kube-dsl 0.1.0

checksums.yaml

@@ -0,0 +1,7 @@
+---
+SHA256:
+  metadata.gz: 0c4a2c8a1ffa65f5c3227f899d3c98f9b6e90342c62c58a45a51751580488a99
+  data.tar.gz: 8a1298e57424079bc029a92b665b41e89a55164e547456d7ee716116b2688ca9
+SHA512:
+  metadata.gz: 144e1904a86711b7635e7f18567f79f592d00493767673c99cb319c20a1b9faa5a710b1766b402f1db81b4c60190e44e08164a33740254835f956a34297fc024
+  data.tar.gz: 7737f3c3abe92f78357d346395c9c006c0092d4a99055b5a2c7ba38dcbba5a0021f311184aab89978505bf7b72db57c972aa0245d04d2c74a2a29bd500f312a3

data/CHANGELOG.md

@@ -0,0 +1,2 @@
+## 0.1.0
+* Birthday!

data/Gemfile

@@ -0,0 +1,12 @@
+source 'https://rubygems.org'
+
+gemspec
+
+group :development, :test do
+  gem 'pry-byebug'
+  gem 'rake'
+end
+
+group :test do
+  gem 'rspec', '~> 3.0'
+end

data/Rakefile

@@ -0,0 +1,52 @@
+require 'bundler'
+require 'rspec/core/rake_task'
+require 'rubygems/package_task'
+
+require 'kube-dsl'
+require 'pry-byebug'
+
+Bundler::GemHelper.install_tasks
+
+task default: :spec
+
+desc 'Run specs'
+RSpec::Core::RakeTask.new do |t|
+  t.pattern = './spec/**/*_spec.rb'
+end
+
+task :generate do
+  require 'dry/inflector'
+
+  FileUtils.rm_rf('./lib/kube-dsl/entrypoint.rb')
+  FileUtils.rm_rf('./lib/kube-dsl/dsl.rb')
+  FileUtils.rm_rf('./lib/kube-dsl/dsl')
+  FileUtils.mkdir_p('./lib/kube-dsl/dsl')
+  FileUtils.mkdir_p('./vendor')
+
+  export_url = "https://github.com/instrumenta/kubernetes-json-schema/trunk/v#{KubeDSL::KUBERNETES_VERSION}-local"
+  local_path = "vendor/kubernetes-json-schema/v#{KubeDSL::KUBERNETES_VERSION}-local"
+
+  unless File.exist?(local_path)
+    system("svn export #{export_url} #{local_path}")
+  end
+
+  Dir.chdir('lib') do
+    generator = KubeDSL::Generator.new(
+      schema_dir: File.join('..', local_path),
+      output_dir: File.join('kube-dsl', 'dsl'),
+      inflector: Dry::Inflector.new do |inflections|
+        inflections.acronym('DSL')
+
+        inflections.plural('tls', 'tlses')
+        inflections.singular('tls', 'tls')
+      end
+    )
+
+    generator.generate_resource_files
+    generator.generate_autoload_files
+    generator.generate_entrypoint_file do |resource, ns|
+      version = resource.ref.version || ''
+      !version.include?('beta') && !version.include?('alpha')
+    end
+  end
+end

data/kube-dsl.gemspec

@@ -0,0 +1,17 @@
+$:.unshift File.join(File.dirname(__FILE__), 'lib')
+require 'kube-dsl/version'
+
+Gem::Specification.new do |s|
+  s.name     = 'kube-dsl'
+  s.version  = ::KubeDSL::VERSION
+  s.authors  = ['Cameron Dutro']
+  s.email    = ['camertron@gmail.com']
+  s.homepage = 'http://github.com/getkuby/kube-dsl'
+
+  s.description = s.summary = 'A Ruby DSL for defining Kubernetes resources.'
+
+  s.add_dependency 'dry-inflector', '~> 0.2'
+
+  s.require_path = 'lib'
+  s.files = Dir['{lib,spec}/**/*', 'Gemfile', 'CHANGELOG.md', 'README.md', 'Rakefile', 'kube-dsl.gemspec']
+end

