Package org.cdk8s.plus28.k8s

Class ValidatingAdmissionPolicySpecV1Beta1.Jsii$Proxy

    • Constructor Detail

      • Jsii$Proxy

        protected Jsii$Proxy​(software.amazon.jsii.JsiiObjectRef objRef)
        Constructor that initializes the object based on values retrieved from the JsiiObject.
        Parameters:
        objRef - Reference to the JSII managed object.

    • Method Detail

      • getFailurePolicy

        public final String getFailurePolicy()
        Description copied from interface: ValidatingAdmissionPolicySpecV1Beta1
        failurePolicy defines how to handle failures for the admission policy.

        Failures can occur from CEL expression parse errors, type check errors, runtime errors and invalid or mis-configured policy definitions or bindings.

        A policy is invalid if spec.paramKind refers to a non-existent Kind. A binding is invalid if spec.paramRef.name refers to a non-existent resource.

        failurePolicy does not define how validations that evaluate to false are handled.

        When failurePolicy is set to Fail, ValidatingAdmissionPolicyBinding validationActions define how failures are enforced.

        Allowed values are Ignore or Fail. Defaults to Fail.

        Default: Fail.

        Specified by:
        getFailurePolicy in interface ValidatingAdmissionPolicySpecV1Beta1

      • getMatchConditions

        public final List<MatchConditionV1Beta1> getMatchConditions()
        Description copied from interface: ValidatingAdmissionPolicySpecV1Beta1
        MatchConditions is a list of conditions that must be met for a request to be validated.

        Match conditions filter requests that have already been matched by the rules, namespaceSelector, and objectSelector. An empty list of matchConditions matches all requests. There are a maximum of 64 match conditions allowed.

        If a parameter object is provided, it can be accessed via the params handle in the same manner as validation expressions.

        The exact matching logic is (in order):

        1. If ANY matchCondition evaluates to FALSE, the policy is skipped.
        2. If ALL matchConditions evaluate to TRUE, the policy is evaluated.
        3. If any matchCondition evaluates to an error (but none are FALSE):

        • If failurePolicy=Fail, reject the request
        • If failurePolicy=Ignore, the policy is skipped
        Specified by:
        getMatchConditions in interface ValidatingAdmissionPolicySpecV1Beta1

      • getMatchConstraints

        public final MatchResourcesV1Beta1 getMatchConstraints()
        Description copied from interface: ValidatingAdmissionPolicySpecV1Beta1
        MatchConstraints specifies what resources this policy is designed to validate.

        The AdmissionPolicy cares about a request if it matches all Constraints. However, in order to prevent clusters from being put into an unstable state that cannot be recovered from via the API ValidatingAdmissionPolicy cannot match ValidatingAdmissionPolicy and ValidatingAdmissionPolicyBinding. Required.

        Specified by:
        getMatchConstraints in interface ValidatingAdmissionPolicySpecV1Beta1

      • getParamKind

        public final ParamKindV1Beta1 getParamKind()
        Description copied from interface: ValidatingAdmissionPolicySpecV1Beta1
        ParamKind specifies the kind of resources used to parameterize this policy.

        If absent, there are no parameters for this policy and the param CEL variable will not be provided to validation expressions. If ParamKind refers to a non-existent kind, this policy definition is mis-configured and the FailurePolicy is applied. If paramKind is specified but paramRef is unset in ValidatingAdmissionPolicyBinding, the params variable will be null.

        Specified by:
        getParamKind in interface ValidatingAdmissionPolicySpecV1Beta1

      • getVariables

        public final List<VariableV1Beta1> getVariables()
        Description copied from interface: ValidatingAdmissionPolicySpecV1Beta1
        Variables contain definitions of variables that can be used in composition of other expressions.

        Each variable is defined as a named CEL expression. The variables defined here will be available under variables in other expressions of the policy except MatchConditions because MatchConditions are evaluated before the rest of the policy.

        The expression of a variable can refer to other variables defined earlier in the list but not those after. Thus, Variables must be sorted by the order of first appearance and acyclic.

        Specified by:
        getVariables in interface ValidatingAdmissionPolicySpecV1Beta1

      • $jsii$toJson

        @Internal
public com.fasterxml.jackson.databind.JsonNode $jsii$toJson()
        Specified by:
        $jsii$toJson in interface software.amazon.jsii.JsiiSerializable

      • hashCode

        public final int hashCode()
        Overrides:
        hashCode in class Object