policyrecipemutationmodel

type VmwareTanzuManageV1alpha1CommonPolicySpecMutationV1Annotation struct {
	Annotation *policyrecipemutationcommonmodel.KeyValue `json:"annotation"`

	Scope *policyrecipemutationcommonmodel.VmwareTanzuManageV1alpha1CommonPolicySpecMutationV1Scope `json:"scope,omitempty"`

	TargetKubernetesResources []*policyrecipecustomcommonmodel.VmwareTanzuManageV1alpha1CommonPolicySpecCustomV1TargetKubernetesResources `json:"targetKubernetesResources"`
}

type VmwareTanzuManageV1alpha1CommonPolicySpecMutationV1Label struct {
	// Label Name and value of the label to be mutated
	Label *policyrecipemutationcommonmodel.KeyValue `json:"label"`

	// Scope Filter the defined target Kubernetes resources by 'Cluster' or 'Namespace' scope. Defaults to '*' (no filter)
	Scope *policyrecipemutationcommonmodel.VmwareTanzuManageV1alpha1CommonPolicySpecMutationV1Scope `json:"scope,omitempty"`

	// TargetKubernetesResources List of Kubernetes API resources on which the policy will be enforced, identified using apiGroups and kinds. Use 'kubectl api-resources' to view the list of available API resources
	TargetKubernetesResources []*policyrecipecustomcommonmodel.VmwareTanzuManageV1alpha1CommonPolicySpecCustomV1TargetKubernetesResources `json:"targetKubernetesResources"`
}

type VmwareTanzuManageV1alpha1CommonPolicySpecMutationV1PodSecurity struct {

	// allow privilege escalation
	AllowPrivilegeEscalation *VmwareTanzuManageV1alpha1CommonPolicySpecMutationV1PodSecurityAllowPrivilegeEscalation `json:"allowPrivilegeEscalation,omitempty"`

	// capabilities add
	CapabilitiesAdd *VmwareTanzuManageV1alpha1CommonPolicySpecMutationV1PodSecurityCapabilitiesAdd `json:"capabilitiesAdd,omitempty"`

	// capabilities drop
	CapabilitiesDrop *VmwareTanzuManageV1alpha1CommonPolicySpecMutationV1PodSecurityCapabilitiesDrop `json:"capabilitiesDrop,omitempty"`

	// fs group
	FsGroup *VmwareTanzuManageV1alpha1CommonPolicySpecMutationV1PodSecurityFsGroup `json:"fsGroup,omitempty"`

	// privileged
	Privileged *VmwareTanzuManageV1alpha1CommonPolicySpecMutationV1PodSecurityPrivileged `json:"privileged,omitempty"`

	// read only root filesystem
	ReadOnlyRootFilesystem *VmwareTanzuManageV1alpha1CommonPolicySpecMutationV1PodSecurityReadOnlyRootFilesystem `json:"readOnlyRootFilesystem,omitempty"`

	// run as group
	RunAsGroup *VmwareTanzuManageV1alpha1CommonPolicySpecMutationV1PodSecurityRunAsGroup `json:"runAsGroup,omitempty"`

	// run as non root
	RunAsNonRoot *VmwareTanzuManageV1alpha1CommonPolicySpecMutationV1PodSecurityRunAsNonRoot `json:"runAsNonRoot,omitempty"`

	// run as user
	RunAsUser *VmwareTanzuManageV1alpha1CommonPolicySpecMutationV1PodSecurityRunAsUser `json:"runAsUser,omitempty"`

	// se linux options
	SeLinuxOptions *VmwareTanzuManageV1alpha1CommonPolicySpecMutationV1PodSecuritySeLinuxOptions `json:"seLinuxOptions,omitempty"`

	// supplemental groups
	SupplementalGroups *VmwareTanzuManageV1alpha1CommonPolicySpecMutationV1PodSecuritySupplementalGroups `json:"supplementalGroups,omitempty"`
}

type VmwareTanzuManageV1alpha1CommonPolicySpecMutationV1PodSecurityAllowPrivilegeEscalation struct {

	// Condition specifies whether to always mutate/set this value or only if container security context contains or does not contain this field
	// Required: true
	// Enum: [Always IfFieldExists IfFieldDoesNotExist]
	Condition *string `json:"condition"`

	// Value to set for allowPrivilegeEscalation field in container security context
	// Required: true
	Value *bool `json:"value"`
}

type VmwareTanzuManageV1alpha1CommonPolicySpecMutationV1PodSecurityCapabilitiesAdd struct {

	// Option to either override the list or merge values into the list or prune values from the list
	// Required: true
	// Enum: [override merge prune]
	Operation *string `json:"operation"`

	// List of values to override/merge/prune in capabilities.add field in container security context
	// Required: true
	// Min Items: 1
	Values []string `json:"values"`
}

type VmwareTanzuManageV1alpha1CommonPolicySpecMutationV1PodSecurityCapabilitiesDrop struct {

