"description":"AggregationRule describes how to locate ClusterRoles to aggregate into the ClusterRole",
"properties":{
"clusterRoleSelectors":{
"description":"ClusterRoleSelectors holds a list of selectors which will be used to find ClusterRoles and create the rules. If any of the selectors match, then the ClusterRole's permissions will be added",
"description":"ClusterRole is a cluster level, logical grouping of PolicyRules that can be referenced as a unit by a RoleBinding or ClusterRoleBinding.",
"description":"ClusterRole is a cluster level, logical grouping of PolicyRules that can be referenced as a unit by a RoleBinding or ClusterRoleBinding.",
"required":[
"required":[
"rules"
"rules"
],
],
"properties":{
"properties":{
"aggregationRule":{
"description":"AggregationRule is an optional field that describes how to build the Rules for this ClusterRole. If AggregationRule is set, then the Rules are controller managed and direct changes to Rules will be stomped by the controller.",
"description":"APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/api-conventions.md#resources",
"description":"APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/api-conventions.md#resources",
"type":"string"
"type":"string"
...
@@ -79126,12 +79142,28 @@
...
@@ -79126,12 +79142,28 @@
}
}
}
}
},
},
"io.k8s.api.rbac.v1alpha1.AggregationRule":{
"description":"AggregationRule describes how to locate ClusterRoles to aggregate into the ClusterRole",
"properties":{
"clusterRoleSelectors":{
"description":"ClusterRoleSelectors holds a list of selectors which will be used to find ClusterRoles and create the rules. If any of the selectors match, then the ClusterRole's permissions will be added",
"description":"ClusterRole is a cluster level, logical grouping of PolicyRules that can be referenced as a unit by a RoleBinding or ClusterRoleBinding.",
"description":"ClusterRole is a cluster level, logical grouping of PolicyRules that can be referenced as a unit by a RoleBinding or ClusterRoleBinding.",
"required":[
"required":[
"rules"
"rules"
],
],
"properties":{
"properties":{
"aggregationRule":{
"description":"AggregationRule is an optional field that describes how to build the Rules for this ClusterRole. If AggregationRule is set, then the Rules are controller managed and direct changes to Rules will be stomped by the controller.",
"description":"APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/api-conventions.md#resources",
"description":"APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/api-conventions.md#resources",
"type":"string"
"type":"string"
...
@@ -79498,12 +79530,28 @@
...
@@ -79498,12 +79530,28 @@
}
}
}
}
},
},
"io.k8s.api.rbac.v1beta1.AggregationRule":{
"description":"AggregationRule describes how to locate ClusterRoles to aggregate into the ClusterRole",
"properties":{
"clusterRoleSelectors":{
"description":"ClusterRoleSelectors holds a list of selectors which will be used to find ClusterRoles and create the rules. If any of the selectors match, then the ClusterRole's permissions will be added",
"description":"ClusterRole is a cluster level, logical grouping of PolicyRules that can be referenced as a unit by a RoleBinding or ClusterRoleBinding.",
"description":"ClusterRole is a cluster level, logical grouping of PolicyRules that can be referenced as a unit by a RoleBinding or ClusterRoleBinding.",
"required":[
"required":[
"rules"
"rules"
],
],
"properties":{
"properties":{
"aggregationRule":{
"description":"AggregationRule is an optional field that describes how to build the Rules for this ClusterRole. If AggregationRule is set, then the Rules are controller managed and direct changes to Rules will be stomped by the controller.",
"description":"APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/api-conventions.md#resources",
"description":"APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/api-conventions.md#resources",
"description":"Rules holds all the PolicyRules for this ClusterRole"
"description":"Rules holds all the PolicyRules for this ClusterRole"
},
"aggregationRule":{
"$ref":"v1.AggregationRule",
"description":"AggregationRule is an optional field that describes how to build the Rules for this ClusterRole. If AggregationRule is set, then the Rules are controller managed and direct changes to Rules will be stomped by the controller."
}
}
}
}
},
},
...
@@ -3836,6 +3840,61 @@
...
@@ -3836,6 +3840,61 @@
}
}
}
}
},
},
"v1.AggregationRule":{
"id":"v1.AggregationRule",
"description":"AggregationRule describes how to locate ClusterRoles to aggregate into the ClusterRole",
"properties":{
"clusterRoleSelectors":{
"type":"array",
"items":{
"$ref":"v1.LabelSelector"
},
"description":"ClusterRoleSelectors holds a list of selectors which will be used to find ClusterRoles and create the rules. If any of the selectors match, then the ClusterRole's permissions will be added"
}
}
},
"v1.LabelSelector":{
"id":"v1.LabelSelector",
"description":"A label selector is a label query over a set of resources. The result of matchLabels and matchExpressions are ANDed. An empty label selector matches all objects. A null label selector matches no objects.",
"properties":{
"matchLabels":{
"type":"object",
"description":"matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels map is equivalent to an element of matchExpressions, whose key field is \"key\", the operator is \"In\", and the values array contains only \"value\". The requirements are ANDed."
},
"matchExpressions":{
"type":"array",
"items":{
"$ref":"v1.LabelSelectorRequirement"
},
"description":"matchExpressions is a list of label selector requirements. The requirements are ANDed."
}
}
},
"v1.LabelSelectorRequirement":{
"id":"v1.LabelSelectorRequirement",
"description":"A label selector requirement is a selector that contains values, a key, and an operator that relates the key and values.",
"required":[
"key",
"operator"
],
"properties":{
"key":{
"type":"string",
"description":"key is the label key that the selector applies to."
},
"operator":{
"type":"string",
"description":"operator represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists and DoesNotExist."
},
"values":{
"type":"array",
"items":{
"type":"string"
},
"description":"values is an array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. This array is replaced during a strategic merge patch."
}
}
},
"v1.RoleBindingList":{
"v1.RoleBindingList":{
"id":"v1.RoleBindingList",
"id":"v1.RoleBindingList",
"description":"RoleBindingList is a collection of RoleBindings",
"description":"RoleBindingList is a collection of RoleBindings",
"description":"Rules holds all the PolicyRules for this ClusterRole"
"description":"Rules holds all the PolicyRules for this ClusterRole"
},
"aggregationRule":{
"$ref":"v1alpha1.AggregationRule",
"description":"AggregationRule is an optional field that describes how to build the Rules for this ClusterRole. If AggregationRule is set, then the Rules are controller managed and direct changes to Rules will be stomped by the controller."
}
}
}
}
},
},
...
@@ -3836,6 +3840,61 @@
...
@@ -3836,6 +3840,61 @@
}
}
}
}
},
},
"v1alpha1.AggregationRule":{
"id":"v1alpha1.AggregationRule",
"description":"AggregationRule describes how to locate ClusterRoles to aggregate into the ClusterRole",
"properties":{
"clusterRoleSelectors":{
"type":"array",
"items":{
"$ref":"v1.LabelSelector"
},
"description":"ClusterRoleSelectors holds a list of selectors which will be used to find ClusterRoles and create the rules. If any of the selectors match, then the ClusterRole's permissions will be added"
}
}
},
"v1.LabelSelector":{
"id":"v1.LabelSelector",
"description":"A label selector is a label query over a set of resources. The result of matchLabels and matchExpressions are ANDed. An empty label selector matches all objects. A null label selector matches no objects.",
"properties":{
"matchLabels":{
"type":"object",
"description":"matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels map is equivalent to an element of matchExpressions, whose key field is \"key\", the operator is \"In\", and the values array contains only \"value\". The requirements are ANDed."
