From b7b4a4cff8a2274cbef0efc40abc3831fc73f080 Mon Sep 17 00:00:00 2001 From: Kubernetes Publisher Date: Thu, 15 Oct 2026 02:48:11 +0000 Subject: [PATCH 1/3] Automated openapi generation from release-1.37 Signed-off-by: Kubernetes Publisher --- gen | 1 + kubernetes/.openapi-generator/FILES | 304 +- .../swagger.json-default.sha256 | 2 +- kubernetes/api/openapi.yaml | 118810 +++++++++------ kubernetes/docs/AdmissionregistrationApi.md | 2 +- kubernetes/docs/ApiextensionsApi.md | 2 +- kubernetes/docs/ApiregistrationApi.md | 2 +- kubernetes/docs/ApisApi.md | 2 +- kubernetes/docs/AppsApi.md | 2 +- kubernetes/docs/AuthenticationApi.md | 2 +- kubernetes/docs/AuthorizationApi.md | 2 +- kubernetes/docs/AutoscalingApi.md | 2 +- kubernetes/docs/BatchApi.md | 2 +- kubernetes/docs/CertificatesApi.md | 2 +- kubernetes/docs/CertificatesV1Api.md | 2046 +- kubernetes/docs/CoordinationApi.md | 2 +- kubernetes/docs/CoreApi.md | 2 +- kubernetes/docs/DiscoveryApi.md | 2 +- kubernetes/docs/EventsApi.md | 2 +- kubernetes/docs/FlowcontrolApiserverApi.md | 2 +- kubernetes/docs/InternalApiserverApi.md | 2 +- kubernetes/docs/LifecycleApi.md | 76 + ...gV1beta1Api.md => LifecycleV1alpha1Api.md} | 920 +- kubernetes/docs/NetworkingApi.md | 2 +- kubernetes/docs/NodeApi.md | 2 +- kubernetes/docs/PolicyApi.md | 2 +- kubernetes/docs/RbacAuthorizationApi.md | 2 +- kubernetes/docs/RbacV1Subject.md | 8 +- kubernetes/docs/ResourceApi.md | 2 +- kubernetes/docs/ResourceV1Api.md | 1072 +- kubernetes/docs/ResourceV1ResourceClaim.md | 2 +- kubernetes/docs/SchedulingApi.md | 2 +- kubernetes/docs/SchedulingV1alpha3Api.md | 2920 + ...V1alpha2Api.md => SchedulingV1beta1Api.md} | 272 +- kubernetes/docs/StorageApi.md | 2 +- kubernetes/docs/StorageV1Api.md | 252 + kubernetes/docs/StorageV1beta1Api.md | 732 - kubernetes/docs/StoragemigrationApi.md | 2 +- ...1alpha1Api.md => StoragemigrationV1Api.md} | 478 +- kubernetes/docs/V1AggregationRule.md | 2 +- kubernetes/docs/V1BoundObjectReference.md | 2 +- kubernetes/docs/V1CELDeviceSelector.md | 2 +- kubernetes/docs/V1CSIDriverSpec.md | 2 +- kubernetes/docs/V1CSINode.md | 1 + kubernetes/docs/V1CSINodeStatus.md | 14 + .../docs/V1CapacityRequestPolicyRange.md | 2 +- kubernetes/docs/V1ClusterRole.md | 2 +- kubernetes/docs/V1ClusterRoleBinding.md | 2 +- ...TrustBundle.md => V1ClusterTrustBundle.md} | 6 +- ...dleList.md => V1ClusterTrustBundleList.md} | 4 +- .../docs/V1ClusterTrustBundleProjection.md | 1 + ...dleSpec.md => V1ClusterTrustBundleSpec.md} | 2 +- kubernetes/docs/V1ConfigMap.md | 2 +- kubernetes/docs/V1ConfigMapEnvSource.md | 2 +- kubernetes/docs/V1ConfigMapKeySelector.md | 2 +- kubernetes/docs/V1ConfigMapVolumeSource.md | 1 + kubernetes/docs/V1ControllerRevision.md | 4 +- kubernetes/docs/V1DaemonSet.md | 2 +- kubernetes/docs/V1DaemonSetCondition.md | 4 +- kubernetes/docs/V1Deployment.md | 2 +- kubernetes/docs/V1DeploymentCondition.md | 4 +- kubernetes/docs/V1Device.md | 2 +- kubernetes/docs/V1DeviceClass.md | 2 +- kubernetes/docs/V1DeviceClassSpec.md | 2 +- kubernetes/docs/V1DeviceCounterConsumption.md | 1 + kubernetes/docs/V1DeviceDerivedAttribute.md | 15 + .../docs/V1DeviceRequestAllocationResult.md | 1 + kubernetes/docs/V1DeviceSubRequest.md | 1 + ...ta1ServiceCIDR.md => V1DeviceTaintRule.md} | 8 +- kubernetes/docs/V1DeviceTaintRuleList.md | 21 + kubernetes/docs/V1DeviceTaintRuleSpec.md | 15 + kubernetes/docs/V1DeviceTaintRuleStatus.md | 14 + kubernetes/docs/V1DeviceTaintSelector.md | 16 + kubernetes/docs/V1DownwardAPIVolumeFile.md | 1 + kubernetes/docs/V1DownwardAPIVolumeSource.md | 1 + kubernetes/docs/V1EmptyDirVolumeSource.md | 1 + kubernetes/docs/V1EvictionResponder.md | 15 + kubernetes/docs/V1ExactDeviceRequest.md | 1 + kubernetes/docs/V1FlowSchema.md | 2 +- kubernetes/docs/V1FlowSchemaCondition.md | 4 +- kubernetes/docs/V1GRPCAction.md | 1 + kubernetes/docs/V1GroupVersionKind.md | 6 +- kubernetes/docs/V1HTTPGetAction.md | 1 + .../docs/V1JobSchedulingConfiguration.md | 17 + kubernetes/docs/V1JobSpec.md | 1 + kubernetes/docs/V1JobStatus.md | 2 +- kubernetes/docs/V1KeyToPath.md | 1 + kubernetes/docs/V1LeaseSpec.md | 4 +- .../V1LimitedPriorityLevelConfiguration.md | 2 +- .../docs/V1NodeAllocatableMappedResources.md | 15 + kubernetes/docs/V1NodeAllocatableMapping.md | 16 + kubernetes/docs/V1NodeAllocatableOverhead.md | 15 + .../V1NodeAllocatableOverheadResources.md | 16 + kubernetes/docs/V1NodeAllocatableResource.md | 15 + .../V1NodeAllocatableResourceClaimStatus.md | 3 +- .../docs/V1NodeAllocatableResourceMapping.md | 15 - kubernetes/docs/V1NodePodPreemptionPolicy.md | 14 + kubernetes/docs/V1NodeSpec.md | 1 + kubernetes/docs/V1NodeSystemInfo.md | 1 + kubernetes/docs/V1ParentReference.md | 8 +- .../docs/V1PersistentVolumeClaimStatus.md | 1 + kubernetes/docs/V1PodCertificateProjection.md | 1 + kubernetes/docs/V1PodCertificateRequest.md | 22 + .../docs/V1PodCertificateRequestList.md | 21 + .../docs/V1PodCertificateRequestSpec.md | 23 + .../docs/V1PodCertificateRequestStatus.md | 18 + kubernetes/docs/V1PodDisruptionBudgetSpec.md | 2 +- kubernetes/docs/V1PodSecurityContext.md | 2 +- kubernetes/docs/V1PodSpec.md | 5 +- kubernetes/docs/V1PodStatus.md | 1 + kubernetes/docs/V1PodVolumeHealth.md | 16 + kubernetes/docs/V1PolicyRule.md | 10 +- .../docs/V1PriorityLevelConfiguration.md | 2 +- .../V1PriorityLevelConfigurationCondition.md | 4 +- kubernetes/docs/V1ProjectedVolumeSource.md | 1 + kubernetes/docs/V1ReplicaSet.md | 2 +- kubernetes/docs/V1ReplicaSetCondition.md | 4 +- kubernetes/docs/V1ResourceClaimTemplate.md | 2 +- .../docs/V1ResourceClaimTemplateSpec.md | 2 +- kubernetes/docs/V1ResourcePool.md | 2 +- kubernetes/docs/V1ResourceSliceSpec.md | 2 + kubernetes/docs/V1ResourceStatus.md | 2 +- kubernetes/docs/V1Role.md | 2 +- kubernetes/docs/V1RoleBinding.md | 2 +- kubernetes/docs/V1RoleRef.md | 6 +- kubernetes/docs/V1SecretVolumeSource.md | 1 + .../docs/V1ServiceAccountTokenProjection.md | 1 + kubernetes/docs/V1ServiceCIDRSpec.md | 2 +- kubernetes/docs/V1StatefulSet.md | 2 +- kubernetes/docs/V1StatefulSetCondition.md | 4 +- kubernetes/docs/V1StorageHealth.md | 15 + kubernetes/docs/V1StorageHealthCondition.md | 19 + kubernetes/docs/V1StorageVersionMigration.md | 22 + .../docs/V1StorageVersionMigrationList.md | 21 + .../docs/V1StorageVersionMigrationSpec.md | 14 + .../docs/V1StorageVersionMigrationStatus.md | 15 + kubernetes/docs/V1TokenRequestSpec.md | 1 + kubernetes/docs/V1VolumeAttributesClass.md | 2 +- kubernetes/docs/V1VolumeHealthCondition.md | 16 + kubernetes/docs/V1VolumeHealthStatus.md | 15 + kubernetes/docs/V1VolumeMount.md | 3 +- kubernetes/docs/V1alpha1Eviction.md | 22 + ...iceCIDRList.md => V1alpha1EvictionList.md} | 6 +- .../docs/V1alpha1EvictionPodReference.md | 15 + kubernetes/docs/V1alpha1EvictionRequest.md | 22 + .../docs/V1alpha1EvictionRequestList.md | 21 + .../V1alpha1EvictionRequestPodReference.md | 15 + .../docs/V1alpha1EvictionRequestSpec.md | 16 + .../docs/V1alpha1EvictionRequestStatus.md | 15 + .../docs/V1alpha1EvictionRequestTarget.md | 14 + kubernetes/docs/V1alpha1EvictionSpec.md | 14 + kubernetes/docs/V1alpha1EvictionStatus.md | 18 + kubernetes/docs/V1alpha1EvictionTarget.md | 14 + kubernetes/docs/V1alpha1Requester.md | 15 + kubernetes/docs/V1alpha1ResponderStatus.md | 19 + kubernetes/docs/V1alpha1TargetResponder.md | 16 + .../docs/V1alpha2GangSchedulingPolicy.md | 14 - kubernetes/docs/V1alpha2LeaseCandidateSpec.md | 12 +- .../docs/V1alpha2PodGroupSchedulingPolicy.md | 15 - kubernetes/docs/V1alpha2PodGroupSpec.md | 20 - kubernetes/docs/V1alpha2PodGroupStatus.md | 15 - kubernetes/docs/V1alpha2PodGroupTemplate.md | 20 - .../docs/V1alpha2PodGroupTemplateReference.md | 14 - ...alpha2WorkloadPodGroupTemplateReference.md | 15 - kubernetes/docs/V1alpha2WorkloadSpec.md | 15 - .../docs/V1alpha3CompositeDisruptionMode.md | 15 + .../V1alpha3CompositeGangSchedulingPolicy.md | 14 + ...ddress.md => V1alpha3CompositePodGroup.md} | 7 +- .../docs/V1alpha3CompositePodGroupList.md | 21 + ...3CompositePodGroupSchedulingConstraints.md | 14 + ...alpha3CompositePodGroupSchedulingPolicy.md | 15 + .../docs/V1alpha3CompositePodGroupSpec.md | 21 + .../docs/V1alpha3CompositePodGroupStatus.md | 14 + .../docs/V1alpha3CompositePodGroupTemplate.md | 22 + kubernetes/docs/V1alpha3DisruptionMode.md | 15 + .../docs/V1alpha3GangSchedulingPolicy.md | 14 + .../docs/V1alpha3PartitionTypeStatus.md | 17 + ...1alpha2PodGroup.md => V1alpha3PodGroup.md} | 6 +- ...odGroupList.md => V1alpha3PodGroupList.md} | 4 +- ...im.md => V1alpha3PodGroupResourceClaim.md} | 8 +- ...=> V1alpha3PodGroupResourceClaimStatus.md} | 6 +- ... V1alpha3PodGroupSchedulingConstraints.md} | 4 +- .../docs/V1alpha3PodGroupSchedulingPolicy.md | 15 + kubernetes/docs/V1alpha3PodGroupSpec.md | 22 + kubernetes/docs/V1alpha3PodGroupStatus.md | 15 + kubernetes/docs/V1alpha3PodGroupTemplate.md | 21 + kubernetes/docs/V1alpha3PoolStatus.md | 2 + .../V1alpha3ResourcePoolStatusRequestSpec.md | 1 + .../docs/V1alpha3ShareableCapacityStatus.md | 17 + .../docs/V1alpha3ShareableSummaryStatus.md | 16 + ...raint.md => V1alpha3TopologyConstraint.md} | 4 +- ...d => V1alpha3TypedLocalObjectReference.md} | 8 +- ...1alpha2Workload.md => V1alpha3Workload.md} | 4 +- ...orkloadList.md => V1alpha3WorkloadList.md} | 4 +- .../V1alpha3WorkloadPodGroupDisruptionMode.md | 15 + ...ha3WorkloadPodGroupGangSchedulingPolicy.md | 14 + .../V1alpha3WorkloadPodGroupResourceClaim.md | 16 + ...a3WorkloadPodGroupSchedulingConstraints.md | 14 + ...1alpha3WorkloadPodGroupSchedulingPolicy.md | 15 + kubernetes/docs/V1alpha3WorkloadReference.md | 15 + kubernetes/docs/V1alpha3WorkloadSpec.md | 16 + kubernetes/docs/V1beta1BasicDevice.md | 2 +- kubernetes/docs/V1beta1CELDeviceSelector.md | 2 +- .../docs/V1beta1CapacityRequestPolicyRange.md | 2 +- kubernetes/docs/V1beta1ClusterTrustBundle.md | 2 +- .../docs/V1beta1CompositeDisruptionMode.md | 15 + .../V1beta1CompositeGangSchedulingPolicy.md | 14 + ...1CompositePodGroupSchedulingConstraints.md | 14 + ...1beta1CompositePodGroupSchedulingPolicy.md | 15 + .../docs/V1beta1CompositePodGroupTemplate.md | 22 + kubernetes/docs/V1beta1DeviceClass.md | 2 +- kubernetes/docs/V1beta1DeviceClassSpec.md | 2 +- .../docs/V1beta1DeviceCounterConsumption.md | 1 + .../docs/V1beta1DeviceDerivedAttribute.md | 15 + kubernetes/docs/V1beta1DeviceRequest.md | 1 + .../V1beta1DeviceRequestAllocationResult.md | 1 + kubernetes/docs/V1beta1DeviceSubRequest.md | 1 + kubernetes/docs/V1beta1DisruptionMode.md | 15 + .../docs/V1beta1GangSchedulingPolicy.md | 14 + kubernetes/docs/V1beta1IPAddressSpec.md | 14 - kubernetes/docs/V1beta1LeaseCandidateSpec.md | 12 +- .../docs/V1beta1NodeAllocatableMapping.md | 16 + .../docs/V1beta1NodeAllocatableOverhead.md | 15 + .../docs/V1beta1NodeAllocatableResource.md | 15 + .../V1beta1NodeAllocatableResourceMapping.md | 15 - kubernetes/docs/V1beta1ParentReference.md | 17 - kubernetes/docs/V1beta1PodGroup.md | 22 + ...PAddressList.md => V1beta1PodGroupList.md} | 6 +- .../docs/V1beta1PodGroupResourceClaim.md | 16 + .../V1beta1PodGroupResourceClaimStatus.md | 15 + .../V1beta1PodGroupSchedulingConstraints.md | 14 + .../docs/V1beta1PodGroupSchedulingPolicy.md | 15 + kubernetes/docs/V1beta1PodGroupSpec.md | 22 + kubernetes/docs/V1beta1PodGroupStatus.md | 15 + kubernetes/docs/V1beta1PodGroupTemplate.md | 21 + kubernetes/docs/V1beta1ResourceClaim.md | 2 +- .../docs/V1beta1ResourceClaimTemplate.md | 2 +- .../docs/V1beta1ResourceClaimTemplateSpec.md | 2 +- kubernetes/docs/V1beta1ResourcePool.md | 2 +- kubernetes/docs/V1beta1ResourceSliceSpec.md | 2 + kubernetes/docs/V1beta1ServiceCIDRSpec.md | 14 - kubernetes/docs/V1beta1ServiceCIDRStatus.md | 14 - kubernetes/docs/V1beta1TopologyConstraint.md | 14 + .../docs/V1beta1TypedLocalObjectReference.md | 16 + .../docs/V1beta1VolumeAttributesClass.md | 22 - .../docs/V1beta1VolumeAttributesClassList.md | 21 - kubernetes/docs/V1beta1Workload.md | 21 + kubernetes/docs/V1beta1WorkloadList.md | 21 + kubernetes/docs/V1beta1WorkloadReference.md | 15 + kubernetes/docs/V1beta1WorkloadSpec.md | 16 + kubernetes/docs/V1beta2CELDeviceSelector.md | 2 +- .../docs/V1beta2CapacityRequestPolicyRange.md | 2 +- kubernetes/docs/V1beta2Device.md | 2 +- kubernetes/docs/V1beta2DeviceClass.md | 2 +- kubernetes/docs/V1beta2DeviceClassSpec.md | 2 +- .../docs/V1beta2DeviceCounterConsumption.md | 1 + .../docs/V1beta2DeviceDerivedAttribute.md | 15 + .../V1beta2DeviceRequestAllocationResult.md | 1 + kubernetes/docs/V1beta2DeviceSubRequest.md | 1 + kubernetes/docs/V1beta2ExactDeviceRequest.md | 1 + .../docs/V1beta2NodeAllocatableMapping.md | 16 + .../docs/V1beta2NodeAllocatableOverhead.md | 15 + .../docs/V1beta2NodeAllocatableResource.md | 15 + .../V1beta2NodeAllocatableResourceMapping.md | 15 - kubernetes/docs/V1beta2ResourceClaim.md | 2 +- .../docs/V1beta2ResourceClaimTemplate.md | 2 +- .../docs/V1beta2ResourceClaimTemplateSpec.md | 2 +- kubernetes/docs/V1beta2ResourcePool.md | 2 +- kubernetes/docs/V1beta2ResourceSliceSpec.md | 2 + kubernetes/docs/V2HPAScalingRules.md | 2 +- .../V2HorizontalPodAutoscalerCondition.md | 1 + kubernetes/docs/V2MetricValueStatus.md | 2 +- .../client/openapi/ApiCallback.java | 23 +- .../kubernetes/client/openapi/ApiClient.java | 31 +- .../client/openapi/ApiException.java | 25 +- .../client/openapi/ApiResponse.java | 25 +- .../client/openapi/Configuration.java | 29 +- .../openapi/GzipRequestInterceptor.java | 23 +- .../io/kubernetes/client/openapi/JSON.java | 205 +- .../io/kubernetes/client/openapi/Pair.java | 25 +- .../client/openapi/ProgressRequestBody.java | 23 +- .../client/openapi/ProgressResponseBody.java | 23 +- .../client/openapi/ServerConfiguration.java | 25 +- .../client/openapi/ServerVariable.java | 25 +- .../kubernetes/client/openapi/StringUtil.java | 25 +- .../apis/AdmissionregistrationApi.java | 28 +- .../apis/AdmissionregistrationV1Api.java | 115 +- .../AdmissionregistrationV1alpha1Api.java | 53 +- .../apis/AdmissionregistrationV1beta1Api.java | 53 +- .../client/openapi/apis/ApiextensionsApi.java | 28 +- .../openapi/apis/ApiextensionsV1Api.java | 45 +- .../openapi/apis/ApiregistrationApi.java | 28 +- .../openapi/apis/ApiregistrationV1Api.java | 45 +- .../client/openapi/apis/ApisApi.java | 28 +- .../client/openapi/apis/AppsApi.java | 28 +- .../client/openapi/apis/AppsV1Api.java | 147 +- .../openapi/apis/AuthenticationApi.java | 28 +- .../openapi/apis/AuthenticationV1Api.java | 29 +- .../client/openapi/apis/AuthorizationApi.java | 28 +- .../openapi/apis/AuthorizationV1Api.java | 33 +- .../client/openapi/apis/AutoscalingApi.java | 28 +- .../client/openapi/apis/AutoscalingV1Api.java | 47 +- .../client/openapi/apis/AutoscalingV2Api.java | 47 +- .../client/openapi/apis/BatchApi.java | 28 +- .../client/openapi/apis/BatchV1Api.java | 69 +- .../client/openapi/apis/CertificatesApi.java | 28 +- .../openapi/apis/CertificatesV1Api.java | 7278 +- .../openapi/apis/CertificatesV1beta1Api.java | 61 +- .../client/openapi/apis/CoordinationApi.java | 28 +- .../openapi/apis/CoordinationV1Api.java | 41 +- .../openapi/apis/CoordinationV1alpha2Api.java | 41 +- .../openapi/apis/CoordinationV1beta1Api.java | 41 +- .../client/openapi/apis/CoreApi.java | 28 +- .../client/openapi/apis/CoreV1Api.java | 435 +- .../client/openapi/apis/CustomObjectsApi.java | 79 +- .../client/openapi/apis/DiscoveryApi.java | 28 +- .../client/openapi/apis/DiscoveryV1Api.java | 41 +- .../client/openapi/apis/EventsApi.java | 28 +- .../client/openapi/apis/EventsV1Api.java | 41 +- .../openapi/apis/FlowcontrolApiserverApi.java | 28 +- .../apis/FlowcontrolApiserverV1Api.java | 65 +- .../openapi/apis/InternalApiserverApi.java | 28 +- .../apis/InternalApiserverV1alpha1Api.java | 45 +- .../client/openapi/apis/LifecycleApi.java | 231 + ...eta1Api.java => LifecycleV1alpha1Api.java} | 3527 +- .../client/openapi/apis/LogsApi.java | 31 +- .../client/openapi/apis/NetworkingApi.java | 28 +- .../client/openapi/apis/NetworkingV1Api.java | 111 +- .../client/openapi/apis/NodeApi.java | 28 +- .../client/openapi/apis/NodeV1Api.java | 39 +- .../client/openapi/apis/OpenidApi.java | 25 +- .../client/openapi/apis/PolicyApi.java | 28 +- .../client/openapi/apis/PolicyV1Api.java | 47 +- .../openapi/apis/RbacAuthorizationApi.java | 28 +- .../openapi/apis/RbacAuthorizationV1Api.java | 85 +- .../client/openapi/apis/ResourceApi.java | 28 +- .../client/openapi/apis/ResourceV1Api.java | 6183 +- .../openapi/apis/ResourceV1alpha3Api.java | 65 +- .../openapi/apis/ResourceV1beta1Api.java | 91 +- .../openapi/apis/ResourceV1beta2Api.java | 111 +- .../client/openapi/apis/SchedulingApi.java | 28 +- .../client/openapi/apis/SchedulingV1Api.java | 39 +- .../openapi/apis/SchedulingV1alpha3Api.java | 8843 ++ ...pha2Api.java => SchedulingV1beta1Api.java} | 467 +- .../client/openapi/apis/StorageApi.java | 28 +- .../client/openapi/apis/StorageV1Api.java | 855 +- .../openapi/apis/StorageV1beta1Api.java | 2203 - .../openapi/apis/StoragemigrationApi.java | 28 +- ...ha1Api.java => StoragemigrationV1Api.java} | 1647 +- .../apis/StoragemigrationV1beta1Api.java | 45 +- .../client/openapi/apis/VersionApi.java | 25 +- .../client/openapi/apis/WellKnownApi.java | 25 +- .../client/openapi/auth/ApiKeyAuth.java | 25 +- .../client/openapi/auth/Authentication.java | 25 +- .../client/openapi/auth/HttpBasicAuth.java | 23 +- .../client/openapi/auth/HttpBearerAuth.java | 25 +- .../openapi/models/AbstractOpenApiSchema.java | 25 +- ...missionregistrationV1ServiceReference.java | 26 +- ...sionregistrationV1WebhookClientConfig.java | 26 +- .../ApiextensionsV1ServiceReference.java | 26 +- .../ApiextensionsV1WebhookClientConfig.java | 26 +- .../ApiregistrationV1ServiceReference.java | 26 +- .../models/AuthenticationV1TokenRequest.java | 26 +- .../openapi/models/CoreV1EndpointPort.java | 26 +- .../client/openapi/models/CoreV1Event.java | 26 +- .../openapi/models/CoreV1EventList.java | 26 +- .../openapi/models/CoreV1EventSeries.java | 26 +- .../openapi/models/CoreV1ResourceClaim.java | 26 +- .../models/DiscoveryV1EndpointPort.java | 26 +- .../client/openapi/models/EventsV1Event.java | 26 +- .../openapi/models/EventsV1EventList.java | 26 +- .../openapi/models/EventsV1EventSeries.java | 26 +- .../openapi/models/FlowcontrolV1Subject.java | 26 +- .../client/openapi/models/RbacV1Subject.java | 42 +- .../models/ResourceV1ResourceClaim.java | 51 +- .../openapi/models/StorageV1TokenRequest.java | 26 +- .../client/openapi/models/V1APIGroup.java | 26 +- .../client/openapi/models/V1APIGroupList.java | 26 +- .../client/openapi/models/V1APIResource.java | 26 +- .../openapi/models/V1APIResourceList.java | 26 +- .../client/openapi/models/V1APIService.java | 26 +- .../openapi/models/V1APIServiceCondition.java | 26 +- .../openapi/models/V1APIServiceList.java | 26 +- .../openapi/models/V1APIServiceSpec.java | 26 +- .../openapi/models/V1APIServiceStatus.java | 26 +- .../client/openapi/models/V1APIVersions.java | 26 +- .../V1AWSElasticBlockStoreVolumeSource.java | 26 +- .../client/openapi/models/V1Affinity.java | 26 +- .../openapi/models/V1AggregationRule.java | 30 +- .../models/V1AllocatedDeviceStatus.java | 26 +- .../openapi/models/V1AllocationResult.java | 26 +- .../openapi/models/V1AppArmorProfile.java | 26 +- .../openapi/models/V1ApplyConfiguration.java | 26 +- .../openapi/models/V1AttachedVolume.java | 26 +- .../openapi/models/V1AuditAnnotation.java | 26 +- .../models/V1AzureDiskVolumeSource.java | 26 +- .../V1AzureFilePersistentVolumeSource.java | 26 +- .../models/V1AzureFileVolumeSource.java | 26 +- .../client/openapi/models/V1Binding.java | 26 +- .../models/V1BoundObjectReference.java | 30 +- .../openapi/models/V1CELDeviceSelector.java | 30 +- .../client/openapi/models/V1CSIDriver.java | 26 +- .../openapi/models/V1CSIDriverList.java | 26 +- .../openapi/models/V1CSIDriverSpec.java | 30 +- .../client/openapi/models/V1CSINode.java | 64 +- .../openapi/models/V1CSINodeDriver.java | 26 +- .../client/openapi/models/V1CSINodeList.java | 26 +- .../client/openapi/models/V1CSINodeSpec.java | 26 +- .../openapi/models/V1CSINodeStatus.java | 231 + .../models/V1CSIPersistentVolumeSource.java | 26 +- .../openapi/models/V1CSIStorageCapacity.java | 26 +- .../models/V1CSIStorageCapacityList.java | 26 +- .../openapi/models/V1CSIVolumeSource.java | 26 +- .../client/openapi/models/V1Capabilities.java | 26 +- .../models/V1CapacityRequestPolicy.java | 26 +- .../models/V1CapacityRequestPolicyRange.java | 30 +- .../models/V1CapacityRequirements.java | 26 +- .../V1CephFSPersistentVolumeSource.java | 26 +- .../openapi/models/V1CephFSVolumeSource.java | 26 +- .../models/V1CertificateSigningRequest.java | 26 +- .../V1CertificateSigningRequestCondition.java | 26 +- .../V1CertificateSigningRequestList.java | 26 +- .../V1CertificateSigningRequestSpec.java | 26 +- .../V1CertificateSigningRequestStatus.java | 26 +- .../V1CinderPersistentVolumeSource.java | 26 +- .../openapi/models/V1CinderVolumeSource.java | 26 +- .../openapi/models/V1ClientIPConfig.java | 26 +- .../client/openapi/models/V1ClusterRole.java | 30 +- .../openapi/models/V1ClusterRoleBinding.java | 30 +- .../models/V1ClusterRoleBindingList.java | 26 +- .../openapi/models/V1ClusterRoleList.java | 26 +- ...tBundle.java => V1ClusterTrustBundle.java} | 102 +- ...ist.java => V1ClusterTrustBundleList.java} | 100 +- .../V1ClusterTrustBundleProjection.java | 59 +- ...pec.java => V1ClusterTrustBundleSpec.java} | 80 +- .../openapi/models/V1ComponentCondition.java | 26 +- .../openapi/models/V1ComponentStatus.java | 26 +- .../openapi/models/V1ComponentStatusList.java | 26 +- .../client/openapi/models/V1Condition.java | 26 +- .../client/openapi/models/V1ConfigMap.java | 30 +- .../openapi/models/V1ConfigMapEnvSource.java | 30 +- .../models/V1ConfigMapKeySelector.java | 30 +- .../openapi/models/V1ConfigMapList.java | 26 +- .../models/V1ConfigMapNodeConfigSource.java | 26 +- .../openapi/models/V1ConfigMapProjection.java | 26 +- .../models/V1ConfigMapVolumeSource.java | 57 +- .../client/openapi/models/V1Container.java | 26 +- .../V1ContainerExtendedResourceRequest.java | 26 +- .../openapi/models/V1ContainerImage.java | 26 +- .../openapi/models/V1ContainerPort.java | 26 +- .../models/V1ContainerResizePolicy.java | 26 +- .../models/V1ContainerRestartRule.java | 26 +- .../V1ContainerRestartRuleOnExitCodes.java | 26 +- .../openapi/models/V1ContainerState.java | 26 +- .../models/V1ContainerStateRunning.java | 26 +- .../models/V1ContainerStateTerminated.java | 26 +- .../models/V1ContainerStateWaiting.java | 26 +- .../openapi/models/V1ContainerStatus.java | 26 +- .../openapi/models/V1ContainerUser.java | 26 +- .../openapi/models/V1ControllerRevision.java | 48 +- .../models/V1ControllerRevisionList.java | 26 +- .../client/openapi/models/V1Counter.java | 26 +- .../client/openapi/models/V1CounterSet.java | 26 +- .../client/openapi/models/V1CronJob.java | 26 +- .../client/openapi/models/V1CronJobList.java | 26 +- .../client/openapi/models/V1CronJobSpec.java | 26 +- .../openapi/models/V1CronJobStatus.java | 26 +- .../models/V1CrossVersionObjectReference.java | 26 +- .../V1CustomResourceColumnDefinition.java | 26 +- .../models/V1CustomResourceConversion.java | 26 +- .../models/V1CustomResourceDefinition.java | 26 +- .../V1CustomResourceDefinitionCondition.java | 26 +- .../V1CustomResourceDefinitionList.java | 26 +- .../V1CustomResourceDefinitionNames.java | 26 +- .../V1CustomResourceDefinitionSpec.java | 26 +- .../V1CustomResourceDefinitionStatus.java | 26 +- .../V1CustomResourceDefinitionVersion.java | 26 +- .../V1CustomResourceSubresourceScale.java | 26 +- .../models/V1CustomResourceSubresources.java | 26 +- .../models/V1CustomResourceValidation.java | 26 +- .../openapi/models/V1DaemonEndpoint.java | 26 +- .../client/openapi/models/V1DaemonSet.java | 51 +- .../openapi/models/V1DaemonSetCondition.java | 59 +- .../openapi/models/V1DaemonSetList.java | 26 +- .../openapi/models/V1DaemonSetSpec.java | 26 +- .../openapi/models/V1DaemonSetStatus.java | 26 +- .../models/V1DaemonSetUpdateStrategy.java | 26 +- .../openapi/models/V1DeleteOptions.java | 26 +- .../client/openapi/models/V1Deployment.java | 51 +- .../openapi/models/V1DeploymentCondition.java | 59 +- .../openapi/models/V1DeploymentList.java | 26 +- .../openapi/models/V1DeploymentSpec.java | 26 +- .../openapi/models/V1DeploymentStatus.java | 26 +- .../openapi/models/V1DeploymentStrategy.java | 26 +- .../client/openapi/models/V1Device.java | 68 +- .../V1DeviceAllocationConfiguration.java | 26 +- .../models/V1DeviceAllocationResult.java | 26 +- .../openapi/models/V1DeviceAttribute.java | 26 +- .../openapi/models/V1DeviceCapacity.java | 26 +- .../client/openapi/models/V1DeviceClaim.java | 26 +- .../models/V1DeviceClaimConfiguration.java | 26 +- .../client/openapi/models/V1DeviceClass.java | 51 +- .../models/V1DeviceClassConfiguration.java | 26 +- .../openapi/models/V1DeviceClassList.java | 26 +- .../openapi/models/V1DeviceClassSpec.java | 30 +- .../openapi/models/V1DeviceConstraint.java | 26 +- .../models/V1DeviceCounterConsumption.java | 73 +- .../models/V1DeviceDerivedAttribute.java | 246 + .../openapi/models/V1DeviceRequest.java | 26 +- .../V1DeviceRequestAllocationResult.java | 69 +- .../openapi/models/V1DeviceSelector.java | 26 +- .../openapi/models/V1DeviceSubRequest.java | 80 +- .../client/openapi/models/V1DeviceTaint.java | 26 +- .../openapi/models/V1DeviceTaintRule.java | 340 + .../openapi/models/V1DeviceTaintRuleList.java | 326 + .../openapi/models/V1DeviceTaintRuleSpec.java | 248 + ...atus.java => V1DeviceTaintRuleStatus.java} | 84 +- .../openapi/models/V1DeviceTaintSelector.java | 269 + .../openapi/models/V1DeviceToleration.java | 26 +- .../models/V1DownwardAPIProjection.java | 26 +- .../models/V1DownwardAPIVolumeFile.java | 59 +- .../models/V1DownwardAPIVolumeSource.java | 57 +- .../models/V1EmptyDirVolumeSource.java | 57 +- .../client/openapi/models/V1Endpoint.java | 26 +- .../openapi/models/V1EndpointAddress.java | 26 +- .../openapi/models/V1EndpointConditions.java | 26 +- .../openapi/models/V1EndpointHints.java | 26 +- .../openapi/models/V1EndpointSlice.java | 26 +- .../openapi/models/V1EndpointSliceList.java | 26 +- .../openapi/models/V1EndpointSubset.java | 26 +- .../client/openapi/models/V1Endpoints.java | 26 +- .../openapi/models/V1EndpointsList.java | 26 +- .../openapi/models/V1EnvFromSource.java | 26 +- .../client/openapi/models/V1EnvVar.java | 26 +- .../client/openapi/models/V1EnvVarSource.java | 26 +- .../openapi/models/V1EphemeralContainer.java | 26 +- .../models/V1EphemeralVolumeSource.java | 26 +- .../client/openapi/models/V1EventSource.java | 26 +- .../client/openapi/models/V1Eviction.java | 26 +- .../openapi/models/V1EvictionResponder.java | 243 + .../openapi/models/V1ExactDeviceRequest.java | 80 +- .../client/openapi/models/V1ExecAction.java | 26 +- .../V1ExemptPriorityLevelConfiguration.java | 26 +- .../openapi/models/V1ExpressionWarning.java | 26 +- .../models/V1ExternalDocumentation.java | 26 +- .../openapi/models/V1FCVolumeSource.java | 26 +- .../models/V1FieldSelectorAttributes.java | 26 +- .../models/V1FieldSelectorRequirement.java | 26 +- .../openapi/models/V1FileKeySelector.java | 26 +- .../models/V1FlexPersistentVolumeSource.java | 26 +- .../openapi/models/V1FlexVolumeSource.java | 26 +- .../openapi/models/V1FlockerVolumeSource.java | 26 +- .../models/V1FlowDistinguisherMethod.java | 26 +- .../client/openapi/models/V1FlowSchema.java | 51 +- .../openapi/models/V1FlowSchemaCondition.java | 51 +- .../openapi/models/V1FlowSchemaList.java | 26 +- .../openapi/models/V1FlowSchemaSpec.java | 26 +- .../openapi/models/V1FlowSchemaStatus.java | 26 +- .../client/openapi/models/V1ForNode.java | 26 +- .../client/openapi/models/V1ForZone.java | 26 +- .../V1GCEPersistentDiskVolumeSource.java | 26 +- .../client/openapi/models/V1GRPCAction.java | 62 +- .../openapi/models/V1GitRepoVolumeSource.java | 26 +- .../V1GlusterfsPersistentVolumeSource.java | 26 +- .../models/V1GlusterfsVolumeSource.java | 26 +- .../openapi/models/V1GroupResource.java | 26 +- .../client/openapi/models/V1GroupSubject.java | 26 +- .../models/V1GroupVersionForDiscovery.java | 26 +- .../openapi/models/V1GroupVersionKind.java | 119 +- .../openapi/models/V1HTTPGetAction.java | 60 +- .../client/openapi/models/V1HTTPHeader.java | 26 +- .../openapi/models/V1HTTPIngressPath.java | 26 +- .../models/V1HTTPIngressRuleValue.java | 26 +- .../models/V1HorizontalPodAutoscaler.java | 26 +- .../models/V1HorizontalPodAutoscalerList.java | 26 +- .../models/V1HorizontalPodAutoscalerSpec.java | 26 +- .../V1HorizontalPodAutoscalerStatus.java | 26 +- .../client/openapi/models/V1HostAlias.java | 26 +- .../client/openapi/models/V1HostIP.java | 26 +- .../models/V1HostPathVolumeSource.java | 26 +- .../client/openapi/models/V1IPAddress.java | 26 +- .../openapi/models/V1IPAddressList.java | 26 +- .../openapi/models/V1IPAddressSpec.java | 26 +- .../client/openapi/models/V1IPBlock.java | 26 +- .../models/V1ISCSIPersistentVolumeSource.java | 26 +- .../openapi/models/V1ISCSIVolumeSource.java | 26 +- .../openapi/models/V1ImageVolumeSource.java | 26 +- .../openapi/models/V1ImageVolumeStatus.java | 26 +- .../client/openapi/models/V1Ingress.java | 26 +- .../openapi/models/V1IngressBackend.java | 26 +- .../client/openapi/models/V1IngressClass.java | 26 +- .../openapi/models/V1IngressClassList.java | 26 +- .../V1IngressClassParametersReference.java | 26 +- .../openapi/models/V1IngressClassSpec.java | 26 +- .../client/openapi/models/V1IngressList.java | 26 +- .../models/V1IngressLoadBalancerIngress.java | 26 +- .../models/V1IngressLoadBalancerStatus.java | 26 +- .../openapi/models/V1IngressPortStatus.java | 26 +- .../client/openapi/models/V1IngressRule.java | 26 +- .../models/V1IngressServiceBackend.java | 26 +- .../client/openapi/models/V1IngressSpec.java | 26 +- .../openapi/models/V1IngressStatus.java | 26 +- .../client/openapi/models/V1IngressTLS.java | 26 +- .../client/openapi/models/V1JSONPatch.java | 26 +- .../openapi/models/V1JSONSchemaProps.java | 26 +- .../client/openapi/models/V1Job.java | 26 +- .../client/openapi/models/V1JobCondition.java | 26 +- .../client/openapi/models/V1JobList.java | 26 +- .../models/V1JobSchedulingConfiguration.java | 327 + .../client/openapi/models/V1JobSpec.java | 62 +- .../client/openapi/models/V1JobStatus.java | 30 +- .../openapi/models/V1JobTemplateSpec.java | 26 +- .../client/openapi/models/V1KeyToPath.java | 59 +- .../openapi/models/V1LabelSelector.java | 26 +- .../models/V1LabelSelectorAttributes.java | 26 +- .../models/V1LabelSelectorRequirement.java | 26 +- .../client/openapi/models/V1Lease.java | 26 +- .../client/openapi/models/V1LeaseList.java | 26 +- .../client/openapi/models/V1LeaseSpec.java | 34 +- .../client/openapi/models/V1Lifecycle.java | 26 +- .../openapi/models/V1LifecycleHandler.java | 26 +- .../client/openapi/models/V1LimitRange.java | 26 +- .../openapi/models/V1LimitRangeItem.java | 26 +- .../openapi/models/V1LimitRangeList.java | 26 +- .../openapi/models/V1LimitRangeSpec.java | 26 +- .../openapi/models/V1LimitResponse.java | 26 +- .../V1LimitedPriorityLevelConfiguration.java | 51 +- .../openapi/models/V1LinuxContainerUser.java | 26 +- .../client/openapi/models/V1ListMeta.java | 29 +- .../openapi/models/V1LoadBalancerIngress.java | 26 +- .../openapi/models/V1LoadBalancerStatus.java | 26 +- .../models/V1LocalObjectReference.java | 26 +- .../models/V1LocalSubjectAccessReview.java | 26 +- .../openapi/models/V1LocalVolumeSource.java | 26 +- .../openapi/models/V1ManagedFieldsEntry.java | 26 +- .../openapi/models/V1MatchCondition.java | 26 +- .../openapi/models/V1MatchResources.java | 26 +- .../openapi/models/V1ModifyVolumeStatus.java | 26 +- .../models/V1MutatingAdmissionPolicy.java | 26 +- .../V1MutatingAdmissionPolicyBinding.java | 26 +- .../V1MutatingAdmissionPolicyBindingList.java | 26 +- .../V1MutatingAdmissionPolicyBindingSpec.java | 26 +- .../models/V1MutatingAdmissionPolicyList.java | 26 +- .../models/V1MutatingAdmissionPolicySpec.java | 26 +- .../openapi/models/V1MutatingWebhook.java | 26 +- .../V1MutatingWebhookConfiguration.java | 26 +- .../V1MutatingWebhookConfigurationList.java | 26 +- .../client/openapi/models/V1Mutation.java | 26 +- .../openapi/models/V1NFSVolumeSource.java | 26 +- .../models/V1NamedRuleWithOperations.java | 26 +- .../client/openapi/models/V1Namespace.java | 26 +- .../openapi/models/V1NamespaceCondition.java | 26 +- .../openapi/models/V1NamespaceList.java | 26 +- .../openapi/models/V1NamespaceSpec.java | 26 +- .../openapi/models/V1NamespaceStatus.java | 26 +- .../openapi/models/V1NetworkDeviceData.java | 26 +- .../openapi/models/V1NetworkPolicy.java | 26 +- .../models/V1NetworkPolicyEgressRule.java | 26 +- .../models/V1NetworkPolicyIngressRule.java | 26 +- .../openapi/models/V1NetworkPolicyList.java | 26 +- .../openapi/models/V1NetworkPolicyPeer.java | 26 +- .../openapi/models/V1NetworkPolicyPort.java | 26 +- .../openapi/models/V1NetworkPolicySpec.java | 26 +- .../client/openapi/models/V1Node.java | 26 +- .../client/openapi/models/V1NodeAddress.java | 26 +- .../client/openapi/models/V1NodeAffinity.java | 26 +- .../V1NodeAllocatableMappedResources.java | 247 + ...ing.java => V1NodeAllocatableMapping.java} | 162 +- .../models/V1NodeAllocatableOverhead.java | 240 + .../V1NodeAllocatableOverheadResources.java | 277 + .../models/V1NodeAllocatableResource.java | 243 + .../V1NodeAllocatableResourceClaimStatus.java | 162 +- .../openapi/models/V1NodeCondition.java | 26 +- .../openapi/models/V1NodeConfigSource.java | 26 +- .../openapi/models/V1NodeConfigStatus.java | 26 +- .../openapi/models/V1NodeDaemonEndpoints.java | 26 +- .../client/openapi/models/V1NodeFeatures.java | 26 +- .../client/openapi/models/V1NodeList.java | 26 +- .../models/V1NodePodPreemptionPolicy.java | 220 + .../openapi/models/V1NodeRuntimeHandler.java | 26 +- .../models/V1NodeRuntimeHandlerFeatures.java | 26 +- .../client/openapi/models/V1NodeSelector.java | 26 +- .../models/V1NodeSelectorRequirement.java | 26 +- .../openapi/models/V1NodeSelectorTerm.java | 26 +- .../client/openapi/models/V1NodeSpec.java | 62 +- .../client/openapi/models/V1NodeStatus.java | 26 +- .../openapi/models/V1NodeSwapStatus.java | 26 +- .../openapi/models/V1NodeSystemInfo.java | 57 +- .../models/V1NonResourceAttributes.java | 26 +- .../models/V1NonResourcePolicyRule.java | 26 +- .../openapi/models/V1NonResourceRule.java | 26 +- .../openapi/models/V1ObjectFieldSelector.java | 26 +- .../client/openapi/models/V1ObjectMeta.java | 26 +- .../openapi/models/V1ObjectReference.java | 26 +- .../models/V1OpaqueDeviceConfiguration.java | 26 +- .../client/openapi/models/V1Overhead.java | 26 +- .../openapi/models/V1OwnerReference.java | 26 +- .../client/openapi/models/V1ParamKind.java | 26 +- .../client/openapi/models/V1ParamRef.java | 26 +- .../openapi/models/V1ParentReference.java | 42 +- .../openapi/models/V1PersistentVolume.java | 26 +- .../models/V1PersistentVolumeClaim.java | 26 +- .../V1PersistentVolumeClaimCondition.java | 26 +- .../models/V1PersistentVolumeClaimList.java | 26 +- .../models/V1PersistentVolumeClaimSpec.java | 26 +- .../models/V1PersistentVolumeClaimStatus.java | 62 +- .../V1PersistentVolumeClaimTemplate.java | 26 +- .../V1PersistentVolumeClaimVolumeSource.java | 26 +- .../models/V1PersistentVolumeList.java | 26 +- .../models/V1PersistentVolumeSpec.java | 26 +- .../models/V1PersistentVolumeStatus.java | 26 +- .../V1PhotonPersistentDiskVolumeSource.java | 26 +- .../client/openapi/models/V1Pod.java | 26 +- .../client/openapi/models/V1PodAffinity.java | 26 +- .../openapi/models/V1PodAffinityTerm.java | 26 +- .../openapi/models/V1PodAntiAffinity.java | 26 +- .../models/V1PodCertificateProjection.java | 57 +- .../models/V1PodCertificateRequest.java | 340 + .../models/V1PodCertificateRequestList.java | 326 + .../models/V1PodCertificateRequestSpec.java | 487 + .../models/V1PodCertificateRequestStatus.java | 343 + .../client/openapi/models/V1PodCondition.java | 26 +- .../client/openapi/models/V1PodDNSConfig.java | 26 +- .../openapi/models/V1PodDNSConfigOption.java | 26 +- .../openapi/models/V1PodDisruptionBudget.java | 26 +- .../models/V1PodDisruptionBudgetList.java | 26 +- .../models/V1PodDisruptionBudgetSpec.java | 30 +- .../models/V1PodDisruptionBudgetStatus.java | 26 +- .../V1PodExtendedResourceClaimStatus.java | 26 +- .../openapi/models/V1PodFailurePolicy.java | 26 +- ...odFailurePolicyOnExitCodesRequirement.java | 26 +- ...odFailurePolicyOnPodConditionsPattern.java | 26 +- .../models/V1PodFailurePolicyRule.java | 26 +- .../client/openapi/models/V1PodIP.java | 26 +- .../client/openapi/models/V1PodList.java | 26 +- .../client/openapi/models/V1PodOS.java | 26 +- .../openapi/models/V1PodReadinessGate.java | 26 +- .../openapi/models/V1PodResourceClaim.java | 26 +- .../models/V1PodResourceClaimStatus.java | 26 +- .../openapi/models/V1PodSchedulingGate.java | 26 +- .../openapi/models/V1PodSchedulingGroup.java | 26 +- .../openapi/models/V1PodSecurityContext.java | 30 +- .../client/openapi/models/V1PodSpec.java | 88 +- .../client/openapi/models/V1PodStatus.java | 82 +- .../client/openapi/models/V1PodTemplate.java | 26 +- .../openapi/models/V1PodTemplateList.java | 26 +- .../openapi/models/V1PodTemplateSpec.java | 26 +- .../openapi/models/V1PodVolumeHealth.java | 296 + .../client/openapi/models/V1PolicyRule.java | 46 +- .../models/V1PolicyRulesWithSubjects.java | 26 +- .../client/openapi/models/V1PortStatus.java | 26 +- .../models/V1PortworxVolumeSource.java | 26 +- .../openapi/models/V1Preconditions.java | 26 +- .../models/V1PreferredSchedulingTerm.java | 26 +- .../openapi/models/V1PriorityClass.java | 26 +- .../openapi/models/V1PriorityClassList.java | 26 +- .../models/V1PriorityLevelConfiguration.java | 51 +- ...V1PriorityLevelConfigurationCondition.java | 51 +- .../V1PriorityLevelConfigurationList.java | 26 +- ...V1PriorityLevelConfigurationReference.java | 26 +- .../V1PriorityLevelConfigurationSpec.java | 26 +- .../V1PriorityLevelConfigurationStatus.java | 26 +- .../client/openapi/models/V1Probe.java | 26 +- .../models/V1ProjectedVolumeSource.java | 57 +- .../models/V1QueuingConfiguration.java | 26 +- .../openapi/models/V1QuobyteVolumeSource.java | 26 +- .../models/V1RBDPersistentVolumeSource.java | 26 +- .../openapi/models/V1RBDVolumeSource.java | 26 +- .../client/openapi/models/V1ReplicaSet.java | 51 +- .../openapi/models/V1ReplicaSetCondition.java | 59 +- .../openapi/models/V1ReplicaSetList.java | 26 +- .../openapi/models/V1ReplicaSetSpec.java | 26 +- .../openapi/models/V1ReplicaSetStatus.java | 26 +- .../models/V1ReplicationController.java | 26 +- .../V1ReplicationControllerCondition.java | 26 +- .../models/V1ReplicationControllerList.java | 26 +- .../models/V1ReplicationControllerSpec.java | 26 +- .../models/V1ReplicationControllerStatus.java | 26 +- .../openapi/models/V1ResourceAttributes.java | 26 +- .../V1ResourceClaimConsumerReference.java | 26 +- .../openapi/models/V1ResourceClaimList.java | 26 +- .../openapi/models/V1ResourceClaimSpec.java | 26 +- .../openapi/models/V1ResourceClaimStatus.java | 26 +- .../models/V1ResourceClaimTemplate.java | 51 +- .../models/V1ResourceClaimTemplateList.java | 26 +- .../models/V1ResourceClaimTemplateSpec.java | 51 +- .../models/V1ResourceFieldSelector.java | 26 +- .../openapi/models/V1ResourceHealth.java | 26 +- .../openapi/models/V1ResourcePolicyRule.java | 26 +- .../client/openapi/models/V1ResourcePool.java | 30 +- .../openapi/models/V1ResourceQuota.java | 26 +- .../openapi/models/V1ResourceQuotaList.java | 26 +- .../openapi/models/V1ResourceQuotaSpec.java | 26 +- .../openapi/models/V1ResourceQuotaStatus.java | 26 +- .../models/V1ResourceRequirements.java | 26 +- .../client/openapi/models/V1ResourceRule.java | 26 +- .../openapi/models/V1ResourceSlice.java | 26 +- .../openapi/models/V1ResourceSliceList.java | 26 +- .../openapi/models/V1ResourceSliceSpec.java | 101 +- .../openapi/models/V1ResourceStatus.java | 30 +- .../client/openapi/models/V1Role.java | 30 +- .../client/openapi/models/V1RoleBinding.java | 30 +- .../openapi/models/V1RoleBindingList.java | 26 +- .../client/openapi/models/V1RoleList.java | 26 +- .../client/openapi/models/V1RoleRef.java | 38 +- .../models/V1RollingUpdateDaemonSet.java | 26 +- .../models/V1RollingUpdateDeployment.java | 26 +- .../V1RollingUpdateStatefulSetStrategy.java | 26 +- .../openapi/models/V1RuleWithOperations.java | 26 +- .../client/openapi/models/V1RuntimeClass.java | 26 +- .../openapi/models/V1RuntimeClassList.java | 26 +- .../openapi/models/V1SELinuxOptions.java | 26 +- .../client/openapi/models/V1Scale.java | 26 +- .../V1ScaleIOPersistentVolumeSource.java | 26 +- .../openapi/models/V1ScaleIOVolumeSource.java | 26 +- .../client/openapi/models/V1ScaleSpec.java | 26 +- .../client/openapi/models/V1ScaleStatus.java | 26 +- .../client/openapi/models/V1Scheduling.java | 26 +- .../openapi/models/V1ScopeSelector.java | 26 +- .../V1ScopedResourceSelectorRequirement.java | 26 +- .../openapi/models/V1SeccompProfile.java | 26 +- .../client/openapi/models/V1Secret.java | 29 +- .../openapi/models/V1SecretEnvSource.java | 26 +- .../openapi/models/V1SecretKeySelector.java | 26 +- .../client/openapi/models/V1SecretList.java | 26 +- .../openapi/models/V1SecretProjection.java | 26 +- .../openapi/models/V1SecretReference.java | 26 +- .../openapi/models/V1SecretVolumeSource.java | 57 +- .../openapi/models/V1SecurityContext.java | 26 +- .../openapi/models/V1SelectableField.java | 26 +- .../models/V1SelfSubjectAccessReview.java | 26 +- .../models/V1SelfSubjectAccessReviewSpec.java | 26 +- .../openapi/models/V1SelfSubjectReview.java | 26 +- .../models/V1SelfSubjectReviewStatus.java | 26 +- .../models/V1SelfSubjectRulesReview.java | 26 +- .../models/V1SelfSubjectRulesReviewSpec.java | 26 +- .../models/V1ServerAddressByClientCIDR.java | 26 +- .../client/openapi/models/V1Service.java | 26 +- .../openapi/models/V1ServiceAccount.java | 26 +- .../openapi/models/V1ServiceAccountList.java | 26 +- .../models/V1ServiceAccountSubject.java | 26 +- .../V1ServiceAccountTokenProjection.java | 59 +- .../openapi/models/V1ServiceBackendPort.java | 26 +- .../client/openapi/models/V1ServiceCIDR.java | 26 +- .../openapi/models/V1ServiceCIDRList.java | 26 +- .../openapi/models/V1ServiceCIDRSpec.java | 30 +- .../openapi/models/V1ServiceCIDRStatus.java | 26 +- .../client/openapi/models/V1ServiceList.java | 26 +- .../client/openapi/models/V1ServicePort.java | 26 +- .../client/openapi/models/V1ServiceSpec.java | 26 +- .../openapi/models/V1ServiceStatus.java | 26 +- .../models/V1SessionAffinityConfig.java | 26 +- .../client/openapi/models/V1ShardInfo.java | 26 +- .../client/openapi/models/V1SleepAction.java | 26 +- .../client/openapi/models/V1StatefulSet.java | 51 +- .../models/V1StatefulSetCondition.java | 59 +- .../openapi/models/V1StatefulSetList.java | 26 +- .../openapi/models/V1StatefulSetOrdinals.java | 26 +- ...tPersistentVolumeClaimRetentionPolicy.java | 26 +- .../openapi/models/V1StatefulSetSpec.java | 26 +- .../openapi/models/V1StatefulSetStatus.java | 26 +- .../models/V1StatefulSetUpdateStrategy.java | 26 +- .../client/openapi/models/V1Status.java | 29 +- .../client/openapi/models/V1StatusCause.java | 26 +- .../openapi/models/V1StatusDetails.java | 26 +- .../client/openapi/models/V1StorageClass.java | 26 +- .../openapi/models/V1StorageClassList.java | 26 +- .../openapi/models/V1StorageHealth.java | 268 + .../models/V1StorageHealthCondition.java | 364 + .../V1StorageOSPersistentVolumeSource.java | 26 +- .../models/V1StorageOSVolumeSource.java | 26 +- ...DR.java => V1StorageVersionMigration.java} | 114 +- .../models/V1StorageVersionMigrationList.java | 326 + .../models/V1StorageVersionMigrationSpec.java | 216 + .../V1StorageVersionMigrationStatus.java | 261 + .../openapi/models/V1SubjectAccessReview.java | 26 +- .../models/V1SubjectAccessReviewSpec.java | 26 +- .../models/V1SubjectAccessReviewStatus.java | 26 +- .../models/V1SubjectRulesReviewStatus.java | 26 +- .../openapi/models/V1SuccessPolicy.java | 26 +- .../openapi/models/V1SuccessPolicyRule.java | 26 +- .../client/openapi/models/V1Sysctl.java | 26 +- .../openapi/models/V1TCPSocketAction.java | 26 +- .../client/openapi/models/V1Taint.java | 26 +- .../openapi/models/V1TokenRequestSpec.java | 69 +- .../openapi/models/V1TokenRequestStatus.java | 26 +- .../client/openapi/models/V1TokenReview.java | 26 +- .../openapi/models/V1TokenReviewSpec.java | 26 +- .../openapi/models/V1TokenReviewStatus.java | 26 +- .../client/openapi/models/V1Toleration.java | 26 +- .../V1TopologySelectorLabelRequirement.java | 26 +- .../models/V1TopologySelectorTerm.java | 26 +- .../models/V1TopologySpreadConstraint.java | 26 +- .../client/openapi/models/V1TypeChecking.java | 26 +- .../models/V1TypedLocalObjectReference.java | 26 +- .../models/V1TypedObjectReference.java | 26 +- .../models/V1UncountedTerminatedPods.java | 26 +- .../client/openapi/models/V1UserInfo.java | 26 +- .../client/openapi/models/V1UserSubject.java | 26 +- .../models/V1ValidatingAdmissionPolicy.java | 26 +- .../V1ValidatingAdmissionPolicyBinding.java | 26 +- ...1ValidatingAdmissionPolicyBindingList.java | 26 +- ...1ValidatingAdmissionPolicyBindingSpec.java | 26 +- .../V1ValidatingAdmissionPolicyList.java | 26 +- .../V1ValidatingAdmissionPolicySpec.java | 26 +- .../V1ValidatingAdmissionPolicyStatus.java | 26 +- .../openapi/models/V1ValidatingWebhook.java | 26 +- .../V1ValidatingWebhookConfiguration.java | 26 +- .../V1ValidatingWebhookConfigurationList.java | 26 +- .../client/openapi/models/V1Validation.java | 26 +- .../openapi/models/V1ValidationRule.java | 26 +- .../client/openapi/models/V1Variable.java | 26 +- .../client/openapi/models/V1Volume.java | 26 +- .../openapi/models/V1VolumeAttachment.java | 26 +- .../models/V1VolumeAttachmentList.java | 26 +- .../models/V1VolumeAttachmentSource.java | 26 +- .../models/V1VolumeAttachmentSpec.java | 26 +- .../models/V1VolumeAttachmentStatus.java | 26 +- .../models/V1VolumeAttributesClass.java | 30 +- .../models/V1VolumeAttributesClassList.java | 26 +- .../client/openapi/models/V1VolumeDevice.java | 26 +- .../client/openapi/models/V1VolumeError.java | 26 +- .../models/V1VolumeHealthCondition.java | 276 + .../openapi/models/V1VolumeHealthStatus.java | 259 + .../client/openapi/models/V1VolumeMount.java | 77 +- .../openapi/models/V1VolumeMountStatus.java | 26 +- .../openapi/models/V1VolumeNodeAffinity.java | 26 +- .../openapi/models/V1VolumeNodeResources.java | 26 +- .../openapi/models/V1VolumeProjection.java | 26 +- .../models/V1VolumeResourceRequirements.java | 26 +- .../client/openapi/models/V1VolumeStatus.java | 26 +- .../V1VsphereVirtualDiskVolumeSource.java | 26 +- .../client/openapi/models/V1WatchEvent.java | 26 +- .../openapi/models/V1WebhookConversion.java | 26 +- .../models/V1WeightedPodAffinityTerm.java | 26 +- .../V1WindowsSecurityContextOptions.java | 26 +- .../models/V1alpha1ApplyConfiguration.java | 26 +- .../openapi/models/V1alpha1Eviction.java | 340 + ...essList.java => V1alpha1EvictionList.java} | 108 +- .../models/V1alpha1EvictionPodReference.java | 246 + .../models/V1alpha1EvictionRequest.java | 340 + .../models/V1alpha1EvictionRequestList.java | 326 + .../V1alpha1EvictionRequestPodReference.java | 246 + .../models/V1alpha1EvictionRequestSpec.java | 276 + .../models/V1alpha1EvictionRequestStatus.java | 258 + .../models/V1alpha1EvictionRequestTarget.java | 211 + ...essSpec.java => V1alpha1EvictionSpec.java} | 114 +- .../models/V1alpha1EvictionStatus.java | 408 + .../models/V1alpha1EvictionTarget.java | 211 + .../openapi/models/V1alpha1JSONPatch.java | 26 +- .../models/V1alpha1MatchCondition.java | 26 +- .../models/V1alpha1MatchResources.java | 26 +- .../V1alpha1MutatingAdmissionPolicy.java | 26 +- ...1alpha1MutatingAdmissionPolicyBinding.java | 26 +- ...ha1MutatingAdmissionPolicyBindingList.java | 26 +- ...ha1MutatingAdmissionPolicyBindingSpec.java | 26 +- .../V1alpha1MutatingAdmissionPolicyList.java | 26 +- .../V1alpha1MutatingAdmissionPolicySpec.java | 26 +- .../openapi/models/V1alpha1Mutation.java | 26 +- .../V1alpha1NamedRuleWithOperations.java | 26 +- .../openapi/models/V1alpha1ParamKind.java | 26 +- .../openapi/models/V1alpha1ParamRef.java | 26 +- .../openapi/models/V1alpha1Requester.java | 246 + .../models/V1alpha1ResponderStatus.java | 355 + .../models/V1alpha1ServerStorageVersion.java | 26 +- .../models/V1alpha1StorageVersion.java | 26 +- .../V1alpha1StorageVersionCondition.java | 26 +- .../models/V1alpha1StorageVersionList.java | 26 +- .../models/V1alpha1StorageVersionStatus.java | 26 +- .../models/V1alpha1TargetResponder.java | 273 + .../openapi/models/V1alpha1Variable.java | 26 +- .../models/V1alpha2LeaseCandidate.java | 26 +- .../models/V1alpha2LeaseCandidateList.java | 26 +- .../models/V1alpha2LeaseCandidateSpec.java | 50 +- .../openapi/models/V1alpha2WorkloadSpec.java | 264 - .../V1alpha3CompositeDisruptionMode.java | 233 + ...V1alpha3CompositeGangSchedulingPolicy.java | 213 + .../models/V1alpha3CompositePodGroup.java | 340 + .../models/V1alpha3CompositePodGroupList.java | 326 + ...ompositePodGroupSchedulingConstraints.java | 231 + ...pha3CompositePodGroupSchedulingPolicy.java | 238 + .../models/V1alpha3CompositePodGroupSpec.java | 427 + .../V1alpha3CompositePodGroupStatus.java | 231 + .../V1alpha3CompositePodGroupTemplate.java | 498 + .../openapi/models/V1alpha3DeviceTaint.java | 26 +- .../models/V1alpha3DeviceTaintRule.java | 26 +- .../models/V1alpha3DeviceTaintRuleList.java | 26 +- .../models/V1alpha3DeviceTaintRuleSpec.java | 26 +- .../models/V1alpha3DeviceTaintRuleStatus.java | 26 +- .../models/V1alpha3DeviceTaintSelector.java | 26 +- ...RSpec.java => V1alpha3DisruptionMode.java} | 141 +- ...java => V1alpha3GangSchedulingPolicy.java} | 80 +- .../models/V1alpha3PartitionTypeStatus.java | 300 + ...ha2PodGroup.java => V1alpha3PodGroup.java} | 112 +- ...oupList.java => V1alpha3PodGroupList.java} | 100 +- ...ava => V1alpha3PodGroupResourceClaim.java} | 96 +- ... V1alpha3PodGroupResourceClaimStatus.java} | 88 +- ...1alpha3PodGroupSchedulingConstraints.java} | 90 +- ... => V1alpha3PodGroupSchedulingPolicy.java} | 96 +- ...oupSpec.java => V1alpha3PodGroupSpec.java} | 256 +- ...tatus.java => V1alpha3PodGroupStatus.java} | 100 +- ...ate.java => V1alpha3PodGroupTemplate.java} | 198 +- .../openapi/models/V1alpha3PoolStatus.java | 114 +- .../V1alpha3ResourcePoolStatusRequest.java | 26 +- ...V1alpha3ResourcePoolStatusRequestList.java | 26 +- ...V1alpha3ResourcePoolStatusRequestSpec.java | 62 +- ...alpha3ResourcePoolStatusRequestStatus.java | 26 +- .../V1alpha3ShareableCapacityStatus.java | 307 + .../V1alpha3ShareableSummaryStatus.java | 292 + ...t.java => V1alpha3TopologyConstraint.java} | 80 +- ...=> V1alpha3TypedLocalObjectReference.java} | 96 +- ...ha2Workload.java => V1alpha3Workload.java} | 98 +- ...oadList.java => V1alpha3WorkloadList.java} | 100 +- ...1alpha3WorkloadPodGroupDisruptionMode.java | 233 + ...3WorkloadPodGroupGangSchedulingPolicy.java | 206 + ...V1alpha3WorkloadPodGroupResourceClaim.java | 276 + ...WorkloadPodGroupSchedulingConstraints.java | 231 + ...lpha3WorkloadPodGroupSchedulingPolicy.java | 238 + ...ce.java => V1alpha3WorkloadReference.java} | 122 +- .../openapi/models/V1alpha3WorkloadSpec.java | 313 + .../models/V1beta1AllocatedDeviceStatus.java | 26 +- .../models/V1beta1AllocationResult.java | 26 +- .../models/V1beta1ApplyConfiguration.java | 26 +- .../openapi/models/V1beta1BasicDevice.java | 68 +- .../models/V1beta1CELDeviceSelector.java | 30 +- .../models/V1beta1CapacityRequestPolicy.java | 26 +- .../V1beta1CapacityRequestPolicyRange.java | 30 +- .../models/V1beta1CapacityRequirements.java | 26 +- .../models/V1beta1ClusterTrustBundle.java | 30 +- .../models/V1beta1ClusterTrustBundleList.java | 26 +- .../models/V1beta1ClusterTrustBundleSpec.java | 26 +- .../V1beta1CompositeDisruptionMode.java | 233 + .../V1beta1CompositeGangSchedulingPolicy.java | 213 + ...ompositePodGroupSchedulingConstraints.java | 231 + ...eta1CompositePodGroupSchedulingPolicy.java | 238 + .../V1beta1CompositePodGroupTemplate.java | 498 + .../client/openapi/models/V1beta1Counter.java | 26 +- .../openapi/models/V1beta1CounterSet.java | 26 +- .../client/openapi/models/V1beta1Device.java | 26 +- .../V1beta1DeviceAllocationConfiguration.java | 26 +- .../models/V1beta1DeviceAllocationResult.java | 26 +- .../models/V1beta1DeviceAttribute.java | 26 +- .../openapi/models/V1beta1DeviceCapacity.java | 26 +- .../openapi/models/V1beta1DeviceClaim.java | 26 +- .../V1beta1DeviceClaimConfiguration.java | 26 +- .../openapi/models/V1beta1DeviceClass.java | 51 +- .../V1beta1DeviceClassConfiguration.java | 26 +- .../models/V1beta1DeviceClassList.java | 26 +- .../models/V1beta1DeviceClassSpec.java | 30 +- .../models/V1beta1DeviceConstraint.java | 26 +- .../V1beta1DeviceCounterConsumption.java | 73 +- .../models/V1beta1DeviceDerivedAttribute.java | 246 + .../openapi/models/V1beta1DeviceRequest.java | 80 +- .../V1beta1DeviceRequestAllocationResult.java | 69 +- .../openapi/models/V1beta1DeviceSelector.java | 26 +- .../models/V1beta1DeviceSubRequest.java | 80 +- .../openapi/models/V1beta1DeviceTaint.java | 26 +- .../models/V1beta1DeviceToleration.java | 26 +- ...erence.java => V1beta1DisruptionMode.java} | 138 +- .../models/V1beta1GangSchedulingPolicy.java | 213 + .../openapi/models/V1beta1JSONPatch.java | 26 +- .../openapi/models/V1beta1LeaseCandidate.java | 26 +- .../models/V1beta1LeaseCandidateList.java | 26 +- .../models/V1beta1LeaseCandidateSpec.java | 50 +- .../openapi/models/V1beta1MatchCondition.java | 26 +- .../openapi/models/V1beta1MatchResources.java | 26 +- .../V1beta1MutatingAdmissionPolicy.java | 26 +- ...V1beta1MutatingAdmissionPolicyBinding.java | 26 +- ...ta1MutatingAdmissionPolicyBindingList.java | 26 +- ...ta1MutatingAdmissionPolicyBindingSpec.java | 26 +- .../V1beta1MutatingAdmissionPolicyList.java | 26 +- .../V1beta1MutatingAdmissionPolicySpec.java | 26 +- .../openapi/models/V1beta1Mutation.java | 26 +- .../V1beta1NamedRuleWithOperations.java | 26 +- .../models/V1beta1NetworkDeviceData.java | 26 +- ...ava => V1beta1NodeAllocatableMapping.java} | 162 +- .../V1beta1NodeAllocatableOverhead.java | 240 + .../V1beta1NodeAllocatableResource.java | 243 + .../V1beta1OpaqueDeviceConfiguration.java | 26 +- .../openapi/models/V1beta1ParamKind.java | 26 +- .../openapi/models/V1beta1ParamRef.java | 26 +- .../models/V1beta1ParentReference.java | 304 - .../models/V1beta1PodCertificateRequest.java | 26 +- .../V1beta1PodCertificateRequestList.java | 26 +- .../V1beta1PodCertificateRequestSpec.java | 26 +- .../V1beta1PodCertificateRequestStatus.java | 26 +- .../openapi/models/V1beta1PodGroup.java | 340 + .../openapi/models/V1beta1PodGroupList.java | 326 + .../models/V1beta1PodGroupResourceClaim.java | 276 + .../V1beta1PodGroupResourceClaimStatus.java | 246 + .../V1beta1PodGroupSchedulingConstraints.java | 231 + .../V1beta1PodGroupSchedulingPolicy.java | 238 + .../openapi/models/V1beta1PodGroupSpec.java | 481 + .../openapi/models/V1beta1PodGroupStatus.java | 281 + .../models/V1beta1PodGroupTemplate.java | 449 + .../openapi/models/V1beta1ResourceClaim.java | 51 +- ...V1beta1ResourceClaimConsumerReference.java | 26 +- .../models/V1beta1ResourceClaimList.java | 26 +- .../models/V1beta1ResourceClaimSpec.java | 26 +- .../models/V1beta1ResourceClaimStatus.java | 26 +- .../models/V1beta1ResourceClaimTemplate.java | 51 +- .../V1beta1ResourceClaimTemplateList.java | 26 +- .../V1beta1ResourceClaimTemplateSpec.java | 51 +- .../openapi/models/V1beta1ResourcePool.java | 30 +- .../openapi/models/V1beta1ResourceSlice.java | 26 +- .../models/V1beta1ResourceSliceList.java | 26 +- .../models/V1beta1ResourceSliceSpec.java | 101 +- .../V1beta1StorageVersionMigration.java | 26 +- .../V1beta1StorageVersionMigrationList.java | 26 +- .../V1beta1StorageVersionMigrationSpec.java | 26 +- .../V1beta1StorageVersionMigrationStatus.java | 26 +- .../models/V1beta1TopologyConstraint.java | 216 + .../V1beta1TypedLocalObjectReference.java | 276 + .../openapi/models/V1beta1Variable.java | 26 +- .../models/V1beta1VolumeAttributesClass.java | 343 - .../V1beta1VolumeAttributesClassList.java | 324 - ...ta1IPAddress.java => V1beta1Workload.java} | 102 +- ...CIDRList.java => V1beta1WorkloadList.java} | 108 +- .../models/V1beta1WorkloadReference.java | 246 + .../openapi/models/V1beta1WorkloadSpec.java | 313 + .../models/V1beta2AllocatedDeviceStatus.java | 26 +- .../models/V1beta2AllocationResult.java | 26 +- .../models/V1beta2CELDeviceSelector.java | 30 +- .../models/V1beta2CapacityRequestPolicy.java | 26 +- .../V1beta2CapacityRequestPolicyRange.java | 30 +- .../models/V1beta2CapacityRequirements.java | 26 +- .../client/openapi/models/V1beta2Counter.java | 26 +- .../openapi/models/V1beta2CounterSet.java | 26 +- .../client/openapi/models/V1beta2Device.java | 68 +- .../V1beta2DeviceAllocationConfiguration.java | 26 +- .../models/V1beta2DeviceAllocationResult.java | 26 +- .../models/V1beta2DeviceAttribute.java | 26 +- .../openapi/models/V1beta2DeviceCapacity.java | 26 +- .../openapi/models/V1beta2DeviceClaim.java | 26 +- .../V1beta2DeviceClaimConfiguration.java | 26 +- .../openapi/models/V1beta2DeviceClass.java | 51 +- .../V1beta2DeviceClassConfiguration.java | 26 +- .../models/V1beta2DeviceClassList.java | 26 +- .../models/V1beta2DeviceClassSpec.java | 30 +- .../models/V1beta2DeviceConstraint.java | 26 +- .../V1beta2DeviceCounterConsumption.java | 73 +- .../models/V1beta2DeviceDerivedAttribute.java | 246 + .../openapi/models/V1beta2DeviceRequest.java | 26 +- .../V1beta2DeviceRequestAllocationResult.java | 69 +- .../openapi/models/V1beta2DeviceSelector.java | 26 +- .../models/V1beta2DeviceSubRequest.java | 80 +- .../openapi/models/V1beta2DeviceTaint.java | 26 +- .../models/V1beta2DeviceTaintRule.java | 26 +- .../models/V1beta2DeviceTaintRuleList.java | 26 +- .../models/V1beta2DeviceTaintRuleSpec.java | 26 +- .../models/V1beta2DeviceTaintRuleStatus.java | 26 +- .../models/V1beta2DeviceTaintSelector.java | 26 +- .../models/V1beta2DeviceToleration.java | 26 +- .../models/V1beta2ExactDeviceRequest.java | 80 +- .../models/V1beta2NetworkDeviceData.java | 26 +- ...ava => V1beta2NodeAllocatableMapping.java} | 162 +- .../V1beta2NodeAllocatableOverhead.java | 240 + .../V1beta2NodeAllocatableResource.java | 243 + .../V1beta2OpaqueDeviceConfiguration.java | 26 +- .../openapi/models/V1beta2ResourceClaim.java | 51 +- ...V1beta2ResourceClaimConsumerReference.java | 26 +- .../models/V1beta2ResourceClaimList.java | 26 +- .../models/V1beta2ResourceClaimSpec.java | 26 +- .../models/V1beta2ResourceClaimStatus.java | 26 +- .../models/V1beta2ResourceClaimTemplate.java | 51 +- .../V1beta2ResourceClaimTemplateList.java | 26 +- .../V1beta2ResourceClaimTemplateSpec.java | 51 +- .../openapi/models/V1beta2ResourcePool.java | 30 +- .../openapi/models/V1beta2ResourceSlice.java | 26 +- .../models/V1beta2ResourceSliceList.java | 26 +- .../models/V1beta2ResourceSliceSpec.java | 101 +- .../openapi/models/V2APIGroupDiscovery.java | 26 +- .../models/V2APIGroupDiscoveryList.java | 26 +- .../models/V2APIResourceDiscovery.java | 26 +- .../models/V2APISubresourceDiscovery.java | 26 +- .../openapi/models/V2APIVersionDiscovery.java | 26 +- .../V2ContainerResourceMetricSource.java | 26 +- .../V2ContainerResourceMetricStatus.java | 26 +- .../models/V2CrossVersionObjectReference.java | 26 +- .../models/V2ExternalMetricSource.java | 26 +- .../models/V2ExternalMetricStatus.java | 26 +- .../openapi/models/V2HPAScalingPolicy.java | 26 +- .../openapi/models/V2HPAScalingRules.java | 30 +- .../models/V2HorizontalPodAutoscaler.java | 26 +- .../V2HorizontalPodAutoscalerBehavior.java | 26 +- .../V2HorizontalPodAutoscalerCondition.java | 57 +- .../models/V2HorizontalPodAutoscalerList.java | 26 +- .../models/V2HorizontalPodAutoscalerSpec.java | 26 +- .../V2HorizontalPodAutoscalerStatus.java | 26 +- .../openapi/models/V2MetricIdentifier.java | 26 +- .../client/openapi/models/V2MetricSpec.java | 26 +- .../client/openapi/models/V2MetricStatus.java | 26 +- .../client/openapi/models/V2MetricTarget.java | 26 +- .../openapi/models/V2MetricValueStatus.java | 30 +- .../openapi/models/V2ObjectMetricSource.java | 26 +- .../openapi/models/V2ObjectMetricStatus.java | 26 +- .../openapi/models/V2PodsMetricSource.java | 26 +- .../openapi/models/V2PodsMetricStatus.java | 26 +- .../models/V2ResourceMetricSource.java | 26 +- .../models/V2ResourceMetricStatus.java | 26 +- .../models/V2beta1APIGroupDiscovery.java | 26 +- .../models/V2beta1APIGroupDiscoveryList.java | 26 +- .../models/V2beta1APIResourceDiscovery.java | 26 +- .../V2beta1APISubresourceDiscovery.java | 26 +- .../models/V2beta1APIVersionDiscovery.java | 26 +- .../client/openapi/models/VersionInfo.java | 26 +- kubernetes/swagger.json | 51695 ++++--- 1207 files changed, 173945 insertions(+), 92566 deletions(-) create mode 160000 gen create mode 100644 kubernetes/docs/LifecycleApi.md rename kubernetes/docs/{NetworkingV1beta1Api.md => LifecycleV1alpha1Api.md} (65%) create mode 100644 kubernetes/docs/SchedulingV1alpha3Api.md rename kubernetes/docs/{SchedulingV1alpha2Api.md => SchedulingV1beta1Api.md} (93%) delete mode 100644 kubernetes/docs/StorageV1beta1Api.md rename kubernetes/docs/{CertificatesV1alpha1Api.md => StoragemigrationV1Api.md} (73%) create mode 100644 kubernetes/docs/V1CSINodeStatus.md rename kubernetes/docs/{V1alpha1ClusterTrustBundle.md => V1ClusterTrustBundle.md} (74%) rename kubernetes/docs/{V1alpha1ClusterTrustBundleList.md => V1ClusterTrustBundleList.md} (84%) rename kubernetes/docs/{V1alpha1ClusterTrustBundleSpec.md => V1ClusterTrustBundleSpec.md} (98%) create mode 100644 kubernetes/docs/V1DeviceDerivedAttribute.md rename kubernetes/docs/{V1beta1ServiceCIDR.md => V1DeviceTaintRule.md} (71%) create mode 100644 kubernetes/docs/V1DeviceTaintRuleList.md create mode 100644 kubernetes/docs/V1DeviceTaintRuleSpec.md create mode 100644 kubernetes/docs/V1DeviceTaintRuleStatus.md create mode 100644 kubernetes/docs/V1DeviceTaintSelector.md create mode 100644 kubernetes/docs/V1EvictionResponder.md create mode 100644 kubernetes/docs/V1JobSchedulingConfiguration.md create mode 100644 kubernetes/docs/V1NodeAllocatableMappedResources.md create mode 100644 kubernetes/docs/V1NodeAllocatableMapping.md create mode 100644 kubernetes/docs/V1NodeAllocatableOverhead.md create mode 100644 kubernetes/docs/V1NodeAllocatableOverheadResources.md create mode 100644 kubernetes/docs/V1NodeAllocatableResource.md delete mode 100644 kubernetes/docs/V1NodeAllocatableResourceMapping.md create mode 100644 kubernetes/docs/V1NodePodPreemptionPolicy.md create mode 100644 kubernetes/docs/V1PodCertificateRequest.md create mode 100644 kubernetes/docs/V1PodCertificateRequestList.md create mode 100644 kubernetes/docs/V1PodCertificateRequestSpec.md create mode 100644 kubernetes/docs/V1PodCertificateRequestStatus.md create mode 100644 kubernetes/docs/V1PodVolumeHealth.md create mode 100644 kubernetes/docs/V1StorageHealth.md create mode 100644 kubernetes/docs/V1StorageHealthCondition.md create mode 100644 kubernetes/docs/V1StorageVersionMigration.md create mode 100644 kubernetes/docs/V1StorageVersionMigrationList.md create mode 100644 kubernetes/docs/V1StorageVersionMigrationSpec.md create mode 100644 kubernetes/docs/V1StorageVersionMigrationStatus.md create mode 100644 kubernetes/docs/V1VolumeHealthCondition.md create mode 100644 kubernetes/docs/V1VolumeHealthStatus.md create mode 100644 kubernetes/docs/V1alpha1Eviction.md rename kubernetes/docs/{V1beta1ServiceCIDRList.md => V1alpha1EvictionList.md} (82%) create mode 100644 kubernetes/docs/V1alpha1EvictionPodReference.md create mode 100644 kubernetes/docs/V1alpha1EvictionRequest.md create mode 100644 kubernetes/docs/V1alpha1EvictionRequestList.md create mode 100644 kubernetes/docs/V1alpha1EvictionRequestPodReference.md create mode 100644 kubernetes/docs/V1alpha1EvictionRequestSpec.md create mode 100644 kubernetes/docs/V1alpha1EvictionRequestStatus.md create mode 100644 kubernetes/docs/V1alpha1EvictionRequestTarget.md create mode 100644 kubernetes/docs/V1alpha1EvictionSpec.md create mode 100644 kubernetes/docs/V1alpha1EvictionStatus.md create mode 100644 kubernetes/docs/V1alpha1EvictionTarget.md create mode 100644 kubernetes/docs/V1alpha1Requester.md create mode 100644 kubernetes/docs/V1alpha1ResponderStatus.md create mode 100644 kubernetes/docs/V1alpha1TargetResponder.md delete mode 100644 kubernetes/docs/V1alpha2GangSchedulingPolicy.md delete mode 100644 kubernetes/docs/V1alpha2PodGroupSchedulingPolicy.md delete mode 100644 kubernetes/docs/V1alpha2PodGroupSpec.md delete mode 100644 kubernetes/docs/V1alpha2PodGroupStatus.md delete mode 100644 kubernetes/docs/V1alpha2PodGroupTemplate.md delete mode 100644 kubernetes/docs/V1alpha2PodGroupTemplateReference.md delete mode 100644 kubernetes/docs/V1alpha2WorkloadPodGroupTemplateReference.md delete mode 100644 kubernetes/docs/V1alpha2WorkloadSpec.md create mode 100644 kubernetes/docs/V1alpha3CompositeDisruptionMode.md create mode 100644 kubernetes/docs/V1alpha3CompositeGangSchedulingPolicy.md rename kubernetes/docs/{V1beta1IPAddress.md => V1alpha3CompositePodGroup.md} (57%) create mode 100644 kubernetes/docs/V1alpha3CompositePodGroupList.md create mode 100644 kubernetes/docs/V1alpha3CompositePodGroupSchedulingConstraints.md create mode 100644 kubernetes/docs/V1alpha3CompositePodGroupSchedulingPolicy.md create mode 100644 kubernetes/docs/V1alpha3CompositePodGroupSpec.md create mode 100644 kubernetes/docs/V1alpha3CompositePodGroupStatus.md create mode 100644 kubernetes/docs/V1alpha3CompositePodGroupTemplate.md create mode 100644 kubernetes/docs/V1alpha3DisruptionMode.md create mode 100644 kubernetes/docs/V1alpha3GangSchedulingPolicy.md create mode 100644 kubernetes/docs/V1alpha3PartitionTypeStatus.md rename kubernetes/docs/{V1alpha2PodGroup.md => V1alpha3PodGroup.md} (89%) rename kubernetes/docs/{V1alpha2PodGroupList.md => V1alpha3PodGroupList.md} (92%) rename kubernetes/docs/{V1alpha2PodGroupResourceClaim.md => V1alpha3PodGroupResourceClaim.md} (87%) rename kubernetes/docs/{V1alpha2PodGroupResourceClaimStatus.md => V1alpha3PodGroupResourceClaimStatus.md} (81%) rename kubernetes/docs/{V1alpha2PodGroupSchedulingConstraints.md => V1alpha3PodGroupSchedulingConstraints.md} (67%) create mode 100644 kubernetes/docs/V1alpha3PodGroupSchedulingPolicy.md create mode 100644 kubernetes/docs/V1alpha3PodGroupSpec.md create mode 100644 kubernetes/docs/V1alpha3PodGroupStatus.md create mode 100644 kubernetes/docs/V1alpha3PodGroupTemplate.md create mode 100644 kubernetes/docs/V1alpha3ShareableCapacityStatus.md create mode 100644 kubernetes/docs/V1alpha3ShareableSummaryStatus.md rename kubernetes/docs/{V1alpha2TopologyConstraint.md => V1alpha3TopologyConstraint.md} (83%) rename kubernetes/docs/{V1alpha2TypedLocalObjectReference.md => V1alpha3TypedLocalObjectReference.md} (68%) rename kubernetes/docs/{V1alpha2Workload.md => V1alpha3Workload.md} (93%) rename kubernetes/docs/{V1alpha2WorkloadList.md => V1alpha3WorkloadList.md} (92%) create mode 100644 kubernetes/docs/V1alpha3WorkloadPodGroupDisruptionMode.md create mode 100644 kubernetes/docs/V1alpha3WorkloadPodGroupGangSchedulingPolicy.md create mode 100644 kubernetes/docs/V1alpha3WorkloadPodGroupResourceClaim.md create mode 100644 kubernetes/docs/V1alpha3WorkloadPodGroupSchedulingConstraints.md create mode 100644 kubernetes/docs/V1alpha3WorkloadPodGroupSchedulingPolicy.md create mode 100644 kubernetes/docs/V1alpha3WorkloadReference.md create mode 100644 kubernetes/docs/V1alpha3WorkloadSpec.md create mode 100644 kubernetes/docs/V1beta1CompositeDisruptionMode.md create mode 100644 kubernetes/docs/V1beta1CompositeGangSchedulingPolicy.md create mode 100644 kubernetes/docs/V1beta1CompositePodGroupSchedulingConstraints.md create mode 100644 kubernetes/docs/V1beta1CompositePodGroupSchedulingPolicy.md create mode 100644 kubernetes/docs/V1beta1CompositePodGroupTemplate.md create mode 100644 kubernetes/docs/V1beta1DeviceDerivedAttribute.md create mode 100644 kubernetes/docs/V1beta1DisruptionMode.md create mode 100644 kubernetes/docs/V1beta1GangSchedulingPolicy.md delete mode 100644 kubernetes/docs/V1beta1IPAddressSpec.md create mode 100644 kubernetes/docs/V1beta1NodeAllocatableMapping.md create mode 100644 kubernetes/docs/V1beta1NodeAllocatableOverhead.md create mode 100644 kubernetes/docs/V1beta1NodeAllocatableResource.md delete mode 100644 kubernetes/docs/V1beta1NodeAllocatableResourceMapping.md delete mode 100644 kubernetes/docs/V1beta1ParentReference.md create mode 100644 kubernetes/docs/V1beta1PodGroup.md rename kubernetes/docs/{V1beta1IPAddressList.md => V1beta1PodGroupList.md} (83%) create mode 100644 kubernetes/docs/V1beta1PodGroupResourceClaim.md create mode 100644 kubernetes/docs/V1beta1PodGroupResourceClaimStatus.md create mode 100644 kubernetes/docs/V1beta1PodGroupSchedulingConstraints.md create mode 100644 kubernetes/docs/V1beta1PodGroupSchedulingPolicy.md create mode 100644 kubernetes/docs/V1beta1PodGroupSpec.md create mode 100644 kubernetes/docs/V1beta1PodGroupStatus.md create mode 100644 kubernetes/docs/V1beta1PodGroupTemplate.md delete mode 100644 kubernetes/docs/V1beta1ServiceCIDRSpec.md delete mode 100644 kubernetes/docs/V1beta1ServiceCIDRStatus.md create mode 100644 kubernetes/docs/V1beta1TopologyConstraint.md create mode 100644 kubernetes/docs/V1beta1TypedLocalObjectReference.md delete mode 100644 kubernetes/docs/V1beta1VolumeAttributesClass.md delete mode 100644 kubernetes/docs/V1beta1VolumeAttributesClassList.md create mode 100644 kubernetes/docs/V1beta1Workload.md create mode 100644 kubernetes/docs/V1beta1WorkloadList.md create mode 100644 kubernetes/docs/V1beta1WorkloadReference.md create mode 100644 kubernetes/docs/V1beta1WorkloadSpec.md create mode 100644 kubernetes/docs/V1beta2DeviceDerivedAttribute.md create mode 100644 kubernetes/docs/V1beta2NodeAllocatableMapping.md create mode 100644 kubernetes/docs/V1beta2NodeAllocatableOverhead.md create mode 100644 kubernetes/docs/V1beta2NodeAllocatableResource.md delete mode 100644 kubernetes/docs/V1beta2NodeAllocatableResourceMapping.md create mode 100644 kubernetes/src/main/java/io/kubernetes/client/openapi/apis/LifecycleApi.java rename kubernetes/src/main/java/io/kubernetes/client/openapi/apis/{NetworkingV1beta1Api.java => LifecycleV1alpha1Api.java} (51%) create mode 100644 kubernetes/src/main/java/io/kubernetes/client/openapi/apis/SchedulingV1alpha3Api.java rename kubernetes/src/main/java/io/kubernetes/client/openapi/apis/{SchedulingV1alpha2Api.java => SchedulingV1beta1Api.java} (92%) delete mode 100644 kubernetes/src/main/java/io/kubernetes/client/openapi/apis/StorageV1beta1Api.java rename kubernetes/src/main/java/io/kubernetes/client/openapi/apis/{CertificatesV1alpha1Api.java => StoragemigrationV1Api.java} (53%) create mode 100644 kubernetes/src/main/java/io/kubernetes/client/openapi/models/V1CSINodeStatus.java rename kubernetes/src/main/java/io/kubernetes/client/openapi/models/{V1alpha1ClusterTrustBundle.java => V1ClusterTrustBundle.java} (69%) rename kubernetes/src/main/java/io/kubernetes/client/openapi/models/{V1alpha1ClusterTrustBundleList.java => V1ClusterTrustBundleList.java} (72%) rename kubernetes/src/main/java/io/kubernetes/client/openapi/models/{V1alpha1ClusterTrustBundleSpec.java => V1ClusterTrustBundleSpec.java} (76%) create mode 100644 kubernetes/src/main/java/io/kubernetes/client/openapi/models/V1DeviceDerivedAttribute.java create mode 100644 kubernetes/src/main/java/io/kubernetes/client/openapi/models/V1DeviceTaintRule.java create mode 100644 kubernetes/src/main/java/io/kubernetes/client/openapi/models/V1DeviceTaintRuleList.java create mode 100644 kubernetes/src/main/java/io/kubernetes/client/openapi/models/V1DeviceTaintRuleSpec.java rename kubernetes/src/main/java/io/kubernetes/client/openapi/models/{V1beta1ServiceCIDRStatus.java => V1DeviceTaintRuleStatus.java} (55%) create mode 100644 kubernetes/src/main/java/io/kubernetes/client/openapi/models/V1DeviceTaintSelector.java create mode 100644 kubernetes/src/main/java/io/kubernetes/client/openapi/models/V1EvictionResponder.java create mode 100644 kubernetes/src/main/java/io/kubernetes/client/openapi/models/V1JobSchedulingConfiguration.java create mode 100644 kubernetes/src/main/java/io/kubernetes/client/openapi/models/V1NodeAllocatableMappedResources.java rename kubernetes/src/main/java/io/kubernetes/client/openapi/models/{V1NodeAllocatableResourceMapping.java => V1NodeAllocatableMapping.java} (50%) create mode 100644 kubernetes/src/main/java/io/kubernetes/client/openapi/models/V1NodeAllocatableOverhead.java create mode 100644 kubernetes/src/main/java/io/kubernetes/client/openapi/models/V1NodeAllocatableOverheadResources.java create mode 100644 kubernetes/src/main/java/io/kubernetes/client/openapi/models/V1NodeAllocatableResource.java create mode 100644 kubernetes/src/main/java/io/kubernetes/client/openapi/models/V1NodePodPreemptionPolicy.java create mode 100644 kubernetes/src/main/java/io/kubernetes/client/openapi/models/V1PodCertificateRequest.java create mode 100644 kubernetes/src/main/java/io/kubernetes/client/openapi/models/V1PodCertificateRequestList.java create mode 100644 kubernetes/src/main/java/io/kubernetes/client/openapi/models/V1PodCertificateRequestSpec.java create mode 100644 kubernetes/src/main/java/io/kubernetes/client/openapi/models/V1PodCertificateRequestStatus.java create mode 100644 kubernetes/src/main/java/io/kubernetes/client/openapi/models/V1PodVolumeHealth.java create mode 100644 kubernetes/src/main/java/io/kubernetes/client/openapi/models/V1StorageHealth.java create mode 100644 kubernetes/src/main/java/io/kubernetes/client/openapi/models/V1StorageHealthCondition.java rename kubernetes/src/main/java/io/kubernetes/client/openapi/models/{V1beta1ServiceCIDR.java => V1StorageVersionMigration.java} (69%) create mode 100644 kubernetes/src/main/java/io/kubernetes/client/openapi/models/V1StorageVersionMigrationList.java create mode 100644 kubernetes/src/main/java/io/kubernetes/client/openapi/models/V1StorageVersionMigrationSpec.java create mode 100644 kubernetes/src/main/java/io/kubernetes/client/openapi/models/V1StorageVersionMigrationStatus.java create mode 100644 kubernetes/src/main/java/io/kubernetes/client/openapi/models/V1VolumeHealthCondition.java create mode 100644 kubernetes/src/main/java/io/kubernetes/client/openapi/models/V1VolumeHealthStatus.java create mode 100644 kubernetes/src/main/java/io/kubernetes/client/openapi/models/V1alpha1Eviction.java rename kubernetes/src/main/java/io/kubernetes/client/openapi/models/{V1beta1IPAddressList.java => V1alpha1EvictionList.java} (75%) create mode 100644 kubernetes/src/main/java/io/kubernetes/client/openapi/models/V1alpha1EvictionPodReference.java create mode 100644 kubernetes/src/main/java/io/kubernetes/client/openapi/models/V1alpha1EvictionRequest.java create mode 100644 kubernetes/src/main/java/io/kubernetes/client/openapi/models/V1alpha1EvictionRequestList.java create mode 100644 kubernetes/src/main/java/io/kubernetes/client/openapi/models/V1alpha1EvictionRequestPodReference.java create mode 100644 kubernetes/src/main/java/io/kubernetes/client/openapi/models/V1alpha1EvictionRequestSpec.java create mode 100644 kubernetes/src/main/java/io/kubernetes/client/openapi/models/V1alpha1EvictionRequestStatus.java create mode 100644 kubernetes/src/main/java/io/kubernetes/client/openapi/models/V1alpha1EvictionRequestTarget.java rename kubernetes/src/main/java/io/kubernetes/client/openapi/models/{V1beta1IPAddressSpec.java => V1alpha1EvictionSpec.java} (59%) create mode 100644 kubernetes/src/main/java/io/kubernetes/client/openapi/models/V1alpha1EvictionStatus.java create mode 100644 kubernetes/src/main/java/io/kubernetes/client/openapi/models/V1alpha1EvictionTarget.java create mode 100644 kubernetes/src/main/java/io/kubernetes/client/openapi/models/V1alpha1Requester.java create mode 100644 kubernetes/src/main/java/io/kubernetes/client/openapi/models/V1alpha1ResponderStatus.java create mode 100644 kubernetes/src/main/java/io/kubernetes/client/openapi/models/V1alpha1TargetResponder.java delete mode 100644 kubernetes/src/main/java/io/kubernetes/client/openapi/models/V1alpha2WorkloadSpec.java create mode 100644 kubernetes/src/main/java/io/kubernetes/client/openapi/models/V1alpha3CompositeDisruptionMode.java create mode 100644 kubernetes/src/main/java/io/kubernetes/client/openapi/models/V1alpha3CompositeGangSchedulingPolicy.java create mode 100644 kubernetes/src/main/java/io/kubernetes/client/openapi/models/V1alpha3CompositePodGroup.java create mode 100644 kubernetes/src/main/java/io/kubernetes/client/openapi/models/V1alpha3CompositePodGroupList.java create mode 100644 kubernetes/src/main/java/io/kubernetes/client/openapi/models/V1alpha3CompositePodGroupSchedulingConstraints.java create mode 100644 kubernetes/src/main/java/io/kubernetes/client/openapi/models/V1alpha3CompositePodGroupSchedulingPolicy.java create mode 100644 kubernetes/src/main/java/io/kubernetes/client/openapi/models/V1alpha3CompositePodGroupSpec.java create mode 100644 kubernetes/src/main/java/io/kubernetes/client/openapi/models/V1alpha3CompositePodGroupStatus.java create mode 100644 kubernetes/src/main/java/io/kubernetes/client/openapi/models/V1alpha3CompositePodGroupTemplate.java rename kubernetes/src/main/java/io/kubernetes/client/openapi/models/{V1beta1ServiceCIDRSpec.java => V1alpha3DisruptionMode.java} (52%) rename kubernetes/src/main/java/io/kubernetes/client/openapi/models/{V1alpha2GangSchedulingPolicy.java => V1alpha3GangSchedulingPolicy.java} (64%) create mode 100644 kubernetes/src/main/java/io/kubernetes/client/openapi/models/V1alpha3PartitionTypeStatus.java rename kubernetes/src/main/java/io/kubernetes/client/openapi/models/{V1alpha2PodGroup.java => V1alpha3PodGroup.java} (76%) rename kubernetes/src/main/java/io/kubernetes/client/openapi/models/{V1alpha2PodGroupList.java => V1alpha3PodGroupList.java} (77%) rename kubernetes/src/main/java/io/kubernetes/client/openapi/models/{V1alpha2PodGroupResourceClaim.java => V1alpha3PodGroupResourceClaim.java} (79%) rename kubernetes/src/main/java/io/kubernetes/client/openapi/models/{V1alpha2PodGroupResourceClaimStatus.java => V1alpha3PodGroupResourceClaimStatus.java} (75%) rename kubernetes/src/main/java/io/kubernetes/client/openapi/models/{V1alpha2PodGroupSchedulingConstraints.java => V1alpha3PodGroupSchedulingConstraints.java} (69%) rename kubernetes/src/main/java/io/kubernetes/client/openapi/models/{V1alpha2PodGroupSchedulingPolicy.java => V1alpha3PodGroupSchedulingPolicy.java} (63%) rename kubernetes/src/main/java/io/kubernetes/client/openapi/models/{V1alpha2PodGroupSpec.java => V1alpha3PodGroupSpec.java} (53%) rename kubernetes/src/main/java/io/kubernetes/client/openapi/models/{V1alpha2PodGroupStatus.java => V1alpha3PodGroupStatus.java} (62%) rename kubernetes/src/main/java/io/kubernetes/client/openapi/models/{V1alpha2PodGroupTemplate.java => V1alpha3PodGroupTemplate.java} (61%) create mode 100644 kubernetes/src/main/java/io/kubernetes/client/openapi/models/V1alpha3ShareableCapacityStatus.java create mode 100644 kubernetes/src/main/java/io/kubernetes/client/openapi/models/V1alpha3ShareableSummaryStatus.java rename kubernetes/src/main/java/io/kubernetes/client/openapi/models/{V1alpha2TopologyConstraint.java => V1alpha3TopologyConstraint.java} (73%) rename kubernetes/src/main/java/io/kubernetes/client/openapi/models/{V1alpha2TypedLocalObjectReference.java => V1alpha3TypedLocalObjectReference.java} (74%) rename kubernetes/src/main/java/io/kubernetes/client/openapi/models/{V1alpha2Workload.java => V1alpha3Workload.java} (78%) rename