kube-dsl 0.1.0

data/lib/kube-dsl/dsl/policy/v1beta1/fs_group_strategy_options.rb

@@ -0,0 +1,17 @@
+module KubeDSL::DSL::Policy::V1beta1
+  class FSGroupStrategyOptions < ::KubeDSL::DSLObject
+    value_fields :rule
+    array_field(:range) { KubeDSL::DSL::Policy::V1beta1::IDRange.new }
+
+    def serialize
+      {}.tap do |result|
+        result[:rule] = rule
+        result[:ranges] = ranges.map(&:serialize)
+      end
+    end
+
+    def kind_sym
+      :fs_group_strategy_options
+    end
+  end
+end

data/lib/kube-dsl/dsl/policy/v1beta1/host_port_range.rb

@@ -0,0 +1,16 @@
+module KubeDSL::DSL::Policy::V1beta1
+  class HostPortRange < ::KubeDSL::DSLObject
+    value_fields :max, :min
+
+    def serialize
+      {}.tap do |result|
+        result[:max] = max
+        result[:min] = min
+      end
+    end
+
+    def kind_sym
+      :host_port_range
+    end
+  end
+end

data/lib/kube-dsl/dsl/policy/v1beta1/id_range.rb

@@ -0,0 +1,16 @@
+module KubeDSL::DSL::Policy::V1beta1
+  class IDRange < ::KubeDSL::DSLObject
+    value_fields :max, :min
+
+    def serialize
+      {}.tap do |result|
+        result[:max] = max
+        result[:min] = min
+      end
+    end
+
+    def kind_sym
+      :id_range
+    end
+  end
+end

data/lib/kube-dsl/dsl/policy/v1beta1/pod_disruption_budget.rb

@@ -0,0 +1,21 @@
+module KubeDSL::DSL::Policy::V1beta1
+  class PodDisruptionBudget < ::KubeDSL::DSLObject
+    object_field(:metadata) { KubeDSL::DSL::Meta::V1::ObjectMeta.new }
+    object_field(:spec) { KubeDSL::DSL::Policy::V1beta1::PodDisruptionBudgetSpec.new }
+    object_field(:status) { KubeDSL::DSL::Policy::V1beta1::PodDisruptionBudgetStatus.new }
+
+    def serialize
+      {}.tap do |result|
+        result[:apiVersion] = "policy/v1beta1"
+        result[:kind] = "PodDisruptionBudget"
+        result[:metadata] = metadata.serialize
+        result[:spec] = spec.serialize
+        result[:status] = status.serialize
+      end
+    end
+
+    def kind_sym
+      :pod_disruption_budget
+    end
+  end
+end

data/lib/kube-dsl/dsl/policy/v1beta1/pod_disruption_budget_list.rb

@@ -0,0 +1,19 @@
+module KubeDSL::DSL::Policy::V1beta1
+  class PodDisruptionBudgetList < ::KubeDSL::DSLObject
+    array_field(:item) { KubeDSL::DSL::Policy::V1beta1::PodDisruptionBudget.new }
+    object_field(:metadata) { KubeDSL::DSL::Meta::V1::ListMeta.new }
+
+    def serialize
+      {}.tap do |result|
+        result[:apiVersion] = "policy/v1beta1"
+        result[:kind] = "PodDisruptionBudgetList"
+        result[:items] = items.map(&:serialize)
+        result[:metadata] = metadata.serialize
+      end
+    end
+
+    def kind_sym
+      :pod_disruption_budget_list
+    end
+  end
+end

data/lib/kube-dsl/dsl/policy/v1beta1/pod_disruption_budget_spec.rb

@@ -0,0 +1,18 @@
+module KubeDSL::DSL::Policy::V1beta1
+  class PodDisruptionBudgetSpec < ::KubeDSL::DSLObject
+    value_fields :max_unavailable, :min_available
+    object_field(:selector) { KubeDSL::DSL::Meta::V1::LabelSelector.new }
+
+    def serialize
+      {}.tap do |result|
+        result[:maxUnavailable] = max_unavailable
+        result[:minAvailable] = min_available
+        result[:selector] = selector.serialize
+      end
+    end
+
+    def kind_sym
+      :pod_disruption_budget_spec
+    end
+  end
+end

