package k8s.io.api.imagepolicy.v1alpha1

ImageReview checks if the set of images in a pod are allowed.

optional apimachinery.pkg.apis.meta.v1.ObjectMeta metadata = 1
Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata +optional
optional ImageReviewSpec spec = 2
Spec holds information about the pod being evaluated
optional ImageReviewStatus status = 3
Status is filled in by the backend and indicates whether the pod should be allowed. +optional

ImageReviewContainerSpec is a description of a container within the pod creation request.

optional string image = 1
This can be in the form image:tag or image@SHA:012345679abcdef. +optional

ImageReviewSpec is a description of the pod creation request.

repeated ImageReviewContainerSpec containers = 1
Containers is a list of a subset of the information in each container of the Pod being created. +optional
map<string, string> annotations = 2
Annotations is a list of key-value pairs extracted from the Pod's annotations. It only includes keys which match the pattern `*.image-policy.k8s.io/*`. It is up to each webhook backend to determine how to interpret these annotations, if at all. +optional
optional string namespace = 3
Namespace is the namespace the pod is being created in. +optional

ImageReviewStatus is the result of the review for the pod creation request.

optional bool allowed = 1
Allowed indicates that all images were allowed to be run.
optional string reason = 2
Reason should be empty unless Allowed is false in which case it may contain a short description of what is wrong. Kubernetes may truncate excessively long errors when displaying to the user. +optional
map<string, string> auditAnnotations = 3
AuditAnnotations will be added to the attributes object of the admission controller request using 'AddAnnotation'. The keys should be prefix-less (i.e., the admission controller will add an appropriate prefix). +optional

message ImageReview