind = 4;
196
197  // listKind is the serialized kind of the list for this resource. Defaults to "`kind`List".
198  // +optional
199  optional string listKind = 5;
200
201  // categories is a list of grouped resources this custom resource belongs to (e.g. 'all').
202  // This is published in API discovery documents, and used by clients to support invocations like
203  // `kubectl get all`.
204  // +optional
205  repeated string categories = 6;
206}
207
208// CustomResourceDefinitionSpec describes how a user wants their resource to appear
209message CustomResourceDefinitionSpec {
210  // group is the API group of the defined custom resource.
211  // The custom resources are served under `/apis/<group>/...`.
212  // Must match the name of the CustomResourceDefinition (in the form `<names.plural>.<group>`).
213  optional string group = 1;
214
215  // version is the API version of the defined custom resource.
216  // The custom resources are served under `/apis/<group>/<version>/...`.
217  // Must match the name of the first item in the `versions` list if `version` and `versions` are both specified.
218  // Optional if `versions` is specified.
219  // Deprecated: use `versions` instead.
220  // +optional
221  optional string version = 2;
222
223  // names specify the resource and kind names for the custom resource.
224  optional CustomResourceDefinitionNames names = 3;
225
226  // scope indicates whether the defined custom resource is cluster- or namespace-scoped.
227  // Allowed values are `Cluster` and `Namespaced`. Default is `Namespaced`.
228  optional string scope = 4;
229
230  // validation describes the schema used for validation and pruning of the custom resource.
231  // If present, this validation schema is used to validate all versions.
232  // Top-level and per-version schemas are mutually exclusive.
233  // +optional
234  optional CustomResourceValidation validation = 5;
235
236  // subresources specify what subresources the defined custom resource has.
237  // If present, this field configures subresources for all versions.
238  // Top-level and per-version subresources are mutually exclusive.
239  // +optional
240  optional CustomResourceSubresources subresources = 6;
241
242  // versions is the list of all API versions of the defined custom resource.
243  // Optional if `version` is specified.
244  // The name of the first item in the `versions` list must match the `version` field if `version` and `versions` are both specified.
245  // Version names are used to compute the order in which served versions are listed in API discovery.
246  // If the version string is "kube-like", it will sort above non "kube-like" version strings, which are ordered
247  // lexicographically. "Kube-like" versions start with a "v", then are followed by a number (the major version),
248  // then optionally the string "alpha" or "beta" and another number (the minor version). These are sorted first
249  // by GA > beta > alpha (where GA is a version with no suffix such as beta or alpha), and then by comparing
250  // major version, then minor version. An example sorted list of versions:
251  // v10, v2, v1, v11beta2, v10beta3, v3beta1, v12alpha1, v11alpha2, foo1, foo10.
252  // +optional
253  repeated CustomResourceDefinitionVersion versions = 7;
254
255  // additionalPrinterColumns specifies additional columns returned in Table output.
256  // See https://kubernetes.io/docs/reference/using-api/api-concepts/#receiving-resources-as-tables for details.
257  // If present, this field configures columns for all versions.
258  // Top-level and per-version columns are mutually exclusive.
259  // If no top-level or per-version columns are specified, a single column displaying the age of the custom resource is used.
260  // +optional
261  repeated CustomResourceColumnDefinition additionalPrinterColumns = 8;
262
263  // conversion defines conversion settings for the CRD.
264  // +optional
265  optional CustomResourceConversion conversion = 9;
266
267  // preserveUnknownFields indicates that object fields which are not specified
268  // in the OpenAPI schema should be preserved when persisting to storage.
269  // apiVersion, kind, metadata and known fields inside metadata are always preserved.
270  // If false, schemas must be defined for all versions.
271  // Defaults to true in v1beta for backwards compatibility.
272  // Deprecated: will be required to be false in v1. Preservation of unknown fields can be specified
273  // in the validation schema using the `x-kubernetes-preserve-unknown-fields: true` extension.
274  // See https://kubernetes.io/docs/tasks/access-kubernetes-api/custom-resources/custom-resource-definitions/#pruning-versus-preserving-unknown-fields for details.
275  // +optional
276  optional bool preserveUnknownFields = 10;
277}
278
279// CustomResourceDefinitionStatus indicates the state of the CustomResourceDefinition
280message CustomResourceDefinitionStatus {
281  // conditions indicate state for particular aspects of a CustomResourceDefinition
282  // +optional
283  repeated CustomResourceDefinitionCondition conditions = 1;
284
285  // acceptedNames are the names that are actually being used to serve discovery.
286  // They may be different than the names in spec.