kubernetes/src/main/java/io/kubernetes/client/openapi/models/{V1alpha2WorkloadList.java => V1alpha3WorkloadList.java} (77%) create mode 100644 kubernetes/src/main/java/io/kubernetes/client/openapi/models/V1alpha3WorkloadPodGroupDisruptionMode.java create mode 100644 kubernetes/src/main/java/io/kubernetes/client/openapi/models/V1alpha3WorkloadPodGroupGangSchedulingPolicy.java create mode 100644 kubernetes/src/main/java/io/kubernetes/client/openapi/models/V1alpha3WorkloadPodGroupResourceClaim.java create mode 100644 kubernetes/src/main/java/io/kubernetes/client/openapi/models/V1alpha3WorkloadPodGroupSchedulingConstraints.java create mode 100644 kubernetes/src/main/java/io/kubernetes/client/openapi/models/V1alpha3WorkloadPodGroupSchedulingPolicy.java rename kubernetes/src/main/java/io/kubernetes/client/openapi/models/{V1alpha2WorkloadPodGroupTemplateReference.java => V1alpha3WorkloadReference.java} (52%) create mode 100644 kubernetes/src/main/java/io/kubernetes/client/openapi/models/V1alpha3WorkloadSpec.java create mode 100644 kubernetes/src/main/java/io/kubernetes/client/openapi/models/V1beta1CompositeDisruptionMode.java create mode 100644 kubernetes/src/main/java/io/kubernetes/client/openapi/models/V1beta1CompositeGangSchedulingPolicy.java create mode 100644 kubernetes/src/main/java/io/kubernetes/client/openapi/models/V1beta1CompositePodGroupSchedulingConstraints.java create mode 100644 kubernetes/src/main/java/io/kubernetes/client/openapi/models/V1beta1CompositePodGroupSchedulingPolicy.java create mode 100644 kubernetes/src/main/java/io/kubernetes/client/openapi/models/V1beta1CompositePodGroupTemplate.java create mode 100644 kubernetes/src/main/java/io/kubernetes/client/openapi/models/V1beta1DeviceDerivedAttribute.java rename kubernetes/src/main/java/io/kubernetes/client/openapi/models/{V1alpha2PodGroupTemplateReference.java => V1beta1DisruptionMode.java} (51%) create mode 100644 kubernetes/src/main/java/io/kubernetes/client/openapi/models/V1beta1GangSchedulingPolicy.java rename kubernetes/src/main/java/io/kubernetes/client/openapi/models/{V1beta1NodeAllocatableResourceMapping.java => V1beta1NodeAllocatableMapping.java} (51%) create mode 100644 kubernetes/src/main/java/io/kubernetes/client/openapi/models/V1beta1NodeAllocatableOverhead.java create mode 100644 kubernetes/src/main/java/io/kubernetes/client/openapi/models/V1beta1NodeAllocatableResource.java delete mode 100644 kubernetes/src/main/java/io/kubernetes/client/openapi/models/V1beta1ParentReference.java create mode 100644 kubernetes/src/main/java/io/kubernetes/client/openapi/models/V1beta1PodGroup.java create mode 100644 kubernetes/src/main/java/io/kubernetes/client/openapi/models/V1beta1PodGroupList.java create mode 100644 kubernetes/src/main/java/io/kubernetes/client/openapi/models/V1beta1PodGroupResourceClaim.java create mode 100644 kubernetes/src/main/java/io/kubernetes/client/openapi/models/V1beta1PodGroupResourceClaimStatus.java create mode 100644 kubernetes/src/main/java/io/kubernetes/client/openapi/models/V1beta1PodGroupSchedulingConstraints.java create mode 100644 kubernetes/src/main/java/io/kubernetes/client/openapi/models/V1beta1PodGroupSchedulingPolicy.java create mode 100644 kubernetes/src/main/java/io/kubernetes/client/openapi/models/V1beta1PodGroupSpec.java create mode 100644 kubernetes/src/main/java/io/kubernetes/client/openapi/models/V1beta1PodGroupStatus.java create mode 100644 kubernetes/src/main/java/io/kubernetes/client/openapi/models/V1beta1PodGroupTemplate.java create mode 100644 kubernetes/src/main/java/io/kubernetes/client/openapi/models/V1beta1TopologyConstraint.java create mode 100644 kubernetes/src/main/java/io/kubernetes/client/openapi/models/V1beta1TypedLocalObjectReference.java delete mode 100644 kubernetes/src/main/java/io/kubernetes/client/openapi/models/V1beta1VolumeAttributesClass.java delete mode 100644 kubernetes/src/main/java/io/kubernetes/client/openapi/models/V1beta1VolumeAttributesClassList.java rename kubernetes/src/main/java/io/kubernetes/client/openapi/models/{V1beta1IPAddress.java => V1beta1Workload.java} (67%) rename kubernetes/src/main/java/io/kubernetes/client/openapi/models/{V1beta1ServiceCIDRList.java => V1beta1WorkloadList.java} (72%) create mode 100644 kubernetes/src/main/java/io/kubernetes/client/openapi/models/V1beta1WorkloadReference.java create mode 100644 kubernetes/src/main/java/io/kubernetes/client/openapi/models/V1beta1WorkloadSpec.java create mode 100644 kubernetes/src/main/java/io/kubernetes/client/openapi/models/V1beta2DeviceDerivedAttribute.java rename kubernetes/src/main/java/io/kubernetes/client/openapi/models/{V1beta2NodeAllocatableResourceMapping.java => V1beta2NodeAllocatableMapping.java} (50%) create mode 100644 kubernetes/src/main/java/io/kubernetes/client/openapi/models/V1beta2NodeAllocatableOverhead.java create mode 100644 kubernetes/src/main/java/io/kubernetes/client/openapi/models/V1beta2NodeAllocatableResource.java diff --git a/gen b/gen new file mode 160000 index 0000000000..d01fc8a159 --- /dev/null +++ b/gen @@ -0,0 +1 @@ +Subproject commit d01fc8a15955e08c5102b7f9916a99b094ebd0e1 diff --git a/kubernetes/.openapi-generator/FILES b/kubernetes/.openapi-generator/FILES index c29871a8c9..5681c6621c 100644 --- a/kubernetes/.openapi-generator/FILES +++ b/kubernetes/.openapi-generator/FILES @@ -28,7 +28,6 @@ docs/BatchApi.md docs/BatchV1Api.md docs/CertificatesApi.md docs/CertificatesV1Api.md -docs/CertificatesV1alpha1Api.md docs/CertificatesV1beta1Api.md docs/CoordinationApi.md docs/CoordinationV1Api.md @@ -55,10 +54,11 @@ docs/FlowcontrolApiserverV1Api.md docs/FlowcontrolV1Subject.md docs/InternalApiserverApi.md docs/InternalApiserverV1alpha1Api.md +docs/LifecycleApi.md +docs/LifecycleV1alpha1Api.md docs/LogsApi.md docs/NetworkingApi.md docs/NetworkingV1Api.md -docs/NetworkingV1beta1Api.md docs/NodeApi.md docs/NodeV1Api.md docs/OpenidApi.md @@ -75,12 +75,13 @@ docs/ResourceV1beta1Api.md docs/ResourceV1beta2Api.md docs/SchedulingApi.md docs/SchedulingV1Api.md -docs/SchedulingV1alpha2Api.md +docs/SchedulingV1alpha3Api.md +docs/SchedulingV1beta1Api.md docs/StorageApi.md docs/StorageV1Api.md docs/StorageV1TokenRequest.md -docs/StorageV1beta1Api.md docs/StoragemigrationApi.md +docs/StoragemigrationV1Api.md docs/StoragemigrationV1beta1Api.md docs/V1APIGroup.md docs/V1APIGroupList.md @@ -114,6 +115,7 @@ docs/V1CSINode.md docs/V1CSINodeDriver.md docs/V1CSINodeList.md docs/V1CSINodeSpec.md +docs/V1CSINodeStatus.md docs/V1CSIPersistentVolumeSource.md docs/V1CSIStorageCapacity.md docs/V1CSIStorageCapacityList.md @@ -136,7 +138,10 @@ docs/V1ClusterRole.md docs/V1ClusterRoleBinding.md docs/V1ClusterRoleBindingList.md docs/V1ClusterRoleList.md +docs/V1ClusterTrustBundle.md +docs/V1ClusterTrustBundleList.md docs/V1ClusterTrustBundleProjection.md +docs/V1ClusterTrustBundleSpec.md docs/V1ComponentCondition.md docs/V1ComponentStatus.md docs/V1ComponentStatusList.md @@ -209,11 +214,17 @@ docs/V1DeviceClassList.md docs/V1DeviceClassSpec.md docs/V1DeviceConstraint.md docs/V1DeviceCounterConsumption.md +docs/V1DeviceDerivedAttribute.md docs/V1DeviceRequest.md docs/V1DeviceRequestAllocationResult.md docs/V1DeviceSelector.md docs/V1DeviceSubRequest.md docs/V1DeviceTaint.md +docs/V1DeviceTaintRule.md +docs/V1DeviceTaintRuleList.md +docs/V1DeviceTaintRuleSpec.md +docs/V1DeviceTaintRuleStatus.md +docs/V1DeviceTaintSelector.md docs/V1DeviceToleration.md docs/V1DownwardAPIProjection.md docs/V1DownwardAPIVolumeFile.md @@ -235,6 +246,7 @@ docs/V1EphemeralContainer.md docs/V1EphemeralVolumeSource.md docs/V1EventSource.md docs/V1Eviction.md +docs/V1EvictionResponder.md docs/V1ExactDeviceRequest.md docs/V1ExecAction.md docs/V1ExemptPriorityLevelConfiguration.md @@ -303,6 +315,7 @@ docs/V1JSONSchemaProps.md docs/V1Job.md docs/V1JobCondition.md docs/V1JobList.md +docs/V1JobSchedulingConfiguration.md docs/V1JobSpec.md docs/V1JobStatus.md docs/V1JobTemplateSpec.md @@ -360,14 +373,19 @@ docs/V1NetworkPolicySpec.md docs/V1Node.md docs/V1NodeAddress.md docs/V1NodeAffinity.md +docs/V1NodeAllocatableMappedResources.md +docs/V1NodeAllocatableMapping.md +docs/V1NodeAllocatableOverhead.md +docs/V1NodeAllocatableOverheadResources.md +docs/V1NodeAllocatableResource.md docs/V1NodeAllocatableResourceClaimStatus.md -docs/V1NodeAllocatableResourceMapping.md docs/V1NodeCondition.md docs/V1NodeConfigSource.md docs/V1NodeConfigStatus.md docs/V1NodeDaemonEndpoints.md docs/V1NodeFeatures.md docs/V1NodeList.md +docs/V1NodePodPreemptionPolicy.md docs/V1NodeRuntimeHandler.md docs/V1NodeRuntimeHandlerFeatures.md docs/V1NodeSelector.md @@ -406,6 +424,10 @@ docs/V1PodAffinity.md docs/V1PodAffinityTerm.md docs/V1PodAntiAffinity.md docs/V1PodCertificateProjection.md +docs/V1PodCertificateRequest.md +docs/V1PodCertificateRequestList.md +docs/V1PodCertificateRequestSpec.md +docs/V1PodCertificateRequestStatus.md docs/V1PodCondition.md docs/V1PodDNSConfig.md docs/V1PodDNSConfigOption.md @@ -432,6 +454,7 @@ docs/V1PodStatus.md docs/V1PodTemplate.md docs/V1PodTemplateList.md docs/V1PodTemplateSpec.md +docs/V1PodVolumeHealth.md docs/V1PolicyRule.md docs/V1PolicyRulesWithSubjects.md docs/V1PortStatus.md @@ -551,8 +574,14 @@ docs/V1StatusCause.md docs/V1StatusDetails.md docs/V1StorageClass.md docs/V1StorageClassList.md +docs/V1StorageHealth.md +docs/V1StorageHealthCondition.md docs/V1StorageOSPersistentVolumeSource.md docs/V1StorageOSVolumeSource.md +docs/V1StorageVersionMigration.md +docs/V1StorageVersionMigrationList.md +docs/V1StorageVersionMigrationSpec.md +docs/V1StorageVersionMigrationStatus.md docs/V1SubjectAccessReview.md docs/V1SubjectAccessReviewSpec.md docs/V1SubjectAccessReviewStatus.md @@ -600,6 +629,8 @@ docs/V1VolumeAttributesClass.md docs/V1VolumeAttributesClassList.md docs/V1VolumeDevice.md docs/V1VolumeError.md +docs/V1VolumeHealthCondition.md +docs/V1VolumeHealthStatus.md docs/V1VolumeMount.md docs/V1VolumeMountStatus.md docs/V1VolumeNodeAffinity.md @@ -613,9 +644,18 @@ docs/V1WebhookConversion.md docs/V1WeightedPodAffinityTerm.md docs/V1WindowsSecurityContextOptions.md docs/V1alpha1ApplyConfiguration.md -docs/V1alpha1ClusterTrustBundle.md -docs/V1alpha1ClusterTrustBundleList.md -docs/V1alpha1ClusterTrustBundleSpec.md +docs/V1alpha1Eviction.md +docs/V1alpha1EvictionList.md +docs/V1alpha1EvictionPodReference.md +docs/V1alpha1EvictionRequest.md +docs/V1alpha1EvictionRequestList.md +docs/V1alpha1EvictionRequestPodReference.md +docs/V1alpha1EvictionRequestSpec.md +docs/V1alpha1EvictionRequestStatus.md +docs/V1alpha1EvictionRequestTarget.md +docs/V1alpha1EvictionSpec.md +docs/V1alpha1EvictionStatus.md +docs/V1alpha1EvictionTarget.md docs/V1alpha1JSONPatch.md docs/V1alpha1MatchCondition.md docs/V1alpha1MatchResources.md @@ -629,43 +669,63 @@ docs/V1alpha1Mutation.md docs/V1alpha1NamedRuleWithOperations.md docs/V1alpha1ParamKind.md docs/V1alpha1ParamRef.md +docs/V1alpha1Requester.md +docs/V1alpha1ResponderStatus.md docs/V1alpha1ServerStorageVersion.md docs/V1alpha1StorageVersion.md docs/V1alpha1StorageVersionCondition.md docs/V1alpha1StorageVersionList.md docs/V1alpha1StorageVersionStatus.md +docs/V1alpha1TargetResponder.md docs/V1alpha1Variable.md -docs/V1alpha2GangSchedulingPolicy.md docs/V1alpha2LeaseCandidate.md docs/V1alpha2LeaseCandidateList.md docs/V1alpha2LeaseCandidateSpec.md -docs/V1alpha2PodGroup.md -docs/V1alpha2PodGroupList.md -docs/V1alpha2PodGroupResourceClaim.md -docs/V1alpha2PodGroupResourceClaimStatus.md -docs/V1alpha2PodGroupSchedulingConstraints.md -docs/V1alpha2PodGroupSchedulingPolicy.md -docs/V1alpha2PodGroupSpec.md -docs/V1alpha2PodGroupStatus.md -docs/V1alpha2PodGroupTemplate.md -docs/V1alpha2PodGroupTemplateReference.md -docs/V1alpha2TopologyConstraint.md -docs/V1alpha2TypedLocalObjectReference.md -docs/V1alpha2Workload.md -docs/V1alpha2WorkloadList.md -docs/V1alpha2WorkloadPodGroupTemplateReference.md -docs/V1alpha2WorkloadSpec.md +docs/V1alpha3CompositeDisruptionMode.md +docs/V1alpha3CompositeGangSchedulingPolicy.md +docs/V1alpha3CompositePodGroup.md +docs/V1alpha3CompositePodGroupList.md +docs/V1alpha3CompositePodGroupSchedulingConstraints.md +docs/V1alpha3CompositePodGroupSchedulingPolicy.md +docs/V1alpha3CompositePodGroupSpec.md +docs/V1alpha3CompositePodGroupStatus.md +docs/V1alpha3CompositePodGroupTemplate.md docs/V1alpha3DeviceTaint.md docs/V1alpha3DeviceTaintRule.md docs/V1alpha3DeviceTaintRuleList.md docs/V1alpha3DeviceTaintRuleSpec.md docs/V1alpha3DeviceTaintRuleStatus.md docs/V1alpha3DeviceTaintSelector.md +docs/V1alpha3DisruptionMode.md +docs/V1alpha3GangSchedulingPolicy.md +docs/V1alpha3PartitionTypeStatus.md +docs/V1alpha3PodGroup.md +docs/V1alpha3PodGroupList.md +docs/V1alpha3PodGroupResourceClaim.md +docs/V1alpha3PodGroupResourceClaimStatus.md +docs/V1alpha3PodGroupSchedulingConstraints.md +docs/V1alpha3PodGroupSchedulingPolicy.md +docs/V1alpha3PodGroupSpec.md +docs/V1alpha3PodGroupStatus.md +docs/V1alpha3PodGroupTemplate.md docs/V1alpha3PoolStatus.md docs/V1alpha3ResourcePoolStatusRequest.md docs/V1alpha3ResourcePoolStatusRequestList.md docs/V1alpha3ResourcePoolStatusRequestSpec.md docs/V1alpha3ResourcePoolStatusRequestStatus.md +docs/V1alpha3ShareableCapacityStatus.md +docs/V1alpha3ShareableSummaryStatus.md +docs/V1alpha3TopologyConstraint.md +docs/V1alpha3TypedLocalObjectReference.md +docs/V1alpha3Workload.md +docs/V1alpha3WorkloadList.md +docs/V1alpha3WorkloadPodGroupDisruptionMode.md +docs/V1alpha3WorkloadPodGroupGangSchedulingPolicy.md +docs/V1alpha3WorkloadPodGroupResourceClaim.md +docs/V1alpha3WorkloadPodGroupSchedulingConstraints.md +docs/V1alpha3WorkloadPodGroupSchedulingPolicy.md +docs/V1alpha3WorkloadReference.md +docs/V1alpha3WorkloadSpec.md docs/V1beta1AllocatedDeviceStatus.md docs/V1beta1AllocationResult.md docs/V1beta1ApplyConfiguration.md @@ -677,6 +737,11 @@ docs/V1beta1CapacityRequirements.md docs/V1beta1ClusterTrustBundle.md docs/V1beta1ClusterTrustBundleList.md docs/V1beta1ClusterTrustBundleSpec.md +docs/V1beta1CompositeDisruptionMode.md +docs/V1beta1CompositeGangSchedulingPolicy.md +docs/V1beta1CompositePodGroupSchedulingConstraints.md +docs/V1beta1CompositePodGroupSchedulingPolicy.md +docs/V1beta1CompositePodGroupTemplate.md docs/V1beta1Counter.md docs/V1beta1CounterSet.md docs/V1beta1Device.md @@ -692,15 +757,15 @@ docs/V1beta1DeviceClassList.md docs/V1beta1DeviceClassSpec.md docs/V1beta1DeviceConstraint.md docs/V1beta1DeviceCounterConsumption.md +docs/V1beta1DeviceDerivedAttribute.md docs/V1beta1DeviceRequest.md docs/V1beta1DeviceRequestAllocationResult.md docs/V1beta1DeviceSelector.md docs/V1beta1DeviceSubRequest.md docs/V1beta1DeviceTaint.md docs/V1beta1DeviceToleration.md -docs/V1beta1IPAddress.md -docs/V1beta1IPAddressList.md -docs/V1beta1IPAddressSpec.md +docs/V1beta1DisruptionMode.md +docs/V1beta1GangSchedulingPolicy.md docs/V1beta1JSONPatch.md docs/V1beta1LeaseCandidate.md docs/V1beta1LeaseCandidateList.md @@ -716,15 +781,25 @@ docs/V1beta1MutatingAdmissionPolicySpec.md docs/V1beta1Mutation.md docs/V1beta1NamedRuleWithOperations.md docs/V1beta1NetworkDeviceData.md -docs/V1beta1NodeAllocatableResourceMapping.md +docs/V1beta1NodeAllocatableMapping.md +docs/V1beta1NodeAllocatableOverhead.md +docs/V1beta1NodeAllocatableResource.md docs/V1beta1OpaqueDeviceConfiguration.md docs/V1beta1ParamKind.md docs/V1beta1ParamRef.md -docs/V1beta1ParentReference.md docs/V1beta1PodCertificateRequest.md docs/V1beta1PodCertificateRequestList.md docs/V1beta1PodCertificateRequestSpec.md docs/V1beta1PodCertificateRequestStatus.md +docs/V1beta1PodGroup.md +docs/V1beta1PodGroupList.md +docs/V1beta1PodGroupResourceClaim.md +docs/V1beta1PodGroupResourceClaimStatus.md +docs/V1beta1PodGroupSchedulingConstraints.md +docs/V1beta1PodGroupSchedulingPolicy.md +docs/V1beta1PodGroupSpec.md +docs/V1beta1PodGroupStatus.md +docs/V1beta1PodGroupTemplate.md docs/V1beta1ResourceClaim.md docs/V1beta1ResourceClaimConsumerReference.md docs/V1beta1ResourceClaimList.md @@ -737,17 +812,17 @@ docs/V1beta1ResourcePool.md docs/V1beta1ResourceSlice.md docs/V1beta1ResourceSliceList.md docs/V1beta1ResourceSliceSpec.md -docs/V1beta1ServiceCIDR.md -docs/V1beta1ServiceCIDRList.md -docs/V1beta1ServiceCIDRSpec.md -docs/V1beta1ServiceCIDRStatus.md docs/V1beta1StorageVersionMigration.md docs/V1beta1StorageVersionMigrationList.md docs/V1beta1StorageVersionMigrationSpec.md docs/V1beta1StorageVersionMigrationStatus.md +docs/V1beta1TopologyConstraint.md +docs/V1beta1TypedLocalObjectReference.md docs/V1beta1Variable.md -docs/V1beta1VolumeAttributesClass.md -docs/V1beta1VolumeAttributesClassList.md +docs/V1beta1Workload.md +docs/V1beta1WorkloadList.md +docs/V1beta1WorkloadReference.md +docs/V1beta1WorkloadSpec.md docs/V1beta2AllocatedDeviceStatus.md docs/V1beta2AllocationResult.md docs/V1beta2CELDeviceSelector.md @@ -769,6 +844,7 @@ docs/V1beta2DeviceClassList.md docs/V1beta2DeviceClassSpec.md docs/V1beta2DeviceConstraint.md docs/V1beta2DeviceCounterConsumption.md +docs/V1beta2DeviceDerivedAttribute.md docs/V1beta2DeviceRequest.md docs/V1beta2DeviceRequestAllocationResult.md docs/V1beta2DeviceSelector.md @@ -782,7 +858,9 @@ docs/V1beta2DeviceTaintSelector.md docs/V1beta2DeviceToleration.md docs/V1beta2ExactDeviceRequest.md docs/V1beta2NetworkDeviceData.md -docs/V1beta2NodeAllocatableResourceMapping.md +docs/V1beta2NodeAllocatableMapping.md +docs/V1beta2NodeAllocatableOverhead.md +docs/V1beta2NodeAllocatableResource.md docs/V1beta2OpaqueDeviceConfiguration.md docs/V1beta2ResourceClaim.md docs/V1beta2ResourceClaimConsumerReference.md @@ -871,7 +949,6 @@ src/main/java/io/kubernetes/client/openapi/apis/BatchApi.java src/main/java/io/kubernetes/client/openapi/apis/BatchV1Api.java src/main/java/io/kubernetes/client/openapi/apis/CertificatesApi.java src/main/java/io/kubernetes/client/openapi/apis/CertificatesV1Api.java -src/main/java/io/kubernetes/client/openapi/apis/CertificatesV1alpha1Api.java src/main/java/io/kubernetes/client/openapi/apis/CertificatesV1beta1Api.java src/main/java/io/kubernetes/client/openapi/apis/CoordinationApi.java src/main/java/io/kubernetes/client/openapi/apis/CoordinationV1Api.java @@ -888,10 +965,11 @@ src/main/java/io/kubernetes/client/openapi/apis/FlowcontrolApiserverApi.java src/main/java/io/kubernetes/client/openapi/apis/FlowcontrolApiserverV1Api.java src/main/java/io/kubernetes/client/openapi/apis/InternalApiserverApi.java src/main/java/io/kubernetes/client/openapi/apis/InternalApiserverV1alpha1Api.java +src/main/java/io/kubernetes/client/openapi/apis/LifecycleApi.java +src/main/java/io/kubernetes/client/openapi/apis/LifecycleV1alpha1Api.java src/main/java/io/kubernetes/client/openapi/apis/LogsApi.java src/main/java/io/kubernetes/client/openapi/apis/NetworkingApi.java src/main/java/io/kubernetes/client/openapi/apis/NetworkingV1Api.java -src/main/java/io/kubernetes/client/openapi/apis/NetworkingV1beta1Api.java src/main/java/io/kubernetes/client/openapi/apis/NodeApi.java src/main/java/io/kubernetes/client/openapi/apis/NodeV1Api.java src/main/java/io/kubernetes/client/openapi/apis/OpenidApi.java @@ -906,11 +984,12 @@ src/main/java/io/kubernetes/client/openapi/apis/ResourceV1beta1Api.java src/main/java/io/kubernetes/client/openapi/apis/ResourceV1beta2Api.java src/main/java/io/kubernetes/client/openapi/apis/SchedulingApi.java src/main/java/io/kubernetes/client/openapi/apis/SchedulingV1Api.java -src/main/java/io/kubernetes/client/openapi/apis/SchedulingV1alpha2Api.java +src/main/java/io/kubernetes/client/openapi/apis/SchedulingV1alpha3Api.java +src/main/java/io/kubernetes/client/openapi/apis/SchedulingV1beta1Api.java src/main/java/io/kubernetes/client/openapi/apis/StorageApi.java src/main/java/io/kubernetes/client/openapi/apis/StorageV1Api.java -src/main/java/io/kubernetes/client/openapi/apis/StorageV1beta1Api.java src/main/java/io/kubernetes/client/openapi/apis/StoragemigrationApi.java +src/main/java/io/kubernetes/client/openapi/apis/StoragemigrationV1Api.java src/main/java/io/kubernetes/client/openapi/apis/StoragemigrationV1beta1Api.java src/main/java/io/kubernetes/client/openapi/apis/VersionApi.java src/main/java/io/kubernetes/client/openapi/apis/WellKnownApi.java @@ -970,6 +1049,7 @@ src/main/java/io/kubernetes/client/openapi/models/V1CSINode.java src/main/java/io/kubernetes/client/openapi/models/V1CSINodeDriver.java src/main/java/io/kubernetes/client/openapi/models/V1CSINodeList.java src/main/java/io/kubernetes/client/openapi/models/V1CSINodeSpec.java +src/main/java/io/kubernetes/client/openapi/models/V1CSINodeStatus.java src/main/java/io/kubernetes/client/openapi/models/V1CSIPersistentVolumeSource.java src/main/java/io/kubernetes/client/openapi/models/V1CSIStorageCapacity.java src/main/java/io/kubernetes/client/openapi/models/V1CSIStorageCapacityList.java @@ -992,7 +1072,10 @@ src/main/java/io/kubernetes/client/openapi/models/V1ClusterRole.java src/main/java/io/kubernetes/client/openapi/models/V1ClusterRoleBinding.java src/main/java/io/kubernetes/client/openapi/models/V1ClusterRoleBindingList.java src/main/java/io/kubernetes/client/openapi/models/V1ClusterRoleList.java +src/main/java/io/kubernetes/client/openapi/models/V1ClusterTrustBundle.java +src/main/java/io/kubernetes/client/openapi/models/V1ClusterTrustBundleList.java src/main/java/io/kubernetes/client/openapi/models/V1ClusterTrustBundleProjection.java +src/main/java/io/kubernetes/client/openapi/models/V1ClusterTrustBundleSpec.java src/main/java/io/kubernetes/client/openapi/models/V1ComponentCondition.java src/main/java/io/kubernetes/client/openapi/models/V1ComponentStatus.java src/main/java/io/kubernetes/client/openapi/models/V1ComponentStatusList.java @@ -1065,11 +1148,17 @@ src/main/java/io/kubernetes/client/openapi/models/V1DeviceClassList.java src/main/java/io/kubernetes/client/openapi/models/V1DeviceClassSpec.java src/main/java/io/kubernetes/client/openapi/models/V1DeviceConstraint.java src/main/java/io/kubernetes/client/openapi/models/V1DeviceCounterConsumption.java +src/main/java/io/kubernetes/client/openapi/models/V1DeviceDerivedAttribute.java src/main/java/io/kubernetes/client/openapi/models/V1DeviceRequest.java src/main/java/io/kubernetes/client/openapi/models/V1DeviceRequestAllocationResult.java src/main/java/io/kubernetes/client/openapi/models/V1DeviceSelector.java src/main/java/io/kubernetes/client/openapi/models/V1DeviceSubRequest.java src/main/java/io/kubernetes/client/openapi/models/V1DeviceTaint.java +src/main/java/io/kubernetes/client/openapi/models/V1DeviceTaintRule.java +src/main/java/io/kubernetes/client/openapi/models/V1DeviceTaintRuleList.java +src/main/java/io/kubernetes/client/openapi/models/V1DeviceTaintRuleSpec.java +src/main/java/io/kubernetes/client/openapi/models/V1DeviceTaintRuleStatus.java +src/main/java/io/kubernetes/client/openapi/models/V1DeviceTaintSelector.java src/main/java/io/kubernetes/client/openapi/models/V1DeviceToleration.java src/main/java/io/kubernetes/client/openapi/models/V1DownwardAPIProjection.java src/main/java/io/kubernetes/client/openapi/models/V1DownwardAPIVolumeFile.java @@ -1091,6 +1180,7 @@ src/main/java/io/kubernetes/client/openapi/models/V1EphemeralContainer.java src/main/java/io/kubernetes/client/openapi/models/V1EphemeralVolumeSource.java src/main/java/io/kubernetes/client/openapi/models/V1EventSource.java src/main/java/io/kubernetes/client/openapi/models/V1Eviction.java +src/main/java/io/kubernetes/client/openapi/models/V1EvictionResponder.java src/main/java/io/kubernetes/client/openapi/models/V1ExactDeviceRequest.java src/main/java/io/kubernetes/client/openapi/models/V1ExecAction.java src/main/java/io/kubernetes/client/openapi/models/V1ExemptPriorityLevelConfiguration.java @@ -1159,6 +1249,7 @@ src/main/java/io/kubernetes/client/openapi/models/V1JSONSchemaProps.java src/main/java/io/kubernetes/client/openapi/models/V1Job.java src/main/java/io/kubernetes/client/openapi/models/V1JobCondition.java src/main/java/io/kubernetes/client/openapi/models/V1JobList.java +src/main/java/io/kubernetes/client/openapi/models/V1JobSchedulingConfiguration.java src/main/java/io/kubernetes/client/openapi/models/V1JobSpec.java src/main/java/io/kubernetes/client/openapi/models/V1JobStatus.java src/main/java/io/kubernetes/client/openapi/models/V1JobTemplateSpec.java @@ -1216,14 +1307,19 @@ src/main/java/io/kubernetes/client/openapi/models/V1NetworkPolicySpec.java src/main/java/io/kubernetes/client/openapi/models/V1Node.java src/main/java/io/kubernetes/client/openapi/models/V1NodeAddress.java src/main/java/io/kubernetes/client/openapi/models/V1NodeAffinity.java +src/main/java/io/kubernetes/client/openapi/models/V1NodeAllocatableMappedResources.java +src/main/java/io/kubernetes/client/openapi/models/V1NodeAllocatableMapping.java +src/main/java/io/kubernetes/client/openapi/models/V1NodeAllocatableOverhead.java +src/main/java/io/kubernetes/client/openapi/models/V1NodeAllocatableOverheadResources.java +src/main/java/io/kubernetes/client/openapi/models/V1NodeAllocatableResource.java src/main/java/io/kubernetes/client/openapi/models/V1NodeAllocatableResourceClaimStatus.java -src/main/java/io/kubernetes/client/openapi/models/V1NodeAllocatableResourceMapping.java src/main/java/io/kubernetes/client/openapi/models/V1NodeCondition.java src/main/java/io/kubernetes/client/openapi/models/V1NodeConfigSource.java src/main/java/io/kubernetes/client/openapi/models/V1NodeConfigStatus.java src/main/java/io/kubernetes/client/openapi/models/V1NodeDaemonEndpoints.java src/main/java/io/kubernetes/client/openapi/models/V1NodeFeatures.java src/main/java/io/kubernetes/client/openapi/models/V1NodeList.java +src/main/java/io/kubernetes/client/openapi/models/V1NodePodPreemptionPolicy.java src/main/java/io/kubernetes/client/openapi/models/V1NodeRuntimeHandler.java src/main/java/io/kubernetes/client/openapi/models/V1NodeRuntimeHandlerFeatures.java src/main/java/io/kubernetes/client/openapi/models/V1NodeSelector.java @@ -1262,6 +1358,10 @@ src/main/java/io/kubernetes/client/openapi/models/V1PodAffinity.java src/main/java/io/kubernetes/client/openapi/models/V1PodAffinityTerm.java src/main/java/io/kubernetes/client/openapi/models/V1PodAntiAffinity.java src/main/java/io/kubernetes/client/openapi/models/V1PodCertificateProjection.java +src/main/java/io/kubernetes/client/openapi/models/V1PodCertificateRequest.java +src/main/java/io/kubernetes/client/openapi/models/V1PodCertificateRequestList.java +src/main/java/io/kubernetes/client/openapi/models/V1PodCertificateRequestSpec.java +src/main/java/io/kubernetes/client/openapi/models/V1PodCertificateRequestStatus.java src/main/java/io/kubernetes/client/openapi/models/V1PodCondition.java src/main/java/io/kubernetes/client/openapi/models/V1PodDNSConfig.java src/main/java/io/kubernetes/client/openapi/models/V1PodDNSConfigOption.java @@ -1288,6 +1388,7 @@ src/main/java/io/kubernetes/client/openapi/models/V1PodStatus.java src/main/java/io/kubernetes/client/openapi/models/V1PodTemplate.java src/main/java/io/kubernetes/client/openapi/models/V1PodTemplateList.java src/main/java/io/kubernetes/client/openapi/models/V1PodTemplateSpec.java +src/main/java/io/kubernetes/client/openapi/models/V1PodVolumeHealth.java src/main/java/io/kubernetes/client/openapi/models/V1PolicyRule.java src/main/java/io/kubernetes/client/openapi/models/V1PolicyRulesWithSubjects.java src/main/java/io/kubernetes/client/openapi/models/V1PortStatus.java @@ -1407,8 +1508,14 @@ src/main/java/io/kubernetes/client/openapi/models/V1StatusCause.java src/main/java/io/kubernetes/client/openapi/models/V1StatusDetails.java src/main/java/io/kubernetes/client/openapi/models/V1StorageClass.java src/main/java/io/kubernetes/client/openapi/models/V1StorageClassList.java +src/main/java/io/kubernetes/client/openapi/models/V1StorageHealth.java +src/main/java/io/kubernetes/client/openapi/models/V1StorageHealthCondition.java src/main/java/io/kubernetes/client/openapi/models/V1StorageOSPersistentVolumeSource.java src/main/java/io/kubernetes/client/openapi/models/V1StorageOSVolumeSource.java +src/main/java/io/kubernetes/client/openapi/models/V1StorageVersionMigration.java +src/main/java/io/kubernetes/client/openapi/models/V1StorageVersionMigrationList.java +src/main/java/io/kubernetes/client/openapi/models/V1StorageVersionMigrationSpec.java +src/main/java/io/kubernetes/client/openapi/models/V1StorageVersionMigrationStatus.java src/main/java/io/kubernetes/client/openapi/models/V1SubjectAccessReview.java src/main/java/io/kubernetes/client/openapi/models/V1SubjectAccessReviewSpec.java src/main/java/io/kubernetes/client/openapi/models/V1SubjectAccessReviewStatus.java @@ -1456,6 +1563,8 @@ src/main/java/io/kubernetes/client/openapi/models/V1VolumeAttributesClass.java src/main/java/io/kubernetes/client/openapi/models/V1VolumeAttributesClassList.java src/main/java/io/kubernetes/client/openapi/models/V1VolumeDevice.java src/main/java/io/kubernetes/client/openapi/models/V1VolumeError.java +src/main/java/io/kubernetes/client/openapi/models/V1VolumeHealthCondition.java +src/main/java/io/kubernetes/client/openapi/models/V1VolumeHealthStatus.java src/main/java/io/kubernetes/client/openapi/models/V1VolumeMount.java src/main/java/io/kubernetes/client/openapi/models/V1VolumeMountStatus.java src/main/java/io/kubernetes/client/openapi/models/V1VolumeNodeAffinity.java @@ -1469,9 +1578,18 @@ src/main/java/io/kubernetes/client/openapi/models/V1WebhookConversion.java src/main/java/io/kubernetes/client/openapi/models/V1WeightedPodAffinityTerm.java src/main/java/io/kubernetes/client/openapi/models/V1WindowsSecurityContextOptions.java src/main/java/io/kubernetes/client/openapi/models/V1alpha1ApplyConfiguration.java -src/main/java/io/kubernetes/client/openapi/models/V1alpha1ClusterTrustBundle.java -src/main/java/io/kubernetes/client/openapi/models/V1alpha1ClusterTrustBundleList.java -src/main/java/io/kubernetes/client/openapi/models/V1alpha1ClusterTrustBundleSpec.java +src/main/java/io/kubernetes/client/openapi/models/V1alpha1Eviction.java +src/main/java/io/kubernetes/client/openapi/models/V1alpha1EvictionList.java +src/main/java/io/kubernetes/client/openapi/models/V1alpha1EvictionPodReference.java +src/main/java/io/kubernetes/client/openapi/models/V1alpha1EvictionRequest.java +src/main/java/io/kubernetes/client/openapi/models/V1alpha1EvictionRequestList.java +src/main/java/io/kubernetes/client/openapi/models/V1alpha1EvictionRequestPodReference.java +src/main/java/io/kubernetes/client/openapi/models/V1alpha1EvictionRequestSpec.java +src/main/java/io/kubernetes/client/openapi/models/V1alpha1EvictionRequestStatus.java +src/main/java/io/kubernetes/client/openapi/models/V1alpha1EvictionRequestTarget.java +src/main/java/io/kubernetes/client/openapi/models/V1alpha1EvictionSpec.java +src/main/java/io/kubernetes/client/openapi/models/V1alpha1EvictionStatus.java +src/main/java/io/kubernetes/client/openapi/models/V1alpha1EvictionTarget.java src/main/java/io/kubernetes/client/openapi/models/V1alpha1JSONPatch.java src/main/java/io/kubernetes/client/openapi/models/V1alpha1MatchCondition.java src/main/java/io/kubernetes/client/openapi/models/V1alpha1MatchResources.java @@ -1485,43 +1603,63 @@ src/main/java/io/kubernetes/client/openapi/models/V1alpha1Mutation.java src/main/java/io/kubernetes/client/openapi/models/V1alpha1NamedRuleWithOperations.java src/main/java/io/kubernetes/client/openapi/models/V1alpha1ParamKind.java src/main/java/io/kubernetes/client/openapi/models/V1alpha1ParamRef.java +src/main/java/io/kubernetes/client/openapi/models/V1alpha1Requester.java +src/main/java/io/kubernetes/client/openapi/models/V1alpha1ResponderStatus.java src/main/java/io/kubernetes/client/openapi/models/V1alpha1ServerStorageVersion.java src/main/java/io/kubernetes/client/openapi/models/V1alpha1StorageVersion.java src/main/java/io/kubernetes/client/openapi/models/V1alpha1StorageVersionCondition.java src/main/java/io/kubernetes/client/openapi/models/V1alpha1StorageVersionList.java src/main/java/io/kubernetes/client/openapi/models/V1alpha1StorageVersionStatus.java +src/main/java/io/kubernetes/client/openapi/models/V1alpha1TargetResponder.java src/main/java/io/kubernetes/client/openapi/models/V1alpha1Variable.java -src/main/java/io/kubernetes/client/openapi/models/V1alpha2GangSchedulingPolicy.java src/main/java/io/kubernetes/client/openapi/models/V1alpha2LeaseCandidate.java src/main/java/io/kubernetes/client/openapi/models/V1alpha2LeaseCandidateList.java src/main/java/io/kubernetes/client/openapi/models/V1alpha2LeaseCandidateSpec.java -src/main/java/io/kubernetes/client/openapi/models/V1alpha2PodGroup.java -src/main/java/io/kubernetes/client/openapi/models/V1alpha2PodGroupList.java -src/main/java/io/kubernetes/client/openapi/models/V1alpha2PodGroupResourceClaim.java -src/main/java/io/kubernetes/client/openapi/models/V1alpha2PodGroupResourceClaimStatus.java -src/main/java/io/kubernetes/client/openapi/models/V1alpha2PodGroupSchedulingConstraints.java -src/main/java/io/kubernetes/client/openapi/models/V1alpha2PodGroupSchedulingPolicy.java -src/main/java/io/kubernetes/client/openapi/models/V1alpha2PodGroupSpec.java -src/main/java/io/kubernetes/client/openapi/models/V1alpha2PodGroupStatus.java -src/main/java/io/kubernetes/client/openapi/models/V1alpha2PodGroupTemplate.java -src/main/java/io/kubernetes/client/openapi/models/V1alpha2PodGroupTemplateReference.java -src/main/java/io/kubernetes/client/openapi/models/V1alpha2TopologyConstraint.java -src/main/java/io/kubernetes/client/openapi/models/V1alpha2TypedLocalObjectReference.java -src/main/java/io/kubernetes/client/openapi/models/V1alpha2Workload.java -src/main/java/io/kubernetes/client/openapi/models/V1alpha2WorkloadList.java -src/main/java/io/kubernetes/client/openapi/models/V1alpha2WorkloadPodGroupTemplateReference.java -src/main/java/io/kubernetes/client/openapi/models/V1alpha2WorkloadSpec.java +src/main/java/io/kubernetes/client/openapi/models/V1alpha3CompositeDisruptionMode.java +src/main/java/io/kubernetes/client/openapi/models/V1alpha3CompositeGangSchedulingPolicy.java +src/main/java/io/kubernetes/client/openapi/models/V1alpha3CompositePodGroup.java +src/main/java/io/kubernetes/client/openapi/models/V1alpha3CompositePodGroupList.java +src/main/java/io/kubernetes/client/openapi/models/V1alpha3CompositePodGroupSchedulingConstraints.java +src/main/java/io/kubernetes/client/openapi/models/V1alpha3CompositePodGroupSchedulingPolicy.java +src/main/java/io/kubernetes/client/openapi/models/V1alpha3CompositePodGroupSpec.java +src/main/java/io/kubernetes/client/openapi/models/V1alpha3CompositePodGroupStatus.java +src/main/java/io/kubernetes/client/openapi/models/V1alpha3CompositePodGroupTemplate.java src/main/java/io/kubernetes/client/openapi/models/V1alpha3DeviceTaint.java src/main/java/io/kubernetes/client/openapi/models/V1alpha3DeviceTaintRule.java src/main/java/io/kubernetes/client/openapi/models/V1alpha3DeviceTaintRuleList.java src/main/java/io/kubernetes/client/openapi/models/V1alpha3DeviceTaintRuleSpec.java src/main/java/io/kubernetes/client/openapi/models/V1alpha3DeviceTaintRuleStatus.java src/main/java/io/kubernetes/client/openapi/models/V1alpha3DeviceTaintSelector.java +src/main/java/io/kubernetes/client/openapi/models/V1alpha3DisruptionMode.java +src/main/java/io/kubernetes/client/openapi/models/V1alpha3GangSchedulingPolicy.java +src/main/java/io/kubernetes/client/openapi/models/V1alpha3PartitionTypeStatus.java +src/main/java/io/kubernetes/client/openapi/models/V1alpha3PodGroup.java +src/main/java/io/kubernetes/client/openapi/models/V1alpha3PodGroupList.java +src/main/java/io/kubernetes/client/openapi/models/V1alpha3PodGroupResourceClaim.java +src/main/java/io/kubernetes/client/openapi/models/V1alpha3PodGroupResourceClaimStatus.java +src/main/java/io/kubernetes/client/openapi/models/V1alpha3PodGroupSchedulingConstraints.java +src/main/java/io/kubernetes/client/openapi/models/V1alpha3PodGroupSchedulingPolicy.java +src/main/java/io/kubernetes/client/openapi/models/V1alpha3PodGroupSpec.java +src/main/java/io/kubernetes/client/openapi/models/V1alpha3PodGroupStatus.java +src/main/java/io/kubernetes/client/openapi/models/V1alpha3PodGroupTemplate.java src/main/java/io/kubernetes/client/openapi/models/V1alpha3PoolStatus.java src/main/java/io/kubernetes/client/openapi/models/V1alpha3ResourcePoolStatusRequest.java src/main/java/io/kubernetes/client/openapi/models/V1alpha3ResourcePoolStatusRequestList.java src/main/java/io/kubernetes/client/openapi/models/V1alpha3ResourcePoolStatusRequestSpec.java src/main/java/io/kubernetes/client/openapi/models/V1alpha3ResourcePoolStatusRequestStatus.java +src/main/java/io/kubernetes/client/openapi/models/V1alpha3ShareableCapacityStatus.java +src/main/java/io/kubernetes/client/openapi/models/V1alpha3ShareableSummaryStatus.java +src/main/java/io/kubernetes/client/openapi/models/V1alpha3TopologyConstraint.java +src/main/java/io/kubernetes/client/openapi/models/V1alpha3TypedLocalObjectReference.java +src/main/java/io/kubernetes/client/openapi/models/V1alpha3Workload.java +src/main/java/io/kubernetes/client/openapi/models/V1alpha3WorkloadList.java +src/main/java/io/kubernetes/client/openapi/models/V1alpha3WorkloadPodGroupDisruptionMode.java +src/main/java/io/kubernetes/client/openapi/models/V1alpha3WorkloadPodGroupGangSchedulingPolicy.java +src/main/java/io/kubernetes/client/openapi/models/V1alpha3WorkloadPodGroupResourceClaim.java +src/main/java/io/kubernetes/client/openapi/models/V1alpha3WorkloadPodGroupSchedulingConstraints.java +src/main/java/io/kubernetes/client/openapi/models/V1alpha3WorkloadPodGroupSchedulingPolicy.java +src/main/java/io/kubernetes/client/openapi/models/V1alpha3WorkloadReference.java +src/main/java/io/kubernetes/client/openapi/models/V1alpha3WorkloadSpec.java src/main/java/io/kubernetes/client/openapi/models/V1beta1AllocatedDeviceStatus.java src/main/java/io/kubernetes/client/openapi/models/V1beta1AllocationResult.java src/main/java/io/kubernetes/client/openapi/models/V1beta1ApplyConfiguration.java @@ -1533,6 +1671,11 @@ src/main/java/io/kubernetes/client/openapi/models/V1beta1CapacityRequirements.ja src/main/java/io/kubernetes/client/openapi/models/V1beta1ClusterTrustBundle.java src/main/java/io/kubernetes/client/openapi/models/V1beta1ClusterTrustBundleList.java src/main/java/io/kubernetes/client/openapi/models/V1beta1ClusterTrustBundleSpec.java +src/main/java/io/kubernetes/client/openapi/models/V1beta1CompositeDisruptionMode.java +src/main/java/io/kubernetes/client/openapi/models/V1beta1CompositeGangSchedulingPolicy.java +src/main/java/io/kubernetes/client/openapi/models/V1beta1CompositePodGroupSchedulingConstraints.java +src/main/java/io/kubernetes/client/openapi/models/V1beta1CompositePodGroupSchedulingPolicy.java +src/main/java/io/kubernetes/client/openapi/models/V1beta1CompositePodGroupTemplate.java src/main/java/io/kubernetes/client/openapi/models/V1beta1Counter.java src/main/java/io/kubernetes/client/openapi/models/V1beta1CounterSet.java src/main/java/io/kubernetes/client/openapi/models/V1beta1Device.java @@ -1548,15 +1691,15 @@ src/main/java/io/kubernetes/client/openapi/models/V1beta1DeviceClassList.java src/main/java/io/kubernetes/client/openapi/models/V1beta1DeviceClassSpec.java src/main/java/io/kubernetes/client/openapi/models/V1beta1DeviceConstraint.java src/main/java/io/kubernetes/client/openapi/models/V1beta1DeviceCounterConsumption.java +src/main/java/io/kubernetes/client/openapi/models/V1beta1DeviceDerivedAttribute.java src/main/java/io/kubernetes/client/openapi/models/V1beta1DeviceRequest.java src/main/java/io/kubernetes/client/openapi/models/V1beta1DeviceRequestAllocationResult.java src/main/java/io/kubernetes/client/openapi/models/V1beta1DeviceSelector.java src/main/java/io/kubernetes/client/openapi/models/V1beta1DeviceSubRequest.java src/main/java/io/kubernetes/client/openapi/models/V1beta1DeviceTaint.java src/main/java/io/kubernetes/client/openapi/models/V1beta1DeviceToleration.java -src/main/java/io/kubernetes/client/openapi/models/V1beta1IPAddress.java -src/main/java/io/kubernetes/client/openapi/models/V1beta1IPAddressList.java -src/main/java/io/kubernetes/client/openapi/models/V1beta1IPAddressSpec.java +src/main/java/io/kubernetes/client/openapi/models/V1beta1DisruptionMode.java +src/main/java/io/kubernetes/client/openapi/models/V1beta1GangSchedulingPolicy.java src/main/java/io/kubernetes/client/openapi/models/V1beta1JSONPatch.java src/main/java/io/kubernetes/client/openapi/models/V1beta1LeaseCandidate.java src/main/java/io/kubernetes/client/openapi/models/V1beta1LeaseCandidateList.java @@ -1572,15 +1715,25 @@ src/main/java/io/kubernetes/client/openapi/models/V1beta1MutatingAdmissionPolicy src/main/java/io/kubernetes/client/openapi/models/V1beta1Mutation.java src/main/java/io/kubernetes/client/openapi/models/V1beta1NamedRuleWithOperations.java src/main/java/io/kubernetes/client/openapi/models/V1beta1NetworkDeviceData.java -src/main/java/io/kubernetes/client/openapi/models/V1beta1NodeAllocatableResourceMapping.java +src/main/java/io/kubernetes/client/openapi/models/V1beta1NodeAllocatableMapping.java +src/main/java/io/kubernetes/client/openapi/models/V1beta1NodeAllocatableOverhead.java +src/main/java/io/kubernetes/client/openapi/models/V1beta1NodeAllocatableResource.java src/main/java/io/kubernetes/client/openapi/models/V1beta1OpaqueDeviceConfiguration.java src/main/java/io/kubernetes/client/openapi/models/V1beta1ParamKind.java src/main/java/io/kubernetes/client/openapi/models/V1beta1ParamRef.java -src/main/java/io/kubernetes/client/openapi/models/V1beta1ParentReference.java src/main/java/io/kubernetes/client/openapi/models/V1beta1PodCertificateRequest.java src/main/java/io/kubernetes/client/openapi/models/V1beta1PodCertificateRequestList.java src/main/java/io/kubernetes/client/openapi/models/V1beta1PodCertificateRequestSpec.java src/main/java/io/kubernetes/client/openapi/models/V1beta1PodCertificateRequestStatus.java +src/main/java/io/kubernetes/client/openapi/models/V1beta1PodGroup.java +src/main/java/io/kubernetes/client/openapi/models/V1beta1PodGroupList.java +src/main/java/io/kubernetes/client/openapi/models/V1beta1PodGroupResourceClaim.java +src/main/java/io/kubernetes/client/openapi/models/V1beta1PodGroupResourceClaimStatus.java +src/main/java/io/kubernetes/client/openapi/models/V1beta1PodGroupSchedulingConstraints.java +src/main/java/io/kubernetes/client/openapi/models/V1beta1PodGroupSchedulingPolicy.java +src/main/java/io/kubernetes/client/openapi/models/V1beta1PodGroupSpec.java +src/main/java/io/kubernetes/client/openapi/models/V1beta1PodGroupStatus.java +src/main/java/io/kubernetes/client/openapi/models/V1beta1PodGroupTemplate.java src/main/java/io/kubernetes/client/openapi/models/V1beta1ResourceClaim.java src/main/java/io/kubernetes/client/openapi/models/V1beta1ResourceClaimConsumerReference.java src/main/java/io/kubernetes/client/openapi/models/V1beta1ResourceClaimList.java @@ -1593,17 +1746,17 @@ src/main/java/io/kubernetes/client/openapi/models/V1beta1ResourcePool.java src/main/java/io/kubernetes/client/openapi/models/V1beta1ResourceSlice.java src/main/java/io/kubernetes/client/openapi/models/V1beta1ResourceSliceList.java src/main/java/io/kubernetes/client/openapi/models/V1beta1ResourceSliceSpec.java -src/main/java/io/kubernetes/client/openapi/models/V1beta1ServiceCIDR.java -src/main/java/io/kubernetes/client/openapi/models/V1beta1ServiceCIDRList.java -src/main/java/io/kubernetes/client/openapi/models/V1beta1ServiceCIDRSpec.java -src/main/java/io/kubernetes/client/openapi/models/V1beta1ServiceCIDRStatus.java src/main/java/io/kubernetes/client/openapi/models/V1beta1StorageVersionMigration.java src/main/java/io/kubernetes/client/openapi/models/V1beta1StorageVersionMigrationList.java src/main/java/io/kubernetes/client/openapi/models/V1beta1StorageVersionMigrationSpec.java src/main/java/io/kubernetes/client/openapi/models/V1beta1StorageVersionMigrationStatus.java +src/main/java/io/kubernetes/client/openapi/models/V1beta1TopologyConstraint.java +src/main/java/io/kubernetes/client/openapi/models/V1beta1TypedLocalObjectReference.java src/main/java/io/kubernetes/client/openapi/models/V1beta1Variable.java -src/main/java/io/kubernetes/client/openapi/models/V1beta1VolumeAttributesClass.java -src/main/java/io/kubernetes/client/openapi/models/V1beta1VolumeAttributesClassList.java +src/main/java/io/kubernetes/client/openapi/models/V1beta1Workload.java +src/main/java/io/kubernetes/client/openapi/models/V1beta1WorkloadList.java +src/main/java/io/kubernetes/client/openapi/models/V1beta1WorkloadReference.java +src/main/java/io/kubernetes/client/openapi/models/V1beta1WorkloadSpec.java src/main/java/io/kubernetes/client/openapi/models/V1beta2AllocatedDeviceStatus.java src/main/java/io/kubernetes/client/openapi/models/V1beta2AllocationResult.java src/main/java/io/kubernetes/client/openapi/models/V1beta2CELDeviceSelector.java @@ -1625,6 +1778,7 @@ src/main/java/io/kubernetes/client/openapi/models/V1beta2DeviceClassList.java src/main/java/io/kubernetes/client/openapi/models/V1beta2DeviceClassSpec.java src/main/java/io/kubernetes/client/openapi/models/V1beta2DeviceConstraint.java src/main/java/io/kubernetes/client/openapi/models/V1beta2DeviceCounterConsumption.java +src/main/java/io/kubernetes/client/openapi/models/V1beta2DeviceDerivedAttribute.java src/main/java/io/kubernetes/client/openapi/models/V1beta2DeviceRequest.java src/main/java/io/kubernetes/client/openapi/models/V1beta2DeviceRequestAllocationResult.java src/main/java/io/kubernetes/client/openapi/models/V1beta2DeviceSelector.java @@ -1638,7 +1792,9 @@ src/main/java/io/kubernetes/client/openapi/models/V1beta2DeviceTaintSelector.jav src/main/java/io/kubernetes/client/openapi/models/V1beta2DeviceToleration.java src/main/java/io/kubernetes/client/openapi/models/V1beta2ExactDeviceRequest.java src/main/java/io/kubernetes/client/openapi/models/V1beta2NetworkDeviceData.java -src/main/java/io/kubernetes/client/openapi/models/V1beta2NodeAllocatableResourceMapping.java +src/main/java/io/kubernetes/client/openapi/models/V1beta2NodeAllocatableMapping.java +src/main/java/io/kubernetes/client/openapi/models/V1beta2NodeAllocatableOverhead.java +src/main/java/io/kubernetes/client/openapi/models/V1beta2NodeAllocatableResource.java src/main/java/io/kubernetes/client/openapi/models/V1beta2OpaqueDeviceConfiguration.java src/main/java/io/kubernetes/client/openapi/models/V1beta2ResourceClaim.java src/main/java/io/kubernetes/client/openapi/models/V1beta2ResourceClaimConsumerReference.java diff --git a/kubernetes/.openapi-generator/swagger.json-default.sha256 b/kubernetes/.openapi-generator/swagger.json-default.sha256 index c1142dc0be..d369244fb0 100644 --- a/kubernetes/.openapi-generator/swagger.json-default.sha256 +++ b/kubernetes/.openapi-generator/swagger.json-default.sha256 @@ -1 +1 @@ -a8141d8bcefffd44bfac51ca1224da97448638191872f8a40ded9f8d6f7b258a \ No newline at end of file +4800ef4306a1e5493f7159d59151da62cd8b527802f76b68370e1abb002b8c32 \ No newline at end of file diff --git a/kubernetes/api/openapi.yaml b/kubernetes/api/openapi.yaml index 221bf5cef4..c35d14a0ef 100644 --- a/kubernetes/api/openapi.yaml +++ b/kubernetes/api/openapi.yaml @@ -1,7 +1,7 @@ openapi: 3.0.1 info: title: Kubernetes - version: release-1.36 + version: release-1.37 servers: - url: / security: @@ -23,6 +23,9 @@ paths: application/vnd.kubernetes.protobuf: schema: $ref: "#/components/schemas/v1.APIVersions" + application/cbor: + schema: + $ref: "#/components/schemas/v1.APIVersions" description: OK "401": content: {} @@ -30,6 +33,7 @@ paths: tags: - core x-accepts: + - application/cbor - application/json - application/vnd.kubernetes.protobuf - application/yaml @@ -21460,6 +21464,9 @@ paths: application/vnd.kubernetes.protobuf: schema: $ref: "#/components/schemas/v1.APIGroupList" + application/cbor: + schema: + $ref: "#/components/schemas/v1.APIGroupList" description: OK "401": content: {} @@ -21467,6 +21474,7 @@ paths: tags: - apis x-accepts: + - application/cbor - application/json - application/vnd.kubernetes.protobuf - application/yaml @@ -21486,6 +21494,9 @@ paths: application/vnd.kubernetes.protobuf: schema: $ref: "#/components/schemas/v1.APIGroup" + application/cbor: + schema: + $ref: "#/components/schemas/v1.APIGroup" description: OK "401": content: {} @@ -21493,6 +21504,7 @@ paths: tags: - admissionregistration x-accepts: + - application/cbor - application/json - application/vnd.kubernetes.protobuf - application/yaml @@ -30486,6 +30498,9 @@ paths: application/vnd.kubernetes.protobuf: schema: $ref: "#/components/schemas/v1.APIGroup" + application/cbor: + schema: + $ref: "#/components/schemas/v1.APIGroup" description: OK "401": content: {} @@ -30493,6 +30508,7 @@ paths: tags: - apiextensions x-accepts: + - application/cbor - application/json - application/vnd.kubernetes.protobuf - application/yaml @@ -31668,6 +31684,9 @@ paths: application/vnd.kubernetes.protobuf: schema: $ref: "#/components/schemas/v1.APIGroup" + application/cbor: + schema: + $ref: "#/components/schemas/v1.APIGroup" description: OK "401": content: {} @@ -31675,6 +31694,7 @@ paths: tags: - apiregistration x-accepts: + - application/cbor - application/json - application/vnd.kubernetes.protobuf - application/yaml @@ -32850,6 +32870,9 @@ paths: application/vnd.kubernetes.protobuf: schema: $ref: "#/components/schemas/v1.APIGroup" + application/cbor: + schema: + $ref: "#/components/schemas/v1.APIGroup" description: OK "401": content: {} @@ -32857,6 +32880,7 @@ paths: tags: - apps x-accepts: + - application/cbor - application/json - application/vnd.kubernetes.protobuf - application/yaml @@ -40235,6 +40259,9 @@ paths: application/vnd.kubernetes.protobuf: schema: $ref: "#/components/schemas/v1.APIGroup" + application/cbor: + schema: + $ref: "#/components/schemas/v1.APIGroup" description: OK "401": content: {} @@ -40242,6 +40269,7 @@ paths: tags: - authentication x-accepts: + - application/cbor - application/json - application/vnd.kubernetes.protobuf - application/yaml @@ -40517,6 +40545,9 @@ paths: application/vnd.kubernetes.protobuf: schema: $ref: "#/components/schemas/v1.APIGroup" + application/cbor: + schema: + $ref: "#/components/schemas/v1.APIGroup" description: OK "401": content: {} @@ -40524,6 +40555,7 @@ paths: tags: - authorization x-accepts: + - application/cbor - application/json - application/vnd.kubernetes.protobuf - application/yaml @@ -41031,6 +41063,9 @@ paths: application/vnd.kubernetes.protobuf: schema: $ref: "#/components/schemas/v1.APIGroup" + application/cbor: + schema: + $ref: "#/components/schemas/v1.APIGroup" description: OK "401": content: {} @@ -41038,6 +41073,7 @@ paths: tags: - autoscaling x-accepts: + - application/cbor - application/json - application/vnd.kubernetes.protobuf - application/yaml @@ -43823,6 +43859,9 @@ paths: application/vnd.kubernetes.protobuf: schema: $ref: "#/components/schemas/v1.APIGroup" + application/cbor: + schema: + $ref: "#/components/schemas/v1.APIGroup" description: OK "401": content: {} @@ -43830,6 +43869,7 @@ paths: tags: - batch x-accepts: + - application/cbor - application/json - application/vnd.kubernetes.protobuf - application/yaml @@ -46585,6 +46625,9 @@ paths: application/vnd.kubernetes.protobuf: schema: $ref: "#/components/schemas/v1.APIGroup" + application/cbor: + schema: + $ref: "#/components/schemas/v1.APIGroup" description: OK "401": content: {} @@ -46592,6 +46635,7 @@ paths: tags: - certificates x-accepts: + - application/cbor - application/json - application/vnd.kubernetes.protobuf - application/yaml @@ -48013,39 +48057,7 @@ paths: - application/json - application/vnd.kubernetes.protobuf - application/yaml - /apis/certificates.k8s.io/v1/watch/certificatesigningrequests: {} - /apis/certificates.k8s.io/v1/watch/certificatesigningrequests/{name}: {} - /apis/certificates.k8s.io/v1alpha1/: - get: - description: get available resources - operationId: getAPIResources - responses: - "200": - content: - application/json: - schema: - $ref: "#/components/schemas/v1.APIResourceList" - application/yaml: - schema: - $ref: "#/components/schemas/v1.APIResourceList" - application/vnd.kubernetes.protobuf: - schema: - $ref: "#/components/schemas/v1.APIResourceList" - application/cbor: - schema: - $ref: "#/components/schemas/v1.APIResourceList" - description: OK - "401": - content: {} - description: Unauthorized - tags: - - certificates_v1alpha1 - x-accepts: - - application/cbor - - application/json - - application/vnd.kubernetes.protobuf - - application/yaml - /apis/certificates.k8s.io/v1alpha1/clustertrustbundles: + /apis/certificates.k8s.io/v1/clustertrustbundles: delete: description: delete collection of ClusterTrustBundle operationId: deleteCollectionClusterTrustBundle @@ -48229,12 +48241,12 @@ paths: content: {} description: Unauthorized tags: - - certificates_v1alpha1 + - certificates_v1 x-kubernetes-action: deletecollection x-kubernetes-group-version-kind: group: certificates.k8s.io kind: ClusterTrustBundle - version: v1alpha1 + version: v1 x-codegen-request-body-name: body x-content-type: application/json x-accepts: @@ -48369,36 +48381,36 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1alpha1.ClusterTrustBundleList" + $ref: "#/components/schemas/v1.ClusterTrustBundleList" application/yaml: schema: - $ref: "#/components/schemas/v1alpha1.ClusterTrustBundleList" + $ref: "#/components/schemas/v1.ClusterTrustBundleList" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1alpha1.ClusterTrustBundleList" + $ref: "#/components/schemas/v1.ClusterTrustBundleList" application/cbor: schema: - $ref: "#/components/schemas/v1alpha1.ClusterTrustBundleList" + $ref: "#/components/schemas/v1.ClusterTrustBundleList" application/json;stream=watch: schema: - $ref: "#/components/schemas/v1alpha1.ClusterTrustBundleList" + $ref: "#/components/schemas/v1.ClusterTrustBundleList" application/vnd.kubernetes.protobuf;stream=watch: schema: - $ref: "#/components/schemas/v1alpha1.ClusterTrustBundleList" + $ref: "#/components/schemas/v1.ClusterTrustBundleList" application/cbor-seq: schema: - $ref: "#/components/schemas/v1alpha1.ClusterTrustBundleList" + $ref: "#/components/schemas/v1.ClusterTrustBundleList" description: OK "401": content: {} description: Unauthorized tags: - - certificates_v1alpha1 + - certificates_v1 x-kubernetes-action: list x-kubernetes-group-version-kind: group: certificates.k8s.io kind: ClusterTrustBundle - version: v1alpha1 + version: v1 x-accepts: - application/cbor - application/cbor-seq @@ -48454,64 +48466,64 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1alpha1.ClusterTrustBundle" + $ref: "#/components/schemas/v1.ClusterTrustBundle" required: true responses: "200": content: application/json: schema: - $ref: "#/components/schemas/v1alpha1.ClusterTrustBundle" + $ref: "#/components/schemas/v1.ClusterTrustBundle" application/yaml: schema: - $ref: "#/components/schemas/v1alpha1.ClusterTrustBundle" + $ref: "#/components/schemas/v1.ClusterTrustBundle" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1alpha1.ClusterTrustBundle" + $ref: "#/components/schemas/v1.ClusterTrustBundle" application/cbor: schema: - $ref: "#/components/schemas/v1alpha1.ClusterTrustBundle" + $ref: "#/components/schemas/v1.ClusterTrustBundle" description: OK "201": content: application/json: schema: - $ref: "#/components/schemas/v1alpha1.ClusterTrustBundle" + $ref: "#/components/schemas/v1.ClusterTrustBundle" application/yaml: schema: - $ref: "#/components/schemas/v1alpha1.ClusterTrustBundle" + $ref: "#/components/schemas/v1.ClusterTrustBundle" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1alpha1.ClusterTrustBundle" + $ref: "#/components/schemas/v1.ClusterTrustBundle" application/cbor: schema: - $ref: "#/components/schemas/v1alpha1.ClusterTrustBundle" + $ref: "#/components/schemas/v1.ClusterTrustBundle" description: Created "202": content: application/json: schema: - $ref: "#/components/schemas/v1alpha1.ClusterTrustBundle" + $ref: "#/components/schemas/v1.ClusterTrustBundle" application/yaml: schema: - $ref: "#/components/schemas/v1alpha1.ClusterTrustBundle" + $ref: "#/components/schemas/v1.ClusterTrustBundle" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1alpha1.ClusterTrustBundle" + $ref: "#/components/schemas/v1.ClusterTrustBundle" application/cbor: schema: - $ref: "#/components/schemas/v1alpha1.ClusterTrustBundle" + $ref: "#/components/schemas/v1.ClusterTrustBundle" description: Accepted "401": content: {} description: Unauthorized tags: - - certificates_v1alpha1 + - certificates_v1 x-kubernetes-action: post x-kubernetes-group-version-kind: group: certificates.k8s.io kind: ClusterTrustBundle - version: v1alpha1 + version: v1 x-codegen-request-body-name: body x-content-type: application/json x-accepts: @@ -48519,7 +48531,7 @@ paths: - application/json - application/vnd.kubernetes.protobuf - application/yaml - /apis/certificates.k8s.io/v1alpha1/clustertrustbundles/{name}: + /apis/certificates.k8s.io/v1/clustertrustbundles/{name}: delete: description: delete a ClusterTrustBundle operationId: deleteClusterTrustBundle @@ -48629,12 +48641,12 @@ paths: content: {} description: Unauthorized tags: - - certificates_v1alpha1 + - certificates_v1 x-kubernetes-action: delete x-kubernetes-group-version-kind: group: certificates.k8s.io kind: ClusterTrustBundle - version: v1alpha1 + version: v1 x-codegen-request-body-name: body x-content-type: application/json x-accepts: @@ -48664,27 +48676,27 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1alpha1.ClusterTrustBundle" + $ref: "#/components/schemas/v1.ClusterTrustBundle" application/yaml: schema: - $ref: "#/components/schemas/v1alpha1.ClusterTrustBundle" + $ref: "#/components/schemas/v1.ClusterTrustBundle" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1alpha1.ClusterTrustBundle" + $ref: "#/components/schemas/v1.ClusterTrustBundle" application/cbor: schema: - $ref: "#/components/schemas/v1alpha1.ClusterTrustBundle" + $ref: "#/components/schemas/v1.ClusterTrustBundle" description: OK "401": content: {} description: Unauthorized tags: - - certificates_v1alpha1 + - certificates_v1 x-kubernetes-action: get x-kubernetes-group-version-kind: group: certificates.k8s.io kind: ClusterTrustBundle - version: v1alpha1 + version: v1 x-accepts: - application/cbor - application/json @@ -48759,42 +48771,42 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1alpha1.ClusterTrustBundle" + $ref: "#/components/schemas/v1.ClusterTrustBundle" application/yaml: schema: - $ref: "#/components/schemas/v1alpha1.ClusterTrustBundle" + $ref: "#/components/schemas/v1.ClusterTrustBundle" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1alpha1.ClusterTrustBundle" + $ref: "#/components/schemas/v1.ClusterTrustBundle" application/cbor: schema: - $ref: "#/components/schemas/v1alpha1.ClusterTrustBundle" + $ref: "#/components/schemas/v1.ClusterTrustBundle" description: OK "201": content: application/json: schema: - $ref: "#/components/schemas/v1alpha1.ClusterTrustBundle" + $ref: "#/components/schemas/v1.ClusterTrustBundle" application/yaml: schema: - $ref: "#/components/schemas/v1alpha1.ClusterTrustBundle" + $ref: "#/components/schemas/v1.ClusterTrustBundle" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1alpha1.ClusterTrustBundle" + $ref: "#/components/schemas/v1.ClusterTrustBundle" application/cbor: schema: - $ref: "#/components/schemas/v1alpha1.ClusterTrustBundle" + $ref: "#/components/schemas/v1.ClusterTrustBundle" description: Created "401": content: {} description: Unauthorized tags: - - certificates_v1alpha1 + - certificates_v1 x-kubernetes-action: patch x-kubernetes-group-version-kind: group: certificates.k8s.io kind: ClusterTrustBundle - version: v1alpha1 + version: v1 x-codegen-request-body-name: body x-content-type: application/json x-accepts: @@ -48855,49 +48867,49 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1alpha1.ClusterTrustBundle" + $ref: "#/components/schemas/v1.ClusterTrustBundle" required: true responses: "200": content: application/json: schema: - $ref: "#/components/schemas/v1alpha1.ClusterTrustBundle" + $ref: "#/components/schemas/v1.ClusterTrustBundle" application/yaml: schema: - $ref: "#/components/schemas/v1alpha1.ClusterTrustBundle" + $ref: "#/components/schemas/v1.ClusterTrustBundle" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1alpha1.ClusterTrustBundle" + $ref: "#/components/schemas/v1.ClusterTrustBundle" application/cbor: schema: - $ref: "#/components/schemas/v1alpha1.ClusterTrustBundle" + $ref: "#/components/schemas/v1.ClusterTrustBundle" description: OK "201": content: application/json: schema: - $ref: "#/components/schemas/v1alpha1.ClusterTrustBundle" + $ref: "#/components/schemas/v1.ClusterTrustBundle" application/yaml: schema: - $ref: "#/components/schemas/v1alpha1.ClusterTrustBundle" + $ref: "#/components/schemas/v1.ClusterTrustBundle" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1alpha1.ClusterTrustBundle" + $ref: "#/components/schemas/v1.ClusterTrustBundle" application/cbor: schema: - $ref: "#/components/schemas/v1alpha1.ClusterTrustBundle" + $ref: "#/components/schemas/v1.ClusterTrustBundle" description: Created "401": content: {} description: Unauthorized tags: - - certificates_v1alpha1 + - certificates_v1 x-kubernetes-action: put x-kubernetes-group-version-kind: group: certificates.k8s.io kind: ClusterTrustBundle - version: v1alpha1 + version: v1 x-codegen-request-body-name: body x-content-type: application/json x-accepts: @@ -48905,43 +48917,17 @@ paths: - application/json - application/vnd.kubernetes.protobuf - application/yaml - /apis/certificates.k8s.io/v1alpha1/watch/clustertrustbundles: {} - /apis/certificates.k8s.io/v1alpha1/watch/clustertrustbundles/{name}: {} - /apis/certificates.k8s.io/v1beta1/: - get: - description: get available resources - operationId: getAPIResources - responses: - "200": - content: - application/json: - schema: - $ref: "#/components/schemas/v1.APIResourceList" - application/yaml: - schema: - $ref: "#/components/schemas/v1.APIResourceList" - application/vnd.kubernetes.protobuf: - schema: - $ref: "#/components/schemas/v1.APIResourceList" - application/cbor: - schema: - $ref: "#/components/schemas/v1.APIResourceList" - description: OK - "401": - content: {} - description: Unauthorized - tags: - - certificates_v1beta1 - x-accepts: - - application/cbor - - application/json - - application/vnd.kubernetes.protobuf - - application/yaml - /apis/certificates.k8s.io/v1beta1/clustertrustbundles: + /apis/certificates.k8s.io/v1/namespaces/{namespace}/podcertificaterequests: delete: - description: delete collection of ClusterTrustBundle - operationId: deleteCollectionClusterTrustBundle + description: delete collection of PodCertificateRequest + operationId: deleteCollectionNamespacedPodCertificateRequest parameters: + - description: "object name and auth scope, such as for teams and projects" + in: path + name: namespace + required: true + schema: + type: string - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ \ and wget)." @@ -49121,12 +49107,12 @@ paths: content: {} description: Unauthorized tags: - - certificates_v1beta1 + - certificates_v1 x-kubernetes-action: deletecollection x-kubernetes-group-version-kind: group: certificates.k8s.io - kind: ClusterTrustBundle - version: v1beta1 + kind: PodCertificateRequest + version: v1 x-codegen-request-body-name: body x-content-type: application/json x-accepts: @@ -49135,9 +49121,15 @@ paths: - application/vnd.kubernetes.protobuf - application/yaml get: - description: list or watch objects of kind ClusterTrustBundle - operationId: listClusterTrustBundle + description: list or watch objects of kind PodCertificateRequest + operationId: listNamespacedPodCertificateRequest parameters: + - description: "object name and auth scope, such as for teams and projects" + in: path + name: namespace + required: true + schema: + type: string - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ \ and wget)." @@ -49261,36 +49253,36 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1beta1.ClusterTrustBundleList" + $ref: "#/components/schemas/v1.PodCertificateRequestList" application/yaml: schema: - $ref: "#/components/schemas/v1beta1.ClusterTrustBundleList" + $ref: "#/components/schemas/v1.PodCertificateRequestList" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1beta1.ClusterTrustBundleList" + $ref: "#/components/schemas/v1.PodCertificateRequestList" application/cbor: schema: - $ref: "#/components/schemas/v1beta1.ClusterTrustBundleList" + $ref: "#/components/schemas/v1.PodCertificateRequestList" application/json;stream=watch: schema: - $ref: "#/components/schemas/v1beta1.ClusterTrustBundleList" + $ref: "#/components/schemas/v1.PodCertificateRequestList" application/vnd.kubernetes.protobuf;stream=watch: schema: - $ref: "#/components/schemas/v1beta1.ClusterTrustBundleList" + $ref: "#/components/schemas/v1.PodCertificateRequestList" application/cbor-seq: schema: - $ref: "#/components/schemas/v1beta1.ClusterTrustBundleList" + $ref: "#/components/schemas/v1.PodCertificateRequestList" description: OK "401": content: {} description: Unauthorized tags: - - certificates_v1beta1 + - certificates_v1 x-kubernetes-action: list x-kubernetes-group-version-kind: group: certificates.k8s.io - kind: ClusterTrustBundle - version: v1beta1 + kind: PodCertificateRequest + version: v1 x-accepts: - application/cbor - application/cbor-seq @@ -49300,9 +49292,15 @@ paths: - application/vnd.kubernetes.protobuf;stream=watch - application/yaml post: - description: create a ClusterTrustBundle - operationId: createClusterTrustBundle + description: create a PodCertificateRequest + operationId: createNamespacedPodCertificateRequest parameters: + - description: "object name and auth scope, such as for teams and projects" + in: path + name: namespace + required: true + schema: + type: string - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ \ and wget)." @@ -49346,64 +49344,64 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1beta1.ClusterTrustBundle" + $ref: "#/components/schemas/v1.PodCertificateRequest" required: true responses: "200": content: application/json: schema: - $ref: "#/components/schemas/v1beta1.ClusterTrustBundle" + $ref: "#/components/schemas/v1.PodCertificateRequest" application/yaml: schema: - $ref: "#/components/schemas/v1beta1.ClusterTrustBundle" + $ref: "#/components/schemas/v1.PodCertificateRequest" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1beta1.ClusterTrustBundle" + $ref: "#/components/schemas/v1.PodCertificateRequest" application/cbor: schema: - $ref: "#/components/schemas/v1beta1.ClusterTrustBundle" + $ref: "#/components/schemas/v1.PodCertificateRequest" description: OK "201": content: application/json: schema: - $ref: "#/components/schemas/v1beta1.ClusterTrustBundle" + $ref: "#/components/schemas/v1.PodCertificateRequest" application/yaml: schema: - $ref: "#/components/schemas/v1beta1.ClusterTrustBundle" + $ref: "#/components/schemas/v1.PodCertificateRequest" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1beta1.ClusterTrustBundle" + $ref: "#/components/schemas/v1.PodCertificateRequest" application/cbor: schema: - $ref: "#/components/schemas/v1beta1.ClusterTrustBundle" + $ref: "#/components/schemas/v1.PodCertificateRequest" description: Created "202": content: application/json: schema: - $ref: "#/components/schemas/v1beta1.ClusterTrustBundle" + $ref: "#/components/schemas/v1.PodCertificateRequest" application/yaml: schema: - $ref: "#/components/schemas/v1beta1.ClusterTrustBundle" + $ref: "#/components/schemas/v1.PodCertificateRequest" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1beta1.ClusterTrustBundle" + $ref: "#/components/schemas/v1.PodCertificateRequest" application/cbor: schema: - $ref: "#/components/schemas/v1beta1.ClusterTrustBundle" + $ref: "#/components/schemas/v1.PodCertificateRequest" description: Accepted "401": content: {} description: Unauthorized tags: - - certificates_v1beta1 + - certificates_v1 x-kubernetes-action: post x-kubernetes-group-version-kind: group: certificates.k8s.io - kind: ClusterTrustBundle - version: v1beta1 + kind: PodCertificateRequest + version: v1 x-codegen-request-body-name: body x-content-type: application/json x-accepts: @@ -49411,17 +49409,23 @@ paths: - application/json - application/vnd.kubernetes.protobuf - application/yaml - /apis/certificates.k8s.io/v1beta1/clustertrustbundles/{name}: + /apis/certificates.k8s.io/v1/namespaces/{namespace}/podcertificaterequests/{name}: delete: - description: delete a ClusterTrustBundle - operationId: deleteClusterTrustBundle + description: delete a PodCertificateRequest + operationId: deleteNamespacedPodCertificateRequest parameters: - - description: name of the ClusterTrustBundle + - description: name of the PodCertificateRequest in: path name: name required: true schema: type: string + - description: "object name and auth scope, such as for teams and projects" + in: path + name: namespace + required: true + schema: + type: string - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ \ and wget)." @@ -49521,12 +49525,12 @@ paths: content: {} description: Unauthorized tags: - - certificates_v1beta1 + - certificates_v1 x-kubernetes-action: delete x-kubernetes-group-version-kind: group: certificates.k8s.io - kind: ClusterTrustBundle - version: v1beta1 + kind: PodCertificateRequest + version: v1 x-codegen-request-body-name: body x-content-type: application/json x-accepts: @@ -49535,15 +49539,21 @@ paths: - application/vnd.kubernetes.protobuf - application/yaml get: - description: read the specified ClusterTrustBundle - operationId: readClusterTrustBundle + description: read the specified PodCertificateRequest + operationId: readNamespacedPodCertificateRequest parameters: - - description: name of the ClusterTrustBundle + - description: name of the PodCertificateRequest in: path name: name required: true schema: type: string + - description: "object name and auth scope, such as for teams and projects" + in: path + name: namespace + required: true + schema: + type: string - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ \ and wget)." @@ -49556,42 +49566,48 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1beta1.ClusterTrustBundle" + $ref: "#/components/schemas/v1.PodCertificateRequest" application/yaml: schema: - $ref: "#/components/schemas/v1beta1.ClusterTrustBundle" + $ref: "#/components/schemas/v1.PodCertificateRequest" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1beta1.ClusterTrustBundle" + $ref: "#/components/schemas/v1.PodCertificateRequest" application/cbor: schema: - $ref: "#/components/schemas/v1beta1.ClusterTrustBundle" + $ref: "#/components/schemas/v1.PodCertificateRequest" description: OK "401": content: {} description: Unauthorized tags: - - certificates_v1beta1 + - certificates_v1 x-kubernetes-action: get x-kubernetes-group-version-kind: group: certificates.k8s.io - kind: ClusterTrustBundle - version: v1beta1 + kind: PodCertificateRequest + version: v1 x-accepts: - application/cbor - application/json - application/vnd.kubernetes.protobuf - application/yaml patch: - description: partially update the specified ClusterTrustBundle - operationId: patchClusterTrustBundle + description: partially update the specified PodCertificateRequest + operationId: patchNamespacedPodCertificateRequest parameters: - - description: name of the ClusterTrustBundle + - description: name of the PodCertificateRequest in: path name: name required: true schema: type: string + - description: "object name and auth scope, such as for teams and projects" + in: path + name: namespace + required: true + schema: + type: string - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ \ and wget)." @@ -49651,42 +49667,42 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1beta1.ClusterTrustBundle" + $ref: "#/components/schemas/v1.PodCertificateRequest" application/yaml: schema: - $ref: "#/components/schemas/v1beta1.ClusterTrustBundle" + $ref: "#/components/schemas/v1.PodCertificateRequest" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1beta1.ClusterTrustBundle" + $ref: "#/components/schemas/v1.PodCertificateRequest" application/cbor: schema: - $ref: "#/components/schemas/v1beta1.ClusterTrustBundle" + $ref: "#/components/schemas/v1.PodCertificateRequest" description: OK "201": content: application/json: schema: - $ref: "#/components/schemas/v1beta1.ClusterTrustBundle" + $ref: "#/components/schemas/v1.PodCertificateRequest" application/yaml: schema: - $ref: "#/components/schemas/v1beta1.ClusterTrustBundle" + $ref: "#/components/schemas/v1.PodCertificateRequest" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1beta1.ClusterTrustBundle" + $ref: "#/components/schemas/v1.PodCertificateRequest" application/cbor: schema: - $ref: "#/components/schemas/v1beta1.ClusterTrustBundle" + $ref: "#/components/schemas/v1.PodCertificateRequest" description: Created "401": content: {} description: Unauthorized tags: - - certificates_v1beta1 + - certificates_v1 x-kubernetes-action: patch x-kubernetes-group-version-kind: group: certificates.k8s.io - kind: ClusterTrustBundle - version: v1beta1 + kind: PodCertificateRequest + version: v1 x-codegen-request-body-name: body x-content-type: application/json x-accepts: @@ -49695,15 +49711,21 @@ paths: - application/vnd.kubernetes.protobuf - application/yaml put: - description: replace the specified ClusterTrustBundle - operationId: replaceClusterTrustBundle + description: replace the specified PodCertificateRequest + operationId: replaceNamespacedPodCertificateRequest parameters: - - description: name of the ClusterTrustBundle + - description: name of the PodCertificateRequest in: path name: name required: true schema: type: string + - description: "object name and auth scope, such as for teams and projects" + in: path + name: namespace + required: true + schema: + type: string - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ \ and wget)." @@ -49747,49 +49769,49 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1beta1.ClusterTrustBundle" + $ref: "#/components/schemas/v1.PodCertificateRequest" required: true responses: "200": content: application/json: schema: - $ref: "#/components/schemas/v1beta1.ClusterTrustBundle" + $ref: "#/components/schemas/v1.PodCertificateRequest" application/yaml: schema: - $ref: "#/components/schemas/v1beta1.ClusterTrustBundle" + $ref: "#/components/schemas/v1.PodCertificateRequest" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1beta1.ClusterTrustBundle" + $ref: "#/components/schemas/v1.PodCertificateRequest" application/cbor: schema: - $ref: "#/components/schemas/v1beta1.ClusterTrustBundle" + $ref: "#/components/schemas/v1.PodCertificateRequest" description: OK "201": content: application/json: schema: - $ref: "#/components/schemas/v1beta1.ClusterTrustBundle" + $ref: "#/components/schemas/v1.PodCertificateRequest" application/yaml: schema: - $ref: "#/components/schemas/v1beta1.ClusterTrustBundle" + $ref: "#/components/schemas/v1.PodCertificateRequest" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1beta1.ClusterTrustBundle" + $ref: "#/components/schemas/v1.PodCertificateRequest" application/cbor: schema: - $ref: "#/components/schemas/v1beta1.ClusterTrustBundle" + $ref: "#/components/schemas/v1.PodCertificateRequest" description: Created "401": content: {} description: Unauthorized tags: - - certificates_v1beta1 + - certificates_v1 x-kubernetes-action: put x-kubernetes-group-version-kind: group: certificates.k8s.io - kind: ClusterTrustBundle - version: v1beta1 + kind: PodCertificateRequest + version: v1 x-codegen-request-body-name: body x-content-type: application/json x-accepts: @@ -49797,17 +49819,496 @@ paths: - application/json - application/vnd.kubernetes.protobuf - application/yaml - /apis/certificates.k8s.io/v1beta1/namespaces/{namespace}/podcertificaterequests: - delete: - description: delete collection of PodCertificateRequest - operationId: deleteCollectionNamespacedPodCertificateRequest + /apis/certificates.k8s.io/v1/namespaces/{namespace}/podcertificaterequests/{name}/status: + get: + description: read status of the specified PodCertificateRequest + operationId: readNamespacedPodCertificateRequestStatus + parameters: + - description: name of the PodCertificateRequest + in: path + name: name + required: true + schema: + type: string + - description: "object name and auth scope, such as for teams and projects" + in: path + name: namespace + required: true + schema: + type: string + - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ + \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ + \ and wget)." + in: query + name: pretty + schema: + type: string + responses: + "200": + content: + application/json: + schema: + $ref: "#/components/schemas/v1.PodCertificateRequest" + application/yaml: + schema: + $ref: "#/components/schemas/v1.PodCertificateRequest" + application/vnd.kubernetes.protobuf: + schema: + $ref: "#/components/schemas/v1.PodCertificateRequest" + application/cbor: + schema: + $ref: "#/components/schemas/v1.PodCertificateRequest" + description: OK + "401": + content: {} + description: Unauthorized + tags: + - certificates_v1 + x-kubernetes-action: get + x-kubernetes-group-version-kind: + group: certificates.k8s.io + kind: PodCertificateRequest + version: v1 + x-accepts: + - application/cbor + - application/json + - application/vnd.kubernetes.protobuf + - application/yaml + patch: + description: partially update status of the specified PodCertificateRequest + operationId: patchNamespacedPodCertificateRequestStatus + parameters: + - description: name of the PodCertificateRequest + in: path + name: name + required: true + schema: + type: string + - description: "object name and auth scope, such as for teams and projects" + in: path + name: namespace + required: true + schema: + type: string + - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ + \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ + \ and wget)." + in: query + name: pretty + schema: + type: string + - description: "When present, indicates that modifications should not be persisted.\ + \ An invalid or unrecognized dryRun directive will result in an error response\ + \ and no further processing of the request. Valid values are: - All: all\ + \ dry run stages will be processed" + in: query + name: dryRun + schema: + type: string + - description: "fieldManager is a name associated with the actor or entity that\ + \ is making these changes. The value must be less than or 128 characters\ + \ long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.\ + \ This field is required for apply requests (application/apply-patch) but\ + \ optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch)." + in: query + name: fieldManager + schema: + type: string + - description: "fieldValidation instructs the server on how to handle objects\ + \ in the request (POST/PUT/PATCH) containing unknown or duplicate fields.