data/lib/kube-dsl/dsl/policy/v1beta1/pod_disruption_budget_status.rb

@@ -0,0 +1,21 @@
+module KubeDSL::DSL::Policy::V1beta1
+  class PodDisruptionBudgetStatus < ::KubeDSL::DSLObject
+    value_fields :current_healthy, :desired_healthy, :disruptions_allowed, :expected_pods, :observed_generation
+    object_field(:disrupted_pods) { ::KubeDSL::KeyValueFields.new(format: :string) }
+
+    def serialize
+      {}.tap do |result|
+        result[:currentHealthy] = current_healthy
+        result[:desiredHealthy] = desired_healthy
+        result[:disruptionsAllowed] = disruptions_allowed
+        result[:expectedPods] = expected_pods
+        result[:observedGeneration] = observed_generation
+        result[:disruptedPods] = disrupted_pods.serialize
+      end
+    end
+
+    def kind_sym
+      :pod_disruption_budget_status
+    end
+  end
+end

data/lib/kube-dsl/dsl/policy/v1beta1/pod_security_policy.rb

@@ -0,0 +1,19 @@
+module KubeDSL::DSL::Policy::V1beta1
+  class PodSecurityPolicy < ::KubeDSL::DSLObject
+    object_field(:metadata) { KubeDSL::DSL::Meta::V1::ObjectMeta.new }
+    object_field(:spec) { KubeDSL::DSL::Policy::V1beta1::PodSecurityPolicySpec.new }
+
+    def serialize
+      {}.tap do |result|
+        result[:apiVersion] = "policy/v1beta1"
+        result[:kind] = "PodSecurityPolicy"
+        result[:metadata] = metadata.serialize
+        result[:spec] = spec.serialize
+      end
+    end
+
+    def kind_sym
+      :pod_security_policy
+    end
+  end
+end

data/lib/kube-dsl/dsl/policy/v1beta1/pod_security_policy_list.rb

@@ -0,0 +1,19 @@
+module KubeDSL::DSL::Policy::V1beta1
+  class PodSecurityPolicyList < ::KubeDSL::DSLObject
+    array_field(:item) { KubeDSL::DSL::Policy::V1beta1::PodSecurityPolicy.new }
+    object_field(:metadata) { KubeDSL::DSL::Meta::V1::ListMeta.new }
+
+    def serialize
+      {}.tap do |result|
+        result[:apiVersion] = "policy/v1beta1"
+        result[:kind] = "PodSecurityPolicyList"
+        result[:items] = items.map(&:serialize)
+        result[:metadata] = metadata.serialize
+      end
+    end
+
+    def kind_sym
+      :pod_security_policy_list
+    end
+  end
+end