287  optional CustomResourceDefinitionNames acceptedNames = 2;
288
289  // storedVersions lists all versions of CustomResources that were ever persisted. Tracking these
290  // versions allows a migration path for stored versions in etcd. The field is mutable
291  // so a migration controller can finish a migration to another version (ensuring
292  // no old objects are left in storage), and then remove the rest of the
293  // versions from this list.
294  // Versions may not be removed from `spec.versions` while they exist in this list.
295  repeated string storedVersions = 3;
296}
297
298// CustomResourceDefinitionVersion describes a version for CRD.
299message CustomResourceDefinitionVersion {
300  // name is the version name, e.g. “v1”, “v2beta1”, etc.
301  // The custom resources are served under this version at `/apis/<group>/<version>/...` if `served` is true.
302  optional string name = 1;
303
304  // served is a flag enabling/disabling this version from being served via REST APIs
305  optional bool served = 2;
306
307  // storage indicates this version should be used when persisting custom resources to storage.
308  // There must be exactly one version with storage=true.
309  optional bool storage = 3;
310
311  // schema describes the schema used for validation and pruning of this version of the custom resource.
312  // Top-level and per-version schemas are mutually exclusive.
313  // Per-version schemas must not all be set to identical values (top-level validation schema should be used instead).
314  // +optional
315  optional CustomResourceValidation schema = 4;
316
317  // subresources specify what subresources this version of the defined custom resource have.
318  // Top-level and per-version subresources are mutually exclusive.
319  // Per-version subresources must not all be set to identical values (top-level subresources should be used instead).
320  // +optional
321  optional CustomResourceSubresources subresources = 5;
322
323  // additionalPrinterColumns specifies additional columns returned in Table output.
324  // See https://kubernetes.io/docs/reference/using-api/api-concepts/#receiving-resources-as-tables for details.
325  // Top-level and per-version columns are mutually exclusive.
326  // Per-version columns must not all be set to identical values (top-level columns should be used instead).
327  // If no top-level or per-version columns are specified, a single column displaying the age of the custom resource is used.
328  // +optional
329  repeated CustomResourceColumnDefinition additionalPrinterColumns = 6;
330}
331
332// CustomResourceSubresourceScale defines how to serve the scale subresource for CustomResources.
333message CustomResourceSubresourceScale {
334  // specReplicasPath defines the JSON path inside of a custom resource that corresponds to Scale `spec.replicas`.
335  // Only JSON paths without the array notation are allowed.
336  // Must be a JSON Path under `.spec`.
337  // If there is no value under the given path in the custom resource, the `/scale` subresource will return an error on GET.
338  optional string specReplicasPath = 1;
339
340  // statusReplicasPath defines the JSON path inside of a custom resource that corresponds to Scale `status.replicas`.
341  // Only JSON paths without the array notation are allowed.
342  // Must be a JSON Path under `.status`.
343  // If there is no value under the given path in the custom resource, the `status.replicas` value in the `/scale` subresource
344  // will default to 0.
345  optional string statusReplicasPath = 2;
346
347  // labelSelectorPath defines the JSON path inside of a custom resource that corresponds to Scale `status.selector`.
348  // Only JSON paths without the array notation are allowed.
349  // Must be a JSON Path under `.status` or `.spec`.
350  // Must be set to work with HorizontalPodAutoscaler.
351  // The field pointed by this JSON path must be a string field (not a complex selector struct)
352  // which contains a serialized label selector in string form.
353  // More info: https://kubernetes.io/docs/tasks/access-kubernetes-api/custom-resources/custom-resource-definitions#scale-subresource
354  // If there is no value under the given path in the custom resource, the `status.selector` value in the `/scale`
355  // subresource will default to the empty string.
356  // +optional
357  optional string labelSelectorPath = 3;
358}
359
360// CustomResourceSubresourceStatus defines how to serve the status subresource for CustomResources.
361// Status is represented by the `.status` JSON path inside of a CustomResource. When set,
362// * exposes a /status subresource for the custom resource
363// * PUT requests to the /status subresource take a custom resource object, and ignore changes to anything except the status stanza
364// * PUT/POST/PATCH requests to the custom resource ignore changes to the status stanza
365message CustomResourceSubresourceStatus {
366}
367
368// CustomResourceSubresources defines the status and scale subresources for CustomResources.
369message CustomResourceSubresources {
370  // status indicates the custom resource should serve a `/status` subresource.
371  // When enabled:
372  // 1. requests to the custom resource primary endpoint ignore changes to the `status` stanza of the object.