\ + \ Valid values are: - Ignore: This will ignore any unknown fields that are\ + \ silently dropped from the object, and will ignore all but the last duplicate\ + \ field that the decoder encounters. This is the default behavior prior\ + \ to v1.23. - Warn: This will send a warning via the standard warning response\ + \ header for each unknown field that is dropped from the object, and for\ + \ each duplicate field that is encountered. The request will still succeed\ + \ if there are no other errors, and will only persist the last of any duplicate\ + \ fields. This is the default in v1.23+ - Strict: This will fail the request\ + \ with a BadRequest error if any unknown fields would be dropped from the\ + \ object, or if any duplicate fields are present. The error returned from\ + \ the server will contain all unknown and duplicate fields encountered." + in: query + name: fieldValidation + schema: + type: string + - description: Force is going to "force" Apply requests. It means user will + re-acquire conflicting fields owned by other people. Force flag must be + unset for non-apply patch requests. + in: query + name: force + schema: + type: boolean + requestBody: + content: + application/json: + schema: + $ref: "#/components/schemas/v1.Patch" + required: true + responses: + "200": + content: + application/json: + schema: + $ref: "#/components/schemas/v1.PodCertificateRequest" + application/yaml: + schema: + $ref: "#/components/schemas/v1.PodCertificateRequest" + application/vnd.kubernetes.protobuf: + schema: + $ref: "#/components/schemas/v1.PodCertificateRequest" + application/cbor: + schema: + $ref: "#/components/schemas/v1.PodCertificateRequest" + description: OK + "201": + content: + application/json: + schema: + $ref: "#/components/schemas/v1.PodCertificateRequest" + application/yaml: + schema: + $ref: "#/components/schemas/v1.PodCertificateRequest" + application/vnd.kubernetes.protobuf: + schema: + $ref: "#/components/schemas/v1.PodCertificateRequest" + application/cbor: + schema: + $ref: "#/components/schemas/v1.PodCertificateRequest" + description: Created + "401": + content: {} + description: Unauthorized + tags: + - certificates_v1 + x-kubernetes-action: patch + x-kubernetes-group-version-kind: + group: certificates.k8s.io + kind: PodCertificateRequest + version: v1 + x-codegen-request-body-name: body + x-content-type: application/json + x-accepts: + - application/cbor + - application/json + - application/vnd.kubernetes.protobuf + - application/yaml + put: + description: replace status of the specified PodCertificateRequest + operationId: replaceNamespacedPodCertificateRequestStatus parameters: + - description: name of the PodCertificateRequest + in: path + name: name + required: true + schema: + type: string - description: "object name and auth scope, such as for teams and projects" in: path name: namespace required: true schema: type: string + - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ + \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ + \ and wget)." + in: query + name: pretty + schema: + type: string + - description: "When present, indicates that modifications should not be persisted.\ + \ An invalid or unrecognized dryRun directive will result in an error response\ + \ and no further processing of the request. Valid values are: - All: all\ + \ dry run stages will be processed" + in: query + name: dryRun + schema: + type: string + - description: "fieldManager is a name associated with the actor or entity that\ + \ is making these changes. The value must be less than or 128 characters\ + \ long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." + in: query + name: fieldManager + schema: + type: string + - description: "fieldValidation instructs the server on how to handle objects\ + \ in the request (POST/PUT/PATCH) containing unknown or duplicate fields.\ + \ Valid values are: - Ignore: This will ignore any unknown fields that are\ + \ silently dropped from the object, and will ignore all but the last duplicate\ + \ field that the decoder encounters. This is the default behavior prior\ + \ to v1.23. - Warn: This will send a warning via the standard warning response\ + \ header for each unknown field that is dropped from the object, and for\ + \ each duplicate field that is encountered. The request will still succeed\ + \ if there are no other errors, and will only persist the last of any duplicate\ + \ fields. This is the default in v1.23+ - Strict: This will fail the request\ + \ with a BadRequest error if any unknown fields would be dropped from the\ + \ object, or if any duplicate fields are present. The error returned from\ + \ the server will contain all unknown and duplicate fields encountered." + in: query + name: fieldValidation + schema: + type: string + requestBody: + content: + application/json: + schema: + $ref: "#/components/schemas/v1.PodCertificateRequest" + required: true + responses: + "200": + content: + application/json: + schema: + $ref: "#/components/schemas/v1.PodCertificateRequest" + application/yaml: + schema: + $ref: "#/components/schemas/v1.PodCertificateRequest" + application/vnd.kubernetes.protobuf: + schema: + $ref: "#/components/schemas/v1.PodCertificateRequest" + application/cbor: + schema: + $ref: "#/components/schemas/v1.PodCertificateRequest" + description: OK + "201": + content: + application/json: + schema: + $ref: "#/components/schemas/v1.PodCertificateRequest" + application/yaml: + schema: + $ref: "#/components/schemas/v1.PodCertificateRequest" + application/vnd.kubernetes.protobuf: + schema: + $ref: "#/components/schemas/v1.PodCertificateRequest" + application/cbor: + schema: + $ref: "#/components/schemas/v1.PodCertificateRequest" + description: Created + "401": + content: {} + description: Unauthorized + tags: + - certificates_v1 + x-kubernetes-action: put + x-kubernetes-group-version-kind: + group: certificates.k8s.io + kind: PodCertificateRequest + version: v1 + x-codegen-request-body-name: body + x-content-type: application/json + x-accepts: + - application/cbor + - application/json + - application/vnd.kubernetes.protobuf + - application/yaml + /apis/certificates.k8s.io/v1/podcertificaterequests: + get: + description: list or watch objects of kind PodCertificateRequest + operationId: listPodCertificateRequestForAllNamespaces + parameters: + - description: "allowWatchBookmarks requests watch events with type \"BOOKMARK\"\ + . Servers that do not implement bookmarks may ignore this flag and bookmarks\ + \ are sent at the server's discretion. Clients should not assume bookmarks\ + \ are returned at any specific interval, nor may they assume the server\ + \ will send any BOOKMARK event during a session. If this is not a watch,\ + \ this field is ignored." + in: query + name: allowWatchBookmarks + schema: + type: boolean + - description: |- + The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + + This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications. + in: query + name: continue + schema: + type: string + - description: A selector to restrict the list of returned objects by their + fields. Defaults to everything. + in: query + name: fieldSelector + schema: + type: string + - description: A selector to restrict the list of returned objects by their + labels. Defaults to everything. + in: query + name: labelSelector + schema: + type: string + - description: |- + limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + + The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned. + in: query + name: limit + schema: + type: integer + - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ + \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ + \ and wget)." + in: query + name: pretty + schema: + type: string + - description: |- + resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + + Defaults to unset + in: query + name: resourceVersion + schema: + type: string + - description: |- + resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + + Defaults to unset + in: query + name: resourceVersionMatch + schema: + type: string + - description: |- + `sendInitialEvents=true` may be set together with `watch=true`. In that case, the watch stream will begin with synthetic events to produce the current state of objects in the collection. Once all such events have been sent, a synthetic "Bookmark" event will be sent. The bookmark will report the ResourceVersion (RV) corresponding to the set of objects, and be marked with `"k8s.io/initial-events-end": "true"` annotation. Afterwards, the watch stream will proceed as usual, sending watch events corresponding to changes (subsequent to the RV) to objects watched. + + When `sendInitialEvents` option is set, we require `resourceVersionMatch` option to also be set. The semantic of the watch request is as following: - `resourceVersionMatch` = NotOlderThan + is interpreted as "data at least as new as the provided `resourceVersion`" + and the bookmark event is send when the state is synced + to a `resourceVersion` at least as fresh as the one provided by the ListOptions. + If `resourceVersion` is unset, this is interpreted as "consistent read" and the + bookmark event is send when the state is synced at least to the moment + when request started being processed. + - `resourceVersionMatch` set to any other value or unset + Invalid error is returned. + + Defaults to true if `resourceVersion=""` or `resourceVersion="0"` (for backward compatibility reasons) and to false otherwise. + in: query + name: sendInitialEvents + schema: + type: boolean + - description: |- + shardSelector restricts the list of returned objects using a CEL-based shard selector expression. The format uses the shardRange() function combined with || (logical OR) to specify one or more hash ranges: + + shardRange(object.metadata.uid, '0x0', '0x8000000000000000') + shardRange(object.metadata.uid, '0x0', '0x8000000000000000') || shardRange(object.metadata.uid, '0x8000000000000000', '0x10000000000000000') + + Field paths use CEL-style object-rooted syntax (e.g. "object.metadata.uid"), NOT the fieldSelector format ("metadata.uid"). Currently supported paths: + - object.metadata.uid + - object.metadata.namespace + + hexStart and hexEnd are single-quoted CEL string literals with a '0x' prefix, defining the inclusive lower and exclusive upper bounds over the 64-bit FNV-1a hash space. The full range is [0x0, 0x10000000000000000), where the exclusive upper bound equals 2^64. + + Examples: + 2-shard split: + shard 0: shardRange(object.metadata.uid, '0x0000000000000000', '0x8000000000000000') + shard 1: shardRange(object.metadata.uid, '0x8000000000000000', '0x10000000000000000') + 4-shard split: + shard 0: shardRange(object.metadata.uid, '0x0000000000000000', '0x4000000000000000') + shard 1: shardRange(object.metadata.uid, '0x4000000000000000', '0x8000000000000000') + shard 2: shardRange(object.metadata.uid, '0x8000000000000000', '0xc000000000000000') + shard 3: shardRange(object.metadata.uid, '0xc000000000000000', '0x10000000000000000') + + This is an alpha field and requires enabling the ShardedListAndWatch feature gate. + in: query + name: shardSelector + schema: + type: string + - description: "Timeout for the list/watch call. This limits the duration of\ + \ the call, regardless of any activity or inactivity." + in: query + name: timeoutSeconds + schema: + type: integer + - description: "Watch for changes to the described resources and return them\ + \ as a stream of add, update, and remove notifications. Specify resourceVersion." + in: query + name: watch + schema: + type: boolean + responses: + "200": + content: + application/json: + schema: + $ref: "#/components/schemas/v1.PodCertificateRequestList" + application/yaml: + schema: + $ref: "#/components/schemas/v1.PodCertificateRequestList" + application/vnd.kubernetes.protobuf: + schema: + $ref: "#/components/schemas/v1.PodCertificateRequestList" + application/cbor: + schema: + $ref: "#/components/schemas/v1.PodCertificateRequestList" + application/json;stream=watch: + schema: + $ref: "#/components/schemas/v1.PodCertificateRequestList" + application/vnd.kubernetes.protobuf;stream=watch: + schema: + $ref: "#/components/schemas/v1.PodCertificateRequestList" + application/cbor-seq: + schema: + $ref: "#/components/schemas/v1.PodCertificateRequestList" + description: OK + "401": + content: {} + description: Unauthorized + tags: + - certificates_v1 + x-kubernetes-action: list + x-kubernetes-group-version-kind: + group: certificates.k8s.io + kind: PodCertificateRequest + version: v1 + x-accepts: + - application/cbor + - application/cbor-seq + - application/json + - application/json;stream=watch + - application/vnd.kubernetes.protobuf + - application/vnd.kubernetes.protobuf;stream=watch + - application/yaml + /apis/certificates.k8s.io/v1/watch/certificatesigningrequests: {} + /apis/certificates.k8s.io/v1/watch/certificatesigningrequests/{name}: {} + /apis/certificates.k8s.io/v1/watch/clustertrustbundles: {} + /apis/certificates.k8s.io/v1/watch/clustertrustbundles/{name}: {} + /apis/certificates.k8s.io/v1/watch/namespaces/{namespace}/podcertificaterequests: {} + /apis/certificates.k8s.io/v1/watch/namespaces/{namespace}/podcertificaterequests/{name}: {} + /apis/certificates.k8s.io/v1/watch/podcertificaterequests: {} + /apis/certificates.k8s.io/v1beta1/: + get: + description: get available resources + operationId: getAPIResources + responses: + "200": + content: + application/json: + schema: + $ref: "#/components/schemas/v1.APIResourceList" + application/yaml: + schema: + $ref: "#/components/schemas/v1.APIResourceList" + application/vnd.kubernetes.protobuf: + schema: + $ref: "#/components/schemas/v1.APIResourceList" + application/cbor: + schema: + $ref: "#/components/schemas/v1.APIResourceList" + description: OK + "401": + content: {} + description: Unauthorized + tags: + - certificates_v1beta1 + x-accepts: + - application/cbor + - application/json + - application/vnd.kubernetes.protobuf + - application/yaml + /apis/certificates.k8s.io/v1beta1/clustertrustbundles: + delete: + description: delete collection of ClusterTrustBundle + operationId: deleteCollectionClusterTrustBundle + parameters: - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ \ and wget)." @@ -49991,7 +50492,7 @@ paths: x-kubernetes-action: deletecollection x-kubernetes-group-version-kind: group: certificates.k8s.io - kind: PodCertificateRequest + kind: ClusterTrustBundle version: v1beta1 x-codegen-request-body-name: body x-content-type: application/json @@ -50001,15 +50502,9 @@ paths: - application/vnd.kubernetes.protobuf - application/yaml get: - description: list or watch objects of kind PodCertificateRequest - operationId: listNamespacedPodCertificateRequest + description: list or watch objects of kind ClusterTrustBundle + operationId: listClusterTrustBundle parameters: - - description: "object name and auth scope, such as for teams and projects" - in: path - name: namespace - required: true - schema: - type: string - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ \ and wget)." @@ -50133,25 +50628,25 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1beta1.PodCertificateRequestList" + $ref: "#/components/schemas/v1beta1.ClusterTrustBundleList" application/yaml: schema: - $ref: "#/components/schemas/v1beta1.PodCertificateRequestList" + $ref: "#/components/schemas/v1beta1.ClusterTrustBundleList" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1beta1.PodCertificateRequestList" + $ref: "#/components/schemas/v1beta1.ClusterTrustBundleList" application/cbor: schema: - $ref: "#/components/schemas/v1beta1.PodCertificateRequestList" + $ref: "#/components/schemas/v1beta1.ClusterTrustBundleList" application/json;stream=watch: schema: - $ref: "#/components/schemas/v1beta1.PodCertificateRequestList" + $ref: "#/components/schemas/v1beta1.ClusterTrustBundleList" application/vnd.kubernetes.protobuf;stream=watch: schema: - $ref: "#/components/schemas/v1beta1.PodCertificateRequestList" + $ref: "#/components/schemas/v1beta1.ClusterTrustBundleList" application/cbor-seq: schema: - $ref: "#/components/schemas/v1beta1.PodCertificateRequestList" + $ref: "#/components/schemas/v1beta1.ClusterTrustBundleList" description: OK "401": content: {} @@ -50161,7 +50656,7 @@ paths: x-kubernetes-action: list x-kubernetes-group-version-kind: group: certificates.k8s.io - kind: PodCertificateRequest + kind: ClusterTrustBundle version: v1beta1 x-accepts: - application/cbor @@ -50172,15 +50667,9 @@ paths: - application/vnd.kubernetes.protobuf;stream=watch - application/yaml post: - description: create a PodCertificateRequest - operationId: createNamespacedPodCertificateRequest + description: create a ClusterTrustBundle + operationId: createClusterTrustBundle parameters: - - description: "object name and auth scope, such as for teams and projects" - in: path - name: namespace - required: true - schema: - type: string - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ \ and wget)." @@ -50224,53 +50713,53 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1beta1.PodCertificateRequest" + $ref: "#/components/schemas/v1beta1.ClusterTrustBundle" required: true responses: "200": content: application/json: schema: - $ref: "#/components/schemas/v1beta1.PodCertificateRequest" + $ref: "#/components/schemas/v1beta1.ClusterTrustBundle" application/yaml: schema: - $ref: "#/components/schemas/v1beta1.PodCertificateRequest" + $ref: "#/components/schemas/v1beta1.ClusterTrustBundle" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1beta1.PodCertificateRequest" + $ref: "#/components/schemas/v1beta1.ClusterTrustBundle" application/cbor: schema: - $ref: "#/components/schemas/v1beta1.PodCertificateRequest" + $ref: "#/components/schemas/v1beta1.ClusterTrustBundle" description: OK "201": content: application/json: schema: - $ref: "#/components/schemas/v1beta1.PodCertificateRequest" + $ref: "#/components/schemas/v1beta1.ClusterTrustBundle" application/yaml: schema: - $ref: "#/components/schemas/v1beta1.PodCertificateRequest" + $ref: "#/components/schemas/v1beta1.ClusterTrustBundle" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1beta1.PodCertificateRequest" + $ref: "#/components/schemas/v1beta1.ClusterTrustBundle" application/cbor: schema: - $ref: "#/components/schemas/v1beta1.PodCertificateRequest" + $ref: "#/components/schemas/v1beta1.ClusterTrustBundle" description: Created "202": content: application/json: schema: - $ref: "#/components/schemas/v1beta1.PodCertificateRequest" + $ref: "#/components/schemas/v1beta1.ClusterTrustBundle" application/yaml: schema: - $ref: "#/components/schemas/v1beta1.PodCertificateRequest" + $ref: "#/components/schemas/v1beta1.ClusterTrustBundle" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1beta1.PodCertificateRequest" + $ref: "#/components/schemas/v1beta1.ClusterTrustBundle" application/cbor: schema: - $ref: "#/components/schemas/v1beta1.PodCertificateRequest" + $ref: "#/components/schemas/v1beta1.ClusterTrustBundle" description: Accepted "401": content: {} @@ -50280,7 +50769,7 @@ paths: x-kubernetes-action: post x-kubernetes-group-version-kind: group: certificates.k8s.io - kind: PodCertificateRequest + kind: ClusterTrustBundle version: v1beta1 x-codegen-request-body-name: body x-content-type: application/json @@ -50289,23 +50778,17 @@ paths: - application/json - application/vnd.kubernetes.protobuf - application/yaml - /apis/certificates.k8s.io/v1beta1/namespaces/{namespace}/podcertificaterequests/{name}: + /apis/certificates.k8s.io/v1beta1/clustertrustbundles/{name}: delete: - description: delete a PodCertificateRequest - operationId: deleteNamespacedPodCertificateRequest + description: delete a ClusterTrustBundle + operationId: deleteClusterTrustBundle parameters: - - description: name of the PodCertificateRequest + - description: name of the ClusterTrustBundle in: path name: name required: true schema: type: string - - description: "object name and auth scope, such as for teams and projects" - in: path - name: namespace - required: true - schema: - type: string - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ \ and wget)." @@ -50409,7 +50892,7 @@ paths: x-kubernetes-action: delete x-kubernetes-group-version-kind: group: certificates.k8s.io - kind: PodCertificateRequest + kind: ClusterTrustBundle version: v1beta1 x-codegen-request-body-name: body x-content-type: application/json @@ -50419,21 +50902,15 @@ paths: - application/vnd.kubernetes.protobuf - application/yaml get: - description: read the specified PodCertificateRequest - operationId: readNamespacedPodCertificateRequest + description: read the specified ClusterTrustBundle + operationId: readClusterTrustBundle parameters: - - description: name of the PodCertificateRequest + - description: name of the ClusterTrustBundle in: path name: name required: true schema: type: string - - description: "object name and auth scope, such as for teams and projects" - in: path - name: namespace - required: true - schema: - type: string - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ \ and wget)." @@ -50446,16 +50923,16 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1beta1.PodCertificateRequest" + $ref: "#/components/schemas/v1beta1.ClusterTrustBundle" application/yaml: schema: - $ref: "#/components/schemas/v1beta1.PodCertificateRequest" + $ref: "#/components/schemas/v1beta1.ClusterTrustBundle" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1beta1.PodCertificateRequest" + $ref: "#/components/schemas/v1beta1.ClusterTrustBundle" application/cbor: schema: - $ref: "#/components/schemas/v1beta1.PodCertificateRequest" + $ref: "#/components/schemas/v1beta1.ClusterTrustBundle" description: OK "401": content: {} @@ -50465,7 +50942,7 @@ paths: x-kubernetes-action: get x-kubernetes-group-version-kind: group: certificates.k8s.io - kind: PodCertificateRequest + kind: ClusterTrustBundle version: v1beta1 x-accepts: - application/cbor @@ -50473,21 +50950,15 @@ paths: - application/vnd.kubernetes.protobuf - application/yaml patch: - description: partially update the specified PodCertificateRequest - operationId: patchNamespacedPodCertificateRequest + description: partially update the specified ClusterTrustBundle + operationId: patchClusterTrustBundle parameters: - - description: name of the PodCertificateRequest + - description: name of the ClusterTrustBundle in: path name: name required: true schema: type: string - - description: "object name and auth scope, such as for teams and projects" - in: path - name: namespace - required: true - schema: - type: string - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ \ and wget)." @@ -50547,31 +51018,31 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1beta1.PodCertificateRequest" + $ref: "#/components/schemas/v1beta1.ClusterTrustBundle" application/yaml: schema: - $ref: "#/components/schemas/v1beta1.PodCertificateRequest" + $ref: "#/components/schemas/v1beta1.ClusterTrustBundle" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1beta1.PodCertificateRequest" + $ref: "#/components/schemas/v1beta1.ClusterTrustBundle" application/cbor: schema: - $ref: "#/components/schemas/v1beta1.PodCertificateRequest" + $ref: "#/components/schemas/v1beta1.ClusterTrustBundle" description: OK "201": content: application/json: schema: - $ref: "#/components/schemas/v1beta1.PodCertificateRequest" + $ref: "#/components/schemas/v1beta1.ClusterTrustBundle" application/yaml: schema: - $ref: "#/components/schemas/v1beta1.PodCertificateRequest" + $ref: "#/components/schemas/v1beta1.ClusterTrustBundle" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1beta1.PodCertificateRequest" + $ref: "#/components/schemas/v1beta1.ClusterTrustBundle" application/cbor: schema: - $ref: "#/components/schemas/v1beta1.PodCertificateRequest" + $ref: "#/components/schemas/v1beta1.ClusterTrustBundle" description: Created "401": content: {} @@ -50581,7 +51052,7 @@ paths: x-kubernetes-action: patch x-kubernetes-group-version-kind: group: certificates.k8s.io - kind: PodCertificateRequest + kind: ClusterTrustBundle version: v1beta1 x-codegen-request-body-name: body x-content-type: application/json @@ -50591,21 +51062,15 @@ paths: - application/vnd.kubernetes.protobuf - application/yaml put: - description: replace the specified PodCertificateRequest - operationId: replaceNamespacedPodCertificateRequest + description: replace the specified ClusterTrustBundle + operationId: replaceClusterTrustBundle parameters: - - description: name of the PodCertificateRequest + - description: name of the ClusterTrustBundle in: path name: name required: true schema: type: string - - description: "object name and auth scope, such as for teams and projects" - in: path - name: namespace - required: true - schema: - type: string - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ \ and wget)." @@ -50649,38 +51114,38 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1beta1.PodCertificateRequest" + $ref: "#/components/schemas/v1beta1.ClusterTrustBundle" required: true responses: "200": content: application/json: schema: - $ref: "#/components/schemas/v1beta1.PodCertificateRequest" + $ref: "#/components/schemas/v1beta1.ClusterTrustBundle" application/yaml: schema: - $ref: "#/components/schemas/v1beta1.PodCertificateRequest" + $ref: "#/components/schemas/v1beta1.ClusterTrustBundle" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1beta1.PodCertificateRequest" + $ref: "#/components/schemas/v1beta1.ClusterTrustBundle" application/cbor: schema: - $ref: "#/components/schemas/v1beta1.PodCertificateRequest" + $ref: "#/components/schemas/v1beta1.ClusterTrustBundle" description: OK "201": content: application/json: schema: - $ref: "#/components/schemas/v1beta1.PodCertificateRequest" + $ref: "#/components/schemas/v1beta1.ClusterTrustBundle" application/yaml: schema: - $ref: "#/components/schemas/v1beta1.PodCertificateRequest" + $ref: "#/components/schemas/v1beta1.ClusterTrustBundle" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1beta1.PodCertificateRequest" + $ref: "#/components/schemas/v1beta1.ClusterTrustBundle" application/cbor: schema: - $ref: "#/components/schemas/v1beta1.PodCertificateRequest" + $ref: "#/components/schemas/v1beta1.ClusterTrustBundle" description: Created "401": content: {} @@ -50690,7 +51155,7 @@ paths: x-kubernetes-action: put x-kubernetes-group-version-kind: group: certificates.k8s.io - kind: PodCertificateRequest + kind: ClusterTrustBundle version: v1beta1 x-codegen-request-body-name: body x-content-type: application/json @@ -50699,17 +51164,11 @@ paths: - application/json - application/vnd.kubernetes.protobuf - application/yaml - /apis/certificates.k8s.io/v1beta1/namespaces/{namespace}/podcertificaterequests/{name}/status: - get: - description: read status of the specified PodCertificateRequest - operationId: readNamespacedPodCertificateRequestStatus + /apis/certificates.k8s.io/v1beta1/namespaces/{namespace}/podcertificaterequests: + delete: + description: delete collection of PodCertificateRequest + operationId: deleteCollectionNamespacedPodCertificateRequest parameters: - - description: name of the PodCertificateRequest - in: path - name: name - required: true - schema: - type: string - description: "object name and auth scope, such as for teams and projects" in: path name: namespace @@ -50723,58 +51182,12 @@ paths: name: pretty schema: type: string - responses: - "200": - content: - application/json: - schema: - $ref: "#/components/schemas/v1beta1.PodCertificateRequest" - application/yaml: - schema: - $ref: "#/components/schemas/v1beta1.PodCertificateRequest" - application/vnd.kubernetes.protobuf: - schema: - $ref: "#/components/schemas/v1beta1.PodCertificateRequest" - application/cbor: - schema: - $ref: "#/components/schemas/v1beta1.PodCertificateRequest" - description: OK - "401": - content: {} - description: Unauthorized - tags: - - certificates_v1beta1 - x-kubernetes-action: get - x-kubernetes-group-version-kind: - group: certificates.k8s.io - kind: PodCertificateRequest - version: v1beta1 - x-accepts: - - application/cbor - - application/json - - application/vnd.kubernetes.protobuf - - application/yaml - patch: - description: partially update status of the specified PodCertificateRequest - operationId: patchNamespacedPodCertificateRequestStatus - parameters: - - description: name of the PodCertificateRequest - in: path - name: name - required: true - schema: - type: string - - description: "object name and auth scope, such as for teams and projects" - in: path - name: namespace - required: true - schema: - type: string - - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ - \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ - \ and wget)." + - description: |- + The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + + This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications. in: query - name: pretty + name: continue schema: type: string - description: "When present, indicates that modifications should not be persisted.\ @@ -50785,191 +51198,164 @@ paths: name: dryRun schema: type: string - - description: "fieldManager is a name associated with the actor or entity that\ - \ is making these changes. The value must be less than or 128 characters\ - \ long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.\ - \ This field is required for apply requests (application/apply-patch) but\ - \ optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch)." + - description: A selector to restrict the list of returned objects by their + fields. Defaults to everything. in: query - name: fieldManager + name: fieldSelector schema: type: string - - description: "fieldValidation instructs the server on how to handle objects\ - \ in the request (POST/PUT/PATCH) containing unknown or duplicate fields.\ - \ Valid values are: - Ignore: This will ignore any unknown fields that are\ - \ silently dropped from the object, and will ignore all but the last duplicate\ - \ field that the decoder encounters. This is the default behavior prior\ - \ to v1.23. - Warn: This will send a warning via the standard warning response\ - \ header for each unknown field that is dropped from the object, and for\ - \ each duplicate field that is encountered. The request will still succeed\ - \ if there are no other errors, and will only persist the last of any duplicate\ - \ fields. This is the default in v1.23+ - Strict: This will fail the request\ - \ with a BadRequest error if any unknown fields would be dropped from the\ - \ object, or if any duplicate fields are present. The error returned from\ - \ the server will contain all unknown and duplicate fields encountered." + - description: "The duration in seconds before the object should be deleted.\ + \ Value must be non-negative integer. The value zero indicates delete immediately.\ + \ If this value is nil, the default grace period for the specified type\ + \ will be used. Defaults to a per object value if not specified. zero means\ + \ delete immediately." in: query - name: fieldValidation + name: gracePeriodSeconds schema: - type: string - - description: Force is going to "force" Apply requests. It means user will - re-acquire conflicting fields owned by other people. Force flag must be - unset for non-apply patch requests. + type: integer + - description: "if set to true, it will trigger an unsafe deletion of the resource\ + \ in case the normal deletion flow fails with a corrupt object error. A\ + \ resource is considered corrupt if it can not be retrieved from the underlying\ + \ storage successfully because of a) its data can not be transformed e.g.\ + \ decryption failure, or b) it fails to decode into an object. NOTE: unsafe\ + \ deletion ignores finalizer constraints, skips precondition checks, and\ + \ removes the object from the storage. WARNING: This may potentially break\ + \ the cluster if the workload associated with the resource being unsafe-deleted\ + \ relies on normal deletion flow. Use only if you REALLY know what you are\ + \ doing. The default value is false, and the user must opt in to enable\ + \ it" in: query - name: force + name: ignoreStoreReadErrorWithClusterBreakingPotential schema: type: boolean - requestBody: - content: - application/json: - schema: - $ref: "#/components/schemas/v1.Patch" - required: true - responses: - "200": - content: - application/json: - schema: - $ref: "#/components/schemas/v1beta1.PodCertificateRequest" - application/yaml: - schema: - $ref: "#/components/schemas/v1beta1.PodCertificateRequest" - application/vnd.kubernetes.protobuf: - schema: - $ref: "#/components/schemas/v1beta1.PodCertificateRequest" - application/cbor: - schema: - $ref: "#/components/schemas/v1beta1.PodCertificateRequest" - description: OK - "201": - content: - application/json: - schema: - $ref: "#/components/schemas/v1beta1.PodCertificateRequest" - application/yaml: - schema: - $ref: "#/components/schemas/v1beta1.PodCertificateRequest" - application/vnd.kubernetes.protobuf: - schema: - $ref: "#/components/schemas/v1beta1.PodCertificateRequest" - application/cbor: - schema: - $ref: "#/components/schemas/v1beta1.PodCertificateRequest" - description: Created - "401": - content: {} - description: Unauthorized - tags: - - certificates_v1beta1 - x-kubernetes-action: patch - x-kubernetes-group-version-kind: - group: certificates.k8s.io - kind: PodCertificateRequest - version: v1beta1 - x-codegen-request-body-name: body - x-content-type: application/json - x-accepts: - - application/cbor - - application/json - - application/vnd.kubernetes.protobuf - - application/yaml - put: - description: replace status of the specified PodCertificateRequest - operationId: replaceNamespacedPodCertificateRequestStatus - parameters: - - description: name of the PodCertificateRequest - in: path - name: name - required: true + - description: A selector to restrict the list of returned objects by their + labels. Defaults to everything. + in: query + name: labelSelector schema: type: string - - description: "object name and auth scope, such as for teams and projects" - in: path - name: namespace - required: true + - description: |- + limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + + The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned. + in: query + name: limit schema: - type: string - - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ - \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ - \ and wget)." + type: integer + - description: "Deprecated: please use the PropagationPolicy, this field will\ + \ be deprecated in 1.7. Should the dependent objects be orphaned. If true/false,\ + \ the \"orphan\" finalizer will be added to/removed from the object's finalizers\ + \ list. Either this field or PropagationPolicy may be set, but not both." in: query - name: pretty + name: orphanDependents + schema: + type: boolean + - description: "Whether and how garbage collection will be performed. Either\ + \ this field or OrphanDependents may be set, but not both. The default policy\ + \ is decided by the existing finalizer set in the metadata.finalizers and\ + \ the resource-specific default policy. Acceptable values are: 'Orphan'\ + \ - orphan the dependents; 'Background' - allow the garbage collector to\ + \ delete the dependents in the background; 'Foreground' - a cascading policy\ + \ that deletes all dependents in the foreground." + in: query + name: propagationPolicy schema: type: string - - description: "When present, indicates that modifications should not be persisted.\ - \ An invalid or unrecognized dryRun directive will result in an error response\ - \ and no further processing of the request. Valid values are: - All: all\ - \ dry run stages will be processed" + - description: |- + resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + + Defaults to unset in: query - name: dryRun + name: resourceVersion schema: type: string - - description: "fieldManager is a name associated with the actor or entity that\ - \ is making these changes. The value must be less than or 128 characters\ - \ long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." + - description: |- + resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + + Defaults to unset in: query - name: fieldManager + name: resourceVersionMatch schema: type: string - - description: "fieldValidation instructs the server on how to handle objects\ - \ in the request (POST/PUT/PATCH) containing unknown or duplicate fields.\ - \ Valid values are: - Ignore: This will ignore any unknown fields that are\ - \ silently dropped from the object, and will ignore all but the last duplicate\ - \ field that the decoder encounters. This is the default behavior prior\ - \ to v1.23. - Warn: This will send a warning via the standard warning response\ - \ header for each unknown field that is dropped from the object, and for\ - \ each duplicate field that is encountered. The request will still succeed\ - \ if there are no other errors, and will only persist the last of any duplicate\ - \ fields. This is the default in v1.23+ - Strict: This will fail the request\ - \ with a BadRequest error if any unknown fields would be dropped from the\ - \ object, or if any duplicate fields are present. The error returned from\ - \ the server will contain all unknown and duplicate fields encountered." + - description: |- + `sendInitialEvents=true` may be set together with `watch=true`. In that case, the watch stream will begin with synthetic events to produce the current state of objects in the collection. Once all such events have been sent, a synthetic "Bookmark" event will be sent. The bookmark will report the ResourceVersion (RV) corresponding to the set of objects, and be marked with `"k8s.io/initial-events-end": "true"` annotation. Afterwards, the watch stream will proceed as usual, sending watch events corresponding to changes (subsequent to the RV) to objects watched. + + When `sendInitialEvents` option is set, we require `resourceVersionMatch` option to also be set. The semantic of the watch request is as following: - `resourceVersionMatch` = NotOlderThan + is interpreted as "data at least as new as the provided `resourceVersion`" + and the bookmark event is send when the state is synced + to a `resourceVersion` at least as fresh as the one provided by the ListOptions. + If `resourceVersion` is unset, this is interpreted as "consistent read" and the + bookmark event is send when the state is synced at least to the moment + when request started being processed. + - `resourceVersionMatch` set to any other value or unset + Invalid error is returned. + + Defaults to true if `resourceVersion=""` or `resourceVersion="0"` (for backward compatibility reasons) and to false otherwise. in: query - name: fieldValidation + name: sendInitialEvents + schema: + type: boolean + - description: |- + shardSelector restricts the list of returned objects using a CEL-based shard selector expression. The format uses the shardRange() function combined with || (logical OR) to specify one or more hash ranges: + + shardRange(object.metadata.uid, '0x0', '0x8000000000000000') + shardRange(object.metadata.uid, '0x0', '0x8000000000000000') || shardRange(object.metadata.uid, '0x8000000000000000', '0x10000000000000000') + + Field paths use CEL-style object-rooted syntax (e.g. "object.metadata.uid"), NOT the fieldSelector format ("metadata.uid"). Currently supported paths: + - object.metadata.uid + - object.metadata.namespace + + hexStart and hexEnd are single-quoted CEL string literals with a '0x' prefix, defining the inclusive lower and exclusive upper bounds over the 64-bit FNV-1a hash space. The full range is [0x0, 0x10000000000000000), where the exclusive upper bound equals 2^64. + + Examples: + 2-shard split: + shard 0: shardRange(object.metadata.uid, '0x0000000000000000', '0x8000000000000000') + shard 1: shardRange(object.metadata.uid, '0x8000000000000000', '0x10000000000000000') + 4-shard split: + shard 0: shardRange(object.metadata.uid, '0x0000000000000000', '0x4000000000000000') + shard 1: shardRange(object.metadata.uid, '0x4000000000000000', '0x8000000000000000') + shard 2: shardRange(object.metadata.uid, '0x8000000000000000', '0xc000000000000000') + shard 3: shardRange(object.metadata.uid, '0xc000000000000000', '0x10000000000000000') + + This is an alpha field and requires enabling the ShardedListAndWatch feature gate. + in: query + name: shardSelector schema: type: string + - description: "Timeout for the list/watch call. This limits the duration of\ + \ the call, regardless of any activity or inactivity." + in: query + name: timeoutSeconds + schema: + type: integer requestBody: content: application/json: schema: - $ref: "#/components/schemas/v1beta1.PodCertificateRequest" - required: true + $ref: "#/components/schemas/v1.DeleteOptions" + required: false responses: "200": content: application/json: schema: - $ref: "#/components/schemas/v1beta1.PodCertificateRequest" + $ref: "#/components/schemas/v1.Status" application/yaml: schema: - $ref: "#/components/schemas/v1beta1.PodCertificateRequest" + $ref: "#/components/schemas/v1.Status" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1beta1.PodCertificateRequest" + $ref: "#/components/schemas/v1.Status" application/cbor: schema: - $ref: "#/components/schemas/v1beta1.PodCertificateRequest" + $ref: "#/components/schemas/v1.Status" description: OK - "201": - content: - application/json: - schema: - $ref: "#/components/schemas/v1beta1.PodCertificateRequest" - application/yaml: - schema: - $ref: "#/components/schemas/v1beta1.PodCertificateRequest" - application/vnd.kubernetes.protobuf: - schema: - $ref: "#/components/schemas/v1beta1.PodCertificateRequest" - application/cbor: - schema: - $ref: "#/components/schemas/v1beta1.PodCertificateRequest" - description: Created "401": content: {} description: Unauthorized tags: - certificates_v1beta1 - x-kubernetes-action: put + x-kubernetes-action: deletecollection x-kubernetes-group-version-kind: group: certificates.k8s.io kind: PodCertificateRequest @@ -50981,11 +51367,23 @@ paths: - application/json - application/vnd.kubernetes.protobuf - application/yaml - /apis/certificates.k8s.io/v1beta1/podcertificaterequests: get: description: list or watch objects of kind PodCertificateRequest - operationId: listPodCertificateRequestForAllNamespaces + operationId: listNamespacedPodCertificateRequest parameters: + - description: "object name and auth scope, such as for teams and projects" + in: path + name: namespace + required: true + schema: + type: string + - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ + \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ + \ and wget)." + in: query + name: pretty + schema: + type: string - description: "allowWatchBookmarks requests watch events with type \"BOOKMARK\"\ . Servers that do not implement bookmarks may ignore this flag and bookmarks\ \ are sent at the server's discretion. Clients should not assume bookmarks\ @@ -51024,13 +51422,6 @@ paths: name: limit schema: type: integer - - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ - \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ - \ and wget)." - in: query - name: pretty - schema: - type: string - description: |- resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. @@ -51147,49 +51538,1029 @@ paths: - application/vnd.kubernetes.protobuf - application/vnd.kubernetes.protobuf;stream=watch - application/yaml - /apis/certificates.k8s.io/v1beta1/watch/clustertrustbundles: {} - /apis/certificates.k8s.io/v1beta1/watch/clustertrustbundles/{name}: {} - /apis/certificates.k8s.io/v1beta1/watch/namespaces/{namespace}/podcertificaterequests: {} - /apis/certificates.k8s.io/v1beta1/watch/namespaces/{namespace}/podcertificaterequests/{name}: {} - /apis/certificates.k8s.io/v1beta1/watch/podcertificaterequests: {} - /apis/coordination.k8s.io/: - get: - description: get information of a group - operationId: getAPIGroup - responses: - "200": - content: - application/json: - schema: - $ref: "#/components/schemas/v1.APIGroup" - application/yaml: - schema: - $ref: "#/components/schemas/v1.APIGroup" - application/vnd.kubernetes.protobuf: - schema: - $ref: "#/components/schemas/v1.APIGroup" - description: OK - "401": - content: {} - description: Unauthorized - tags: - - coordination - x-accepts: - - application/json - - application/vnd.kubernetes.protobuf - - application/yaml - /apis/coordination.k8s.io/v1/: - get: - description: get available resources - operationId: getAPIResources - responses: - "200": - content: - application/json: - schema: - $ref: "#/components/schemas/v1.APIResourceList" - application/yaml: - schema: + post: + description: create a PodCertificateRequest + operationId: createNamespacedPodCertificateRequest + parameters: + - description: "object name and auth scope, such as for teams and projects" + in: path + name: namespace + required: true + schema: + type: string + - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ + \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ + \ and wget)." + in: query + name: pretty + schema: + type: string + - description: "When present, indicates that modifications should not be persisted.\ + \ An invalid or unrecognized dryRun directive will result in an error response\ + \ and no further processing of the request. Valid values are: - All: all\ + \ dry run stages will be processed" + in: query + name: dryRun + schema: + type: string + - description: "fieldManager is a name associated with the actor or entity that\ + \ is making these changes. The value must be less than or 128 characters\ + \ long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." + in: query + name: fieldManager + schema: + type: string + - description: "fieldValidation instructs the server on how to handle objects\ + \ in the request (POST/PUT/PATCH) containing unknown or duplicate fields.\ + \ Valid values are: - Ignore: This will ignore any unknown fields that are\ + \ silently dropped from the object, and will ignore all but the last duplicate\ + \ field that the decoder encounters. This is the default behavior prior\ + \ to v1.23. - Warn: This will send a warning via the standard warning response\ + \ header for each unknown field that is dropped from the object, and for\ + \ each duplicate field that is encountered. The request will still succeed\ + \ if there are no other errors, and will only persist the last of any duplicate\ + \ fields. This is the default in v1.23+ - Strict: This will fail the request\ + \ with a BadRequest error if any unknown fields would be dropped from the\ + \ object, or if any duplicate fields are present. The error returned from\ + \ the server will contain all unknown and duplicate fields encountered." + in: query + name: fieldValidation + schema: + type: string + requestBody: + content: + application/json: + schema: + $ref: "#/components/schemas/v1beta1.PodCertificateRequest" + required: true + responses: + "200": + content: + application/json: + schema: + $ref: "#/components/schemas/v1beta1.PodCertificateRequest" + application/yaml: + schema: + $ref: "#/components/schemas/v1beta1.PodCertificateRequest" + application/vnd.kubernetes.protobuf: + schema: + $ref: "#/components/schemas/v1beta1.PodCertificateRequest" + application/cbor: + schema: + $ref: "#/components/schemas/v1beta1.PodCertificateRequest" + description: OK + "201": + content: + application/json: + schema: + $ref: "#/components/schemas/v1beta1.PodCertificateRequest" + application/yaml: + schema: + $ref: "#/components/schemas/v1beta1.PodCertificateRequest" + application/vnd.kubernetes.protobuf: + schema: + $ref: "#/components/schemas/v1beta1.PodCertificateRequest" + application/cbor: + schema: + $ref: "#/components/schemas/v1beta1.PodCertificateRequest" + description: Created + "202": + content: + application/json: + schema: + $ref: "#/components/schemas/v1beta1.PodCertificateRequest" + application/yaml: + schema: + $ref: "#/components/schemas/v1beta1.PodCertificateRequest" + application/vnd.kubernetes.protobuf: + schema: + $ref: "#/components/schemas/v1beta1.PodCertificateRequest" + application/cbor: + schema: + $ref: "#/components/schemas/v1beta1.PodCertificateRequest" + description: Accepted + "401": + content: {} + description: Unauthorized + tags: + - certificates_v1beta1 + x-kubernetes-action: post + x-kubernetes-group-version-kind: + group: certificates.k8s.io + kind: PodCertificateRequest + version: v1beta1 + x-codegen-request-body-name: body + x-content-type: application/json + x-accepts: + - application/cbor + - application/json + - application/vnd.kubernetes.protobuf + - application/yaml + /apis/certificates.k8s.io/v1beta1/namespaces/{namespace}/podcertificaterequests/{name}: + delete: + description: delete a PodCertificateRequest + operationId: deleteNamespacedPodCertificateRequest + parameters: + - description: name of the PodCertificateRequest + in: path + name: name + required: true + schema: + type: string + - description: "object name and auth scope, such as for teams and projects" + in: path + name: namespace + required: true + schema: + type: string + - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ + \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ + \ and wget)." + in: query + name: pretty + schema: + type: string + - description: "When present, indicates that modifications should not be persisted.\ + \ An invalid or unrecognized dryRun directive will result in an error response\ + \ and no further processing of the request. Valid values are: - All: all\ + \ dry run stages will be processed" + in: query + name: dryRun + schema: + type: string + - description: "The duration in seconds before the object should be deleted.\ + \ Value must be non-negative integer. The value zero indicates delete immediately.\ + \ If this value is nil, the default grace period for the specified type\ + \ will be used. Defaults to a per object value if not specified. zero means\ + \ delete immediately." + in: query + name: gracePeriodSeconds + schema: + type: integer + - description: "if set to true, it will trigger an unsafe deletion of the resource\ + \ in case the normal deletion flow fails with a corrupt object error. A\ + \ resource is considered corrupt if it can not be retrieved from the underlying\ + \ storage successfully because of a) its data can not be transformed e.g.\ + \ decryption failure, or b) it fails to decode into an object. NOTE: unsafe\ + \ deletion ignores finalizer constraints, skips precondition checks, and\ + \ removes the object from the storage. WARNING: This may potentially break\ + \ the cluster if the workload associated with the resource being unsafe-deleted\ + \ relies on normal deletion flow. Use only if you REALLY know what you are\ + \ doing. The default value is false, and the user must opt in to enable\ + \ it" + in: query + name: ignoreStoreReadErrorWithClusterBreakingPotential + schema: + type: boolean + - description: "Deprecated: please use the PropagationPolicy, this field will\ + \ be deprecated in 1.7. Should the dependent objects be orphaned. If true/false,\ + \ the \"orphan\" finalizer will be added to/removed from the object's finalizers\ + \ list. Either this field or PropagationPolicy may be set, but not both." + in: query + name: orphanDependents + schema: + type: boolean + - description: "Whether and how garbage collection will be performed. Either\ + \ this field or OrphanDependents may be set, but not both. The default policy\ + \ is decided by the existing finalizer set in the metadata.finalizers and\ + \ the resource-specific default policy. Acceptable values are: 'Orphan'\ + \ - orphan the dependents; 'Background' - allow the garbage collector to\ + \ delete the dependents in the background; 'Foreground' - a cascading policy\ + \ that deletes all dependents in the foreground." + in: query + name: propagationPolicy + schema: + type: string + requestBody: + content: + application/json: + schema: + $ref: "#/components/schemas/v1.DeleteOptions" + required: false + responses: + "200": + content: + application/json: + schema: + $ref: "#/components/schemas/v1.Status" + application/yaml: + schema: + $ref: "#/components/schemas/v1.Status" + application/vnd.kubernetes.protobuf: + schema: + $ref: "#/components/schemas/v1.Status" + application/cbor: + schema: + $ref: "#/components/schemas/v1.Status" + description: OK + "202": + content: + application/json: + schema: + $ref: "#/components/schemas/v1.Status" + application/yaml: + schema: + $ref: "#/components/schemas/v1.Status" + application/vnd.kubernetes.protobuf: + schema: + $ref: "#/components/schemas/v1.Status" + application/cbor: + schema: + $ref: "#/components/schemas/v1.Status" + description: Accepted + "401": + content: {} + description: Unauthorized + tags: + - certificates_v1beta1 + x-kubernetes-action: delete + x-kubernetes-group-version-kind: + group: certificates.k8s.io + kind: PodCertificateRequest + version: v1beta1 + x-codegen-request-body-name: body + x-content-type: application/json + x-accepts: + - application/cbor + - application/json + - application/vnd.kubernetes.protobuf + - application/yaml + get: + description: read the specified PodCertificateRequest + operationId: readNamespacedPodCertificateRequest + parameters: + - description: name of the PodCertificateRequest + in: path + name: name + required: true + schema: + type: string + - description: "object name and auth scope, such as for teams and projects" + in: path + name: namespace + required: true + schema: + type: string + - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ + \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ + \ and wget)." + in: query + name: pretty + schema: + type: string + responses: + "200": + content: + application/json: + schema: + $ref: "#/components/schemas/v1beta1.PodCertificateRequest" + application/yaml: + schema: + $ref: "#/components/schemas/v1beta1.PodCertificateRequest" + application/vnd.kubernetes.protobuf: + schema: + $ref: "#/components/schemas/v1beta1.PodCertificateRequest" + application/cbor: + schema: + $ref: "#/components/schemas/v1beta1.PodCertificateRequest" + description: OK + "401": + content: {} + description: Unauthorized + tags: + - certificates_v1beta1 + x-kubernetes-action: get + x-kubernetes-group-version-kind: + group: certificates.k8s.io + kind: PodCertificateRequest + version: v1beta1 + x-accepts: + - application/cbor + - application/json + - application/vnd.kubernetes.protobuf + - application/yaml + patch: + description: partially update the specified PodCertificateRequest + operationId: patchNamespacedPodCertificateRequest + parameters: + - description: name of the PodCertificateRequest + in: path + name: name + required: true + schema: + type: string + - description: "object name and auth scope, such as for teams and projects" + in: path + name: namespace + required: true + schema: + type: string + - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ + \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ + \ and wget)." + in: query + name: pretty + schema: + type: string + - description: "When present, indicates that modifications should not be persisted.\ + \ An invalid or unrecognized dryRun directive will result in an error response\ + \ and no further processing of the request. Valid values are: - All: all\ + \ dry run stages will be processed" + in: query + name: dryRun + schema: + type: string + - description: "fieldManager is a name associated with the actor or entity that\ + \ is making these changes. The value must be less than or 128 characters\ + \ long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.\ + \ This field is required for apply requests (application/apply-patch) but\ + \ optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch)." + in: query + name: fieldManager + schema: + type: string + - description: "fieldValidation instructs the server on how to handle objects\ + \ in the request (POST/PUT/PATCH) containing unknown or duplicate fields.\ + \ Valid values are: - Ignore: This will ignore any unknown fields that are\ + \ silently dropped from the object, and will ignore all but the last duplicate\ + \ field that the decoder encounters. This is the default behavior prior\ + \ to v1.23. - Warn: This will send a warning via the standard warning response\ + \ header for each unknown field that is dropped from the object, and for\ + \ each duplicate field that is encountered. The request will still succeed\ + \ if there are no other errors, and will only persist the last of any duplicate\ + \ fields. This is the default in v1.23+ - Strict: This will fail the request\ + \ with a BadRequest error if any unknown fields would be dropped from the\ + \ object, or if any duplicate fields are present. The error returned from\ + \ the server will contain all unknown and duplicate fields encountered." + in: query + name: fieldValidation + schema: + type: string + - description: Force is going to "force" Apply requests. It means user will + re-acquire conflicting fields owned by other people. Force flag must be + unset for non-apply patch requests. + in: query + name: force + schema: + type: boolean + requestBody: + content: + application/json: + schema: + $ref: "#/components/schemas/v1.Patch" + required: true + responses: + "200": + content: + application/json: + schema: + $ref: "#/components/schemas/v1beta1.PodCertificateRequest" + application/yaml: + schema: + $ref: "#/components/schemas/v1beta1.PodCertificateRequest" + application/vnd.kubernetes.protobuf: + schema: + $ref: "#/components/schemas/v1beta1.PodCertificateRequest" + application/cbor: + schema: + $ref: "#/components/schemas/v1beta1.PodCertificateRequest" + description: OK + "201": + content: + application/json: + schema: + $ref: "#/components/schemas/v1beta1.PodCertificateRequest" + application/yaml: + schema: + $ref: "#/components/schemas/v1beta1.PodCertificateRequest" + application/vnd.kubernetes.protobuf: + schema: + $ref: "#/components/schemas/v1beta1.PodCertificateRequest" + application/cbor: + schema: + $ref: "#/components/schemas/v1beta1.PodCertificateRequest" + description: Created + "401": + content: {} + description: Unauthorized + tags: + - certificates_v1beta1 + x-kubernetes-action: patch + x-kubernetes-group-version-kind: + group: certificates.k8s.io + kind: PodCertificateRequest + version: v1beta1 + x-codegen-request-body-name: body + x-content-type: application/json + x-accepts: + - application/cbor + - application/json + - application/vnd.kubernetes.protobuf + - application/yaml + put: + description: replace the specified PodCertificateRequest + operationId: replaceNamespacedPodCertificateRequest + parameters: + - description: name of the PodCertificateRequest + in: path + name: name + required: true + schema: + type: string + - description: "object name and auth scope, such as for teams and projects" + in: path + name: namespace + required: true + schema: + type: string + - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ + \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ + \ and wget)." + in: query + name: pretty + schema: + type: string + - description: "When present, indicates that modifications should not be persisted.\ + \ An invalid or unrecognized dryRun directive will result in an error response\ + \ and no further processing of the request. Valid values are: - All: all\ + \ dry run stages will be processed" + in: query + name: dryRun + schema: + type: string + - description: "fieldManager is a name associated with the actor or entity that\ + \ is making these changes. The value must be less than or 128 characters\ + \ long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." + in: query + name: fieldManager + schema: + type: string + - description: "fieldValidation instructs the server on how to handle objects\ + \ in the request (POST/PUT/PATCH) containing unknown or duplicate fields.\ + \ Valid values are: - Ignore: This will ignore any unknown fields that are\ + \ silently dropped from the object, and will ignore all but the last duplicate\ + \ field that the decoder encounters. This is the default behavior prior\ + \ to v1.23. - Warn: This will send a warning via the standard warning response\ + \ header for each unknown field that is dropped from the object, and for\ + \ each duplicate field that is encountered. The request will still succeed\ + \ if there are no other errors, and will only persist the last of any duplicate\ + \ fields. This is the default in v1.23+ - Strict: This will fail the request\ + \ with a BadRequest error if any unknown fields would be dropped from the\ + \ object, or if any duplicate fields are present. The error returned from\ + \ the server will contain all unknown and duplicate fields encountered." + in: query + name: fieldValidation + schema: + type: string + requestBody: + content: + application/json: + schema: + $ref: "#/components/schemas/v1beta1.PodCertificateRequest" + required: true + responses: + "200": + content: + application/json: + schema: + $ref: "#/components/schemas/v1beta1.PodCertificateRequest" + application/yaml: + schema: + $ref: "#/components/schemas/v1beta1.PodCertificateRequest" + application/vnd.kubernetes.protobuf: + schema: + $ref: "#/components/schemas/v1beta1.PodCertificateRequest" + application/cbor: + schema: + $ref: "#/components/schemas/v1beta1.PodCertificateRequest" + description: OK + "201": + content: + application/json: + schema: + $ref: "#/components/schemas/v1beta1.PodCertificateRequest" + application/yaml: + schema: + $ref: "#/components/schemas/v1beta1.PodCertificateRequest" + application/vnd.kubernetes.protobuf: + schema: + $ref: "#/components/schemas/v1beta1.PodCertificateRequest" + application/cbor: + schema: + $ref: "#/components/schemas/v1beta1.PodCertificateRequest" + description: Created + "401": + content: {} + description: Unauthorized + tags: + - certificates_v1beta1 + x-kubernetes-action: put + x-kubernetes-group-version-kind: + group: certificates.k8s.io + kind: PodCertificateRequest + version: v1beta1 + x-codegen-request-body-name: body + x-content-type: application/json + x-accepts: + - application/cbor + - application/json + - application/vnd.kubernetes.protobuf + - application/yaml + /apis/certificates.k8s.io/v1beta1/namespaces/{namespace}/podcertificaterequests/{name}/status: + get: + description: read status of the specified PodCertificateRequest + operationId: readNamespacedPodCertificateRequestStatus + parameters: + - description: name of the PodCertificateRequest + in: path + name: name + required: true + schema: + type: string + - description: "object name and auth scope, such as for teams and projects" + in: path + name: namespace + required: true + schema: + type: string + - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ + \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ + \ and wget)." + in: query + name: pretty + schema: + type: string + responses: + "200": + content: + application/json: + schema: + $ref: "#/components/schemas/v1beta1.PodCertificateRequest" + application/yaml: + schema: + $ref: "#/components/schemas/v1beta1.PodCertificateRequest" + application/vnd.kubernetes.protobuf: + schema: + $ref: "#/components/schemas/v1beta1.PodCertificateRequest" + application/cbor: + schema: + $ref: "#/components/schemas/v1beta1.PodCertificateRequest" + description: OK + "401": + content: {} + description: Unauthorized + tags: + - certificates_v1beta1 + x-kubernetes-action: get + x-kubernetes-group-version-kind: + group: certificates.k8s.io + kind: PodCertificateRequest + version: v1beta1 + x-accepts: + - application/cbor + - application/json + - application/vnd.kubernetes.protobuf + - application/yaml + patch: + description: partially update status of the specified PodCertificateRequest + operationId: patchNamespacedPodCertificateRequestStatus + parameters: + - description: name of the PodCertificateRequest + in: path + name: name + required: true + schema: + type: string + - description: "object name and auth scope, such as for teams and projects" + in: path + name: namespace + required: true + schema: + type: string + - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ + \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ + \ and wget)." + in: query + name: pretty + schema: + type: string + - description: "When present, indicates that modifications should not be persisted.\ + \ An invalid or unrecognized dryRun directive will result in an error response\ + \ and no further processing of the request. Valid values are: - All: all\ + \ dry run stages will be processed" + in: query + name: dryRun + schema: + type: string + - description: "fieldManager is a name associated with the actor or entity that\ + \ is making these changes. The value must be less than or 128 characters\ + \ long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.\ + \ This field is required for apply requests (application/apply-patch) but\ + \ optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch)." + in: query + name: fieldManager + schema: + type: string + - description: "fieldValidation instructs the server on how to handle objects\ + \ in the request (POST/PUT/PATCH) containing unknown or duplicate fields.\ + \ Valid values are: - Ignore: This will ignore any unknown fields that are\ + \ silently dropped from the object, and will ignore all but the last duplicate\ + \ field that the decoder encounters. This is the default behavior prior\ + \ to v1.23. - Warn: This will send a warning via the standard warning response\ + \ header for each unknown field that is dropped from the object, and for\ + \ each duplicate field that is encountered. The request will still succeed\ + \ if there are no other errors, and will only persist the last of any duplicate\ + \ fields. This is the default in v1.23+ - Strict: This will fail the request\ + \ with a BadRequest error if any unknown fields would be dropped from the\ + \ object, or if any duplicate fields are present. The error returned from\ + \ the server will contain all unknown and duplicate fields encountered." + in: query + name: fieldValidation + schema: + type: string + - description: Force is going to "force" Apply requests. It means user will + re-acquire conflicting fields owned by other people. Force flag must be + unset for non-apply patch requests. + in: query + name: force + schema: + type: boolean + requestBody: + content: + application/json: + schema: + $ref: "#/components/schemas/v1.Patch" + required: true + responses: + "200": + content: + application/json: + schema: + $ref: "#/components/schemas/v1beta1.PodCertificateRequest" + application/yaml: + schema: + $ref: "#/components/schemas/v1beta1.PodCertificateRequest" + application/vnd.kubernetes.protobuf: + schema: + $ref: "#/components/schemas/v1beta1.PodCertificateRequest" + application/cbor: + schema: + $ref: "#/components/schemas/v1beta1.PodCertificateRequest" + description: OK + "201": + content: + application/json: + schema: + $ref: "#/components/schemas/v1beta1.PodCertificateRequest" + application/yaml: + schema: + $ref: "#/components/schemas/v1beta1.PodCertificateRequest" + application/vnd.kubernetes.protobuf: + schema: + $ref: "#/components/schemas/v1beta1.PodCertificateRequest" + application/cbor: + schema: + $ref: "#/components/schemas/v1beta1.PodCertificateRequest" + description: Created + "401": + content: {} + description: Unauthorized + tags: + - certificates_v1beta1 + x-kubernetes-action: patch + x-kubernetes-group-version-kind: + group: certificates.k8s.io + kind: PodCertificateRequest + version: v1beta1 + x-codegen-request-body-name: body + x-content-type: application/json + x-accepts: + - application/cbor + - application/json + - application/vnd.kubernetes.protobuf + - application/yaml + put: + description: replace status of the specified PodCertificateRequest + operationId: replaceNamespacedPodCertificateRequestStatus + parameters: + - description: name of the PodCertificateRequest + in: path + name: name + required: true + schema: + type: string + - description: "object name and auth scope, such as for teams and projects" + in: path + name: namespace + required: true + schema: + type: string + - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ + \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ + \ and wget)." + in: query + name: pretty + schema: + type: string + - description: "When present, indicates that modifications should not be persisted.\ + \ An invalid or unrecognized dryRun directive will result in an error response\ + \ and no further processing of the request. Valid values are: - All: all\ + \ dry run stages will be processed" + in: query + name: dryRun + schema: + type: string + - description: "fieldManager is a name associated with the actor or entity that\ + \ is making these changes. The value must be less than or 128 characters\ + \ long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." + in: query + name: fieldManager + schema: + type: string + - description: "fieldValidation instructs the server on how to handle objects\ + \ in the request (POST/PUT/PATCH) containing unknown or duplicate fields.\ + \ Valid values are: - Ignore: This will ignore any unknown fields that are\ + \ silently dropped from the object, and will ignore all but the last duplicate\ + \ field that the decoder encounters. This is the default behavior prior\ + \ to v1.23. - Warn: This will send a warning via the standard warning response\ + \ header for each unknown field that is dropped from the object, and for\ + \ each duplicate field that is encountered. The request will still succeed\ + \ if there are no other errors, and will only persist the last of any duplicate\ + \ fields. This is the default in v1.23+ - Strict: This will fail the request\ + \ with a BadRequest error if any unknown fields would be dropped from the\ + \ object, or if any duplicate fields are present. The error returned from\ + \ the server will contain all unknown and duplicate fields encountered." + in: query + name: fieldValidation + schema: + type: string + requestBody: + content: + application/json: + schema: + $ref: "#/components/schemas/v1beta1.PodCertificateRequest" + required: true + responses: + "200": + content: + application/json: + schema: + $ref: "#/components/schemas/v1beta1.PodCertificateRequest" + application/yaml: + schema: + $ref: "#/components/schemas/v1beta1.PodCertificateRequest" + application/vnd.kubernetes.protobuf: + schema: + $ref: "#/components/schemas/v1beta1.PodCertificateRequest" + application/cbor: + schema: + $ref: "#/components/schemas/v1beta1.PodCertificateRequest" + description: OK + "201": + content: + application/json: + schema: + $ref: "#/components/schemas/v1beta1.PodCertificateRequest" + application/yaml: + schema: + $ref: "#/components/schemas/v1beta1.PodCertificateRequest" + application/vnd.kubernetes.protobuf: + schema: + $ref: "#/components/schemas/v1beta1.PodCertificateRequest" + application/cbor: + schema: + $ref: "#/components/schemas/v1beta1.PodCertificateRequest" + description: Created + "401": + content: {} + description: Unauthorized + tags: + - certificates_v1beta1 + x-kubernetes-action: put + x-kubernetes-group-version-kind: + group: certificates.k8s.io + kind: PodCertificateRequest + version: v1beta1 + x-codegen-request-body-name: body + x-content-type: application/json + x-accepts: + - application/cbor + - application/json + - application/vnd.kubernetes.protobuf + - application/yaml + /apis/certificates.k8s.io/v1beta1/podcertificaterequests: + get: + description: list or watch objects of kind PodCertificateRequest + operationId: listPodCertificateRequestForAllNamespaces + parameters: + - description: "allowWatchBookmarks requests watch events with type \"BOOKMARK\"\ + . Servers that do not implement bookmarks may ignore this flag and bookmarks\ + \ are sent at the server's discretion. Clients should not assume bookmarks\ + \ are returned at any specific interval, nor may they assume the server\ + \ will send any BOOKMARK event during a session. If this is not a watch,\ + \ this field is ignored." + in: query + name: allowWatchBookmarks + schema: + type: boolean + - description: |- + The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + + This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications. + in: query + name: continue + schema: + type: string + - description: A selector to restrict the list of returned objects by their + fields. Defaults to everything. + in: query + name: fieldSelector + schema: + type: string + - description: A selector to restrict the list of returned objects by their + labels. Defaults to everything. + in: query + name: labelSelector + schema: + type: string + - description: |- + limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + + The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned. + in: query + name: limit + schema: + type: integer + - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ + \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ + \ and wget)." + in: query + name: pretty + schema: + type: string + - description: |- + resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + + Defaults to unset + in: query + name: resourceVersion + schema: + type: string + - description: |- + resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + + Defaults to unset + in: query + name: resourceVersionMatch + schema: + type: string + - description: |- + `sendInitialEvents=true` may be set together with `watch=true`. In that case, the watch stream will begin with synthetic events to produce the current state of objects in the collection. Once all such events have been sent, a synthetic "Bookmark" event will be sent. The bookmark will report the ResourceVersion (RV) corresponding to the set of objects, and be marked with `"k8s.io/initial-events-end": "true"` annotation. Afterwards, the watch stream will proceed as usual, sending watch events corresponding to changes (subsequent to the RV) to objects watched. + + When `sendInitialEvents` option is set, we require `resourceVersionMatch` option to also be set. The semantic of the watch request is as following: - `resourceVersionMatch` = NotOlderThan + is interpreted as "data at least as new as the provided `resourceVersion`" + and the bookmark event is send when the state is synced + to a `resourceVersion` at least as fresh as the one provided by the ListOptions. + If `resourceVersion` is unset, this is interpreted as "consistent read" and the + bookmark event is send when the state is synced at least to the moment + when request started being processed. + - `resourceVersionMatch` set to any other value or unset + Invalid error is returned. + + Defaults to true if `resourceVersion=""` or `resourceVersion="0"` (for backward compatibility reasons) and to false otherwise. + in: query + name: sendInitialEvents + schema: + type: boolean + - description: |- + shardSelector restricts the list of returned objects using a CEL-based shard selector expression. The format uses the shardRange() function combined with || (logical OR) to specify one or more hash ranges: + + shardRange(object.metadata.uid, '0x0', '0x8000000000000000') + shardRange(object.metadata.uid, '0x0', '0x8000000000000000') || shardRange(object.metadata.uid, '0x8000000000000000', '0x10000000000000000') + + Field paths use CEL-style object-rooted syntax (e.g. "object.metadata.uid"), NOT the fieldSelector format ("metadata.uid"). Currently supported paths: + - object.metadata.uid + - object.metadata.namespace + + hexStart and hexEnd are single-quoted CEL string literals with a '0x' prefix, defining the inclusive lower and exclusive upper bounds over the 64-bit FNV-1a hash space. The full range is [0x0, 0x10000000000000000), where the exclusive upper bound equals 2^64. + + Examples: + 2-shard split: + shard 0: shardRange(object.metadata.uid, '0x0000000000000000', '0x8000000000000000') + shard 1: shardRange(object.metadata.uid, '0x8000000000000000', '0x10000000000000000') + 4-shard split: + shard 0: shardRange(object.metadata.uid, '0x0000000000000000', '0x4000000000000000') + shard 1: shardRange(object.metadata.uid, '0x4000000000000000', '0x8000000000000000') + shard 2: shardRange(object.metadata.uid, '0x8000000000000000', '0xc000000000000000') + shard 3: shardRange(object.metadata.uid, '0xc000000000000000', '0x10000000000000000') + + This is an alpha field and requires enabling the ShardedListAndWatch feature gate. + in: query + name: shardSelector + schema: + type: string + - description: "Timeout for the list/watch call. This limits the duration of\ + \ the call, regardless of any activity or inactivity." + in: query + name: timeoutSeconds + schema: + type: integer + - description: "Watch for changes to the described resources and return them\ + \ as a stream of add, update, and remove notifications. Specify resourceVersion." + in: query + name: watch + schema: + type: boolean + responses: + "200": + content: + application/json: + schema: + $ref: "#/components/schemas/v1beta1.PodCertificateRequestList" + application/yaml: + schema: + $ref: "#/components/schemas/v1beta1.PodCertificateRequestList" + application/vnd.kubernetes.protobuf: + schema: + $ref: "#/components/schemas/v1beta1.PodCertificateRequestList" + application/cbor: + schema: + $ref: "#/components/schemas/v1beta1.PodCertificateRequestList" + application/json;stream=watch: + schema: + $ref: "#/components/schemas/v1beta1.PodCertificateRequestList" + application/vnd.kubernetes.protobuf;stream=watch: + schema: + $ref: "#/components/schemas/v1beta1.PodCertificateRequestList" + application/cbor-seq: + schema: + $ref: "#/components/schemas/v1beta1.PodCertificateRequestList" + description: OK + "401": + content: {} + description: Unauthorized + tags: + - certificates_v1beta1 + x-kubernetes-action: list + x-kubernetes-group-version-kind: + group: certificates.k8s.io + kind: PodCertificateRequest + version: v1beta1 + x-accepts: + - application/cbor + - application/cbor-seq + - application/json + - application/json;stream=watch + - application/vnd.kubernetes.protobuf + - application/vnd.kubernetes.protobuf;stream=watch + - application/yaml + /apis/certificates.k8s.io/v1beta1/watch/clustertrustbundles: {} + /apis/certificates.k8s.io/v1beta1/watch/clustertrustbundles/{name}: {} + /apis/certificates.k8s.io/v1beta1/watch/namespaces/{namespace}/podcertificaterequests: {} + /apis/certificates.k8s.io/v1beta1/watch/namespaces/{namespace}/podcertificaterequests/{name}: {} + /apis/certificates.k8s.io/v1beta1/watch/podcertificaterequests: {} + /apis/coordination.k8s.io/: + get: + description: get information of a group + operationId: getAPIGroup + responses: + "200": + content: + application/json: + schema: + $ref: "#/components/schemas/v1.APIGroup" + application/yaml: + schema: + $ref: "#/components/schemas/v1.APIGroup" + application/vnd.kubernetes.protobuf: + schema: + $ref: "#/components/schemas/v1.APIGroup" + application/cbor: + schema: + $ref: "#/components/schemas/v1.APIGroup" + description: OK + "401": + content: {} + description: Unauthorized + tags: + - coordination + x-accepts: + - application/cbor + - application/json + - application/vnd.kubernetes.protobuf + - application/yaml + /apis/coordination.k8s.io/v1/: + get: + description: get available resources + operationId: getAPIResources + responses: + "200": + content: + application/json: + schema: + $ref: "#/components/schemas/v1.APIResourceList" + application/yaml: + schema: $ref: "#/components/schemas/v1.APIResourceList" application/vnd.kubernetes.protobuf: schema: @@ -54497,6 +55868,9 @@ paths: application/vnd.kubernetes.protobuf: schema: $ref: "#/components/schemas/v1.APIGroup" + application/cbor: + schema: + $ref: "#/components/schemas/v1.APIGroup" description: OK "401": content: {} @@ -54504,6 +55878,7 @@ paths: tags: - discovery x-accepts: + - application/cbor - application/json - application/vnd.kubernetes.protobuf - application/yaml @@ -55624,6 +56999,9 @@ paths: application/vnd.kubernetes.protobuf: schema: $ref: "#/components/schemas/v1.APIGroup" + application/cbor: + schema: + $ref: "#/components/schemas/v1.APIGroup" description: OK "401": content: {} @@ -55631,6 +57009,7 @@ paths: tags: - events x-accepts: + - application/cbor - application/json - application/vnd.kubernetes.protobuf - application/yaml @@ -56751,6 +58130,9 @@ paths: application/vnd.kubernetes.protobuf: schema: $ref: "#/components/schemas/v1.APIGroup" + application/cbor: + schema: + $ref: "#/components/schemas/v1.APIGroup" description: OK "401": content: {} @@ -56758,6 +58140,7 @@ paths: tags: - flowcontrolApiserver x-accepts: + - application/cbor - application/json - application/vnd.kubernetes.protobuf - application/yaml @@ -59059,6 +60442,9 @@ paths: application/vnd.kubernetes.protobuf: schema: $ref: "#/components/schemas/v1.APIGroup" + application/cbor: + schema: + $ref: "#/components/schemas/v1.APIGroup" description: OK "401": content: {} @@ -59066,6 +60452,7 @@ paths: tags: - internalApiserver x-accepts: + - application/cbor - application/json - application/vnd.kubernetes.protobuf - application/yaml @@ -60225,7 +61612,7 @@ paths: - application/yaml /apis/internal.apiserver.k8s.io/v1alpha1/watch/storageversions: {} /apis/internal.apiserver.k8s.io/v1alpha1/watch/storageversions/{name}: {} - /apis/networking.k8s.io/: + /apis/lifecycle.k8s.io/: get: description: get information of a group operationId: getAPIGroup @@ -60241,17 +61628,21 @@ paths: application/vnd.kubernetes.protobuf: schema: $ref: "#/components/schemas/v1.APIGroup" + application/cbor: + schema: + $ref: "#/components/schemas/v1.APIGroup" description: OK "401": content: {} description: Unauthorized tags: - - networking + - lifecycle x-accepts: + - application/cbor - application/json - application/vnd.kubernetes.protobuf - application/yaml - /apis/networking.k8s.io/v1/: + /apis/lifecycle.k8s.io/v1alpha1/: get: description: get available resources operationId: getAPIResources @@ -60275,24 +61666,27 @@ paths: content: {} description: Unauthorized tags: - - networking_v1 + - lifecycle_v1alpha1 x-accepts: - application/cbor - application/json - application/vnd.kubernetes.protobuf - application/yaml - /apis/networking.k8s.io/v1/ingressclasses: - delete: - description: delete collection of IngressClass - operationId: deleteCollectionIngressClass + /apis/lifecycle.k8s.io/v1alpha1/evictionrequests: + get: + description: list or watch objects of kind EvictionRequest + operationId: listEvictionRequestForAllNamespaces parameters: - - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ - \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ - \ and wget)." + - description: "allowWatchBookmarks requests watch events with type \"BOOKMARK\"\ + . Servers that do not implement bookmarks may ignore this flag and bookmarks\ + \ are sent at the server's discretion. Clients should not assume bookmarks\ + \ are returned at any specific interval, nor may they assume the server\ + \ will send any BOOKMARK event during a session. If this is not a watch,\ + \ this field is ignored." in: query - name: pretty + name: allowWatchBookmarks schema: - type: string + type: boolean - description: |- The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". @@ -60301,44 +61695,12 @@ paths: name: continue schema: type: string - - description: "When present, indicates that modifications should not be persisted.