},
"matchExpressions":{
"type":"array",
"items":{
"$ref":"v1.LabelSelectorRequirement"
},
"description":"matchExpressions is a list of label selector requirements. The requirements are ANDed."
}
}
},
"v1.LabelSelectorRequirement":{
"id":"v1.LabelSelectorRequirement",
"description":"A label selector requirement is a selector that contains values, a key, and an operator that relates the key and values.",
"required":[
"key",
"operator"
],
"properties":{
"key":{
"type":"string",
"description":"key is the label key that the selector applies to."
},
"operator":{
"type":"string",
"description":"operator represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists and DoesNotExist."
},
"values":{
"type":"array",
"items":{
"type":"string"
},
"description":"values is an array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. This array is replaced during a strategic merge patch."
}
}
},
"v1alpha1.RoleBindingList":{
"v1alpha1.RoleBindingList":{
"id":"v1alpha1.RoleBindingList",
"id":"v1alpha1.RoleBindingList",
"description":"RoleBindingList is a collection of RoleBindings",
"description":"RoleBindingList is a collection of RoleBindings",
"description":"Rules holds all the PolicyRules for this ClusterRole"
"description":"Rules holds all the PolicyRules for this ClusterRole"
},
"aggregationRule":{
"$ref":"v1beta1.AggregationRule",
"description":"AggregationRule is an optional field that describes how to build the Rules for this ClusterRole. If AggregationRule is set, then the Rules are controller managed and direct changes to Rules will be stomped by the controller."
}
}
}
}
},
},
...
@@ -3836,6 +3840,61 @@
...
@@ -3836,6 +3840,61 @@
}
}
}
}
},
},
"v1beta1.AggregationRule":{
"id":"v1beta1.AggregationRule",
"description":"AggregationRule describes how to locate ClusterRoles to aggregate into the ClusterRole",
"properties":{
"clusterRoleSelectors":{
"type":"array",
"items":{
"$ref":"v1.LabelSelector"
},
"description":"ClusterRoleSelectors holds a list of selectors which will be used to find ClusterRoles and create the rules. If any of the selectors match, then the ClusterRole's permissions will be added"
}
}
},
"v1.LabelSelector":{
"id":"v1.LabelSelector",
"description":"A label selector is a label query over a set of resources. The result of matchLabels and matchExpressions are ANDed. An empty label selector matches all objects. A null label selector matches no objects.",
"properties":{
"matchLabels":{
"type":"object",
"description":"matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels map is equivalent to an element of matchExpressions, whose key field is \"key\", the operator is \"In\", and the values array contains only \"value\". The requirements are ANDed."
},
"matchExpressions":{
"type":"array",
"items":{
"$ref":"v1.LabelSelectorRequirement"
},
"description":"matchExpressions is a list of label selector requirements. The requirements are ANDed."
}
}
},
"v1.LabelSelectorRequirement":{
"id":"v1.LabelSelectorRequirement",
"description":"A label selector requirement is a selector that contains values, a key, and an operator that relates the key and values.",
"required":[
"key",
"operator"
],
"properties":{
"key":{
"type":"string",
"description":"key is the label key that the selector applies to."
},
"operator":{
"type":"string",
"description":"operator represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists and DoesNotExist."
},
"values":{
"type":"array",
"items":{
"type":"string"
},
"description":"values is an array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. This array is replaced during a strategic merge patch."
}
}
},
"v1beta1.RoleBindingList":{
"v1beta1.RoleBindingList":{
"id":"v1beta1.RoleBindingList",
"id":"v1beta1.RoleBindingList",
"description":"RoleBindingList is a collection of RoleBindings",
"description":"RoleBindingList is a collection of RoleBindings",
<p>ClusterRoleBinding references a ClusterRole, but not contain it. It can reference a ClusterRole in the global namespace, and adds who information via Subject.</p>
<p>ClusterRoleBinding references a ClusterRole, but not contain it. It can reference a ClusterRole in the global namespace, and adds who information via Subject.</p>
<p>DeleteOptions may be provided when deleting an API object.</p>
<p>ListMeta describes metadata that synthetic resources must have, including lists and various status objects. A resource may have only one of {ObjectMeta, ListMeta}.</p>
<tdclass="tableblock halign-left valign-top"><pclass="tableblock">Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: <ahref="https://git.k8s.io/community/contributors/devel/api-conventions.md#types-kinds">https://git.k8s.io/community/contributors/devel/api-conventions.md#types-kinds</a></p></td>
<tdclass="tableblock halign-left valign-top"><pclass="tableblock">selfLink is a URL representing this object. Populated by the system. Read-only.</p></td>
<tdclass="tableblock halign-left valign-top"><pclass="tableblock">APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: <ahref="https://git.k8s.io/community/contributors/devel/api-conventions.md#resources">https://git.k8s.io/community/contributors/devel/api-conventions.md#resources</a></p></td>
<tdclass="tableblock halign-left valign-top"><pclass="tableblock">String that identifies the server’s internal version of this object that can be used by clients to determine when objects have changed. Value must be treated as opaque by clients and passed unmodified back to the server. Populated by the system. Read-only. More info: <ahref="https://git.k8s.io/community/contributors/devel/api-conventions.md#concurrency-control-and-consistency">https://git.k8s.io/community/contributors/devel/api-conventions.md#concurrency-control-and-consistency</a></p></td>
<tdclass="tableblock halign-left valign-top"><pclass="tableblock">The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.</p></td>
<tdclass="tableblock halign-left valign-top"><pclass="tableblock">continue may be set if the user set a limit on the number of items returned, and indicates that the server has more data available. The value is opaque and may be used to issue another request to the endpoint that served this list to retrieve the next set of available objects. Continuing a list may not be possible if the server configuration has changed or more than a few minutes have passed. The resourceVersion field returned when using this continue value will be identical to the value in the first response.</p></td>
<tdclass="tableblock halign-left valign-top"><pclass="tableblock">Must be fulfilled before a deletion is carried out. If not possible, a 409 Conflict status will be returned.</p></td>
<tdclass="tableblock halign-left valign-top"><pclass="tableblock">Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object’s finalizers list. Either this field or PropagationPolicy may be set, but not both.</p></td>
<tdclass="tableblock halign-left valign-top"><pclass="tableblock">Pending is a list of initializers that must execute in order before this object is visible. When the last pending initializer is removed, and no failing result is set, the initializers struct will be set to nil and the object is considered as initialized and visible to all clients.</p></td>
<tdclass="tableblock halign-left valign-top"><pclass="tableblock">Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: <em>Orphan</em> - orphan the dependents; <em>Background</em> - allow the garbage collector to delete the dependents in the background; <em>Foreground</em> - a cascading policy that deletes all dependents in the foreground.</p></td>
<tdclass="tableblock halign-left valign-top"><pclass="tableblock">If result is set with the Failure field, the object will be persisted to storage and then deleted, ensuring that other clients can observe the deletion.</p></td>
<p>ListMeta describes metadata that synthetic resources must have, including lists and various status objects. A resource may have only one of {ObjectMeta, ListMeta}.</p>
<p>Preconditions must be fulfilled before an operation (update, delete, etc.) is carried out.</p>
<tdclass="tableblock halign-left valign-top"><pclass="tableblock">selfLink is a URL representing this object. Populated by the system. Read-only.</p></td>
<tdclass="tableblock halign-left valign-top"><pclass="tableblock">Specifies the target UID.</p></td>
<tdclass="tableblock halign-left valign-top"><pclass="tableblock">String that identifies the server’s internal version of this object that can be used by clients to determine when objects have changed. Value must be treated as opaque by clients and passed unmodified back to the server. Populated by the system. Read-only. More info: <ahref="https://git.k8s.io/community/contributors/devel/api-conventions.md#concurrency-control-and-consistency">https://git.k8s.io/community/contributors/devel/api-conventions.md#concurrency-control-and-consistency</a></p></td>
