Class V1LabelSelectorAttributes

LabelSelectorAttributes indicates a label limited access. Webhook authors are encouraged to * ensure rawSelector and requirements are not both set * consider the requirements field if set * not try to parse or consider the rawSelector field if set. This is to avoid another CVE-2022-2880 (i.e. getting different systems to agree on how exactly to parse a query is not something we want), see https://www.oxeye.io/resources/golang-parameter-smuggling-attack for more details. For the *SubjectAccessReview endpoints of the kube-apiserver: * If rawSelector is empty and requirements are empty, the request is not limited. * If rawSelector is present and requirements are empty, the rawSelector will be parsed and limited if the parsing succeeds. * If rawSelector is empty and requirements are present, the requirements should be honored * If rawSelector is present and requirements are present, the request is invalid.

Inheritance
object
V1LabelSelectorAttributes
Implements
Inherited Members
Namespace: k8s.Models
Assembly: KubernetesClient.dll
Syntax
public record V1LabelSelectorAttributes : IEquatable<V1LabelSelectorAttributes>

Constructors

View Source

V1LabelSelectorAttributes()

Declaration
public V1LabelSelectorAttributes()
View Source

V1LabelSelectorAttributes(V1LabelSelectorAttributes)

Declaration
protected V1LabelSelectorAttributes(V1LabelSelectorAttributes original)
Parameters
Type Name Description
V1LabelSelectorAttributes original

Properties

View Source

EqualityContract

Declaration
protected virtual Type EqualityContract { get; }
Property Value
Type Description
Type
View Source

RawSelector

rawSelector is the serialization of a field selector that would be included in a query parameter. Webhook implementations are encouraged to ignore rawSelector. The kube-apiserver's *SubjectAccessReview will parse the rawSelector as long as the requirements are not present.

Declaration
[JsonPropertyName("rawSelector")]
public string RawSelector { get; set; }
Property Value
Type Description
string
View Source

Requirements

requirements is the parsed interpretation of a label selector. All requirements must be met for a resource instance to match the selector. Webhook implementations should handle requirements, but how to handle them is up to the webhook. Since requirements can only limit the request, it is safe to authorize as unlimited request if the requirements are not understood.

Declaration
[JsonPropertyName("requirements")]
public IList<V1LabelSelectorRequirement> Requirements { get; set; }
Property Value
Type Description
IList<V1LabelSelectorRequirement>

Methods

View Source

Equals(object?)

Declaration
public override bool Equals(object? obj)
Parameters
Type Name Description
object obj
Returns
Type Description
bool
Overrides
View Source

Equals(V1LabelSelectorAttributes?)

Declaration
public virtual bool Equals(V1LabelSelectorAttributes? other)
Parameters
Type Name Description
V1LabelSelectorAttributes other
Returns
Type Description
bool
View Source

GetHashCode()

Declaration
public override int GetHashCode()
Returns
Type Description
int
Overrides
View Source

PrintMembers(StringBuilder)

Declaration
protected virtual bool PrintMembers(StringBuilder builder)
Parameters
Type Name Description
StringBuilder builder
Returns
Type Description
bool
View Source

ToString()

Declaration
public override string ToString()
Returns
Type Description
string
Overrides

Operators

View Source

operator ==(V1LabelSelectorAttributes?, V1LabelSelectorAttributes?)

Declaration
public static bool operator ==(V1LabelSelectorAttributes? left, V1LabelSelectorAttributes? right)
Parameters
Type Name Description
V1LabelSelectorAttributes left
V1LabelSelectorAttributes right
Returns
Type Description
bool
View Source

operator !=(V1LabelSelectorAttributes?, V1LabelSelectorAttributes?)

Declaration
public static bool operator !=(V1LabelSelectorAttributes? left, V1LabelSelectorAttributes? right)
Parameters
Type Name Description
V1LabelSelectorAttributes left
V1LabelSelectorAttributes right
Returns
Type Description
bool

Implements