data/lib/kube-dsl/dsl/policy/v1beta1/pod_security_policy_spec.rb

@@ -0,0 +1,55 @@
+module KubeDSL::DSL::Policy::V1beta1
+  class PodSecurityPolicySpec < ::KubeDSL::DSLObject
+    value_fields :allow_privilege_escalation, :default_allow_privilege_escalation, :host_ipc, :host_network, :host_pid, :privileged, :read_only_root_filesystem
+    array_field(:allowed_csi_driver) { KubeDSL::DSL::Policy::V1beta1::AllowedCSIDriver.new }
+    array_field :allowed_capability
+    array_field(:allowed_flex_volume) { KubeDSL::DSL::Policy::V1beta1::AllowedFlexVolume.new }
+    array_field(:allowed_host_path) { KubeDSL::DSL::Policy::V1beta1::AllowedHostPath.new }
+    array_field :allowed_proc_mount_type
+    array_field :allowed_unsafe_sysctls
+    array_field :default_add_capability
+    array_field :forbidden_sysctls
+    array_field(:host_port) { KubeDSL::DSL::Policy::V1beta1::HostPortRange.new }
+    array_field :required_drop_capability
+    array_field :volume
+    object_field(:fs_group) { KubeDSL::DSL::Policy::V1beta1::FSGroupStrategyOptions.new }
+    object_field(:run_as_group) { KubeDSL::DSL::Policy::V1beta1::RunAsGroupStrategyOptions.new }
+    object_field(:run_as_user) { KubeDSL::DSL::Policy::V1beta1::RunAsUserStrategyOptions.new }
+    object_field(:runtime_class) { KubeDSL::DSL::Policy::V1beta1::RuntimeClassStrategyOptions.new }
+    object_field(:se_linux) { KubeDSL::DSL::Policy::V1beta1::SELinuxStrategyOptions.new }
+    object_field(:supplemental_groups) { KubeDSL::DSL::Policy::V1beta1::SupplementalGroupsStrategyOptions.new }
+
+    def serialize
+      {}.tap do |result|
+        result[:allowPrivilegeEscalation] = allow_privilege_escalation
+        result[:defaultAllowPrivilegeEscalation] = default_allow_privilege_escalation
+        result[:hostIPC] = host_ipc
+        result[:hostNetwork] = host_network
+        result[:hostPID] = host_pid
+        result[:privileged] = privileged
+        result[:readOnlyRootFilesystem] = read_only_root_filesystem
+        result[:allowedCSIDrivers] = allowed_csi_drivers.map(&:serialize)
+        result[:allowedCapabilities] = allowed_capabilities
+        result[:allowedFlexVolumes] = allowed_flex_volumes.map(&:serialize)
+        result[:allowedHostPaths] = allowed_host_paths.map(&:serialize)
+        result[:allowedProcMountTypes] = allowed_proc_mount_types
+        result[:allowedUnsafeSysctls] = allowed_unsafe_sysctlses
+        result[:defaultAddCapabilities] = default_add_capabilities
+        result[:forbiddenSysctls] = forbidden_sysctlses
+        result[:hostPorts] = host_ports.map(&:serialize)
+        result[:requiredDropCapabilities] = required_drop_capabilities
+        result[:volumes] = volumes
+        result[:fsGroup] = fs_group.serialize
+        result[:runAsGroup] = run_as_group.serialize
+        result[:runAsUser] = run_as_user.serialize
+        result[:runtimeClass] = runtime_class.serialize
+        result[:seLinux] = se_linux.serialize
+        result[:supplementalGroups] = supplemental_groups.serialize
+      end
+    end
+
+    def kind_sym
+      :pod_security_policy_spec
+    end
+  end
+end

data/lib/kube-dsl/dsl/policy/v1beta1/run_as_group_strategy_options.rb

@@ -0,0 +1,17 @@
+module KubeDSL::DSL::Policy::V1beta1
+  class RunAsGroupStrategyOptions < ::KubeDSL::DSLObject
+    value_fields :rule
+    array_field(:range) { KubeDSL::DSL::Policy::V1beta1::IDRange.new }
+
+    def serialize
+      {}.tap do |result|
+        result[:rule] = rule
+        result[:ranges] = ranges.map(&:serialize)
+      end
+    end
+
+    def kind_sym
+      :run_as_group_strategy_options
+    end
+  end
+end

data/lib/kube-dsl/dsl/policy/v1beta1/run_as_user_strategy_options.rb

@@ -0,0 +1,17 @@
+module KubeDSL::DSL::Policy::V1beta1
+  class RunAsUserStrategyOptions < ::KubeDSL::DSLObject
+    value_fields :rule
+    array_field(:range) { KubeDSL::DSL::Policy::V1beta1::IDRange.new }
+
+    def serialize
+      {}.tap do |result|
+        result[:rule] = rule
+        result[:ranges] = ranges.map(&:serialize)
+      end
+    end
+
+    def kind_sym
+      :run_as_user_strategy_options
+    end
+  end
+end

data/lib/kube-dsl/dsl/policy/v1beta1/runtime_class_strategy_options.rb

@@ -0,0 +1,17 @@
+module KubeDSL::DSL::Policy::V1beta1
+  class RuntimeClassStrategyOptions < ::KubeDSL::DSLObject
+    value_fields :default_runtime_class_name
+    array_field :allowed_runtime_class_name
+
+    def serialize
+      {}.tap do |result|
+        result[:defaultRuntimeClassName] = default_runtime_class_name
+        result[:allowedRuntimeClassNames] = allowed_runtime_class_names
+      end
+    end
+
+    def kind_sym
+      :runtime_class_strategy_options
+    end
+  end
+end