\ - \ An invalid or unrecognized dryRun directive will result in an error response\ - \ and no further processing of the request. Valid values are: - All: all\ - \ dry run stages will be processed" - in: query - name: dryRun - schema: - type: string - description: A selector to restrict the list of returned objects by their fields. Defaults to everything. in: query name: fieldSelector schema: type: string - - description: "The duration in seconds before the object should be deleted.\ - \ Value must be non-negative integer. The value zero indicates delete immediately.\ - \ If this value is nil, the default grace period for the specified type\ - \ will be used. Defaults to a per object value if not specified. zero means\ - \ delete immediately." - in: query - name: gracePeriodSeconds - schema: - type: integer - - description: "if set to true, it will trigger an unsafe deletion of the resource\ - \ in case the normal deletion flow fails with a corrupt object error. A\ - \ resource is considered corrupt if it can not be retrieved from the underlying\ - \ storage successfully because of a) its data can not be transformed e.g.\ - \ decryption failure, or b) it fails to decode into an object. NOTE: unsafe\ - \ deletion ignores finalizer constraints, skips precondition checks, and\ - \ removes the object from the storage. WARNING: This may potentially break\ - \ the cluster if the workload associated with the resource being unsafe-deleted\ - \ relies on normal deletion flow. Use only if you REALLY know what you are\ - \ doing. The default value is false, and the user must opt in to enable\ - \ it" - in: query - name: ignoreStoreReadErrorWithClusterBreakingPotential - schema: - type: boolean - description: A selector to restrict the list of returned objects by their labels. Defaults to everything. in: query @@ -60353,23 +61715,11 @@ paths: name: limit schema: type: integer - - description: "Deprecated: please use the PropagationPolicy, this field will\ - \ be deprecated in 1.7. Should the dependent objects be orphaned. If true/false,\ - \ the \"orphan\" finalizer will be added to/removed from the object's finalizers\ - \ list. Either this field or PropagationPolicy may be set, but not both." - in: query - name: orphanDependents - schema: - type: boolean - - description: "Whether and how garbage collection will be performed. Either\ - \ this field or OrphanDependents may be set, but not both. The default policy\ - \ is decided by the existing finalizer set in the metadata.finalizers and\ - \ the resource-specific default policy. Acceptable values are: 'Orphan'\ - \ - orphan the dependents; 'Background' - allow the garbage collector to\ - \ delete the dependents in the background; 'Foreground' - a cascading policy\ - \ that deletes all dependents in the foreground." + - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ + \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ + \ and wget)." in: query - name: propagationPolicy + name: pretty schema: type: string - description: |- @@ -60439,56 +61789,60 @@ paths: name: timeoutSeconds schema: type: integer - requestBody: - content: - application/json: - schema: - $ref: "#/components/schemas/v1.DeleteOptions" - required: false + - description: "Watch for changes to the described resources and return them\ + \ as a stream of add, update, and remove notifications. Specify resourceVersion." + in: query + name: watch + schema: + type: boolean responses: "200": content: application/json: schema: - $ref: "#/components/schemas/v1.Status" + $ref: "#/components/schemas/v1alpha1.EvictionRequestList" application/yaml: schema: - $ref: "#/components/schemas/v1.Status" + $ref: "#/components/schemas/v1alpha1.EvictionRequestList" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1.Status" + $ref: "#/components/schemas/v1alpha1.EvictionRequestList" application/cbor: schema: - $ref: "#/components/schemas/v1.Status" + $ref: "#/components/schemas/v1alpha1.EvictionRequestList" + application/json;stream=watch: + schema: + $ref: "#/components/schemas/v1alpha1.EvictionRequestList" + application/vnd.kubernetes.protobuf;stream=watch: + schema: + $ref: "#/components/schemas/v1alpha1.EvictionRequestList" + application/cbor-seq: + schema: + $ref: "#/components/schemas/v1alpha1.EvictionRequestList" description: OK "401": content: {} description: Unauthorized tags: - - networking_v1 - x-kubernetes-action: deletecollection + - lifecycle_v1alpha1 + x-kubernetes-action: list x-kubernetes-group-version-kind: - group: networking.k8s.io - kind: IngressClass - version: v1 - x-codegen-request-body-name: body - x-content-type: application/json + group: lifecycle.k8s.io + kind: EvictionRequest + version: v1alpha1 x-accepts: - application/cbor + - application/cbor-seq - application/json + - application/json;stream=watch - application/vnd.kubernetes.protobuf + - application/vnd.kubernetes.protobuf;stream=watch - application/yaml + /apis/lifecycle.k8s.io/v1alpha1/evictions: get: - description: list or watch objects of kind IngressClass - operationId: listIngressClass + description: list or watch objects of kind Eviction + operationId: listEvictionForAllNamespaces parameters: - - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ - \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ - \ and wget)." - in: query - name: pretty - schema: - type: string - description: "allowWatchBookmarks requests watch events with type \"BOOKMARK\"\ . Servers that do not implement bookmarks may ignore this flag and bookmarks\ \ are sent at the server's discretion. Clients should not assume bookmarks\ @@ -60527,6 +61881,13 @@ paths: name: limit schema: type: integer + - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ + \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ + \ and wget)." + in: query + name: pretty + schema: + type: string - description: |- resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. @@ -60605,36 +61966,36 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1.IngressClassList" + $ref: "#/components/schemas/v1alpha1.EvictionList" application/yaml: schema: - $ref: "#/components/schemas/v1.IngressClassList" + $ref: "#/components/schemas/v1alpha1.EvictionList" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1.IngressClassList" + $ref: "#/components/schemas/v1alpha1.EvictionList" application/cbor: schema: - $ref: "#/components/schemas/v1.IngressClassList" + $ref: "#/components/schemas/v1alpha1.EvictionList" application/json;stream=watch: schema: - $ref: "#/components/schemas/v1.IngressClassList" + $ref: "#/components/schemas/v1alpha1.EvictionList" application/vnd.kubernetes.protobuf;stream=watch: schema: - $ref: "#/components/schemas/v1.IngressClassList" + $ref: "#/components/schemas/v1alpha1.EvictionList" application/cbor-seq: schema: - $ref: "#/components/schemas/v1.IngressClassList" + $ref: "#/components/schemas/v1alpha1.EvictionList" description: OK "401": content: {} description: Unauthorized tags: - - networking_v1 + - lifecycle_v1alpha1 x-kubernetes-action: list x-kubernetes-group-version-kind: - group: networking.k8s.io - kind: IngressClass - version: v1 + group: lifecycle.k8s.io + kind: Eviction + version: v1alpha1 x-accepts: - application/cbor - application/cbor-seq @@ -60643,126 +62004,14 @@ paths: - application/vnd.kubernetes.protobuf - application/vnd.kubernetes.protobuf;stream=watch - application/yaml - post: - description: create an IngressClass - operationId: createIngressClass - parameters: - - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ - \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ - \ and wget)." - in: query - name: pretty - schema: - type: string - - description: "When present, indicates that modifications should not be persisted.\ - \ An invalid or unrecognized dryRun directive will result in an error response\ - \ and no further processing of the request. Valid values are: - All: all\ - \ dry run stages will be processed" - in: query - name: dryRun - schema: - type: string - - description: "fieldManager is a name associated with the actor or entity that\ - \ is making these changes. The value must be less than or 128 characters\ - \ long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." - in: query - name: fieldManager - schema: - type: string - - description: "fieldValidation instructs the server on how to handle objects\ - \ in the request (POST/PUT/PATCH) containing unknown or duplicate fields.\ - \ Valid values are: - Ignore: This will ignore any unknown fields that are\ - \ silently dropped from the object, and will ignore all but the last duplicate\ - \ field that the decoder encounters. This is the default behavior prior\ - \ to v1.23. - Warn: This will send a warning via the standard warning response\ - \ header for each unknown field that is dropped from the object, and for\ - \ each duplicate field that is encountered. The request will still succeed\ - \ if there are no other errors, and will only persist the last of any duplicate\ - \ fields. This is the default in v1.23+ - Strict: This will fail the request\ - \ with a BadRequest error if any unknown fields would be dropped from the\ - \ object, or if any duplicate fields are present. The error returned from\ - \ the server will contain all unknown and duplicate fields encountered." - in: query - name: fieldValidation - schema: - type: string - requestBody: - content: - application/json: - schema: - $ref: "#/components/schemas/v1.IngressClass" - required: true - responses: - "200": - content: - application/json: - schema: - $ref: "#/components/schemas/v1.IngressClass" - application/yaml: - schema: - $ref: "#/components/schemas/v1.IngressClass" - application/vnd.kubernetes.protobuf: - schema: - $ref: "#/components/schemas/v1.IngressClass" - application/cbor: - schema: - $ref: "#/components/schemas/v1.IngressClass" - description: OK - "201": - content: - application/json: - schema: - $ref: "#/components/schemas/v1.IngressClass" - application/yaml: - schema: - $ref: "#/components/schemas/v1.IngressClass" - application/vnd.kubernetes.protobuf: - schema: - $ref: "#/components/schemas/v1.IngressClass" - application/cbor: - schema: - $ref: "#/components/schemas/v1.IngressClass" - description: Created - "202": - content: - application/json: - schema: - $ref: "#/components/schemas/v1.IngressClass" - application/yaml: - schema: - $ref: "#/components/schemas/v1.IngressClass" - application/vnd.kubernetes.protobuf: - schema: - $ref: "#/components/schemas/v1.IngressClass" - application/cbor: - schema: - $ref: "#/components/schemas/v1.IngressClass" - description: Accepted - "401": - content: {} - description: Unauthorized - tags: - - networking_v1 - x-kubernetes-action: post - x-kubernetes-group-version-kind: - group: networking.k8s.io - kind: IngressClass - version: v1 - x-codegen-request-body-name: body - x-content-type: application/json - x-accepts: - - application/cbor - - application/json - - application/vnd.kubernetes.protobuf - - application/yaml - /apis/networking.k8s.io/v1/ingressclasses/{name}: + /apis/lifecycle.k8s.io/v1alpha1/namespaces/{namespace}/evictionrequests: delete: - description: delete an IngressClass - operationId: deleteIngressClass + description: delete collection of EvictionRequest + operationId: deleteCollectionNamespacedEvictionRequest parameters: - - description: name of the IngressClass + - description: "object name and auth scope, such as for teams and projects" in: path - name: name + name: namespace required: true schema: type: string @@ -60773,572 +62022,26 @@ paths: name: pretty schema: type: string + - description: |- + The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + + This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications. + in: query + name: continue + schema: + type: string - description: "When present, indicates that modifications should not be persisted.\ \ An invalid or unrecognized dryRun directive will result in an error response\ \ and no further processing of the request. Valid values are: - All: all\ \ dry run stages will be processed" in: query name: dryRun - schema: - type: string - - description: "The duration in seconds before the object should be deleted.\ - \ Value must be non-negative integer. The value zero indicates delete immediately.\ - \ If this value is nil, the default grace period for the specified type\ - \ will be used. Defaults to a per object value if not specified. zero means\ - \ delete immediately." - in: query - name: gracePeriodSeconds - schema: - type: integer - - description: "if set to true, it will trigger an unsafe deletion of the resource\ - \ in case the normal deletion flow fails with a corrupt object error. A\ - \ resource is considered corrupt if it can not be retrieved from the underlying\ - \ storage successfully because of a) its data can not be transformed e.g.\ - \ decryption failure, or b) it fails to decode into an object. NOTE: unsafe\ - \ deletion ignores finalizer constraints, skips precondition checks, and\ - \ removes the object from the storage. WARNING: This may potentially break\ - \ the cluster if the workload associated with the resource being unsafe-deleted\ - \ relies on normal deletion flow. Use only if you REALLY know what you are\ - \ doing. The default value is false, and the user must opt in to enable\ - \ it" - in: query - name: ignoreStoreReadErrorWithClusterBreakingPotential - schema: - type: boolean - - description: "Deprecated: please use the PropagationPolicy, this field will\ - \ be deprecated in 1.7. Should the dependent objects be orphaned. If true/false,\ - \ the \"orphan\" finalizer will be added to/removed from the object's finalizers\ - \ list. Either this field or PropagationPolicy may be set, but not both." - in: query - name: orphanDependents - schema: - type: boolean - - description: "Whether and how garbage collection will be performed. Either\ - \ this field or OrphanDependents may be set, but not both. The default policy\ - \ is decided by the existing finalizer set in the metadata.finalizers and\ - \ the resource-specific default policy. Acceptable values are: 'Orphan'\ - \ - orphan the dependents; 'Background' - allow the garbage collector to\ - \ delete the dependents in the background; 'Foreground' - a cascading policy\ - \ that deletes all dependents in the foreground." - in: query - name: propagationPolicy - schema: - type: string - requestBody: - content: - application/json: - schema: - $ref: "#/components/schemas/v1.DeleteOptions" - required: false - responses: - "200": - content: - application/json: - schema: - $ref: "#/components/schemas/v1.Status" - application/yaml: - schema: - $ref: "#/components/schemas/v1.Status" - application/vnd.kubernetes.protobuf: - schema: - $ref: "#/components/schemas/v1.Status" - application/cbor: - schema: - $ref: "#/components/schemas/v1.Status" - description: OK - "202": - content: - application/json: - schema: - $ref: "#/components/schemas/v1.Status" - application/yaml: - schema: - $ref: "#/components/schemas/v1.Status" - application/vnd.kubernetes.protobuf: - schema: - $ref: "#/components/schemas/v1.Status" - application/cbor: - schema: - $ref: "#/components/schemas/v1.Status" - description: Accepted - "401": - content: {} - description: Unauthorized - tags: - - networking_v1 - x-kubernetes-action: delete - x-kubernetes-group-version-kind: - group: networking.k8s.io - kind: IngressClass - version: v1 - x-codegen-request-body-name: body - x-content-type: application/json - x-accepts: - - application/cbor - - application/json - - application/vnd.kubernetes.protobuf - - application/yaml - get: - description: read the specified IngressClass - operationId: readIngressClass - parameters: - - description: name of the IngressClass - in: path - name: name - required: true - schema: - type: string - - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ - \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ - \ and wget)." - in: query - name: pretty - schema: - type: string - responses: - "200": - content: - application/json: - schema: - $ref: "#/components/schemas/v1.IngressClass" - application/yaml: - schema: - $ref: "#/components/schemas/v1.IngressClass" - application/vnd.kubernetes.protobuf: - schema: - $ref: "#/components/schemas/v1.IngressClass" - application/cbor: - schema: - $ref: "#/components/schemas/v1.IngressClass" - description: OK - "401": - content: {} - description: Unauthorized - tags: - - networking_v1 - x-kubernetes-action: get - x-kubernetes-group-version-kind: - group: networking.k8s.io - kind: IngressClass - version: v1 - x-accepts: - - application/cbor - - application/json - - application/vnd.kubernetes.protobuf - - application/yaml - patch: - description: partially update the specified IngressClass - operationId: patchIngressClass - parameters: - - description: name of the IngressClass - in: path - name: name - required: true - schema: - type: string - - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ - \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ - \ and wget)." - in: query - name: pretty - schema: - type: string - - description: "When present, indicates that modifications should not be persisted.\ - \ An invalid or unrecognized dryRun directive will result in an error response\ - \ and no further processing of the request. Valid values are: - All: all\ - \ dry run stages will be processed" - in: query - name: dryRun - schema: - type: string - - description: "fieldManager is a name associated with the actor or entity that\ - \ is making these changes. The value must be less than or 128 characters\ - \ long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.\ - \ This field is required for apply requests (application/apply-patch) but\ - \ optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch)." - in: query - name: fieldManager - schema: - type: string - - description: "fieldValidation instructs the server on how to handle objects\ - \ in the request (POST/PUT/PATCH) containing unknown or duplicate fields.\ - \ Valid values are: - Ignore: This will ignore any unknown fields that are\ - \ silently dropped from the object, and will ignore all but the last duplicate\ - \ field that the decoder encounters. This is the default behavior prior\ - \ to v1.23. - Warn: This will send a warning via the standard warning response\ - \ header for each unknown field that is dropped from the object, and for\ - \ each duplicate field that is encountered. The request will still succeed\ - \ if there are no other errors, and will only persist the last of any duplicate\ - \ fields. This is the default in v1.23+ - Strict: This will fail the request\ - \ with a BadRequest error if any unknown fields would be dropped from the\ - \ object, or if any duplicate fields are present. The error returned from\ - \ the server will contain all unknown and duplicate fields encountered." - in: query - name: fieldValidation - schema: - type: string - - description: Force is going to "force" Apply requests. It means user will - re-acquire conflicting fields owned by other people. Force flag must be - unset for non-apply patch requests. - in: query - name: force - schema: - type: boolean - requestBody: - content: - application/json: - schema: - $ref: "#/components/schemas/v1.Patch" - required: true - responses: - "200": - content: - application/json: - schema: - $ref: "#/components/schemas/v1.IngressClass" - application/yaml: - schema: - $ref: "#/components/schemas/v1.IngressClass" - application/vnd.kubernetes.protobuf: - schema: - $ref: "#/components/schemas/v1.IngressClass" - application/cbor: - schema: - $ref: "#/components/schemas/v1.IngressClass" - description: OK - "201": - content: - application/json: - schema: - $ref: "#/components/schemas/v1.IngressClass" - application/yaml: - schema: - $ref: "#/components/schemas/v1.IngressClass" - application/vnd.kubernetes.protobuf: - schema: - $ref: "#/components/schemas/v1.IngressClass" - application/cbor: - schema: - $ref: "#/components/schemas/v1.IngressClass" - description: Created - "401": - content: {} - description: Unauthorized - tags: - - networking_v1 - x-kubernetes-action: patch - x-kubernetes-group-version-kind: - group: networking.k8s.io - kind: IngressClass - version: v1 - x-codegen-request-body-name: body - x-content-type: application/json - x-accepts: - - application/cbor - - application/json - - application/vnd.kubernetes.protobuf - - application/yaml - put: - description: replace the specified IngressClass - operationId: replaceIngressClass - parameters: - - description: name of the IngressClass - in: path - name: name - required: true - schema: - type: string - - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ - \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ - \ and wget)." - in: query - name: pretty - schema: - type: string - - description: "When present, indicates that modifications should not be persisted.\ - \ An invalid or unrecognized dryRun directive will result in an error response\ - \ and no further processing of the request. Valid values are: - All: all\ - \ dry run stages will be processed" - in: query - name: dryRun - schema: - type: string - - description: "fieldManager is a name associated with the actor or entity that\ - \ is making these changes. The value must be less than or 128 characters\ - \ long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." - in: query - name: fieldManager - schema: - type: string - - description: "fieldValidation instructs the server on how to handle objects\ - \ in the request (POST/PUT/PATCH) containing unknown or duplicate fields.\ - \ Valid values are: - Ignore: This will ignore any unknown fields that are\ - \ silently dropped from the object, and will ignore all but the last duplicate\ - \ field that the decoder encounters. This is the default behavior prior\ - \ to v1.23. - Warn: This will send a warning via the standard warning response\ - \ header for each unknown field that is dropped from the object, and for\ - \ each duplicate field that is encountered. The request will still succeed\ - \ if there are no other errors, and will only persist the last of any duplicate\ - \ fields. This is the default in v1.23+ - Strict: This will fail the request\ - \ with a BadRequest error if any unknown fields would be dropped from the\ - \ object, or if any duplicate fields are present. The error returned from\ - \ the server will contain all unknown and duplicate fields encountered." - in: query - name: fieldValidation - schema: - type: string - requestBody: - content: - application/json: - schema: - $ref: "#/components/schemas/v1.IngressClass" - required: true - responses: - "200": - content: - application/json: - schema: - $ref: "#/components/schemas/v1.IngressClass" - application/yaml: - schema: - $ref: "#/components/schemas/v1.IngressClass" - application/vnd.kubernetes.protobuf: - schema: - $ref: "#/components/schemas/v1.IngressClass" - application/cbor: - schema: - $ref: "#/components/schemas/v1.IngressClass" - description: OK - "201": - content: - application/json: - schema: - $ref: "#/components/schemas/v1.IngressClass" - application/yaml: - schema: - $ref: "#/components/schemas/v1.IngressClass" - application/vnd.kubernetes.protobuf: - schema: - $ref: "#/components/schemas/v1.IngressClass" - application/cbor: - schema: - $ref: "#/components/schemas/v1.IngressClass" - description: Created - "401": - content: {} - description: Unauthorized - tags: - - networking_v1 - x-kubernetes-action: put - x-kubernetes-group-version-kind: - group: networking.k8s.io - kind: IngressClass - version: v1 - x-codegen-request-body-name: body - x-content-type: application/json - x-accepts: - - application/cbor - - application/json - - application/vnd.kubernetes.protobuf - - application/yaml - /apis/networking.k8s.io/v1/ingresses: - get: - description: list or watch objects of kind Ingress - operationId: listIngressForAllNamespaces - parameters: - - description: "allowWatchBookmarks requests watch events with type \"BOOKMARK\"\ - . Servers that do not implement bookmarks may ignore this flag and bookmarks\ - \ are sent at the server's discretion. Clients should not assume bookmarks\ - \ are returned at any specific interval, nor may they assume the server\ - \ will send any BOOKMARK event during a session. If this is not a watch,\ - \ this field is ignored." - in: query - name: allowWatchBookmarks - schema: - type: boolean - - description: |- - The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". - - This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications. - in: query - name: continue - schema: - type: string - - description: A selector to restrict the list of returned objects by their - fields. Defaults to everything. - in: query - name: fieldSelector - schema: - type: string - - description: A selector to restrict the list of returned objects by their - labels. Defaults to everything. - in: query - name: labelSelector - schema: - type: string - - description: |- - limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. - - The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned. - in: query - name: limit - schema: - type: integer - - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ - \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ - \ and wget)." - in: query - name: pretty - schema: - type: string - - description: |- - resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. - - Defaults to unset - in: query - name: resourceVersion - schema: - type: string - - description: |- - resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. - - Defaults to unset - in: query - name: resourceVersionMatch - schema: - type: string - - description: |- - `sendInitialEvents=true` may be set together with `watch=true`. In that case, the watch stream will begin with synthetic events to produce the current state of objects in the collection. Once all such events have been sent, a synthetic "Bookmark" event will be sent. The bookmark will report the ResourceVersion (RV) corresponding to the set of objects, and be marked with `"k8s.io/initial-events-end": "true"` annotation. Afterwards, the watch stream will proceed as usual, sending watch events corresponding to changes (subsequent to the RV) to objects watched. - - When `sendInitialEvents` option is set, we require `resourceVersionMatch` option to also be set. The semantic of the watch request is as following: - `resourceVersionMatch` = NotOlderThan - is interpreted as "data at least as new as the provided `resourceVersion`" - and the bookmark event is send when the state is synced - to a `resourceVersion` at least as fresh as the one provided by the ListOptions. - If `resourceVersion` is unset, this is interpreted as "consistent read" and the - bookmark event is send when the state is synced at least to the moment - when request started being processed. - - `resourceVersionMatch` set to any other value or unset - Invalid error is returned. - - Defaults to true if `resourceVersion=""` or `resourceVersion="0"` (for backward compatibility reasons) and to false otherwise. - in: query - name: sendInitialEvents - schema: - type: boolean - - description: |- - shardSelector restricts the list of returned objects using a CEL-based shard selector expression. The format uses the shardRange() function combined with || (logical OR) to specify one or more hash ranges: - - shardRange(object.metadata.uid, '0x0', '0x8000000000000000') - shardRange(object.metadata.uid, '0x0', '0x8000000000000000') || shardRange(object.metadata.uid, '0x8000000000000000', '0x10000000000000000') - - Field paths use CEL-style object-rooted syntax (e.g. "object.metadata.uid"), NOT the fieldSelector format ("metadata.uid"). Currently supported paths: - - object.metadata.uid - - object.metadata.namespace - - hexStart and hexEnd are single-quoted CEL string literals with a '0x' prefix, defining the inclusive lower and exclusive upper bounds over the 64-bit FNV-1a hash space. The full range is [0x0, 0x10000000000000000), where the exclusive upper bound equals 2^64. - - Examples: - 2-shard split: - shard 0: shardRange(object.metadata.uid, '0x0000000000000000', '0x8000000000000000') - shard 1: shardRange(object.metadata.uid, '0x8000000000000000', '0x10000000000000000') - 4-shard split: - shard 0: shardRange(object.metadata.uid, '0x0000000000000000', '0x4000000000000000') - shard 1: shardRange(object.metadata.uid, '0x4000000000000000', '0x8000000000000000') - shard 2: shardRange(object.metadata.uid, '0x8000000000000000', '0xc000000000000000') - shard 3: shardRange(object.metadata.uid, '0xc000000000000000', '0x10000000000000000') - - This is an alpha field and requires enabling the ShardedListAndWatch feature gate. - in: query - name: shardSelector - schema: - type: string - - description: "Timeout for the list/watch call. This limits the duration of\ - \ the call, regardless of any activity or inactivity." - in: query - name: timeoutSeconds - schema: - type: integer - - description: "Watch for changes to the described resources and return them\ - \ as a stream of add, update, and remove notifications. Specify resourceVersion." - in: query - name: watch - schema: - type: boolean - responses: - "200": - content: - application/json: - schema: - $ref: "#/components/schemas/v1.IngressList" - application/yaml: - schema: - $ref: "#/components/schemas/v1.IngressList" - application/vnd.kubernetes.protobuf: - schema: - $ref: "#/components/schemas/v1.IngressList" - application/cbor: - schema: - $ref: "#/components/schemas/v1.IngressList" - application/json;stream=watch: - schema: - $ref: "#/components/schemas/v1.IngressList" - application/vnd.kubernetes.protobuf;stream=watch: - schema: - $ref: "#/components/schemas/v1.IngressList" - application/cbor-seq: - schema: - $ref: "#/components/schemas/v1.IngressList" - description: OK - "401": - content: {} - description: Unauthorized - tags: - - networking_v1 - x-kubernetes-action: list - x-kubernetes-group-version-kind: - group: networking.k8s.io - kind: Ingress - version: v1 - x-accepts: - - application/cbor - - application/cbor-seq - - application/json - - application/json;stream=watch - - application/vnd.kubernetes.protobuf - - application/vnd.kubernetes.protobuf;stream=watch - - application/yaml - /apis/networking.k8s.io/v1/ipaddresses: - delete: - description: delete collection of IPAddress - operationId: deleteCollectionIPAddress - parameters: - - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ - \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ - \ and wget)." - in: query - name: pretty - schema: - type: string - - description: |- - The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". - - This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications. - in: query - name: continue - schema: - type: string - - description: "When present, indicates that modifications should not be persisted.\ - \ An invalid or unrecognized dryRun directive will result in an error response\ - \ and no further processing of the request. Valid values are: - All: all\ - \ dry run stages will be processed" - in: query - name: dryRun - schema: - type: string - - description: A selector to restrict the list of returned objects by their - fields. Defaults to everything. - in: query - name: fieldSelector + schema: + type: string + - description: A selector to restrict the list of returned objects by their + fields. Defaults to everything. + in: query + name: fieldSelector schema: type: string - description: "The duration in seconds before the object should be deleted.\ @@ -61491,12 +62194,12 @@ paths: content: {} description: Unauthorized tags: - - networking_v1 + - lifecycle_v1alpha1 x-kubernetes-action: deletecollection x-kubernetes-group-version-kind: - group: networking.k8s.io - kind: IPAddress - version: v1 + group: lifecycle.k8s.io + kind: EvictionRequest + version: v1alpha1 x-codegen-request-body-name: body x-content-type: application/json x-accepts: @@ -61505,9 +62208,15 @@ paths: - application/vnd.kubernetes.protobuf - application/yaml get: - description: list or watch objects of kind IPAddress - operationId: listIPAddress + description: list or watch objects of kind EvictionRequest + operationId: listNamespacedEvictionRequest parameters: + - description: "object name and auth scope, such as for teams and projects" + in: path + name: namespace + required: true + schema: + type: string - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ \ and wget)." @@ -61631,36 +62340,36 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1.IPAddressList" + $ref: "#/components/schemas/v1alpha1.EvictionRequestList" application/yaml: schema: - $ref: "#/components/schemas/v1.IPAddressList" + $ref: "#/components/schemas/v1alpha1.EvictionRequestList" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1.IPAddressList" + $ref: "#/components/schemas/v1alpha1.EvictionRequestList" application/cbor: schema: - $ref: "#/components/schemas/v1.IPAddressList" + $ref: "#/components/schemas/v1alpha1.EvictionRequestList" application/json;stream=watch: schema: - $ref: "#/components/schemas/v1.IPAddressList" + $ref: "#/components/schemas/v1alpha1.EvictionRequestList" application/vnd.kubernetes.protobuf;stream=watch: schema: - $ref: "#/components/schemas/v1.IPAddressList" + $ref: "#/components/schemas/v1alpha1.EvictionRequestList" application/cbor-seq: schema: - $ref: "#/components/schemas/v1.IPAddressList" + $ref: "#/components/schemas/v1alpha1.EvictionRequestList" description: OK "401": content: {} description: Unauthorized tags: - - networking_v1 + - lifecycle_v1alpha1 x-kubernetes-action: list x-kubernetes-group-version-kind: - group: networking.k8s.io - kind: IPAddress - version: v1 + group: lifecycle.k8s.io + kind: EvictionRequest + version: v1alpha1 x-accepts: - application/cbor - application/cbor-seq @@ -61670,9 +62379,15 @@ paths: - application/vnd.kubernetes.protobuf;stream=watch - application/yaml post: - description: create an IPAddress - operationId: createIPAddress + description: create an EvictionRequest + operationId: createNamespacedEvictionRequest parameters: + - description: "object name and auth scope, such as for teams and projects" + in: path + name: namespace + required: true + schema: + type: string - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ \ and wget)." @@ -61716,64 +62431,64 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1.IPAddress" + $ref: "#/components/schemas/v1alpha1.EvictionRequest" required: true responses: "200": content: application/json: schema: - $ref: "#/components/schemas/v1.IPAddress" + $ref: "#/components/schemas/v1alpha1.EvictionRequest" application/yaml: schema: - $ref: "#/components/schemas/v1.IPAddress" + $ref: "#/components/schemas/v1alpha1.EvictionRequest" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1.IPAddress" + $ref: "#/components/schemas/v1alpha1.EvictionRequest" application/cbor: schema: - $ref: "#/components/schemas/v1.IPAddress" + $ref: "#/components/schemas/v1alpha1.EvictionRequest" description: OK "201": content: application/json: schema: - $ref: "#/components/schemas/v1.IPAddress" + $ref: "#/components/schemas/v1alpha1.EvictionRequest" application/yaml: schema: - $ref: "#/components/schemas/v1.IPAddress" + $ref: "#/components/schemas/v1alpha1.EvictionRequest" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1.IPAddress" + $ref: "#/components/schemas/v1alpha1.EvictionRequest" application/cbor: schema: - $ref: "#/components/schemas/v1.IPAddress" + $ref: "#/components/schemas/v1alpha1.EvictionRequest" description: Created "202": content: application/json: schema: - $ref: "#/components/schemas/v1.IPAddress" + $ref: "#/components/schemas/v1alpha1.EvictionRequest" application/yaml: schema: - $ref: "#/components/schemas/v1.IPAddress" + $ref: "#/components/schemas/v1alpha1.EvictionRequest" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1.IPAddress" + $ref: "#/components/schemas/v1alpha1.EvictionRequest" application/cbor: schema: - $ref: "#/components/schemas/v1.IPAddress" + $ref: "#/components/schemas/v1alpha1.EvictionRequest" description: Accepted "401": content: {} description: Unauthorized tags: - - networking_v1 + - lifecycle_v1alpha1 x-kubernetes-action: post x-kubernetes-group-version-kind: - group: networking.k8s.io - kind: IPAddress - version: v1 + group: lifecycle.k8s.io + kind: EvictionRequest + version: v1alpha1 x-codegen-request-body-name: body x-content-type: application/json x-accepts: @@ -61781,17 +62496,23 @@ paths: - application/json - application/vnd.kubernetes.protobuf - application/yaml - /apis/networking.k8s.io/v1/ipaddresses/{name}: + /apis/lifecycle.k8s.io/v1alpha1/namespaces/{namespace}/evictionrequests/{name}: delete: - description: delete an IPAddress - operationId: deleteIPAddress + description: delete an EvictionRequest + operationId: deleteNamespacedEvictionRequest parameters: - - description: name of the IPAddress + - description: name of the EvictionRequest in: path name: name required: true schema: type: string + - description: "object name and auth scope, such as for teams and projects" + in: path + name: namespace + required: true + schema: + type: string - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ \ and wget)." @@ -61891,12 +62612,12 @@ paths: content: {} description: Unauthorized tags: - - networking_v1 + - lifecycle_v1alpha1 x-kubernetes-action: delete x-kubernetes-group-version-kind: - group: networking.k8s.io - kind: IPAddress - version: v1 + group: lifecycle.k8s.io + kind: EvictionRequest + version: v1alpha1 x-codegen-request-body-name: body x-content-type: application/json x-accepts: @@ -61905,15 +62626,21 @@ paths: - application/vnd.kubernetes.protobuf - application/yaml get: - description: read the specified IPAddress - operationId: readIPAddress + description: read the specified EvictionRequest + operationId: readNamespacedEvictionRequest parameters: - - description: name of the IPAddress + - description: name of the EvictionRequest in: path name: name required: true schema: type: string + - description: "object name and auth scope, such as for teams and projects" + in: path + name: namespace + required: true + schema: + type: string - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ \ and wget)." @@ -61926,42 +62653,48 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1.IPAddress" + $ref: "#/components/schemas/v1alpha1.EvictionRequest" application/yaml: schema: - $ref: "#/components/schemas/v1.IPAddress" + $ref: "#/components/schemas/v1alpha1.EvictionRequest" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1.IPAddress" + $ref: "#/components/schemas/v1alpha1.EvictionRequest" application/cbor: schema: - $ref: "#/components/schemas/v1.IPAddress" + $ref: "#/components/schemas/v1alpha1.EvictionRequest" description: OK "401": content: {} description: Unauthorized tags: - - networking_v1 + - lifecycle_v1alpha1 x-kubernetes-action: get x-kubernetes-group-version-kind: - group: networking.k8s.io - kind: IPAddress - version: v1 + group: lifecycle.k8s.io + kind: EvictionRequest + version: v1alpha1 x-accepts: - application/cbor - application/json - application/vnd.kubernetes.protobuf - application/yaml patch: - description: partially update the specified IPAddress - operationId: patchIPAddress + description: partially update the specified EvictionRequest + operationId: patchNamespacedEvictionRequest parameters: - - description: name of the IPAddress + - description: name of the EvictionRequest in: path name: name required: true schema: type: string + - description: "object name and auth scope, such as for teams and projects" + in: path + name: namespace + required: true + schema: + type: string - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ \ and wget)." @@ -62021,42 +62754,42 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1.IPAddress" + $ref: "#/components/schemas/v1alpha1.EvictionRequest" application/yaml: schema: - $ref: "#/components/schemas/v1.IPAddress" + $ref: "#/components/schemas/v1alpha1.EvictionRequest" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1.IPAddress" + $ref: "#/components/schemas/v1alpha1.EvictionRequest" application/cbor: schema: - $ref: "#/components/schemas/v1.IPAddress" + $ref: "#/components/schemas/v1alpha1.EvictionRequest" description: OK "201": content: application/json: schema: - $ref: "#/components/schemas/v1.IPAddress" + $ref: "#/components/schemas/v1alpha1.EvictionRequest" application/yaml: schema: - $ref: "#/components/schemas/v1.IPAddress" + $ref: "#/components/schemas/v1alpha1.EvictionRequest" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1.IPAddress" + $ref: "#/components/schemas/v1alpha1.EvictionRequest" application/cbor: schema: - $ref: "#/components/schemas/v1.IPAddress" + $ref: "#/components/schemas/v1alpha1.EvictionRequest" description: Created "401": content: {} description: Unauthorized tags: - - networking_v1 + - lifecycle_v1alpha1 x-kubernetes-action: patch x-kubernetes-group-version-kind: - group: networking.k8s.io - kind: IPAddress - version: v1 + group: lifecycle.k8s.io + kind: EvictionRequest + version: v1alpha1 x-codegen-request-body-name: body x-content-type: application/json x-accepts: @@ -62065,15 +62798,21 @@ paths: - application/vnd.kubernetes.protobuf - application/yaml put: - description: replace the specified IPAddress - operationId: replaceIPAddress + description: replace the specified EvictionRequest + operationId: replaceNamespacedEvictionRequest parameters: - - description: name of the IPAddress + - description: name of the EvictionRequest in: path name: name required: true schema: type: string + - description: "object name and auth scope, such as for teams and projects" + in: path + name: namespace + required: true + schema: + type: string - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ \ and wget)." @@ -62117,49 +62856,49 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1.IPAddress" + $ref: "#/components/schemas/v1alpha1.EvictionRequest" required: true responses: "200": content: application/json: schema: - $ref: "#/components/schemas/v1.IPAddress" + $ref: "#/components/schemas/v1alpha1.EvictionRequest" application/yaml: schema: - $ref: "#/components/schemas/v1.IPAddress" + $ref: "#/components/schemas/v1alpha1.EvictionRequest" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1.IPAddress" + $ref: "#/components/schemas/v1alpha1.EvictionRequest" application/cbor: schema: - $ref: "#/components/schemas/v1.IPAddress" + $ref: "#/components/schemas/v1alpha1.EvictionRequest" description: OK "201": content: application/json: schema: - $ref: "#/components/schemas/v1.IPAddress" + $ref: "#/components/schemas/v1alpha1.EvictionRequest" application/yaml: schema: - $ref: "#/components/schemas/v1.IPAddress" + $ref: "#/components/schemas/v1alpha1.EvictionRequest" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1.IPAddress" + $ref: "#/components/schemas/v1alpha1.EvictionRequest" application/cbor: schema: - $ref: "#/components/schemas/v1.IPAddress" + $ref: "#/components/schemas/v1alpha1.EvictionRequest" description: Created "401": content: {} description: Unauthorized tags: - - networking_v1 + - lifecycle_v1alpha1 x-kubernetes-action: put x-kubernetes-group-version-kind: - group: networking.k8s.io - kind: IPAddress - version: v1 + group: lifecycle.k8s.io + kind: EvictionRequest + version: v1alpha1 x-codegen-request-body-name: body x-content-type: application/json x-accepts: @@ -62167,10 +62906,292 @@ paths: - application/json - application/vnd.kubernetes.protobuf - application/yaml - /apis/networking.k8s.io/v1/namespaces/{namespace}/ingresses: + /apis/lifecycle.k8s.io/v1alpha1/namespaces/{namespace}/evictionrequests/{name}/status: + get: + description: read status of the specified EvictionRequest + operationId: readNamespacedEvictionRequestStatus + parameters: + - description: name of the EvictionRequest + in: path + name: name + required: true + schema: + type: string + - description: "object name and auth scope, such as for teams and projects" + in: path + name: namespace + required: true + schema: + type: string + - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ + \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ + \ and wget)." + in: query + name: pretty + schema: + type: string + responses: + "200": + content: + application/json: + schema: + $ref: "#/components/schemas/v1alpha1.EvictionRequest" + application/yaml: + schema: + $ref: "#/components/schemas/v1alpha1.EvictionRequest" + application/vnd.kubernetes.protobuf: + schema: + $ref: "#/components/schemas/v1alpha1.EvictionRequest" + application/cbor: + schema: + $ref: "#/components/schemas/v1alpha1.EvictionRequest" + description: OK + "401": + content: {} + description: Unauthorized + tags: + - lifecycle_v1alpha1 + x-kubernetes-action: get + x-kubernetes-group-version-kind: + group: lifecycle.k8s.io + kind: EvictionRequest + version: v1alpha1 + x-accepts: + - application/cbor + - application/json + - application/vnd.kubernetes.protobuf + - application/yaml + patch: + description: partially update status of the specified EvictionRequest + operationId: patchNamespacedEvictionRequestStatus + parameters: + - description: name of the EvictionRequest + in: path + name: name + required: true + schema: + type: string + - description: "object name and auth scope, such as for teams and projects" + in: path + name: namespace + required: true + schema: + type: string + - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ + \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ + \ and wget)." + in: query + name: pretty + schema: + type: string + - description: "When present, indicates that modifications should not be persisted.\ + \ An invalid or unrecognized dryRun directive will result in an error response\ + \ and no further processing of the request. Valid values are: - All: all\ + \ dry run stages will be processed" + in: query + name: dryRun + schema: + type: string + - description: "fieldManager is a name associated with the actor or entity that\ + \ is making these changes. The value must be less than or 128 characters\ + \ long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.\ + \ This field is required for apply requests (application/apply-patch) but\ + \ optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch)." + in: query + name: fieldManager + schema: + type: string + - description: "fieldValidation instructs the server on how to handle objects\ + \ in the request (POST/PUT/PATCH) containing unknown or duplicate fields.\ + \ Valid values are: - Ignore: This will ignore any unknown fields that are\ + \ silently dropped from the object, and will ignore all but the last duplicate\ + \ field that the decoder encounters. This is the default behavior prior\ + \ to v1.23. - Warn: This will send a warning via the standard warning response\ + \ header for each unknown field that is dropped from the object, and for\ + \ each duplicate field that is encountered. The request will still succeed\ + \ if there are no other errors, and will only persist the last of any duplicate\ + \ fields. This is the default in v1.23+ - Strict: This will fail the request\ + \ with a BadRequest error if any unknown fields would be dropped from the\ + \ object, or if any duplicate fields are present. The error returned from\ + \ the server will contain all unknown and duplicate fields encountered." + in: query + name: fieldValidation + schema: + type: string + - description: Force is going to "force" Apply requests. It means user will + re-acquire conflicting fields owned by other people. Force flag must be + unset for non-apply patch requests. + in: query + name: force + schema: + type: boolean + requestBody: + content: + application/json: + schema: + $ref: "#/components/schemas/v1.Patch" + required: true + responses: + "200": + content: + application/json: + schema: + $ref: "#/components/schemas/v1alpha1.EvictionRequest" + application/yaml: + schema: + $ref: "#/components/schemas/v1alpha1.EvictionRequest" + application/vnd.kubernetes.protobuf: + schema: + $ref: "#/components/schemas/v1alpha1.EvictionRequest" + application/cbor: + schema: + $ref: "#/components/schemas/v1alpha1.EvictionRequest" + description: OK + "201": + content: + application/json: + schema: + $ref: "#/components/schemas/v1alpha1.EvictionRequest" + application/yaml: + schema: + $ref: "#/components/schemas/v1alpha1.EvictionRequest" + application/vnd.kubernetes.protobuf: + schema: + $ref: "#/components/schemas/v1alpha1.EvictionRequest" + application/cbor: + schema: + $ref: "#/components/schemas/v1alpha1.EvictionRequest" + description: Created + "401": + content: {} + description: Unauthorized + tags: + - lifecycle_v1alpha1 + x-kubernetes-action: patch + x-kubernetes-group-version-kind: + group: lifecycle.k8s.io + kind: EvictionRequest + version: v1alpha1 + x-codegen-request-body-name: body + x-content-type: application/json + x-accepts: + - application/cbor + - application/json + - application/vnd.kubernetes.protobuf + - application/yaml + put: + description: replace status of the specified EvictionRequest + operationId: replaceNamespacedEvictionRequestStatus + parameters: + - description: name of the EvictionRequest + in: path + name: name + required: true + schema: + type: string + - description: "object name and auth scope, such as for teams and projects" + in: path + name: namespace + required: true + schema: + type: string + - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ + \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ + \ and wget)." + in: query + name: pretty + schema: + type: string + - description: "When present, indicates that modifications should not be persisted.\ + \ An invalid or unrecognized dryRun directive will result in an error response\ + \ and no further processing of the request. Valid values are: - All: all\ + \ dry run stages will be processed" + in: query + name: dryRun + schema: + type: string + - description: "fieldManager is a name associated with the actor or entity that\ + \ is making these changes. The value must be less than or 128 characters\ + \ long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." + in: query + name: fieldManager + schema: + type: string + - description: "fieldValidation instructs the server on how to handle objects\ + \ in the request (POST/PUT/PATCH) containing unknown or duplicate fields.\ + \ Valid values are: - Ignore: This will ignore any unknown fields that are\ + \ silently dropped from the object, and will ignore all but the last duplicate\ + \ field that the decoder encounters. This is the default behavior prior\ + \ to v1.23. - Warn: This will send a warning via the standard warning response\ + \ header for each unknown field that is dropped from the object, and for\ + \ each duplicate field that is encountered. The request will still succeed\ + \ if there are no other errors, and will only persist the last of any duplicate\ + \ fields. This is the default in v1.23+ - Strict: This will fail the request\ + \ with a BadRequest error if any unknown fields would be dropped from the\ + \ object, or if any duplicate fields are present. The error returned from\ + \ the server will contain all unknown and duplicate fields encountered." + in: query + name: fieldValidation + schema: + type: string + requestBody: + content: + application/json: + schema: + $ref: "#/components/schemas/v1alpha1.EvictionRequest" + required: true + responses: + "200": + content: + application/json: + schema: + $ref: "#/components/schemas/v1alpha1.EvictionRequest" + application/yaml: + schema: + $ref: "#/components/schemas/v1alpha1.EvictionRequest" + application/vnd.kubernetes.protobuf: + schema: + $ref: "#/components/schemas/v1alpha1.EvictionRequest" + application/cbor: + schema: + $ref: "#/components/schemas/v1alpha1.EvictionRequest" + description: OK + "201": + content: + application/json: + schema: + $ref: "#/components/schemas/v1alpha1.EvictionRequest" + application/yaml: + schema: + $ref: "#/components/schemas/v1alpha1.EvictionRequest" + application/vnd.kubernetes.protobuf: + schema: + $ref: "#/components/schemas/v1alpha1.EvictionRequest" + application/cbor: + schema: + $ref: "#/components/schemas/v1alpha1.EvictionRequest" + description: Created + "401": + content: {} + description: Unauthorized + tags: + - lifecycle_v1alpha1 + x-kubernetes-action: put + x-kubernetes-group-version-kind: + group: lifecycle.k8s.io + kind: EvictionRequest + version: v1alpha1 + x-codegen-request-body-name: body + x-content-type: application/json + x-accepts: + - application/cbor + - application/json + - application/vnd.kubernetes.protobuf + - application/yaml + /apis/lifecycle.k8s.io/v1alpha1/namespaces/{namespace}/evictions: delete: - description: delete collection of Ingress - operationId: deleteCollectionNamespacedIngress + description: delete collection of Eviction + operationId: deleteCollectionNamespacedEviction parameters: - description: "object name and auth scope, such as for teams and projects" in: path @@ -62357,12 +63378,12 @@ paths: content: {} description: Unauthorized tags: - - networking_v1 + - lifecycle_v1alpha1 x-kubernetes-action: deletecollection x-kubernetes-group-version-kind: - group: networking.k8s.io - kind: Ingress - version: v1 + group: lifecycle.k8s.io + kind: Eviction + version: v1alpha1 x-codegen-request-body-name: body x-content-type: application/json x-accepts: @@ -62371,8 +63392,8 @@ paths: - application/vnd.kubernetes.protobuf - application/yaml get: - description: list or watch objects of kind Ingress - operationId: listNamespacedIngress + description: list or watch objects of kind Eviction + operationId: listNamespacedEviction parameters: - description: "object name and auth scope, such as for teams and projects" in: path @@ -62503,36 +63524,36 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1.IngressList" + $ref: "#/components/schemas/v1alpha1.EvictionList" application/yaml: schema: - $ref: "#/components/schemas/v1.IngressList" + $ref: "#/components/schemas/v1alpha1.EvictionList" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1.IngressList" + $ref: "#/components/schemas/v1alpha1.EvictionList" application/cbor: schema: - $ref: "#/components/schemas/v1.IngressList" + $ref: "#/components/schemas/v1alpha1.EvictionList" application/json;stream=watch: schema: - $ref: "#/components/schemas/v1.IngressList" + $ref: "#/components/schemas/v1alpha1.EvictionList" application/vnd.kubernetes.protobuf;stream=watch: schema: - $ref: "#/components/schemas/v1.IngressList" + $ref: "#/components/schemas/v1alpha1.EvictionList" application/cbor-seq: schema: - $ref: "#/components/schemas/v1.IngressList" + $ref: "#/components/schemas/v1alpha1.EvictionList" description: OK "401": content: {} description: Unauthorized tags: - - networking_v1 + - lifecycle_v1alpha1 x-kubernetes-action: list x-kubernetes-group-version-kind: - group: networking.k8s.io - kind: Ingress - version: v1 + group: lifecycle.k8s.io + kind: Eviction + version: v1alpha1 x-accepts: - application/cbor - application/cbor-seq @@ -62542,8 +63563,8 @@ paths: - application/vnd.kubernetes.protobuf;stream=watch - application/yaml post: - description: create an Ingress - operationId: createNamespacedIngress + description: create an Eviction + operationId: createNamespacedEviction parameters: - description: "object name and auth scope, such as for teams and projects" in: path @@ -62594,64 +63615,64 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1.Ingress" + $ref: "#/components/schemas/v1alpha1.Eviction" required: true responses: "200": content: application/json: schema: - $ref: "#/components/schemas/v1.Ingress" + $ref: "#/components/schemas/v1alpha1.Eviction" application/yaml: schema: - $ref: "#/components/schemas/v1.Ingress" + $ref: "#/components/schemas/v1alpha1.Eviction" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1.Ingress" + $ref: "#/components/schemas/v1alpha1.Eviction" application/cbor: schema: - $ref: "#/components/schemas/v1.Ingress" + $ref: "#/components/schemas/v1alpha1.Eviction" description: OK "201": content: application/json: schema: - $ref: "#/components/schemas/v1.Ingress" + $ref: "#/components/schemas/v1alpha1.Eviction" application/yaml: schema: - $ref: "#/components/schemas/v1.Ingress" + $ref: "#/components/schemas/v1alpha1.Eviction" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1.Ingress" + $ref: "#/components/schemas/v1alpha1.Eviction" application/cbor: schema: - $ref: "#/components/schemas/v1.Ingress" + $ref: "#/components/schemas/v1alpha1.Eviction" description: Created "202": content: application/json: schema: - $ref: "#/components/schemas/v1.Ingress" + $ref: "#/components/schemas/v1alpha1.Eviction" application/yaml: schema: - $ref: "#/components/schemas/v1.Ingress" + $ref: "#/components/schemas/v1alpha1.Eviction" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1.Ingress" + $ref: "#/components/schemas/v1alpha1.Eviction" application/cbor: schema: - $ref: "#/components/schemas/v1.Ingress" + $ref: "#/components/schemas/v1alpha1.Eviction" description: Accepted "401": content: {} description: Unauthorized tags: - - networking_v1 + - lifecycle_v1alpha1 x-kubernetes-action: post x-kubernetes-group-version-kind: - group: networking.k8s.io - kind: Ingress - version: v1 + group: lifecycle.k8s.io + kind: Eviction + version: v1alpha1 x-codegen-request-body-name: body x-content-type: application/json x-accepts: @@ -62659,12 +63680,12 @@ paths: - application/json - application/vnd.kubernetes.protobuf - application/yaml - /apis/networking.k8s.io/v1/namespaces/{namespace}/ingresses/{name}: + /apis/lifecycle.k8s.io/v1alpha1/namespaces/{namespace}/evictions/{name}: delete: - description: delete an Ingress - operationId: deleteNamespacedIngress + description: delete an Eviction + operationId: deleteNamespacedEviction parameters: - - description: name of the Ingress + - description: name of the Eviction in: path name: name required: true @@ -62775,12 +63796,12 @@ paths: content: {} description: Unauthorized tags: - - networking_v1 + - lifecycle_v1alpha1 x-kubernetes-action: delete x-kubernetes-group-version-kind: - group: networking.k8s.io - kind: Ingress - version: v1 + group: lifecycle.k8s.io + kind: Eviction + version: v1alpha1 x-codegen-request-body-name: body x-content-type: application/json x-accepts: @@ -62789,10 +63810,10 @@ paths: - application/vnd.kubernetes.protobuf - application/yaml get: - description: read the specified Ingress - operationId: readNamespacedIngress + description: read the specified Eviction + operationId: readNamespacedEviction parameters: - - description: name of the Ingress + - description: name of the Eviction in: path name: name required: true @@ -62816,37 +63837,37 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1.Ingress" + $ref: "#/components/schemas/v1alpha1.Eviction" application/yaml: schema: - $ref: "#/components/schemas/v1.Ingress" + $ref: "#/components/schemas/v1alpha1.Eviction" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1.Ingress" + $ref: "#/components/schemas/v1alpha1.Eviction" application/cbor: schema: - $ref: "#/components/schemas/v1.Ingress" + $ref: "#/components/schemas/v1alpha1.Eviction" description: OK "401": content: {} description: Unauthorized tags: - - networking_v1 + - lifecycle_v1alpha1 x-kubernetes-action: get x-kubernetes-group-version-kind: - group: networking.k8s.io - kind: Ingress - version: v1 + group: lifecycle.k8s.io + kind: Eviction + version: v1alpha1 x-accepts: - application/cbor - application/json - application/vnd.kubernetes.protobuf - application/yaml patch: - description: partially update the specified Ingress - operationId: patchNamespacedIngress + description: partially update the specified Eviction + operationId: patchNamespacedEviction parameters: - - description: name of the Ingress + - description: name of the Eviction in: path name: name required: true @@ -62917,42 +63938,42 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1.Ingress" + $ref: "#/components/schemas/v1alpha1.Eviction" application/yaml: schema: - $ref: "#/components/schemas/v1.Ingress" + $ref: "#/components/schemas/v1alpha1.Eviction" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1.Ingress" + $ref: "#/components/schemas/v1alpha1.Eviction" application/cbor: schema: - $ref: "#/components/schemas/v1.Ingress" + $ref: "#/components/schemas/v1alpha1.Eviction" description: OK "201": content: application/json: schema: - $ref: "#/components/schemas/v1.Ingress" + $ref: "#/components/schemas/v1alpha1.Eviction" application/yaml: schema: - $ref: "#/components/schemas/v1.Ingress" + $ref: "#/components/schemas/v1alpha1.Eviction" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1.Ingress" + $ref: "#/components/schemas/v1alpha1.Eviction" application/cbor: schema: - $ref: "#/components/schemas/v1.Ingress" + $ref: "#/components/schemas/v1alpha1.Eviction" description: Created "401": content: {} description: Unauthorized tags: - - networking_v1 + - lifecycle_v1alpha1 x-kubernetes-action: patch x-kubernetes-group-version-kind: - group: networking.k8s.io - kind: Ingress - version: v1 + group: lifecycle.k8s.io + kind: Eviction + version: v1alpha1 x-codegen-request-body-name: body x-content-type: application/json x-accepts: @@ -62961,10 +63982,10 @@ paths: - application/vnd.kubernetes.protobuf - application/yaml put: - description: replace the specified Ingress - operationId: replaceNamespacedIngress + description: replace the specified Eviction + operationId: replaceNamespacedEviction parameters: - - description: name of the Ingress + - description: name of the Eviction in: path name: name required: true @@ -63019,49 +64040,49 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1.Ingress" + $ref: "#/components/schemas/v1alpha1.Eviction" required: true responses: "200": content: application/json: schema: - $ref: "#/components/schemas/v1.Ingress" + $ref: "#/components/schemas/v1alpha1.Eviction" application/yaml: schema: - $ref: "#/components/schemas/v1.Ingress" + $ref: "#/components/schemas/v1alpha1.Eviction" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1.Ingress" + $ref: "#/components/schemas/v1alpha1.Eviction" application/cbor: schema: - $ref: "#/components/schemas/v1.Ingress" + $ref: "#/components/schemas/v1alpha1.Eviction" description: OK "201": content: application/json: schema: - $ref: "#/components/schemas/v1.Ingress" + $ref: "#/components/schemas/v1alpha1.Eviction" application/yaml: schema: - $ref: "#/components/schemas/v1.Ingress" + $ref: "#/components/schemas/v1alpha1.Eviction" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1.Ingress" + $ref: "#/components/schemas/v1alpha1.Eviction" application/cbor: schema: - $ref: "#/components/schemas/v1.Ingress" + $ref: "#/components/schemas/v1alpha1.Eviction" description: Created "401": content: {} description: Unauthorized tags: - - networking_v1 + - lifecycle_v1alpha1 x-kubernetes-action: put x-kubernetes-group-version-kind: - group: networking.k8s.io - kind: Ingress - version: v1 + group: lifecycle.k8s.io + kind: Eviction + version: v1alpha1 x-codegen-request-body-name: body x-content-type: application/json x-accepts: @@ -63069,12 +64090,12 @@ paths: - application/json - application/vnd.kubernetes.protobuf - application/yaml - /apis/networking.k8s.io/v1/namespaces/{namespace}/ingresses/{name}/status: + /apis/lifecycle.k8s.io/v1alpha1/namespaces/{namespace}/evictions/{name}/status: get: - description: read status of the specified Ingress - operationId: readNamespacedIngressStatus + description: read status of the specified Eviction + operationId: readNamespacedEvictionStatus parameters: - - description: name of the Ingress + - description: name of the Eviction in: path name: name required: true @@ -63098,37 +64119,37 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1.Ingress" + $ref: "#/components/schemas/v1alpha1.Eviction" application/yaml: schema: - $ref: "#/components/schemas/v1.Ingress" + $ref: "#/components/schemas/v1alpha1.Eviction" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1.Ingress" + $ref: "#/components/schemas/v1alpha1.Eviction" application/cbor: schema: - $ref: "#/components/schemas/v1.Ingress" + $ref: "#/components/schemas/v1alpha1.Eviction" description: OK "401": content: {} description: Unauthorized tags: - - networking_v1 + - lifecycle_v1alpha1 x-kubernetes-action: get x-kubernetes-group-version-kind: - group: networking.k8s.io - kind: Ingress - version: v1 + group: lifecycle.k8s.io + kind: Eviction + version: v1alpha1 x-accepts: - application/cbor - application/json - application/vnd.kubernetes.protobuf - application/yaml patch: - description: partially update status of the specified Ingress - operationId: patchNamespacedIngressStatus + description: partially update status of the specified Eviction + operationId: patchNamespacedEvictionStatus parameters: - - description: name of the Ingress + - description: name of the Eviction in: path name: name required: true @@ -63199,42 +64220,42 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1.Ingress" + $ref: "#/components/schemas/v1alpha1.Eviction" application/yaml: schema: - $ref: "#/components/schemas/v1.Ingress" + $ref: "#/components/schemas/v1alpha1.Eviction" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1.Ingress" + $ref: "#/components/schemas/v1alpha1.Eviction" application/cbor: schema: - $ref: "#/components/schemas/v1.Ingress" + $ref: "#/components/schemas/v1alpha1.Eviction" description: OK "201": content: application/json: schema: - $ref: "#/components/schemas/v1.Ingress" + $ref: "#/components/schemas/v1alpha1.Eviction" application/yaml: schema: - $ref: "#/components/schemas/v1.Ingress" + $ref: "#/components/schemas/v1alpha1.Eviction" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1.Ingress" + $ref: "#/components/schemas/v1alpha1.Eviction" application/cbor: schema: - $ref: "#/components/schemas/v1.Ingress" + $ref: "#/components/schemas/v1alpha1.Eviction" description: Created "401": content: {} description: Unauthorized tags: - - networking_v1 + - lifecycle_v1alpha1 x-kubernetes-action: patch x-kubernetes-group-version-kind: - group: networking.k8s.io - kind: Ingress - version: v1 + group: lifecycle.k8s.io + kind: Eviction + version: v1alpha1 x-codegen-request-body-name: body x-content-type: application/json x-accepts: @@ -63243,10 +64264,10 @@ paths: - application/vnd.kubernetes.protobuf - application/yaml put: - description: replace status of the specified Ingress - operationId: replaceNamespacedIngressStatus + description: replace status of the specified Eviction + operationId: replaceNamespacedEvictionStatus parameters: - - description: name of the Ingress + - description: name of the Eviction in: path name: name required: true @@ -63301,49 +64322,49 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1.Ingress" + $ref: "#/components/schemas/v1alpha1.Eviction" required: true responses: "200": content: application/json: schema: - $ref: "#/components/schemas/v1.Ingress" + $ref: "#/components/schemas/v1alpha1.Eviction" application/yaml: schema: - $ref: "#/components/schemas/v1.Ingress" + $ref: "#/components/schemas/v1alpha1.Eviction" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1.Ingress" + $ref: "#/components/schemas/v1alpha1.Eviction" application/cbor: schema: - $ref: "#/components/schemas/v1.Ingress" + $ref: "#/components/schemas/v1alpha1.Eviction" description: OK "201": content: application/json: schema: - $ref: "#/components/schemas/v1.Ingress" + $ref: "#/components/schemas/v1alpha1.Eviction" application/yaml: schema: - $ref: "#/components/schemas/v1.Ingress" + $ref: "#/components/schemas/v1alpha1.Eviction" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1.Ingress" + $ref: "#/components/schemas/v1alpha1.Eviction" application/cbor: schema: - $ref: "#/components/schemas/v1.Ingress" + $ref: "#/components/schemas/v1alpha1.Eviction" description: Created "401": content: {} description: Unauthorized tags: - - networking_v1 + - lifecycle_v1alpha1 x-kubernetes-action: put x-kubernetes-group-version-kind: - group: networking.k8s.io - kind: Ingress - version: v1 + group: lifecycle.k8s.io + kind: Eviction + version: v1alpha1 x-codegen-request-body-name: body x-content-type: application/json x-accepts: @@ -63351,17 +64372,77 @@ paths: - application/json - application/vnd.kubernetes.protobuf - application/yaml - /apis/networking.k8s.io/v1/namespaces/{namespace}/networkpolicies: + /apis/lifecycle.k8s.io/v1alpha1/watch/evictionrequests: {} + /apis/lifecycle.k8s.io/v1alpha1/watch/evictions: {} + /apis/lifecycle.k8s.io/v1alpha1/watch/namespaces/{namespace}/evictionrequests: {} + /apis/lifecycle.k8s.io/v1alpha1/watch/namespaces/{namespace}/evictionrequests/{name}: {} + /apis/lifecycle.k8s.io/v1alpha1/watch/namespaces/{namespace}/evictions: {} + /apis/lifecycle.k8s.io/v1alpha1/watch/namespaces/{namespace}/evictions/{name}: {} + /apis/networking.k8s.io/: + get: + description: get information of a group + operationId: getAPIGroup + responses: + "200": + content: + application/json: + schema: + $ref: "#/components/schemas/v1.APIGroup" + application/yaml: + schema: + $ref: "#/components/schemas/v1.APIGroup" + application/vnd.kubernetes.protobuf: + schema: + $ref: "#/components/schemas/v1.APIGroup" + application/cbor: + schema: + $ref: "#/components/schemas/v1.APIGroup" + description: OK + "401": + content: {} + description: Unauthorized + tags: + - networking + x-accepts: + - application/cbor + - application/json + - application/vnd.kubernetes.protobuf + - application/yaml + /apis/networking.k8s.io/v1/: + get: + description: get available resources + operationId: getAPIResources + responses: + "200": + content: + application/json: + schema: + $ref: "#/components/schemas/v1.APIResourceList" + application/yaml: + schema: + $ref: "#/components/schemas/v1.APIResourceList" + application/vnd.kubernetes.protobuf: + schema: + $ref: "#/components/schemas/v1.APIResourceList" + application/cbor: + schema: + $ref: "#/components/schemas/v1.APIResourceList" + description: OK + "401": + content: {} + description: Unauthorized + tags: + - networking_v1 + x-accepts: + - application/cbor + - application/json + - application/vnd.kubernetes.protobuf + - application/yaml + /apis/networking.k8s.io/v1/ingressclasses: delete: - description: delete collection of NetworkPolicy - operationId: deleteCollectionNamespacedNetworkPolicy + description: delete collection of IngressClass + operationId: deleteCollectionIngressClass parameters: - - description: "object name and auth scope, such as for teams and projects" - in: path - name: namespace - required: true - schema: - type: string - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ \ and wget)." @@ -63545,7 +64626,7 @@ paths: x-kubernetes-action: deletecollection x-kubernetes-group-version-kind: group: networking.k8s.io - kind: NetworkPolicy + kind: IngressClass version: v1 x-codegen-request-body-name: body x-content-type: application/json @@ -63555,15 +64636,9 @@ paths: - application/vnd.kubernetes.protobuf - application/yaml get: - description: list or watch objects of kind NetworkPolicy - operationId: listNamespacedNetworkPolicy + description: list or watch objects of kind IngressClass + operationId: listIngressClass parameters: - - description: "object name and auth scope, such as for teams and projects" - in: path - name: namespace - required: true - schema: - type: string - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ \ and wget)." @@ -63687,25 +64762,25 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1.NetworkPolicyList" + $ref: "#/components/schemas/v1.IngressClassList" application/yaml: schema: - $ref: "#/components/schemas/v1.NetworkPolicyList" + $ref: "#/components/schemas/v1.IngressClassList" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1.NetworkPolicyList" + $ref: "#/components/schemas/v1.IngressClassList" application/cbor: schema: - $ref: "#/components/schemas/v1.NetworkPolicyList" + $ref: "#/components/schemas/v1.IngressClassList" application/json;stream=watch: schema: - $ref: "#/components/schemas/v1.NetworkPolicyList" + $ref: "#/components/schemas/v1.IngressClassList" application/vnd.kubernetes.protobuf;stream=watch: schema: - $ref: "#/components/schemas/v1.NetworkPolicyList" + $ref: "#/components/schemas/v1.IngressClassList" application/cbor-seq: schema: - $ref: "#/components/schemas/v1.NetworkPolicyList" + $ref: "#/components/schemas/v1.IngressClassList" description: OK "401": content: {} @@ -63715,7 +64790,7 @@ paths: x-kubernetes-action: list x-kubernetes-group-version-kind: group: networking.k8s.io - kind: NetworkPolicy + kind: IngressClass version: v1 x-accepts: - application/cbor @@ -63726,15 +64801,9 @@ paths: - application/vnd.kubernetes.protobuf;stream=watch - application/yaml post: - description: create a NetworkPolicy - operationId: createNamespacedNetworkPolicy + description: create an IngressClass + operationId: createIngressClass parameters: - - description: "object name and auth scope, such as for teams and projects" - in: path - name: namespace - required: true - schema: - type: string - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ \ and wget)." @@ -63778,53 +64847,53 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1.NetworkPolicy" + $ref: "#/components/schemas/v1.IngressClass" required: true responses: "200": content: application/json: schema: - $ref: "#/components/schemas/v1.NetworkPolicy" + $ref: "#/components/schemas/v1.IngressClass" application/yaml: schema: - $ref: "#/components/schemas/v1.NetworkPolicy" + $ref: "#/components/schemas/v1.IngressClass" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1.NetworkPolicy" + $ref: "#/components/schemas/v1.IngressClass" application/cbor: schema: - $ref: "#/components/schemas/v1.NetworkPolicy" + $ref: "#/components/schemas/v1.IngressClass" description: OK "201": content: application/json: schema: - $ref: "#/components/schemas/v1.NetworkPolicy" + $ref: "#/components/schemas/v1.IngressClass" application/yaml: schema: - $ref: "#/components/schemas/v1.NetworkPolicy" + $ref: "#/components/schemas/v1.IngressClass" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1.NetworkPolicy" + $ref: "#/components/schemas/v1.IngressClass" application/cbor: schema: - $ref: "#/components/schemas/v1.NetworkPolicy" + $ref: "#/components/schemas/v1.IngressClass" description: Created "202": content: application/json: schema: - $ref: "#/components/schemas/v1.NetworkPolicy" + $ref: "#/components/schemas/v1.IngressClass" application/yaml: schema: - $ref: "#/components/schemas/v1.NetworkPolicy" + $ref: "#/components/schemas/v1.IngressClass" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1.NetworkPolicy" + $ref: "#/components/schemas/v1.IngressClass" application/cbor: schema: - $ref: "#/components/schemas/v1.NetworkPolicy" + $ref: "#/components/schemas/v1.IngressClass" description: Accepted "401": content: {} @@ -63834,7 +64903,7 @@ paths: x-kubernetes-action: post x-kubernetes-group-version-kind: group: networking.k8s.io - kind: NetworkPolicy + kind: IngressClass version: v1 x-codegen-request-body-name: body x-content-type: application/json @@ -63843,23 +64912,17 @@ paths: - application/json - application/vnd.kubernetes.protobuf - application/yaml - /apis/networking.k8s.io/v1/namespaces/{namespace}/networkpolicies/{name}: + /apis/networking.k8s.io/v1/ingressclasses/{name}: delete: - description: delete a NetworkPolicy - operationId: deleteNamespacedNetworkPolicy + description: delete an IngressClass + operationId: deleteIngressClass parameters: - - description: name of the NetworkPolicy + - description: name of the IngressClass in: path name: name required: true schema: type: string - - description: "object name and auth scope, such as for teams and projects" - in: path - name: namespace - required: true - schema: - type: string - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ \ and wget)." @@ -63963,7 +65026,7 @@ paths: x-kubernetes-action: delete x-kubernetes-group-version-kind: group: networking.k8s.io - kind: NetworkPolicy + kind: IngressClass version: v1 x-codegen-request-body-name: body x-content-type: application/json @@ -63973,21 +65036,15 @@ paths: - application/vnd.kubernetes.protobuf - application/yaml get: - description: read the specified NetworkPolicy - operationId: readNamespacedNetworkPolicy + description: read the specified IngressClass + operationId: readIngressClass parameters: - - description: