AuditAnnotation describes how to produce an audit annotation for an API request.

ExpressionWarning is a warning information that targets a specific expression.

MatchCondition represents a condition which must be fulfilled for a request to be sent to a webhook.

MatchResources decides whether to run the admission control policy on an object based on whether it meets the match criteria. The exclude rules take precedence over include rules (if a resource matches both, it is excluded)

NamedRuleWithOperations is a tuple of Operations and Resources with ResourceNames.

ParamKind is a tuple of Group Kind and Version.

ParamRef describes how to locate the params to be used as input to expressions of rules applied by a policy binding.

TypeChecking contains results of type checking the expressions in the ValidatingAdmissionPolicy

ValidatingAdmissionPolicy describes the definition of an admission validation policy that accepts or rejects an object without changing it.

ValidatingAdmissionPolicyBinding binds the ValidatingAdmissionPolicy with paramerized resources. ValidatingAdmissionPolicyBinding and parameter CRDs together define how cluster administrators configure policies for clusters.

ValidatingAdmissionPolicyBindingList is a list of ValidatingAdmissionPolicyBinding.

ValidatingAdmissionPolicyBindingSpec is the specification of the ValidatingAdmissionPolicyBinding.

ValidatingAdmissionPolicyList is a list of ValidatingAdmissionPolicy.

ValidatingAdmissionPolicySpec is the specification of the desired behavior of the AdmissionPolicy.

ValidatingAdmissionPolicyStatus represents the status of an admission validation policy.

Validation specifies the CEL expression which is used to apply the validation.

Variable is the definition of a variable that is used for composition. A variable is defined as a named expression.