373  // 2. requests to the custom resource `/status` subresource ignore changes to anything other than the `status` stanza of the object.
374  // +optional
375  optional CustomResourceSubresourceStatus status = 1;
376
377  // scale indicates the custom resource should serve a `/scale` subresource that returns an `autoscaling/v1` Scale object.
378  // +optional
379  optional CustomResourceSubresourceScale scale = 2;
380}
381
382// CustomResourceValidation is a list of validation methods for CustomResources.
383message CustomResourceValidation {
384  // openAPIV3Schema is the OpenAPI v3 schema to use for validation and pruning.
385  // +optional
386  optional JSONSchemaProps openAPIV3Schema = 1;
387}
388
389// ExternalDocumentation allows referencing an external resource for extended documentation.
390message ExternalDocumentation {
391  optional string description = 1;
392
393  optional string url = 2;
394}
395
396// JSON represents any valid JSON value.
397// These types are supported: bool, int64, float64, string, []interface{}, map[string]interface{} and nil.
398message JSON {
399  optional bytes raw = 1;
400}
401
402// JSONSchemaProps is a JSON-Schema following Specification Draft 4 (http://json-schema.org/).
403message JSONSchemaProps {
404  optional string id = 1;
405
406  optional string schema = 2;
407
408  optional string ref = 3;
409
410  optional string description = 4;
411
412  optional string type = 5;
413
414  optional string format = 6;
415
416  optional string title = 7;
417
418  // default is a default value for undefined object fields.
419  // Defaulting is a beta feature under the CustomResourceDefaulting feature gate.
420  // CustomResourceDefinitions with defaults must be created using the v1 (or newer) CustomResourceDefinition API.
421  optional JSON default = 8;
422
423  optional double maximum = 9;
424
425  optional bool exclusiveMaximum = 10;
426
427  optional double minimum = 11;
428
429  optional bool exclusiveMinimum = 12;
430
431  optional int64 maxLength = 13;
432
433  optional int64 minLength = 14;
434
435  optional string pattern = 15;
436
437  optional int64 maxItems = 16;
438
439  optional int64 minItems = 17;
440
441  optional bool uniqueItems = 18;
442
443  optional double multipleOf = 19;
444
445  repeated JSON enum = 20;
446
447  optional int64 maxProperties = 21;
448
449  optional int64 minProperties = 22;
450
451  repeated string required = 23;
452
453  optional JSONSchemaPropsOrArray items = 24;
454
455  repeated JSONSchemaProps allOf = 25;
456
457  repeated JSONSchemaProps oneOf = 26;
458
459  repeated JSONSchemaProps anyOf = 27;
460
461  optional JSONSchemaProps not = 28;
462
463  map<string, JSONSchemaProps> properties = 29;
464
465  optional JSONSchemaPropsOrBool additionalProperties = 30;
466
467  map<string, JSONSchemaProps> patternProperties = 31;
468
469  map<string, JSONSchemaPropsOrStringArray> dependencies = 32;
470
471  optional JSONSchemaPropsOrBool additionalItems = 33;
472
473  map<string, JSONSchemaProps> definitions = 34;
474
475  optional ExternalDocumentation externalDocs = 35;
476
477  optional JSON example = 36;
478
479  optional bool nullable = 37;
480
481  // x-kubernetes-preserve-unknown-fields stops the API server
482  // decoding step from pruning fields which are not specified
483  // in the validation schema. This affects fields recursively,
484  // but switches back to normal pruning behaviour if nested
485  // properties or additionalProperties are specified in the schema.
486  // This can either be true or undefined. False is forbidden.
487  optional bool xKubernetesPreserveUnknownFields = 38;
488
489  // x-kubernetes-embedded-resource defines that the value is an
490  // embedded Kubernetes runtime.Object, with TypeMeta and
491  // ObjectMeta. The type must be object. It is allowed to further
492  // restrict the embedded object. kind, apiVersion and metadata
493  // are validated automatically. x-kubernetes-preserve-unknown-fields
494  // is allowed to be true, but does not have to be if the object
495  // is fully specified (up to kind, apiVersion, metadata).
496  optional bool xKubernetesEmbeddedResource = 39;
497
498  // x-kubernetes-int-or-string specifies that this value is
499  // either an integer or a string. If this is true, an empty
500  // type is allowed and type as child of anyOf is permitted
501  // if following one of the following patterns:
502  //
503  // 1) anyOf:
504  //    - type: integer
505  //    - type: string
506  // 2) allOf:
507  //    - anyOf:
508  //      - type: integer
509  //      - type: string
510  //    - ... zero or more
511  optional bool xKubernetesIntOrString = 40;
512
513  // x-kubernetes-list-map-keys annotates an array with the x-kubernetes-list-type `map` by specifying the keys used
514  // as the index of the map.