data/lib/kube-dsl/builder.rb

@@ -0,0 +1,215 @@
+require 'json'
+
+module KubeDSL
+  class Builder
+    include StringHelpers
+
+    attr_reader :schema_dir, :output_dir, :namespace, :inflector, :resolvers
+
+    def initialize(schema_dir:, output_dir:, inflector:)
+      @schema_dir = schema_dir
+      @output_dir = output_dir
+      @inflector = inflector
+      @resolvers ||= {}
+    end
+
+    def register_resolver(*prefixes, &resolver)
+      prefixes.each do |prefix|
+        @resolvers[prefix] = resolver
+      end
+    end
+
+    def each_resource
+      return to_enum(__method__) unless block_given?
+
+      resources.each do |res|
+        # "External" resources are ones that live outside the current
+        # schema, i.e. k8s resources like ObjectMeta that other
+        # k8s-compatible schemas depend on.
+        #
+        # Resources can be "empty" if they contain no properties. This
+        # usually happens for resources that are really just aliases
+        # for basic types like integer and string. The k8s' Duration
+        # object is a good example. It's just an alias for string.
+        yield res if !res.external? && !res.empty?
+      end
+    end
+
+    def entrypoint(&block)
+      ''.tap do |ruby_code|
+        ruby_code << "module #{namespace[0..-2].join('::')}::Entrypoint\n"
+
+        each_resource do |resource|
+          ns = resource.ref.ruby_namespace.join('::')
+          next if block && !block.call(resource, ns)
+
+          ruby_code << "  def #{underscore(resource.ref.kind)}(&block)\n"
+          ruby_code << "    ::#{ns}::#{resource.ref.kind}.new(&block)\n"
+          ruby_code << "  end\n\n"
+        end
+
+        ruby_code.strip!
+        ruby_code << "\nend\n"
+      end
+    end
+
+    def namespace
+      @namespace ||= inflector.classify(
+        File
+          .split(output_dir)
+          .map { |seg| inflector.camelize(underscore(seg)) }
+          .join('/')
+      ).split('::')
+    end
+
+    def entrypoint_path
+      File.join(File.dirname(output_dir), 'entrypoint.rb')
+    end
+
+    def each_autoload_file(&block)
+      return to_enum(__method__) unless block
+
+      start = output_dir.split(File::SEPARATOR).first
+
+      each_autoload_file_helper(
+        autoload_map[start], [start], &block
+      )
+    end
+
+    def resource_from_ref(ref)
+      if res = resource_cache[ref.str]
+        return res
+      end
+
+      res = resource_cache[ref.str] = ref.meta
+
+      add_doc_to_resource(res, ref.document)
+
+      res
+    end
+
+    def parse_ref(ref_str)
+      Ref.new(ref_str, namespace, output_dir, inflector, schema_dir)
+    end
+
+    private
+
+    def resources
+      JSON.parse(File.read(start_path))['oneOf'].map do |entry|
+        resource_from_ref(resolve_ref(entry['$ref']))
+      end
+    end
+
+    def autoload_map
+      @autoload_map ||= {}.tap do |amap|
+        each_resource do |res|
+          parts = res.ref.ruby_autoload_path.split(File::SEPARATOR)
+          parts.reject!(&:empty?)
+
+          parts.inject(amap) do |ret, seg|
+            if seg.end_with?('.rb')
+              ret[seg] = res
+            else
+              ret[seg] ||= {}
+            end
+          end
+        end
+      end
+    end
+
+    def each_autoload_file_helper(amap, path, &block)
+      amap.each do |ns, children|
+        next unless children.is_a?(Hash)
+
+        mod_name = [*path, ns]
+          .flat_map { |seg| inflector.camelize(seg.gsub('-', '_')) }
+          .join('::')
+
+        ruby_code = "module #{mod_name}\n"
+
+        children.each_pair do |child_ns, res|
+          autoload_path = File.join(*path, ns, child_ns).chomp('.rb')
+
+          if res.is_a?(Hash)
+            ruby_code << "  autoload :#{capitalize(child_ns)}, '#{autoload_path}'\n"
+          else
+            ruby_code << "  autoload :#{res.ref.kind}, '#{autoload_path}'\n"
+          end
+        end
+
+        ruby_code << "end\n"
+        yield File.join(*path, "#{ns}.rb"), ruby_code
+        each_autoload_file_helper(children, path + [ns], &block)
+      end
+    end
+
+    def add_doc_to_resource(res, doc)
+      if props = doc['properties']
+        add_props_to_resource(props, res)
+      end
+    end
+
+    def add_props_to_resource(properties, res)
+      properties.each do |name, prop|
+        add_prop_to_resource(name, prop, res)
+      end
+    end
+
+    def resolve_ref(ref_str)
+      type = ref_str.split('/').last
+
+      resolvers.each do |prefix, resolver|
+        if type.start_with?(prefix)
+          return resolver.call(ref_str, self)
+        end
+      end
+
+      parse_ref(ref_str)
+    end
+
+    def add_prop_to_resource(name, prop, res)
+      case Array(prop['type']).first
+        when 'array'
+          if ref_str = prop['items']['$ref']
+            ref = resolve_ref(ref_str)
+            res.array_fields[name] = resource_from_ref(ref)
+          else
+            res.array_fields[name] = nil
+          end
+
+        when 'object' # this means key/value pairs
+          fmt = prop['additionalProperties']['format'] || 'string'
+          res.key_value_fields[name] = fmt
+
+        when 'string', 'integer', 'number', 'boolean', 'date-time'
+          enum = prop['enum']
+
+          if enum&.size == 1
+            # use JSON.generate to add quotes around strings, etc
+            res.default_fields[name] = JSON.generate(enum.first)
+          else
+            res.fields << name
+          end
+
+        else
+          ref = resolve_ref(prop['$ref'])
+
+          if ref.object?
+            # this ref refers to a nested type
+            res.object_fields[name] = resource_from_ref(ref)
+          else
+            # this ref refers to just a field
+            res.fields << name
+          end
+      end
+    end
+
+    def start_path
+      @entrypoint_path ||= File.join(schema_dir, 'all.json')
+    end
+
+    def resource_cache
+      @resource_cache ||= {}
+    end
+  end
+end

