to be exactly one. * if additional invocations result in further modifications to the object, webhooks are not guaranteed to be invoked again. * webhooks that use this option may be reordered to minimize the number of additional invocations. * to validate an object after all mutations are guaranteed complete, use a validating admission webhook instead.\n\nDefaults to \"Never\".\n\nPossible enum values:\n - `\"IfNeeded\"` indicates that the webhook may be called at least one additional time as part...

          "type": "string"
        },
        "rules": {

          "type": "string"
        },
        "rules": {

            ],
            "description": "BoundObjectRef is a reference to an object that the token will be bound to. The token will only be valid for as long as the bound object exists. NOTE: The API server's TokenReview endpoint will validate the BoundObjectRef, but other audiences may not. Keep ExpirationSeconds small if you want prompt revocation."
          },
          "expirationSeconds": {

          "type": "string"
        },
        "rules": {

   limitations under the License.

================================================================

github.com/go-openapi/validate
https://github.com/go-openapi/validate
----------------------------------------------------------------

                                 Apache License
                           Version 2.0, January 2004