UNPKG

@kubernetes/client-node

Version:
38 lines 1.91 kB
/** * Kubernetes * No description provided (generated by Openapi Generator https://github.com/openapitools/openapi-generator) * * OpenAPI spec version: v1.32.0 * * * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech). * https://openapi-generator.tech * Do not edit the class manually. */ /** * FieldSelectorAttributes indicates a field limited access. Webhook authors are encouraged to * ensure rawSelector and requirements are not both set * consider the requirements field if set * not try to parse or consider the rawSelector field if set. This is to avoid another CVE-2022-2880 (i.e. getting different systems to agree on how exactly to parse a query is not something we want), see https://www.oxeye.io/resources/golang-parameter-smuggling-attack for more details. For the *SubjectAccessReview endpoints of the kube-apiserver: * If rawSelector is empty and requirements are empty, the request is not limited. * If rawSelector is present and requirements are empty, the rawSelector will be parsed and limited if the parsing succeeds. * If rawSelector is empty and requirements are present, the requirements should be honored * If rawSelector is present and requirements are present, the request is invalid. */ export class V1FieldSelectorAttributes { static getAttributeTypeMap() { return V1FieldSelectorAttributes.attributeTypeMap; } constructor() { } } V1FieldSelectorAttributes.discriminator = undefined; V1FieldSelectorAttributes.mapping = undefined; V1FieldSelectorAttributes.attributeTypeMap = [ { "name": "rawSelector", "baseName": "rawSelector", "type": "string", "format": "" }, { "name": "requirements", "baseName": "requirements", "type": "Array<V1FieldSelectorRequirement>", "format": "" } ]; //# sourceMappingURL=V1FieldSelectorAttributes.js.map