data/lib/kube-dsl/dsl/policy/v1beta1/se_linux_strategy_options.rb

@@ -0,0 +1,17 @@
+module KubeDSL::DSL::Policy::V1beta1
+  class SELinuxStrategyOptions < ::KubeDSL::DSLObject
+    value_fields :rule
+    object_field(:se_linux_options) { KubeDSL::DSL::V1::SELinuxOptions.new }
+
+    def serialize
+      {}.tap do |result|
+        result[:rule] = rule
+        result[:seLinuxOptions] = se_linux_options.serialize
+      end
+    end
+
+    def kind_sym
+      :se_linux_strategy_options
+    end
+  end
+end

data/lib/kube-dsl/dsl/policy/v1beta1/supplemental_groups_strategy_options.rb

@@ -0,0 +1,17 @@
+module KubeDSL::DSL::Policy::V1beta1
+  class SupplementalGroupsStrategyOptions < ::KubeDSL::DSLObject
+    value_fields :rule
+    array_field(:range) { KubeDSL::DSL::Policy::V1beta1::IDRange.new }
+
+    def serialize
+      {}.tap do |result|
+        result[:rule] = rule
+        result[:ranges] = ranges.map(&:serialize)
+      end
+    end
+
+    def kind_sym
+      :supplemental_groups_strategy_options
+    end
+  end
+end

data/lib/kube-dsl/dsl/policy/v1beta1.rb

@@ -0,0 +1,21 @@
+module KubeDSL::DSL::Policy::V1beta1
+  autoload :AllowedCSIDriver, 'kube-dsl/dsl/policy/v1beta1/allowed_csi_driver'
+  autoload :AllowedFlexVolume, 'kube-dsl/dsl/policy/v1beta1/allowed_flex_volume'
+  autoload :AllowedHostPath, 'kube-dsl/dsl/policy/v1beta1/allowed_host_path'
+  autoload :Eviction, 'kube-dsl/dsl/policy/v1beta1/eviction'
+  autoload :FSGroupStrategyOptions, 'kube-dsl/dsl/policy/v1beta1/fs_group_strategy_options'
+  autoload :HostPortRange, 'kube-dsl/dsl/policy/v1beta1/host_port_range'
+  autoload :IDRange, 'kube-dsl/dsl/policy/v1beta1/id_range'
+  autoload :PodDisruptionBudget, 'kube-dsl/dsl/policy/v1beta1/pod_disruption_budget'
+  autoload :PodDisruptionBudgetList, 'kube-dsl/dsl/policy/v1beta1/pod_disruption_budget_list'
+  autoload :PodDisruptionBudgetSpec, 'kube-dsl/dsl/policy/v1beta1/pod_disruption_budget_spec'
+  autoload :PodDisruptionBudgetStatus, 'kube-dsl/dsl/policy/v1beta1/pod_disruption_budget_status'
+  autoload :PodSecurityPolicy, 'kube-dsl/dsl/policy/v1beta1/pod_security_policy'
+  autoload :PodSecurityPolicyList, 'kube-dsl/dsl/policy/v1beta1/pod_security_policy_list'
+  autoload :PodSecurityPolicySpec, 'kube-dsl/dsl/policy/v1beta1/pod_security_policy_spec'
+  autoload :RunAsGroupStrategyOptions, 'kube-dsl/dsl/policy/v1beta1/run_as_group_strategy_options'
+  autoload :RunAsUserStrategyOptions, 'kube-dsl/dsl/policy/v1beta1/run_as_user_strategy_options'
+  autoload :RuntimeClassStrategyOptions, 'kube-dsl/dsl/policy/v1beta1/runtime_class_strategy_options'
+  autoload :SELinuxStrategyOptions, 'kube-dsl/dsl/policy/v1beta1/se_linux_strategy_options'
+  autoload :SupplementalGroupsStrategyOptions, 'kube-dsl/dsl/policy/v1beta1/supplemental_groups_strategy_options'
+end

data/lib/kube-dsl/dsl/policy.rb

@@ -0,0 +1,3 @@
+module KubeDSL::DSL::Policy
+  autoload :V1beta1, 'kube-dsl/dsl/policy/v1beta1'
+end