data/lib/kube-dsl/dsl/admissionregistration/v1/mutating_webhook.rb

@@ -0,0 +1,30 @@
+module KubeDSL::DSL::Admissionregistration::V1
+  class MutatingWebhook < ::KubeDSL::DSLObject
+    value_fields :failure_policy, :match_policy, :name, :reinvocation_policy, :side_effects, :timeout_seconds
+    array_field :admission_review_version
+    array_field(:rule) { KubeDSL::DSL::Admissionregistration::V1::RuleWithOperations.new }
+    object_field(:client_config) { KubeDSL::DSL::Admissionregistration::V1::WebhookClientConfig.new }
+    object_field(:namespace_selector) { KubeDSL::DSL::Meta::V1::LabelSelector.new }
+    object_field(:object_selector) { KubeDSL::DSL::Meta::V1::LabelSelector.new }
+
+    def serialize
+      {}.tap do |result|
+        result[:failurePolicy] = failure_policy
+        result[:matchPolicy] = match_policy
+        result[:name] = name
+        result[:reinvocationPolicy] = reinvocation_policy
+        result[:sideEffects] = side_effects
+        result[:timeoutSeconds] = timeout_seconds
+        result[:admissionReviewVersions] = admission_review_versions
+        result[:rules] = rules.map(&:serialize)
+        result[:clientConfig] = client_config.serialize
+        result[:namespaceSelector] = namespace_selector.serialize
+        result[:objectSelector] = object_selector.serialize
+      end
+    end
+
+    def kind_sym
+      :mutating_webhook
+    end
+  end
+end

data/lib/kube-dsl/dsl/admissionregistration/v1/mutating_webhook_configuration.rb

@@ -0,0 +1,19 @@
+module KubeDSL::DSL::Admissionregistration::V1
+  class MutatingWebhookConfiguration < ::KubeDSL::DSLObject
+    array_field(:webhook) { KubeDSL::DSL::Admissionregistration::V1::MutatingWebhook.new }
+    object_field(:metadata) { KubeDSL::DSL::Meta::V1::ObjectMeta.new }
+
+    def serialize
+      {}.tap do |result|
+        result[:apiVersion] = "admissionregistration.k8s.io/v1"
+        result[:kind] = "MutatingWebhookConfiguration"
+        result[:webhooks] = webhooks.map(&:serialize)
+        result[:metadata] = metadata.serialize
+      end
+    end
+
+    def kind_sym
+      :mutating_webhook_configuration
+    end
+  end
+end

data/lib/kube-dsl/dsl/admissionregistration/v1/mutating_webhook_configuration_list.rb

