/**
 * @module admissionregistration.k8s.io/v1alpha1
 * @internal
 */

import { DeleteOptions as _DeleteOptions_3 } from "./../meta/v1";
import { ListMeta as _ListMeta_2 } from "./../meta/v1";
import { ObjectMeta as _ObjectMeta_1 } from "./../meta/v1";
import { WatchEvent as _WatchEvent_4 } from "./../meta/v1";

/**
 * AdmissionHookClientConfig contains the information to make a TLS connection with the webhook */

export declare interface AdmissionHookClientConfig {
	/**
	 * CABundle is a PEM encoded CA bundle which will be used to validate webhook's server certificate. Required */

	caBundle: string;
	/**
	 * Service is a reference to the service for this webhook. If there is only one port open for the service, that port will be used. If there are multiple ports open, port 443 will be used if it is open, otherwise it is an error. Required */

	service: ServiceReference;
}

/**
 * ExternalAdmissionHook describes an external admission webhook and the resources and operations it applies to. */

export declare interface ExternalAdmissionHook {
	/**
	 * ClientConfig defines how to communicate with the hook. Required */

	clientConfig: AdmissionHookClientConfig;
	/**
	 * FailurePolicy defines how unrecognized errors from the admission endpoint are handled - allowed values are Ignore or Fail. Defaults to Ignore. */

	failurePolicy?: string;
	/**
	 * The name of the external admission webhook. Name should be fully qualified, e.g., imagepolicy.kubernetes.io, where "imagepolicy" is the name of the webhook, and kubernetes.io is the name of the organization. Required. */

	name: string;
	/**
	 * Rules describes what operations on what resources/subresources the webhook cares about. The webhook cares about an operation if it matches _any_ Rule. */

	rules?: Iterable<RuleWithOperations>;
}

/**
 * ExternalAdmissionHookConfiguration describes the configuration of initializers. */

export declare interface ExternalAdmissionHookConfiguration {
	/**
	 * APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/api-conventions.md#resources */

	apiVersion: "admissionregistration.k8s.io/v1alpha1";
	/**
	 * ExternalAdmissionHooks is a list of external admission webhooks and the affected resources and operations. */

	externalAdmissionHooks?: Iterable<ExternalAdmissionHook>;
	/**
	 * Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/api-conventions.md#types-kinds */

	kind: "ExternalAdmissionHookConfiguration";
	/**
	 * Standard object metadata; More info: https://git.k8s.io/community/contributors/devel/api-conventions.md#metadata. */

	metadata?: _ObjectMeta_1;
}

/**
 * ExternalAdmissionHookConfigurationList is a list of ExternalAdmissionHookConfiguration. */

export declare interface ExternalAdmissionHookConfigurationList {
	/**
	 * APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/api-conventions.md#resources */

	apiVersion: "admissionregistration.k8s.io/v1alpha1";
	/**
	 * List of ExternalAdmissionHookConfiguration. */

	items: Iterable<ExternalAdmissionHookConfiguration>;
	/**
	 * Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/api-conventions.md#types-kinds */

	kind: "ExternalAdmissionHookConfigurationList";
	/**
	 * Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/api-conventions.md#types-kinds */

	metadata?: _ListMeta_2;
}

/**
 * Initializer describes the name and the failure policy of an initializer, and what resources it applies to. */

export declare interface Initializer {
	/**
	 * Name is the identifier of the initializer. It will be added to the object that needs to be initialized. Name should be fully qualified, e.g., alwayspullimages.kubernetes.io, where "alwayspullimages" is the name of the webhook, and kubernetes.io is the name of the organization. Required */

	name: string;
	/**
	 * Rules describes what resources/subresources the initializer cares about. The initializer cares about an operation if it matches _any_ Rule. Rule.Resources must not include subresources. */

	rules?: Iterable<Rule>;
}

/**
 * InitializerConfiguration describes the configuration of initializers. */

export declare interface InitializerConfiguration {
	/**
	 * APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/api-conventions.md#resources */

