Values declares values to be loaded by the Kyverno CLI
| Field | Description | ||||
|---|---|---|---|---|---|
apiVersionstring |
cli.kyverno.io/v1alpha1
|
||||
kindstring |
Context |
||||
metadataKubernetes meta/v1.ObjectMeta |
Refer to the Kubernetes API documentation for the fields of the
metadata field.
|
||||
specContextSpec |
|
Test declares a test
| Field | Description |
|---|---|
apiVersionstring |
cli.kyverno.io/v1alpha1
|
kindstring |
Test |
metadataKubernetes meta/v1.ObjectMeta |
Refer to the Kubernetes API documentation for the fields of the
metadata field.
|
namestring |
Name is the name of the test.
This field is deprecated, use |
policies[]string |
Policies are the policies to be used in the test |
resources[]string |
Resources are the resource to be used in the test |
jsonPayloadstring |
JSONPayload is the JSON payload to be used in the test |
targetResources[]string |
Target Resources are for policies that have mutate existing |
variablesstring |
Variables is the values to be used in the test |
userinfostring |
UserInfo is the user info to be used in the test |
results[]TestResult |
Results are the results to be checked in the test |
checks[]CheckResult |
Checks are the verifications to be checked in the test |
valuesValuesSpec |
Values are the values to be used in the test |
exceptions[]string |
PolicyExceptions are the policy exceptions to be used in the test |
contextstring |
Context file containing context data for CEL policies |
UserInfo declares user infos to be loaded by the Kyverno CLI
| Field | Description |
|---|---|
apiVersionstring |
cli.kyverno.io/v1alpha1
|
kindstring |
UserInfo |
metadataKubernetes meta/v1.ObjectMeta |
Refer to the Kubernetes API documentation for the fields of the
metadata field.
|
RequestInfogithub.com/kyverno/kyverno/api/kyverno/v2.RequestInfo |
(Members of RequestInfo declares user infos |
Values declares values to be loaded by the Kyverno CLI
| Field | Description |
|---|---|
apiVersionstring |
cli.kyverno.io/v1alpha1
|
kindstring |
Values |
metadataKubernetes meta/v1.ObjectMeta |
Refer to the Kubernetes API documentation for the fields of the
metadata field.
|
ValuesSpecValuesSpec |
(Members of ValuesSpec declares values |
(Appears on: CheckResult)
| Field | Description |
|---|---|
resourcegithub.com/kyverno/kyverno-json/pkg/apis/policy/v1alpha1.Any |
Resource filters engine responses |
policygithub.com/kyverno/kyverno-json/pkg/apis/policy/v1alpha1.Any |
Policy filters engine responses |
rulegithub.com/kyverno/kyverno-json/pkg/apis/policy/v1alpha1.Any |
Rule filters rule responses |
(Appears on: Test)
| Field | Description |
|---|---|
matchCheckMatch |
Match tells how to match relevant rule responses |
assertgithub.com/kyverno/kyverno-json/pkg/apis/policy/v1alpha1.Any |
Assert contains assertion to be performed on the relevant rule responses |
errorgithub.com/kyverno/kyverno-json/pkg/apis/policy/v1alpha1.Any |
Error contains negative assertion to be performed on the relevant rule responses |
(Appears on: Context)
| Field | Description |
|---|---|
resources[]Kubernetes meta/v1/unstructured.Unstructured |
|
images[]ImageData |
(Appears on: ContextSpec)
| Field | Description |
|---|---|
imagestring |
|
resolvedImagestring |
|
registrystring |
|
repositorystring |
|
tagstring |
|
digeststring |
|
imageIndexgithub.com/kyverno/kyverno-json/pkg/apis/policy/v1alpha1.Any |
|
manifestgithub.com/kyverno/kyverno-json/pkg/apis/policy/v1alpha1.Any |
|
configgithub.com/kyverno/kyverno-json/pkg/apis/policy/v1alpha1.Any |
(Appears on: ValuesSpec)
NamespaceSelector declares labels for a given namespace
| Field | Description |
|---|---|
namestring |
Name is the namespace name |
labelsmap[string]string |
Labels are the labels for the given namespace |
(Appears on: ValuesSpec)
Policy declares values for a given policy
| Field | Description |
|---|---|
namestring |
Name is the policy name |
resources[]Resource |
Resources are values for specific resources |
rules[]Rule |
Rules are values for specific policy rules |
(Appears on: Policy)
Resource declares values for a given resource
| Field | Description |
|---|---|
namestring |