name of the NetworkPolicy + - description: name of the IngressClass in: path name: name required: true schema: type: string - - description: "object name and auth scope, such as for teams and projects" - in: path - name: namespace - required: true - schema: - type: string - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ \ and wget)." @@ -64000,16 +65057,16 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1.NetworkPolicy" + $ref: "#/components/schemas/v1.IngressClass" application/yaml: schema: - $ref: "#/components/schemas/v1.NetworkPolicy" + $ref: "#/components/schemas/v1.IngressClass" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1.NetworkPolicy" + $ref: "#/components/schemas/v1.IngressClass" application/cbor: schema: - $ref: "#/components/schemas/v1.NetworkPolicy" + $ref: "#/components/schemas/v1.IngressClass" description: OK "401": content: {} @@ -64019,7 +65076,7 @@ paths: x-kubernetes-action: get x-kubernetes-group-version-kind: group: networking.k8s.io - kind: NetworkPolicy + kind: IngressClass version: v1 x-accepts: - application/cbor @@ -64027,21 +65084,15 @@ paths: - application/vnd.kubernetes.protobuf - application/yaml patch: - description: partially update the specified NetworkPolicy - operationId: patchNamespacedNetworkPolicy + description: partially update the specified IngressClass + operationId: patchIngressClass parameters: - - description: name of the NetworkPolicy + - description: name of the IngressClass in: path name: name required: true schema: type: string - - description: "object name and auth scope, such as for teams and projects" - in: path - name: namespace - required: true - schema: - type: string - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ \ and wget)." @@ -64101,31 +65152,31 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1.NetworkPolicy" + $ref: "#/components/schemas/v1.IngressClass" application/yaml: schema: - $ref: "#/components/schemas/v1.NetworkPolicy" + $ref: "#/components/schemas/v1.IngressClass" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1.NetworkPolicy" + $ref: "#/components/schemas/v1.IngressClass" application/cbor: schema: - $ref: "#/components/schemas/v1.NetworkPolicy" + $ref: "#/components/schemas/v1.IngressClass" description: OK "201": content: application/json: schema: - $ref: "#/components/schemas/v1.NetworkPolicy" + $ref: "#/components/schemas/v1.IngressClass" application/yaml: schema: - $ref: "#/components/schemas/v1.NetworkPolicy" + $ref: "#/components/schemas/v1.IngressClass" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1.NetworkPolicy" + $ref: "#/components/schemas/v1.IngressClass" application/cbor: schema: - $ref: "#/components/schemas/v1.NetworkPolicy" + $ref: "#/components/schemas/v1.IngressClass" description: Created "401": content: {} @@ -64135,7 +65186,7 @@ paths: x-kubernetes-action: patch x-kubernetes-group-version-kind: group: networking.k8s.io - kind: NetworkPolicy + kind: IngressClass version: v1 x-codegen-request-body-name: body x-content-type: application/json @@ -64145,21 +65196,15 @@ paths: - application/vnd.kubernetes.protobuf - application/yaml put: - description: replace the specified NetworkPolicy - operationId: replaceNamespacedNetworkPolicy + description: replace the specified IngressClass + operationId: replaceIngressClass parameters: - - description: name of the NetworkPolicy + - description: name of the IngressClass in: path name: name required: true schema: type: string - - description: "object name and auth scope, such as for teams and projects" - in: path - name: namespace - required: true - schema: - type: string - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ \ and wget)." @@ -64203,38 +65248,38 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1.NetworkPolicy" + $ref: "#/components/schemas/v1.IngressClass" required: true responses: "200": content: application/json: schema: - $ref: "#/components/schemas/v1.NetworkPolicy" + $ref: "#/components/schemas/v1.IngressClass" application/yaml: schema: - $ref: "#/components/schemas/v1.NetworkPolicy" + $ref: "#/components/schemas/v1.IngressClass" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1.NetworkPolicy" + $ref: "#/components/schemas/v1.IngressClass" application/cbor: schema: - $ref: "#/components/schemas/v1.NetworkPolicy" + $ref: "#/components/schemas/v1.IngressClass" description: OK "201": content: application/json: schema: - $ref: "#/components/schemas/v1.NetworkPolicy" + $ref: "#/components/schemas/v1.IngressClass" application/yaml: schema: - $ref: "#/components/schemas/v1.NetworkPolicy" + $ref: "#/components/schemas/v1.IngressClass" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1.NetworkPolicy" + $ref: "#/components/schemas/v1.IngressClass" application/cbor: schema: - $ref: "#/components/schemas/v1.NetworkPolicy" + $ref: "#/components/schemas/v1.IngressClass" description: Created "401": content: {} @@ -64244,7 +65289,7 @@ paths: x-kubernetes-action: put x-kubernetes-group-version-kind: group: networking.k8s.io - kind: NetworkPolicy + kind: IngressClass version: v1 x-codegen-request-body-name: body x-content-type: application/json @@ -64253,10 +65298,10 @@ paths: - application/json - application/vnd.kubernetes.protobuf - application/yaml - /apis/networking.k8s.io/v1/networkpolicies: + /apis/networking.k8s.io/v1/ingresses: get: - description: list or watch objects of kind NetworkPolicy - operationId: listNetworkPolicyForAllNamespaces + description: list or watch objects of kind Ingress + operationId: listIngressForAllNamespaces parameters: - description: "allowWatchBookmarks requests watch events with type \"BOOKMARK\"\ . Servers that do not implement bookmarks may ignore this flag and bookmarks\ @@ -64381,25 +65426,25 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1.NetworkPolicyList" + $ref: "#/components/schemas/v1.IngressList" application/yaml: schema: - $ref: "#/components/schemas/v1.NetworkPolicyList" + $ref: "#/components/schemas/v1.IngressList" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1.NetworkPolicyList" + $ref: "#/components/schemas/v1.IngressList" application/cbor: schema: - $ref: "#/components/schemas/v1.NetworkPolicyList" + $ref: "#/components/schemas/v1.IngressList" application/json;stream=watch: schema: - $ref: "#/components/schemas/v1.NetworkPolicyList" + $ref: "#/components/schemas/v1.IngressList" application/vnd.kubernetes.protobuf;stream=watch: schema: - $ref: "#/components/schemas/v1.NetworkPolicyList" + $ref: "#/components/schemas/v1.IngressList" application/cbor-seq: schema: - $ref: "#/components/schemas/v1.NetworkPolicyList" + $ref: "#/components/schemas/v1.IngressList" description: OK "401": content: {} @@ -64409,7 +65454,7 @@ paths: x-kubernetes-action: list x-kubernetes-group-version-kind: group: networking.k8s.io - kind: NetworkPolicy + kind: Ingress version: v1 x-accepts: - application/cbor @@ -64419,10 +65464,10 @@ paths: - application/vnd.kubernetes.protobuf - application/vnd.kubernetes.protobuf;stream=watch - application/yaml - /apis/networking.k8s.io/v1/servicecidrs: + /apis/networking.k8s.io/v1/ipaddresses: delete: - description: delete collection of ServiceCIDR - operationId: deleteCollectionServiceCIDR + description: delete collection of IPAddress + operationId: deleteCollectionIPAddress parameters: - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ @@ -64607,7 +65652,7 @@ paths: x-kubernetes-action: deletecollection x-kubernetes-group-version-kind: group: networking.k8s.io - kind: ServiceCIDR + kind: IPAddress version: v1 x-codegen-request-body-name: body x-content-type: application/json @@ -64617,8 +65662,8 @@ paths: - application/vnd.kubernetes.protobuf - application/yaml get: - description: list or watch objects of kind ServiceCIDR - operationId: listServiceCIDR + description: list or watch objects of kind IPAddress + operationId: listIPAddress parameters: - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ @@ -64743,25 +65788,25 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1.ServiceCIDRList" + $ref: "#/components/schemas/v1.IPAddressList" application/yaml: schema: - $ref: "#/components/schemas/v1.ServiceCIDRList" + $ref: "#/components/schemas/v1.IPAddressList" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1.ServiceCIDRList" + $ref: "#/components/schemas/v1.IPAddressList" application/cbor: schema: - $ref: "#/components/schemas/v1.ServiceCIDRList" + $ref: "#/components/schemas/v1.IPAddressList" application/json;stream=watch: schema: - $ref: "#/components/schemas/v1.ServiceCIDRList" + $ref: "#/components/schemas/v1.IPAddressList" application/vnd.kubernetes.protobuf;stream=watch: schema: - $ref: "#/components/schemas/v1.ServiceCIDRList" + $ref: "#/components/schemas/v1.IPAddressList" application/cbor-seq: schema: - $ref: "#/components/schemas/v1.ServiceCIDRList" + $ref: "#/components/schemas/v1.IPAddressList" description: OK "401": content: {} @@ -64771,7 +65816,7 @@ paths: x-kubernetes-action: list x-kubernetes-group-version-kind: group: networking.k8s.io - kind: ServiceCIDR + kind: IPAddress version: v1 x-accepts: - application/cbor @@ -64782,8 +65827,8 @@ paths: - application/vnd.kubernetes.protobuf;stream=watch - application/yaml post: - description: create a ServiceCIDR - operationId: createServiceCIDR + description: create an IPAddress + operationId: createIPAddress parameters: - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ @@ -64828,53 +65873,53 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1.ServiceCIDR" + $ref: "#/components/schemas/v1.IPAddress" required: true responses: "200": content: application/json: schema: - $ref: "#/components/schemas/v1.ServiceCIDR" + $ref: "#/components/schemas/v1.IPAddress" application/yaml: schema: - $ref: "#/components/schemas/v1.ServiceCIDR" + $ref: "#/components/schemas/v1.IPAddress" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1.ServiceCIDR" + $ref: "#/components/schemas/v1.IPAddress" application/cbor: schema: - $ref: "#/components/schemas/v1.ServiceCIDR" + $ref: "#/components/schemas/v1.IPAddress" description: OK "201": content: application/json: schema: - $ref: "#/components/schemas/v1.ServiceCIDR" + $ref: "#/components/schemas/v1.IPAddress" application/yaml: schema: - $ref: "#/components/schemas/v1.ServiceCIDR" + $ref: "#/components/schemas/v1.IPAddress" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1.ServiceCIDR" + $ref: "#/components/schemas/v1.IPAddress" application/cbor: schema: - $ref: "#/components/schemas/v1.ServiceCIDR" + $ref: "#/components/schemas/v1.IPAddress" description: Created "202": content: application/json: schema: - $ref: "#/components/schemas/v1.ServiceCIDR" + $ref: "#/components/schemas/v1.IPAddress" application/yaml: schema: - $ref: "#/components/schemas/v1.ServiceCIDR" + $ref: "#/components/schemas/v1.IPAddress" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1.ServiceCIDR" + $ref: "#/components/schemas/v1.IPAddress" application/cbor: schema: - $ref: "#/components/schemas/v1.ServiceCIDR" + $ref: "#/components/schemas/v1.IPAddress" description: Accepted "401": content: {} @@ -64884,7 +65929,7 @@ paths: x-kubernetes-action: post x-kubernetes-group-version-kind: group: networking.k8s.io - kind: ServiceCIDR + kind: IPAddress version: v1 x-codegen-request-body-name: body x-content-type: application/json @@ -64893,12 +65938,12 @@ paths: - application/json - application/vnd.kubernetes.protobuf - application/yaml - /apis/networking.k8s.io/v1/servicecidrs/{name}: + /apis/networking.k8s.io/v1/ipaddresses/{name}: delete: - description: delete a ServiceCIDR - operationId: deleteServiceCIDR + description: delete an IPAddress + operationId: deleteIPAddress parameters: - - description: name of the ServiceCIDR + - description: name of the IPAddress in: path name: name required: true @@ -65007,7 +66052,7 @@ paths: x-kubernetes-action: delete x-kubernetes-group-version-kind: group: networking.k8s.io - kind: ServiceCIDR + kind: IPAddress version: v1 x-codegen-request-body-name: body x-content-type: application/json @@ -65017,10 +66062,10 @@ paths: - application/vnd.kubernetes.protobuf - application/yaml get: - description: read the specified ServiceCIDR - operationId: readServiceCIDR + description: read the specified IPAddress + operationId: readIPAddress parameters: - - description: name of the ServiceCIDR + - description: name of the IPAddress in: path name: name required: true @@ -65038,16 +66083,16 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1.ServiceCIDR" + $ref: "#/components/schemas/v1.IPAddress" application/yaml: schema: - $ref: "#/components/schemas/v1.ServiceCIDR" + $ref: "#/components/schemas/v1.IPAddress" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1.ServiceCIDR" + $ref: "#/components/schemas/v1.IPAddress" application/cbor: schema: - $ref: "#/components/schemas/v1.ServiceCIDR" + $ref: "#/components/schemas/v1.IPAddress" description: OK "401": content: {} @@ -65057,7 +66102,7 @@ paths: x-kubernetes-action: get x-kubernetes-group-version-kind: group: networking.k8s.io - kind: ServiceCIDR + kind: IPAddress version: v1 x-accepts: - application/cbor @@ -65065,10 +66110,10 @@ paths: - application/vnd.kubernetes.protobuf - application/yaml patch: - description: partially update the specified ServiceCIDR - operationId: patchServiceCIDR + description: partially update the specified IPAddress + operationId: patchIPAddress parameters: - - description: name of the ServiceCIDR + - description: name of the IPAddress in: path name: name required: true @@ -65133,31 +66178,31 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1.ServiceCIDR" + $ref: "#/components/schemas/v1.IPAddress" application/yaml: schema: - $ref: "#/components/schemas/v1.ServiceCIDR" + $ref: "#/components/schemas/v1.IPAddress" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1.ServiceCIDR" + $ref: "#/components/schemas/v1.IPAddress" application/cbor: schema: - $ref: "#/components/schemas/v1.ServiceCIDR" + $ref: "#/components/schemas/v1.IPAddress" description: OK "201": content: application/json: schema: - $ref: "#/components/schemas/v1.ServiceCIDR" + $ref: "#/components/schemas/v1.IPAddress" application/yaml: schema: - $ref: "#/components/schemas/v1.ServiceCIDR" + $ref: "#/components/schemas/v1.IPAddress" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1.ServiceCIDR" + $ref: "#/components/schemas/v1.IPAddress" application/cbor: schema: - $ref: "#/components/schemas/v1.ServiceCIDR" + $ref: "#/components/schemas/v1.IPAddress" description: Created "401": content: {} @@ -65167,7 +66212,7 @@ paths: x-kubernetes-action: patch x-kubernetes-group-version-kind: group: networking.k8s.io - kind: ServiceCIDR + kind: IPAddress version: v1 x-codegen-request-body-name: body x-content-type: application/json @@ -65177,10 +66222,10 @@ paths: - application/vnd.kubernetes.protobuf - application/yaml put: - description: replace the specified ServiceCIDR - operationId: replaceServiceCIDR + description: replace the specified IPAddress + operationId: replaceIPAddress parameters: - - description: name of the ServiceCIDR + - description: name of the IPAddress in: path name: name required: true @@ -65229,38 +66274,38 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1.ServiceCIDR" + $ref: "#/components/schemas/v1.IPAddress" required: true responses: "200": content: application/json: schema: - $ref: "#/components/schemas/v1.ServiceCIDR" + $ref: "#/components/schemas/v1.IPAddress" application/yaml: schema: - $ref: "#/components/schemas/v1.ServiceCIDR" + $ref: "#/components/schemas/v1.IPAddress" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1.ServiceCIDR" + $ref: "#/components/schemas/v1.IPAddress" application/cbor: schema: - $ref: "#/components/schemas/v1.ServiceCIDR" + $ref: "#/components/schemas/v1.IPAddress" description: OK "201": content: application/json: schema: - $ref: "#/components/schemas/v1.ServiceCIDR" + $ref: "#/components/schemas/v1.IPAddress" application/yaml: schema: - $ref: "#/components/schemas/v1.ServiceCIDR" + $ref: "#/components/schemas/v1.IPAddress" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1.ServiceCIDR" + $ref: "#/components/schemas/v1.IPAddress" application/cbor: schema: - $ref: "#/components/schemas/v1.ServiceCIDR" + $ref: "#/components/schemas/v1.IPAddress" description: Created "401": content: {} @@ -65270,168 +66315,7 @@ paths: x-kubernetes-action: put x-kubernetes-group-version-kind: group: networking.k8s.io - kind: ServiceCIDR - version: v1 - x-codegen-request-body-name: body - x-content-type: application/json - x-accepts: - - application/cbor - - application/json - - application/vnd.kubernetes.protobuf - - application/yaml - /apis/networking.k8s.io/v1/servicecidrs/{name}/status: - get: - description: read status of the specified ServiceCIDR - operationId: readServiceCIDRStatus - parameters: - - description: name of the ServiceCIDR - in: path - name: name - required: true - schema: - type: string - - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ - \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ - \ and wget)." - in: query - name: pretty - schema: - type: string - responses: - "200": - content: - application/json: - schema: - $ref: "#/components/schemas/v1.ServiceCIDR" - application/yaml: - schema: - $ref: "#/components/schemas/v1.ServiceCIDR" - application/vnd.kubernetes.protobuf: - schema: - $ref: "#/components/schemas/v1.ServiceCIDR" - application/cbor: - schema: - $ref: "#/components/schemas/v1.ServiceCIDR" - description: OK - "401": - content: {} - description: Unauthorized - tags: - - networking_v1 - x-kubernetes-action: get - x-kubernetes-group-version-kind: - group: networking.k8s.io - kind: ServiceCIDR - version: v1 - x-accepts: - - application/cbor - - application/json - - application/vnd.kubernetes.protobuf - - application/yaml - patch: - description: partially update status of the specified ServiceCIDR - operationId: patchServiceCIDRStatus - parameters: - - description: name of the ServiceCIDR - in: path - name: name - required: true - schema: - type: string - - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ - \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ - \ and wget)." - in: query - name: pretty - schema: - type: string - - description: "When present, indicates that modifications should not be persisted.\ - \ An invalid or unrecognized dryRun directive will result in an error response\ - \ and no further processing of the request. Valid values are: - All: all\ - \ dry run stages will be processed" - in: query - name: dryRun - schema: - type: string - - description: "fieldManager is a name associated with the actor or entity that\ - \ is making these changes. The value must be less than or 128 characters\ - \ long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.\ - \ This field is required for apply requests (application/apply-patch) but\ - \ optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch)." - in: query - name: fieldManager - schema: - type: string - - description: "fieldValidation instructs the server on how to handle objects\ - \ in the request (POST/PUT/PATCH) containing unknown or duplicate fields.\ - \ Valid values are: - Ignore: This will ignore any unknown fields that are\ - \ silently dropped from the object, and will ignore all but the last duplicate\ - \ field that the decoder encounters. This is the default behavior prior\ - \ to v1.23. - Warn: This will send a warning via the standard warning response\ - \ header for each unknown field that is dropped from the object, and for\ - \ each duplicate field that is encountered. The request will still succeed\ - \ if there are no other errors, and will only persist the last of any duplicate\ - \ fields. This is the default in v1.23+ - Strict: This will fail the request\ - \ with a BadRequest error if any unknown fields would be dropped from the\ - \ object, or if any duplicate fields are present. The error returned from\ - \ the server will contain all unknown and duplicate fields encountered." - in: query - name: fieldValidation - schema: - type: string - - description: Force is going to "force" Apply requests. It means user will - re-acquire conflicting fields owned by other people. Force flag must be - unset for non-apply patch requests. - in: query - name: force - schema: - type: boolean - requestBody: - content: - application/json: - schema: - $ref: "#/components/schemas/v1.Patch" - required: true - responses: - "200": - content: - application/json: - schema: - $ref: "#/components/schemas/v1.ServiceCIDR" - application/yaml: - schema: - $ref: "#/components/schemas/v1.ServiceCIDR" - application/vnd.kubernetes.protobuf: - schema: - $ref: "#/components/schemas/v1.ServiceCIDR" - application/cbor: - schema: - $ref: "#/components/schemas/v1.ServiceCIDR" - description: OK - "201": - content: - application/json: - schema: - $ref: "#/components/schemas/v1.ServiceCIDR" - application/yaml: - schema: - $ref: "#/components/schemas/v1.ServiceCIDR" - application/vnd.kubernetes.protobuf: - schema: - $ref: "#/components/schemas/v1.ServiceCIDR" - application/cbor: - schema: - $ref: "#/components/schemas/v1.ServiceCIDR" - description: Created - "401": - content: {} - description: Unauthorized - tags: - - networking_v1 - x-kubernetes-action: patch - x-kubernetes-group-version-kind: - group: networking.k8s.io - kind: ServiceCIDR + kind: IPAddress version: v1 x-codegen-request-body-name: body x-content-type: application/json @@ -65440,156 +66324,17 @@ paths: - application/json - application/vnd.kubernetes.protobuf - application/yaml - put: - description: replace status of the specified ServiceCIDR - operationId: replaceServiceCIDRStatus + /apis/networking.k8s.io/v1/namespaces/{namespace}/ingresses: + delete: + description: delete collection of Ingress + operationId: deleteCollectionNamespacedIngress parameters: - - description: name of the ServiceCIDR + - description: "object name and auth scope, such as for teams and projects" in: path - name: name + name: namespace required: true schema: type: string - - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ - \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ - \ and wget)." - in: query - name: pretty - schema: - type: string - - description: "When present, indicates that modifications should not be persisted.\ - \ An invalid or unrecognized dryRun directive will result in an error response\ - \ and no further processing of the request. Valid values are: - All: all\ - \ dry run stages will be processed" - in: query - name: dryRun - schema: - type: string - - description: "fieldManager is a name associated with the actor or entity that\ - \ is making these changes. The value must be less than or 128 characters\ - \ long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." - in: query - name: fieldManager - schema: - type: string - - description: "fieldValidation instructs the server on how to handle objects\ - \ in the request (POST/PUT/PATCH) containing unknown or duplicate fields.\ - \ Valid values are: - Ignore: This will ignore any unknown fields that are\ - \ silently dropped from the object, and will ignore all but the last duplicate\ - \ field that the decoder encounters. This is the default behavior prior\ - \ to v1.23. - Warn: This will send a warning via the standard warning response\ - \ header for each unknown field that is dropped from the object, and for\ - \ each duplicate field that is encountered. The request will still succeed\ - \ if there are no other errors, and will only persist the last of any duplicate\ - \ fields. This is the default in v1.23+ - Strict: This will fail the request\ - \ with a BadRequest error if any unknown fields would be dropped from the\ - \ object, or if any duplicate fields are present. The error returned from\ - \ the server will contain all unknown and duplicate fields encountered." - in: query - name: fieldValidation - schema: - type: string - requestBody: - content: - application/json: - schema: - $ref: "#/components/schemas/v1.ServiceCIDR" - required: true - responses: - "200": - content: - application/json: - schema: - $ref: "#/components/schemas/v1.ServiceCIDR" - application/yaml: - schema: - $ref: "#/components/schemas/v1.ServiceCIDR" - application/vnd.kubernetes.protobuf: - schema: - $ref: "#/components/schemas/v1.ServiceCIDR" - application/cbor: - schema: - $ref: "#/components/schemas/v1.ServiceCIDR" - description: OK - "201": - content: - application/json: - schema: - $ref: "#/components/schemas/v1.ServiceCIDR" - application/yaml: - schema: - $ref: "#/components/schemas/v1.ServiceCIDR" - application/vnd.kubernetes.protobuf: - schema: - $ref: "#/components/schemas/v1.ServiceCIDR" - application/cbor: - schema: - $ref: "#/components/schemas/v1.ServiceCIDR" - description: Created - "401": - content: {} - description: Unauthorized - tags: - - networking_v1 - x-kubernetes-action: put - x-kubernetes-group-version-kind: - group: networking.k8s.io - kind: ServiceCIDR - version: v1 - x-codegen-request-body-name: body - x-content-type: application/json - x-accepts: - - application/cbor - - application/json - - application/vnd.kubernetes.protobuf - - application/yaml - /apis/networking.k8s.io/v1/watch/ingressclasses: {} - /apis/networking.k8s.io/v1/watch/ingressclasses/{name}: {} - /apis/networking.k8s.io/v1/watch/ingresses: {} - /apis/networking.k8s.io/v1/watch/ipaddresses: {} - /apis/networking.k8s.io/v1/watch/ipaddresses/{name}: {} - /apis/networking.k8s.io/v1/watch/namespaces/{namespace}/ingresses: {} - /apis/networking.k8s.io/v1/watch/namespaces/{namespace}/ingresses/{name}: {} - /apis/networking.k8s.io/v1/watch/namespaces/{namespace}/networkpolicies: {} - /apis/networking.k8s.io/v1/watch/namespaces/{namespace}/networkpolicies/{name}: {} - /apis/networking.k8s.io/v1/watch/networkpolicies: {} - /apis/networking.k8s.io/v1/watch/servicecidrs: {} - /apis/networking.k8s.io/v1/watch/servicecidrs/{name}: {} - /apis/networking.k8s.io/v1beta1/: - get: - description: get available resources - operationId: getAPIResources - responses: - "200": - content: - application/json: - schema: - $ref: "#/components/schemas/v1.APIResourceList" - application/yaml: - schema: - $ref: "#/components/schemas/v1.APIResourceList" - application/vnd.kubernetes.protobuf: - schema: - $ref: "#/components/schemas/v1.APIResourceList" - application/cbor: - schema: - $ref: "#/components/schemas/v1.APIResourceList" - description: OK - "401": - content: {} - description: Unauthorized - tags: - - networking_v1beta1 - x-accepts: - - application/cbor - - application/json - - application/vnd.kubernetes.protobuf - - application/yaml - /apis/networking.k8s.io/v1beta1/ipaddresses: - delete: - description: delete collection of IPAddress - operationId: deleteCollectionIPAddress - parameters: - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ \ and wget)." @@ -65769,12 +66514,12 @@ paths: content: {} description: Unauthorized tags: - - networking_v1beta1 + - networking_v1 x-kubernetes-action: deletecollection x-kubernetes-group-version-kind: group: networking.k8s.io - kind: IPAddress - version: v1beta1 + kind: Ingress + version: v1 x-codegen-request-body-name: body x-content-type: application/json x-accepts: @@ -65783,9 +66528,15 @@ paths: - application/vnd.kubernetes.protobuf - application/yaml get: - description: list or watch objects of kind IPAddress - operationId: listIPAddress + description: list or watch objects of kind Ingress + operationId: listNamespacedIngress parameters: + - description: "object name and auth scope, such as for teams and projects" + in: path + name: namespace + required: true + schema: + type: string - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ \ and wget)." @@ -65909,36 +66660,36 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1beta1.IPAddressList" + $ref: "#/components/schemas/v1.IngressList" application/yaml: schema: - $ref: "#/components/schemas/v1beta1.IPAddressList" + $ref: "#/components/schemas/v1.IngressList" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1beta1.IPAddressList" + $ref: "#/components/schemas/v1.IngressList" application/cbor: schema: - $ref: "#/components/schemas/v1beta1.IPAddressList" + $ref: "#/components/schemas/v1.IngressList" application/json;stream=watch: schema: - $ref: "#/components/schemas/v1beta1.IPAddressList" + $ref: "#/components/schemas/v1.IngressList" application/vnd.kubernetes.protobuf;stream=watch: schema: - $ref: "#/components/schemas/v1beta1.IPAddressList" + $ref: "#/components/schemas/v1.IngressList" application/cbor-seq: schema: - $ref: "#/components/schemas/v1beta1.IPAddressList" + $ref: "#/components/schemas/v1.IngressList" description: OK "401": content: {} description: Unauthorized tags: - - networking_v1beta1 + - networking_v1 x-kubernetes-action: list x-kubernetes-group-version-kind: group: networking.k8s.io - kind: IPAddress - version: v1beta1 + kind: Ingress + version: v1 x-accepts: - application/cbor - application/cbor-seq @@ -65948,9 +66699,15 @@ paths: - application/vnd.kubernetes.protobuf;stream=watch - application/yaml post: - description: create an IPAddress - operationId: createIPAddress + description: create an Ingress + operationId: createNamespacedIngress parameters: + - description: "object name and auth scope, such as for teams and projects" + in: path + name: namespace + required: true + schema: + type: string - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ \ and wget)." @@ -65994,64 +66751,64 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1beta1.IPAddress" + $ref: "#/components/schemas/v1.Ingress" required: true responses: "200": content: application/json: schema: - $ref: "#/components/schemas/v1beta1.IPAddress" + $ref: "#/components/schemas/v1.Ingress" application/yaml: schema: - $ref: "#/components/schemas/v1beta1.IPAddress" + $ref: "#/components/schemas/v1.Ingress" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1beta1.IPAddress" + $ref: "#/components/schemas/v1.Ingress" application/cbor: schema: - $ref: "#/components/schemas/v1beta1.IPAddress" + $ref: "#/components/schemas/v1.Ingress" description: OK "201": content: application/json: schema: - $ref: "#/components/schemas/v1beta1.IPAddress" + $ref: "#/components/schemas/v1.Ingress" application/yaml: schema: - $ref: "#/components/schemas/v1beta1.IPAddress" + $ref: "#/components/schemas/v1.Ingress" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1beta1.IPAddress" + $ref: "#/components/schemas/v1.Ingress" application/cbor: schema: - $ref: "#/components/schemas/v1beta1.IPAddress" + $ref: "#/components/schemas/v1.Ingress" description: Created "202": content: application/json: schema: - $ref: "#/components/schemas/v1beta1.IPAddress" + $ref: "#/components/schemas/v1.Ingress" application/yaml: schema: - $ref: "#/components/schemas/v1beta1.IPAddress" + $ref: "#/components/schemas/v1.Ingress" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1beta1.IPAddress" + $ref: "#/components/schemas/v1.Ingress" application/cbor: schema: - $ref: "#/components/schemas/v1beta1.IPAddress" + $ref: "#/components/schemas/v1.Ingress" description: Accepted "401": content: {} description: Unauthorized tags: - - networking_v1beta1 + - networking_v1 x-kubernetes-action: post x-kubernetes-group-version-kind: group: networking.k8s.io - kind: IPAddress - version: v1beta1 + kind: Ingress + version: v1 x-codegen-request-body-name: body x-content-type: application/json x-accepts: @@ -66059,17 +66816,23 @@ paths: - application/json - application/vnd.kubernetes.protobuf - application/yaml - /apis/networking.k8s.io/v1beta1/ipaddresses/{name}: + /apis/networking.k8s.io/v1/namespaces/{namespace}/ingresses/{name}: delete: - description: delete an IPAddress - operationId: deleteIPAddress + description: delete an Ingress + operationId: deleteNamespacedIngress parameters: - - description: name of the IPAddress + - description: name of the Ingress in: path name: name required: true schema: type: string + - description: "object name and auth scope, such as for teams and projects" + in: path + name: namespace + required: true + schema: + type: string - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ \ and wget)." @@ -66169,12 +66932,12 @@ paths: content: {} description: Unauthorized tags: - - networking_v1beta1 + - networking_v1 x-kubernetes-action: delete x-kubernetes-group-version-kind: group: networking.k8s.io - kind: IPAddress - version: v1beta1 + kind: Ingress + version: v1 x-codegen-request-body-name: body x-content-type: application/json x-accepts: @@ -66183,15 +66946,21 @@ paths: - application/vnd.kubernetes.protobuf - application/yaml get: - description: read the specified IPAddress - operationId: readIPAddress + description: read the specified Ingress + operationId: readNamespacedIngress parameters: - - description: name of the IPAddress + - description: name of the Ingress in: path name: name required: true schema: type: string + - description: "object name and auth scope, such as for teams and projects" + in: path + name: namespace + required: true + schema: + type: string - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ \ and wget)." @@ -66204,42 +66973,48 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1beta1.IPAddress" + $ref: "#/components/schemas/v1.Ingress" application/yaml: schema: - $ref: "#/components/schemas/v1beta1.IPAddress" + $ref: "#/components/schemas/v1.Ingress" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1beta1.IPAddress" + $ref: "#/components/schemas/v1.Ingress" application/cbor: schema: - $ref: "#/components/schemas/v1beta1.IPAddress" + $ref: "#/components/schemas/v1.Ingress" description: OK "401": content: {} description: Unauthorized tags: - - networking_v1beta1 + - networking_v1 x-kubernetes-action: get x-kubernetes-group-version-kind: group: networking.k8s.io - kind: IPAddress - version: v1beta1 + kind: Ingress + version: v1 x-accepts: - application/cbor - application/json - application/vnd.kubernetes.protobuf - application/yaml patch: - description: partially update the specified IPAddress - operationId: patchIPAddress + description: partially update the specified Ingress + operationId: patchNamespacedIngress parameters: - - description: name of the IPAddress + - description: name of the Ingress in: path name: name required: true schema: type: string + - description: "object name and auth scope, such as for teams and projects" + in: path + name: namespace + required: true + schema: + type: string - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ \ and wget)." @@ -66299,42 +67074,42 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1beta1.IPAddress" + $ref: "#/components/schemas/v1.Ingress" application/yaml: schema: - $ref: "#/components/schemas/v1beta1.IPAddress" + $ref: "#/components/schemas/v1.Ingress" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1beta1.IPAddress" + $ref: "#/components/schemas/v1.Ingress" application/cbor: schema: - $ref: "#/components/schemas/v1beta1.IPAddress" + $ref: "#/components/schemas/v1.Ingress" description: OK "201": content: application/json: schema: - $ref: "#/components/schemas/v1beta1.IPAddress" + $ref: "#/components/schemas/v1.Ingress" application/yaml: schema: - $ref: "#/components/schemas/v1beta1.IPAddress" + $ref: "#/components/schemas/v1.Ingress" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1beta1.IPAddress" + $ref: "#/components/schemas/v1.Ingress" application/cbor: schema: - $ref: "#/components/schemas/v1beta1.IPAddress" + $ref: "#/components/schemas/v1.Ingress" description: Created "401": content: {} description: Unauthorized tags: - - networking_v1beta1 + - networking_v1 x-kubernetes-action: patch x-kubernetes-group-version-kind: group: networking.k8s.io - kind: IPAddress - version: v1beta1 + kind: Ingress + version: v1 x-codegen-request-body-name: body x-content-type: application/json x-accepts: @@ -66343,15 +67118,21 @@ paths: - application/vnd.kubernetes.protobuf - application/yaml put: - description: replace the specified IPAddress - operationId: replaceIPAddress + description: replace the specified Ingress + operationId: replaceNamespacedIngress parameters: - - description: name of the IPAddress + - description: name of the Ingress in: path name: name required: true schema: type: string + - description: "object name and auth scope, such as for teams and projects" + in: path + name: namespace + required: true + schema: + type: string - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ \ and wget)." @@ -66395,49 +67176,49 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1beta1.IPAddress" + $ref: "#/components/schemas/v1.Ingress" required: true responses: "200": content: application/json: schema: - $ref: "#/components/schemas/v1beta1.IPAddress" + $ref: "#/components/schemas/v1.Ingress" application/yaml: schema: - $ref: "#/components/schemas/v1beta1.IPAddress" + $ref: "#/components/schemas/v1.Ingress" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1beta1.IPAddress" + $ref: "#/components/schemas/v1.Ingress" application/cbor: schema: - $ref: "#/components/schemas/v1beta1.IPAddress" + $ref: "#/components/schemas/v1.Ingress" description: OK "201": content: application/json: schema: - $ref: "#/components/schemas/v1beta1.IPAddress" + $ref: "#/components/schemas/v1.Ingress" application/yaml: schema: - $ref: "#/components/schemas/v1beta1.IPAddress" + $ref: "#/components/schemas/v1.Ingress" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1beta1.IPAddress" + $ref: "#/components/schemas/v1.Ingress" application/cbor: schema: - $ref: "#/components/schemas/v1beta1.IPAddress" + $ref: "#/components/schemas/v1.Ingress" description: Created "401": content: {} description: Unauthorized tags: - - networking_v1beta1 + - networking_v1 x-kubernetes-action: put x-kubernetes-group-version-kind: group: networking.k8s.io - kind: IPAddress - version: v1beta1 + kind: Ingress + version: v1 x-codegen-request-body-name: body x-content-type: application/json x-accepts: @@ -66445,11 +67226,299 @@ paths: - application/json - application/vnd.kubernetes.protobuf - application/yaml - /apis/networking.k8s.io/v1beta1/servicecidrs: + /apis/networking.k8s.io/v1/namespaces/{namespace}/ingresses/{name}/status: + get: + description: read status of the specified Ingress + operationId: readNamespacedIngressStatus + parameters: + - description: name of the Ingress + in: path + name: name + required: true + schema: + type: string + - description: "object name and auth scope, such as for teams and projects" + in: path + name: namespace + required: true + schema: + type: string + - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ + \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ + \ and wget)." + in: query + name: pretty + schema: + type: string + responses: + "200": + content: + application/json: + schema: + $ref: "#/components/schemas/v1.Ingress" + application/yaml: + schema: + $ref: "#/components/schemas/v1.Ingress" + application/vnd.kubernetes.protobuf: + schema: + $ref: "#/components/schemas/v1.Ingress" + application/cbor: + schema: + $ref: "#/components/schemas/v1.Ingress" + description: OK + "401": + content: {} + description: Unauthorized + tags: + - networking_v1 + x-kubernetes-action: get + x-kubernetes-group-version-kind: + group: networking.k8s.io + kind: Ingress + version: v1 + x-accepts: + - application/cbor + - application/json + - application/vnd.kubernetes.protobuf + - application/yaml + patch: + description: partially update status of the specified Ingress + operationId: patchNamespacedIngressStatus + parameters: + - description: name of the Ingress + in: path + name: name + required: true + schema: + type: string + - description: "object name and auth scope, such as for teams and projects" + in: path + name: namespace + required: true + schema: + type: string + - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ + \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ + \ and wget)." + in: query + name: pretty + schema: + type: string + - description: "When present, indicates that modifications should not be persisted.\ + \ An invalid or unrecognized dryRun directive will result in an error response\ + \ and no further processing of the request. Valid values are: - All: all\ + \ dry run stages will be processed" + in: query + name: dryRun + schema: + type: string + - description: "fieldManager is a name associated with the actor or entity that\ + \ is making these changes. The value must be less than or 128 characters\ + \ long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.\ + \ This field is required for apply requests (application/apply-patch) but\ + \ optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch)." + in: query + name: fieldManager + schema: + type: string + - description: "fieldValidation instructs the server on how to handle objects\ + \ in the request (POST/PUT/PATCH) containing unknown or duplicate fields.\ + \ Valid values are: - Ignore: This will ignore any unknown fields that are\ + \ silently dropped from the object, and will ignore all but the last duplicate\ + \ field that the decoder encounters. This is the default behavior prior\ + \ to v1.23. - Warn: This will send a warning via the standard warning response\ + \ header for each unknown field that is dropped from the object, and for\ + \ each duplicate field that is encountered. The request will still succeed\ + \ if there are no other errors, and will only persist the last of any duplicate\ + \ fields. This is the default in v1.23+ - Strict: This will fail the request\ + \ with a BadRequest error if any unknown fields would be dropped from the\ + \ object, or if any duplicate fields are present. The error returned from\ + \ the server will contain all unknown and duplicate fields encountered." + in: query + name: fieldValidation + schema: + type: string + - description: Force is going to "force" Apply requests. It means user will + re-acquire conflicting fields owned by other people. Force flag must be + unset for non-apply patch requests. + in: query + name: force + schema: + type: boolean + requestBody: + content: + application/json: + schema: + $ref: "#/components/schemas/v1.Patch" + required: true + responses: + "200": + content: + application/json: + schema: + $ref: "#/components/schemas/v1.Ingress" + application/yaml: + schema: + $ref: "#/components/schemas/v1.Ingress" + application/vnd.kubernetes.protobuf: + schema: + $ref: "#/components/schemas/v1.Ingress" + application/cbor: + schema: + $ref: "#/components/schemas/v1.Ingress" + description: OK + "201": + content: + application/json: + schema: + $ref: "#/components/schemas/v1.Ingress" + application/yaml: + schema: + $ref: "#/components/schemas/v1.Ingress" + application/vnd.kubernetes.protobuf: + schema: + $ref: "#/components/schemas/v1.Ingress" + application/cbor: + schema: + $ref: "#/components/schemas/v1.Ingress" + description: Created + "401": + content: {} + description: Unauthorized + tags: + - networking_v1 + x-kubernetes-action: patch + x-kubernetes-group-version-kind: + group: networking.k8s.io + kind: Ingress + version: v1 + x-codegen-request-body-name: body + x-content-type: application/json + x-accepts: + - application/cbor + - application/json + - application/vnd.kubernetes.protobuf + - application/yaml + put: + description: replace status of the specified Ingress + operationId: replaceNamespacedIngressStatus + parameters: + - description: name of the Ingress + in: path + name: name + required: true + schema: + type: string + - description: "object name and auth scope, such as for teams and projects" + in: path + name: namespace + required: true + schema: + type: string + - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ + \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ + \ and wget)." + in: query + name: pretty + schema: + type: string + - description: "When present, indicates that modifications should not be persisted.\ + \ An invalid or unrecognized dryRun directive will result in an error response\ + \ and no further processing of the request. Valid values are: - All: all\ + \ dry run stages will be processed" + in: query + name: dryRun + schema: + type: string + - description: "fieldManager is a name associated with the actor or entity that\ + \ is making these changes. The value must be less than or 128 characters\ + \ long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." + in: query + name: fieldManager + schema: + type: string + - description: "fieldValidation instructs the server on how to handle objects\ + \ in the request (POST/PUT/PATCH) containing unknown or duplicate fields.\ + \ Valid values are: - Ignore: This will ignore any unknown fields that are\ + \ silently dropped from the object, and will ignore all but the last duplicate\ + \ field that the decoder encounters. This is the default behavior prior\ + \ to v1.23. - Warn: This will send a warning via the standard warning response\ + \ header for each unknown field that is dropped from the object, and for\ + \ each duplicate field that is encountered. The request will still succeed\ + \ if there are no other errors, and will only persist the last of any duplicate\ + \ fields. This is the default in v1.23+ - Strict: This will fail the request\ + \ with a BadRequest error if any unknown fields would be dropped from the\ + \ object, or if any duplicate fields are present. The error returned from\ + \ the server will contain all unknown and duplicate fields encountered." + in: query + name: fieldValidation + schema: + type: string + requestBody: + content: + application/json: + schema: + $ref: "#/components/schemas/v1.Ingress" + required: true + responses: + "200": + content: + application/json: + schema: + $ref: "#/components/schemas/v1.Ingress" + application/yaml: + schema: + $ref: "#/components/schemas/v1.Ingress" + application/vnd.kubernetes.protobuf: + schema: + $ref: "#/components/schemas/v1.Ingress" + application/cbor: + schema: + $ref: "#/components/schemas/v1.Ingress" + description: OK + "201": + content: + application/json: + schema: + $ref: "#/components/schemas/v1.Ingress" + application/yaml: + schema: + $ref: "#/components/schemas/v1.Ingress" + application/vnd.kubernetes.protobuf: + schema: + $ref: "#/components/schemas/v1.Ingress" + application/cbor: + schema: + $ref: "#/components/schemas/v1.Ingress" + description: Created + "401": + content: {} + description: Unauthorized + tags: + - networking_v1 + x-kubernetes-action: put + x-kubernetes-group-version-kind: + group: networking.k8s.io + kind: Ingress + version: v1 + x-codegen-request-body-name: body + x-content-type: application/json + x-accepts: + - application/cbor + - application/json + - application/vnd.kubernetes.protobuf + - application/yaml + /apis/networking.k8s.io/v1/namespaces/{namespace}/networkpolicies: delete: - description: delete collection of ServiceCIDR - operationId: deleteCollectionServiceCIDR + description: delete collection of NetworkPolicy + operationId: deleteCollectionNamespacedNetworkPolicy parameters: + - description: "object name and auth scope, such as for teams and projects" + in: path + name: namespace + required: true + schema: + type: string - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ \ and wget)." @@ -66629,12 +67698,12 @@ paths: content: {} description: Unauthorized tags: - - networking_v1beta1 + - networking_v1 x-kubernetes-action: deletecollection x-kubernetes-group-version-kind: group: networking.k8s.io - kind: ServiceCIDR - version: v1beta1 + kind: NetworkPolicy + version: v1 x-codegen-request-body-name: body x-content-type: application/json x-accepts: @@ -66643,9 +67712,15 @@ paths: - application/vnd.kubernetes.protobuf - application/yaml get: - description: list or watch objects of kind ServiceCIDR - operationId: listServiceCIDR + description: list or watch objects of kind NetworkPolicy + operationId: listNamespacedNetworkPolicy parameters: + - description: "object name and auth scope, such as for teams and projects" + in: path + name: namespace + required: true + schema: + type: string - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ \ and wget)." @@ -66769,36 +67844,36 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1beta1.ServiceCIDRList" + $ref: "#/components/schemas/v1.NetworkPolicyList" application/yaml: schema: - $ref: "#/components/schemas/v1beta1.ServiceCIDRList" + $ref: "#/components/schemas/v1.NetworkPolicyList" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1beta1.ServiceCIDRList" + $ref: "#/components/schemas/v1.NetworkPolicyList" application/cbor: schema: - $ref: "#/components/schemas/v1beta1.ServiceCIDRList" + $ref: "#/components/schemas/v1.NetworkPolicyList" application/json;stream=watch: schema: - $ref: "#/components/schemas/v1beta1.ServiceCIDRList" + $ref: "#/components/schemas/v1.NetworkPolicyList" application/vnd.kubernetes.protobuf;stream=watch: schema: - $ref: "#/components/schemas/v1beta1.ServiceCIDRList" + $ref: "#/components/schemas/v1.NetworkPolicyList" application/cbor-seq: schema: - $ref: "#/components/schemas/v1beta1.ServiceCIDRList" + $ref: "#/components/schemas/v1.NetworkPolicyList" description: OK "401": content: {} description: Unauthorized tags: - - networking_v1beta1 + - networking_v1 x-kubernetes-action: list x-kubernetes-group-version-kind: group: networking.k8s.io - kind: ServiceCIDR - version: v1beta1 + kind: NetworkPolicy + version: v1 x-accepts: - application/cbor - application/cbor-seq @@ -66808,9 +67883,15 @@ paths: - application/vnd.kubernetes.protobuf;stream=watch - application/yaml post: - description: create a ServiceCIDR - operationId: createServiceCIDR + description: create a NetworkPolicy + operationId: createNamespacedNetworkPolicy parameters: + - description: "object name and auth scope, such as for teams and projects" + in: path + name: namespace + required: true + schema: + type: string - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ \ and wget)." @@ -66854,64 +67935,64 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1beta1.ServiceCIDR" + $ref: "#/components/schemas/v1.NetworkPolicy" required: true responses: "200": content: application/json: schema: - $ref: "#/components/schemas/v1beta1.ServiceCIDR" + $ref: "#/components/schemas/v1.NetworkPolicy" application/yaml: schema: - $ref: "#/components/schemas/v1beta1.ServiceCIDR" + $ref: "#/components/schemas/v1.NetworkPolicy" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1beta1.ServiceCIDR" + $ref: "#/components/schemas/v1.NetworkPolicy" application/cbor: schema: - $ref: "#/components/schemas/v1beta1.ServiceCIDR" + $ref: "#/components/schemas/v1.NetworkPolicy" description: OK "201": content: application/json: schema: - $ref: "#/components/schemas/v1beta1.ServiceCIDR" + $ref: "#/components/schemas/v1.NetworkPolicy" application/yaml: schema: - $ref: "#/components/schemas/v1beta1.ServiceCIDR" + $ref: "#/components/schemas/v1.NetworkPolicy" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1beta1.ServiceCIDR" + $ref: "#/components/schemas/v1.NetworkPolicy" application/cbor: schema: - $ref: "#/components/schemas/v1beta1.ServiceCIDR" + $ref: "#/components/schemas/v1.NetworkPolicy" description: Created "202": content: application/json: schema: - $ref: "#/components/schemas/v1beta1.ServiceCIDR" + $ref: "#/components/schemas/v1.NetworkPolicy" application/yaml: schema: - $ref: "#/components/schemas/v1beta1.ServiceCIDR" + $ref: "#/components/schemas/v1.NetworkPolicy" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1beta1.ServiceCIDR" + $ref: "#/components/schemas/v1.NetworkPolicy" application/cbor: schema: - $ref: "#/components/schemas/v1beta1.ServiceCIDR" + $ref: "#/components/schemas/v1.NetworkPolicy" description: Accepted "401": content: {} description: Unauthorized tags: - - networking_v1beta1 + - networking_v1 x-kubernetes-action: post x-kubernetes-group-version-kind: group: networking.k8s.io - kind: ServiceCIDR - version: v1beta1 + kind: NetworkPolicy + version: v1 x-codegen-request-body-name: body x-content-type: application/json x-accepts: @@ -66919,17 +68000,23 @@ paths: - application/json - application/vnd.kubernetes.protobuf - application/yaml - /apis/networking.k8s.io/v1beta1/servicecidrs/{name}: + /apis/networking.k8s.io/v1/namespaces/{namespace}/networkpolicies/{name}: delete: - description: delete a ServiceCIDR - operationId: deleteServiceCIDR + description: delete a NetworkPolicy + operationId: deleteNamespacedNetworkPolicy parameters: - - description: name of the ServiceCIDR + - description: name of the NetworkPolicy in: path name: name required: true schema: type: string + - description: "object name and auth scope, such as for teams and projects" + in: path + name: namespace + required: true + schema: + type: string - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ \ and wget)." @@ -67029,12 +68116,12 @@ paths: content: {} description: Unauthorized tags: - - networking_v1beta1 + - networking_v1 x-kubernetes-action: delete x-kubernetes-group-version-kind: group: networking.k8s.io - kind: ServiceCIDR - version: v1beta1 + kind: NetworkPolicy + version: v1 x-codegen-request-body-name: body x-content-type: application/json x-accepts: @@ -67043,15 +68130,21 @@ paths: - application/vnd.kubernetes.protobuf - application/yaml get: - description: read the specified ServiceCIDR - operationId: readServiceCIDR + description: read the specified NetworkPolicy + operationId: readNamespacedNetworkPolicy parameters: - - description: name of the ServiceCIDR + - description: name of the NetworkPolicy in: path name: name required: true schema: type: string + - description: "object name and auth scope, such as for teams and projects" + in: path + name: namespace + required: true + schema: + type: string - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ \ and wget)." @@ -67064,42 +68157,48 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1beta1.ServiceCIDR" + $ref: "#/components/schemas/v1.NetworkPolicy" application/yaml: schema: - $ref: "#/components/schemas/v1beta1.ServiceCIDR" + $ref: "#/components/schemas/v1.NetworkPolicy" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1beta1.ServiceCIDR" + $ref: "#/components/schemas/v1.NetworkPolicy" application/cbor: schema: - $ref: "#/components/schemas/v1beta1.ServiceCIDR" + $ref: "#/components/schemas/v1.NetworkPolicy" description: OK "401": content: {} description: Unauthorized tags: - - networking_v1beta1 + - networking_v1 x-kubernetes-action: get x-kubernetes-group-version-kind: group: networking.k8s.io - kind: ServiceCIDR - version: v1beta1 + kind: NetworkPolicy + version: v1 x-accepts: - application/cbor - application/json - application/vnd.kubernetes.protobuf - application/yaml patch: - description: partially update the specified ServiceCIDR - operationId: patchServiceCIDR + description: partially update the specified NetworkPolicy + operationId: patchNamespacedNetworkPolicy parameters: - - description: name of the ServiceCIDR + - description: name of the NetworkPolicy in: path name: name required: true schema: type: string + - description: "object name and auth scope, such as for teams and projects" + in: path + name: namespace + required: true + schema: + type: string - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ \ and wget)." @@ -67159,42 +68258,42 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1beta1.ServiceCIDR" + $ref: "#/components/schemas/v1.NetworkPolicy" application/yaml: schema: - $ref: "#/components/schemas/v1beta1.ServiceCIDR" + $ref: "#/components/schemas/v1.NetworkPolicy" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1beta1.ServiceCIDR" + $ref: "#/components/schemas/v1.NetworkPolicy" application/cbor: schema: - $ref: "#/components/schemas/v1beta1.ServiceCIDR" + $ref: "#/components/schemas/v1.NetworkPolicy" description: OK "201": content: application/json: schema: - $ref: "#/components/schemas/v1beta1.ServiceCIDR" + $ref: "#/components/schemas/v1.NetworkPolicy" application/yaml: schema: - $ref: "#/components/schemas/v1beta1.ServiceCIDR" + $ref: "#/components/schemas/v1.NetworkPolicy" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1beta1.ServiceCIDR" + $ref: "#/components/schemas/v1.NetworkPolicy" application/cbor: schema: - $ref: "#/components/schemas/v1beta1.ServiceCIDR" + $ref: "#/components/schemas/v1.NetworkPolicy" description: Created "401": content: {} description: Unauthorized tags: - - networking_v1beta1 + - networking_v1 x-kubernetes-action: patch x-kubernetes-group-version-kind: group: networking.k8s.io - kind: ServiceCIDR - version: v1beta1 + kind: NetworkPolicy + version: v1 x-codegen-request-body-name: body x-content-type: application/json x-accepts: @@ -67203,15 +68302,21 @@ paths: - application/vnd.kubernetes.protobuf - application/yaml put: - description: replace the specified ServiceCIDR - operationId: replaceServiceCIDR + description: replace the specified NetworkPolicy + operationId: replaceNamespacedNetworkPolicy parameters: - - description: name of the ServiceCIDR + - description: name of the NetworkPolicy in: path name: name required: true schema: type: string + - description: "object name and auth scope, such as for teams and projects" + in: path + name: namespace + required: true + schema: + type: string - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ \ and wget)." @@ -67255,49 +68360,49 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1beta1.ServiceCIDR" + $ref: "#/components/schemas/v1.NetworkPolicy" required: true responses: "200": content: application/json: schema: - $ref: "#/components/schemas/v1beta1.ServiceCIDR" + $ref: "#/components/schemas/v1.NetworkPolicy" application/yaml: schema: - $ref: "#/components/schemas/v1beta1.ServiceCIDR" + $ref: "#/components/schemas/v1.NetworkPolicy" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1beta1.ServiceCIDR" + $ref: "#/components/schemas/v1.NetworkPolicy" application/cbor: schema: - $ref: "#/components/schemas/v1beta1.ServiceCIDR" + $ref: "#/components/schemas/v1.NetworkPolicy" description: OK "201": content: application/json: schema: - $ref: "#/components/schemas/v1beta1.ServiceCIDR" + $ref: "#/components/schemas/v1.NetworkPolicy" application/yaml: schema: - $ref: "#/components/schemas/v1beta1.ServiceCIDR" + $ref: "#/components/schemas/v1.NetworkPolicy" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1beta1.ServiceCIDR" + $ref: "#/components/schemas/v1.NetworkPolicy" application/cbor: schema: - $ref: "#/components/schemas/v1beta1.ServiceCIDR" + $ref: "#/components/schemas/v1.NetworkPolicy" description: Created "401": content: {} description: Unauthorized tags: - - networking_v1beta1 + - networking_v1 x-kubernetes-action: put x-kubernetes-group-version-kind: group: networking.k8s.io - kind: ServiceCIDR - version: v1beta1 + kind: NetworkPolicy + version: v1 x-codegen-request-body-name: body x-content-type: application/json x-accepts: @@ -67305,65 +68410,49 @@ paths: - application/json - application/vnd.kubernetes.protobuf - application/yaml - /apis/networking.k8s.io/v1beta1/servicecidrs/{name}/status: + /apis/networking.k8s.io/v1/networkpolicies: get: - description: read status of the specified ServiceCIDR - operationId: readServiceCIDRStatus + description: list or watch objects of kind NetworkPolicy + operationId: listNetworkPolicyForAllNamespaces parameters: - - description: name of the ServiceCIDR - in: path - name: name - required: true + - description: "allowWatchBookmarks requests watch events with type \"BOOKMARK\"\ + . Servers that do not implement bookmarks may ignore this flag and bookmarks\ + \ are sent at the server's discretion. Clients should not assume bookmarks\ + \ are returned at any specific interval, nor may they assume the server\ + \ will send any BOOKMARK event during a session. If this is not a watch,\ + \ this field is ignored." + in: query + name: allowWatchBookmarks + schema: + type: boolean + - description: |- + The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + + This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications. + in: query + name: continue schema: type: string - - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ - \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ - \ and wget)." + - description: A selector to restrict the list of returned objects by their + fields. Defaults to everything. in: query - name: pretty + name: fieldSelector schema: type: string - responses: - "200": - content: - application/json: - schema: - $ref: "#/components/schemas/v1beta1.ServiceCIDR" - application/yaml: - schema: - $ref: "#/components/schemas/v1beta1.ServiceCIDR" - application/vnd.kubernetes.protobuf: - schema: - $ref: "#/components/schemas/v1beta1.ServiceCIDR" - application/cbor: - schema: - $ref: "#/components/schemas/v1beta1.ServiceCIDR" - description: OK - "401": - content: {} - description: Unauthorized - tags: - - networking_v1beta1 - x-kubernetes-action: get - x-kubernetes-group-version-kind: - group: networking.k8s.io - kind: ServiceCIDR - version: v1beta1 - x-accepts: - - application/cbor - - application/json - - application/vnd.kubernetes.protobuf - - application/yaml - patch: - description: partially update status of the specified ServiceCIDR - operationId: patchServiceCIDRStatus - parameters: - - description: name of the ServiceCIDR - in: path - name: name - required: true + - description: A selector to restrict the list of returned objects by their + labels. Defaults to everything. + in: query + name: labelSelector schema: type: string + - description: |- + limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + + The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned. + in: query + name: limit + schema: + type: integer - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ \ and wget)." @@ -67371,268 +68460,126 @@ paths: name: pretty schema: type: string - - description: "When present, indicates that modifications should not be persisted.\ - \ An invalid or unrecognized dryRun directive will result in an error response\ - \ and no further processing of the request. Valid values are: - All: all\ - \ dry run stages will be processed" - in: query - name: dryRun - schema: - type: string - - description: "fieldManager is a name associated with the actor or entity that\ - \ is making these changes. The value must be less than or 128 characters\ - \ long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.\ - \ This field is required for apply requests (application/apply-patch) but\ - \ optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch)." + - description: |- + resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + + Defaults to unset in: query - name: fieldManager + name: resourceVersion schema: type: string - - description: "fieldValidation instructs the server on how to handle objects\ - \ in the request (POST/PUT/PATCH) containing unknown or duplicate fields.\ - \ Valid values are: - Ignore: This will ignore any unknown fields that are\ - \ silently dropped from the object, and will ignore all but the last duplicate\ - \ field that the decoder encounters. This is the default behavior prior\ - \ to v1.23. - Warn: This will send a warning via the standard warning response\ - \ header for each unknown field that is dropped from the object, and for\ - \ each duplicate field that is encountered. The request will still succeed\ - \ if there are no other errors, and will only persist the last of any duplicate\ - \ fields. This is the default in v1.23+ - Strict: This will fail the request\ - \ with a BadRequest error if any unknown fields would be dropped from the\ - \ object, or if any duplicate fields are present. The error returned from\ - \ the server will contain all unknown and duplicate fields encountered." + - description: |- + resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + + Defaults to unset in: query - name: fieldValidation + name: resourceVersionMatch schema: type: string - - description: Force is going to "force" Apply requests. It means user will - re-acquire conflicting fields owned by other people. Force flag must be - unset for non-apply patch requests. + - description: |- + `sendInitialEvents=true` may be set together with `watch=true`. In that case, the watch stream will begin with synthetic events to produce the current state of objects in the collection. Once all such events have been sent, a synthetic "Bookmark" event will be sent. The bookmark will report the ResourceVersion (RV) corresponding to the set of objects, and be marked with `"k8s.io/initial-events-end": "true"` annotation. Afterwards, the watch stream will proceed as usual, sending watch events corresponding to changes (subsequent to the RV) to objects watched. + + When `sendInitialEvents` option is set, we require `resourceVersionMatch` option to also be set. The semantic of the watch request is as following: - `resourceVersionMatch` = NotOlderThan + is interpreted as "data at least as new as the provided `resourceVersion`" + and the bookmark event is send when the state is synced + to a `resourceVersion` at least as fresh as the one provided by the ListOptions. + If `resourceVersion` is unset, this is interpreted as "consistent read" and the + bookmark event is send when the state is synced at least to the moment + when request started being processed. + - `resourceVersionMatch` set to any other value or unset + Invalid error is returned. + + Defaults to true if `resourceVersion=""` or `resourceVersion="0"` (for backward compatibility reasons) and to false otherwise. in: query - name: force + name: sendInitialEvents schema: type: boolean - requestBody: - content: - application/json: - schema: - $ref: "#/components/schemas/v1.Patch" - required: true - responses: - "200": - content: - application/json: - schema: - $ref: "#/components/schemas/v1beta1.ServiceCIDR" - application/yaml: - schema: - $ref: "#/components/schemas/v1beta1.ServiceCIDR" - application/vnd.kubernetes.protobuf: - schema: - $ref: "#/components/schemas/v1beta1.ServiceCIDR" - application/cbor: - schema: - $ref: "#/components/schemas/v1beta1.ServiceCIDR" - description: OK - "201": - content: - application/json: - schema: - $ref: "#/components/schemas/v1beta1.ServiceCIDR" - application/yaml: - schema: - $ref: "#/components/schemas/v1beta1.ServiceCIDR" - application/vnd.kubernetes.protobuf: - schema: - $ref: "#/components/schemas/v1beta1.ServiceCIDR" - application/cbor: - schema: - $ref: "#/components/schemas/v1beta1.ServiceCIDR" - description: Created - "401": - content: {} - description: Unauthorized - tags: - - networking_v1beta1 - x-kubernetes-action: patch - x-kubernetes-group-version-kind: - group: networking.k8s.io - kind: ServiceCIDR - version: v1beta1 - x-codegen-request-body-name: body - x-content-type: application/json - x-accepts: - - application/cbor - - application/json - - application/vnd.kubernetes.protobuf - - application/yaml - put: - description: replace status of the specified ServiceCIDR - operationId: replaceServiceCIDRStatus - parameters: - - description: name of the ServiceCIDR - in: path - name: name - required: true - schema: - type: string - - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ - \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ - \ and wget)." - in: query - name: pretty - schema: - type: string - - description: "When present, indicates that modifications should not be persisted.\ - \ An invalid or unrecognized dryRun directive will result in an error response\ - \ and no further processing of the request. Valid values are: - All: all\ - \ dry run stages will be processed" + - description: |- + shardSelector restricts the list of returned objects using a CEL-based shard selector expression. The format uses the shardRange() function combined with || (logical OR) to specify one or more hash ranges: + + shardRange(object.metadata.uid, '0x0', '0x8000000000000000') + shardRange(object.metadata.uid, '0x0', '0x8000000000000000') || shardRange(object.metadata.uid, '0x8000000000000000', '0x10000000000000000') + + Field paths use CEL-style object-rooted syntax (e.g. "object.metadata.uid"), NOT the fieldSelector format ("metadata.uid"). Currently supported paths: + - object.metadata.uid + - object.metadata.namespace + + hexStart and hexEnd are single-quoted CEL string literals with a '0x' prefix, defining the inclusive lower and exclusive upper bounds over the 64-bit FNV-1a hash space. The full range is [0x0, 0x10000000000000000), where the exclusive upper bound equals 2^64. + + Examples: + 2-shard split: + shard 0: shardRange(object.metadata.uid, '0x0000000000000000', '0x8000000000000000') + shard 1: shardRange(object.metadata.uid, '0x8000000000000000', '0x10000000000000000') + 4-shard split: + shard 0: shardRange(object.metadata.uid, '0x0000000000000000', '0x4000000000000000') + shard 1: shardRange(object.metadata.uid, '0x4000000000000000', '0x8000000000000000') + shard 2: shardRange(object.metadata.uid, '0x8000000000000000', '0xc000000000000000') + shard 3: shardRange(object.metadata.uid, '0xc000000000000000', '0x10000000000000000') + + This is an alpha field and requires enabling the ShardedListAndWatch feature gate. in: query - name: dryRun + name: shardSelector schema: type: string - - description: "fieldManager is a name associated with the actor or entity that\ - \ is making these changes. The value must be less than or 128 characters\ - \ long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." + - description: "Timeout for the list/watch call. This limits the duration of\ + \ the call, regardless of any activity or inactivity." in: query - name: fieldManager + name: timeoutSeconds schema: - type: string - - description: "fieldValidation instructs the server on how to handle objects\ - \ in the request (POST/PUT/PATCH) containing unknown or duplicate fields.\ - \ Valid values are: - Ignore: This will ignore any unknown fields that are\ - \ silently dropped from the object, and will ignore all but the last duplicate\ - \ field that the decoder encounters. This is the default behavior prior\ - \ to v1.23. - Warn: This will send a warning via the standard warning response\ - \ header for each unknown field that is dropped from the object, and for\ - \ each duplicate field that is encountered. The request will still succeed\ - \ if there are no other errors, and will only persist the last of any duplicate\ - \ fields. This is the default in v1.23+ - Strict: This will fail the request\ - \ with a BadRequest error if any unknown fields would be dropped from the\ - \ object, or if any duplicate fields are present. The error returned from\ - \ the server will contain all unknown and duplicate fields encountered." + type: integer + - description: "Watch for changes to the described resources and return them\ + \ as a stream of add, update, and remove notifications. Specify resourceVersion." in: query - name: fieldValidation + name: watch schema: - type: string - requestBody: - content: - application/json: - schema: - $ref: "#/components/schemas/v1beta1.ServiceCIDR" - required: true + type: boolean responses: "200": content: application/json: schema: - $ref: "#/components/schemas/v1beta1.ServiceCIDR" + $ref: "#/components/schemas/v1.NetworkPolicyList" application/yaml: schema: - $ref: "#/components/schemas/v1beta1.ServiceCIDR" + $ref: "#/components/schemas/v1.NetworkPolicyList" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1beta1.ServiceCIDR" + $ref: "#/components/schemas/v1.NetworkPolicyList" application/cbor: schema: - $ref: "#/components/schemas/v1beta1.ServiceCIDR" - description: OK - "201": - content: - application/json: - schema: - $ref: "#/components/schemas/v1beta1.ServiceCIDR" - application/yaml: + $ref: "#/components/schemas/v1.NetworkPolicyList" + application/json;stream=watch: schema: - $ref: "#/components/schemas/v1beta1.ServiceCIDR" - application/vnd.kubernetes.protobuf: + $ref: "#/components/schemas/v1.NetworkPolicyList" + application/vnd.kubernetes.protobuf;stream=watch: schema: - $ref: "#/components/schemas/v1beta1.ServiceCIDR" - application/cbor: + $ref: "#/components/schemas/v1.NetworkPolicyList" + application/cbor-seq: schema: - $ref: "#/components/schemas/v1beta1.ServiceCIDR" - description: Created + $ref: "#/components/schemas/v1.NetworkPolicyList" + description: OK "401": content: {} description: Unauthorized tags: - - networking_v1beta1 - x-kubernetes-action: put + - networking_v1 + x-kubernetes-action: list x-kubernetes-group-version-kind: group: networking.k8s.io - kind: ServiceCIDR - version: v1beta1 - x-codegen-request-body-name: body - x-content-type: application/json - x-accepts: - - application/cbor - - application/json - - application/vnd.kubernetes.protobuf - - application/yaml - /apis/networking.k8s.io/v1beta1/watch/ipaddresses: {} - /apis/networking.k8s.io/v1beta1/watch/ipaddresses/{name}: {} - /apis/networking.k8s.io/v1beta1/watch/servicecidrs: {} - /apis/networking.k8s.io/v1beta1/watch/servicecidrs/{name}: {} - /apis/node.k8s.io/: - get: - description: get information of a group - operationId: getAPIGroup - responses: - "200": - content: - application/json: - schema: - $ref: "#/components/schemas/v1.APIGroup" - application/yaml: - schema: - $ref: "#/components/schemas/v1.APIGroup" - application/vnd.kubernetes.protobuf: - schema: - $ref: "#/components/schemas/v1.APIGroup" - description: OK - "401": - content: {} - description: Unauthorized - tags: - - node - x-accepts: - - application/json - - application/vnd.kubernetes.protobuf - - application/yaml - /apis/node.k8s.io/v1/: - get: - description: get available resources - operationId: getAPIResources - responses: - "200": - content: - application/json: - schema: - $ref: "#/components/schemas/v1.APIResourceList" - application/yaml: - schema: - $ref: "#/components/schemas/v1.APIResourceList" - application/vnd.kubernetes.protobuf: - schema: - $ref: "#/components/schemas/v1.APIResourceList" - application/cbor: - schema: - $ref: "#/components/schemas/v1.APIResourceList" - description: OK - "401": - content: {} - description: Unauthorized - tags: - - node_v1 + kind: NetworkPolicy + version: v1 x-accepts: - application/cbor + - application/cbor-seq - application/json + - application/json;stream=watch - application/vnd.kubernetes.protobuf + - application/vnd.kubernetes.protobuf;stream=watch - application/yaml - /apis/node.k8s.io/v1/runtimeclasses: + /apis/networking.k8s.io/v1/servicecidrs: delete: - description: delete collection of RuntimeClass - operationId: deleteCollectionRuntimeClass + description: delete collection of ServiceCIDR + operationId: deleteCollectionServiceCIDR parameters: - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ @@ -67813,11 +68760,11 @@ paths: content: {} description: Unauthorized tags: - - node_v1 + - networking_v1 x-kubernetes-action: deletecollection x-kubernetes-group-version-kind: - group: node.k8s.io - kind: RuntimeClass + group: networking.k8s.io + kind: ServiceCIDR version: v1 x-codegen-request-body-name: body x-content-type: application/json @@ -67827,8 +68774,8 @@ paths: - application/vnd.kubernetes.protobuf - application/yaml get: - description: list or watch objects of kind RuntimeClass - operationId: listRuntimeClass + description: list or watch objects of kind ServiceCIDR + operationId: listServiceCIDR parameters: - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ @@ -67953,35 +68900,35 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1.RuntimeClassList" + $ref: "#/components/schemas/v1.ServiceCIDRList" application/yaml: schema: - $ref: "#/components/schemas/v1.RuntimeClassList" + $ref: "#/components/schemas/v1.ServiceCIDRList" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1.RuntimeClassList" + $ref: "#/components/schemas/v1.ServiceCIDRList" application/cbor: schema: - $ref: "#/components/schemas/v1.RuntimeClassList" + $ref: "#/components/schemas/v1.ServiceCIDRList" application/json;stream=watch: schema: - $ref: "#/components/schemas/v1.RuntimeClassList" + $ref: "#/components/schemas/v1.ServiceCIDRList" application/vnd.kubernetes.protobuf;stream=watch: schema: - $ref: "#/components/schemas/v1.RuntimeClassList" + $ref: "#/components/schemas/v1.ServiceCIDRList" application/cbor-seq: schema: - $ref: "#/components/schemas/v1.RuntimeClassList" + $ref: "#/components/schemas/v1.ServiceCIDRList" description: OK "401": content: {} description: Unauthorized tags: - - node_v1 + - networking_v1 x-kubernetes-action: list x-kubernetes-group-version-kind: - group: node.k8s.io - kind: RuntimeClass + group: networking.k8s.io + kind: ServiceCIDR version: v1 x-accepts: - application/cbor @@ -67992,8 +68939,8 @@ paths: - application/vnd.kubernetes.protobuf;stream=watch - application/yaml post: - description: create a RuntimeClass - operationId: createRuntimeClass + description: create a ServiceCIDR + operationId: createServiceCIDR parameters: - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ @@ -68038,63 +68985,63 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1.RuntimeClass" + $ref: "#/components/schemas/v1.ServiceCIDR" required: true responses: "200": content: application/json: schema: - $ref: "#/components/schemas/v1.RuntimeClass" + $ref: "#/components/schemas/v1.ServiceCIDR" application/yaml: schema: - $ref: "#/components/schemas/v1.RuntimeClass" + $ref: "#/components/schemas/v1.ServiceCIDR" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1.RuntimeClass" + $ref: "#/components/schemas/v1.ServiceCIDR" application/cbor: schema: - $ref: "#/components/schemas/v1.RuntimeClass" + $ref: "#/components/schemas/v1.ServiceCIDR" description: OK "201": content: application/json: schema: - $ref: "#/components/schemas/v1.RuntimeClass" + $ref: "#/components/schemas/v1.ServiceCIDR" application/yaml: schema: - $ref: "#/components/schemas/v1.RuntimeClass" + $ref: "#/components/schemas/v1.ServiceCIDR" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1.RuntimeClass" + $ref: "#/components/schemas/v1.ServiceCIDR" application/cbor: schema: - $ref: "#/components/schemas/v1.RuntimeClass" + $ref: "#/components/schemas/v1.ServiceCIDR" description: Created "202": content: application/json: schema: - $ref: "#/components/schemas/v1.RuntimeClass" + $ref: "#/components/schemas/v1.ServiceCIDR" application/yaml: schema: - $ref: "#/components/schemas/v1.RuntimeClass" + $ref: "#/components/schemas/v1.ServiceCIDR" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1.RuntimeClass" + $ref: "#/components/schemas/v1.ServiceCIDR" application/cbor: schema: - $ref: "#/components/schemas/v1.RuntimeClass" + $ref: "#/components/schemas/v1.ServiceCIDR" description: Accepted "401": content: {} description: Unauthorized tags: - - node_v1 + - networking_v1 x-kubernetes-action: post x-kubernetes-group-version-kind: - group: node.k8s.io - kind: RuntimeClass + group: networking.k8s.io + kind: ServiceCIDR version: v1 x-codegen-request-body-name: body x-content-type: application/json @@ -68103,12 +69050,12 @@ paths: - application/json - application/vnd.kubernetes.protobuf - application/yaml - /apis/node.k8s.io/v1/runtimeclasses/{name}: + /apis/networking.k8s.io/v1/servicecidrs/{name}: delete: - description: delete a RuntimeClass - operationId: deleteRuntimeClass + description: delete a ServiceCIDR + operationId: deleteServiceCIDR parameters: - - description: name of the RuntimeClass + - description: name of the ServiceCIDR in: path name: name required: true @@ -68213,11 +69160,11 @@ paths: content: {} description: Unauthorized tags: - - node_v1 + - networking_v1 x-kubernetes-action: delete x-kubernetes-group-version-kind: - group: node.k8s.io - kind: RuntimeClass + group: networking.k8s.io + kind: ServiceCIDR version: v1 x-codegen-request-body-name: body x-content-type: application/json @@ -68227,10 +69174,10 @@ paths: - application/vnd.kubernetes.protobuf - application/yaml get: - description: read the specified RuntimeClass - operationId: readRuntimeClass + description: read the specified ServiceCIDR + operationId: readServiceCIDR parameters: - - description: name of the RuntimeClass + - description: name of the ServiceCIDR in: path name: name required: true @@ -68248,26 +69195,26 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1.RuntimeClass" + $ref: "#/components/schemas/v1.ServiceCIDR" application/yaml: schema: - $ref: "#/components/schemas/v1.RuntimeClass" + $ref: "#/components/schemas/v1.ServiceCIDR" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1.RuntimeClass" + $ref: "#/components/schemas/v1.ServiceCIDR" application/cbor: schema: - $ref: "#/components/schemas/v1.RuntimeClass" + $ref: "#/components/schemas/v1.ServiceCIDR" description: OK "401": content: {} description: Unauthorized tags: - - node_v1 + - networking_v1 x-kubernetes-action: get x-kubernetes-group-version-kind: - group: node.k8s.io - kind: RuntimeClass + group: networking.k8s.io + kind: ServiceCIDR version: v1 x-accepts: - application/cbor @@ -68275,10 +69222,10 @@ paths: - application/vnd.kubernetes.protobuf - application/yaml patch: - description: partially update the specified RuntimeClass - operationId: patchRuntimeClass + description: partially update the specified ServiceCIDR + operationId: patchServiceCIDR parameters: - - description: name of the RuntimeClass + - description: name of the ServiceCIDR in: path name: name required: true @@ -68343,41 +69290,41 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1.RuntimeClass" + $ref: "#/components/schemas/v1.ServiceCIDR" application/yaml: schema: - $ref: "#/components/schemas/v1.RuntimeClass" + $ref: "#/components/schemas/v1.ServiceCIDR" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1.RuntimeClass" + $ref: "#/components/schemas/v1.ServiceCIDR" application/cbor: schema: - $ref: "#/components/schemas/v1.RuntimeClass" + $ref: "#/components/schemas/v1.ServiceCIDR" description: OK "201": content: application/json: schema: - $ref: "#/components/schemas/v1.RuntimeClass" + $ref: "#/components/schemas/v1.ServiceCIDR" application/yaml: schema: - $ref: "#/components/schemas/v1.RuntimeClass" + $ref: "#/components/schemas/v1.ServiceCIDR" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1.RuntimeClass" + $ref: "#/components/schemas/v1.ServiceCIDR" application/cbor: schema: - $ref: "#/components/schemas/v1.RuntimeClass" + $ref: "#/components/schemas/v1.ServiceCIDR" description: Created "401": content: {} description: Unauthorized tags: - - node_v1 + - networking_v1 x-kubernetes-action: patch x-kubernetes-group-version-kind: - group: node.k8s.io - kind: RuntimeClass + group: networking.k8s.io + kind: ServiceCIDR version: v1 x-codegen-request-body-name: body x-content-type: application/json @@ -68387,10 +69334,10 @@ paths: - application/vnd.kubernetes.protobuf - application/yaml put: - description: replace the specified RuntimeClass - operationId: replaceRuntimeClass + description: replace the specified ServiceCIDR + operationId: replaceServiceCIDR parameters: - - description: name of the RuntimeClass + - description: name of the ServiceCIDR in: path name: name required: true @@ -68439,48 +69386,48 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1.RuntimeClass" + $ref: "#/components/schemas/v1.ServiceCIDR" required: true responses: "200": content: application/json: schema: - $ref: "#/components/schemas/v1.RuntimeClass" + $ref: "#/components/schemas/v1.ServiceCIDR" application/yaml: schema: - $ref: "#/components/schemas/v1.RuntimeClass" + $ref: "#/components/schemas/v1.ServiceCIDR" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1.RuntimeClass" + $ref: "#/components/schemas/v1.ServiceCIDR" application/cbor: schema: - $ref: "#/components/schemas/v1.RuntimeClass" + $ref: "#/components/schemas/v1.ServiceCIDR" description: OK "201": content: application/json: schema: - $ref: "#/components/schemas/v1.RuntimeClass" + $ref: "#/components/schemas/v1.ServiceCIDR" application/yaml: schema: - $ref: "#/components/schemas/v1.RuntimeClass" + $ref: "#/components/schemas/v1.ServiceCIDR" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1.RuntimeClass" + $ref: "#/components/schemas/v1.ServiceCIDR" application/cbor: schema: - $ref: "#/components/schemas/v1.RuntimeClass" + $ref: "#/components/schemas/v1.ServiceCIDR" description: Created "401": content: {} description: Unauthorized tags: - - node_v1 + - networking_v1 x-kubernetes-action: put x-kubernetes-group-version-kind: - group: node.k8s.io - kind: RuntimeClass + group: networking.k8s.io + kind: ServiceCIDR version: v1 x-codegen-request-body-name: body x-content-type: application/json @@ -68489,9 +69436,283 @@ paths: - application/json - application/vnd.kubernetes.protobuf - application/yaml - /apis/node.k8s.io/v1/watch/runtimeclasses: {} - /apis/node.k8s.io/v1/watch/runtimeclasses/{name}: {} - /apis/policy/: + /apis/networking.k8s.io/v1/servicecidrs/{name}/status: + get: + description: read status of the specified ServiceCIDR + operationId: readServiceCIDRStatus + parameters: + - description: name of the ServiceCIDR + in: path + name: name + required: true + schema: + type: string + - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ + \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ + \ and wget)." + in: query + name: pretty + schema: + type: string + responses: + "200": + content: + application/json: + schema: + $ref: "#/components/schemas/v1.ServiceCIDR" + application/yaml: + schema: + $ref: "#/components/schemas/v1.ServiceCIDR" + application/vnd.kubernetes.protobuf: + schema: + $ref: "#/components/schemas/v1.ServiceCIDR" + application/cbor: + schema: + $ref: "#/components/schemas/v1.ServiceCIDR" + description: OK + "401": + content: {} + description: Unauthorized + tags: + - networking_v1 + x-kubernetes-action: get + x-kubernetes-group-version-kind: + group: networking.k8s.io + kind: ServiceCIDR + version: v1 + x-accepts: + - application/cbor + - application/json + - application/vnd.kubernetes.protobuf + - application/yaml + patch: + description: partially update status of the specified ServiceCIDR + operationId: patchServiceCIDRStatus + parameters: + - description: name of the ServiceCIDR + in: path + name: name + required: true + schema: + type: string + - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ + \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ + \ and wget)." + in: query + name: pretty + schema: + type: string + - description: "When present, indicates that modifications should not be persisted.