<tdclass="tableblock halign-left valign-top"><pclass="tableblock">continue may be set if the user set a limit on the number of items returned, and indicates that the server has more data available. The value is opaque and may be used to issue another request to the endpoint that served this list to retrieve the next set of available objects. Continuing a list may not be possible if the server configuration has changed or more than a few minutes have passed. The resourceVersion field returned when using this continue value will be identical to the value in the first response.</p></td>
<p>StatusDetails is a set of additional properties that MAY be set by the server to provide additional information about a response. The Reason field of a Status object defines what attributes will be set. Clients must ignore fields that do not match the defined type of each attribute, and should assume that any attribute may be empty, invalid, or under defined.</p>
<p>Status is a return value for calls that don’t return other objects.</p>
<tdclass="tableblock halign-left valign-top"><pclass="tableblock">The name attribute of the resource associated with the status StatusReason (when there is a single name which can be described).</p></td>
<tdclass="tableblock halign-left valign-top"><pclass="tableblock">Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: <ahref="https://git.k8s.io/community/contributors/devel/api-conventions.md#types-kinds">https://git.k8s.io/community/contributors/devel/api-conventions.md#types-kinds</a></p></td>
<tdclass="tableblock halign-left valign-top"><pclass="tableblock">The group attribute of the resource associated with the status StatusReason.</p></td>
<tdclass="tableblock halign-left valign-top"><pclass="tableblock">APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: <ahref="https://git.k8s.io/community/contributors/devel/api-conventions.md#resources">https://git.k8s.io/community/contributors/devel/api-conventions.md#resources</a></p></td>
<tdclass="tableblock halign-left valign-top"><pclass="tableblock">The kind attribute of the resource associated with the status StatusReason. On some operations may differ from the requested resource Kind. More info: <ahref="https://git.k8s.io/community/contributors/devel/api-conventions.md#types-kinds">https://git.k8s.io/community/contributors/devel/api-conventions.md#types-kinds</a></p></td>
<tdclass="tableblock halign-left valign-top"><pclass="tableblock">Standard list metadata. More info: <ahref="https://git.k8s.io/community/contributors/devel/api-conventions.md#types-kinds">https://git.k8s.io/community/contributors/devel/api-conventions.md#types-kinds</a></p></td>
<tdclass="tableblock halign-left valign-top"><pclass="tableblock">Status of the operation. One of: "Success" or "Failure". More info: <ahref="https://git.k8s.io/community/contributors/devel/api-conventions.md#spec-and-status">https://git.k8s.io/community/contributors/devel/api-conventions.md#spec-and-status</a></p></td>
<tdclass="tableblock halign-left valign-top"><pclass="tableblock">UID of the resource. (when there is a single resource which can be described). More info: <ahref="http://kubernetes.io/docs/user-guide/identifiers#uids">http://kubernetes.io/docs/user-guide/identifiers#uids</a></p></td>
<tdclass="tableblock halign-left valign-top"><pclass="tableblock">A human-readable description of the status of this operation.</p></td>
<tdclass="tableblock halign-left valign-top"><pclass="tableblock">The Causes array includes more details associated with the StatusReason failure. Not all StatusReasons may provide detailed causes.</p></td>
<tdclass="tableblock halign-left valign-top"><pclass="tableblock">A machine-readable description of why this operation is in the "Failure" status. If this value is empty there is no information available. A Reason clarifies an HTTP status code but does not override it.</p></td>
<tdclass="tableblock halign-left valign-top"><pclass="tableblock">If specified, the time in seconds before the operation should be retried. Some errors may indicate the client must take an alternate action - for those errors this field may indicate how long to wait before taking the alternate action.</p></td>
<tdclass="tableblock halign-left valign-top"><pclass="tableblock">Extended data associated with the reason. Each reason may define its own extended details. This field is optional and the data returned is not guaranteed to conform to any schema except that defined by the reason type.</p></td>
<tdclass="tableblock halign-left valign-top"><pclass="tableblock">APIGroup is the group for the resource being referenced</p></td>
<tdclass="tableblock halign-left valign-top"><pclass="tableblock">Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: <ahref="https://git.k8s.io/community/contributors/devel/api-conventions.md#types-kinds">https://git.k8s.io/community/contributors/devel/api-conventions.md#types-kinds</a></p></td>
<tdclass="tableblock halign-left valign-top"><pclass="tableblock">Kind is the type of resource being referenced</p></td>
<tdclass="tableblock halign-left valign-top"><pclass="tableblock">APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: <ahref="https://git.k8s.io/community/contributors/devel/api-conventions.md#resources">https://git.k8s.io/community/contributors/devel/api-conventions.md#resources</a></p></td>
<tdclass="tableblock halign-left valign-top"><pclass="tableblock">AggregationRule is an optional field that describes how to build the Rules for this ClusterRole. If AggregationRule is set, then the Rules are controller managed and direct changes to Rules will be stomped by the controller.</p></td>
<tdclass="tableblock halign-left valign-top"><pclass="tableblock">Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: <ahref="https://git.k8s.io/community/contributors/devel/api-conventions.md#types-kinds">https://git.k8s.io/community/contributors/devel/api-conventions.md#types-kinds</a></p></td>
<tdclass="tableblock halign-left valign-top"><pclass="tableblock">ClusterRoleSelectors holds a list of selectors which will be used to find ClusterRoles and create the rules. If any of the selectors match, then the ClusterRole’s permissions will be added</p></td>
<tdclass="tableblock halign-left valign-top"><pclass="tableblock">APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: <ahref="https://git.k8s.io/community/contributors/devel/api-conventions.md#resources">https://git.k8s.io/community/contributors/devel/api-conventions.md#resources</a></p></td>
<p>Preconditions must be fulfilled before an operation (update, delete, etc.) is carried out.</p>
<p>A label selector is a label query over a set of resources. The result of matchLabels and matchExpressions are ANDed. An empty label selector matches all objects. A null label selector matches no objects.</p>
<tdclass="tableblock halign-left valign-top"><pclass="tableblock">Specifies the target UID.</p></td>
<tdclass="tableblock halign-left valign-top"><pclass="tableblock">matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels map is equivalent to an element of matchExpressions, whose key field is "key", the operator is "In", and the values array contains only "value". The requirements are ANDed.</p></td>
<tdclass="tableblock halign-left valign-top"><pclass="tableblock">matchExpressions is a list of label selector requirements. The requirements are ANDed.</p></td>
<tdclass="tableblock halign-left valign-top"><pclass="tableblock">Pending is a list of initializers that must execute in order before this object is visible. When the last pending initializer is removed, and no failing result is set, the initializers struct will be set to nil and the object is considered as initialized and visible to all clients.</p></td>
<tdclass="tableblock halign-left valign-top"><pclass="tableblock">Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: <ahref="https://git.k8s.io/community/contributors/devel/api-conventions.md#types-kinds">https://git.k8s.io/community/contributors/devel/api-conventions.md#types-kinds</a></p></td>
<tdclass="tableblock halign-left valign-top"><pclass="tableblock">If result is set with the Failure field, the object will be persisted to storage and then deleted, ensuring that other clients can observe the deletion.</p></td>
<tdclass="tableblock halign-left valign-top"><pclass="tableblock">APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: <ahref="https://git.k8s.io/community/contributors/devel/api-conventions.md#resources">https://git.k8s.io/community/contributors/devel/api-conventions.md#resources</a></p></td>