515  //
516  // This tag MUST only be used on lists that have the "x-kubernetes-list-type"
517  // extension set to "map". Also, the values specified for this attribute must
518  // be a scalar typed field of the child structure (no nesting is supported).
519  //
520  // +optional
521  repeated string xKubernetesListMapKeys = 41;
522
523  // x-kubernetes-list-type annotates an array to further describe its topology.
524  // This extension must only be used on lists and may have 3 possible values:
525  //
526  // 1) `atomic`: the list is treated as a single entity, like a scalar.
527  //      Atomic lists will be entirely replaced when updated. This extension
528  //      may be used on any type of list (struct, scalar, ...).
529  // 2) `set`:
530  //      Sets are lists that must not have multiple items with the same value. Each
531  //      value must be a scalar (or another atomic type).
532  // 3) `map`:
533  //      These lists are like maps in that their elements have a non-index key
534  //      used to identify them. Order is preserved upon merge. The map tag
535  //      must only be used on a list with elements of type object.
536  // Defaults to atomic for arrays.
537  // +optional
538  optional string xKubernetesListType = 42;
539}
540
541// JSONSchemaPropsOrArray represents a value that can either be a JSONSchemaProps
542// or an array of JSONSchemaProps. Mainly here for serialization purposes.
543message JSONSchemaPropsOrArray {
544  optional JSONSchemaProps schema = 1;
545
546  repeated JSONSchemaProps jSONSchemas = 2;
547}
548
549// JSONSchemaPropsOrBool represents JSONSchemaProps or a boolean value.
550// Defaults to true for the boolean property.
551message JSONSchemaPropsOrBool {
552  optional bool allows = 1;
553
554  optional JSONSchemaProps schema = 2;
555}
556
557// JSONSchemaPropsOrStringArray represents a JSONSchemaProps or a string array.
558message JSONSchemaPropsOrStringArray {
559  optional JSONSchemaProps schema = 1;
560
561  repeated string property = 2;
562}
563
564// ServiceReference holds a reference to Service.legacy.k8s.io
565message ServiceReference {
566  // namespace is the namespace of the service.
567  // Required
568  optional string namespace = 1;
569
570  // name is the name of the service.
571  // Required
572  optional string name = 2;
573
574  // path is an optional URL path at which the webhook will be contacted.
575  // +optional
576  optional string path = 3;
577
578  // port is an optional service port at which the webhook will be contacted.
579  // `port` should be a valid port number (1-65535, inclusive).
580  // Defaults to 443 for backward compatibility.
581  // +optional
582  optional int32 port = 4;
583}
584
585// WebhookClientConfig contains the information to make a TLS connection with the webhook.
586message WebhookClientConfig {
587  // url gives the location of the webhook, in standard URL form
588  // (`scheme://host:port/path`). Exactly one of `url` or `service`
589  // must be specified.
590  //
591  // The `host` should not refer to a service running in the cluster; use
592  // the `service` field instead. The host might be resolved via external
593  // DNS in some apiservers (e.g., `kube-apiserver` cannot resolve
594  // in-cluster DNS as that would be a layering violation). `host` may
595  // also be an IP address.
596  //
597  // Please note that using `localhost` or `127.0.0.1` as a `host` is
598  // risky unless you take great care to run this webhook on all hosts
599  // which run an apiserver which might need to make calls to this
600  // webhook. Such installs are likely to be non-portable, i.e., not easy
601  // to turn up in a new cluster.
602  //
603  // The scheme must be "https"; the URL must begin with "https://".
604  //
605  // A path is optional, and if present may be any string permissible in
606  // a URL. You may use the path to pass an arbitrary string to the
607  // webhook, for example, a cluster identifier.
608  //
609  // Attempting to use a user or basic auth e.g. "user:password@" is not
610  // allowed. Fragments ("#...") and query parameters ("?...") are not
611  // allowed, either.
612  //
613  // +optional
614  optional string url = 3;
615
616  // service is a reference to the service for this webhook. Either
617  // service or url must be specified.
618  //
619  // If the webhook is running within the cluster, then you should use `service`.
620  //
621  // +optional
622  optional ServiceReference service = 1;
623
624  // caBundle is a PEM encoded CA bundle which will be used to validate the webhook's server certificate.
625  // If unspecified, system trust roots on the apiserver are used.
626  // +optional
627  optional bytes caBundle = 2;
628}
629
630