@@ -0,0 +1,19 @@
+module KubeDSL::DSL::Admissionregistration::V1
+  class MutatingWebhookConfigurationList < ::KubeDSL::DSLObject
+    array_field(:item) { KubeDSL::DSL::Admissionregistration::V1::MutatingWebhookConfiguration.new }
+    object_field(:metadata) { KubeDSL::DSL::Meta::V1::ListMeta.new }
+
+    def serialize
+      {}.tap do |result|
+        result[:apiVersion] = "admissionregistration.k8s.io/v1"
+        result[:kind] = "MutatingWebhookConfigurationList"
+        result[:items] = items.map(&:serialize)
+        result[:metadata] = metadata.serialize
+      end
+    end
+
+    def kind_sym
+      :mutating_webhook_configuration_list
+    end
+  end
+end

data/lib/kube-dsl/dsl/admissionregistration/v1/rule_with_operations.rb

@@ -0,0 +1,23 @@
+module KubeDSL::DSL::Admissionregistration::V1
+  class RuleWithOperations < ::KubeDSL::DSLObject
+    value_fields :scope
+    array_field :api_group
+    array_field :api_version
+    array_field :operation
+    array_field :resource
+
+    def serialize
+      {}.tap do |result|
+        result[:scope] = scope
+        result[:apiGroups] = api_groups
+        result[:apiVersions] = api_versions
+        result[:operations] = operations
+        result[:resources] = resources
+      end
+    end
+
+    def kind_sym
+      :rule_with_operations
+    end
+  end
+end

data/lib/kube-dsl/dsl/admissionregistration/v1/service_reference.rb

@@ -0,0 +1,18 @@
+module KubeDSL::DSL::Admissionregistration::V1
+  class ServiceReference < ::KubeDSL::DSLObject
+    value_fields :name, :namespace, :path, :port
+
+    def serialize
+      {}.tap do |result|
+        result[:name] = name
+        result[:namespace] = namespace
+        result[:path] = path
+        result[:port] = port
+      end
+    end
+
+    def kind_sym
+      :service_reference
+    end
+  end
+end

data/lib/kube-dsl/dsl/admissionregistration/v1/validating_webhook.rb

@@ -0,0 +1,29 @@
+module KubeDSL::DSL::Admissionregistration::V1
+  class ValidatingWebhook < ::KubeDSL::DSLObject
+    value_fields :failure_policy, :match_policy, :name, :side_effects, :timeout_seconds
+    array_field :admission_review_version
+    array_field(:rule) { KubeDSL::DSL::Admissionregistration::V1::RuleWithOperations.new }
+    object_field(:client_config) { KubeDSL::DSL::Admissionregistration::V1::WebhookClientConfig.new }
+    object_field(:namespace_selector) { KubeDSL::DSL::Meta::V1::LabelSelector.new }
+    object_field(:object_selector) { KubeDSL::DSL::Meta::V1::LabelSelector.new }
+
+    def serialize
+      {}.tap do |result|
+        result[:failurePolicy] = failure_policy
+        result[:matchPolicy] = match_policy
+        result[:name] = name
+        result[:sideEffects] = side_effects
+        result[:timeoutSeconds] = timeout_seconds
+        result[:admissionReviewVersions] = admission_review_versions
+        result[:rules] = rules.map(&:serialize)
+        result[:clientConfig] = client_config.serialize
+        result[:namespaceSelector] = namespace_selector.serialize
+        result[:objectSelector] = object_selector.serialize
+      end
+    end
+
+    def kind_sym
+      :validating_webhook
+    end
+  end
+end

data/lib/kube-dsl/dsl/admissionregistration/v1/validating_webhook_configuration.rb

@@ -0,0 +1,19 @@
+module KubeDSL::DSL::Admissionregistration::V1
+  class ValidatingWebhookConfiguration < ::KubeDSL::DSLObject
+    array_field(:webhook) { KubeDSL::DSL::Admissionregistration::V1::ValidatingWebhook.new }
+    object_field(:metadata) { KubeDSL::DSL::Meta::V1::ObjectMeta.new }
+
+    def serialize
+      {}.tap do |result|
+        result[:apiVersion] = "admissionregistration.k8s.io/v1"
+        result[:kind] = "ValidatingWebhookConfiguration"
+        result[:webhooks] = webhooks.map(&:serialize)
+        result[:metadata] = metadata.serialize
+      end
+    end
+
+    def kind_sym
+      :validating_webhook_configuration
+    end
+  end
+end

data/lib/kube-dsl/dsl/admissionregistration/v1/validating_webhook_configuration_list.rb