	apiVersion: "admissionregistration.k8s.io/v1alpha1";
	/**
	 * Initializers is a list of resources and their default initializers Order-sensitive. When merging multiple InitializerConfigurations, we sort the initializers from different InitializerConfigurations by the name of the InitializerConfigurations; the order of the initializers from the same InitializerConfiguration is preserved. */

	initializers?: Iterable<Initializer>;
	/**
	 * Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/api-conventions.md#types-kinds */

	kind: "InitializerConfiguration";
	/**
	 * Standard object metadata; More info: https://git.k8s.io/community/contributors/devel/api-conventions.md#metadata. */

	metadata?: _ObjectMeta_1;
}

/**
 * InitializerConfigurationList is a list of InitializerConfiguration. */

export declare interface InitializerConfigurationList {
	/**
	 * APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/api-conventions.md#resources */

	apiVersion: "admissionregistration.k8s.io/v1alpha1";
	/**
	 * List of InitializerConfiguration. */

	items: Iterable<InitializerConfiguration>;
	/**
	 * Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/api-conventions.md#types-kinds */

	kind: "InitializerConfigurationList";
	/**
	 * Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/api-conventions.md#types-kinds */

	metadata?: _ListMeta_2;
}

/**
 * Rule is a tuple of APIGroups, APIVersion, and Resources.It is recommended to make sure that all the tuple expansions are valid. */

export declare interface Rule {
	/**
	 * APIGroups is the API groups the resources belong to. '&#42;' is all groups. If '&#42;' is present, the length of the slice must be one. Required. */

	apiGroups?: Iterable<string>;
	/**
	 * APIVersions is the API versions the resources belong to. '&#42;' is all versions. If '&#42;' is present, the length of the slice must be one. Required. */

	apiVersions?: Iterable<string>;
	/**
	 * Resources is a list of resources this rule applies to.
	 *
	 * For example: 'pods' means pods. 'pods/log' means the log subresource of pods. '&#42;' means all resources, but not subresources. 'pods/&#42;' means all subresources of pods. '&#42;/scale' means all scale subresources. '&#42;/&#42;' means all resources and their subresources.
	 *
	 * If wildcard is present, the validation rule will ensure resources do not overlap with each other.
	 *
	 * Depending on the enclosing object, subresources might not be allowed. Required. */

	resources?: Iterable<string>;
}

/**
 * RuleWithOperations is a tuple of Operations and Resources. It is recommended to make sure that all the tuple expansions are valid. */

export declare interface RuleWithOperations {
	/**
	 * APIGroups is the API groups the resources belong to. '&#42;' is all groups. If '&#42;' is present, the length of the slice must be one. Required. */

	apiGroups?: Iterable<string>;
	/**
	 * APIVersions is the API versions the resources belong to. '&#42;' is all versions. If '&#42;' is present, the length of the slice must be one. Required. */

	apiVersions?: Iterable<string>;
	/**
	 * Operations is the operations the admission hook cares about - CREATE, UPDATE, or &#42; for all operations. If '&#42;' is present, the length of the slice must be one. Required. */

	operations?: Iterable<string>;
	/**
	 * Resources is a list of resources this rule applies to.
	 *
	 * For example: 'pods' means pods. 'pods/log' means the log subresource of pods. '&#42;' means all resources, but not subresources. 'pods/&#42;' means all subresources of pods. '&#42;/scale' means all scale subresources. '&#42;/&#42;' means all resources and their subresources.
	 *
	 * If wildcard is present, the validation rule will ensure resources do not overlap with each other.
	 *
	 * Depending on the enclosing object, subresources might not be allowed. Required. */

	resources?: Iterable<string>;
}

/**
 * ServiceReference holds a reference to Service.legacy.k8s.io */

export declare interface ServiceReference {
	/**
	 * Name is the name of the service Required */

	name: string;
	/**
	 * Namespace is the namespace of the service Required */

	namespace: string;
}

export declare type DeleteOptions = _DeleteOptions_3;

export declare type WatchEvent = _WatchEvent_4;