data/lib/kube-dsl/dsl/rbac/v1/aggregation_rule.rb

@@ -0,0 +1,15 @@
+module KubeDSL::DSL::Rbac::V1
+  class AggregationRule < ::KubeDSL::DSLObject
+    array_field(:cluster_role_selector) { KubeDSL::DSL::Meta::V1::LabelSelector.new }
+
+    def serialize
+      {}.tap do |result|
+        result[:clusterRoleSelectors] = cluster_role_selectors.map(&:serialize)
+      end
+    end
+
+    def kind_sym
+      :aggregation_rule
+    end
+  end
+end

data/lib/kube-dsl/dsl/rbac/v1/cluster_role.rb

@@ -0,0 +1,21 @@
+module KubeDSL::DSL::Rbac::V1
+  class ClusterRole < ::KubeDSL::DSLObject
+    array_field(:rule) { KubeDSL::DSL::Rbac::V1::PolicyRule.new }
+    object_field(:aggregation_rule) { KubeDSL::DSL::Rbac::V1::AggregationRule.new }
+    object_field(:metadata) { KubeDSL::DSL::Meta::V1::ObjectMeta.new }
+
+    def serialize
+      {}.tap do |result|
+        result[:apiVersion] = "rbac.authorization.k8s.io/v1"
+        result[:kind] = "ClusterRole"
+        result[:rules] = rules.map(&:serialize)
+        result[:aggregationRule] = aggregation_rule.serialize
+        result[:metadata] = metadata.serialize
+      end
+    end
+
+    def kind_sym
+      :cluster_role
+    end
+  end
+end

data/lib/kube-dsl/dsl/rbac/v1/cluster_role_binding.rb

@@ -0,0 +1,21 @@
+module KubeDSL::DSL::Rbac::V1
+  class ClusterRoleBinding < ::KubeDSL::DSLObject
+    array_field(:subject) { KubeDSL::DSL::Rbac::V1::Subject.new }
+    object_field(:metadata) { KubeDSL::DSL::Meta::V1::ObjectMeta.new }
+    object_field(:role_ref) { KubeDSL::DSL::Rbac::V1::RoleRef.new }
+
+    def serialize
+      {}.tap do |result|
+        result[:apiVersion] = "rbac.authorization.k8s.io/v1"
+        result[:kind] = "ClusterRoleBinding"
+        result[:subjects] = subjects.map(&:serialize)
+        result[:metadata] = metadata.serialize
+        result[:roleRef] = role_ref.serialize
+      end
+    end
+
+    def kind_sym
+      :cluster_role_binding
+    end
+  end
+end

data/lib/kube-dsl/dsl/rbac/v1/cluster_role_binding_list.rb

@@ -0,0 +1,19 @@
+module KubeDSL::DSL::Rbac::V1
+  class ClusterRoleBindingList < ::KubeDSL::DSLObject
+    array_field(:item) { KubeDSL::DSL::Rbac::V1::ClusterRoleBinding.new }
+    object_field(:metadata) { KubeDSL::DSL::Meta::V1::ListMeta.new }
+
+    def serialize
+      {}.tap do |result|
+        result[:apiVersion] = "rbac.authorization.k8s.io/v1"
+        result[:kind] = "ClusterRoleBindingList"
+        result[:items] = items.map(&:serialize)
+        result[:metadata] = metadata.serialize
+      end
+    end
+
+    def kind_sym
+      :cluster_role_binding_list
+    end
+  end
+end

data/lib/kube-dsl/dsl/rbac/v1/cluster_role_list.rb

@@ -0,0 +1,19 @@
+module KubeDSL::DSL::Rbac::V1
+  class ClusterRoleList < ::KubeDSL::DSLObject
+    array_field(:item) { KubeDSL::DSL::Rbac::V1::ClusterRole.new }
+    object_field(:metadata) { KubeDSL::DSL::Meta::V1::ListMeta.new }
+
+    def serialize
+      {}.tap do |result|
+        result[:apiVersion] = "rbac.authorization.k8s.io/v1"
+        result[:kind] = "ClusterRoleList"
+        result[:items] = items.map(&:serialize)
+        result[:metadata] = metadata.serialize
+      end
+    end
+
+    def kind_sym
+      :cluster_role_list
+    end
+  end
+end

