CustomResourceConversion

io.k8s.apiextensions-apiserver.pkg.apis.apiextensions.v1.CustomResourceConversion source ↗

CustomResourceConversion describes how to convert different versions of a CR.

strategystring requiredstrategy specifies how custom resources are converted between versions. Allowed values are: - `"None"`: The converter only change the apiVersion and would not touch any other field in the custom resource. - `"Webhook"`: API Server will call to an external webhook to do the conversion. Additional information is needed for this option. This requires spec.preserveUnknownFields to be false, and spec.conversion.webhook to be set.
webhookWebhookConversionwebhook describes how to call the conversion webhook. Required when `strategy` is set to `"Webhook"`.
clientConfigWebhookClientConfigclientConfig is the instructions for how to call the webhook if strategy is `Webhook`.
caBundlestring (byte)caBundle is a PEM encoded CA bundle which will be used to validate the webhook's server certificate. If unspecified, system trust roots on the apiserver are used.
serviceServiceReferenceservice is a reference to the service for this webhook. Either service or url must be specified.If the webhook is running within the cluster, then you should use `service`.
namestring requiredname is the name of the service. Required
namespacestring requirednamespace is the namespace of the service. Required
pathstringpath is an optional URL path at which the webhook will be contacted.
portinteger (int32)port is an optional service port at which the webhook will be contacted. `port` should be a valid port number (1-65535, inclusive). Defaults to 443 for backward compatibility.
urlstringurl gives the location of the webhook, in standard URL form (`scheme://host:port/path`). Exactly one of `url` or `service` must be specified.The `host` should not refer to a service running in the cluster; use the `service` field instead. The host might be resolved via external DNS in some apiservers (e.g., `kube-apiserver` cannot resolve in-cluster DNS as that would be a layering violation). `host` may also be an IP address.Please note that using `localhost` or `127.0.0.1` as a `host` is risky unless you take great care to run this webhook on all hosts which run an apiserver which might need to make calls to this webhook. Such installs are likely to be non-portable, i.e., not easy to turn up in a new cluster.The scheme must be "https"; the URL must begin with "https://";.A path is optional, and if present may be any string permissible in a URL. You may use the path to pass an arbitrary string to the webhook, for example, a cluster identifier.Attempting to use a user or basic auth e.g. "user:password@" is not allowed. Fragments ("#...") and query parameters ("?...") are not allowed, either.
conversionReviewVersions[]string requiredconversionReviewVersions is an ordered list of preferred `ConversionReview` versions the Webhook expects. The API server will use the first version in the list which it supports. If none of the versions specified in this list are supported by API server, conversion will fail for the custom resource. If a persisted Webhook configuration specifies allowed versions and does not include any versions known to the API Server, calls to the webhook will fail.