<tdclass="tableblock halign-left valign-top"><pclass="tableblock">operator represents a key’s relationship to a set of values. Valid operators are In, NotIn, Exists and DoesNotExist.</p></td>
<tdclass="tableblock halign-left valign-top"><pclass="tableblock">values is an array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. This array is replaced during a strategic merge patch.</p></td>
<tdclass="tableblock halign-left valign-top"><pclass="tableblock">Standard list metadata. More info: <ahref="https://git.k8s.io/community/contributors/devel/api-conventions.md#types-kinds">https://git.k8s.io/community/contributors/devel/api-conventions.md#types-kinds</a></p></td>
<tdclass="tableblock halign-left valign-top"><pclass="tableblock">The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.</p></td>
<tdclass="tableblock halign-left valign-top"><pclass="tableblock">Status of the operation. One of: "Success" or "Failure". More info: <ahref="https://git.k8s.io/community/contributors/devel/api-conventions.md#spec-and-status">https://git.k8s.io/community/contributors/devel/api-conventions.md#spec-and-status</a></p></td>
<tdclass="tableblock halign-left valign-top"><pclass="tableblock">Must be fulfilled before a deletion is carried out. If not possible, a 409 Conflict status will be returned.</p></td>
<tdclass="tableblock halign-left valign-top"><pclass="tableblock">Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object’s finalizers list. Either this field or PropagationPolicy may be set, but not both.</p></td>
<tdclass="tableblock halign-left valign-top"><pclass="tableblock">Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: <em>Orphan</em> - orphan the dependents; <em>Background</em> - allow the garbage collector to delete the dependents in the background; <em>Foreground</em> - a cascading policy that deletes all dependents in the foreground.</p></td>
<p>StatusDetails is a set of additional properties that MAY be set by the server to provide additional information about a response. The Reason field of a Status object defines what attributes will be set. Clients must ignore fields that do not match the defined type of each attribute, and should assume that any attribute may be empty, invalid, or under defined.</p>
<tdclass="tableblock halign-left valign-top"><pclass="tableblock">The name attribute of the resource associated with the status StatusReason (when there is a single name which can be described).</p></td>
<tdclass="tableblock halign-left valign-top"><pclass="tableblock">A machine-readable description of why this operation is in the "Failure" status. If this value is empty there is no information available. A Reason clarifies an HTTP status code but does not override it.</p></td>
<tdclass="tableblock halign-left valign-top"><pclass="tableblock">The group attribute of the resource associated with the status StatusReason.</p></td>
<tdclass="tableblock halign-left valign-top"><pclass="tableblock">Extended data associated with the reason. Each reason may define its own extended details. This field is optional and the data returned is not guaranteed to conform to any schema except that defined by the reason type.</p></td>
<tdclass="tableblock halign-left valign-top"><pclass="tableblock">The kind attribute of the resource associated with the status StatusReason. On some operations may differ from the requested resource Kind. More info: <ahref="https://git.k8s.io/community/contributors/devel/api-conventions.md#types-kinds">https://git.k8s.io/community/contributors/devel/api-conventions.md#types-kinds</a></p></td>
<tdclass="tableblock halign-left valign-top"><pclass="tableblock">Suggested HTTP return code for this status, 0 if not set.</p></td>
<tdclass="tableblock halign-left valign-top"><pclass="tableblock">UID of the resource. (when there is a single resource which can be described). More info: <ahref="http://kubernetes.io/docs/user-guide/identifiers#uids">http://kubernetes.io/docs/user-guide/identifiers#uids</a></p></td>
<tdclass="tableblock halign-left valign-top"><pclass="tableblock">The Causes array includes more details associated with the StatusReason failure. Not all StatusReasons may provide detailed causes.</p></td>
<tdclass="tableblock halign-left valign-top"><pclass="tableblock">If specified, the time in seconds before the operation should be retried. Some errors may indicate the client must take an alternate action - for those errors this field may indicate how long to wait before taking the alternate action.</p></td>
<p>Subject contains a reference to the object or user identities a role binding applies to. This can either hold a direct API object reference, or a value for non-objects such as user and group names.</p>
<p>RoleBindingList is a collection of RoleBindings</p>
<tdclass="tableblock halign-left valign-top"><pclass="tableblock">Kind of object being referenced. Values defined by this API group are "User", "Group", and "ServiceAccount". If the Authorizer does not recognized the kind value, the Authorizer should report an error.</p></td>
<tdclass="tableblock halign-left valign-top"><pclass="tableblock">Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: <ahref="https://git.k8s.io/community/contributors/devel/api-conventions.md#types-kinds">https://git.k8s.io/community/contributors/devel/api-conventions.md#types-kinds</a></p></td>
<tdclass="tableblock halign-left valign-top"><pclass="tableblock">APIGroup holds the API group of the referenced subject. Defaults to "" for ServiceAccount subjects. Defaults to "rbac.authorization.k8s.io" for User and Group subjects.</p></td>
<tdclass="tableblock halign-left valign-top"><pclass="tableblock">APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: <ahref="https://git.k8s.io/community/contributors/devel/api-conventions.md#resources">https://git.k8s.io/community/contributors/devel/api-conventions.md#resources</a></p></td>
<tdclass="tableblock halign-left valign-top"><pclass="tableblock">Namespace of the referenced object. If the object kind is non-namespace, such as "User" or "Group", and this value is not empty the Authorizer should report an error.</p></td>
<p>Subject contains a reference to the object or user identities a role binding applies to. This can either hold a direct API object reference, or a value for non-objects such as user and group names.</p>
<tdclass="tableblock halign-left valign-top"><pclass="tableblock">Kind of object being referenced. Values defined by this API group are "User", "Group", and "ServiceAccount". If the Authorizer does not recognized the kind value, the Authorizer should report an error.</p></td>
<tdclass="tableblock halign-left valign-top"><pclass="tableblock">APIGroup holds the API group of the referenced subject. Defaults to "" for ServiceAccount subjects. Defaults to "rbac.authorization.k8s.io" for User and Group subjects.</p></td>
<tdclass="tableblock halign-left valign-top"><pclass="tableblock">Namespace of the referenced object. If the object kind is non-namespace, such as "User" or "Group", and this value is not empty the Authorizer should report an error.</p></td>
<p>OwnerReference contains enough information to let you identify an owning object. Currently, an owning object must be in the same namespace, so there is no namespace field.</p>
<tdclass="tableblock halign-left valign-top"><pclass="tableblock">Kind of the referent. More info: <ahref="https://git.k8s.io/community/contributors/devel/api-conventions.md#types-kinds">https://git.k8s.io/community/contributors/devel/api-conventions.md#types-kinds</a></p></td>
<tdclass="tableblock halign-left valign-top"><pclass="tableblock">Name of the referent. More info: <ahref="http://kubernetes.io/docs/user-guide/identifiers#names">http://kubernetes.io/docs/user-guide/identifiers#names</a></p></td>
<tdclass="tableblock halign-left valign-top"><pclass="tableblock">UID of the referent. More info: <ahref="http://kubernetes.io/docs/user-guide/identifiers#uids">http://kubernetes.io/docs/user-guide/identifiers#uids</a></p></td>
<tdclass="tableblock halign-left valign-top"><pclass="tableblock">If true, AND if the owner has the "foregroundDeletion" finalizer, then the owner cannot be deleted from the key-value store until this reference is removed. Defaults to false. To set this field, a user needs "delete" permission of the owner, otherwise 422 (Unprocessable Entity) will be returned.</p></td>
<p>ObjectMeta is metadata that all persisted resources must have, which includes all objects users must create.</p>
<p>ObjectMeta is metadata that all persisted resources must have, which includes all objects users must create.</p>
...
