ReferenceGrant

string

.apiVersion

APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
string

.kind

Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
object

.metadata
object

.spec

Spec defines the desired state of ReferenceGrant.
array required

.spec .from

From describes the trusted namespaces and kinds that can reference the resources described in “To”. Each entry in this list MUST be considered to be an additional place that references can be valid from, or to put this another way, entries MUST be combined using OR.

Support: Core
string required

.spec .from[] .group

Group is the group of the referent. When empty, the Kubernetes core API group is inferred.

Support: Core
string required

.spec .from[] .kind
Kind is the kind of the referent. Although implementations may support additional resources, the following types are part of the “Core” support level for this field.

When used to permit a SecretObjectReference:
- Gateway
When used to permit a BackendObjectReference:
- GRPCRoute
- HTTPRoute
- TCPRoute
- TLSRoute
- UDPRoute
string required

.spec .from[] .namespace

Namespace is the namespace of the referent.

Support: Core
array required

.spec .to

To describes the resources that may be referenced by the resources described in “From”. Each entry in this list MUST be considered to be an additional place that references can be valid to, or to put this another way, entries MUST be combined using OR.

Support: Core
string required

.spec .to[] .group

Group is the group of the referent. When empty, the Kubernetes core API group is inferred.

Support: Core
string required

.spec .to[] .kind
Kind is the kind of the referent. Although implementations may support additional resources, the following types are part of the “Core” support level for this field:
- Secret when used to permit a SecretObjectReference
- Service when used to permit a BackendObjectReference
string

.spec .to[] .name

Name is the name of the referent. When unspecified, this policy refers to all resources of the specified Group and Kind in the local namespace.