data/lib/kube-dsl/dsl/rbac/v1/policy_rule.rb

@@ -0,0 +1,23 @@
+module KubeDSL::DSL::Rbac::V1
+  class PolicyRule < ::KubeDSL::DSLObject
+    array_field :api_group
+    array_field :non_resource_url
+    array_field :resource_name
+    array_field :resource
+    array_field :verb
+
+    def serialize
+      {}.tap do |result|
+        result[:apiGroups] = api_groups
+        result[:nonResourceURLs] = non_resource_urls
+        result[:resourceNames] = resource_names
+        result[:resources] = resources
+        result[:verbs] = verbs
+      end
+    end
+
+    def kind_sym
+      :policy_rule
+    end
+  end
+end

data/lib/kube-dsl/dsl/rbac/v1/role.rb

@@ -0,0 +1,19 @@
+module KubeDSL::DSL::Rbac::V1
+  class Role < ::KubeDSL::DSLObject
+    array_field(:rule) { KubeDSL::DSL::Rbac::V1::PolicyRule.new }
+    object_field(:metadata) { KubeDSL::DSL::Meta::V1::ObjectMeta.new }
+
+    def serialize
+      {}.tap do |result|
+        result[:apiVersion] = "rbac.authorization.k8s.io/v1"
+        result[:kind] = "Role"
+        result[:rules] = rules.map(&:serialize)
+        result[:metadata] = metadata.serialize
+      end
+    end
+
+    def kind_sym
+      :role
+    end
+  end
+end

data/lib/kube-dsl/dsl/rbac/v1/role_binding.rb

@@ -0,0 +1,21 @@
+module KubeDSL::DSL::Rbac::V1
+  class RoleBinding < ::KubeDSL::DSLObject
+    array_field(:subject) { KubeDSL::DSL::Rbac::V1::Subject.new }
+    object_field(:metadata) { KubeDSL::DSL::Meta::V1::ObjectMeta.new }
+    object_field(:role_ref) { KubeDSL::DSL::Rbac::V1::RoleRef.new }
+
+    def serialize
+      {}.tap do |result|
+        result[:apiVersion] = "rbac.authorization.k8s.io/v1"
+        result[:kind] = "RoleBinding"
+        result[:subjects] = subjects.map(&:serialize)
+        result[:metadata] = metadata.serialize
+        result[:roleRef] = role_ref.serialize
+      end
+    end
+
+    def kind_sym
+      :role_binding
+    end
+  end
+end

data/lib/kube-dsl/dsl/rbac/v1/role_binding_list.rb

@@ -0,0 +1,19 @@
+module KubeDSL::DSL::Rbac::V1
+  class RoleBindingList < ::KubeDSL::DSLObject
+    array_field(:item) { KubeDSL::DSL::Rbac::V1::RoleBinding.new }
+    object_field(:metadata) { KubeDSL::DSL::Meta::V1::ListMeta.new }
+
+    def serialize
+      {}.tap do |result|
+        result[:apiVersion] = "rbac.authorization.k8s.io/v1"
+        result[:kind] = "RoleBindingList"
+        result[:items] = items.map(&:serialize)
+        result[:metadata] = metadata.serialize
+      end
+    end
+
+    def kind_sym
+      :role_binding_list
+    end
+  end
+end

data/lib/kube-dsl/dsl/rbac/v1/role_list.rb

@@ -0,0 +1,19 @@
+module KubeDSL::DSL::Rbac::V1
+  class RoleList < ::KubeDSL::DSLObject
+    array_field(:item) { KubeDSL::DSL::Rbac::V1::Role.new }
+    object_field(:metadata) { KubeDSL::DSL::Meta::V1::ListMeta.new }
+
+    def serialize
+      {}.tap do |result|
+        result[:apiVersion] = "rbac.authorization.k8s.io/v1"
+        result[:kind] = "RoleList"
+        result[:items] = items.map(&:serialize)
+        result[:metadata] = metadata.serialize
+      end
+    end
+
+    def kind_sym
+      :role_list
+    end
+  end
+end