@@ -1370,130 +1683,6 @@ When an object is created, the system will populate this list with the current s
...
@@ -1370,130 +1683,6 @@ When an object is created, the system will populate this list with the current s
</div>
</div>
<divclass="sect2">
<divclass="sect2">
<h3id="_v1_ownerreference">v1.OwnerReference</h3>
<divclass="paragraph">
<p>OwnerReference contains enough information to let you identify an owning object. Currently, an owning object must be in the same namespace, so there is no namespace field.</p>
<tdclass="tableblock halign-left valign-top"><pclass="tableblock">Kind of the referent. More info: <ahref="https://git.k8s.io/community/contributors/devel/api-conventions.md#types-kinds">https://git.k8s.io/community/contributors/devel/api-conventions.md#types-kinds</a></p></td>
<tdclass="tableblock halign-left valign-top"><pclass="tableblock">Name of the referent. More info: <ahref="http://kubernetes.io/docs/user-guide/identifiers#names">http://kubernetes.io/docs/user-guide/identifiers#names</a></p></td>
<tdclass="tableblock halign-left valign-top"><pclass="tableblock">UID of the referent. More info: <ahref="http://kubernetes.io/docs/user-guide/identifiers#uids">http://kubernetes.io/docs/user-guide/identifiers#uids</a></p></td>
<tdclass="tableblock halign-left valign-top"><pclass="tableblock">If true, AND if the owner has the "foregroundDeletion" finalizer, then the owner cannot be deleted from the key-value store until this reference is removed. Defaults to false. To set this field, a user needs "delete" permission of the owner, otherwise 422 (Unprocessable Entity) will be returned.</p></td>
<tdclass="tableblock halign-left valign-top"><pclass="tableblock">Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: <ahref="https://git.k8s.io/community/contributors/devel/api-conventions.md#types-kinds">https://git.k8s.io/community/contributors/devel/api-conventions.md#types-kinds</a></p></td>
<tdclass="tableblock halign-left valign-top"><pclass="tableblock">APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: <ahref="https://git.k8s.io/community/contributors/devel/api-conventions.md#resources">https://git.k8s.io/community/contributors/devel/api-conventions.md#resources</a></p></td>
<tdclass="tableblock halign-left valign-top"><pclass="tableblock">Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: <ahref="https://git.k8s.io/community/contributors/devel/api-conventions.md#types-kinds">https://git.k8s.io/community/contributors/devel/api-conventions.md#types-kinds</a></p></td>
<tdclass="tableblock halign-left valign-top"><pclass="tableblock">APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: <ahref="https://git.k8s.io/community/contributors/devel/api-conventions.md#resources">https://git.k8s.io/community/contributors/devel/api-conventions.md#resources</a></p></td>
<p>PolicyRule holds information that describes a policy rule, but does not contain information about who the rule applies to or which namespace the rule applies to.</p>
<p>PolicyRule holds information that describes a policy rule, but does not contain information about who the rule applies to or which namespace the rule applies to.</p>
<tdclass="tableblock halign-left valign-top"><pclass="tableblock">ClusterRoleSelectors holds a list of selectors which will be used to find ClusterRoles and create the rules. If any of the selectors match, then the ClusterRole’s permissions will be added</p></td>
<p>A label selector is a label query over a set of resources. The result of matchLabels and matchExpressions are ANDed. An empty label selector matches all objects. A null label selector matches no objects.</p>
<tdclass="tableblock halign-left valign-top"><pclass="tableblock">matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels map is equivalent to an element of matchExpressions, whose key field is "key", the operator is "In", and the values array contains only "value". The requirements are ANDed.</p></td>
<tdclass="tableblock halign-left valign-top"><pclass="tableblock">matchExpressions is a list of label selector requirements. The requirements are ANDed.</p></td>
<tdclass="tableblock halign-left valign-top"><pclass="tableblock">operator represents a key’s relationship to a set of values. Valid operators are In, NotIn, Exists and DoesNotExist.</p></td>
<tdclass="tableblock halign-left valign-top"><pclass="tableblock">values is an array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. This array is replaced during a strategic merge patch.</p></td>
<p>RoleBinding references a role, but does not contain it. It can reference a Role in the same namespace or a ClusterRole in the global namespace. It adds who information via Subjects and namespace information by which namespace it exists in. RoleBindings in a given namespace only have effect in that namespace.</p>
<p>RoleBinding references a role, but does not contain it. It can reference a Role in the same namespace or a ClusterRole in the global namespace. It adds who information via Subjects and namespace information by which namespace it exists in. RoleBindings in a given namespace only have effect in that namespace.</p>
<tdclass="tableblock halign-left valign-top"><pclass="tableblock">AggregationRule is an optional field that describes how to build the Rules for this ClusterRole. If AggregationRule is set, then the Rules are controller managed and direct changes to Rules will be stomped by the controller.</p></td>
<p>Patch is provided to give a concrete name and type to the Kubernetes PATCH request body.</p>
<p>ListMeta describes metadata that synthetic resources must have, including lists and various status objects. A resource may have only one of {ObjectMeta, ListMeta}.</p>
<tdclass="tableblock halign-left valign-top"><pclass="tableblock">selfLink is a URL representing this object. Populated by the system. Read-only.</p></td>
<tdclass="tableblock halign-left valign-top"><pclass="tableblock">String that identifies the server’s internal version of this object that can be used by clients to determine when objects have changed. Value must be treated as opaque by clients and passed unmodified back to the server. Populated by the system. Read-only. More info: <ahref="https://git.k8s.io/community/contributors/devel/api-conventions.md#concurrency-control-and-consistency">https://git.k8s.io/community/contributors/devel/api-conventions.md#concurrency-control-and-consistency</a></p></td>
<tdclass="tableblock halign-left valign-top"><pclass="tableblock">continue may be set if the user set a limit on the number of items returned, and indicates that the server has more data available. The value is opaque and may be used to issue another request to the endpoint that served this list to retrieve the next set of available objects. Continuing a list may not be possible if the server configuration has changed or more than a few minutes have passed. The resourceVersion field returned when using this continue value will be identical to the value in the first response.</p></td>
<tdclass="tableblock halign-left valign-top"><pclass="tableblock">Pending is a list of initializers that must execute in order before this object is visible. When the last pending initializer is removed, and no failing result is set, the initializers struct will be set to nil and the object is considered as initialized and visible to all clients.</p></td>
<tdclass="tableblock halign-left valign-top"><pclass="tableblock">If result is set with the Failure field, the object will be persisted to storage and then deleted, ensuring that other clients can observe the deletion.</p></td>
<tdclass="tableblock halign-left valign-top"><pclass="tableblock">The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.</p></td>
<tdclass="tableblock halign-left valign-top"><pclass="tableblock">Standard list metadata. More info: <ahref="https://git.k8s.io/community/contributors/devel/api-conventions.md#types-kinds">https://git.k8s.io/community/contributors/devel/api-conventions.md#types-kinds</a></p></td>
<tdclass="tableblock halign-left valign-top"><pclass="tableblock">Must be fulfilled before a deletion is carried out. If not possible, a 409 Conflict status will be returned.</p></td>
<tdclass="tableblock halign-left valign-top"><pclass="tableblock">Status of the operation. One of: "Success" or "Failure". More info: <ahref="https://git.k8s.io/community/contributors/devel/api-conventions.md#spec-and-status">https://git.k8s.io/community/contributors/devel/api-conventions.md#spec-and-status</a></p></td>