\ + \ An invalid or unrecognized dryRun directive will result in an error response\ + \ and no further processing of the request. Valid values are: - All: all\ + \ dry run stages will be processed" + in: query + name: dryRun + schema: + type: string + - description: "fieldManager is a name associated with the actor or entity that\ + \ is making these changes. The value must be less than or 128 characters\ + \ long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.\ + \ This field is required for apply requests (application/apply-patch) but\ + \ optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch)." + in: query + name: fieldManager + schema: + type: string + - description: "fieldValidation instructs the server on how to handle objects\ + \ in the request (POST/PUT/PATCH) containing unknown or duplicate fields.\ + \ Valid values are: - Ignore: This will ignore any unknown fields that are\ + \ silently dropped from the object, and will ignore all but the last duplicate\ + \ field that the decoder encounters. This is the default behavior prior\ + \ to v1.23. - Warn: This will send a warning via the standard warning response\ + \ header for each unknown field that is dropped from the object, and for\ + \ each duplicate field that is encountered. The request will still succeed\ + \ if there are no other errors, and will only persist the last of any duplicate\ + \ fields. This is the default in v1.23+ - Strict: This will fail the request\ + \ with a BadRequest error if any unknown fields would be dropped from the\ + \ object, or if any duplicate fields are present. The error returned from\ + \ the server will contain all unknown and duplicate fields encountered." + in: query + name: fieldValidation + schema: + type: string + - description: Force is going to "force" Apply requests. It means user will + re-acquire conflicting fields owned by other people. Force flag must be + unset for non-apply patch requests. + in: query + name: force + schema: + type: boolean + requestBody: + content: + application/json: + schema: + $ref: "#/components/schemas/v1.Patch" + required: true + responses: + "200": + content: + application/json: + schema: + $ref: "#/components/schemas/v1.ServiceCIDR" + application/yaml: + schema: + $ref: "#/components/schemas/v1.ServiceCIDR" + application/vnd.kubernetes.protobuf: + schema: + $ref: "#/components/schemas/v1.ServiceCIDR" + application/cbor: + schema: + $ref: "#/components/schemas/v1.ServiceCIDR" + description: OK + "201": + content: + application/json: + schema: + $ref: "#/components/schemas/v1.ServiceCIDR" + application/yaml: + schema: + $ref: "#/components/schemas/v1.ServiceCIDR" + application/vnd.kubernetes.protobuf: + schema: + $ref: "#/components/schemas/v1.ServiceCIDR" + application/cbor: + schema: + $ref: "#/components/schemas/v1.ServiceCIDR" + description: Created + "401": + content: {} + description: Unauthorized + tags: + - networking_v1 + x-kubernetes-action: patch + x-kubernetes-group-version-kind: + group: networking.k8s.io + kind: ServiceCIDR + version: v1 + x-codegen-request-body-name: body + x-content-type: application/json + x-accepts: + - application/cbor + - application/json + - application/vnd.kubernetes.protobuf + - application/yaml + put: + description: replace status of the specified ServiceCIDR + operationId: replaceServiceCIDRStatus + parameters: + - description: name of the ServiceCIDR + in: path + name: name + required: true + schema: + type: string + - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ + \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ + \ and wget)." + in: query + name: pretty + schema: + type: string + - description: "When present, indicates that modifications should not be persisted.\ + \ An invalid or unrecognized dryRun directive will result in an error response\ + \ and no further processing of the request. Valid values are: - All: all\ + \ dry run stages will be processed" + in: query + name: dryRun + schema: + type: string + - description: "fieldManager is a name associated with the actor or entity that\ + \ is making these changes. The value must be less than or 128 characters\ + \ long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." + in: query + name: fieldManager + schema: + type: string + - description: "fieldValidation instructs the server on how to handle objects\ + \ in the request (POST/PUT/PATCH) containing unknown or duplicate fields.\ + \ Valid values are: - Ignore: This will ignore any unknown fields that are\ + \ silently dropped from the object, and will ignore all but the last duplicate\ + \ field that the decoder encounters. This is the default behavior prior\ + \ to v1.23. - Warn: This will send a warning via the standard warning response\ + \ header for each unknown field that is dropped from the object, and for\ + \ each duplicate field that is encountered. The request will still succeed\ + \ if there are no other errors, and will only persist the last of any duplicate\ + \ fields. This is the default in v1.23+ - Strict: This will fail the request\ + \ with a BadRequest error if any unknown fields would be dropped from the\ + \ object, or if any duplicate fields are present. The error returned from\ + \ the server will contain all unknown and duplicate fields encountered." + in: query + name: fieldValidation + schema: + type: string + requestBody: + content: + application/json: + schema: + $ref: "#/components/schemas/v1.ServiceCIDR" + required: true + responses: + "200": + content: + application/json: + schema: + $ref: "#/components/schemas/v1.ServiceCIDR" + application/yaml: + schema: + $ref: "#/components/schemas/v1.ServiceCIDR" + application/vnd.kubernetes.protobuf: + schema: + $ref: "#/components/schemas/v1.ServiceCIDR" + application/cbor: + schema: + $ref: "#/components/schemas/v1.ServiceCIDR" + description: OK + "201": + content: + application/json: + schema: + $ref: "#/components/schemas/v1.ServiceCIDR" + application/yaml: + schema: + $ref: "#/components/schemas/v1.ServiceCIDR" + application/vnd.kubernetes.protobuf: + schema: + $ref: "#/components/schemas/v1.ServiceCIDR" + application/cbor: + schema: + $ref: "#/components/schemas/v1.ServiceCIDR" + description: Created + "401": + content: {} + description: Unauthorized + tags: + - networking_v1 + x-kubernetes-action: put + x-kubernetes-group-version-kind: + group: networking.k8s.io + kind: ServiceCIDR + version: v1 + x-codegen-request-body-name: body + x-content-type: application/json + x-accepts: + - application/cbor + - application/json + - application/vnd.kubernetes.protobuf + - application/yaml + /apis/networking.k8s.io/v1/watch/ingressclasses: {} + /apis/networking.k8s.io/v1/watch/ingressclasses/{name}: {} + /apis/networking.k8s.io/v1/watch/ingresses: {} + /apis/networking.k8s.io/v1/watch/ipaddresses: {} + /apis/networking.k8s.io/v1/watch/ipaddresses/{name}: {} + /apis/networking.k8s.io/v1/watch/namespaces/{namespace}/ingresses: {} + /apis/networking.k8s.io/v1/watch/namespaces/{namespace}/ingresses/{name}: {} + /apis/networking.k8s.io/v1/watch/namespaces/{namespace}/networkpolicies: {} + /apis/networking.k8s.io/v1/watch/namespaces/{namespace}/networkpolicies/{name}: {} + /apis/networking.k8s.io/v1/watch/networkpolicies: {} + /apis/networking.k8s.io/v1/watch/servicecidrs: {} + /apis/networking.k8s.io/v1/watch/servicecidrs/{name}: {} + /apis/node.k8s.io/: get: description: get information of a group operationId: getAPIGroup @@ -68507,17 +69728,21 @@ paths: application/vnd.kubernetes.protobuf: schema: $ref: "#/components/schemas/v1.APIGroup" + application/cbor: + schema: + $ref: "#/components/schemas/v1.APIGroup" description: OK "401": content: {} description: Unauthorized tags: - - policy + - node x-accepts: + - application/cbor - application/json - application/vnd.kubernetes.protobuf - application/yaml - /apis/policy/v1/: + /apis/node.k8s.io/v1/: get: description: get available resources operationId: getAPIResources @@ -68541,23 +69766,17 @@ paths: content: {} description: Unauthorized tags: - - policy_v1 + - node_v1 x-accepts: - application/cbor - application/json - application/vnd.kubernetes.protobuf - application/yaml - /apis/policy/v1/namespaces/{namespace}/poddisruptionbudgets: + /apis/node.k8s.io/v1/runtimeclasses: delete: - description: delete collection of PodDisruptionBudget - operationId: deleteCollectionNamespacedPodDisruptionBudget + description: delete collection of RuntimeClass + operationId: deleteCollectionRuntimeClass parameters: - - description: "object name and auth scope, such as for teams and projects" - in: path - name: namespace - required: true - schema: - type: string - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ \ and wget)." @@ -68737,11 +69956,11 @@ paths: content: {} description: Unauthorized tags: - - policy_v1 + - node_v1 x-kubernetes-action: deletecollection x-kubernetes-group-version-kind: - group: policy - kind: PodDisruptionBudget + group: node.k8s.io + kind: RuntimeClass version: v1 x-codegen-request-body-name: body x-content-type: application/json @@ -68751,15 +69970,9 @@ paths: - application/vnd.kubernetes.protobuf - application/yaml get: - description: list or watch objects of kind PodDisruptionBudget - operationId: listNamespacedPodDisruptionBudget + description: list or watch objects of kind RuntimeClass + operationId: listRuntimeClass parameters: - - description: "object name and auth scope, such as for teams and projects" - in: path - name: namespace - required: true - schema: - type: string - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ \ and wget)." @@ -68883,35 +70096,35 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1.PodDisruptionBudgetList" + $ref: "#/components/schemas/v1.RuntimeClassList" application/yaml: schema: - $ref: "#/components/schemas/v1.PodDisruptionBudgetList" + $ref: "#/components/schemas/v1.RuntimeClassList" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1.PodDisruptionBudgetList" + $ref: "#/components/schemas/v1.RuntimeClassList" application/cbor: schema: - $ref: "#/components/schemas/v1.PodDisruptionBudgetList" + $ref: "#/components/schemas/v1.RuntimeClassList" application/json;stream=watch: schema: - $ref: "#/components/schemas/v1.PodDisruptionBudgetList" + $ref: "#/components/schemas/v1.RuntimeClassList" application/vnd.kubernetes.protobuf;stream=watch: schema: - $ref: "#/components/schemas/v1.PodDisruptionBudgetList" + $ref: "#/components/schemas/v1.RuntimeClassList" application/cbor-seq: schema: - $ref: "#/components/schemas/v1.PodDisruptionBudgetList" + $ref: "#/components/schemas/v1.RuntimeClassList" description: OK "401": content: {} description: Unauthorized tags: - - policy_v1 + - node_v1 x-kubernetes-action: list x-kubernetes-group-version-kind: - group: policy - kind: PodDisruptionBudget + group: node.k8s.io + kind: RuntimeClass version: v1 x-accepts: - application/cbor @@ -68922,15 +70135,949 @@ paths: - application/vnd.kubernetes.protobuf;stream=watch - application/yaml post: - description: create a PodDisruptionBudget - operationId: createNamespacedPodDisruptionBudget + description: create a RuntimeClass + operationId: createRuntimeClass parameters: - - description: "object name and auth scope, such as for teams and projects" - in: path - name: namespace - required: true - schema: - type: string + - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ + \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ + \ and wget)." + in: query + name: pretty + schema: + type: string + - description: "When present, indicates that modifications should not be persisted.\ + \ An invalid or unrecognized dryRun directive will result in an error response\ + \ and no further processing of the request. Valid values are: - All: all\ + \ dry run stages will be processed" + in: query + name: dryRun + schema: + type: string + - description: "fieldManager is a name associated with the actor or entity that\ + \ is making these changes. The value must be less than or 128 characters\ + \ long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." + in: query + name: fieldManager + schema: + type: string + - description: "fieldValidation instructs the server on how to handle objects\ + \ in the request (POST/PUT/PATCH) containing unknown or duplicate fields.\ + \ Valid values are: - Ignore: This will ignore any unknown fields that are\ + \ silently dropped from the object, and will ignore all but the last duplicate\ + \ field that the decoder encounters. This is the default behavior prior\ + \ to v1.23. - Warn: This will send a warning via the standard warning response\ + \ header for each unknown field that is dropped from the object, and for\ + \ each duplicate field that is encountered. The request will still succeed\ + \ if there are no other errors, and will only persist the last of any duplicate\ + \ fields. This is the default in v1.23+ - Strict: This will fail the request\ + \ with a BadRequest error if any unknown fields would be dropped from the\ + \ object, or if any duplicate fields are present. The error returned from\ + \ the server will contain all unknown and duplicate fields encountered." + in: query + name: fieldValidation + schema: + type: string + requestBody: + content: + application/json: + schema: + $ref: "#/components/schemas/v1.RuntimeClass" + required: true + responses: + "200": + content: + application/json: + schema: + $ref: "#/components/schemas/v1.RuntimeClass" + application/yaml: + schema: + $ref: "#/components/schemas/v1.RuntimeClass" + application/vnd.kubernetes.protobuf: + schema: + $ref: "#/components/schemas/v1.RuntimeClass" + application/cbor: + schema: + $ref: "#/components/schemas/v1.RuntimeClass" + description: OK + "201": + content: + application/json: + schema: + $ref: "#/components/schemas/v1.RuntimeClass" + application/yaml: + schema: + $ref: "#/components/schemas/v1.RuntimeClass" + application/vnd.kubernetes.protobuf: + schema: + $ref: "#/components/schemas/v1.RuntimeClass" + application/cbor: + schema: + $ref: "#/components/schemas/v1.RuntimeClass" + description: Created + "202": + content: + application/json: + schema: + $ref: "#/components/schemas/v1.RuntimeClass" + application/yaml: + schema: + $ref: "#/components/schemas/v1.RuntimeClass" + application/vnd.kubernetes.protobuf: + schema: + $ref: "#/components/schemas/v1.RuntimeClass" + application/cbor: + schema: + $ref: "#/components/schemas/v1.RuntimeClass" + description: Accepted + "401": + content: {} + description: Unauthorized + tags: + - node_v1 + x-kubernetes-action: post + x-kubernetes-group-version-kind: + group: node.k8s.io + kind: RuntimeClass + version: v1 + x-codegen-request-body-name: body + x-content-type: application/json + x-accepts: + - application/cbor + - application/json + - application/vnd.kubernetes.protobuf + - application/yaml + /apis/node.k8s.io/v1/runtimeclasses/{name}: + delete: + description: delete a RuntimeClass + operationId: deleteRuntimeClass + parameters: + - description: name of the RuntimeClass + in: path + name: name + required: true + schema: + type: string + - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ + \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ + \ and wget)." + in: query + name: pretty + schema: + type: string + - description: "When present, indicates that modifications should not be persisted.\ + \ An invalid or unrecognized dryRun directive will result in an error response\ + \ and no further processing of the request. Valid values are: - All: all\ + \ dry run stages will be processed" + in: query + name: dryRun + schema: + type: string + - description: "The duration in seconds before the object should be deleted.\ + \ Value must be non-negative integer. The value zero indicates delete immediately.\ + \ If this value is nil, the default grace period for the specified type\ + \ will be used. Defaults to a per object value if not specified. zero means\ + \ delete immediately." + in: query + name: gracePeriodSeconds + schema: + type: integer + - description: "if set to true, it will trigger an unsafe deletion of the resource\ + \ in case the normal deletion flow fails with a corrupt object error. A\ + \ resource is considered corrupt if it can not be retrieved from the underlying\ + \ storage successfully because of a) its data can not be transformed e.g.\ + \ decryption failure, or b) it fails to decode into an object. NOTE: unsafe\ + \ deletion ignores finalizer constraints, skips precondition checks, and\ + \ removes the object from the storage. WARNING: This may potentially break\ + \ the cluster if the workload associated with the resource being unsafe-deleted\ + \ relies on normal deletion flow. Use only if you REALLY know what you are\ + \ doing. The default value is false, and the user must opt in to enable\ + \ it" + in: query + name: ignoreStoreReadErrorWithClusterBreakingPotential + schema: + type: boolean + - description: "Deprecated: please use the PropagationPolicy, this field will\ + \ be deprecated in 1.7. Should the dependent objects be orphaned. If true/false,\ + \ the \"orphan\" finalizer will be added to/removed from the object's finalizers\ + \ list. Either this field or PropagationPolicy may be set, but not both." + in: query + name: orphanDependents + schema: + type: boolean + - description: "Whether and how garbage collection will be performed. Either\ + \ this field or OrphanDependents may be set, but not both. The default policy\ + \ is decided by the existing finalizer set in the metadata.finalizers and\ + \ the resource-specific default policy. Acceptable values are: 'Orphan'\ + \ - orphan the dependents; 'Background' - allow the garbage collector to\ + \ delete the dependents in the background; 'Foreground' - a cascading policy\ + \ that deletes all dependents in the foreground." + in: query + name: propagationPolicy + schema: + type: string + requestBody: + content: + application/json: + schema: + $ref: "#/components/schemas/v1.DeleteOptions" + required: false + responses: + "200": + content: + application/json: + schema: + $ref: "#/components/schemas/v1.Status" + application/yaml: + schema: + $ref: "#/components/schemas/v1.Status" + application/vnd.kubernetes.protobuf: + schema: + $ref: "#/components/schemas/v1.Status" + application/cbor: + schema: + $ref: "#/components/schemas/v1.Status" + description: OK + "202": + content: + application/json: + schema: + $ref: "#/components/schemas/v1.Status" + application/yaml: + schema: + $ref: "#/components/schemas/v1.Status" + application/vnd.kubernetes.protobuf: + schema: + $ref: "#/components/schemas/v1.Status" + application/cbor: + schema: + $ref: "#/components/schemas/v1.Status" + description: Accepted + "401": + content: {} + description: Unauthorized + tags: + - node_v1 + x-kubernetes-action: delete + x-kubernetes-group-version-kind: + group: node.k8s.io + kind: RuntimeClass + version: v1 + x-codegen-request-body-name: body + x-content-type: application/json + x-accepts: + - application/cbor + - application/json + - application/vnd.kubernetes.protobuf + - application/yaml + get: + description: read the specified RuntimeClass + operationId: readRuntimeClass + parameters: + - description: name of the RuntimeClass + in: path + name: name + required: true + schema: + type: string + - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ + \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ + \ and wget)." + in: query + name: pretty + schema: + type: string + responses: + "200": + content: + application/json: + schema: + $ref: "#/components/schemas/v1.RuntimeClass" + application/yaml: + schema: + $ref: "#/components/schemas/v1.RuntimeClass" + application/vnd.kubernetes.protobuf: + schema: + $ref: "#/components/schemas/v1.RuntimeClass" + application/cbor: + schema: + $ref: "#/components/schemas/v1.RuntimeClass" + description: OK + "401": + content: {} + description: Unauthorized + tags: + - node_v1 + x-kubernetes-action: get + x-kubernetes-group-version-kind: + group: node.k8s.io + kind: RuntimeClass + version: v1 + x-accepts: + - application/cbor + - application/json + - application/vnd.kubernetes.protobuf + - application/yaml + patch: + description: partially update the specified RuntimeClass + operationId: patchRuntimeClass + parameters: + - description: name of the RuntimeClass + in: path + name: name + required: true + schema: + type: string + - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ + \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ + \ and wget)." + in: query + name: pretty + schema: + type: string + - description: "When present, indicates that modifications should not be persisted.\ + \ An invalid or unrecognized dryRun directive will result in an error response\ + \ and no further processing of the request. Valid values are: - All: all\ + \ dry run stages will be processed" + in: query + name: dryRun + schema: + type: string + - description: "fieldManager is a name associated with the actor or entity that\ + \ is making these changes. The value must be less than or 128 characters\ + \ long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.\ + \ This field is required for apply requests (application/apply-patch) but\ + \ optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch)." + in: query + name: fieldManager + schema: + type: string + - description: "fieldValidation instructs the server on how to handle objects\ + \ in the request (POST/PUT/PATCH) containing unknown or duplicate fields.\ + \ Valid values are: - Ignore: This will ignore any unknown fields that are\ + \ silently dropped from the object, and will ignore all but the last duplicate\ + \ field that the decoder encounters. This is the default behavior prior\ + \ to v1.23. - Warn: This will send a warning via the standard warning response\ + \ header for each unknown field that is dropped from the object, and for\ + \ each duplicate field that is encountered. The request will still succeed\ + \ if there are no other errors, and will only persist the last of any duplicate\ + \ fields. This is the default in v1.23+ - Strict: This will fail the request\ + \ with a BadRequest error if any unknown fields would be dropped from the\ + \ object, or if any duplicate fields are present. The error returned from\ + \ the server will contain all unknown and duplicate fields encountered." + in: query + name: fieldValidation + schema: + type: string + - description: Force is going to "force" Apply requests. It means user will + re-acquire conflicting fields owned by other people. Force flag must be + unset for non-apply patch requests. + in: query + name: force + schema: + type: boolean + requestBody: + content: + application/json: + schema: + $ref: "#/components/schemas/v1.Patch" + required: true + responses: + "200": + content: + application/json: + schema: + $ref: "#/components/schemas/v1.RuntimeClass" + application/yaml: + schema: + $ref: "#/components/schemas/v1.RuntimeClass" + application/vnd.kubernetes.protobuf: + schema: + $ref: "#/components/schemas/v1.RuntimeClass" + application/cbor: + schema: + $ref: "#/components/schemas/v1.RuntimeClass" + description: OK + "201": + content: + application/json: + schema: + $ref: "#/components/schemas/v1.RuntimeClass" + application/yaml: + schema: + $ref: "#/components/schemas/v1.RuntimeClass" + application/vnd.kubernetes.protobuf: + schema: + $ref: "#/components/schemas/v1.RuntimeClass" + application/cbor: + schema: + $ref: "#/components/schemas/v1.RuntimeClass" + description: Created + "401": + content: {} + description: Unauthorized + tags: + - node_v1 + x-kubernetes-action: patch + x-kubernetes-group-version-kind: + group: node.k8s.io + kind: RuntimeClass + version: v1 + x-codegen-request-body-name: body + x-content-type: application/json + x-accepts: + - application/cbor + - application/json + - application/vnd.kubernetes.protobuf + - application/yaml + put: + description: replace the specified RuntimeClass + operationId: replaceRuntimeClass + parameters: + - description: name of the RuntimeClass + in: path + name: name + required: true + schema: + type: string + - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ + \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ + \ and wget)." + in: query + name: pretty + schema: + type: string + - description: "When present, indicates that modifications should not be persisted.\ + \ An invalid or unrecognized dryRun directive will result in an error response\ + \ and no further processing of the request. Valid values are: - All: all\ + \ dry run stages will be processed" + in: query + name: dryRun + schema: + type: string + - description: "fieldManager is a name associated with the actor or entity that\ + \ is making these changes. The value must be less than or 128 characters\ + \ long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." + in: query + name: fieldManager + schema: + type: string + - description: "fieldValidation instructs the server on how to handle objects\ + \ in the request (POST/PUT/PATCH) containing unknown or duplicate fields.\ + \ Valid values are: - Ignore: This will ignore any unknown fields that are\ + \ silently dropped from the object, and will ignore all but the last duplicate\ + \ field that the decoder encounters. This is the default behavior prior\ + \ to v1.23. - Warn: This will send a warning via the standard warning response\ + \ header for each unknown field that is dropped from the object, and for\ + \ each duplicate field that is encountered. The request will still succeed\ + \ if there are no other errors, and will only persist the last of any duplicate\ + \ fields. This is the default in v1.23+ - Strict: This will fail the request\ + \ with a BadRequest error if any unknown fields would be dropped from the\ + \ object, or if any duplicate fields are present. The error returned from\ + \ the server will contain all unknown and duplicate fields encountered." + in: query + name: fieldValidation + schema: + type: string + requestBody: + content: + application/json: + schema: + $ref: "#/components/schemas/v1.RuntimeClass" + required: true + responses: + "200": + content: + application/json: + schema: + $ref: "#/components/schemas/v1.RuntimeClass" + application/yaml: + schema: + $ref: "#/components/schemas/v1.RuntimeClass" + application/vnd.kubernetes.protobuf: + schema: + $ref: "#/components/schemas/v1.RuntimeClass" + application/cbor: + schema: + $ref: "#/components/schemas/v1.RuntimeClass" + description: OK + "201": + content: + application/json: + schema: + $ref: "#/components/schemas/v1.RuntimeClass" + application/yaml: + schema: + $ref: "#/components/schemas/v1.RuntimeClass" + application/vnd.kubernetes.protobuf: + schema: + $ref: "#/components/schemas/v1.RuntimeClass" + application/cbor: + schema: + $ref: "#/components/schemas/v1.RuntimeClass" + description: Created + "401": + content: {} + description: Unauthorized + tags: + - node_v1 + x-kubernetes-action: put + x-kubernetes-group-version-kind: + group: node.k8s.io + kind: RuntimeClass + version: v1 + x-codegen-request-body-name: body + x-content-type: application/json + x-accepts: + - application/cbor + - application/json + - application/vnd.kubernetes.protobuf + - application/yaml + /apis/node.k8s.io/v1/watch/runtimeclasses: {} + /apis/node.k8s.io/v1/watch/runtimeclasses/{name}: {} + /apis/policy/: + get: + description: get information of a group + operationId: getAPIGroup + responses: + "200": + content: + application/json: + schema: + $ref: "#/components/schemas/v1.APIGroup" + application/yaml: + schema: + $ref: "#/components/schemas/v1.APIGroup" + application/vnd.kubernetes.protobuf: + schema: + $ref: "#/components/schemas/v1.APIGroup" + application/cbor: + schema: + $ref: "#/components/schemas/v1.APIGroup" + description: OK + "401": + content: {} + description: Unauthorized + tags: + - policy + x-accepts: + - application/cbor + - application/json + - application/vnd.kubernetes.protobuf + - application/yaml + /apis/policy/v1/: + get: + description: get available resources + operationId: getAPIResources + responses: + "200": + content: + application/json: + schema: + $ref: "#/components/schemas/v1.APIResourceList" + application/yaml: + schema: + $ref: "#/components/schemas/v1.APIResourceList" + application/vnd.kubernetes.protobuf: + schema: + $ref: "#/components/schemas/v1.APIResourceList" + application/cbor: + schema: + $ref: "#/components/schemas/v1.APIResourceList" + description: OK + "401": + content: {} + description: Unauthorized + tags: + - policy_v1 + x-accepts: + - application/cbor + - application/json + - application/vnd.kubernetes.protobuf + - application/yaml + /apis/policy/v1/namespaces/{namespace}/poddisruptionbudgets: + delete: + description: delete collection of PodDisruptionBudget + operationId: deleteCollectionNamespacedPodDisruptionBudget + parameters: + - description: "object name and auth scope, such as for teams and projects" + in: path + name: namespace + required: true + schema: + type: string + - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ + \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ + \ and wget)." + in: query + name: pretty + schema: + type: string + - description: |- + The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + + This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications. + in: query + name: continue + schema: + type: string + - description: "When present, indicates that modifications should not be persisted.\ + \ An invalid or unrecognized dryRun directive will result in an error response\ + \ and no further processing of the request. Valid values are: - All: all\ + \ dry run stages will be processed" + in: query + name: dryRun + schema: + type: string + - description: A selector to restrict the list of returned objects by their + fields. Defaults to everything. + in: query + name: fieldSelector + schema: + type: string + - description: "The duration in seconds before the object should be deleted.\ + \ Value must be non-negative integer. The value zero indicates delete immediately.\ + \ If this value is nil, the default grace period for the specified type\ + \ will be used. Defaults to a per object value if not specified. zero means\ + \ delete immediately." + in: query + name: gracePeriodSeconds + schema: + type: integer + - description: "if set to true, it will trigger an unsafe deletion of the resource\ + \ in case the normal deletion flow fails with a corrupt object error. A\ + \ resource is considered corrupt if it can not be retrieved from the underlying\ + \ storage successfully because of a) its data can not be transformed e.g.\ + \ decryption failure, or b) it fails to decode into an object. NOTE: unsafe\ + \ deletion ignores finalizer constraints, skips precondition checks, and\ + \ removes the object from the storage. WARNING: This may potentially break\ + \ the cluster if the workload associated with the resource being unsafe-deleted\ + \ relies on normal deletion flow. Use only if you REALLY know what you are\ + \ doing. The default value is false, and the user must opt in to enable\ + \ it" + in: query + name: ignoreStoreReadErrorWithClusterBreakingPotential + schema: + type: boolean + - description: A selector to restrict the list of returned objects by their + labels. Defaults to everything. + in: query + name: labelSelector + schema: + type: string + - description: |- + limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + + The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned. + in: query + name: limit + schema: + type: integer + - description: "Deprecated: please use the PropagationPolicy, this field will\ + \ be deprecated in 1.7. Should the dependent objects be orphaned. If true/false,\ + \ the \"orphan\" finalizer will be added to/removed from the object's finalizers\ + \ list. Either this field or PropagationPolicy may be set, but not both." + in: query + name: orphanDependents + schema: + type: boolean + - description: "Whether and how garbage collection will be performed. Either\ + \ this field or OrphanDependents may be set, but not both. The default policy\ + \ is decided by the existing finalizer set in the metadata.finalizers and\ + \ the resource-specific default policy. Acceptable values are: 'Orphan'\ + \ - orphan the dependents; 'Background' - allow the garbage collector to\ + \ delete the dependents in the background; 'Foreground' - a cascading policy\ + \ that deletes all dependents in the foreground." + in: query + name: propagationPolicy + schema: + type: string + - description: |- + resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + + Defaults to unset + in: query + name: resourceVersion + schema: + type: string + - description: |- + resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + + Defaults to unset + in: query + name: resourceVersionMatch + schema: + type: string + - description: |- + `sendInitialEvents=true` may be set together with `watch=true`. In that case, the watch stream will begin with synthetic events to produce the current state of objects in the collection. Once all such events have been sent, a synthetic "Bookmark" event will be sent. The bookmark will report the ResourceVersion (RV) corresponding to the set of objects, and be marked with `"k8s.io/initial-events-end": "true"` annotation. Afterwards, the watch stream will proceed as usual, sending watch events corresponding to changes (subsequent to the RV) to objects watched. + + When `sendInitialEvents` option is set, we require `resourceVersionMatch` option to also be set. The semantic of the watch request is as following: - `resourceVersionMatch` = NotOlderThan + is interpreted as "data at least as new as the provided `resourceVersion`" + and the bookmark event is send when the state is synced + to a `resourceVersion` at least as fresh as the one provided by the ListOptions. + If `resourceVersion` is unset, this is interpreted as "consistent read" and the + bookmark event is send when the state is synced at least to the moment + when request started being processed. + - `resourceVersionMatch` set to any other value or unset + Invalid error is returned. + + Defaults to true if `resourceVersion=""` or `resourceVersion="0"` (for backward compatibility reasons) and to false otherwise. + in: query + name: sendInitialEvents + schema: + type: boolean + - description: |- + shardSelector restricts the list of returned objects using a CEL-based shard selector expression. The format uses the shardRange() function combined with || (logical OR) to specify one or more hash ranges: + + shardRange(object.metadata.uid, '0x0', '0x8000000000000000') + shardRange(object.metadata.uid, '0x0', '0x8000000000000000') || shardRange(object.metadata.uid, '0x8000000000000000', '0x10000000000000000') + + Field paths use CEL-style object-rooted syntax (e.g. "object.metadata.uid"), NOT the fieldSelector format ("metadata.uid"). Currently supported paths: + - object.metadata.uid + - object.metadata.namespace + + hexStart and hexEnd are single-quoted CEL string literals with a '0x' prefix, defining the inclusive lower and exclusive upper bounds over the 64-bit FNV-1a hash space. The full range is [0x0, 0x10000000000000000), where the exclusive upper bound equals 2^64. + + Examples: + 2-shard split: + shard 0: shardRange(object.metadata.uid, '0x0000000000000000', '0x8000000000000000') + shard 1: shardRange(object.metadata.uid, '0x8000000000000000', '0x10000000000000000') + 4-shard split: + shard 0: shardRange(object.metadata.uid, '0x0000000000000000', '0x4000000000000000') + shard 1: shardRange(object.metadata.uid, '0x4000000000000000', '0x8000000000000000') + shard 2: shardRange(object.metadata.uid, '0x8000000000000000', '0xc000000000000000') + shard 3: shardRange(object.metadata.uid, '0xc000000000000000', '0x10000000000000000') + + This is an alpha field and requires enabling the ShardedListAndWatch feature gate. + in: query + name: shardSelector + schema: + type: string + - description: "Timeout for the list/watch call. This limits the duration of\ + \ the call, regardless of any activity or inactivity." + in: query + name: timeoutSeconds + schema: + type: integer + requestBody: + content: + application/json: + schema: + $ref: "#/components/schemas/v1.DeleteOptions" + required: false + responses: + "200": + content: + application/json: + schema: + $ref: "#/components/schemas/v1.Status" + application/yaml: + schema: + $ref: "#/components/schemas/v1.Status" + application/vnd.kubernetes.protobuf: + schema: + $ref: "#/components/schemas/v1.Status" + application/cbor: + schema: + $ref: "#/components/schemas/v1.Status" + description: OK + "401": + content: {} + description: Unauthorized + tags: + - policy_v1 + x-kubernetes-action: deletecollection + x-kubernetes-group-version-kind: + group: policy + kind: PodDisruptionBudget + version: v1 + x-codegen-request-body-name: body + x-content-type: application/json + x-accepts: + - application/cbor + - application/json + - application/vnd.kubernetes.protobuf + - application/yaml + get: + description: list or watch objects of kind PodDisruptionBudget + operationId: listNamespacedPodDisruptionBudget + parameters: + - description: "object name and auth scope, such as for teams and projects" + in: path + name: namespace + required: true + schema: + type: string + - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ + \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ + \ and wget)." + in: query + name: pretty + schema: + type: string + - description: "allowWatchBookmarks requests watch events with type \"BOOKMARK\"\ + . Servers that do not implement bookmarks may ignore this flag and bookmarks\ + \ are sent at the server's discretion. Clients should not assume bookmarks\ + \ are returned at any specific interval, nor may they assume the server\ + \ will send any BOOKMARK event during a session. If this is not a watch,\ + \ this field is ignored." + in: query + name: allowWatchBookmarks + schema: + type: boolean + - description: |- + The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + + This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications. + in: query + name: continue + schema: + type: string + - description: A selector to restrict the list of returned objects by their + fields. Defaults to everything. + in: query + name: fieldSelector + schema: + type: string + - description: A selector to restrict the list of returned objects by their + labels. Defaults to everything. + in: query + name: labelSelector + schema: + type: string + - description: |- + limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + + The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned. + in: query + name: limit + schema: + type: integer + - description: |- + resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + + Defaults to unset + in: query + name: resourceVersion + schema: + type: string + - description: |- + resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + + Defaults to unset + in: query + name: resourceVersionMatch + schema: + type: string + - description: |- + `sendInitialEvents=true` may be set together with `watch=true`. In that case, the watch stream will begin with synthetic events to produce the current state of objects in the collection. Once all such events have been sent, a synthetic "Bookmark" event will be sent. The bookmark will report the ResourceVersion (RV) corresponding to the set of objects, and be marked with `"k8s.io/initial-events-end": "true"` annotation. Afterwards, the watch stream will proceed as usual, sending watch events corresponding to changes (subsequent to the RV) to objects watched. + + When `sendInitialEvents` option is set, we require `resourceVersionMatch` option to also be set. The semantic of the watch request is as following: - `resourceVersionMatch` = NotOlderThan + is interpreted as "data at least as new as the provided `resourceVersion`" + and the bookmark event is send when the state is synced + to a `resourceVersion` at least as fresh as the one provided by the ListOptions. + If `resourceVersion` is unset, this is interpreted as "consistent read" and the + bookmark event is send when the state is synced at least to the moment + when request started being processed. + - `resourceVersionMatch` set to any other value or unset + Invalid error is returned. + + Defaults to true if `resourceVersion=""` or `resourceVersion="0"` (for backward compatibility reasons) and to false otherwise. + in: query + name: sendInitialEvents + schema: + type: boolean + - description: |- + shardSelector restricts the list of returned objects using a CEL-based shard selector expression. The format uses the shardRange() function combined with || (logical OR) to specify one or more hash ranges: + + shardRange(object.metadata.uid, '0x0', '0x8000000000000000') + shardRange(object.metadata.uid, '0x0', '0x8000000000000000') || shardRange(object.metadata.uid, '0x8000000000000000', '0x10000000000000000') + + Field paths use CEL-style object-rooted syntax (e.g. "object.metadata.uid"), NOT the fieldSelector format ("metadata.uid"). Currently supported paths: + - object.metadata.uid + - object.metadata.namespace + + hexStart and hexEnd are single-quoted CEL string literals with a '0x' prefix, defining the inclusive lower and exclusive upper bounds over the 64-bit FNV-1a hash space. The full range is [0x0, 0x10000000000000000), where the exclusive upper bound equals 2^64. + + Examples: + 2-shard split: + shard 0: shardRange(object.metadata.uid, '0x0000000000000000', '0x8000000000000000') + shard 1: shardRange(object.metadata.uid, '0x8000000000000000', '0x10000000000000000') + 4-shard split: + shard 0: shardRange(object.metadata.uid, '0x0000000000000000', '0x4000000000000000') + shard 1: shardRange(object.metadata.uid, '0x4000000000000000', '0x8000000000000000') + shard 2: shardRange(object.metadata.uid, '0x8000000000000000', '0xc000000000000000') + shard 3: shardRange(object.metadata.uid, '0xc000000000000000', '0x10000000000000000') + + This is an alpha field and requires enabling the ShardedListAndWatch feature gate. + in: query + name: shardSelector + schema: + type: string + - description: "Timeout for the list/watch call. This limits the duration of\ + \ the call, regardless of any activity or inactivity." + in: query + name: timeoutSeconds + schema: + type: integer + - description: "Watch for changes to the described resources and return them\ + \ as a stream of add, update, and remove notifications. Specify resourceVersion." + in: query + name: watch + schema: + type: boolean + responses: + "200": + content: + application/json: + schema: + $ref: "#/components/schemas/v1.PodDisruptionBudgetList" + application/yaml: + schema: + $ref: "#/components/schemas/v1.PodDisruptionBudgetList" + application/vnd.kubernetes.protobuf: + schema: + $ref: "#/components/schemas/v1.PodDisruptionBudgetList" + application/cbor: + schema: + $ref: "#/components/schemas/v1.PodDisruptionBudgetList" + application/json;stream=watch: + schema: + $ref: "#/components/schemas/v1.PodDisruptionBudgetList" + application/vnd.kubernetes.protobuf;stream=watch: + schema: + $ref: "#/components/schemas/v1.PodDisruptionBudgetList" + application/cbor-seq: + schema: + $ref: "#/components/schemas/v1.PodDisruptionBudgetList" + description: OK + "401": + content: {} + description: Unauthorized + tags: + - policy_v1 + x-kubernetes-action: list + x-kubernetes-group-version-kind: + group: policy + kind: PodDisruptionBudget + version: v1 + x-accepts: + - application/cbor + - application/cbor-seq + - application/json + - application/json;stream=watch + - application/vnd.kubernetes.protobuf + - application/vnd.kubernetes.protobuf;stream=watch + - application/yaml + post: + description: create a PodDisruptionBudget + operationId: createNamespacedPodDisruptionBudget + parameters: + - description: "object name and auth scope, such as for teams and projects" + in: path + name: namespace + required: true + schema: + type: string - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ \ and wget)." @@ -69916,6 +72063,9 @@ paths: application/vnd.kubernetes.protobuf: schema: $ref: "#/components/schemas/v1.APIGroup" + application/cbor: + schema: + $ref: "#/components/schemas/v1.APIGroup" description: OK "401": content: {} @@ -69923,6 +72073,7 @@ paths: tags: - rbacAuthorization x-accepts: + - application/cbor - application/json - application/vnd.kubernetes.protobuf - application/yaml @@ -73838,6 +75989,9 @@ paths: application/vnd.kubernetes.protobuf: schema: $ref: "#/components/schemas/v1.APIGroup" + application/cbor: + schema: + $ref: "#/components/schemas/v1.APIGroup" description: OK "401": content: {} @@ -73845,6 +75999,7 @@ paths: tags: - resource x-accepts: + - application/cbor - application/json - application/vnd.kubernetes.protobuf - application/yaml @@ -74738,17 +76893,11 @@ paths: - application/json - application/vnd.kubernetes.protobuf - application/yaml - /apis/resource.k8s.io/v1/namespaces/{namespace}/resourceclaims: + /apis/resource.k8s.io/v1/devicetaintrules: delete: - description: delete collection of ResourceClaim - operationId: deleteCollectionNamespacedResourceClaim + description: delete collection of DeviceTaintRule + operationId: deleteCollectionDeviceTaintRule parameters: - - description: "object name and auth scope, such as for teams and projects" - in: path - name: namespace - required: true - schema: - type: string - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ \ and wget)." @@ -74932,7 +77081,7 @@ paths: x-kubernetes-action: deletecollection x-kubernetes-group-version-kind: group: resource.k8s.io - kind: ResourceClaim + kind: DeviceTaintRule version: v1 x-codegen-request-body-name: body x-content-type: application/json @@ -74942,15 +77091,9 @@ paths: - application/vnd.kubernetes.protobuf - application/yaml get: - description: list or watch objects of kind ResourceClaim - operationId: listNamespacedResourceClaim + description: list or watch objects of kind DeviceTaintRule + operationId: listDeviceTaintRule parameters: - - description: "object name and auth scope, such as for teams and projects" - in: path - name: namespace - required: true - schema: - type: string - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ \ and wget)." @@ -75074,25 +77217,25 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1.ResourceClaimList" + $ref: "#/components/schemas/v1.DeviceTaintRuleList" application/yaml: schema: - $ref: "#/components/schemas/v1.ResourceClaimList" + $ref: "#/components/schemas/v1.DeviceTaintRuleList" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1.ResourceClaimList" + $ref: "#/components/schemas/v1.DeviceTaintRuleList" application/cbor: schema: - $ref: "#/components/schemas/v1.ResourceClaimList" + $ref: "#/components/schemas/v1.DeviceTaintRuleList" application/json;stream=watch: schema: - $ref: "#/components/schemas/v1.ResourceClaimList" + $ref: "#/components/schemas/v1.DeviceTaintRuleList" application/vnd.kubernetes.protobuf;stream=watch: schema: - $ref: "#/components/schemas/v1.ResourceClaimList" + $ref: "#/components/schemas/v1.DeviceTaintRuleList" application/cbor-seq: schema: - $ref: "#/components/schemas/v1.ResourceClaimList" + $ref: "#/components/schemas/v1.DeviceTaintRuleList" description: OK "401": content: {} @@ -75102,7 +77245,7 @@ paths: x-kubernetes-action: list x-kubernetes-group-version-kind: group: resource.k8s.io - kind: ResourceClaim + kind: DeviceTaintRule version: v1 x-accepts: - application/cbor @@ -75113,15 +77256,9 @@ paths: - application/vnd.kubernetes.protobuf;stream=watch - application/yaml post: - description: create a ResourceClaim - operationId: createNamespacedResourceClaim + description: create a DeviceTaintRule + operationId: createDeviceTaintRule parameters: - - description: "object name and auth scope, such as for teams and projects" - in: path - name: namespace - required: true - schema: - type: string - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ \ and wget)." @@ -75165,53 +77302,53 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/resource.v1.ResourceClaim" + $ref: "#/components/schemas/v1.DeviceTaintRule" required: true responses: "200": content: application/json: schema: - $ref: "#/components/schemas/resource.v1.ResourceClaim" + $ref: "#/components/schemas/v1.DeviceTaintRule" application/yaml: schema: - $ref: "#/components/schemas/resource.v1.ResourceClaim" + $ref: "#/components/schemas/v1.DeviceTaintRule" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/resource.v1.ResourceClaim" + $ref: "#/components/schemas/v1.DeviceTaintRule" application/cbor: schema: - $ref: "#/components/schemas/resource.v1.ResourceClaim" + $ref: "#/components/schemas/v1.DeviceTaintRule" description: OK "201": content: application/json: schema: - $ref: "#/components/schemas/resource.v1.ResourceClaim" + $ref: "#/components/schemas/v1.DeviceTaintRule" application/yaml: schema: - $ref: "#/components/schemas/resource.v1.ResourceClaim" + $ref: "#/components/schemas/v1.DeviceTaintRule" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/resource.v1.ResourceClaim" + $ref: "#/components/schemas/v1.DeviceTaintRule" application/cbor: schema: - $ref: "#/components/schemas/resource.v1.ResourceClaim" + $ref: "#/components/schemas/v1.DeviceTaintRule" description: Created "202": content: application/json: schema: - $ref: "#/components/schemas/resource.v1.ResourceClaim" + $ref: "#/components/schemas/v1.DeviceTaintRule" application/yaml: schema: - $ref: "#/components/schemas/resource.v1.ResourceClaim" + $ref: "#/components/schemas/v1.DeviceTaintRule" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/resource.v1.ResourceClaim" + $ref: "#/components/schemas/v1.DeviceTaintRule" application/cbor: schema: - $ref: "#/components/schemas/resource.v1.ResourceClaim" + $ref: "#/components/schemas/v1.DeviceTaintRule" description: Accepted "401": content: {} @@ -75221,7 +77358,7 @@ paths: x-kubernetes-action: post x-kubernetes-group-version-kind: group: resource.k8s.io - kind: ResourceClaim + kind: DeviceTaintRule version: v1 x-codegen-request-body-name: body x-content-type: application/json @@ -75230,23 +77367,17 @@ paths: - application/json - application/vnd.kubernetes.protobuf - application/yaml - /apis/resource.k8s.io/v1/namespaces/{namespace}/resourceclaims/{name}: + /apis/resource.k8s.io/v1/devicetaintrules/{name}: delete: - description: delete a ResourceClaim - operationId: deleteNamespacedResourceClaim + description: delete a DeviceTaintRule + operationId: deleteDeviceTaintRule parameters: - - description: name of the ResourceClaim + - description: name of the DeviceTaintRule in: path name: name required: true schema: type: string - - description: "object name and auth scope, such as for teams and projects" - in: path - name: namespace - required: true - schema: - type: string - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ \ and wget)." @@ -75316,31 +77447,31 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/resource.v1.ResourceClaim" + $ref: "#/components/schemas/v1.Status" application/yaml: schema: - $ref: "#/components/schemas/resource.v1.ResourceClaim" + $ref: "#/components/schemas/v1.Status" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/resource.v1.ResourceClaim" + $ref: "#/components/schemas/v1.Status" application/cbor: schema: - $ref: "#/components/schemas/resource.v1.ResourceClaim" + $ref: "#/components/schemas/v1.Status" description: OK "202": content: application/json: schema: - $ref: "#/components/schemas/resource.v1.ResourceClaim" + $ref: "#/components/schemas/v1.Status" application/yaml: schema: - $ref: "#/components/schemas/resource.v1.ResourceClaim" + $ref: "#/components/schemas/v1.Status" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/resource.v1.ResourceClaim" + $ref: "#/components/schemas/v1.Status" application/cbor: schema: - $ref: "#/components/schemas/resource.v1.ResourceClaim" + $ref: "#/components/schemas/v1.Status" description: Accepted "401": content: {} @@ -75350,7 +77481,7 @@ paths: x-kubernetes-action: delete x-kubernetes-group-version-kind: group: resource.k8s.io - kind: ResourceClaim + kind: DeviceTaintRule version: v1 x-codegen-request-body-name: body x-content-type: application/json @@ -75360,21 +77491,15 @@ paths: - application/vnd.kubernetes.protobuf - application/yaml get: - description: read the specified ResourceClaim - operationId: readNamespacedResourceClaim + description: read the specified DeviceTaintRule + operationId: readDeviceTaintRule parameters: - - description: name of the ResourceClaim + - description: name of the DeviceTaintRule in: path name: name required: true schema: type: string - - description: "object name and auth scope, such as for teams and projects" - in: path - name: namespace - required: true - schema: - type: string - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ \ and wget)." @@ -75387,16 +77512,16 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/resource.v1.ResourceClaim" + $ref: "#/components/schemas/v1.DeviceTaintRule" application/yaml: schema: - $ref: "#/components/schemas/resource.v1.ResourceClaim" + $ref: "#/components/schemas/v1.DeviceTaintRule" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/resource.v1.ResourceClaim" + $ref: "#/components/schemas/v1.DeviceTaintRule" application/cbor: schema: - $ref: "#/components/schemas/resource.v1.ResourceClaim" + $ref: "#/components/schemas/v1.DeviceTaintRule" description: OK "401": content: {} @@ -75406,7 +77531,7 @@ paths: x-kubernetes-action: get x-kubernetes-group-version-kind: group: resource.k8s.io - kind: ResourceClaim + kind: DeviceTaintRule version: v1 x-accepts: - application/cbor @@ -75414,21 +77539,15 @@ paths: - application/vnd.kubernetes.protobuf - application/yaml patch: - description: partially update the specified ResourceClaim - operationId: patchNamespacedResourceClaim + description: partially update the specified DeviceTaintRule + operationId: patchDeviceTaintRule parameters: - - description: name of the ResourceClaim + - description: name of the DeviceTaintRule in: path name: name required: true schema: type: string - - description: "object name and auth scope, such as for teams and projects" - in: path - name: namespace - required: true - schema: - type: string - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ \ and wget)." @@ -75488,31 +77607,31 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/resource.v1.ResourceClaim" + $ref: "#/components/schemas/v1.DeviceTaintRule" application/yaml: schema: - $ref: "#/components/schemas/resource.v1.ResourceClaim" + $ref: "#/components/schemas/v1.DeviceTaintRule" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/resource.v1.ResourceClaim" + $ref: "#/components/schemas/v1.DeviceTaintRule" application/cbor: schema: - $ref: "#/components/schemas/resource.v1.ResourceClaim" + $ref: "#/components/schemas/v1.DeviceTaintRule" description: OK "201": content: application/json: schema: - $ref: "#/components/schemas/resource.v1.ResourceClaim" + $ref: "#/components/schemas/v1.DeviceTaintRule" application/yaml: schema: - $ref: "#/components/schemas/resource.v1.ResourceClaim" + $ref: "#/components/schemas/v1.DeviceTaintRule" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/resource.v1.ResourceClaim" + $ref: "#/components/schemas/v1.DeviceTaintRule" application/cbor: schema: - $ref: "#/components/schemas/resource.v1.ResourceClaim" + $ref: "#/components/schemas/v1.DeviceTaintRule" description: Created "401": content: {} @@ -75522,7 +77641,7 @@ paths: x-kubernetes-action: patch x-kubernetes-group-version-kind: group: resource.k8s.io - kind: ResourceClaim + kind: DeviceTaintRule version: v1 x-codegen-request-body-name: body x-content-type: application/json @@ -75532,18 +77651,164 @@ paths: - application/vnd.kubernetes.protobuf - application/yaml put: - description: replace the specified ResourceClaim - operationId: replaceNamespacedResourceClaim + description: replace the specified DeviceTaintRule + operationId: replaceDeviceTaintRule parameters: - - description: name of the ResourceClaim + - description: name of the DeviceTaintRule in: path name: name required: true schema: type: string - - description: "object name and auth scope, such as for teams and projects" + - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ + \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ + \ and wget)." + in: query + name: pretty + schema: + type: string + - description: "When present, indicates that modifications should not be persisted.\ + \ An invalid or unrecognized dryRun directive will result in an error response\ + \ and no further processing of the request. Valid values are: - All: all\ + \ dry run stages will be processed" + in: query + name: dryRun + schema: + type: string + - description: "fieldManager is a name associated with the actor or entity that\ + \ is making these changes. The value must be less than or 128 characters\ + \ long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." + in: query + name: fieldManager + schema: + type: string + - description: "fieldValidation instructs the server on how to handle objects\ + \ in the request (POST/PUT/PATCH) containing unknown or duplicate fields.\ + \ Valid values are: - Ignore: This will ignore any unknown fields that are\ + \ silently dropped from the object, and will ignore all but the last duplicate\ + \ field that the decoder encounters. This is the default behavior prior\ + \ to v1.23. - Warn: This will send a warning via the standard warning response\ + \ header for each unknown field that is dropped from the object, and for\ + \ each duplicate field that is encountered. The request will still succeed\ + \ if there are no other errors, and will only persist the last of any duplicate\ + \ fields. This is the default in v1.23+ - Strict: This will fail the request\ + \ with a BadRequest error if any unknown fields would be dropped from the\ + \ object, or if any duplicate fields are present. The error returned from\ + \ the server will contain all unknown and duplicate fields encountered." + in: query + name: fieldValidation + schema: + type: string + requestBody: + content: + application/json: + schema: + $ref: "#/components/schemas/v1.DeviceTaintRule" + required: true + responses: + "200": + content: + application/json: + schema: + $ref: "#/components/schemas/v1.DeviceTaintRule" + application/yaml: + schema: + $ref: "#/components/schemas/v1.DeviceTaintRule" + application/vnd.kubernetes.protobuf: + schema: + $ref: "#/components/schemas/v1.DeviceTaintRule" + application/cbor: + schema: + $ref: "#/components/schemas/v1.DeviceTaintRule" + description: OK + "201": + content: + application/json: + schema: + $ref: "#/components/schemas/v1.DeviceTaintRule" + application/yaml: + schema: + $ref: "#/components/schemas/v1.DeviceTaintRule" + application/vnd.kubernetes.protobuf: + schema: + $ref: "#/components/schemas/v1.DeviceTaintRule" + application/cbor: + schema: + $ref: "#/components/schemas/v1.DeviceTaintRule" + description: Created + "401": + content: {} + description: Unauthorized + tags: + - resource_v1 + x-kubernetes-action: put + x-kubernetes-group-version-kind: + group: resource.k8s.io + kind: DeviceTaintRule + version: v1 + x-codegen-request-body-name: body + x-content-type: application/json + x-accepts: + - application/cbor + - application/json + - application/vnd.kubernetes.protobuf + - application/yaml + /apis/resource.k8s.io/v1/devicetaintrules/{name}/status: + get: + description: read status of the specified DeviceTaintRule + operationId: readDeviceTaintRuleStatus + parameters: + - description: name of the DeviceTaintRule in: path - name: namespace + name: name + required: true + schema: + type: string + - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ + \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ + \ and wget)." + in: query + name: pretty + schema: + type: string + responses: + "200": + content: + application/json: + schema: + $ref: "#/components/schemas/v1.DeviceTaintRule" + application/yaml: + schema: + $ref: "#/components/schemas/v1.DeviceTaintRule" + application/vnd.kubernetes.protobuf: + schema: + $ref: "#/components/schemas/v1.DeviceTaintRule" + application/cbor: + schema: + $ref: "#/components/schemas/v1.DeviceTaintRule" + description: OK + "401": + content: {} + description: Unauthorized + tags: + - resource_v1 + x-kubernetes-action: get + x-kubernetes-group-version-kind: + group: resource.k8s.io + kind: DeviceTaintRule + version: v1 + x-accepts: + - application/cbor + - application/json + - application/vnd.kubernetes.protobuf + - application/yaml + patch: + description: partially update status of the specified DeviceTaintRule + operationId: patchDeviceTaintRuleStatus + parameters: + - description: name of the DeviceTaintRule + in: path + name: name required: true schema: type: string @@ -75564,173 +77829,9 @@ paths: type: string - description: "fieldManager is a name associated with the actor or entity that\ \ is making these changes. The value must be less than or 128 characters\ - \ long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." - in: query - name: fieldManager - schema: - type: string - - description: "fieldValidation instructs the server on how to handle objects\ - \ in the request (POST/PUT/PATCH) containing unknown or duplicate fields.\ - \ Valid values are: - Ignore: This will ignore any unknown fields that are\ - \ silently dropped from the object, and will ignore all but the last duplicate\ - \ field that the decoder encounters. This is the default behavior prior\ - \ to v1.23. - Warn: This will send a warning via the standard warning response\ - \ header for each unknown field that is dropped from the object, and for\ - \ each duplicate field that is encountered. The request will still succeed\ - \ if there are no other errors, and will only persist the last of any duplicate\ - \ fields. This is the default in v1.23+ - Strict: This will fail the request\ - \ with a BadRequest error if any unknown fields would be dropped from the\ - \ object, or if any duplicate fields are present. The error returned from\ - \ the server will contain all unknown and duplicate fields encountered." - in: query - name: fieldValidation - schema: - type: string - requestBody: - content: - application/json: - schema: - $ref: "#/components/schemas/resource.v1.ResourceClaim" - required: true - responses: - "200": - content: - application/json: - schema: - $ref: "#/components/schemas/resource.v1.ResourceClaim" - application/yaml: - schema: - $ref: "#/components/schemas/resource.v1.ResourceClaim" - application/vnd.kubernetes.protobuf: - schema: - $ref: "#/components/schemas/resource.v1.ResourceClaim" - application/cbor: - schema: - $ref: "#/components/schemas/resource.v1.ResourceClaim" - description: OK - "201": - content: - application/json: - schema: - $ref: "#/components/schemas/resource.v1.ResourceClaim" - application/yaml: - schema: - $ref: "#/components/schemas/resource.v1.ResourceClaim" - application/vnd.kubernetes.protobuf: - schema: - $ref: "#/components/schemas/resource.v1.ResourceClaim" - application/cbor: - schema: - $ref: "#/components/schemas/resource.v1.ResourceClaim" - description: Created - "401": - content: {} - description: Unauthorized - tags: - - resource_v1 - x-kubernetes-action: put - x-kubernetes-group-version-kind: - group: resource.k8s.io - kind: ResourceClaim - version: v1 - x-codegen-request-body-name: body - x-content-type: application/json - x-accepts: - - application/cbor - - application/json - - application/vnd.kubernetes.protobuf - - application/yaml - /apis/resource.k8s.io/v1/namespaces/{namespace}/resourceclaims/{name}/status: - get: - description: read status of the specified ResourceClaim - operationId: readNamespacedResourceClaimStatus - parameters: - - description: name of the ResourceClaim - in: path - name: name - required: true - schema: - type: string - - description: "object name and auth scope, such as for teams and projects" - in: path - name: namespace - required: true - schema: - type: string - - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ - \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ - \ and wget)." - in: query - name: pretty - schema: - type: string - responses: - "200": - content: - application/json: - schema: - $ref: "#/components/schemas/resource.v1.ResourceClaim" - application/yaml: - schema: - $ref: "#/components/schemas/resource.v1.ResourceClaim" - application/vnd.kubernetes.protobuf: - schema: - $ref: "#/components/schemas/resource.v1.ResourceClaim" - application/cbor: - schema: - $ref: "#/components/schemas/resource.v1.ResourceClaim" - description: OK - "401": - content: {} - description: Unauthorized - tags: - - resource_v1 - x-kubernetes-action: get - x-kubernetes-group-version-kind: - group: resource.k8s.io - kind: ResourceClaim - version: v1 - x-accepts: - - application/cbor - - application/json - - application/vnd.kubernetes.protobuf - - application/yaml - patch: - description: partially update status of the specified ResourceClaim - operationId: patchNamespacedResourceClaimStatus - parameters: - - description: name of the ResourceClaim - in: path - name: name - required: true - schema: - type: string - - description: "object name and auth scope, such as for teams and projects" - in: path - name: namespace - required: true - schema: - type: string - - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ - \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ - \ and wget)." - in: query - name: pretty - schema: - type: string - - description: "When present, indicates that modifications should not be persisted.\ - \ An invalid or unrecognized dryRun directive will result in an error response\ - \ and no further processing of the request. Valid values are: - All: all\ - \ dry run stages will be processed" - in: query - name: dryRun - schema: - type: string - - description: "fieldManager is a name associated with the actor or entity that\ - \ is making these changes. The value must be less than or 128 characters\ - \ long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.\ - \ This field is required for apply requests (application/apply-patch) but\ - \ optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch)." + \ long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.