struct Kubernetes::WebhookClientConfig

Overview

WebhookClientConfig contains the information to make a TLS connection with the webhook.

Included Modules

Defined in:

generated/models/io_k8s_api_admissionregistration_v1.cr
generated/models/io_k8s_apiextensions-apiserver_pkg_apis_apiextensions_v1.cr

Constructors

Macro Summary

Instance Method Summary

Constructor Detail

def self.new(ctx : YAML::ParseContext, node : YAML::Nodes::Node) #

def self.new(pull : ::JSON::PullParser) #

def self.new(*, __pull_for_json_serializable pull : ::JSON::PullParser) #

def self.new(*, __context_for_yaml_serializable ctx : YAML::ParseContext, __node_for_yaml_serializable node : YAML::Nodes::Node) #

Macro Detail

macro field(name, type = nil, **options, &block) #

Helper macro for defining fields with automatic camelCase conversion


Instance Method Detail

def ca_bundle : String | Nil #

caBundle is a PEM encoded CA bundle which will be used to validate the webhook's server certificate. If unspecified, system trust roots on the apiserver are used.


def ca_bundle=(ca_bundle : String | Nil) #

caBundle is a PEM encoded CA bundle which will be used to validate the webhook's server certificate. If unspecified, system trust roots on the apiserver are used.


def service : ServiceReference | Nil #

service is a reference to the service for this webhook. Either service or url must be specified. If the webhook is running within the cluster, then you should use #service.


def service=(service : ServiceReference | Nil) #

service is a reference to the service for this webhook. Either service or url must be specified. If the webhook is running within the cluster, then you should use #service.


def url : String | Nil #

url gives the location of the webhook, in standard URL form (scheme://host:port/path). Exactly one of #url or #service must be specified. The host should not refer to a service running in the cluster; use the #service field instead. The host might be resolved via external DNS in some apiservers (e.g., kube-apiserver cannot resolve in-cluster DNS as that would be a layering violation). host may also be an IP address. Please note that using localhost or 127.0.0.1 as a host is risky unless you take great care to run this webhook on all hosts which run an apiserver which might need to make calls to this webhook. Such installs are likely to be non-portable, i.e., not easy to turn up in a new cluster. The scheme must be "https"; the URL must begin with "https://". A path is optional, and if present may be any string permissible in a URL. You may use the path to pass an arbitrary string to the webhook, for example, a cluster identifier. Attempting to use a user or basic auth e.g. "user:password@" is not allowed. Fragments ("#...") and query parameters ("?...") are not allowed, either.


def url=(url : String | Nil) #

url gives the location of the webhook, in standard URL form (scheme://host:port/path). Exactly one of #url or #service must be specified. The host should not refer to a service running in the cluster; use the #service field instead. The host might be resolved via external DNS in some apiservers (e.g., kube-apiserver cannot resolve in-cluster DNS as that would be a layering violation). host may also be an IP address. Please note that using localhost or 127.0.0.1 as a host is risky unless you take great care to run this webhook on all hosts which run an apiserver which might need to make calls to this webhook. Such installs are likely to be non-portable, i.e., not easy to turn up in a new cluster. The scheme must be "https"; the URL must begin with "https://". A path is optional, and if present may be any string permissible in a URL. You may use the path to pass an arbitrary string to the webhook, for example, a cluster identifier. Attempting to use a user or basic auth e.g. "user:password@" is not allowed. Fragments ("#...") and query parameters ("?...") are not allowed, either.