<tdclass="tableblock halign-left valign-top"><pclass="tableblock">Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object’s finalizers list. Either this field or PropagationPolicy may be set, but not both.</p></td>
<tdclass="tableblock halign-left valign-top"><pclass="tableblock">A human-readable description of the status of this operation.</p></td>
<tdclass="tableblock halign-left valign-top"><pclass="tableblock">A machine-readable description of why this operation is in the "Failure" status. If this value is empty there is no information available. A Reason clarifies an HTTP status code but does not override it.</p></td>
<tdclass="tableblock halign-left valign-top"><pclass="tableblock">Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: <em>Orphan</em> - orphan the dependents; <em>Background</em> - allow the garbage collector to delete the dependents in the background; <em>Foreground</em> - a cascading policy that deletes all dependents in the foreground.</p></td>
<tdclass="tableblock halign-left valign-top"><pclass="tableblock">Extended data associated with the reason. Each reason may define its own extended details. This field is optional and the data returned is not guaranteed to conform to any schema except that defined by the reason type.</p></td>
<p>ListMeta describes metadata that synthetic resources must have, including lists and various status objects. A resource may have only one of {ObjectMeta, ListMeta}.</p>
<p>A label selector is a label query over a set of resources. The result of matchLabels and matchExpressions are ANDed. An empty label selector matches all objects. A null label selector matches no objects.</p>
<tdclass="tableblock halign-left valign-top"><pclass="tableblock">matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels map is equivalent to an element of matchExpressions, whose key field is "key", the operator is "In", and the values array contains only "value". The requirements are ANDed.</p></td>
<tdclass="tableblock halign-left valign-top"><pclass="tableblock">matchExpressions is a list of label selector requirements. The requirements are ANDed.</p></td>
<tdclass="tableblock halign-left valign-top"><pclass="tableblock">operator represents a key’s relationship to a set of values. Valid operators are In, NotIn, Exists and DoesNotExist.</p></td>
<tdclass="tableblock halign-left valign-top"><pclass="tableblock">values is an array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. This array is replaced during a strategic merge patch.</p></td>
<tdclass="tableblock halign-left valign-top"><pclass="tableblock">Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: <ahref="https://git.k8s.io/community/contributors/devel/api-conventions.md#types-kinds">https://git.k8s.io/community/contributors/devel/api-conventions.md#types-kinds</a></p></td>
<tdclass="tableblock halign-left valign-top"><pclass="tableblock">APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: <ahref="https://git.k8s.io/community/contributors/devel/api-conventions.md#resources">https://git.k8s.io/community/contributors/devel/api-conventions.md#resources</a></p></td>
<p>PolicyRule holds information that describes a policy rule, but does not contain information about who the rule applies to or which namespace the rule applies to.</p>
<tdclass="tableblock halign-left valign-top"><pclass="tableblock">Verbs is a list of Verbs that apply to ALL the ResourceKinds and AttributeRestrictions contained in this rule. VerbAll represents all kinds.</p></td>
<tdclass="tableblock halign-left valign-top"><pclass="tableblock">APIGroups is the name of the APIGroup that contains the resources. If multiple API groups are specified, any action requested against one of the enumerated resources in any API group will be allowed.</p></td>
<tdclass="tableblock halign-left valign-top"><pclass="tableblock">Resources is a list of resources this rule applies to. <em><strong></em> represents all resources in the specified apiGroups. <em></strong>/foo</em> represents the subresource <em>foo</em> for all resources in the specified apiGroups.</p></td>
<tdclass="tableblock halign-left valign-top"><pclass="tableblock">ResourceNames is an optional white list of names that the rule applies to. An empty set means that everything is allowed.</p></td>
<tdclass="tableblock halign-left valign-top"><pclass="tableblock">NonResourceURLs is a set of partial urls that a user should have access to. *s are allowed, but only as the full, final step in the path Since non-resource URLs are not namespaced, this field is only applicable for ClusterRoles referenced from a ClusterRoleBinding. Rules can either apply to API resources (such as "pods" or "secrets") or non-resource URL paths (such as "/api"), but not both.</p></td>
<tdclass="tableblock halign-left valign-top"><pclass="tableblock">Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: <ahref="https://git.k8s.io/community/contributors/devel/api-conventions.md#types-kinds">https://git.k8s.io/community/contributors/devel/api-conventions.md#types-kinds</a></p></td>
<tdclass="tableblock halign-left valign-top"><pclass="tableblock">selfLink is a URL representing this object. Populated by the system. Read-only.</p></td>
<tdclass="tableblock halign-left valign-top"><pclass="tableblock">APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: <ahref="https://git.k8s.io/community/contributors/devel/api-conventions.md#resources">https://git.k8s.io/community/contributors/devel/api-conventions.md#resources</a></p></td>
<tdclass="tableblock halign-left valign-top"><pclass="tableblock">String that identifies the server’s internal version of this object that can be used by clients to determine when objects have changed. Value must be treated as opaque by clients and passed unmodified back to the server. Populated by the system. Read-only. More info: <ahref="https://git.k8s.io/community/contributors/devel/api-conventions.md#concurrency-control-and-consistency">https://git.k8s.io/community/contributors/devel/api-conventions.md#concurrency-control-and-consistency</a></p></td>
<tdclass="tableblock halign-left valign-top"><pclass="tableblock">The duration in seconds before the object should be deleted. Value must be non-negative integer. The value zero indicates delete immediately. If this value is nil, the default grace period for the specified type will be used. Defaults to a per object value if not specified. zero means delete immediately.</p></td>
<tdclass="tableblock halign-left valign-top"><pclass="tableblock">continue may be set if the user set a limit on the number of items returned, and indicates that the server has more data available. The value is opaque and may be used to issue another request to the endpoint that served this list to retrieve the next set of available objects. Continuing a list may not be possible if the server configuration has changed or more than a few minutes have passed. The resourceVersion field returned when using this continue value will be identical to the value in the first response.</p></td>
<tdclass="tableblock halign-left valign-top"><pclass="tableblock">Must be fulfilled before a deletion is carried out. If not possible, a 409 Conflict status will be returned.</p></td>
<tdclass="tableblock halign-left valign-top"><pclass="tableblock">Deprecated: please use the PropagationPolicy, this field will be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, the "orphan" finalizer will be added to/removed from the object’s finalizers list. Either this field or PropagationPolicy may be set, but not both.</p></td>
<tdclass="tableblock halign-left valign-top"><pclass="tableblock">Whether and how garbage collection will be performed. Either this field or OrphanDependents may be set, but not both. The default policy is decided by the existing finalizer set in the metadata.finalizers and the resource-specific default policy. Acceptable values are: <em>Orphan</em> - orphan the dependents; <em>Background</em> - allow the garbage collector to delete the dependents in the background; <em>Foreground</em> - a cascading policy that deletes all dependents in the foreground.</p></td>
<p>ClusterRoleBinding references a ClusterRole, but not contain it. It can reference a ClusterRole in the global namespace, and adds who information via Subject.</p>
<p>ClusterRole is a cluster level, logical grouping of PolicyRules that can be referenced as a unit by a RoleBinding or ClusterRoleBinding.</p>
<tdclass="tableblock halign-left valign-top"><pclass="tableblock">RoleRef can only reference a ClusterRole in the global namespace. If the RoleRef cannot be resolved, the Authorizer must return an error.</p></td>