\ + \ This field is required for apply requests (application/apply-patch) but\ + \ optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch)." in: query name: fieldManager schema: @@ -75770,31 +77871,31 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/resource.v1.ResourceClaim" + $ref: "#/components/schemas/v1.DeviceTaintRule" application/yaml: schema: - $ref: "#/components/schemas/resource.v1.ResourceClaim" + $ref: "#/components/schemas/v1.DeviceTaintRule" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/resource.v1.ResourceClaim" + $ref: "#/components/schemas/v1.DeviceTaintRule" application/cbor: schema: - $ref: "#/components/schemas/resource.v1.ResourceClaim" + $ref: "#/components/schemas/v1.DeviceTaintRule" description: OK "201": content: application/json: schema: - $ref: "#/components/schemas/resource.v1.ResourceClaim" + $ref: "#/components/schemas/v1.DeviceTaintRule" application/yaml: schema: - $ref: "#/components/schemas/resource.v1.ResourceClaim" + $ref: "#/components/schemas/v1.DeviceTaintRule" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/resource.v1.ResourceClaim" + $ref: "#/components/schemas/v1.DeviceTaintRule" application/cbor: schema: - $ref: "#/components/schemas/resource.v1.ResourceClaim" + $ref: "#/components/schemas/v1.DeviceTaintRule" description: Created "401": content: {} @@ -75804,7 +77905,7 @@ paths: x-kubernetes-action: patch x-kubernetes-group-version-kind: group: resource.k8s.io - kind: ResourceClaim + kind: DeviceTaintRule version: v1 x-codegen-request-body-name: body x-content-type: application/json @@ -75814,21 +77915,15 @@ paths: - application/vnd.kubernetes.protobuf - application/yaml put: - description: replace status of the specified ResourceClaim - operationId: replaceNamespacedResourceClaimStatus + description: replace status of the specified DeviceTaintRule + operationId: replaceDeviceTaintRuleStatus parameters: - - description: name of the ResourceClaim + - description: name of the DeviceTaintRule in: path name: name required: true schema: type: string - - description: "object name and auth scope, such as for teams and projects" - in: path - name: namespace - required: true - schema: - type: string - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ \ and wget)." @@ -75872,38 +77967,38 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/resource.v1.ResourceClaim" + $ref: "#/components/schemas/v1.DeviceTaintRule" required: true responses: "200": content: application/json: schema: - $ref: "#/components/schemas/resource.v1.ResourceClaim" + $ref: "#/components/schemas/v1.DeviceTaintRule" application/yaml: schema: - $ref: "#/components/schemas/resource.v1.ResourceClaim" + $ref: "#/components/schemas/v1.DeviceTaintRule" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/resource.v1.ResourceClaim" + $ref: "#/components/schemas/v1.DeviceTaintRule" application/cbor: schema: - $ref: "#/components/schemas/resource.v1.ResourceClaim" + $ref: "#/components/schemas/v1.DeviceTaintRule" description: OK "201": content: application/json: schema: - $ref: "#/components/schemas/resource.v1.ResourceClaim" + $ref: "#/components/schemas/v1.DeviceTaintRule" application/yaml: schema: - $ref: "#/components/schemas/resource.v1.ResourceClaim" + $ref: "#/components/schemas/v1.DeviceTaintRule" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/resource.v1.ResourceClaim" + $ref: "#/components/schemas/v1.DeviceTaintRule" application/cbor: schema: - $ref: "#/components/schemas/resource.v1.ResourceClaim" + $ref: "#/components/schemas/v1.DeviceTaintRule" description: Created "401": content: {} @@ -75913,7 +78008,7 @@ paths: x-kubernetes-action: put x-kubernetes-group-version-kind: group: resource.k8s.io - kind: ResourceClaim + kind: DeviceTaintRule version: v1 x-codegen-request-body-name: body x-content-type: application/json @@ -75922,10 +78017,10 @@ paths: - application/json - application/vnd.kubernetes.protobuf - application/yaml - /apis/resource.k8s.io/v1/namespaces/{namespace}/resourceclaimtemplates: + /apis/resource.k8s.io/v1/namespaces/{namespace}/resourceclaims: delete: - description: delete collection of ResourceClaimTemplate - operationId: deleteCollectionNamespacedResourceClaimTemplate + description: delete collection of ResourceClaim + operationId: deleteCollectionNamespacedResourceClaim parameters: - description: "object name and auth scope, such as for teams and projects" in: path @@ -76116,7 +78211,7 @@ paths: x-kubernetes-action: deletecollection x-kubernetes-group-version-kind: group: resource.k8s.io - kind: ResourceClaimTemplate + kind: ResourceClaim version: v1 x-codegen-request-body-name: body x-content-type: application/json @@ -76126,8 +78221,8 @@ paths: - application/vnd.kubernetes.protobuf - application/yaml get: - description: list or watch objects of kind ResourceClaimTemplate - operationId: listNamespacedResourceClaimTemplate + description: list or watch objects of kind ResourceClaim + operationId: listNamespacedResourceClaim parameters: - description: "object name and auth scope, such as for teams and projects" in: path @@ -76258,25 +78353,25 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1.ResourceClaimTemplateList" + $ref: "#/components/schemas/v1.ResourceClaimList" application/yaml: schema: - $ref: "#/components/schemas/v1.ResourceClaimTemplateList" + $ref: "#/components/schemas/v1.ResourceClaimList" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1.ResourceClaimTemplateList" + $ref: "#/components/schemas/v1.ResourceClaimList" application/cbor: schema: - $ref: "#/components/schemas/v1.ResourceClaimTemplateList" + $ref: "#/components/schemas/v1.ResourceClaimList" application/json;stream=watch: schema: - $ref: "#/components/schemas/v1.ResourceClaimTemplateList" + $ref: "#/components/schemas/v1.ResourceClaimList" application/vnd.kubernetes.protobuf;stream=watch: schema: - $ref: "#/components/schemas/v1.ResourceClaimTemplateList" + $ref: "#/components/schemas/v1.ResourceClaimList" application/cbor-seq: schema: - $ref: "#/components/schemas/v1.ResourceClaimTemplateList" + $ref: "#/components/schemas/v1.ResourceClaimList" description: OK "401": content: {} @@ -76286,7 +78381,7 @@ paths: x-kubernetes-action: list x-kubernetes-group-version-kind: group: resource.k8s.io - kind: ResourceClaimTemplate + kind: ResourceClaim version: v1 x-accepts: - application/cbor @@ -76297,8 +78392,8 @@ paths: - application/vnd.kubernetes.protobuf;stream=watch - application/yaml post: - description: create a ResourceClaimTemplate - operationId: createNamespacedResourceClaimTemplate + description: create a ResourceClaim + operationId: createNamespacedResourceClaim parameters: - description: "object name and auth scope, such as for teams and projects" in: path @@ -76349,53 +78444,53 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1.ResourceClaimTemplate" + $ref: "#/components/schemas/resource.v1.ResourceClaim" required: true responses: "200": content: application/json: schema: - $ref: "#/components/schemas/v1.ResourceClaimTemplate" + $ref: "#/components/schemas/resource.v1.ResourceClaim" application/yaml: schema: - $ref: "#/components/schemas/v1.ResourceClaimTemplate" + $ref: "#/components/schemas/resource.v1.ResourceClaim" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1.ResourceClaimTemplate" + $ref: "#/components/schemas/resource.v1.ResourceClaim" application/cbor: schema: - $ref: "#/components/schemas/v1.ResourceClaimTemplate" + $ref: "#/components/schemas/resource.v1.ResourceClaim" description: OK "201": content: application/json: schema: - $ref: "#/components/schemas/v1.ResourceClaimTemplate" + $ref: "#/components/schemas/resource.v1.ResourceClaim" application/yaml: schema: - $ref: "#/components/schemas/v1.ResourceClaimTemplate" + $ref: "#/components/schemas/resource.v1.ResourceClaim" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1.ResourceClaimTemplate" + $ref: "#/components/schemas/resource.v1.ResourceClaim" application/cbor: schema: - $ref: "#/components/schemas/v1.ResourceClaimTemplate" + $ref: "#/components/schemas/resource.v1.ResourceClaim" description: Created "202": content: application/json: schema: - $ref: "#/components/schemas/v1.ResourceClaimTemplate" + $ref: "#/components/schemas/resource.v1.ResourceClaim" application/yaml: schema: - $ref: "#/components/schemas/v1.ResourceClaimTemplate" + $ref: "#/components/schemas/resource.v1.ResourceClaim" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1.ResourceClaimTemplate" + $ref: "#/components/schemas/resource.v1.ResourceClaim" application/cbor: schema: - $ref: "#/components/schemas/v1.ResourceClaimTemplate" + $ref: "#/components/schemas/resource.v1.ResourceClaim" description: Accepted "401": content: {} @@ -76405,7 +78500,7 @@ paths: x-kubernetes-action: post x-kubernetes-group-version-kind: group: resource.k8s.io - kind: ResourceClaimTemplate + kind: ResourceClaim version: v1 x-codegen-request-body-name: body x-content-type: application/json @@ -76414,12 +78509,12 @@ paths: - application/json - application/vnd.kubernetes.protobuf - application/yaml - /apis/resource.k8s.io/v1/namespaces/{namespace}/resourceclaimtemplates/{name}: + /apis/resource.k8s.io/v1/namespaces/{namespace}/resourceclaims/{name}: delete: - description: delete a ResourceClaimTemplate - operationId: deleteNamespacedResourceClaimTemplate + description: delete a ResourceClaim + operationId: deleteNamespacedResourceClaim parameters: - - description: name of the ResourceClaimTemplate + - description: name of the ResourceClaim in: path name: name required: true @@ -76500,31 +78595,31 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1.ResourceClaimTemplate" + $ref: "#/components/schemas/resource.v1.ResourceClaim" application/yaml: schema: - $ref: "#/components/schemas/v1.ResourceClaimTemplate" + $ref: "#/components/schemas/resource.v1.ResourceClaim" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1.ResourceClaimTemplate" + $ref: "#/components/schemas/resource.v1.ResourceClaim" application/cbor: schema: - $ref: "#/components/schemas/v1.ResourceClaimTemplate" + $ref: "#/components/schemas/resource.v1.ResourceClaim" description: OK "202": content: application/json: schema: - $ref: "#/components/schemas/v1.ResourceClaimTemplate" + $ref: "#/components/schemas/resource.v1.ResourceClaim" application/yaml: schema: - $ref: "#/components/schemas/v1.ResourceClaimTemplate" + $ref: "#/components/schemas/resource.v1.ResourceClaim" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1.ResourceClaimTemplate" + $ref: "#/components/schemas/resource.v1.ResourceClaim" application/cbor: schema: - $ref: "#/components/schemas/v1.ResourceClaimTemplate" + $ref: "#/components/schemas/resource.v1.ResourceClaim" description: Accepted "401": content: {} @@ -76534,7 +78629,7 @@ paths: x-kubernetes-action: delete x-kubernetes-group-version-kind: group: resource.k8s.io - kind: ResourceClaimTemplate + kind: ResourceClaim version: v1 x-codegen-request-body-name: body x-content-type: application/json @@ -76544,10 +78639,10 @@ paths: - application/vnd.kubernetes.protobuf - application/yaml get: - description: read the specified ResourceClaimTemplate - operationId: readNamespacedResourceClaimTemplate + description: read the specified ResourceClaim + operationId: readNamespacedResourceClaim parameters: - - description: name of the ResourceClaimTemplate + - description: name of the ResourceClaim in: path name: name required: true @@ -76571,16 +78666,16 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1.ResourceClaimTemplate" + $ref: "#/components/schemas/resource.v1.ResourceClaim" application/yaml: schema: - $ref: "#/components/schemas/v1.ResourceClaimTemplate" + $ref: "#/components/schemas/resource.v1.ResourceClaim" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1.ResourceClaimTemplate" + $ref: "#/components/schemas/resource.v1.ResourceClaim" application/cbor: schema: - $ref: "#/components/schemas/v1.ResourceClaimTemplate" + $ref: "#/components/schemas/resource.v1.ResourceClaim" description: OK "401": content: {} @@ -76590,7 +78685,7 @@ paths: x-kubernetes-action: get x-kubernetes-group-version-kind: group: resource.k8s.io - kind: ResourceClaimTemplate + kind: ResourceClaim version: v1 x-accepts: - application/cbor @@ -76598,10 +78693,10 @@ paths: - application/vnd.kubernetes.protobuf - application/yaml patch: - description: partially update the specified ResourceClaimTemplate - operationId: patchNamespacedResourceClaimTemplate + description: partially update the specified ResourceClaim + operationId: patchNamespacedResourceClaim parameters: - - description: name of the ResourceClaimTemplate + - description: name of the ResourceClaim in: path name: name required: true @@ -76672,31 +78767,31 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1.ResourceClaimTemplate" + $ref: "#/components/schemas/resource.v1.ResourceClaim" application/yaml: schema: - $ref: "#/components/schemas/v1.ResourceClaimTemplate" + $ref: "#/components/schemas/resource.v1.ResourceClaim" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1.ResourceClaimTemplate" + $ref: "#/components/schemas/resource.v1.ResourceClaim" application/cbor: schema: - $ref: "#/components/schemas/v1.ResourceClaimTemplate" + $ref: "#/components/schemas/resource.v1.ResourceClaim" description: OK "201": content: application/json: schema: - $ref: "#/components/schemas/v1.ResourceClaimTemplate" + $ref: "#/components/schemas/resource.v1.ResourceClaim" application/yaml: schema: - $ref: "#/components/schemas/v1.ResourceClaimTemplate" + $ref: "#/components/schemas/resource.v1.ResourceClaim" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1.ResourceClaimTemplate" + $ref: "#/components/schemas/resource.v1.ResourceClaim" application/cbor: schema: - $ref: "#/components/schemas/v1.ResourceClaimTemplate" + $ref: "#/components/schemas/resource.v1.ResourceClaim" description: Created "401": content: {} @@ -76706,7 +78801,7 @@ paths: x-kubernetes-action: patch x-kubernetes-group-version-kind: group: resource.k8s.io - kind: ResourceClaimTemplate + kind: ResourceClaim version: v1 x-codegen-request-body-name: body x-content-type: application/json @@ -76716,10 +78811,10 @@ paths: - application/vnd.kubernetes.protobuf - application/yaml put: - description: replace the specified ResourceClaimTemplate - operationId: replaceNamespacedResourceClaimTemplate + description: replace the specified ResourceClaim + operationId: replaceNamespacedResourceClaim parameters: - - description: name of the ResourceClaimTemplate + - description: name of the ResourceClaim in: path name: name required: true @@ -76774,38 +78869,38 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1.ResourceClaimTemplate" + $ref: "#/components/schemas/resource.v1.ResourceClaim" required: true responses: "200": content: application/json: schema: - $ref: "#/components/schemas/v1.ResourceClaimTemplate" + $ref: "#/components/schemas/resource.v1.ResourceClaim" application/yaml: schema: - $ref: "#/components/schemas/v1.ResourceClaimTemplate" + $ref: "#/components/schemas/resource.v1.ResourceClaim" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1.ResourceClaimTemplate" + $ref: "#/components/schemas/resource.v1.ResourceClaim" application/cbor: schema: - $ref: "#/components/schemas/v1.ResourceClaimTemplate" + $ref: "#/components/schemas/resource.v1.ResourceClaim" description: OK "201": content: application/json: schema: - $ref: "#/components/schemas/v1.ResourceClaimTemplate" + $ref: "#/components/schemas/resource.v1.ResourceClaim" application/yaml: schema: - $ref: "#/components/schemas/v1.ResourceClaimTemplate" + $ref: "#/components/schemas/resource.v1.ResourceClaim" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1.ResourceClaimTemplate" + $ref: "#/components/schemas/resource.v1.ResourceClaim" application/cbor: schema: - $ref: "#/components/schemas/v1.ResourceClaimTemplate" + $ref: "#/components/schemas/resource.v1.ResourceClaim" description: Created "401": content: {} @@ -76815,7 +78910,7 @@ paths: x-kubernetes-action: put x-kubernetes-group-version-kind: group: resource.k8s.io - kind: ResourceClaimTemplate + kind: ResourceClaim version: v1 x-codegen-request-body-name: body x-content-type: application/json @@ -76824,49 +78919,77 @@ paths: - application/json - application/vnd.kubernetes.protobuf - application/yaml - /apis/resource.k8s.io/v1/resourceclaims: + /apis/resource.k8s.io/v1/namespaces/{namespace}/resourceclaims/{name}/status: get: - description: list or watch objects of kind ResourceClaim - operationId: listResourceClaimForAllNamespaces + description: read status of the specified ResourceClaim + operationId: readNamespacedResourceClaimStatus parameters: - - description: "allowWatchBookmarks requests watch events with type \"BOOKMARK\"\ - . Servers that do not implement bookmarks may ignore this flag and bookmarks\ - \ are sent at the server's discretion. Clients should not assume bookmarks\ - \ are returned at any specific interval, nor may they assume the server\ - \ will send any BOOKMARK event during a session. If this is not a watch,\ - \ this field is ignored." - in: query - name: allowWatchBookmarks + - description: name of the ResourceClaim + in: path + name: name + required: true schema: - type: boolean - - description: |- - The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". - - This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications. - in: query - name: continue + type: string + - description: "object name and auth scope, such as for teams and projects" + in: path + name: namespace + required: true schema: type: string - - description: A selector to restrict the list of returned objects by their - fields. Defaults to everything. + - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ + \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ + \ and wget)." in: query - name: fieldSelector + name: pretty schema: type: string - - description: A selector to restrict the list of returned objects by their - labels. Defaults to everything. - in: query - name: labelSelector + responses: + "200": + content: + application/json: + schema: + $ref: "#/components/schemas/resource.v1.ResourceClaim" + application/yaml: + schema: + $ref: "#/components/schemas/resource.v1.ResourceClaim" + application/vnd.kubernetes.protobuf: + schema: + $ref: "#/components/schemas/resource.v1.ResourceClaim" + application/cbor: + schema: + $ref: "#/components/schemas/resource.v1.ResourceClaim" + description: OK + "401": + content: {} + description: Unauthorized + tags: + - resource_v1 + x-kubernetes-action: get + x-kubernetes-group-version-kind: + group: resource.k8s.io + kind: ResourceClaim + version: v1 + x-accepts: + - application/cbor + - application/json + - application/vnd.kubernetes.protobuf + - application/yaml + patch: + description: partially update status of the specified ResourceClaim + operationId: patchNamespacedResourceClaimStatus + parameters: + - description: name of the ResourceClaim + in: path + name: name + required: true schema: type: string - - description: |- - limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. - - The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned. - in: query - name: limit + - description: "object name and auth scope, such as for teams and projects" + in: path + name: namespace + required: true schema: - type: integer + type: string - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ \ and wget)." @@ -76874,165 +78997,117 @@ paths: name: pretty schema: type: string - - description: |- - resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. - - Defaults to unset + - description: "When present, indicates that modifications should not be persisted.\ + \ An invalid or unrecognized dryRun directive will result in an error response\ + \ and no further processing of the request. Valid values are: - All: all\ + \ dry run stages will be processed" in: query - name: resourceVersion + name: dryRun schema: type: string - - description: |- - resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. - - Defaults to unset + - description: "fieldManager is a name associated with the actor or entity that\ + \ is making these changes. The value must be less than or 128 characters\ + \ long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.\ + \ This field is required for apply requests (application/apply-patch) but\ + \ optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch)." in: query - name: resourceVersionMatch + name: fieldManager schema: type: string - - description: |- - `sendInitialEvents=true` may be set together with `watch=true`. In that case, the watch stream will begin with synthetic events to produce the current state of objects in the collection. Once all such events have been sent, a synthetic "Bookmark" event will be sent. The bookmark will report the ResourceVersion (RV) corresponding to the set of objects, and be marked with `"k8s.io/initial-events-end": "true"` annotation. Afterwards, the watch stream will proceed as usual, sending watch events corresponding to changes (subsequent to the RV) to objects watched. - - When `sendInitialEvents` option is set, we require `resourceVersionMatch` option to also be set. The semantic of the watch request is as following: - `resourceVersionMatch` = NotOlderThan - is interpreted as "data at least as new as the provided `resourceVersion`" - and the bookmark event is send when the state is synced - to a `resourceVersion` at least as fresh as the one provided by the ListOptions. - If `resourceVersion` is unset, this is interpreted as "consistent read" and the - bookmark event is send when the state is synced at least to the moment - when request started being processed. - - `resourceVersionMatch` set to any other value or unset - Invalid error is returned. - - Defaults to true if `resourceVersion=""` or `resourceVersion="0"` (for backward compatibility reasons) and to false otherwise. - in: query - name: sendInitialEvents - schema: - type: boolean - - description: |- - shardSelector restricts the list of returned objects using a CEL-based shard selector expression. The format uses the shardRange() function combined with || (logical OR) to specify one or more hash ranges: - - shardRange(object.metadata.uid, '0x0', '0x8000000000000000') - shardRange(object.metadata.uid, '0x0', '0x8000000000000000') || shardRange(object.metadata.uid, '0x8000000000000000', '0x10000000000000000') - - Field paths use CEL-style object-rooted syntax (e.g. "object.metadata.uid"), NOT the fieldSelector format ("metadata.uid"). Currently supported paths: - - object.metadata.uid - - object.metadata.namespace - - hexStart and hexEnd are single-quoted CEL string literals with a '0x' prefix, defining the inclusive lower and exclusive upper bounds over the 64-bit FNV-1a hash space. The full range is [0x0, 0x10000000000000000), where the exclusive upper bound equals 2^64. - - Examples: - 2-shard split: - shard 0: shardRange(object.metadata.uid, '0x0000000000000000', '0x8000000000000000') - shard 1: shardRange(object.metadata.uid, '0x8000000000000000', '0x10000000000000000') - 4-shard split: - shard 0: shardRange(object.metadata.uid, '0x0000000000000000', '0x4000000000000000') - shard 1: shardRange(object.metadata.uid, '0x4000000000000000', '0x8000000000000000') - shard 2: shardRange(object.metadata.uid, '0x8000000000000000', '0xc000000000000000') - shard 3: shardRange(object.metadata.uid, '0xc000000000000000', '0x10000000000000000') - - This is an alpha field and requires enabling the ShardedListAndWatch feature gate. + - description: "fieldValidation instructs the server on how to handle objects\ + \ in the request (POST/PUT/PATCH) containing unknown or duplicate fields.\ + \ Valid values are: - Ignore: This will ignore any unknown fields that are\ + \ silently dropped from the object, and will ignore all but the last duplicate\ + \ field that the decoder encounters. This is the default behavior prior\ + \ to v1.23. - Warn: This will send a warning via the standard warning response\ + \ header for each unknown field that is dropped from the object, and for\ + \ each duplicate field that is encountered. The request will still succeed\ + \ if there are no other errors, and will only persist the last of any duplicate\ + \ fields. This is the default in v1.23+ - Strict: This will fail the request\ + \ with a BadRequest error if any unknown fields would be dropped from the\ + \ object, or if any duplicate fields are present. The error returned from\ + \ the server will contain all unknown and duplicate fields encountered." in: query - name: shardSelector + name: fieldValidation schema: type: string - - description: "Timeout for the list/watch call. This limits the duration of\ - \ the call, regardless of any activity or inactivity." - in: query - name: timeoutSeconds - schema: - type: integer - - description: "Watch for changes to the described resources and return them\ - \ as a stream of add, update, and remove notifications. Specify resourceVersion." + - description: Force is going to "force" Apply requests. It means user will + re-acquire conflicting fields owned by other people. Force flag must be + unset for non-apply patch requests. in: query - name: watch + name: force schema: type: boolean + requestBody: + content: + application/json: + schema: + $ref: "#/components/schemas/v1.Patch" + required: true responses: "200": content: application/json: schema: - $ref: "#/components/schemas/v1.ResourceClaimList" + $ref: "#/components/schemas/resource.v1.ResourceClaim" application/yaml: schema: - $ref: "#/components/schemas/v1.ResourceClaimList" + $ref: "#/components/schemas/resource.v1.ResourceClaim" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1.ResourceClaimList" + $ref: "#/components/schemas/resource.v1.ResourceClaim" application/cbor: schema: - $ref: "#/components/schemas/v1.ResourceClaimList" - application/json;stream=watch: + $ref: "#/components/schemas/resource.v1.ResourceClaim" + description: OK + "201": + content: + application/json: schema: - $ref: "#/components/schemas/v1.ResourceClaimList" - application/vnd.kubernetes.protobuf;stream=watch: + $ref: "#/components/schemas/resource.v1.ResourceClaim" + application/yaml: schema: - $ref: "#/components/schemas/v1.ResourceClaimList" - application/cbor-seq: + $ref: "#/components/schemas/resource.v1.ResourceClaim" + application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1.ResourceClaimList" - description: OK + $ref: "#/components/schemas/resource.v1.ResourceClaim" + application/cbor: + schema: + $ref: "#/components/schemas/resource.v1.ResourceClaim" + description: Created "401": content: {} description: Unauthorized tags: - resource_v1 - x-kubernetes-action: list + x-kubernetes-action: patch x-kubernetes-group-version-kind: group: resource.k8s.io kind: ResourceClaim version: v1 + x-codegen-request-body-name: body + x-content-type: application/json x-accepts: - application/cbor - - application/cbor-seq - application/json - - application/json;stream=watch - application/vnd.kubernetes.protobuf - - application/vnd.kubernetes.protobuf;stream=watch - application/yaml - /apis/resource.k8s.io/v1/resourceclaimtemplates: - get: - description: list or watch objects of kind ResourceClaimTemplate - operationId: listResourceClaimTemplateForAllNamespaces + put: + description: replace status of the specified ResourceClaim + operationId: replaceNamespacedResourceClaimStatus parameters: - - description: "allowWatchBookmarks requests watch events with type \"BOOKMARK\"\ - . Servers that do not implement bookmarks may ignore this flag and bookmarks\ - \ are sent at the server's discretion. Clients should not assume bookmarks\ - \ are returned at any specific interval, nor may they assume the server\ - \ will send any BOOKMARK event during a session. If this is not a watch,\ - \ this field is ignored." - in: query - name: allowWatchBookmarks - schema: - type: boolean - - description: |- - The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". - - This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications. - in: query - name: continue - schema: - type: string - - description: A selector to restrict the list of returned objects by their - fields. Defaults to everything. - in: query - name: fieldSelector + - description: name of the ResourceClaim + in: path + name: name + required: true schema: type: string - - description: A selector to restrict the list of returned objects by their - labels. Defaults to everything. - in: query - name: labelSelector + - description: "object name and auth scope, such as for teams and projects" + in: path + name: namespace + required: true schema: type: string - - description: |- - limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. - - The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned. - in: query - name: limit - schema: - type: integer - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ \ and wget)." @@ -77040,127 +79115,103 @@ paths: name: pretty schema: type: string - - description: |- - resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. - - Defaults to unset + - description: "When present, indicates that modifications should not be persisted.\ + \ An invalid or unrecognized dryRun directive will result in an error response\ + \ and no further processing of the request. Valid values are: - All: all\ + \ dry run stages will be processed" in: query - name: resourceVersion + name: dryRun schema: type: string - - description: |- - resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. - - Defaults to unset + - description: "fieldManager is a name associated with the actor or entity that\ + \ is making these changes. The value must be less than or 128 characters\ + \ long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." in: query - name: resourceVersionMatch + name: fieldManager schema: type: string - - description: |- - `sendInitialEvents=true` may be set together with `watch=true`. In that case, the watch stream will begin with synthetic events to produce the current state of objects in the collection. Once all such events have been sent, a synthetic "Bookmark" event will be sent. The bookmark will report the ResourceVersion (RV) corresponding to the set of objects, and be marked with `"k8s.io/initial-events-end": "true"` annotation. Afterwards, the watch stream will proceed as usual, sending watch events corresponding to changes (subsequent to the RV) to objects watched. - - When `sendInitialEvents` option is set, we require `resourceVersionMatch` option to also be set. The semantic of the watch request is as following: - `resourceVersionMatch` = NotOlderThan - is interpreted as "data at least as new as the provided `resourceVersion`" - and the bookmark event is send when the state is synced - to a `resourceVersion` at least as fresh as the one provided by the ListOptions. - If `resourceVersion` is unset, this is interpreted as "consistent read" and the - bookmark event is send when the state is synced at least to the moment - when request started being processed. - - `resourceVersionMatch` set to any other value or unset - Invalid error is returned. - - Defaults to true if `resourceVersion=""` or `resourceVersion="0"` (for backward compatibility reasons) and to false otherwise. - in: query - name: sendInitialEvents - schema: - type: boolean - - description: |- - shardSelector restricts the list of returned objects using a CEL-based shard selector expression. The format uses the shardRange() function combined with || (logical OR) to specify one or more hash ranges: - - shardRange(object.metadata.uid, '0x0', '0x8000000000000000') - shardRange(object.metadata.uid, '0x0', '0x8000000000000000') || shardRange(object.metadata.uid, '0x8000000000000000', '0x10000000000000000') - - Field paths use CEL-style object-rooted syntax (e.g. "object.metadata.uid"), NOT the fieldSelector format ("metadata.uid"). Currently supported paths: - - object.metadata.uid - - object.metadata.namespace - - hexStart and hexEnd are single-quoted CEL string literals with a '0x' prefix, defining the inclusive lower and exclusive upper bounds over the 64-bit FNV-1a hash space. The full range is [0x0, 0x10000000000000000), where the exclusive upper bound equals 2^64. - - Examples: - 2-shard split: - shard 0: shardRange(object.metadata.uid, '0x0000000000000000', '0x8000000000000000') - shard 1: shardRange(object.metadata.uid, '0x8000000000000000', '0x10000000000000000') - 4-shard split: - shard 0: shardRange(object.metadata.uid, '0x0000000000000000', '0x4000000000000000') - shard 1: shardRange(object.metadata.uid, '0x4000000000000000', '0x8000000000000000') - shard 2: shardRange(object.metadata.uid, '0x8000000000000000', '0xc000000000000000') - shard 3: shardRange(object.metadata.uid, '0xc000000000000000', '0x10000000000000000') - - This is an alpha field and requires enabling the ShardedListAndWatch feature gate. + - description: "fieldValidation instructs the server on how to handle objects\ + \ in the request (POST/PUT/PATCH) containing unknown or duplicate fields.\ + \ Valid values are: - Ignore: This will ignore any unknown fields that are\ + \ silently dropped from the object, and will ignore all but the last duplicate\ + \ field that the decoder encounters. This is the default behavior prior\ + \ to v1.23. - Warn: This will send a warning via the standard warning response\ + \ header for each unknown field that is dropped from the object, and for\ + \ each duplicate field that is encountered. The request will still succeed\ + \ if there are no other errors, and will only persist the last of any duplicate\ + \ fields. This is the default in v1.23+ - Strict: This will fail the request\ + \ with a BadRequest error if any unknown fields would be dropped from the\ + \ object, or if any duplicate fields are present. The error returned from\ + \ the server will contain all unknown and duplicate fields encountered." in: query - name: shardSelector + name: fieldValidation schema: type: string - - description: "Timeout for the list/watch call. This limits the duration of\ - \ the call, regardless of any activity or inactivity." - in: query - name: timeoutSeconds - schema: - type: integer - - description: "Watch for changes to the described resources and return them\ - \ as a stream of add, update, and remove notifications. Specify resourceVersion." - in: query - name: watch - schema: - type: boolean + requestBody: + content: + application/json: + schema: + $ref: "#/components/schemas/resource.v1.ResourceClaim" + required: true responses: "200": content: application/json: schema: - $ref: "#/components/schemas/v1.ResourceClaimTemplateList" + $ref: "#/components/schemas/resource.v1.ResourceClaim" application/yaml: schema: - $ref: "#/components/schemas/v1.ResourceClaimTemplateList" + $ref: "#/components/schemas/resource.v1.ResourceClaim" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1.ResourceClaimTemplateList" + $ref: "#/components/schemas/resource.v1.ResourceClaim" application/cbor: schema: - $ref: "#/components/schemas/v1.ResourceClaimTemplateList" - application/json;stream=watch: + $ref: "#/components/schemas/resource.v1.ResourceClaim" + description: OK + "201": + content: + application/json: schema: - $ref: "#/components/schemas/v1.ResourceClaimTemplateList" - application/vnd.kubernetes.protobuf;stream=watch: + $ref: "#/components/schemas/resource.v1.ResourceClaim" + application/yaml: schema: - $ref: "#/components/schemas/v1.ResourceClaimTemplateList" - application/cbor-seq: + $ref: "#/components/schemas/resource.v1.ResourceClaim" + application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1.ResourceClaimTemplateList" - description: OK + $ref: "#/components/schemas/resource.v1.ResourceClaim" + application/cbor: + schema: + $ref: "#/components/schemas/resource.v1.ResourceClaim" + description: Created "401": content: {} description: Unauthorized tags: - resource_v1 - x-kubernetes-action: list + x-kubernetes-action: put x-kubernetes-group-version-kind: group: resource.k8s.io - kind: ResourceClaimTemplate + kind: ResourceClaim version: v1 + x-codegen-request-body-name: body + x-content-type: application/json x-accepts: - application/cbor - - application/cbor-seq - application/json - - application/json;stream=watch - application/vnd.kubernetes.protobuf - - application/vnd.kubernetes.protobuf;stream=watch - application/yaml - /apis/resource.k8s.io/v1/resourceslices: + /apis/resource.k8s.io/v1/namespaces/{namespace}/resourceclaimtemplates: delete: - description: delete collection of ResourceSlice - operationId: deleteCollectionResourceSlice + description: delete collection of ResourceClaimTemplate + operationId: deleteCollectionNamespacedResourceClaimTemplate parameters: + - description: "object name and auth scope, such as for teams and projects" + in: path + name: namespace + required: true + schema: + type: string - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ \ and wget)." @@ -77344,7 +79395,7 @@ paths: x-kubernetes-action: deletecollection x-kubernetes-group-version-kind: group: resource.k8s.io - kind: ResourceSlice + kind: ResourceClaimTemplate version: v1 x-codegen-request-body-name: body x-content-type: application/json @@ -77354,9 +79405,15 @@ paths: - application/vnd.kubernetes.protobuf - application/yaml get: - description: list or watch objects of kind ResourceSlice - operationId: listResourceSlice + description: list or watch objects of kind ResourceClaimTemplate + operationId: listNamespacedResourceClaimTemplate parameters: + - description: "object name and auth scope, such as for teams and projects" + in: path + name: namespace + required: true + schema: + type: string - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ \ and wget)." @@ -77480,25 +79537,25 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1.ResourceSliceList" + $ref: "#/components/schemas/v1.ResourceClaimTemplateList" application/yaml: schema: - $ref: "#/components/schemas/v1.ResourceSliceList" + $ref: "#/components/schemas/v1.ResourceClaimTemplateList" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1.ResourceSliceList" + $ref: "#/components/schemas/v1.ResourceClaimTemplateList" application/cbor: schema: - $ref: "#/components/schemas/v1.ResourceSliceList" + $ref: "#/components/schemas/v1.ResourceClaimTemplateList" application/json;stream=watch: schema: - $ref: "#/components/schemas/v1.ResourceSliceList" + $ref: "#/components/schemas/v1.ResourceClaimTemplateList" application/vnd.kubernetes.protobuf;stream=watch: schema: - $ref: "#/components/schemas/v1.ResourceSliceList" + $ref: "#/components/schemas/v1.ResourceClaimTemplateList" application/cbor-seq: schema: - $ref: "#/components/schemas/v1.ResourceSliceList" + $ref: "#/components/schemas/v1.ResourceClaimTemplateList" description: OK "401": content: {} @@ -77508,7 +79565,7 @@ paths: x-kubernetes-action: list x-kubernetes-group-version-kind: group: resource.k8s.io - kind: ResourceSlice + kind: ResourceClaimTemplate version: v1 x-accepts: - application/cbor @@ -77519,9 +79576,15 @@ paths: - application/vnd.kubernetes.protobuf;stream=watch - application/yaml post: - description: create a ResourceSlice - operationId: createResourceSlice + description: create a ResourceClaimTemplate + operationId: createNamespacedResourceClaimTemplate parameters: + - description: "object name and auth scope, such as for teams and projects" + in: path + name: namespace + required: true + schema: + type: string - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ \ and wget)." @@ -77565,53 +79628,53 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1.ResourceSlice" + $ref: "#/components/schemas/v1.ResourceClaimTemplate" required: true responses: "200": content: application/json: schema: - $ref: "#/components/schemas/v1.ResourceSlice" + $ref: "#/components/schemas/v1.ResourceClaimTemplate" application/yaml: schema: - $ref: "#/components/schemas/v1.ResourceSlice" + $ref: "#/components/schemas/v1.ResourceClaimTemplate" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1.ResourceSlice" + $ref: "#/components/schemas/v1.ResourceClaimTemplate" application/cbor: schema: - $ref: "#/components/schemas/v1.ResourceSlice" + $ref: "#/components/schemas/v1.ResourceClaimTemplate" description: OK "201": content: application/json: schema: - $ref: "#/components/schemas/v1.ResourceSlice" + $ref: "#/components/schemas/v1.ResourceClaimTemplate" application/yaml: schema: - $ref: "#/components/schemas/v1.ResourceSlice" + $ref: "#/components/schemas/v1.ResourceClaimTemplate" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1.ResourceSlice" + $ref: "#/components/schemas/v1.ResourceClaimTemplate" application/cbor: schema: - $ref: "#/components/schemas/v1.ResourceSlice" + $ref: "#/components/schemas/v1.ResourceClaimTemplate" description: Created "202": content: application/json: schema: - $ref: "#/components/schemas/v1.ResourceSlice" + $ref: "#/components/schemas/v1.ResourceClaimTemplate" application/yaml: schema: - $ref: "#/components/schemas/v1.ResourceSlice" + $ref: "#/components/schemas/v1.ResourceClaimTemplate" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1.ResourceSlice" + $ref: "#/components/schemas/v1.ResourceClaimTemplate" application/cbor: schema: - $ref: "#/components/schemas/v1.ResourceSlice" + $ref: "#/components/schemas/v1.ResourceClaimTemplate" description: Accepted "401": content: {} @@ -77621,7 +79684,7 @@ paths: x-kubernetes-action: post x-kubernetes-group-version-kind: group: resource.k8s.io - kind: ResourceSlice + kind: ResourceClaimTemplate version: v1 x-codegen-request-body-name: body x-content-type: application/json @@ -77630,17 +79693,23 @@ paths: - application/json - application/vnd.kubernetes.protobuf - application/yaml - /apis/resource.k8s.io/v1/resourceslices/{name}: + /apis/resource.k8s.io/v1/namespaces/{namespace}/resourceclaimtemplates/{name}: delete: - description: delete a ResourceSlice - operationId: deleteResourceSlice + description: delete a ResourceClaimTemplate + operationId: deleteNamespacedResourceClaimTemplate parameters: - - description: name of the ResourceSlice + - description: name of the ResourceClaimTemplate in: path name: name required: true schema: type: string + - description: "object name and auth scope, such as for teams and projects" + in: path + name: namespace + required: true + schema: + type: string - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ \ and wget)." @@ -77710,31 +79779,31 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1.ResourceSlice" + $ref: "#/components/schemas/v1.ResourceClaimTemplate" application/yaml: schema: - $ref: "#/components/schemas/v1.ResourceSlice" + $ref: "#/components/schemas/v1.ResourceClaimTemplate" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1.ResourceSlice" + $ref: "#/components/schemas/v1.ResourceClaimTemplate" application/cbor: schema: - $ref: "#/components/schemas/v1.ResourceSlice" + $ref: "#/components/schemas/v1.ResourceClaimTemplate" description: OK "202": content: application/json: schema: - $ref: "#/components/schemas/v1.ResourceSlice" + $ref: "#/components/schemas/v1.ResourceClaimTemplate" application/yaml: schema: - $ref: "#/components/schemas/v1.ResourceSlice" + $ref: "#/components/schemas/v1.ResourceClaimTemplate" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1.ResourceSlice" + $ref: "#/components/schemas/v1.ResourceClaimTemplate" application/cbor: schema: - $ref: "#/components/schemas/v1.ResourceSlice" + $ref: "#/components/schemas/v1.ResourceClaimTemplate" description: Accepted "401": content: {} @@ -77744,7 +79813,7 @@ paths: x-kubernetes-action: delete x-kubernetes-group-version-kind: group: resource.k8s.io - kind: ResourceSlice + kind: ResourceClaimTemplate version: v1 x-codegen-request-body-name: body x-content-type: application/json @@ -77754,15 +79823,21 @@ paths: - application/vnd.kubernetes.protobuf - application/yaml get: - description: read the specified ResourceSlice - operationId: readResourceSlice + description: read the specified ResourceClaimTemplate + operationId: readNamespacedResourceClaimTemplate parameters: - - description: name of the ResourceSlice + - description: name of the ResourceClaimTemplate in: path name: name required: true schema: type: string + - description: "object name and auth scope, such as for teams and projects" + in: path + name: namespace + required: true + schema: + type: string - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ \ and wget)." @@ -77775,16 +79850,16 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1.ResourceSlice" + $ref: "#/components/schemas/v1.ResourceClaimTemplate" application/yaml: schema: - $ref: "#/components/schemas/v1.ResourceSlice" + $ref: "#/components/schemas/v1.ResourceClaimTemplate" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1.ResourceSlice" + $ref: "#/components/schemas/v1.ResourceClaimTemplate" application/cbor: schema: - $ref: "#/components/schemas/v1.ResourceSlice" + $ref: "#/components/schemas/v1.ResourceClaimTemplate" description: OK "401": content: {} @@ -77794,7 +79869,7 @@ paths: x-kubernetes-action: get x-kubernetes-group-version-kind: group: resource.k8s.io - kind: ResourceSlice + kind: ResourceClaimTemplate version: v1 x-accepts: - application/cbor @@ -77802,15 +79877,21 @@ paths: - application/vnd.kubernetes.protobuf - application/yaml patch: - description: partially update the specified ResourceSlice - operationId: patchResourceSlice + description: partially update the specified ResourceClaimTemplate + operationId: patchNamespacedResourceClaimTemplate parameters: - - description: name of the ResourceSlice + - description: name of the ResourceClaimTemplate in: path name: name required: true schema: type: string + - description: "object name and auth scope, such as for teams and projects" + in: path + name: namespace + required: true + schema: + type: string - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ \ and wget)." @@ -77870,31 +79951,31 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1.ResourceSlice" + $ref: "#/components/schemas/v1.ResourceClaimTemplate" application/yaml: schema: - $ref: "#/components/schemas/v1.ResourceSlice" + $ref: "#/components/schemas/v1.ResourceClaimTemplate" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1.ResourceSlice" + $ref: "#/components/schemas/v1.ResourceClaimTemplate" application/cbor: schema: - $ref: "#/components/schemas/v1.ResourceSlice" + $ref: "#/components/schemas/v1.ResourceClaimTemplate" description: OK "201": content: application/json: schema: - $ref: "#/components/schemas/v1.ResourceSlice" + $ref: "#/components/schemas/v1.ResourceClaimTemplate" application/yaml: schema: - $ref: "#/components/schemas/v1.ResourceSlice" + $ref: "#/components/schemas/v1.ResourceClaimTemplate" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1.ResourceSlice" + $ref: "#/components/schemas/v1.ResourceClaimTemplate" application/cbor: schema: - $ref: "#/components/schemas/v1.ResourceSlice" + $ref: "#/components/schemas/v1.ResourceClaimTemplate" description: Created "401": content: {} @@ -77904,7 +79985,7 @@ paths: x-kubernetes-action: patch x-kubernetes-group-version-kind: group: resource.k8s.io - kind: ResourceSlice + kind: ResourceClaimTemplate version: v1 x-codegen-request-body-name: body x-content-type: application/json @@ -77914,15 +79995,21 @@ paths: - application/vnd.kubernetes.protobuf - application/yaml put: - description: replace the specified ResourceSlice - operationId: replaceResourceSlice + description: replace the specified ResourceClaimTemplate + operationId: replaceNamespacedResourceClaimTemplate parameters: - - description: name of the ResourceSlice + - description: name of the ResourceClaimTemplate in: path name: name required: true schema: type: string + - description: "object name and auth scope, such as for teams and projects" + in: path + name: namespace + required: true + schema: + type: string - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ \ and wget)." @@ -77966,38 +80053,38 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1.ResourceSlice" + $ref: "#/components/schemas/v1.ResourceClaimTemplate" required: true responses: "200": content: application/json: schema: - $ref: "#/components/schemas/v1.ResourceSlice" + $ref: "#/components/schemas/v1.ResourceClaimTemplate" application/yaml: schema: - $ref: "#/components/schemas/v1.ResourceSlice" + $ref: "#/components/schemas/v1.ResourceClaimTemplate" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1.ResourceSlice" + $ref: "#/components/schemas/v1.ResourceClaimTemplate" application/cbor: schema: - $ref: "#/components/schemas/v1.ResourceSlice" + $ref: "#/components/schemas/v1.ResourceClaimTemplate" description: OK "201": content: application/json: schema: - $ref: "#/components/schemas/v1.ResourceSlice" + $ref: "#/components/schemas/v1.ResourceClaimTemplate" application/yaml: schema: - $ref: "#/components/schemas/v1.ResourceSlice" + $ref: "#/components/schemas/v1.ResourceClaimTemplate" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1.ResourceSlice" + $ref: "#/components/schemas/v1.ResourceClaimTemplate" application/cbor: schema: - $ref: "#/components/schemas/v1.ResourceSlice" + $ref: "#/components/schemas/v1.ResourceClaimTemplate" description: Created "401": content: {} @@ -78007,7 +80094,7 @@ paths: x-kubernetes-action: put x-kubernetes-group-version-kind: group: resource.k8s.io - kind: ResourceSlice + kind: ResourceClaimTemplate version: v1 x-codegen-request-body-name: body x-content-type: application/json @@ -78016,58 +80103,21 @@ paths: - application/json - application/vnd.kubernetes.protobuf - application/yaml - /apis/resource.k8s.io/v1/watch/deviceclasses: {} - /apis/resource.k8s.io/v1/watch/deviceclasses/{name}: {} - /apis/resource.k8s.io/v1/watch/namespaces/{namespace}/resourceclaims: {} - /apis/resource.k8s.io/v1/watch/namespaces/{namespace}/resourceclaims/{name}: {} - /apis/resource.k8s.io/v1/watch/namespaces/{namespace}/resourceclaimtemplates: {} - /apis/resource.k8s.io/v1/watch/namespaces/{namespace}/resourceclaimtemplates/{name}: {} - /apis/resource.k8s.io/v1/watch/resourceclaims: {} - /apis/resource.k8s.io/v1/watch/resourceclaimtemplates: {} - /apis/resource.k8s.io/v1/watch/resourceslices: {} - /apis/resource.k8s.io/v1/watch/resourceslices/{name}: {} - /apis/resource.k8s.io/v1alpha3/: + /apis/resource.k8s.io/v1/resourceclaims: get: - description: get available resources - operationId: getAPIResources - responses: - "200": - content: - application/json: - schema: - $ref: "#/components/schemas/v1.APIResourceList" - application/yaml: - schema: - $ref: "#/components/schemas/v1.APIResourceList" - application/vnd.kubernetes.protobuf: - schema: - $ref: "#/components/schemas/v1.APIResourceList" - application/cbor: - schema: - $ref: "#/components/schemas/v1.APIResourceList" - description: OK - "401": - content: {} - description: Unauthorized - tags: - - resource_v1alpha3 - x-accepts: - - application/cbor - - application/json - - application/vnd.kubernetes.protobuf - - application/yaml - /apis/resource.k8s.io/v1alpha3/devicetaintrules: - delete: - description: delete collection of DeviceTaintRule - operationId: deleteCollectionDeviceTaintRule + description: list or watch objects of kind ResourceClaim + operationId: listResourceClaimForAllNamespaces parameters: - - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ - \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ - \ and wget)." + - description: "allowWatchBookmarks requests watch events with type \"BOOKMARK\"\ + . Servers that do not implement bookmarks may ignore this flag and bookmarks\ + \ are sent at the server's discretion. Clients should not assume bookmarks\ + \ are returned at any specific interval, nor may they assume the server\ + \ will send any BOOKMARK event during a session. If this is not a watch,\ + \ this field is ignored." in: query - name: pretty + name: allowWatchBookmarks schema: - type: string + type: boolean - description: |- The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". @@ -78076,44 +80126,12 @@ paths: name: continue schema: type: string - - description: "When present, indicates that modifications should not be persisted.\ - \ An invalid or unrecognized dryRun directive will result in an error response\ - \ and no further processing of the request. Valid values are: - All: all\ - \ dry run stages will be processed" - in: query - name: dryRun - schema: - type: string - description: A selector to restrict the list of returned objects by their fields. Defaults to everything. in: query name: fieldSelector schema: type: string - - description: "The duration in seconds before the object should be deleted.\ - \ Value must be non-negative integer. The value zero indicates delete immediately.\ - \ If this value is nil, the default grace period for the specified type\ - \ will be used. Defaults to a per object value if not specified. zero means\ - \ delete immediately." - in: query - name: gracePeriodSeconds - schema: - type: integer - - description: "if set to true, it will trigger an unsafe deletion of the resource\ - \ in case the normal deletion flow fails with a corrupt object error. A\ - \ resource is considered corrupt if it can not be retrieved from the underlying\ - \ storage successfully because of a) its data can not be transformed e.g.\ - \ decryption failure, or b) it fails to decode into an object. NOTE: unsafe\ - \ deletion ignores finalizer constraints, skips precondition checks, and\ - \ removes the object from the storage. WARNING: This may potentially break\ - \ the cluster if the workload associated with the resource being unsafe-deleted\ - \ relies on normal deletion flow. Use only if you REALLY know what you are\ - \ doing. The default value is false, and the user must opt in to enable\ - \ it" - in: query - name: ignoreStoreReadErrorWithClusterBreakingPotential - schema: - type: boolean - description: A selector to restrict the list of returned objects by their labels. Defaults to everything. in: query @@ -78128,23 +80146,11 @@ paths: name: limit schema: type: integer - - description: "Deprecated: please use the PropagationPolicy, this field will\ - \ be deprecated in 1.7. Should the dependent objects be orphaned. If true/false,\ - \ the \"orphan\" finalizer will be added to/removed from the object's finalizers\ - \ list. Either this field or PropagationPolicy may be set, but not both." - in: query - name: orphanDependents - schema: - type: boolean - - description: "Whether and how garbage collection will be performed. Either\ - \ this field or OrphanDependents may be set, but not both. The default policy\ - \ is decided by the existing finalizer set in the metadata.finalizers and\ - \ the resource-specific default policy. Acceptable values are: 'Orphan'\ - \ - orphan the dependents; 'Background' - allow the garbage collector to\ - \ delete the dependents in the background; 'Foreground' - a cascading policy\ - \ that deletes all dependents in the foreground." + - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ + \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ + \ and wget)." in: query - name: propagationPolicy + name: pretty schema: type: string - description: |- @@ -78214,56 +80220,60 @@ paths: name: timeoutSeconds schema: type: integer - requestBody: - content: - application/json: - schema: - $ref: "#/components/schemas/v1.DeleteOptions" - required: false + - description: "Watch for changes to the described resources and return them\ + \ as a stream of add, update, and remove notifications. Specify resourceVersion." + in: query + name: watch + schema: + type: boolean responses: "200": content: application/json: schema: - $ref: "#/components/schemas/v1.Status" + $ref: "#/components/schemas/v1.ResourceClaimList" application/yaml: schema: - $ref: "#/components/schemas/v1.Status" + $ref: "#/components/schemas/v1.ResourceClaimList" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1.Status" + $ref: "#/components/schemas/v1.ResourceClaimList" application/cbor: schema: - $ref: "#/components/schemas/v1.Status" + $ref: "#/components/schemas/v1.ResourceClaimList" + application/json;stream=watch: + schema: + $ref: "#/components/schemas/v1.ResourceClaimList" + application/vnd.kubernetes.protobuf;stream=watch: + schema: + $ref: "#/components/schemas/v1.ResourceClaimList" + application/cbor-seq: + schema: + $ref: "#/components/schemas/v1.ResourceClaimList" description: OK "401": content: {} description: Unauthorized tags: - - resource_v1alpha3 - x-kubernetes-action: deletecollection + - resource_v1 + x-kubernetes-action: list x-kubernetes-group-version-kind: group: resource.k8s.io - kind: DeviceTaintRule - version: v1alpha3 - x-codegen-request-body-name: body - x-content-type: application/json + kind: ResourceClaim + version: v1 x-accepts: - application/cbor + - application/cbor-seq - application/json + - application/json;stream=watch - application/vnd.kubernetes.protobuf + - application/vnd.kubernetes.protobuf;stream=watch - application/yaml + /apis/resource.k8s.io/v1/resourceclaimtemplates: get: - description: list or watch objects of kind DeviceTaintRule - operationId: listDeviceTaintRule + description: list or watch objects of kind ResourceClaimTemplate + operationId: listResourceClaimTemplateForAllNamespaces parameters: - - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ - \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ - \ and wget)." - in: query - name: pretty - schema: - type: string - description: "allowWatchBookmarks requests watch events with type \"BOOKMARK\"\ . Servers that do not implement bookmarks may ignore this flag and bookmarks\ \ are sent at the server's discretion. Clients should not assume bookmarks\ @@ -78302,6 +80312,13 @@ paths: name: limit schema: type: integer + - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ + \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ + \ and wget)." + in: query + name: pretty + schema: + type: string - description: |- resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. @@ -78380,36 +80397,36 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1alpha3.DeviceTaintRuleList" + $ref: "#/components/schemas/v1.ResourceClaimTemplateList" application/yaml: schema: - $ref: "#/components/schemas/v1alpha3.DeviceTaintRuleList" + $ref: "#/components/schemas/v1.ResourceClaimTemplateList" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1alpha3.DeviceTaintRuleList" + $ref: "#/components/schemas/v1.ResourceClaimTemplateList" application/cbor: schema: - $ref: "#/components/schemas/v1alpha3.DeviceTaintRuleList" + $ref: "#/components/schemas/v1.ResourceClaimTemplateList" application/json;stream=watch: schema: - $ref: "#/components/schemas/v1alpha3.DeviceTaintRuleList" + $ref: "#/components/schemas/v1.ResourceClaimTemplateList" application/vnd.kubernetes.protobuf;stream=watch: schema: - $ref: "#/components/schemas/v1alpha3.DeviceTaintRuleList" + $ref: "#/components/schemas/v1.ResourceClaimTemplateList" application/cbor-seq: schema: - $ref: "#/components/schemas/v1alpha3.DeviceTaintRuleList" + $ref: "#/components/schemas/v1.ResourceClaimTemplateList" description: OK "401": content: {} description: Unauthorized tags: - - resource_v1alpha3 + - resource_v1 x-kubernetes-action: list x-kubernetes-group-version-kind: group: resource.k8s.io - kind: DeviceTaintRule - version: v1alpha3 + kind: ResourceClaimTemplate + version: v1 x-accepts: - application/cbor - application/cbor-seq @@ -78418,9 +80435,10 @@ paths: - application/vnd.kubernetes.protobuf - application/vnd.kubernetes.protobuf;stream=watch - application/yaml - post: - description: create a DeviceTaintRule - operationId: createDeviceTaintRule + /apis/resource.k8s.io/v1/resourceslices: + delete: + description: delete collection of ResourceSlice + operationId: deleteCollectionResourceSlice parameters: - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ @@ -78429,123 +80447,12 @@ paths: name: pretty schema: type: string - - description: "When present, indicates that modifications should not be persisted.\ - \ An invalid or unrecognized dryRun directive will result in an error response\ - \ and no further processing of the request. Valid values are: - All: all\ - \ dry run stages will be processed" - in: query - name: dryRun - schema: - type: string - - description: "fieldManager is a name associated with the actor or entity that\ - \ is making these changes. The value must be less than or 128 characters\ - \ long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." - in: query - name: fieldManager - schema: - type: string - - description: "fieldValidation instructs the server on how to handle objects\ - \ in the request (POST/PUT/PATCH) containing unknown or duplicate fields.\ - \ Valid values are: - Ignore: This will ignore any unknown fields that are\ - \ silently dropped from the object, and will ignore all but the last duplicate\ - \ field that the decoder encounters. This is the default behavior prior\ - \ to v1.23. - Warn: This will send a warning via the standard warning response\ - \ header for each unknown field that is dropped from the object, and for\ - \ each duplicate field that is encountered. The request will still succeed\ - \ if there are no other errors, and will only persist the last of any duplicate\ - \ fields. This is the default in v1.23+ - Strict: This will fail the request\ - \ with a BadRequest error if any unknown fields would be dropped from the\ - \ object, or if any duplicate fields are present. The error returned from\ - \ the server will contain all unknown and duplicate fields encountered." - in: query - name: fieldValidation - schema: - type: string - requestBody: - content: - application/json: - schema: - $ref: "#/components/schemas/v1alpha3.DeviceTaintRule" - required: true - responses: - "200": - content: - application/json: - schema: - $ref: "#/components/schemas/v1alpha3.DeviceTaintRule" - application/yaml: - schema: - $ref: "#/components/schemas/v1alpha3.DeviceTaintRule" - application/vnd.kubernetes.protobuf: - schema: - $ref: "#/components/schemas/v1alpha3.DeviceTaintRule" - application/cbor: - schema: - $ref: "#/components/schemas/v1alpha3.DeviceTaintRule" - description: OK - "201": - content: - application/json: - schema: - $ref: "#/components/schemas/v1alpha3.DeviceTaintRule" - application/yaml: - schema: - $ref: "#/components/schemas/v1alpha3.DeviceTaintRule" - application/vnd.kubernetes.protobuf: - schema: - $ref: "#/components/schemas/v1alpha3.DeviceTaintRule" - application/cbor: - schema: - $ref: "#/components/schemas/v1alpha3.DeviceTaintRule" - description: Created - "202": - content: - application/json: - schema: - $ref: "#/components/schemas/v1alpha3.DeviceTaintRule" - application/yaml: - schema: - $ref: "#/components/schemas/v1alpha3.DeviceTaintRule" - application/vnd.kubernetes.protobuf: - schema: - $ref: "#/components/schemas/v1alpha3.DeviceTaintRule" - application/cbor: - schema: - $ref: "#/components/schemas/v1alpha3.DeviceTaintRule" - description: Accepted - "401": - content: {} - description: Unauthorized - tags: - - resource_v1alpha3 - x-kubernetes-action: post - x-kubernetes-group-version-kind: - group: resource.k8s.io - kind: DeviceTaintRule - version: v1alpha3 - x-codegen-request-body-name: body - x-content-type: application/json - x-accepts: - - application/cbor - - application/json - - application/vnd.kubernetes.protobuf - - application/yaml - /apis/resource.k8s.io/v1alpha3/devicetaintrules/{name}: - delete: - description: delete a DeviceTaintRule - operationId: deleteDeviceTaintRule - parameters: - - description: name of the DeviceTaintRule - in: path - name: name - required: true - schema: - type: string - - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ - \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ - \ and wget)." + - description: |- + The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + + This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications. in: query - name: pretty + name: continue schema: type: string - description: "When present, indicates that modifications should not be persisted.\ @@ -78556,6 +80463,12 @@ paths: name: dryRun schema: type: string + - description: A selector to restrict the list of returned objects by their + fields. Defaults to everything. + in: query + name: fieldSelector + schema: + type: string - description: "The duration in seconds before the object should be deleted.\ \ Value must be non-negative integer. The value zero indicates delete immediately.\ \ If this value is nil, the default grace period for the specified type\ @@ -78580,6 +80493,20 @@ paths: name: ignoreStoreReadErrorWithClusterBreakingPotential schema: type: boolean + - description: A selector to restrict the list of returned objects by their + labels. Defaults to everything. + in: query + name: labelSelector + schema: + type: string + - description: |- + limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + + The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned. + in: query + name: limit + schema: + type: integer - description: "Deprecated: please use the PropagationPolicy, this field will\ \ be deprecated in 1.7. Should the dependent objects be orphaned. If true/false,\ \ the \"orphan\" finalizer will be added to/removed from the object's finalizers\ @@ -78599,6 +80526,73 @@ paths: name: propagationPolicy schema: type: string + - description: |- + resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + + Defaults to unset + in: query + name: resourceVersion + schema: + type: string + - description: |- + resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + + Defaults to unset + in: query + name: resourceVersionMatch + schema: + type: string + - description: |- + `sendInitialEvents=true` may be set together with `watch=true`. In that case, the watch stream will begin with synthetic events to produce the current state of objects in the collection. Once all such events have been sent, a synthetic "Bookmark" event will be sent. The bookmark will report the ResourceVersion (RV) corresponding to the set of objects, and be marked with `"k8s.io/initial-events-end": "true"` annotation. Afterwards, the watch stream will proceed as usual, sending watch events corresponding to changes (subsequent to the RV) to objects watched. + + When `sendInitialEvents` option is set, we require `resourceVersionMatch` option to also be set. The semantic of the watch request is as following: - `resourceVersionMatch` = NotOlderThan + is interpreted as "data at least as new as the provided `resourceVersion`" + and the bookmark event is send when the state is synced + to a `resourceVersion` at least as fresh as the one provided by the ListOptions. + If `resourceVersion` is unset, this is interpreted as "consistent read" and the + bookmark event is send when the state is synced at least to the moment + when request started being processed. + - `resourceVersionMatch` set to any other value or unset + Invalid error is returned. + + Defaults to true if `resourceVersion=""` or `resourceVersion="0"` (for backward compatibility reasons) and to false otherwise. + in: query + name: sendInitialEvents + schema: + type: boolean + - description: |- + shardSelector restricts the list of returned objects using a CEL-based shard selector expression. The format uses the shardRange() function combined with || (logical OR) to specify one or more hash ranges: + + shardRange(object.metadata.uid, '0x0', '0x8000000000000000') + shardRange(object.metadata.uid, '0x0', '0x8000000000000000') || shardRange(object.metadata.uid, '0x8000000000000000', '0x10000000000000000') + + Field paths use CEL-style object-rooted syntax (e.g. "object.metadata.uid"), NOT the fieldSelector format ("metadata.uid"). Currently supported paths: + - object.metadata.uid + - object.metadata.namespace + + hexStart and hexEnd are single-quoted CEL string literals with a '0x' prefix, defining the inclusive lower and exclusive upper bounds over the 64-bit FNV-1a hash space. The full range is [0x0, 0x10000000000000000), where the exclusive upper bound equals 2^64. + + Examples: + 2-shard split: + shard 0: shardRange(object.metadata.uid, '0x0000000000000000', '0x8000000000000000') + shard 1: shardRange(object.metadata.uid, '0x8000000000000000', '0x10000000000000000') + 4-shard split: + shard 0: shardRange(object.metadata.uid, '0x0000000000000000', '0x4000000000000000') + shard 1: shardRange(object.metadata.uid, '0x4000000000000000', '0x8000000000000000') + shard 2: shardRange(object.metadata.uid, '0x8000000000000000', '0xc000000000000000') + shard 3: shardRange(object.metadata.uid, '0xc000000000000000', '0x10000000000000000') + + This is an alpha field and requires enabling the ShardedListAndWatch feature gate. + in: query + name: shardSelector + schema: + type: string + - description: "Timeout for the list/watch call. This limits the duration of\ + \ the call, regardless of any activity or inactivity." + in: query + name: timeoutSeconds + schema: + type: integer requestBody: content: application/json: @@ -78610,42 +80604,27 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1alpha3.DeviceTaintRule" + $ref: "#/components/schemas/v1.Status" application/yaml: schema: - $ref: "#/components/schemas/v1alpha3.DeviceTaintRule" + $ref: "#/components/schemas/v1.Status" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1alpha3.DeviceTaintRule" + $ref: "#/components/schemas/v1.Status" application/cbor: schema: - $ref: "#/components/schemas/v1alpha3.DeviceTaintRule" + $ref: "#/components/schemas/v1.Status" description: OK - "202": - content: - application/json: - schema: - $ref: "#/components/schemas/v1alpha3.DeviceTaintRule" - application/yaml: - schema: - $ref: "#/components/schemas/v1alpha3.DeviceTaintRule" - application/vnd.kubernetes.protobuf: - schema: - $ref: "#/components/schemas/v1alpha3.DeviceTaintRule" - application/cbor: - schema: - $ref: "#/components/schemas/v1alpha3.DeviceTaintRule" - description: Accepted "401": content: {} description: Unauthorized tags: - - resource_v1alpha3 - x-kubernetes-action: delete + - resource_v1 + x-kubernetes-action: deletecollection x-kubernetes-group-version-kind: group: resource.k8s.io - kind: DeviceTaintRule - version: v1alpha3 + kind: ResourceSlice + version: v1 x-codegen-request-body-name: body x-content-type: application/json x-accepts: @@ -78654,15 +80633,9 @@ paths: - application/vnd.kubernetes.protobuf - application/yaml get: - description: read the specified DeviceTaintRule - operationId: readDeviceTaintRule + description: list or watch objects of kind ResourceSlice + operationId: listResourceSlice parameters: - - description: name of the DeviceTaintRule - in: path - name: name - required: true - schema: - type: string - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ \ and wget)." @@ -78670,47 +80643,164 @@ paths: name: pretty schema: type: string + - description: "allowWatchBookmarks requests watch events with type \"BOOKMARK\"\ + . Servers that do not implement bookmarks may ignore this flag and bookmarks\ + \ are sent at the server's discretion. Clients should not assume bookmarks\ + \ are returned at any specific interval, nor may they assume the server\ + \ will send any BOOKMARK event during a session. If this is not a watch,\ + \ this field is ignored." + in: query + name: allowWatchBookmarks + schema: + type: boolean + - description: |- + The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + + This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications. + in: query + name: continue + schema: + type: string + - description: A selector to restrict the list of returned objects by their + fields. Defaults to everything. + in: query + name: fieldSelector + schema: + type: string + - description: A selector to restrict the list of returned objects by their + labels. Defaults to everything. + in: query + name: labelSelector + schema: + type: string + - description: |- + limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + + The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned. + in: query + name: limit + schema: + type: integer + - description: |- + resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + + Defaults to unset + in: query + name: resourceVersion + schema: + type: string + - description: |- + resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + + Defaults to unset + in: query + name: resourceVersionMatch + schema: + type: string + - description: |- + `sendInitialEvents=true` may be set together with `watch=true`. In that case, the watch stream will begin with synthetic events to produce the current state of objects in the collection. Once all such events have been sent, a synthetic "Bookmark" event will be sent. The bookmark will report the ResourceVersion (RV) corresponding to the set of objects, and be marked with `"k8s.io/initial-events-end": "true"` annotation. Afterwards, the watch stream will proceed as usual, sending watch events corresponding to changes (subsequent to the RV) to objects watched. + + When `sendInitialEvents` option is set, we require `resourceVersionMatch` option to also be set. The semantic of the watch request is as following: - `resourceVersionMatch` = NotOlderThan + is interpreted as "data at least as new as the provided `resourceVersion`" + and the bookmark event is send when the state is synced + to a `resourceVersion` at least as fresh as the one provided by the ListOptions. + If `resourceVersion` is unset, this is interpreted as "consistent read" and the + bookmark event is send when the state is synced at least to the moment + when request started being processed. + - `resourceVersionMatch` set to any other value or unset + Invalid error is returned. + + Defaults to true if `resourceVersion=""` or `resourceVersion="0"` (for backward compatibility reasons) and to false otherwise. + in: query + name: sendInitialEvents + schema: + type: boolean + - description: |- + shardSelector restricts the list of returned objects using a CEL-based shard selector expression. The format uses the shardRange() function combined with || (logical OR) to specify one or more hash ranges: + + shardRange(object.metadata.uid, '0x0', '0x8000000000000000') + shardRange(object.metadata.uid, '0x0', '0x8000000000000000') || shardRange(object.metadata.uid, '0x8000000000000000', '0x10000000000000000') + + Field paths use CEL-style object-rooted syntax (e.g. "object.metadata.uid"), NOT the fieldSelector format ("metadata.uid"). Currently supported paths: + - object.metadata.uid + - object.metadata.namespace + + hexStart and hexEnd are single-quoted CEL string literals with a '0x' prefix, defining the inclusive lower and exclusive upper bounds over the 64-bit FNV-1a hash space. The full range is [0x0, 0x10000000000000000), where the exclusive upper bound equals 2^64. + + Examples: + 2-shard split: + shard 0: shardRange(object.metadata.uid, '0x0000000000000000', '0x8000000000000000') + shard 1: shardRange(object.metadata.uid, '0x8000000000000000', '0x10000000000000000') + 4-shard split: + shard 0: shardRange(object.metadata.uid, '0x0000000000000000', '0x4000000000000000') + shard 1: shardRange(object.metadata.uid, '0x4000000000000000', '0x8000000000000000') + shard 2: shardRange(object.metadata.uid, '0x8000000000000000', '0xc000000000000000') + shard 3: shardRange(object.metadata.uid, '0xc000000000000000', '0x10000000000000000') + + This is an alpha field and requires enabling the ShardedListAndWatch feature gate. + in: query + name: shardSelector + schema: + type: string + - description: "Timeout for the list/watch call. This limits the duration of\ + \ the call, regardless of any activity or inactivity." + in: query + name: timeoutSeconds + schema: + type: integer + - description: "Watch for changes to the described resources and return them\ + \ as a stream of add, update, and remove notifications. Specify resourceVersion." + in: query + name: watch + schema: + type: boolean responses: "200": content: application/json: schema: - $ref: "#/components/schemas/v1alpha3.DeviceTaintRule" + $ref: "#/components/schemas/v1.ResourceSliceList" application/yaml: schema: - $ref: "#/components/schemas/v1alpha3.DeviceTaintRule" + $ref: "#/components/schemas/v1.ResourceSliceList" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1alpha3.DeviceTaintRule" + $ref: "#/components/schemas/v1.ResourceSliceList" application/cbor: schema: - $ref: "#/components/schemas/v1alpha3.DeviceTaintRule" + $ref: "#/components/schemas/v1.ResourceSliceList" + application/json;stream=watch: + schema: + $ref: "#/components/schemas/v1.ResourceSliceList" + application/vnd.kubernetes.protobuf;stream=watch: + schema: + $ref: "#/components/schemas/v1.ResourceSliceList" + application/cbor-seq: + schema: + $ref: "#/components/schemas/v1.ResourceSliceList" description: OK "401": content: {} description: Unauthorized tags: - - resource_v1alpha3 - x-kubernetes-action: get + - resource_v1 + x-kubernetes-action: list x-kubernetes-group-version-kind: group: resource.k8s.io - kind: DeviceTaintRule - version: v1alpha3 + kind: ResourceSlice + version: v1 x-accepts: - application/cbor + - application/cbor-seq - application/json + - application/json;stream=watch - application/vnd.kubernetes.protobuf + - application/vnd.kubernetes.protobuf;stream=watch - application/yaml - patch: - description: partially update the specified DeviceTaintRule - operationId: patchDeviceTaintRule + post: + description: create a ResourceSlice + operationId: createResourceSlice parameters: - - description: name of the DeviceTaintRule - in: path - name: name - required: true - schema: - type: string - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ \ and wget)." @@ -78728,9 +80818,7 @@ paths: type: string - description: "fieldManager is a name associated with the actor or entity that\ \ is making these changes. The value must be less than or 128 characters\ - \ long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.\ - \ This field is required for apply requests (application/apply-patch) but\ - \ optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch)." + \ long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." in: query name: fieldManager schema: @@ -78752,60 +80840,68 @@ paths: name: fieldValidation schema: type: string - - description: Force is going to "force" Apply requests. It means user will - re-acquire conflicting fields owned by other people. Force flag must be - unset for non-apply patch requests. - in: query - name: force - schema: - type: boolean requestBody: content: application/json: schema: - $ref: "#/components/schemas/v1.Patch" + $ref: "#/components/schemas/v1.ResourceSlice" required: true responses: "200": content: application/json: schema: - $ref: "#/components/schemas/v1alpha3.DeviceTaintRule" + $ref: "#/components/schemas/v1.ResourceSlice" application/yaml: schema: - $ref: "#/components/schemas/v1alpha3.DeviceTaintRule" + $ref: "#/components/schemas/v1.ResourceSlice" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1alpha3.DeviceTaintRule" + $ref: "#/components/schemas/v1.ResourceSlice" application/cbor: schema: - $ref: "#/components/schemas/v1alpha3.DeviceTaintRule" + $ref: "#/components/schemas/v1.ResourceSlice" description: OK "201": content: application/json: schema: - $ref: "#/components/schemas/v1alpha3.DeviceTaintRule" + $ref: "#/components/schemas/v1.ResourceSlice" application/yaml: schema: - $ref: "#/components/schemas/v1alpha3.DeviceTaintRule" + $ref: "#/components/schemas/v1.ResourceSlice" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1alpha3.DeviceTaintRule" + $ref: "#/components/schemas/v1.ResourceSlice" application/cbor: schema: - $ref: "#/components/schemas/v1alpha3.DeviceTaintRule" + $ref: "#/components/schemas/v1.ResourceSlice" description: Created + "202": + content: + application/json: + schema: + $ref: "#/components/schemas/v1.ResourceSlice" + application/yaml: + schema: + $ref: "#/components/schemas/v1.ResourceSlice" + application/vnd.kubernetes.protobuf: + schema: + $ref: "#/components/schemas/v1.ResourceSlice" + application/cbor: + schema: + $ref: "#/components/schemas/v1.ResourceSlice" + description: Accepted "401": content: {} description: Unauthorized tags: - - resource_v1alpha3 - x-kubernetes-action: patch + - resource_v1 + x-kubernetes-action: post x-kubernetes-group-version-kind: group: resource.k8s.io - kind: DeviceTaintRule - version: v1alpha3 + kind: ResourceSlice + version: v1 x-codegen-request-body-name: body x-content-type: application/json x-accepts: @@ -78813,11 +80909,12 @@ paths: - application/json - application/vnd.kubernetes.protobuf - application/yaml - put: - description: replace the specified DeviceTaintRule - operationId: replaceDeviceTaintRule + /apis/resource.k8s.io/v1/resourceslices/{name}: + delete: + description: delete a ResourceSlice + operationId: deleteResourceSlice parameters: - - description: name of the DeviceTaintRule + - description: name of the ResourceSlice in: path name: name required: true @@ -78838,77 +80935,96 @@ paths: name: dryRun schema: type: string - - description: "fieldManager is a name associated with the actor or entity that\ - \ is making these changes. The value must be less than or 128 characters\ - \ long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." + - description: "The duration in seconds before the object should be deleted.\ + \ Value must be non-negative integer. The value zero indicates delete immediately.\ + \ If this value is nil, the default grace period for the specified type\ + \ will be used. Defaults to a per object value if not specified. zero means\ + \ delete immediately." in: query - name: fieldManager + name: gracePeriodSeconds schema: - type: string - - description: "fieldValidation instructs the server on how to handle objects\ - \ in the request (POST/PUT/PATCH) containing unknown or duplicate fields.\ - \ Valid values are: - Ignore: This will ignore any unknown fields that are\ - \ silently dropped from the object, and will ignore all but the last duplicate\ - \ field that the decoder encounters. This is the default behavior prior\ - \ to v1.23. - Warn: This will send a warning via the standard warning response\ - \ header for each unknown field that is dropped from the object, and for\ - \ each duplicate field that is encountered. The request will still succeed\ - \ if there are no other errors, and will only persist the last of any duplicate\ - \ fields. This is the default in v1.23+ - Strict: This will fail the request\ - \ with a BadRequest error if any unknown fields would be dropped from the\ - \ object, or if any duplicate fields are present. The error returned from\ - \ the server will contain all unknown and duplicate fields encountered." + type: integer + - description: "if set to true, it will trigger an unsafe deletion of the resource\ + \ in case the normal deletion flow fails with a corrupt object error. A\ + \ resource is considered corrupt if it can not be retrieved from the underlying\ + \ storage successfully because of a) its data can not be transformed e.g.