- baseImportPath: "./pkg/apis/core/"
  allowedImports:
  - k8s.io/apimachinery
  - k8s.io/apiserver/pkg/util/feature
  - k8s.io/kubernetes/pkg/apis/core
  - k8s.io/kubernetes/pkg/features
  - k8s.io/kubernetes/pkg/fieldpath
  - k8s.io/kubernetes/pkg/util
  - k8s.io/api/core/v1

  # the following are temporary and should go away. Think twice (or more) before adding anything here.
  # Main goal: pkg/apis should be as self-contained as possible.
  - k8s.io/kubernetes/pkg/apis/extensions
  - k8s.io/kubernetes/pkg/api/legacyscheme
  - k8s.io/kubernetes/pkg/api/testapi
  - k8s.io/api/extensions/v1beta1
  ignoredSubTrees:
  - "./pkg/apis/core/validation"

- baseImportPath: "./pkg/kubectl/genericclioptions/"
  allowedImports:
  - k8s.io/apimachinery
  - k8s.io/client-go
  # TODO this one should be tightened.  We depend on it for testing, but we should instead create our own scheme
  - k8s.io/api/core/v1
  - k8s.io/kubernetes/pkg/kubectl/genericclioptions/printers
  - k8s.io/kubernetes/pkg/kubectl/genericclioptions/resource

- baseImportPath: "./vendor/k8s.io/apimachinery/"
  allowedImports:
  - k8s.io/apimachinery
  - k8s.io/kube-openapi

- baseImportPath: "./vendor/k8s.io/api/"
  allowedImports:
  - k8s.io/api
  - k8s.io/apimachinery

- baseImportPath: "./vendor/k8s.io/code-generator/"
  ignoredSubTrees:
  - "./vendor/k8s.io/code-generator/_test"
  allowedImports:
  - k8s.io/gengo
  - k8s.io/code-generator
  - k8s.io/kube-openapi

- baseImportPath: "./vendor/k8s.io/client-go/"
  allowedImports:
  - k8s.io/api
  - k8s.io/apimachinery
  - k8s.io/client-go

# prevent core machinery from taking explicit v1 references unless
# necessary
- baseImportPath: "./vendor/k8s.io/client-go/rest/"
  excludeTests: true
  allowedImports:
  - k8s.io/apimachinery
  - k8s.io/client-go
- baseImportPath: "./vendor/k8s.io/client-go/tools/"
  excludeTests: true
  ignoredSubTrees:
  - "./vendor/k8s.io/client-go/tools/bootstrap/token/api"
  - "./vendor/k8s.io/client-go/tools/cache/testing"
  - "./vendor/k8s.io/client-go/tools/leaderelection/resourcelock"
  - "./vendor/k8s.io/client-go/tools/portforward"
  - "./vendor/k8s.io/client-go/tools/record"
  - "./vendor/k8s.io/client-go/tools/reference"
  - "./vendor/k8s.io/client-go/tools/remotecommand"
  allowedImports:
  - k8s.io/apimachinery
  - k8s.io/client-go


- baseImportPath: "./vendor/k8s.io/apiserver/"
  allowedImports:
  - k8s.io/api
  - k8s.io/apimachinery
  - k8s.io/apiserver
  - k8s.io/client-go
  - k8s.io/kube-openapi

- baseImportPath: "./vendor/k8s.io/metrics/"
  allowedImports:
  - k8s.io/api
  - k8s.io/apimachinery
  - k8s.io/client-go
  - k8s.io/metrics

- baseImportPath: "./vendor/k8s.io/kube-aggregator/"
  allowedImports:
  - k8s.io/api
  - k8s.io/apimachinery
  - k8s.io/apiserver
  - k8s.io/client-go
  - k8s.io/kube-aggregator
  - k8s.io/kube-openapi

- baseImportPath: "./vendor/k8s.io/sample-apiserver/"
  allowedImports:
  - k8s.io/api
  - k8s.io/apimachinery
  - k8s.io/apiserver
  - k8s.io/client-go
  - k8s.io/sample-apiserver

- baseImportPath: "./vendor/k8s.io/apiextensions-apiserver/"
  allowedImports:
  - k8s.io/api
  - k8s.io/apiextensions-apiserver
  - k8s.io/apimachinery
  - k8s.io/apiserver
  - k8s.io/client-go

- baseImportPath: "./vendor/k8s.io/kube-openapi/"
  allowedImports:
  - k8s.io/kube-openapi
  - k8s.io/gengo