data/lib/kube-dsl/dsl/rbac/v1/role_ref.rb

@@ -0,0 +1,17 @@
+module KubeDSL::DSL::Rbac::V1
+  class RoleRef < ::KubeDSL::DSLObject
+    value_fields :api_group, :kind, :name
+
+    def serialize
+      {}.tap do |result|
+        result[:apiGroup] = api_group
+        result[:kind] = kind
+        result[:name] = name
+      end
+    end
+
+    def kind_sym
+      :role_ref
+    end
+  end
+end

data/lib/kube-dsl/dsl/rbac/v1/subject.rb

@@ -0,0 +1,18 @@
+module KubeDSL::DSL::Rbac::V1
+  class Subject < ::KubeDSL::DSLObject
+    value_fields :api_group, :kind, :name, :namespace
+
+    def serialize
+      {}.tap do |result|
+        result[:apiGroup] = api_group
+        result[:kind] = kind
+        result[:name] = name
+        result[:namespace] = namespace
+      end
+    end
+
+    def kind_sym
+      :subject
+    end
+  end
+end

data/lib/kube-dsl/dsl/rbac/v1.rb

@@ -0,0 +1,14 @@
+module KubeDSL::DSL::Rbac::V1
+  autoload :AggregationRule, 'kube-dsl/dsl/rbac/v1/aggregation_rule'
+  autoload :ClusterRole, 'kube-dsl/dsl/rbac/v1/cluster_role'
+  autoload :ClusterRoleBinding, 'kube-dsl/dsl/rbac/v1/cluster_role_binding'
+  autoload :ClusterRoleBindingList, 'kube-dsl/dsl/rbac/v1/cluster_role_binding_list'
+  autoload :ClusterRoleList, 'kube-dsl/dsl/rbac/v1/cluster_role_list'
+  autoload :PolicyRule, 'kube-dsl/dsl/rbac/v1/policy_rule'
+  autoload :Role, 'kube-dsl/dsl/rbac/v1/role'
+  autoload :RoleBinding, 'kube-dsl/dsl/rbac/v1/role_binding'
+  autoload :RoleBindingList, 'kube-dsl/dsl/rbac/v1/role_binding_list'
+  autoload :RoleList, 'kube-dsl/dsl/rbac/v1/role_list'
+  autoload :RoleRef, 'kube-dsl/dsl/rbac/v1/role_ref'
+  autoload :Subject, 'kube-dsl/dsl/rbac/v1/subject'
+end

data/lib/kube-dsl/dsl/rbac/v1alpha1/aggregation_rule.rb

@@ -0,0 +1,15 @@
+module KubeDSL::DSL::Rbac::V1alpha1
+  class AggregationRule < ::KubeDSL::DSLObject
+    array_field(:cluster_role_selector) { KubeDSL::DSL::Meta::V1::LabelSelector.new }
+
+    def serialize
+      {}.tap do |result|
+        result[:clusterRoleSelectors] = cluster_role_selectors.map(&:serialize)
+      end
+    end
+
+    def kind_sym
+      :aggregation_rule
+    end
+  end
+end

data/lib/kube-dsl/dsl/rbac/v1alpha1/cluster_role.rb

@@ -0,0 +1,21 @@
+module KubeDSL::DSL::Rbac::V1alpha1
+  class ClusterRole < ::KubeDSL::DSLObject
+    array_field(:rule) { KubeDSL::DSL::Rbac::V1alpha1::PolicyRule.new }
+    object_field(:aggregation_rule) { KubeDSL::DSL::Rbac::V1alpha1::AggregationRule.new }
+    object_field(:metadata) { KubeDSL::DSL::Meta::V1::ObjectMeta.new }
+
+    def serialize
+      {}.tap do |result|
+        result[:apiVersion] = "rbac.authorization.k8s.io/v1alpha1"
+        result[:kind] = "ClusterRole"
+        result[:rules] = rules.map(&:serialize)
+        result[:aggregationRule] = aggregation_rule.serialize
+        result[:metadata] = metadata.serialize
+      end
+    end
+
+    def kind_sym
+      :cluster_role
+    end
+  end
+end