<tdclass="tableblock halign-left valign-top"><pclass="tableblock">AggregationRule is an optional field that describes how to build the Rules for this ClusterRole. If AggregationRule is set, then the Rules are controller managed and direct changes to Rules will be stomped by the controller.</p></td>
<p>ClusterRoleBindingList is a collection of ClusterRoleBindings</p>
<p>ClusterRoleBinding references a ClusterRole, but not contain it. It can reference a ClusterRole in the global namespace, and adds who information via Subject.</p>
<tdclass="tableblock halign-left valign-top"><pclass="tableblock">RoleRef can only reference a ClusterRole in the global namespace. If the RoleRef cannot be resolved, the Authorizer must return an error.</p></td>
<tdclass="tableblock halign-left valign-top"><pclass="tableblock">Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: <ahref="https://git.k8s.io/community/contributors/devel/api-conventions.md#types-kinds">https://git.k8s.io/community/contributors/devel/api-conventions.md#types-kinds</a></p></td>
<tdclass="tableblock halign-left valign-top"><pclass="tableblock">name of the process that is responsible for initializing this object.</p></td>
<tdclass="tableblock halign-left valign-top"><pclass="tableblock">APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: <ahref="https://git.k8s.io/community/contributors/devel/api-conventions.md#resources">https://git.k8s.io/community/contributors/devel/api-conventions.md#resources</a></p></td>
<tdclass="tableblock halign-left valign-top"><pclass="tableblock">Specifies the target UID.</p></td>
<tdclass="tableblock halign-left valign-top"><pclass="tableblock">Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: <ahref="https://git.k8s.io/community/contributors/devel/api-conventions.md#types-kinds">https://git.k8s.io/community/contributors/devel/api-conventions.md#types-kinds</a></p></td>
<tdclass="tableblock halign-left valign-top"><pclass="tableblock">APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: <ahref="https://git.k8s.io/community/contributors/devel/api-conventions.md#resources">https://git.k8s.io/community/contributors/devel/api-conventions.md#resources</a></p></td>
<tdclass="tableblock halign-left valign-top"><pclass="tableblock">Pending is a list of initializers that must execute in order before this object is visible. When the last pending initializer is removed, and no failing result is set, the initializers struct will be set to nil and the object is considered as initialized and visible to all clients.</p></td>
<tdclass="tableblock halign-left valign-top"><pclass="tableblock">If result is set with the Failure field, the object will be persisted to storage and then deleted, ensuring that other clients can observe the deletion.</p></td>
<tdclass="tableblock halign-left valign-top"><pclass="tableblock">Items is a list of ClusterRoles</p></td>
<tdclass="tableblock halign-left valign-top"><pclass="tableblock">name of the process that is responsible for initializing this object.</p></td>
<tdclass="tableblock halign-left valign-top"><pclass="tableblock">ClusterRoleSelectors holds a list of selectors which will be used to find ClusterRoles and create the rules. If any of the selectors match, then the ClusterRole’s permissions will be added</p></td>
<tdclass="tableblock halign-left valign-top"><pclass="tableblock">Standard list metadata. More info: <ahref="https://git.k8s.io/community/contributors/devel/api-conventions.md#types-kinds">https://git.k8s.io/community/contributors/devel/api-conventions.md#types-kinds</a></p></td>
<tdclass="tableblock halign-left valign-top"><pclass="tableblock">Status of the operation. One of: "Success" or "Failure". More info: <ahref="https://git.k8s.io/community/contributors/devel/api-conventions.md#spec-and-status">https://git.k8s.io/community/contributors/devel/api-conventions.md#spec-and-status</a></p></td>
<tdclass="tableblock halign-left valign-top"><pclass="tableblock">Items is a list of Roles</p></td>
<tdclass="tableblock halign-left valign-top"><pclass="tableblock">A machine-readable description of why this operation is in the "Failure" status. If this value is empty there is no information available. A Reason clarifies an HTTP status code but does not override it.</p></td>
<tdclass="tableblock halign-left valign-top"><pclass="tableblock">Extended data associated with the reason. Each reason may define its own extended details. This field is optional and the data returned is not guaranteed to conform to any schema except that defined by the reason type.</p></td>
<p>OwnerReference contains enough information to let you identify an owning object. Currently, an owning object must be in the same namespace, so there is no namespace field.</p>
<tdclass="tableblock halign-left valign-top"><pclass="tableblock">Kind of the referent. More info: <ahref="https://git.k8s.io/community/contributors/devel/api-conventions.md#types-kinds">https://git.k8s.io/community/contributors/devel/api-conventions.md#types-kinds</a></p></td>
<tdclass="tableblock halign-left valign-top"><pclass="tableblock">Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: <ahref="https://git.k8s.io/community/contributors/devel/api-conventions.md#types-kinds">https://git.k8s.io/community/contributors/devel/api-conventions.md#types-kinds</a></p></td>
<tdclass="tableblock halign-left valign-top"><pclass="tableblock">Name of the referent. More info: <ahref="http://kubernetes.io/docs/user-guide/identifiers#names">http://kubernetes.io/docs/user-guide/identifiers#names</a></p></td>
<tdclass="tableblock halign-left valign-top"><pclass="tableblock">APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: <ahref="https://git.k8s.io/community/contributors/devel/api-conventions.md#resources">https://git.k8s.io/community/contributors/devel/api-conventions.md#resources</a></p></td>
<tdclass="tableblock halign-left valign-top"><pclass="tableblock">UID of the referent. More info: <ahref="http://kubernetes.io/docs/user-guide/identifiers#uids">http://kubernetes.io/docs/user-guide/identifiers#uids</a></p></td>
<tdclass="tableblock halign-left valign-top"><pclass="tableblock">Items is a list of Roles</p></td>
<tdclass="tableblock halign-left valign-top"><pclass="tableblock">If true, AND if the owner has the "foregroundDeletion" finalizer, then the owner cannot be deleted from the key-value store until this reference is removed. Defaults to false. To set this field, a user needs "delete" permission of the owner, otherwise 422 (Unprocessable Entity) will be returned.</p></td>
@@ -1315,75 +1683,6 @@ When an object is created, the system will populate this list with the current s
...
@@ -1315,75 +1683,6 @@ When an object is created, the system will populate this list with the current s
</div>
</div>
<divclass="sect2">
<divclass="sect2">
<h3id="_v1_ownerreference">v1.OwnerReference</h3>
<divclass="paragraph">
<p>OwnerReference contains enough information to let you identify an owning object. Currently, an owning object must be in the same namespace, so there is no namespace field.</p>
<tdclass="tableblock halign-left valign-top"><pclass="tableblock">Kind of the referent. More info: <ahref="https://git.k8s.io/community/contributors/devel/api-conventions.md#types-kinds">https://git.k8s.io/community/contributors/devel/api-conventions.md#types-kinds</a></p></td>
<tdclass="tableblock halign-left valign-top"><pclass="tableblock">Name of the referent. More info: <ahref="http://kubernetes.io/docs/user-guide/identifiers#names">http://kubernetes.io/docs/user-guide/identifiers#names</a></p></td>
<tdclass="tableblock halign-left valign-top"><pclass="tableblock">UID of the referent. More info: <ahref="http://kubernetes.io/docs/user-guide/identifiers#uids">http://kubernetes.io/docs/user-guide/identifiers#uids</a></p></td>
<tdclass="tableblock halign-left valign-top"><pclass="tableblock">If true, AND if the owner has the "foregroundDeletion" finalizer, then the owner cannot be deleted from the key-value store until this reference is removed. Defaults to false. To set this field, a user needs "delete" permission of the owner, otherwise 422 (Unprocessable Entity) will be returned.</p></td>
<p>Subject contains a reference to the object or user identities a role binding applies to. This can either hold a direct API object reference, or a value for non-objects such as user and group names.</p>
<p>Subject contains a reference to the object or user identities a role binding applies to. This can either hold a direct API object reference, or a value for non-objects such as user and group names.</p>
...