	// Option to either override the list or merge values into the list or prune values from the list
	// Required: true
	// Enum: [override merge prune]
	Operation *string `json:"operation"`

	// List of values to override/merge/prune in capabilities.drop field in container security context.
	// Required: true
	// Min Items: 1
	Values []string `json:"values"`
}

type VmwareTanzuManageV1alpha1CommonPolicySpecMutationV1PodSecurityFsGroup struct {

	// Condition specifies whether to always mutate/set this value or only if pod security context contains or does not contain this field
	// Required: true
	// Enum: [Always IfFieldExists IfFieldDoesNotExist]
	Condition *string `json:"condition"`

	// Value to set for fsGroup field in pod security context
	// Required: true
	// Maximum: 65535
	// Minimum: 0
	Value *float64 `json:"value"`
}

type VmwareTanzuManageV1alpha1CommonPolicySpecMutationV1PodSecurityPrivileged struct {

	// Condition specifies whether to always mutate/set this value or only if container security context contains or does not contain this field
	// Required: true
	// Enum: [Always IfFieldExists IfFieldDoesNotExist]
	Condition *string `json:"condition"`

	// Value to set for privileged field in container security context
	// Required: true
	Value *bool `json:"value"`
}

type VmwareTanzuManageV1alpha1CommonPolicySpecMutationV1PodSecurityReadOnlyRootFilesystem struct {

	// Condition specifies whether to always mutate/set this value or only if container security context contains or does not contain this field
	// Required: true
	// Enum: [Always IfFieldExists IfFieldDoesNotExist]
	Condition *string `json:"condition"`

	// Value to set for readOnlyRootFilesystem field in container security context
	// Required: true
	Value *bool `json:"value"`
}

type VmwareTanzuManageV1alpha1CommonPolicySpecMutationV1PodSecurityRunAsGroup struct {

	// Condition specifies whether to always mutate/set this value or only if container security context contains or does not contain this field
	// Required: true
	// Enum: [Always IfFieldExists IfFieldDoesNotExist]
	Condition *string `json:"condition"`

	// Value to set for runAsGroup field in container security context
	// Required: true
	// Maximum: 65535
	// Minimum: 0
	Value *float64 `json:"value"`
}

type VmwareTanzuManageV1alpha1CommonPolicySpecMutationV1PodSecurityRunAsNonRoot struct {

	// Condition specifies whether to always mutate/set this value or only if container security context contains or does not contain this field
	// Required: true
	// Enum: [Always IfFieldExists IfFieldDoesNotExist]
	Condition *string `json:"condition"`

	// Value to set for runAsNonRoot field in container security context
	// Required: true
	Value *bool `json:"value"`
}

type VmwareTanzuManageV1alpha1CommonPolicySpecMutationV1PodSecurityRunAsUser struct {

	// Condition specifies whether to always mutate/set this value or only if container security context contains or does not contain this field
	// Required: true
	// Enum: [Always IfFieldExists IfFieldDoesNotExist]
	Condition *string `json:"condition"`

	// Value to set for runAsUser field in container security context
	// Required: true
	// Maximum: 65535
	// Minimum: 0
	Value *float64 `json:"value"`
}

type VmwareTanzuManageV1alpha1CommonPolicySpecMutationV1PodSecuritySeLinuxOptions struct {

	// Condition specifies whether to always mutate/set this value or only if container security context contains or does not contain this field
	// Required: true
	// Enum: [Always IfFieldExists IfFieldDoesNotExist]
	Condition *string `json:"condition"`

	// value
	// Required: true
	Value *VmwareTanzuManageV1alpha1CommonPolicySpecMutationV1PodSecuritySeLinuxOptionsValue `json:"value"`
}

type VmwareTanzuManageV1alpha1CommonPolicySpecMutationV1PodSecuritySeLinuxOptionsValue struct {

	// Value to set for level field in container security context seLinuxOptions
	Level string `json:"level,omitempty"`

	// Value to set for role field in container security context seLinuxOptions
	Role string `json:"role,omitempty"`

	// Value to set for type field in container security context seLinuxOptions
	Type string `json:"type,omitempty"`

	// Value to set for user field in container security context seLinuxOptions
	User string `json:"user,omitempty"`
}

type VmwareTanzuManageV1alpha1CommonPolicySpecMutationV1PodSecuritySupplementalGroups struct {

	// Condition specifies whether to always mutate/set this value or only if pod security context contains or does not contain this field
	// Required: true
	// Enum: [Always IfFieldExists IfFieldDoesNotExist]
	Condition *string `json:"condition"`

	// List of values to set for supplementalGroups field in pod security context
	// Required: true
	// Min Items: 1
	Values []*float64 `json:"values"`
}