@@ -0,0 +1,19 @@
+module KubeDSL::DSL::Admissionregistration::V1
+  class ValidatingWebhookConfigurationList < ::KubeDSL::DSLObject
+    array_field(:item) { KubeDSL::DSL::Admissionregistration::V1::ValidatingWebhookConfiguration.new }
+    object_field(:metadata) { KubeDSL::DSL::Meta::V1::ListMeta.new }
+
+    def serialize
+      {}.tap do |result|
+        result[:apiVersion] = "admissionregistration.k8s.io/v1"
+        result[:kind] = "ValidatingWebhookConfigurationList"
+        result[:items] = items.map(&:serialize)
+        result[:metadata] = metadata.serialize
+      end
+    end
+
+    def kind_sym
+      :validating_webhook_configuration_list
+    end
+  end
+end

data/lib/kube-dsl/dsl/admissionregistration/v1/webhook_client_config.rb

@@ -0,0 +1,18 @@
+module KubeDSL::DSL::Admissionregistration::V1
+  class WebhookClientConfig < ::KubeDSL::DSLObject
+    value_fields :ca_bundle, :url
+    object_field(:service) { KubeDSL::DSL::Admissionregistration::V1::ServiceReference.new }
+
+    def serialize
+      {}.tap do |result|
+        result[:caBundle] = ca_bundle
+        result[:url] = url
+        result[:service] = service.serialize
+      end
+    end
+
+    def kind_sym
+      :webhook_client_config
+    end
+  end
+end

data/lib/kube-dsl/dsl/admissionregistration/v1.rb

@@ -0,0 +1,11 @@
+module KubeDSL::DSL::Admissionregistration::V1
+  autoload :MutatingWebhook, 'kube-dsl/dsl/admissionregistration/v1/mutating_webhook'
+  autoload :MutatingWebhookConfiguration, 'kube-dsl/dsl/admissionregistration/v1/mutating_webhook_configuration'
+  autoload :MutatingWebhookConfigurationList, 'kube-dsl/dsl/admissionregistration/v1/mutating_webhook_configuration_list'
+  autoload :RuleWithOperations, 'kube-dsl/dsl/admissionregistration/v1/rule_with_operations'
+  autoload :ServiceReference, 'kube-dsl/dsl/admissionregistration/v1/service_reference'
+  autoload :ValidatingWebhook, 'kube-dsl/dsl/admissionregistration/v1/validating_webhook'
+  autoload :ValidatingWebhookConfiguration, 'kube-dsl/dsl/admissionregistration/v1/validating_webhook_configuration'
+  autoload :ValidatingWebhookConfigurationList, 'kube-dsl/dsl/admissionregistration/v1/validating_webhook_configuration_list'
+  autoload :WebhookClientConfig, 'kube-dsl/dsl/admissionregistration/v1/webhook_client_config'
+end

data/lib/kube-dsl/dsl/admissionregistration/v1beta1/mutating_webhook.rb

@@ -0,0 +1,30 @@
+module KubeDSL::DSL::Admissionregistration::V1beta1
+  class MutatingWebhook < ::KubeDSL::DSLObject
+    value_fields :failure_policy, :match_policy, :name, :reinvocation_policy, :side_effects, :timeout_seconds
+    array_field :admission_review_version
+    array_field(:rule) { KubeDSL::DSL::Admissionregistration::V1beta1::RuleWithOperations.new }
+    object_field(:client_config) { KubeDSL::DSL::Admissionregistration::V1beta1::WebhookClientConfig.new }
+    object_field(:namespace_selector) { KubeDSL::DSL::Meta::V1::LabelSelector.new }
+    object_field(:object_selector) { KubeDSL::DSL::Meta::V1::LabelSelector.new }
+
+    def serialize
+      {}.tap do |result|
+        result[:failurePolicy] = failure_policy
+        result[:matchPolicy] = match_policy
+        result[:name] = name
+        result[:reinvocationPolicy] = reinvocation_policy
+        result[:sideEffects] = side_effects
+        result[:timeoutSeconds] = timeout_seconds
+        result[:admissionReviewVersions] = admission_review_versions
+        result[:rules] = rules.map(&:serialize)
+        result[:clientConfig] = client_config.serialize
+        result[:namespaceSelector] = namespace_selector.serialize
+        result[:objectSelector] = object_selector.serialize
+      end
+    end
+
+    def kind_sym
+      :mutating_webhook
+    end
+  end
+end

data/lib/kube-dsl/dsl/admissionregistration/v1beta1/mutating_webhook_configuration.rb