Name is the name of the resource |
valuesmap[string]interface{} |
Values are the values for the given resource |
(Appears on: Policy)
Rule declares values for a given policy rule
| Field | Description |
|---|---|
namestring |
Name is the name of the ppolicy rule |
valuesmap[string]interface{} |
Values are the values for the given policy rule |
foreachValuesmap[string][]interface{} |
ForeachValues are the foreach values for the given policy rule |
(Appears on: ValuesSpec)
Subresource declares subresource/parent resource mapping
| Field | Description |
|---|---|
subresourceKubernetes meta/v1.APIResource |
Subresource declares the subresource api |
parentResourceKubernetes meta/v1.APIResource |
ParentResource declares the parent resource api |
(Appears on: TestResultData)
| Field | Description |
|---|---|
groupstring |
|
versionstring |
|
kindstring |
|
namespacestring |
|
subresourcestring |
|
namestring |
(Appears on: Test)
TestResult declares a test result
| Field | Description |
|---|---|
TestResultBaseTestResultBase |
(Members of |
TestResultDataTestResultData |
(Members of |
(Appears on: TestResult)
TestResultBase declares a test result base fields
| Field | Description |
|---|---|
policystring |
Policy mentions the name of the policy. |
rulestring |
(Optional)
Rule mentions the name of the rule in the policy. It’s required in case policy is a kyverno policy. |
isValidatingAdmissionPolicybool |
(Optional)
IsValidatingAdmissionPolicy indicates if the policy is a validating admission policy. It’s required in case the policy is a validating admission policy. |
isMutatingAdmissionPolicybool |
(Optional)
IsMutatingAdmissionPolicy indicates if the policy is a mutating admission policy. |
isValidatingPolicybool |
(Optional)
IsValidatingPolicy indicates if the policy is a validating policy. It’s required in case the policy is a validating policy. |
isDeletingPolicybool |
(Optional)
IsDeletingPolicy indicates if the policy is a deleting policy. It’s required in case the policy is a deleting policy. |
isImageValidatingPolicybool |
(Optional)
IsImageValidatingPolicy indicates if the policy is an image validating policy. It’s required in case the policy is an image validating policy. |
isGeneratingPolicybool |
(Optional)
IsGeneratingPolicy indicates if the policy is a generating policy. It’s required in case the policy is a generating policy. |
isMutatingPolicybool |
(Optional)
IsMutatingPolicy indicates if the policy is a mutating policy. It’s required in case the policy is a mutating policy. |
resultopenreports.io/apis/openreports.io/v1alpha1.Result |
Result mentions the result that the user is expecting. Possible values are pass, fail and skip. |
kindstring |
Kind mentions the kind of the resource on which the policy is to be applied. |
patchedResourcesstring |
PatchedResource takes a resource configuration file in yaml format from the user to compare it against the Kyverno mutated resource configuration. Multiple resources can be passed in the same file |
generatedResourcestring |
GeneratedResource takes a resource configuration file in yaml format from the user to compare it against the Kyverno generated resource configuration. |
cloneSourceResourcestring |
CloneSourceResource takes the resource configuration file in yaml format from the user which is meant to be cloned by the generate rule. |
(Appears on: TestResult)
TestResultData declares a test result data
| Field | Description |
|---|---|
resources[]string |
Resources gives us the list of resources on which the policy is going to be applied. |
resourceSpecs[]TestResourceSpec |
Resources gives us the list of resources on which the policy is going to be applied. |
ValuesSpec declares values to be loaded by the Kyverno CLI
| Field | Description |
|---|---|
globalValuesmap[string]interface{} |
GlobalValues are the global values |
policies[]Policy |
Policies are the policy values |
namespaceSelector[]NamespaceSelector |
NamespaceSelectors are the namespace labels |
namespaces[]Kubernetes core/v1.Namespace |
Namespaces are the namespaces |
subresources[]Subresource |
Subresources are the subresource/parent resource mappings |