@@ -1533,61 +1832,6 @@ When an object is created, the system will populate this list with the current s
...
@@ -1533,61 +1832,6 @@ When an object is created, the system will populate this list with the current s
</div>
</div>
<divclass="sect2">
<divclass="sect2">
<h3id="_v1beta1_role">v1beta1.Role</h3>
<divclass="paragraph">
<p>Role is a namespaced, logical grouping of PolicyRules that can be referenced as a unit by a RoleBinding.</p>
<tdclass="tableblock halign-left valign-top"><pclass="tableblock">Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: <ahref="https://git.k8s.io/community/contributors/devel/api-conventions.md#types-kinds">https://git.k8s.io/community/contributors/devel/api-conventions.md#types-kinds</a></p></td>
<tdclass="tableblock halign-left valign-top"><pclass="tableblock">APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: <ahref="https://git.k8s.io/community/contributors/devel/api-conventions.md#resources">https://git.k8s.io/community/contributors/devel/api-conventions.md#resources</a></p></td>
<p>PolicyRule holds information that describes a policy rule, but does not contain information about who the rule applies to or which namespace the rule applies to.</p>
<tdclass="tableblock halign-left valign-top"><pclass="tableblock">Verbs is a list of Verbs that apply to ALL the ResourceKinds and AttributeRestrictions contained in this rule. VerbAll represents all kinds.</p></td>
<tdclass="tableblock halign-left valign-top"><pclass="tableblock">APIGroups is the name of the APIGroup that contains the resources. If multiple API groups are specified, any action requested against one of the enumerated resources in any API group will be allowed.</p></td>
<tdclass="tableblock halign-left valign-top"><pclass="tableblock">Resources is a list of resources this rule applies to. <em><strong></em> represents all resources in the specified apiGroups. <em></strong>/foo</em> represents the subresource <em>foo</em> for all resources in the specified apiGroups.</p></td>
<tdclass="tableblock halign-left valign-top"><pclass="tableblock">ResourceNames is an optional white list of names that the rule applies to. An empty set means that everything is allowed.</p></td>
<tdclass="tableblock halign-left valign-top"><pclass="tableblock">NonResourceURLs is a set of partial urls that a user should have access to. *s are allowed, but only as the full, final step in the path Since non-resource URLs are not namespaced, this field is only applicable for ClusterRoles referenced from a ClusterRoleBinding. Rules can either apply to API resources (such as "pods" or "secrets") or non-resource URL paths (such as "/api"), but not both.</p></td>
<p>RoleBinding references a role, but does not contain it. It can reference a Role in the same namespace or a ClusterRole in the global namespace. It adds who information via Subjects and namespace information by which namespace it exists in. RoleBindings in a given namespace only have effect in that namespace.</p>
<p>RoleBinding references a role, but does not contain it. It can reference a Role in the same namespace or a ClusterRole in the global namespace. It adds who information via Subjects and namespace information by which namespace it exists in. RoleBindings in a given namespace only have effect in that namespace.</p>
// Those methods can be generated by using hack/update-generated-swagger-docs.sh
// Those methods can be generated by using hack/update-generated-swagger-docs.sh
// AUTO-GENERATED FUNCTIONS START HERE
// AUTO-GENERATED FUNCTIONS START HERE
varmap_AggregationRule=map[string]string{
"":"AggregationRule describes how to locate ClusterRoles to aggregate into the ClusterRole",
"clusterRoleSelectors":"ClusterRoleSelectors holds a list of selectors which will be used to find ClusterRoles and create the rules. If any of the selectors match, then the ClusterRole's permissions will be added",
"":"ClusterRole is a cluster level, logical grouping of PolicyRules that can be referenced as a unit by a RoleBinding or ClusterRoleBinding.",
"":"ClusterRole is a cluster level, logical grouping of PolicyRules that can be referenced as a unit by a RoleBinding or ClusterRoleBinding.",
"metadata":"Standard object's metadata.",
"metadata":"Standard object's metadata.",
"rules":"Rules holds all the PolicyRules for this ClusterRole",
"rules":"Rules holds all the PolicyRules for this ClusterRole",
"aggregationRule":"AggregationRule is an optional field that describes how to build the Rules for this ClusterRole. If AggregationRule is set, then the Rules are controller managed and direct changes to Rules will be stomped by the controller.",
// Those methods can be generated by using hack/update-generated-swagger-docs.sh
// Those methods can be generated by using hack/update-generated-swagger-docs.sh
// AUTO-GENERATED FUNCTIONS START HERE
// AUTO-GENERATED FUNCTIONS START HERE
varmap_AggregationRule=map[string]string{
"":"AggregationRule describes how to locate ClusterRoles to aggregate into the ClusterRole",
"clusterRoleSelectors":"ClusterRoleSelectors holds a list of selectors which will be used to find ClusterRoles and create the rules. If any of the selectors match, then the ClusterRole's permissions will be added",
"":"ClusterRole is a cluster level, logical grouping of PolicyRules that can be referenced as a unit by a RoleBinding or ClusterRoleBinding.",
"":"ClusterRole is a cluster level, logical grouping of PolicyRules that can be referenced as a unit by a RoleBinding or ClusterRoleBinding.",
"metadata":"Standard object's metadata.",
"metadata":"Standard object's metadata.",
"rules":"Rules holds all the PolicyRules for this ClusterRole",
"rules":"Rules holds all the PolicyRules for this ClusterRole",
"aggregationRule":"AggregationRule is an optional field that describes how to build the Rules for this ClusterRole. If AggregationRule is set, then the Rules are controller managed and direct changes to Rules will be stomped by the controller.",
// Those methods can be generated by using hack/update-generated-swagger-docs.sh
// Those methods can be generated by using hack/update-generated-swagger-docs.sh
// AUTO-GENERATED FUNCTIONS START HERE
// AUTO-GENERATED FUNCTIONS START HERE
varmap_AggregationRule=map[string]string{
"":"AggregationRule describes how to locate ClusterRoles to aggregate into the ClusterRole",
"clusterRoleSelectors":"ClusterRoleSelectors holds a list of selectors which will be used to find ClusterRoles and create the rules. If any of the selectors match, then the ClusterRole's permissions will be added",
"":"ClusterRole is a cluster level, logical grouping of PolicyRules that can be referenced as a unit by a RoleBinding or ClusterRoleBinding.",
"":"ClusterRole is a cluster level, logical grouping of PolicyRules that can be referenced as a unit by a RoleBinding or ClusterRoleBinding.",
"metadata":"Standard object's metadata.",
"metadata":"Standard object's metadata.",
"rules":"Rules holds all the PolicyRules for this ClusterRole",
"rules":"Rules holds all the PolicyRules for this ClusterRole",
"aggregationRule":"AggregationRule is an optional field that describes how to build the Rules for this ClusterRole. If AggregationRule is set, then the Rules are controller managed and direct changes to Rules will be stomped by the controller.",