@@ -0,0 +1,19 @@
+module KubeDSL::DSL::Admissionregistration::V1beta1
+  class MutatingWebhookConfiguration < ::KubeDSL::DSLObject
+    array_field(:webhook) { KubeDSL::DSL::Admissionregistration::V1beta1::MutatingWebhook.new }
+    object_field(:metadata) { KubeDSL::DSL::Meta::V1::ObjectMeta.new }
+
+    def serialize
+      {}.tap do |result|
+        result[:apiVersion] = "admissionregistration.k8s.io/v1beta1"
+        result[:kind] = "MutatingWebhookConfiguration"
+        result[:webhooks] = webhooks.map(&:serialize)
+        result[:metadata] = metadata.serialize
+      end
+    end
+
+    def kind_sym
+      :mutating_webhook_configuration
+    end
+  end
+end

data/lib/kube-dsl/dsl/admissionregistration/v1beta1/mutating_webhook_configuration_list.rb

@@ -0,0 +1,19 @@
+module KubeDSL::DSL::Admissionregistration::V1beta1
+  class MutatingWebhookConfigurationList < ::KubeDSL::DSLObject
+    array_field(:item) { KubeDSL::DSL::Admissionregistration::V1beta1::MutatingWebhookConfiguration.new }
+    object_field(:metadata) { KubeDSL::DSL::Meta::V1::ListMeta.new }
+
+    def serialize
+      {}.tap do |result|
+        result[:apiVersion] = "admissionregistration.k8s.io/v1beta1"
+        result[:kind] = "MutatingWebhookConfigurationList"
+        result[:items] = items.map(&:serialize)
+        result[:metadata] = metadata.serialize
+      end
+    end
+
+    def kind_sym
+      :mutating_webhook_configuration_list
+    end
+  end
+end

data/lib/kube-dsl/dsl/admissionregistration/v1beta1/rule_with_operations.rb

@@ -0,0 +1,23 @@
+module KubeDSL::DSL::Admissionregistration::V1beta1
+  class RuleWithOperations < ::KubeDSL::DSLObject
+    value_fields :scope
+    array_field :api_group
+    array_field :api_version
+    array_field :operation
+    array_field :resource
+
+    def serialize
+      {}.tap do |result|
+        result[:scope] = scope
+        result[:apiGroups] = api_groups
+        result[:apiVersions] = api_versions
+        result[:operations] = operations
+        result[:resources] = resources
+      end
+    end
+
+    def kind_sym
+      :rule_with_operations
+    end
+  end
+end

data/lib/kube-dsl/dsl/admissionregistration/v1beta1/service_reference.rb

@@ -0,0 +1,18 @@
+module KubeDSL::DSL::Admissionregistration::V1beta1
+  class ServiceReference < ::KubeDSL::DSLObject
+    value_fields :name, :namespace, :path, :port
+
+    def serialize
+      {}.tap do |result|
+        result[:name] = name
+        result[:namespace] = namespace
+        result[:path] = path
+        result[:port] = port
+      end
+    end
+
+    def kind_sym
+      :service_reference
+    end
+  end
+end

data/lib/kube-dsl/dsl/admissionregistration/v1beta1/validating_webhook.rb

@@ -0,0 +1,29 @@
+module KubeDSL::DSL::Admissionregistration::V1beta1
+  class ValidatingWebhook < ::KubeDSL::DSLObject
+    value_fields :failure_policy, :match_policy, :name, :side_effects, :timeout_seconds
+    array_field :admission_review_version
+    array_field(:rule) { KubeDSL::DSL::Admissionregistration::V1beta1::RuleWithOperations.new }
+    object_field(:client_config) { KubeDSL::DSL::Admissionregistration::V1beta1::WebhookClientConfig.new }
+    object_field(:namespace_selector) { KubeDSL::DSL::Meta::V1::LabelSelector.new }
+    object_field(:object_selector) { KubeDSL::DSL::Meta::V1::LabelSelector.new }
+
+    def serialize
+      {}.tap do |result|
+        result[:failurePolicy] = failure_policy
+        result[:matchPolicy] = match_policy
+        result[:name] = name
+        result[:sideEffects] = side_effects
+        result[:timeoutSeconds] = timeout_seconds
+        result[:admissionReviewVersions] = admission_review_versions
+        result[:rules] = rules.map(&:serialize)
+        result[:clientConfig] = client_config.serialize
+        result[:namespaceSelector] = namespace_selector.serialize
+        result[:objectSelector] = object_selector.serialize
+      end
+    end
+
+    def kind_sym
+      :validating_webhook
+    end
+  end
+end