\ + \ decryption failure, or b) it fails to decode into an object. NOTE: unsafe\ + \ deletion ignores finalizer constraints, skips precondition checks, and\ + \ removes the object from the storage. WARNING: This may potentially break\ + \ the cluster if the workload associated with the resource being unsafe-deleted\ + \ relies on normal deletion flow. Use only if you REALLY know what you are\ + \ doing. The default value is false, and the user must opt in to enable\ + \ it" in: query - name: fieldValidation + name: ignoreStoreReadErrorWithClusterBreakingPotential + schema: + type: boolean + - description: "Deprecated: please use the PropagationPolicy, this field will\ + \ be deprecated in 1.7. Should the dependent objects be orphaned. If true/false,\ + \ the \"orphan\" finalizer will be added to/removed from the object's finalizers\ + \ list. Either this field or PropagationPolicy may be set, but not both." + in: query + name: orphanDependents + schema: + type: boolean + - description: "Whether and how garbage collection will be performed. Either\ + \ this field or OrphanDependents may be set, but not both. The default policy\ + \ is decided by the existing finalizer set in the metadata.finalizers and\ + \ the resource-specific default policy. Acceptable values are: 'Orphan'\ + \ - orphan the dependents; 'Background' - allow the garbage collector to\ + \ delete the dependents in the background; 'Foreground' - a cascading policy\ + \ that deletes all dependents in the foreground." + in: query + name: propagationPolicy schema: type: string requestBody: content: application/json: schema: - $ref: "#/components/schemas/v1alpha3.DeviceTaintRule" - required: true + $ref: "#/components/schemas/v1.DeleteOptions" + required: false responses: "200": content: application/json: schema: - $ref: "#/components/schemas/v1alpha3.DeviceTaintRule" + $ref: "#/components/schemas/v1.ResourceSlice" application/yaml: schema: - $ref: "#/components/schemas/v1alpha3.DeviceTaintRule" + $ref: "#/components/schemas/v1.ResourceSlice" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1alpha3.DeviceTaintRule" + $ref: "#/components/schemas/v1.ResourceSlice" application/cbor: schema: - $ref: "#/components/schemas/v1alpha3.DeviceTaintRule" + $ref: "#/components/schemas/v1.ResourceSlice" description: OK - "201": + "202": content: application/json: schema: - $ref: "#/components/schemas/v1alpha3.DeviceTaintRule" + $ref: "#/components/schemas/v1.ResourceSlice" application/yaml: schema: - $ref: "#/components/schemas/v1alpha3.DeviceTaintRule" + $ref: "#/components/schemas/v1.ResourceSlice" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1alpha3.DeviceTaintRule" + $ref: "#/components/schemas/v1.ResourceSlice" application/cbor: schema: - $ref: "#/components/schemas/v1alpha3.DeviceTaintRule" - description: Created + $ref: "#/components/schemas/v1.ResourceSlice" + description: Accepted "401": content: {} description: Unauthorized tags: - - resource_v1alpha3 - x-kubernetes-action: put + - resource_v1 + x-kubernetes-action: delete x-kubernetes-group-version-kind: group: resource.k8s.io - kind: DeviceTaintRule - version: v1alpha3 + kind: ResourceSlice + version: v1 x-codegen-request-body-name: body x-content-type: application/json x-accepts: @@ -78916,12 +81032,11 @@ paths: - application/json - application/vnd.kubernetes.protobuf - application/yaml - /apis/resource.k8s.io/v1alpha3/devicetaintrules/{name}/status: get: - description: read status of the specified DeviceTaintRule - operationId: readDeviceTaintRuleStatus + description: read the specified ResourceSlice + operationId: readResourceSlice parameters: - - description: name of the DeviceTaintRule + - description: name of the ResourceSlice in: path name: name required: true @@ -78939,37 +81054,37 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1alpha3.DeviceTaintRule" + $ref: "#/components/schemas/v1.ResourceSlice" application/yaml: schema: - $ref: "#/components/schemas/v1alpha3.DeviceTaintRule" + $ref: "#/components/schemas/v1.ResourceSlice" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1alpha3.DeviceTaintRule" + $ref: "#/components/schemas/v1.ResourceSlice" application/cbor: schema: - $ref: "#/components/schemas/v1alpha3.DeviceTaintRule" + $ref: "#/components/schemas/v1.ResourceSlice" description: OK "401": content: {} description: Unauthorized tags: - - resource_v1alpha3 + - resource_v1 x-kubernetes-action: get x-kubernetes-group-version-kind: group: resource.k8s.io - kind: DeviceTaintRule - version: v1alpha3 + kind: ResourceSlice + version: v1 x-accepts: - application/cbor - application/json - application/vnd.kubernetes.protobuf - application/yaml patch: - description: partially update status of the specified DeviceTaintRule - operationId: patchDeviceTaintRuleStatus + description: partially update the specified ResourceSlice + operationId: patchResourceSlice parameters: - - description: name of the DeviceTaintRule + - description: name of the ResourceSlice in: path name: name required: true @@ -79034,42 +81149,42 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1alpha3.DeviceTaintRule" + $ref: "#/components/schemas/v1.ResourceSlice" application/yaml: schema: - $ref: "#/components/schemas/v1alpha3.DeviceTaintRule" + $ref: "#/components/schemas/v1.ResourceSlice" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1alpha3.DeviceTaintRule" + $ref: "#/components/schemas/v1.ResourceSlice" application/cbor: schema: - $ref: "#/components/schemas/v1alpha3.DeviceTaintRule" + $ref: "#/components/schemas/v1.ResourceSlice" description: OK "201": content: application/json: schema: - $ref: "#/components/schemas/v1alpha3.DeviceTaintRule" + $ref: "#/components/schemas/v1.ResourceSlice" application/yaml: schema: - $ref: "#/components/schemas/v1alpha3.DeviceTaintRule" + $ref: "#/components/schemas/v1.ResourceSlice" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1alpha3.DeviceTaintRule" + $ref: "#/components/schemas/v1.ResourceSlice" application/cbor: schema: - $ref: "#/components/schemas/v1alpha3.DeviceTaintRule" + $ref: "#/components/schemas/v1.ResourceSlice" description: Created "401": content: {} description: Unauthorized tags: - - resource_v1alpha3 + - resource_v1 x-kubernetes-action: patch x-kubernetes-group-version-kind: group: resource.k8s.io - kind: DeviceTaintRule - version: v1alpha3 + kind: ResourceSlice + version: v1 x-codegen-request-body-name: body x-content-type: application/json x-accepts: @@ -79078,10 +81193,10 @@ paths: - application/vnd.kubernetes.protobuf - application/yaml put: - description: replace status of the specified DeviceTaintRule - operationId: replaceDeviceTaintRuleStatus + description: replace the specified ResourceSlice + operationId: replaceResourceSlice parameters: - - description: name of the DeviceTaintRule + - description: name of the ResourceSlice in: path name: name required: true @@ -79130,49 +81245,49 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1alpha3.DeviceTaintRule" + $ref: "#/components/schemas/v1.ResourceSlice" required: true responses: "200": content: application/json: schema: - $ref: "#/components/schemas/v1alpha3.DeviceTaintRule" + $ref: "#/components/schemas/v1.ResourceSlice" application/yaml: schema: - $ref: "#/components/schemas/v1alpha3.DeviceTaintRule" + $ref: "#/components/schemas/v1.ResourceSlice" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1alpha3.DeviceTaintRule" + $ref: "#/components/schemas/v1.ResourceSlice" application/cbor: schema: - $ref: "#/components/schemas/v1alpha3.DeviceTaintRule" + $ref: "#/components/schemas/v1.ResourceSlice" description: OK "201": content: application/json: schema: - $ref: "#/components/schemas/v1alpha3.DeviceTaintRule" + $ref: "#/components/schemas/v1.ResourceSlice" application/yaml: schema: - $ref: "#/components/schemas/v1alpha3.DeviceTaintRule" + $ref: "#/components/schemas/v1.ResourceSlice" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1alpha3.DeviceTaintRule" + $ref: "#/components/schemas/v1.ResourceSlice" application/cbor: schema: - $ref: "#/components/schemas/v1alpha3.DeviceTaintRule" + $ref: "#/components/schemas/v1.ResourceSlice" description: Created "401": content: {} description: Unauthorized tags: - - resource_v1alpha3 + - resource_v1 x-kubernetes-action: put x-kubernetes-group-version-kind: group: resource.k8s.io - kind: DeviceTaintRule - version: v1alpha3 + kind: ResourceSlice + version: v1 x-codegen-request-body-name: body x-content-type: application/json x-accepts: @@ -79180,10 +81295,52 @@ paths: - application/json - application/vnd.kubernetes.protobuf - application/yaml - /apis/resource.k8s.io/v1alpha3/resourcepoolstatusrequests: + /apis/resource.k8s.io/v1/watch/deviceclasses: {} + /apis/resource.k8s.io/v1/watch/deviceclasses/{name}: {} + /apis/resource.k8s.io/v1/watch/devicetaintrules: {} + /apis/resource.k8s.io/v1/watch/devicetaintrules/{name}: {} + /apis/resource.k8s.io/v1/watch/namespaces/{namespace}/resourceclaims: {} + /apis/resource.k8s.io/v1/watch/namespaces/{namespace}/resourceclaims/{name}: {} + /apis/resource.k8s.io/v1/watch/namespaces/{namespace}/resourceclaimtemplates: {} + /apis/resource.k8s.io/v1/watch/namespaces/{namespace}/resourceclaimtemplates/{name}: {} + /apis/resource.k8s.io/v1/watch/resourceclaims: {} + /apis/resource.k8s.io/v1/watch/resourceclaimtemplates: {} + /apis/resource.k8s.io/v1/watch/resourceslices: {} + /apis/resource.k8s.io/v1/watch/resourceslices/{name}: {} + /apis/resource.k8s.io/v1alpha3/: + get: + description: get available resources + operationId: getAPIResources + responses: + "200": + content: + application/json: + schema: + $ref: "#/components/schemas/v1.APIResourceList" + application/yaml: + schema: + $ref: "#/components/schemas/v1.APIResourceList" + application/vnd.kubernetes.protobuf: + schema: + $ref: "#/components/schemas/v1.APIResourceList" + application/cbor: + schema: + $ref: "#/components/schemas/v1.APIResourceList" + description: OK + "401": + content: {} + description: Unauthorized + tags: + - resource_v1alpha3 + x-accepts: + - application/cbor + - application/json + - application/vnd.kubernetes.protobuf + - application/yaml + /apis/resource.k8s.io/v1alpha3/devicetaintrules: delete: - description: delete collection of ResourcePoolStatusRequest - operationId: deleteCollectionResourcePoolStatusRequest + description: delete collection of DeviceTaintRule + operationId: deleteCollectionDeviceTaintRule parameters: - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ @@ -79368,7 +81525,7 @@ paths: x-kubernetes-action: deletecollection x-kubernetes-group-version-kind: group: resource.k8s.io - kind: ResourcePoolStatusRequest + kind: DeviceTaintRule version: v1alpha3 x-codegen-request-body-name: body x-content-type: application/json @@ -79378,8 +81535,8 @@ paths: - application/vnd.kubernetes.protobuf - application/yaml get: - description: list or watch objects of kind ResourcePoolStatusRequest - operationId: listResourcePoolStatusRequest + description: list or watch objects of kind DeviceTaintRule + operationId: listDeviceTaintRule parameters: - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ @@ -79504,25 +81661,25 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1alpha3.ResourcePoolStatusRequestList" + $ref: "#/components/schemas/v1alpha3.DeviceTaintRuleList" application/yaml: schema: - $ref: "#/components/schemas/v1alpha3.ResourcePoolStatusRequestList" + $ref: "#/components/schemas/v1alpha3.DeviceTaintRuleList" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1alpha3.ResourcePoolStatusRequestList" + $ref: "#/components/schemas/v1alpha3.DeviceTaintRuleList" application/cbor: schema: - $ref: "#/components/schemas/v1alpha3.ResourcePoolStatusRequestList" + $ref: "#/components/schemas/v1alpha3.DeviceTaintRuleList" application/json;stream=watch: schema: - $ref: "#/components/schemas/v1alpha3.ResourcePoolStatusRequestList" + $ref: "#/components/schemas/v1alpha3.DeviceTaintRuleList" application/vnd.kubernetes.protobuf;stream=watch: schema: - $ref: "#/components/schemas/v1alpha3.ResourcePoolStatusRequestList" + $ref: "#/components/schemas/v1alpha3.DeviceTaintRuleList" application/cbor-seq: schema: - $ref: "#/components/schemas/v1alpha3.ResourcePoolStatusRequestList" + $ref: "#/components/schemas/v1alpha3.DeviceTaintRuleList" description: OK "401": content: {} @@ -79532,7 +81689,7 @@ paths: x-kubernetes-action: list x-kubernetes-group-version-kind: group: resource.k8s.io - kind: ResourcePoolStatusRequest + kind: DeviceTaintRule version: v1alpha3 x-accepts: - application/cbor @@ -79543,8 +81700,8 @@ paths: - application/vnd.kubernetes.protobuf;stream=watch - application/yaml post: - description: create a ResourcePoolStatusRequest - operationId: createResourcePoolStatusRequest + description: create a DeviceTaintRule + operationId: createDeviceTaintRule parameters: - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ @@ -79589,53 +81746,53 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1alpha3.ResourcePoolStatusRequest" + $ref: "#/components/schemas/v1alpha3.DeviceTaintRule" required: true responses: "200": content: application/json: schema: - $ref: "#/components/schemas/v1alpha3.ResourcePoolStatusRequest" + $ref: "#/components/schemas/v1alpha3.DeviceTaintRule" application/yaml: schema: - $ref: "#/components/schemas/v1alpha3.ResourcePoolStatusRequest" + $ref: "#/components/schemas/v1alpha3.DeviceTaintRule" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1alpha3.ResourcePoolStatusRequest" + $ref: "#/components/schemas/v1alpha3.DeviceTaintRule" application/cbor: schema: - $ref: "#/components/schemas/v1alpha3.ResourcePoolStatusRequest" + $ref: "#/components/schemas/v1alpha3.DeviceTaintRule" description: OK "201": content: application/json: schema: - $ref: "#/components/schemas/v1alpha3.ResourcePoolStatusRequest" + $ref: "#/components/schemas/v1alpha3.DeviceTaintRule" application/yaml: schema: - $ref: "#/components/schemas/v1alpha3.ResourcePoolStatusRequest" + $ref: "#/components/schemas/v1alpha3.DeviceTaintRule" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1alpha3.ResourcePoolStatusRequest" + $ref: "#/components/schemas/v1alpha3.DeviceTaintRule" application/cbor: schema: - $ref: "#/components/schemas/v1alpha3.ResourcePoolStatusRequest" + $ref: "#/components/schemas/v1alpha3.DeviceTaintRule" description: Created "202": content: application/json: schema: - $ref: "#/components/schemas/v1alpha3.ResourcePoolStatusRequest" + $ref: "#/components/schemas/v1alpha3.DeviceTaintRule" application/yaml: schema: - $ref: "#/components/schemas/v1alpha3.ResourcePoolStatusRequest" + $ref: "#/components/schemas/v1alpha3.DeviceTaintRule" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1alpha3.ResourcePoolStatusRequest" + $ref: "#/components/schemas/v1alpha3.DeviceTaintRule" application/cbor: schema: - $ref: "#/components/schemas/v1alpha3.ResourcePoolStatusRequest" + $ref: "#/components/schemas/v1alpha3.DeviceTaintRule" description: Accepted "401": content: {} @@ -79645,7 +81802,7 @@ paths: x-kubernetes-action: post x-kubernetes-group-version-kind: group: resource.k8s.io - kind: ResourcePoolStatusRequest + kind: DeviceTaintRule version: v1alpha3 x-codegen-request-body-name: body x-content-type: application/json @@ -79654,12 +81811,12 @@ paths: - application/json - application/vnd.kubernetes.protobuf - application/yaml - /apis/resource.k8s.io/v1alpha3/resourcepoolstatusrequests/{name}: + /apis/resource.k8s.io/v1alpha3/devicetaintrules/{name}: delete: - description: delete a ResourcePoolStatusRequest - operationId: deleteResourcePoolStatusRequest + description: delete a DeviceTaintRule + operationId: deleteDeviceTaintRule parameters: - - description: name of the ResourcePoolStatusRequest + - description: name of the DeviceTaintRule in: path name: name required: true @@ -79734,31 +81891,31 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1alpha3.ResourcePoolStatusRequest" + $ref: "#/components/schemas/v1alpha3.DeviceTaintRule" application/yaml: schema: - $ref: "#/components/schemas/v1alpha3.ResourcePoolStatusRequest" + $ref: "#/components/schemas/v1alpha3.DeviceTaintRule" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1alpha3.ResourcePoolStatusRequest" + $ref: "#/components/schemas/v1alpha3.DeviceTaintRule" application/cbor: schema: - $ref: "#/components/schemas/v1alpha3.ResourcePoolStatusRequest" + $ref: "#/components/schemas/v1alpha3.DeviceTaintRule" description: OK "202": content: application/json: schema: - $ref: "#/components/schemas/v1alpha3.ResourcePoolStatusRequest" + $ref: "#/components/schemas/v1alpha3.DeviceTaintRule" application/yaml: schema: - $ref: "#/components/schemas/v1alpha3.ResourcePoolStatusRequest" + $ref: "#/components/schemas/v1alpha3.DeviceTaintRule" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1alpha3.ResourcePoolStatusRequest" + $ref: "#/components/schemas/v1alpha3.DeviceTaintRule" application/cbor: schema: - $ref: "#/components/schemas/v1alpha3.ResourcePoolStatusRequest" + $ref: "#/components/schemas/v1alpha3.DeviceTaintRule" description: Accepted "401": content: {} @@ -79768,7 +81925,7 @@ paths: x-kubernetes-action: delete x-kubernetes-group-version-kind: group: resource.k8s.io - kind: ResourcePoolStatusRequest + kind: DeviceTaintRule version: v1alpha3 x-codegen-request-body-name: body x-content-type: application/json @@ -79778,10 +81935,10 @@ paths: - application/vnd.kubernetes.protobuf - application/yaml get: - description: read the specified ResourcePoolStatusRequest - operationId: readResourcePoolStatusRequest + description: read the specified DeviceTaintRule + operationId: readDeviceTaintRule parameters: - - description: name of the ResourcePoolStatusRequest + - description: name of the DeviceTaintRule in: path name: name required: true @@ -79799,16 +81956,16 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1alpha3.ResourcePoolStatusRequest" + $ref: "#/components/schemas/v1alpha3.DeviceTaintRule" application/yaml: schema: - $ref: "#/components/schemas/v1alpha3.ResourcePoolStatusRequest" + $ref: "#/components/schemas/v1alpha3.DeviceTaintRule" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1alpha3.ResourcePoolStatusRequest" + $ref: "#/components/schemas/v1alpha3.DeviceTaintRule" application/cbor: schema: - $ref: "#/components/schemas/v1alpha3.ResourcePoolStatusRequest" + $ref: "#/components/schemas/v1alpha3.DeviceTaintRule" description: OK "401": content: {} @@ -79818,7 +81975,7 @@ paths: x-kubernetes-action: get x-kubernetes-group-version-kind: group: resource.k8s.io - kind: ResourcePoolStatusRequest + kind: DeviceTaintRule version: v1alpha3 x-accepts: - application/cbor @@ -79826,10 +81983,10 @@ paths: - application/vnd.kubernetes.protobuf - application/yaml patch: - description: partially update the specified ResourcePoolStatusRequest - operationId: patchResourcePoolStatusRequest + description: partially update the specified DeviceTaintRule + operationId: patchDeviceTaintRule parameters: - - description: name of the ResourcePoolStatusRequest + - description: name of the DeviceTaintRule in: path name: name required: true @@ -79894,31 +82051,31 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1alpha3.ResourcePoolStatusRequest" + $ref: "#/components/schemas/v1alpha3.DeviceTaintRule" application/yaml: schema: - $ref: "#/components/schemas/v1alpha3.ResourcePoolStatusRequest" + $ref: "#/components/schemas/v1alpha3.DeviceTaintRule" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1alpha3.ResourcePoolStatusRequest" + $ref: "#/components/schemas/v1alpha3.DeviceTaintRule" application/cbor: schema: - $ref: "#/components/schemas/v1alpha3.ResourcePoolStatusRequest" + $ref: "#/components/schemas/v1alpha3.DeviceTaintRule" description: OK "201": content: application/json: schema: - $ref: "#/components/schemas/v1alpha3.ResourcePoolStatusRequest" + $ref: "#/components/schemas/v1alpha3.DeviceTaintRule" application/yaml: schema: - $ref: "#/components/schemas/v1alpha3.ResourcePoolStatusRequest" + $ref: "#/components/schemas/v1alpha3.DeviceTaintRule" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1alpha3.ResourcePoolStatusRequest" + $ref: "#/components/schemas/v1alpha3.DeviceTaintRule" application/cbor: schema: - $ref: "#/components/schemas/v1alpha3.ResourcePoolStatusRequest" + $ref: "#/components/schemas/v1alpha3.DeviceTaintRule" description: Created "401": content: {} @@ -79928,7 +82085,7 @@ paths: x-kubernetes-action: patch x-kubernetes-group-version-kind: group: resource.k8s.io - kind: ResourcePoolStatusRequest + kind: DeviceTaintRule version: v1alpha3 x-codegen-request-body-name: body x-content-type: application/json @@ -79938,10 +82095,10 @@ paths: - application/vnd.kubernetes.protobuf - application/yaml put: - description: replace the specified ResourcePoolStatusRequest - operationId: replaceResourcePoolStatusRequest + description: replace the specified DeviceTaintRule + operationId: replaceDeviceTaintRule parameters: - - description: name of the ResourcePoolStatusRequest + - description: name of the DeviceTaintRule in: path name: name required: true @@ -79990,38 +82147,38 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1alpha3.ResourcePoolStatusRequest" + $ref: "#/components/schemas/v1alpha3.DeviceTaintRule" required: true responses: "200": content: application/json: schema: - $ref: "#/components/schemas/v1alpha3.ResourcePoolStatusRequest" + $ref: "#/components/schemas/v1alpha3.DeviceTaintRule" application/yaml: schema: - $ref: "#/components/schemas/v1alpha3.ResourcePoolStatusRequest" + $ref: "#/components/schemas/v1alpha3.DeviceTaintRule" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1alpha3.ResourcePoolStatusRequest" + $ref: "#/components/schemas/v1alpha3.DeviceTaintRule" application/cbor: schema: - $ref: "#/components/schemas/v1alpha3.ResourcePoolStatusRequest" + $ref: "#/components/schemas/v1alpha3.DeviceTaintRule" description: OK "201": content: application/json: schema: - $ref: "#/components/schemas/v1alpha3.ResourcePoolStatusRequest" + $ref: "#/components/schemas/v1alpha3.DeviceTaintRule" application/yaml: schema: - $ref: "#/components/schemas/v1alpha3.ResourcePoolStatusRequest" + $ref: "#/components/schemas/v1alpha3.DeviceTaintRule" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1alpha3.ResourcePoolStatusRequest" + $ref: "#/components/schemas/v1alpha3.DeviceTaintRule" application/cbor: schema: - $ref: "#/components/schemas/v1alpha3.ResourcePoolStatusRequest" + $ref: "#/components/schemas/v1alpha3.DeviceTaintRule" description: Created "401": content: {} @@ -80031,7 +82188,7 @@ paths: x-kubernetes-action: put x-kubernetes-group-version-kind: group: resource.k8s.io - kind: ResourcePoolStatusRequest + kind: DeviceTaintRule version: v1alpha3 x-codegen-request-body-name: body x-content-type: application/json @@ -80040,12 +82197,12 @@ paths: - application/json - application/vnd.kubernetes.protobuf - application/yaml - /apis/resource.k8s.io/v1alpha3/resourcepoolstatusrequests/{name}/status: + /apis/resource.k8s.io/v1alpha3/devicetaintrules/{name}/status: get: - description: read status of the specified ResourcePoolStatusRequest - operationId: readResourcePoolStatusRequestStatus + description: read status of the specified DeviceTaintRule + operationId: readDeviceTaintRuleStatus parameters: - - description: name of the ResourcePoolStatusRequest + - description: name of the DeviceTaintRule in: path name: name required: true @@ -80063,16 +82220,16 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1alpha3.ResourcePoolStatusRequest" + $ref: "#/components/schemas/v1alpha3.DeviceTaintRule" application/yaml: schema: - $ref: "#/components/schemas/v1alpha3.ResourcePoolStatusRequest" + $ref: "#/components/schemas/v1alpha3.DeviceTaintRule" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1alpha3.ResourcePoolStatusRequest" + $ref: "#/components/schemas/v1alpha3.DeviceTaintRule" application/cbor: schema: - $ref: "#/components/schemas/v1alpha3.ResourcePoolStatusRequest" + $ref: "#/components/schemas/v1alpha3.DeviceTaintRule" description: OK "401": content: {} @@ -80082,7 +82239,7 @@ paths: x-kubernetes-action: get x-kubernetes-group-version-kind: group: resource.k8s.io - kind: ResourcePoolStatusRequest + kind: DeviceTaintRule version: v1alpha3 x-accepts: - application/cbor @@ -80090,10 +82247,10 @@ paths: - application/vnd.kubernetes.protobuf - application/yaml patch: - description: partially update status of the specified ResourcePoolStatusRequest - operationId: patchResourcePoolStatusRequestStatus + description: partially update status of the specified DeviceTaintRule + operationId: patchDeviceTaintRuleStatus parameters: - - description: name of the ResourcePoolStatusRequest + - description: name of the DeviceTaintRule in: path name: name required: true @@ -80158,31 +82315,31 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1alpha3.ResourcePoolStatusRequest" + $ref: "#/components/schemas/v1alpha3.DeviceTaintRule" application/yaml: schema: - $ref: "#/components/schemas/v1alpha3.ResourcePoolStatusRequest" + $ref: "#/components/schemas/v1alpha3.DeviceTaintRule" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1alpha3.ResourcePoolStatusRequest" + $ref: "#/components/schemas/v1alpha3.DeviceTaintRule" application/cbor: schema: - $ref: "#/components/schemas/v1alpha3.ResourcePoolStatusRequest" + $ref: "#/components/schemas/v1alpha3.DeviceTaintRule" description: OK "201": content: application/json: schema: - $ref: "#/components/schemas/v1alpha3.ResourcePoolStatusRequest" + $ref: "#/components/schemas/v1alpha3.DeviceTaintRule" application/yaml: schema: - $ref: "#/components/schemas/v1alpha3.ResourcePoolStatusRequest" + $ref: "#/components/schemas/v1alpha3.DeviceTaintRule" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1alpha3.ResourcePoolStatusRequest" + $ref: "#/components/schemas/v1alpha3.DeviceTaintRule" application/cbor: schema: - $ref: "#/components/schemas/v1alpha3.ResourcePoolStatusRequest" + $ref: "#/components/schemas/v1alpha3.DeviceTaintRule" description: Created "401": content: {} @@ -80192,7 +82349,7 @@ paths: x-kubernetes-action: patch x-kubernetes-group-version-kind: group: resource.k8s.io - kind: ResourcePoolStatusRequest + kind: DeviceTaintRule version: v1alpha3 x-codegen-request-body-name: body x-content-type: application/json @@ -80202,10 +82359,10 @@ paths: - application/vnd.kubernetes.protobuf - application/yaml put: - description: replace status of the specified ResourcePoolStatusRequest - operationId: replaceResourcePoolStatusRequestStatus + description: replace status of the specified DeviceTaintRule + operationId: replaceDeviceTaintRuleStatus parameters: - - description: name of the ResourcePoolStatusRequest + - description: name of the DeviceTaintRule in: path name: name required: true @@ -80254,38 +82411,38 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1alpha3.ResourcePoolStatusRequest" + $ref: "#/components/schemas/v1alpha3.DeviceTaintRule" required: true responses: "200": content: application/json: schema: - $ref: "#/components/schemas/v1alpha3.ResourcePoolStatusRequest" + $ref: "#/components/schemas/v1alpha3.DeviceTaintRule" application/yaml: schema: - $ref: "#/components/schemas/v1alpha3.ResourcePoolStatusRequest" + $ref: "#/components/schemas/v1alpha3.DeviceTaintRule" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1alpha3.ResourcePoolStatusRequest" + $ref: "#/components/schemas/v1alpha3.DeviceTaintRule" application/cbor: schema: - $ref: "#/components/schemas/v1alpha3.ResourcePoolStatusRequest" + $ref: "#/components/schemas/v1alpha3.DeviceTaintRule" description: OK "201": content: application/json: schema: - $ref: "#/components/schemas/v1alpha3.ResourcePoolStatusRequest" + $ref: "#/components/schemas/v1alpha3.DeviceTaintRule" application/yaml: schema: - $ref: "#/components/schemas/v1alpha3.ResourcePoolStatusRequest" + $ref: "#/components/schemas/v1alpha3.DeviceTaintRule" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1alpha3.ResourcePoolStatusRequest" + $ref: "#/components/schemas/v1alpha3.DeviceTaintRule" application/cbor: schema: - $ref: "#/components/schemas/v1alpha3.ResourcePoolStatusRequest" + $ref: "#/components/schemas/v1alpha3.DeviceTaintRule" description: Created "401": content: {} @@ -80295,7 +82452,7 @@ paths: x-kubernetes-action: put x-kubernetes-group-version-kind: group: resource.k8s.io - kind: ResourcePoolStatusRequest + kind: DeviceTaintRule version: v1alpha3 x-codegen-request-body-name: body x-content-type: application/json @@ -80304,44 +82461,10 @@ paths: - application/json - application/vnd.kubernetes.protobuf - application/yaml - /apis/resource.k8s.io/v1alpha3/watch/devicetaintrules: {} - /apis/resource.k8s.io/v1alpha3/watch/devicetaintrules/{name}: {} - /apis/resource.k8s.io/v1alpha3/watch/resourcepoolstatusrequests: {} - /apis/resource.k8s.io/v1alpha3/watch/resourcepoolstatusrequests/{name}: {} - /apis/resource.k8s.io/v1beta1/: - get: - description: get available resources - operationId: getAPIResources - responses: - "200": - content: - application/json: - schema: - $ref: "#/components/schemas/v1.APIResourceList" - application/yaml: - schema: - $ref: "#/components/schemas/v1.APIResourceList" - application/vnd.kubernetes.protobuf: - schema: - $ref: "#/components/schemas/v1.APIResourceList" - application/cbor: - schema: - $ref: "#/components/schemas/v1.APIResourceList" - description: OK - "401": - content: {} - description: Unauthorized - tags: - - resource_v1beta1 - x-accepts: - - application/cbor - - application/json - - application/vnd.kubernetes.protobuf - - application/yaml - /apis/resource.k8s.io/v1beta1/deviceclasses: + /apis/resource.k8s.io/v1alpha3/resourcepoolstatusrequests: delete: - description: delete collection of DeviceClass - operationId: deleteCollectionDeviceClass + description: delete collection of ResourcePoolStatusRequest + operationId: deleteCollectionResourcePoolStatusRequest parameters: - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ @@ -80522,12 +82645,12 @@ paths: content: {} description: Unauthorized tags: - - resource_v1beta1 + - resource_v1alpha3 x-kubernetes-action: deletecollection x-kubernetes-group-version-kind: group: resource.k8s.io - kind: DeviceClass - version: v1beta1 + kind: ResourcePoolStatusRequest + version: v1alpha3 x-codegen-request-body-name: body x-content-type: application/json x-accepts: @@ -80536,8 +82659,8 @@ paths: - application/vnd.kubernetes.protobuf - application/yaml get: - description: list or watch objects of kind DeviceClass - operationId: listDeviceClass + description: list or watch objects of kind ResourcePoolStatusRequest + operationId: listResourcePoolStatusRequest parameters: - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ @@ -80662,36 +82785,36 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1beta1.DeviceClassList" + $ref: "#/components/schemas/v1alpha3.ResourcePoolStatusRequestList" application/yaml: schema: - $ref: "#/components/schemas/v1beta1.DeviceClassList" + $ref: "#/components/schemas/v1alpha3.ResourcePoolStatusRequestList" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1beta1.DeviceClassList" + $ref: "#/components/schemas/v1alpha3.ResourcePoolStatusRequestList" application/cbor: schema: - $ref: "#/components/schemas/v1beta1.DeviceClassList" + $ref: "#/components/schemas/v1alpha3.ResourcePoolStatusRequestList" application/json;stream=watch: schema: - $ref: "#/components/schemas/v1beta1.DeviceClassList" + $ref: "#/components/schemas/v1alpha3.ResourcePoolStatusRequestList" application/vnd.kubernetes.protobuf;stream=watch: schema: - $ref: "#/components/schemas/v1beta1.DeviceClassList" + $ref: "#/components/schemas/v1alpha3.ResourcePoolStatusRequestList" application/cbor-seq: schema: - $ref: "#/components/schemas/v1beta1.DeviceClassList" + $ref: "#/components/schemas/v1alpha3.ResourcePoolStatusRequestList" description: OK "401": content: {} description: Unauthorized tags: - - resource_v1beta1 + - resource_v1alpha3 x-kubernetes-action: list x-kubernetes-group-version-kind: group: resource.k8s.io - kind: DeviceClass - version: v1beta1 + kind: ResourcePoolStatusRequest + version: v1alpha3 x-accepts: - application/cbor - application/cbor-seq @@ -80701,8 +82824,8 @@ paths: - application/vnd.kubernetes.protobuf;stream=watch - application/yaml post: - description: create a DeviceClass - operationId: createDeviceClass + description: create a ResourcePoolStatusRequest + operationId: createResourcePoolStatusRequest parameters: - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ @@ -80747,64 +82870,64 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1beta1.DeviceClass" + $ref: "#/components/schemas/v1alpha3.ResourcePoolStatusRequest" required: true responses: "200": content: application/json: schema: - $ref: "#/components/schemas/v1beta1.DeviceClass" + $ref: "#/components/schemas/v1alpha3.ResourcePoolStatusRequest" application/yaml: schema: - $ref: "#/components/schemas/v1beta1.DeviceClass" + $ref: "#/components/schemas/v1alpha3.ResourcePoolStatusRequest" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1beta1.DeviceClass" + $ref: "#/components/schemas/v1alpha3.ResourcePoolStatusRequest" application/cbor: schema: - $ref: "#/components/schemas/v1beta1.DeviceClass" + $ref: "#/components/schemas/v1alpha3.ResourcePoolStatusRequest" description: OK "201": content: application/json: schema: - $ref: "#/components/schemas/v1beta1.DeviceClass" + $ref: "#/components/schemas/v1alpha3.ResourcePoolStatusRequest" application/yaml: schema: - $ref: "#/components/schemas/v1beta1.DeviceClass" + $ref: "#/components/schemas/v1alpha3.ResourcePoolStatusRequest" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1beta1.DeviceClass" + $ref: "#/components/schemas/v1alpha3.ResourcePoolStatusRequest" application/cbor: schema: - $ref: "#/components/schemas/v1beta1.DeviceClass" + $ref: "#/components/schemas/v1alpha3.ResourcePoolStatusRequest" description: Created "202": content: application/json: schema: - $ref: "#/components/schemas/v1beta1.DeviceClass" + $ref: "#/components/schemas/v1alpha3.ResourcePoolStatusRequest" application/yaml: schema: - $ref: "#/components/schemas/v1beta1.DeviceClass" + $ref: "#/components/schemas/v1alpha3.ResourcePoolStatusRequest" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1beta1.DeviceClass" + $ref: "#/components/schemas/v1alpha3.ResourcePoolStatusRequest" application/cbor: schema: - $ref: "#/components/schemas/v1beta1.DeviceClass" + $ref: "#/components/schemas/v1alpha3.ResourcePoolStatusRequest" description: Accepted "401": content: {} description: Unauthorized tags: - - resource_v1beta1 + - resource_v1alpha3 x-kubernetes-action: post x-kubernetes-group-version-kind: group: resource.k8s.io - kind: DeviceClass - version: v1beta1 + kind: ResourcePoolStatusRequest + version: v1alpha3 x-codegen-request-body-name: body x-content-type: application/json x-accepts: @@ -80812,12 +82935,12 @@ paths: - application/json - application/vnd.kubernetes.protobuf - application/yaml - /apis/resource.k8s.io/v1beta1/deviceclasses/{name}: + /apis/resource.k8s.io/v1alpha3/resourcepoolstatusrequests/{name}: delete: - description: delete a DeviceClass - operationId: deleteDeviceClass + description: delete a ResourcePoolStatusRequest + operationId: deleteResourcePoolStatusRequest parameters: - - description: name of the DeviceClass + - description: name of the ResourcePoolStatusRequest in: path name: name required: true @@ -80892,42 +83015,42 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1beta1.DeviceClass" + $ref: "#/components/schemas/v1alpha3.ResourcePoolStatusRequest" application/yaml: schema: - $ref: "#/components/schemas/v1beta1.DeviceClass" + $ref: "#/components/schemas/v1alpha3.ResourcePoolStatusRequest" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1beta1.DeviceClass" + $ref: "#/components/schemas/v1alpha3.ResourcePoolStatusRequest" application/cbor: schema: - $ref: "#/components/schemas/v1beta1.DeviceClass" + $ref: "#/components/schemas/v1alpha3.ResourcePoolStatusRequest" description: OK "202": content: application/json: schema: - $ref: "#/components/schemas/v1beta1.DeviceClass" + $ref: "#/components/schemas/v1alpha3.ResourcePoolStatusRequest" application/yaml: schema: - $ref: "#/components/schemas/v1beta1.DeviceClass" + $ref: "#/components/schemas/v1alpha3.ResourcePoolStatusRequest" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1beta1.DeviceClass" + $ref: "#/components/schemas/v1alpha3.ResourcePoolStatusRequest" application/cbor: schema: - $ref: "#/components/schemas/v1beta1.DeviceClass" + $ref: "#/components/schemas/v1alpha3.ResourcePoolStatusRequest" description: Accepted "401": content: {} description: Unauthorized tags: - - resource_v1beta1 + - resource_v1alpha3 x-kubernetes-action: delete x-kubernetes-group-version-kind: group: resource.k8s.io - kind: DeviceClass - version: v1beta1 + kind: ResourcePoolStatusRequest + version: v1alpha3 x-codegen-request-body-name: body x-content-type: application/json x-accepts: @@ -80936,10 +83059,10 @@ paths: - application/vnd.kubernetes.protobuf - application/yaml get: - description: read the specified DeviceClass - operationId: readDeviceClass + description: read the specified ResourcePoolStatusRequest + operationId: readResourcePoolStatusRequest parameters: - - description: name of the DeviceClass + - description: name of the ResourcePoolStatusRequest in: path name: name required: true @@ -80957,37 +83080,37 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1beta1.DeviceClass" + $ref: "#/components/schemas/v1alpha3.ResourcePoolStatusRequest" application/yaml: schema: - $ref: "#/components/schemas/v1beta1.DeviceClass" + $ref: "#/components/schemas/v1alpha3.ResourcePoolStatusRequest" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1beta1.DeviceClass" + $ref: "#/components/schemas/v1alpha3.ResourcePoolStatusRequest" application/cbor: schema: - $ref: "#/components/schemas/v1beta1.DeviceClass" + $ref: "#/components/schemas/v1alpha3.ResourcePoolStatusRequest" description: OK "401": content: {} description: Unauthorized tags: - - resource_v1beta1 + - resource_v1alpha3 x-kubernetes-action: get x-kubernetes-group-version-kind: group: resource.k8s.io - kind: DeviceClass - version: v1beta1 + kind: ResourcePoolStatusRequest + version: v1alpha3 x-accepts: - application/cbor - application/json - application/vnd.kubernetes.protobuf - application/yaml patch: - description: partially update the specified DeviceClass - operationId: patchDeviceClass + description: partially update the specified ResourcePoolStatusRequest + operationId: patchResourcePoolStatusRequest parameters: - - description: name of the DeviceClass + - description: name of the ResourcePoolStatusRequest in: path name: name required: true @@ -81052,42 +83175,42 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1beta1.DeviceClass" + $ref: "#/components/schemas/v1alpha3.ResourcePoolStatusRequest" application/yaml: schema: - $ref: "#/components/schemas/v1beta1.DeviceClass" + $ref: "#/components/schemas/v1alpha3.ResourcePoolStatusRequest" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1beta1.DeviceClass" + $ref: "#/components/schemas/v1alpha3.ResourcePoolStatusRequest" application/cbor: schema: - $ref: "#/components/schemas/v1beta1.DeviceClass" + $ref: "#/components/schemas/v1alpha3.ResourcePoolStatusRequest" description: OK "201": content: application/json: schema: - $ref: "#/components/schemas/v1beta1.DeviceClass" + $ref: "#/components/schemas/v1alpha3.ResourcePoolStatusRequest" application/yaml: schema: - $ref: "#/components/schemas/v1beta1.DeviceClass" + $ref: "#/components/schemas/v1alpha3.ResourcePoolStatusRequest" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1beta1.DeviceClass" + $ref: "#/components/schemas/v1alpha3.ResourcePoolStatusRequest" application/cbor: schema: - $ref: "#/components/schemas/v1beta1.DeviceClass" + $ref: "#/components/schemas/v1alpha3.ResourcePoolStatusRequest" description: Created "401": content: {} description: Unauthorized tags: - - resource_v1beta1 + - resource_v1alpha3 x-kubernetes-action: patch x-kubernetes-group-version-kind: group: resource.k8s.io - kind: DeviceClass - version: v1beta1 + kind: ResourcePoolStatusRequest + version: v1alpha3 x-codegen-request-body-name: body x-content-type: application/json x-accepts: @@ -81096,10 +83219,10 @@ paths: - application/vnd.kubernetes.protobuf - application/yaml put: - description: replace the specified DeviceClass - operationId: replaceDeviceClass + description: replace the specified ResourcePoolStatusRequest + operationId: replaceResourcePoolStatusRequest parameters: - - description: name of the DeviceClass + - description: name of the ResourcePoolStatusRequest in: path name: name required: true @@ -81148,49 +83271,49 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1beta1.DeviceClass" + $ref: "#/components/schemas/v1alpha3.ResourcePoolStatusRequest" required: true responses: "200": content: application/json: schema: - $ref: "#/components/schemas/v1beta1.DeviceClass" + $ref: "#/components/schemas/v1alpha3.ResourcePoolStatusRequest" application/yaml: schema: - $ref: "#/components/schemas/v1beta1.DeviceClass" + $ref: "#/components/schemas/v1alpha3.ResourcePoolStatusRequest" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1beta1.DeviceClass" + $ref: "#/components/schemas/v1alpha3.ResourcePoolStatusRequest" application/cbor: schema: - $ref: "#/components/schemas/v1beta1.DeviceClass" + $ref: "#/components/schemas/v1alpha3.ResourcePoolStatusRequest" description: OK "201": content: application/json: schema: - $ref: "#/components/schemas/v1beta1.DeviceClass" + $ref: "#/components/schemas/v1alpha3.ResourcePoolStatusRequest" application/yaml: schema: - $ref: "#/components/schemas/v1beta1.DeviceClass" + $ref: "#/components/schemas/v1alpha3.ResourcePoolStatusRequest" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1beta1.DeviceClass" + $ref: "#/components/schemas/v1alpha3.ResourcePoolStatusRequest" application/cbor: schema: - $ref: "#/components/schemas/v1beta1.DeviceClass" + $ref: "#/components/schemas/v1alpha3.ResourcePoolStatusRequest" description: Created "401": content: {} description: Unauthorized tags: - - resource_v1beta1 + - resource_v1alpha3 x-kubernetes-action: put x-kubernetes-group-version-kind: group: resource.k8s.io - kind: DeviceClass - version: v1beta1 + kind: ResourcePoolStatusRequest + version: v1alpha3 x-codegen-request-body-name: body x-content-type: application/json x-accepts: @@ -81198,17 +83321,309 @@ paths: - application/json - application/vnd.kubernetes.protobuf - application/yaml - /apis/resource.k8s.io/v1beta1/namespaces/{namespace}/resourceclaims: - delete: - description: delete collection of ResourceClaim - operationId: deleteCollectionNamespacedResourceClaim + /apis/resource.k8s.io/v1alpha3/resourcepoolstatusrequests/{name}/status: + get: + description: read status of the specified ResourcePoolStatusRequest + operationId: readResourcePoolStatusRequestStatus parameters: - - description: "object name and auth scope, such as for teams and projects" + - description: name of the ResourcePoolStatusRequest in: path - name: namespace + name: name + required: true + schema: + type: string + - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ + \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ + \ and wget)." + in: query + name: pretty + schema: + type: string + responses: + "200": + content: + application/json: + schema: + $ref: "#/components/schemas/v1alpha3.ResourcePoolStatusRequest" + application/yaml: + schema: + $ref: "#/components/schemas/v1alpha3.ResourcePoolStatusRequest" + application/vnd.kubernetes.protobuf: + schema: + $ref: "#/components/schemas/v1alpha3.ResourcePoolStatusRequest" + application/cbor: + schema: + $ref: "#/components/schemas/v1alpha3.ResourcePoolStatusRequest" + description: OK + "401": + content: {} + description: Unauthorized + tags: + - resource_v1alpha3 + x-kubernetes-action: get + x-kubernetes-group-version-kind: + group: resource.k8s.io + kind: ResourcePoolStatusRequest + version: v1alpha3 + x-accepts: + - application/cbor + - application/json + - application/vnd.kubernetes.protobuf + - application/yaml + patch: + description: partially update status of the specified ResourcePoolStatusRequest + operationId: patchResourcePoolStatusRequestStatus + parameters: + - description: name of the ResourcePoolStatusRequest + in: path + name: name required: true schema: type: string + - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ + \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ + \ and wget)." + in: query + name: pretty + schema: + type: string + - description: "When present, indicates that modifications should not be persisted.\ + \ An invalid or unrecognized dryRun directive will result in an error response\ + \ and no further processing of the request. Valid values are: - All: all\ + \ dry run stages will be processed" + in: query + name: dryRun + schema: + type: string + - description: "fieldManager is a name associated with the actor or entity that\ + \ is making these changes. The value must be less than or 128 characters\ + \ long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.\ + \ This field is required for apply requests (application/apply-patch) but\ + \ optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch)." + in: query + name: fieldManager + schema: + type: string + - description: "fieldValidation instructs the server on how to handle objects\ + \ in the request (POST/PUT/PATCH) containing unknown or duplicate fields.\ + \ Valid values are: - Ignore: This will ignore any unknown fields that are\ + \ silently dropped from the object, and will ignore all but the last duplicate\ + \ field that the decoder encounters. This is the default behavior prior\ + \ to v1.23. - Warn: This will send a warning via the standard warning response\ + \ header for each unknown field that is dropped from the object, and for\ + \ each duplicate field that is encountered. The request will still succeed\ + \ if there are no other errors, and will only persist the last of any duplicate\ + \ fields. This is the default in v1.23+ - Strict: This will fail the request\ + \ with a BadRequest error if any unknown fields would be dropped from the\ + \ object, or if any duplicate fields are present. The error returned from\ + \ the server will contain all unknown and duplicate fields encountered." + in: query + name: fieldValidation + schema: + type: string + - description: Force is going to "force" Apply requests. It means user will + re-acquire conflicting fields owned by other people. Force flag must be + unset for non-apply patch requests. + in: query + name: force + schema: + type: boolean + requestBody: + content: + application/json: + schema: + $ref: "#/components/schemas/v1.Patch" + required: true + responses: + "200": + content: + application/json: + schema: + $ref: "#/components/schemas/v1alpha3.ResourcePoolStatusRequest" + application/yaml: + schema: + $ref: "#/components/schemas/v1alpha3.ResourcePoolStatusRequest" + application/vnd.kubernetes.protobuf: + schema: + $ref: "#/components/schemas/v1alpha3.ResourcePoolStatusRequest" + application/cbor: + schema: + $ref: "#/components/schemas/v1alpha3.ResourcePoolStatusRequest" + description: OK + "201": + content: + application/json: + schema: + $ref: "#/components/schemas/v1alpha3.ResourcePoolStatusRequest" + application/yaml: + schema: + $ref: "#/components/schemas/v1alpha3.ResourcePoolStatusRequest" + application/vnd.kubernetes.protobuf: + schema: + $ref: "#/components/schemas/v1alpha3.ResourcePoolStatusRequest" + application/cbor: + schema: + $ref: "#/components/schemas/v1alpha3.ResourcePoolStatusRequest" + description: Created + "401": + content: {} + description: Unauthorized + tags: + - resource_v1alpha3 + x-kubernetes-action: patch + x-kubernetes-group-version-kind: + group: resource.k8s.io + kind: ResourcePoolStatusRequest + version: v1alpha3 + x-codegen-request-body-name: body + x-content-type: application/json + x-accepts: + - application/cbor + - application/json + - application/vnd.kubernetes.protobuf + - application/yaml + put: + description: replace status of the specified ResourcePoolStatusRequest + operationId: replaceResourcePoolStatusRequestStatus + parameters: + - description: name of the ResourcePoolStatusRequest + in: path + name: name + required: true + schema: + type: string + - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ + \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ + \ and wget)." + in: query + name: pretty + schema: + type: string + - description: "When present, indicates that modifications should not be persisted.\ + \ An invalid or unrecognized dryRun directive will result in an error response\ + \ and no further processing of the request. Valid values are: - All: all\ + \ dry run stages will be processed" + in: query + name: dryRun + schema: + type: string + - description: "fieldManager is a name associated with the actor or entity that\ + \ is making these changes. The value must be less than or 128 characters\ + \ long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." + in: query + name: fieldManager + schema: + type: string + - description: "fieldValidation instructs the server on how to handle objects\ + \ in the request (POST/PUT/PATCH) containing unknown or duplicate fields.\ + \ Valid values are: - Ignore: This will ignore any unknown fields that are\ + \ silently dropped from the object, and will ignore all but the last duplicate\ + \ field that the decoder encounters. This is the default behavior prior\ + \ to v1.23. - Warn: This will send a warning via the standard warning response\ + \ header for each unknown field that is dropped from the object, and for\ + \ each duplicate field that is encountered. The request will still succeed\ + \ if there are no other errors, and will only persist the last of any duplicate\ + \ fields. This is the default in v1.23+ - Strict: This will fail the request\ + \ with a BadRequest error if any unknown fields would be dropped from the\ + \ object, or if any duplicate fields are present. The error returned from\ + \ the server will contain all unknown and duplicate fields encountered." + in: query + name: fieldValidation + schema: + type: string + requestBody: + content: + application/json: + schema: + $ref: "#/components/schemas/v1alpha3.ResourcePoolStatusRequest" + required: true + responses: + "200": + content: + application/json: + schema: + $ref: "#/components/schemas/v1alpha3.ResourcePoolStatusRequest" + application/yaml: + schema: + $ref: "#/components/schemas/v1alpha3.ResourcePoolStatusRequest" + application/vnd.kubernetes.protobuf: + schema: + $ref: "#/components/schemas/v1alpha3.ResourcePoolStatusRequest" + application/cbor: + schema: + $ref: "#/components/schemas/v1alpha3.ResourcePoolStatusRequest" + description: OK + "201": + content: + application/json: + schema: + $ref: "#/components/schemas/v1alpha3.ResourcePoolStatusRequest" + application/yaml: + schema: + $ref: "#/components/schemas/v1alpha3.ResourcePoolStatusRequest" + application/vnd.kubernetes.protobuf: + schema: + $ref: "#/components/schemas/v1alpha3.ResourcePoolStatusRequest" + application/cbor: + schema: + $ref: "#/components/schemas/v1alpha3.ResourcePoolStatusRequest" + description: Created + "401": + content: {} + description: Unauthorized + tags: + - resource_v1alpha3 + x-kubernetes-action: put + x-kubernetes-group-version-kind: + group: resource.k8s.io + kind: ResourcePoolStatusRequest + version: v1alpha3 + x-codegen-request-body-name: body + x-content-type: application/json + x-accepts: + - application/cbor + - application/json + - application/vnd.kubernetes.protobuf + - application/yaml + /apis/resource.k8s.io/v1alpha3/watch/devicetaintrules: {} + /apis/resource.k8s.io/v1alpha3/watch/devicetaintrules/{name}: {} + /apis/resource.k8s.io/v1alpha3/watch/resourcepoolstatusrequests: {} + /apis/resource.k8s.io/v1alpha3/watch/resourcepoolstatusrequests/{name}: {} + /apis/resource.k8s.io/v1beta1/: + get: + description: get available resources + operationId: getAPIResources + responses: + "200": + content: + application/json: + schema: + $ref: "#/components/schemas/v1.APIResourceList" + application/yaml: + schema: + $ref: "#/components/schemas/v1.APIResourceList" + application/vnd.kubernetes.protobuf: + schema: + $ref: "#/components/schemas/v1.APIResourceList" + application/cbor: + schema: + $ref: "#/components/schemas/v1.APIResourceList" + description: OK + "401": + content: {} + description: Unauthorized + tags: + - resource_v1beta1 + x-accepts: + - application/cbor + - application/json + - application/vnd.kubernetes.protobuf + - application/yaml + /apis/resource.k8s.io/v1beta1/deviceclasses: + delete: + description: delete collection of DeviceClass + operationId: deleteCollectionDeviceClass + parameters: - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ \ and wget)." @@ -81392,7 +83807,7 @@ paths: x-kubernetes-action: deletecollection x-kubernetes-group-version-kind: group: resource.k8s.io - kind: ResourceClaim + kind: DeviceClass version: v1beta1 x-codegen-request-body-name: body x-content-type: application/json @@ -81402,15 +83817,9 @@ paths: - application/vnd.kubernetes.protobuf - application/yaml get: - description: list or watch objects of kind ResourceClaim - operationId: listNamespacedResourceClaim + description: list or watch objects of kind DeviceClass + operationId: listDeviceClass parameters: - - description: "object name and auth scope, such as for teams and projects" - in: path - name: namespace - required: true - schema: - type: string - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ \ and wget)." @@ -81534,25 +83943,25 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1beta1.ResourceClaimList" + $ref: "#/components/schemas/v1beta1.DeviceClassList" application/yaml: schema: - $ref: "#/components/schemas/v1beta1.ResourceClaimList" + $ref: "#/components/schemas/v1beta1.DeviceClassList" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1beta1.ResourceClaimList" + $ref: "#/components/schemas/v1beta1.DeviceClassList" application/cbor: schema: - $ref: "#/components/schemas/v1beta1.ResourceClaimList" + $ref: "#/components/schemas/v1beta1.DeviceClassList" application/json;stream=watch: schema: - $ref: "#/components/schemas/v1beta1.ResourceClaimList" + $ref: "#/components/schemas/v1beta1.DeviceClassList" application/vnd.kubernetes.protobuf;stream=watch: schema: - $ref: "#/components/schemas/v1beta1.ResourceClaimList" + $ref: "#/components/schemas/v1beta1.DeviceClassList" application/cbor-seq: schema: - $ref: "#/components/schemas/v1beta1.ResourceClaimList" + $ref: "#/components/schemas/v1beta1.DeviceClassList" description: OK "401": content: {} @@ -81562,7 +83971,7 @@ paths: x-kubernetes-action: list x-kubernetes-group-version-kind: group: resource.k8s.io - kind: ResourceClaim + kind: DeviceClass version: v1beta1 x-accepts: - application/cbor @@ -81573,15 +83982,9 @@ paths: - application/vnd.kubernetes.protobuf;stream=watch - application/yaml post: - description: create a ResourceClaim - operationId: createNamespacedResourceClaim + description: create a DeviceClass + operationId: createDeviceClass parameters: - - description: "object name and auth scope, such as for teams and projects" - in: path - name: namespace - required: true - schema: - type: string - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ \ and wget)." @@ -81625,53 +84028,53 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1beta1.ResourceClaim" + $ref: "#/components/schemas/v1beta1.DeviceClass" required: true responses: "200": content: application/json: schema: - $ref: "#/components/schemas/v1beta1.ResourceClaim" + $ref: "#/components/schemas/v1beta1.DeviceClass" application/yaml: schema: - $ref: "#/components/schemas/v1beta1.ResourceClaim" + $ref: "#/components/schemas/v1beta1.DeviceClass" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1beta1.ResourceClaim" + $ref: "#/components/schemas/v1beta1.DeviceClass" application/cbor: schema: - $ref: "#/components/schemas/v1beta1.ResourceClaim" + $ref: "#/components/schemas/v1beta1.DeviceClass" description: OK "201": content: application/json: schema: - $ref: "#/components/schemas/v1beta1.ResourceClaim" + $ref: "#/components/schemas/v1beta1.DeviceClass" application/yaml: schema: - $ref: "#/components/schemas/v1beta1.ResourceClaim" + $ref: "#/components/schemas/v1beta1.DeviceClass" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1beta1.ResourceClaim" + $ref: "#/components/schemas/v1beta1.DeviceClass" application/cbor: schema: - $ref: "#/components/schemas/v1beta1.ResourceClaim" + $ref: "#/components/schemas/v1beta1.DeviceClass" description: Created "202": content: application/json: schema: - $ref: "#/components/schemas/v1beta1.ResourceClaim" + $ref: "#/components/schemas/v1beta1.DeviceClass" application/yaml: schema: - $ref: "#/components/schemas/v1beta1.ResourceClaim" + $ref: "#/components/schemas/v1beta1.DeviceClass" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1beta1.ResourceClaim" + $ref: "#/components/schemas/v1beta1.DeviceClass" application/cbor: schema: - $ref: "#/components/schemas/v1beta1.ResourceClaim" + $ref: "#/components/schemas/v1beta1.DeviceClass" description: Accepted "401": content: {} @@ -81681,7 +84084,7 @@ paths: x-kubernetes-action: post x-kubernetes-group-version-kind: group: resource.k8s.io - kind: ResourceClaim + kind: DeviceClass version: v1beta1 x-codegen-request-body-name: body x-content-type: application/json @@ -81690,23 +84093,17 @@ paths: - application/json - application/vnd.kubernetes.protobuf - application/yaml - /apis/resource.k8s.io/v1beta1/namespaces/{namespace}/resourceclaims/{name}: + /apis/resource.k8s.io/v1beta1/deviceclasses/{name}: delete: - description: delete a ResourceClaim - operationId: deleteNamespacedResourceClaim + description: delete a DeviceClass + operationId: deleteDeviceClass parameters: - - description: name of the ResourceClaim + - description: name of the DeviceClass in: path name: name required: true schema: type: string - - description: "object name and auth scope, such as for teams and projects" - in: path - name: namespace - required: true - schema: - type: string - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ \ and wget)." @@ -81776,31 +84173,31 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1beta1.ResourceClaim" + $ref: "#/components/schemas/v1beta1.DeviceClass" application/yaml: schema: - $ref: "#/components/schemas/v1beta1.ResourceClaim" + $ref: "#/components/schemas/v1beta1.DeviceClass" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1beta1.ResourceClaim" + $ref: "#/components/schemas/v1beta1.DeviceClass" application/cbor: schema: - $ref: "#/components/schemas/v1beta1.ResourceClaim" + $ref: "#/components/schemas/v1beta1.DeviceClass" description: OK "202": content: application/json: schema: - $ref: "#/components/schemas/v1beta1.ResourceClaim" + $ref: "#/components/schemas/v1beta1.DeviceClass" application/yaml: schema: - $ref: "#/components/schemas/v1beta1.ResourceClaim" + $ref: "#/components/schemas/v1beta1.DeviceClass" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1beta1.ResourceClaim" + $ref: "#/components/schemas/v1beta1.DeviceClass" application/cbor: schema: - $ref: "#/components/schemas/v1beta1.ResourceClaim" + $ref: "#/components/schemas/v1beta1.DeviceClass" description: Accepted "401": content: {} @@ -81810,288 +84207,7 @@ paths: x-kubernetes-action: delete x-kubernetes-group-version-kind: group: resource.k8s.io - kind: ResourceClaim - version: v1beta1 - x-codegen-request-body-name: body - x-content-type: application/json - x-accepts: - - application/cbor - - application/json - - application/vnd.kubernetes.protobuf - - application/yaml - get: - description: read the specified ResourceClaim - operationId: readNamespacedResourceClaim - parameters: - - description: name of the ResourceClaim - in: path - name: name - required: true - schema: - type: string - - description: "object name and auth scope, such as for teams and projects" - in: path - name: namespace - required: true - schema: - type: string - - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ - \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ - \ and wget)." - in: query - name: pretty - schema: - type: string - responses: - "200": - content: - application/json: - schema: - $ref: "#/components/schemas/v1beta1.ResourceClaim" - application/yaml: - schema: - $ref: "#/components/schemas/v1beta1.ResourceClaim" - application/vnd.kubernetes.protobuf: - schema: - $ref: "#/components/schemas/v1beta1.ResourceClaim" - application/cbor: - schema: - $ref: "#/components/schemas/v1beta1.ResourceClaim" - description: OK - "401": - content: {} - description: Unauthorized - tags: - - resource_v1beta1 - x-kubernetes-action: get - x-kubernetes-group-version-kind: - group: resource.k8s.io - kind: ResourceClaim - version: v1beta1 - x-accepts: - - application/cbor - - application/json - - application/vnd.kubernetes.protobuf - - application/yaml - patch: - description: partially update the specified ResourceClaim - operationId: patchNamespacedResourceClaim - parameters: - - description: name of the ResourceClaim - in: path - name: name - required: true - schema: - type: string - - description: "object name and auth scope, such as for teams and projects" - in: path - name: namespace - required: true - schema: - type: string - - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ - \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ - \ and wget)." - in: query - name: pretty - schema: - type: string - - description: "When present, indicates that modifications should not be persisted.\ - \ An invalid or unrecognized dryRun directive will result in an error response\ - \ and no further processing of the request. Valid values are: - All: all\ - \ dry run stages will be processed" - in: query - name: dryRun - schema: - type: string - - description: "fieldManager is a name associated with the actor or entity that\ - \ is making these changes. The value must be less than or 128 characters\ - \ long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.\ - \ This field is required for apply requests (application/apply-patch) but\ - \ optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch)." - in: query - name: fieldManager - schema: - type: string - - description: "fieldValidation instructs the server on how to handle objects\ - \ in the request (POST/PUT/PATCH) containing unknown or duplicate fields.\ - \ Valid values are: - Ignore: This will ignore any unknown fields that are\ - \ silently dropped from the object, and will ignore all but the last duplicate\ - \ field that the decoder encounters. This is the default behavior prior\ - \ to v1.23. - Warn: This will send a warning via the standard warning response\ - \ header for each unknown field that is dropped from the object, and for\ - \ each duplicate field that is encountered. The request will still succeed\ - \ if there are no other errors, and will only persist the last of any duplicate\ - \ fields. This is the default in v1.23+ - Strict: This will fail the request\ - \ with a BadRequest error if any unknown fields would be dropped from the\ - \ object, or if any duplicate fields are present. The error returned from\ - \ the server will contain all unknown and duplicate fields encountered." - in: query - name: fieldValidation - schema: - type: string - - description: Force is going to "force" Apply requests. It means user will - re-acquire conflicting fields owned by other people. Force flag must be - unset for non-apply patch requests. - in: query - name: force - schema: - type: boolean - requestBody: - content: - application/json: - schema: - $ref: "#/components/schemas/v1.Patch" - required: true - responses: - "200": - content: - application/json: - schema: - $ref: "#/components/schemas/v1beta1.ResourceClaim" - application/yaml: - schema: - $ref: "#/components/schemas/v1beta1.ResourceClaim" - application/vnd.kubernetes.protobuf: - schema: - $ref: "#/components/schemas/v1beta1.ResourceClaim" - application/cbor: - schema: - $ref: "#/components/schemas/v1beta1.ResourceClaim" - description: OK - "201": - content: - application/json: - schema: - $ref: "#/components/schemas/v1beta1.ResourceClaim" - application/yaml: - schema: - $ref: "#/components/schemas/v1beta1.ResourceClaim" - application/vnd.kubernetes.protobuf: - schema: - $ref: "#/components/schemas/v1beta1.ResourceClaim" - application/cbor: - schema: - $ref: "#/components/schemas/v1beta1.ResourceClaim" - description: Created - "401": - content: {} - description: Unauthorized - tags: - - resource_v1beta1 - x-kubernetes-action: patch - x-kubernetes-group-version-kind: - group: resource.k8s.io - kind: ResourceClaim - version: v1beta1 - x-codegen-request-body-name: body - x-content-type: application/json - x-accepts: - - application/cbor - - application/json - - application/vnd.kubernetes.protobuf - - application/yaml - put: - description: replace the specified ResourceClaim - operationId: replaceNamespacedResourceClaim - parameters: - - description: name of the ResourceClaim - in: path - name: name - required: true - schema: - type: string - - description: "object name and auth scope, such as for teams and projects" - in: path - name: namespace - required: true - schema: - type: string - - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ - \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ - \ and wget)." - in: query - name: pretty - schema: - type: string - - description: "When present, indicates that modifications should not be persisted.\ - \ An invalid or unrecognized dryRun directive will result in an error response\ - \ and no further processing of the request. Valid values are: - All: all\ - \ dry run stages will be processed" - in: query - name: dryRun - schema: - type: string - - description: "fieldManager is a name associated with the actor or entity that\ - \ is making these changes. The value must be less than or 128 characters\ - \ long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." - in: query - name: fieldManager - schema: - type: string - - description: "fieldValidation instructs the server on how to handle objects\ - \ in the request (POST/PUT/PATCH) containing unknown or duplicate fields.\ - \ Valid values are: - Ignore: This will ignore any unknown fields that are\ - \ silently dropped from the object, and will ignore all but the last duplicate\ - \ field that the decoder encounters. This is the default behavior prior\ - \ to v1.23. - Warn: This will send a warning via the standard warning response\ - \ header for each unknown field that is dropped from the object, and for\ - \ each duplicate field that is encountered. The request will still succeed\ - \ if there are no other errors, and will only persist the last of any duplicate\ - \ fields. This is the default in v1.23+ - Strict: This will fail the request\ - \ with a BadRequest error if any unknown fields would be dropped from the\ - \ object, or if any duplicate fields are present. The error returned from\ - \ the server will contain all unknown and duplicate fields encountered." - in: query - name: fieldValidation - schema: - type: string - requestBody: - content: - application/json: - schema: - $ref: "#/components/schemas/v1beta1.ResourceClaim" - required: true - responses: - "200": - content: - application/json: - schema: - $ref: "#/components/schemas/v1beta1.ResourceClaim" - application/yaml: - schema: - $ref: "#/components/schemas/v1beta1.ResourceClaim" - application/vnd.kubernetes.protobuf: - schema: - $ref: "#/components/schemas/v1beta1.ResourceClaim" - application/cbor: - schema: - $ref: "#/components/schemas/v1beta1.ResourceClaim" - description: OK - "201": - content: - application/json: - schema: - $ref: "#/components/schemas/v1beta1.ResourceClaim" - application/yaml: - schema: - $ref: "#/components/schemas/v1beta1.ResourceClaim" - application/vnd.kubernetes.protobuf: - schema: - $ref: "#/components/schemas/v1beta1.ResourceClaim" - application/cbor: - schema: - $ref: "#/components/schemas/v1beta1.ResourceClaim" - description: Created - "401": - content: {} - description: Unauthorized - tags: - - resource_v1beta1 - x-kubernetes-action: put - x-kubernetes-group-version-kind: - group: resource.k8s.io - kind: ResourceClaim + kind: DeviceClass version: v1beta1 x-codegen-request-body-name: body x-content-type: application/json @@ -82100,23 +84216,16 @@ paths: - application/json - application/vnd.kubernetes.protobuf - application/yaml - /apis/resource.k8s.io/v1beta1/namespaces/{namespace}/resourceclaims/{name}/status: get: - description: read status of the specified ResourceClaim - operationId: readNamespacedResourceClaimStatus + description: read the specified DeviceClass + operationId: readDeviceClass parameters: - - description: name of the ResourceClaim + - description: name of the DeviceClass in: path name: name required: true schema: type: string - - description: "object name and auth scope, such as for teams and projects" - in: path - name: namespace - required: true - schema: - type: string - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ \ and wget)." @@ -82129,16 +84238,16 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1beta1.ResourceClaim" + $ref: "#/components/schemas/v1beta1.DeviceClass" application/yaml: schema: - $ref: "#/components/schemas/v1beta1.ResourceClaim" + $ref: "#/components/schemas/v1beta1.DeviceClass" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1beta1.ResourceClaim" + $ref: "#/components/schemas/v1beta1.DeviceClass" application/cbor: schema: - $ref: "#/components/schemas/v1beta1.ResourceClaim" + $ref: "#/components/schemas/v1beta1.DeviceClass" description: OK "401": content: {} @@ -82148,7 +84257,7 @@ paths: x-kubernetes-action: get x-kubernetes-group-version-kind: group: resource.k8s.io - kind: ResourceClaim + kind: DeviceClass version: v1beta1 x-accepts: - application/cbor @@ -82156,21 +84265,15 @@ paths: - application/vnd.kubernetes.protobuf - application/yaml patch: - description: partially update status of the specified ResourceClaim - operationId: patchNamespacedResourceClaimStatus + description: partially update the specified DeviceClass + operationId: patchDeviceClass parameters: - - description: name of the ResourceClaim + - description: name of the DeviceClass in: path name: name required: true schema: type: string - - description: "object name and auth scope, such as for teams and projects" - in: path - name: namespace - required: true - schema: - type: string - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ \ and wget)." @@ -82230,31 +84333,31 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1beta1.ResourceClaim" + $ref: "#/components/schemas/v1beta1.DeviceClass" application/yaml: schema: - $ref: "#/components/schemas/v1beta1.ResourceClaim" + $ref: "#/components/schemas/v1beta1.DeviceClass" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1beta1.ResourceClaim" + $ref: "#/components/schemas/v1beta1.DeviceClass" application/cbor: schema: - $ref: "#/components/schemas/v1beta1.ResourceClaim" + $ref: "#/components/schemas/v1beta1.DeviceClass" description: OK "201": content: application/json: schema: - $ref: "#/components/schemas/v1beta1.ResourceClaim" + $ref: "#/components/schemas/v1beta1.DeviceClass" application/yaml: schema: - $ref: "#/components/schemas/v1beta1.ResourceClaim" + $ref: "#/components/schemas/v1beta1.DeviceClass" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1beta1.ResourceClaim" + $ref: "#/components/schemas/v1beta1.DeviceClass" application/cbor: schema: - $ref: "#/components/schemas/v1beta1.ResourceClaim" + $ref: "#/components/schemas/v1beta1.DeviceClass" description: Created "401": content: {} @@ -82264,7 +84367,7 @@ paths: x-kubernetes-action: patch x-kubernetes-group-version-kind: group: resource.k8s.io - kind: ResourceClaim + kind: DeviceClass version: v1beta1 x-codegen-request-body-name: body x-content-type: application/json @@ -82274,21 +84377,15 @@ paths: - application/vnd.kubernetes.protobuf - application/yaml put: - description: replace status of the specified ResourceClaim - operationId: replaceNamespacedResourceClaimStatus + description: replace the specified DeviceClass + operationId: replaceDeviceClass parameters: - - description: name of the ResourceClaim + - description: name of the DeviceClass in: path name: name required: true schema: type: string - - description: "object name and auth scope, such as for teams and projects" - in: path - name: namespace - required: true - schema: - type: string - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ \ and wget)." @@ -82332,38 +84429,38 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1beta1.ResourceClaim" + $ref: "#/components/schemas/v1beta1.DeviceClass" required: true responses: "200": content: application/json: schema: - $ref: "#/components/schemas/v1beta1.ResourceClaim" + $ref: "#/components/schemas/v1beta1.DeviceClass" application/yaml: schema: - $ref: "#/components/schemas/v1beta1.ResourceClaim" + $ref: "#/components/schemas/v1beta1.DeviceClass" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1beta1.ResourceClaim" + $ref: "#/components/schemas/v1beta1.DeviceClass" application/cbor: schema: - $ref: "#/components/schemas/v1beta1.ResourceClaim" + $ref: "#/components/schemas/v1beta1.DeviceClass" description: OK "201": content: application/json: schema: - $ref: "#/components/schemas/v1beta1.ResourceClaim" + $ref: "#/components/schemas/v1beta1.DeviceClass" application/yaml: schema: - $ref: "#/components/schemas/v1beta1.ResourceClaim" + $ref: "#/components/schemas/v1beta1.DeviceClass" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1beta1.ResourceClaim" + $ref: "#/components/schemas/v1beta1.DeviceClass" application/cbor: schema: - $ref: "#/components/schemas/v1beta1.ResourceClaim" + $ref: "#/components/schemas/v1beta1.DeviceClass" description: Created "401": content: {} @@ -82373,7 +84470,7 @@ paths: x-kubernetes-action: put x-kubernetes-group-version-kind: group: resource.k8s.io - kind: ResourceClaim + kind: DeviceClass version: v1beta1 x-codegen-request-body-name: body x-content-type: application/json @@ -82382,10 +84479,10 @@ paths: - application/json - application/vnd.kubernetes.protobuf - application/yaml - /apis/resource.k8s.io/v1beta1/namespaces/{namespace}/resourceclaimtemplates: + /apis/resource.k8s.io/v1beta1/namespaces/{namespace}/resourceclaims: delete: - description: delete collection of ResourceClaimTemplate - operationId: deleteCollectionNamespacedResourceClaimTemplate + description: delete collection of ResourceClaim + operationId: deleteCollectionNamespacedResourceClaim parameters: - description: "object name and auth scope, such as for teams and projects" in: path @@ -82576,7 +84673,7 @@ paths: x-kubernetes-action: deletecollection x-kubernetes-group-version-kind: group: resource.k8s.io - kind: ResourceClaimTemplate + kind: ResourceClaim version: v1beta1 x-codegen-request-body-name: body x-content-type: application/json @@ -82586,8 +84683,8 @@ paths: - application/vnd.kubernetes.protobuf - application/yaml get: - description: list or watch objects of kind ResourceClaimTemplate - operationId: listNamespacedResourceClaimTemplate + description: list or watch objects of kind ResourceClaim + operationId: listNamespacedResourceClaim parameters: - description: "object name and auth scope, such as for teams and projects" in: path @@ -82718,25 +84815,25 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1beta1.ResourceClaimTemplateList" + $ref: "#/components/schemas/v1beta1.ResourceClaimList" application/yaml: schema: - $ref: "#/components/schemas/v1beta1.ResourceClaimTemplateList" + $ref: "#/components/schemas/v1beta1.ResourceClaimList" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1beta1.ResourceClaimTemplateList" + $ref: "#/components/schemas/v1beta1.ResourceClaimList" application/cbor: schema: - $ref: "#/components/schemas/v1beta1.ResourceClaimTemplateList" + $ref: "#/components/schemas/v1beta1.ResourceClaimList" application/json;stream=watch: schema: - $ref: "#/components/schemas/v1beta1.ResourceClaimTemplateList" + $ref: "#/components/schemas/v1beta1.ResourceClaimList" application/vnd.kubernetes.protobuf;stream=watch: schema: - $ref: "#/components/schemas/v1beta1.ResourceClaimTemplateList" + $ref: "#/components/schemas/v1beta1.ResourceClaimList" application/cbor-seq: schema: - $ref: "#/components/schemas/v1beta1.ResourceClaimTemplateList" + $ref: "#/components/schemas/v1beta1.ResourceClaimList" description: OK "401": content: {} @@ -82746,7 +84843,7 @@ paths: x-kubernetes-action: list x-kubernetes-group-version-kind: group: resource.k8s.io - kind: ResourceClaimTemplate + kind: ResourceClaim version: v1beta1 x-accepts: - application/cbor @@ -82757,8 +84854,8 @@ paths: - application/vnd.kubernetes.protobuf;stream=watch - application/yaml post: - description: create a ResourceClaimTemplate - operationId: createNamespacedResourceClaimTemplate + description: create a ResourceClaim + operationId: createNamespacedResourceClaim parameters: - description: "object name and auth scope, such as for teams and projects" in: path @@ -82809,53 +84906,53 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1beta1.ResourceClaimTemplate" + $ref: "#/components/schemas/v1beta1.ResourceClaim" required: true responses: "200": content: application/json: schema: - $ref: "#/components/schemas/v1beta1.ResourceClaimTemplate" + $ref: "#/components/schemas/v1beta1.ResourceClaim" application/yaml: schema: - $ref: "#/components/schemas/v1beta1.ResourceClaimTemplate" + $ref: "#/components/schemas/v1beta1.ResourceClaim" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1beta1.ResourceClaimTemplate" + $ref: "#/components/schemas/v1beta1.ResourceClaim" application/cbor: schema: - $ref: "#/components/schemas/v1beta1.ResourceClaimTemplate" + $ref: "#/components/schemas/v1beta1.ResourceClaim" description: OK "201": content: application/json: schema: - $ref: "#/components/schemas/v1beta1.ResourceClaimTemplate" + $ref: "#/components/schemas/v1beta1.ResourceClaim" application/yaml: schema: - $ref: "#/components/schemas/v1beta1.ResourceClaimTemplate" + $ref: "#/components/schemas/v1beta1.ResourceClaim" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1beta1.ResourceClaimTemplate" + $ref: "#/components/schemas/v1beta1.ResourceClaim" application/cbor: schema: - $ref: "#/components/schemas/v1beta1.ResourceClaimTemplate" + $ref: "#/components/schemas/v1beta1.ResourceClaim" description: Created "202": content: application/json: schema: - $ref: "#/components/schemas/v1beta1.ResourceClaimTemplate" + $ref: "#/components/schemas/v1beta1.ResourceClaim" application/yaml: schema: - $ref: "#/components/schemas/v1beta1.ResourceClaimTemplate" + $ref: "#/components/schemas/v1beta1.ResourceClaim" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1beta1.ResourceClaimTemplate" + $ref: "#/components/schemas/v1beta1.ResourceClaim" application/cbor: schema: - $ref: "#/components/schemas/v1beta1.ResourceClaimTemplate" + $ref: "#/components/schemas/v1beta1.ResourceClaim" description: Accepted "401": content: {} @@ -82865,7 +84962,7 @@ paths: x-kubernetes-action: post x-kubernetes-group-version-kind: group: resource.k8s.io - kind: ResourceClaimTemplate + kind: ResourceClaim version: v1beta1 x-codegen-request-body-name: body x-content-type: application/json @@ -82874,12 +84971,12 @@ paths: - application/json - application/vnd.kubernetes.protobuf - application/yaml - /apis/resource.k8s.io/v1beta1/namespaces/{namespace}/resourceclaimtemplates/{name}: + /apis/resource.k8s.io/v1beta1/namespaces/{namespace}/resourceclaims/{name}: delete: - description: delete a ResourceClaimTemplate - operationId: deleteNamespacedResourceClaimTemplate + description: delete a ResourceClaim + operationId: deleteNamespacedResourceClaim parameters: - - description: name of the ResourceClaimTemplate + - description: name of the ResourceClaim in: path name: name required: true @@ -82960,31 +85057,31 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1beta1.ResourceClaimTemplate" + $ref: "#/components/schemas/v1beta1.ResourceClaim" application/yaml: schema: - $ref: "#/components/schemas/v1beta1.ResourceClaimTemplate" + $ref: "#/components/schemas/v1beta1.ResourceClaim" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1beta1.ResourceClaimTemplate" + $ref: "#/components/schemas/v1beta1.ResourceClaim" application/cbor: schema: - $ref: "#/components/schemas/v1beta1.ResourceClaimTemplate" + $ref: "#/components/schemas/v1beta1.ResourceClaim" description: OK "202": content: application/json: schema: - $ref: "#/components/schemas/v1beta1.ResourceClaimTemplate" + $ref: "#/components/schemas/v1beta1.ResourceClaim" application/yaml: schema: - $ref: "#/components/schemas/v1beta1.ResourceClaimTemplate" + $ref: "#/components/schemas/v1beta1.ResourceClaim" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1beta1.ResourceClaimTemplate" + $ref: "#/components/schemas/v1beta1.ResourceClaim" application/cbor: schema: - $ref: "#/components/schemas/v1beta1.ResourceClaimTemplate" + $ref: "#/components/schemas/v1beta1.ResourceClaim" description: Accepted "401": content: {} @@ -82994,7 +85091,7 @@ paths: x-kubernetes-action: delete x-kubernetes-group-version-kind: group: resource.k8s.io - kind: ResourceClaimTemplate + kind: ResourceClaim version: v1beta1 x-codegen-request-body-name: body x-content-type: application/json @@ -83004,10 +85101,10 @@ paths: - application/vnd.kubernetes.protobuf - application/yaml get: - description: read the specified ResourceClaimTemplate - operationId: readNamespacedResourceClaimTemplate + description: read the specified ResourceClaim + operationId: readNamespacedResourceClaim parameters: - - description: name of the ResourceClaimTemplate + - description: name of the ResourceClaim in: path name: name required: true @@ -83031,16 +85128,16 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1beta1.ResourceClaimTemplate" + $ref: "#/components/schemas/v1beta1.ResourceClaim" application/yaml: schema: - $ref: "#/components/schemas/v1beta1.ResourceClaimTemplate" + $ref: "#/components/schemas/v1beta1.ResourceClaim" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1beta1.ResourceClaimTemplate" + $ref: "#/components/schemas/v1beta1.ResourceClaim" application/cbor: schema: - $ref: "#/components/schemas/v1beta1.ResourceClaimTemplate" + $ref: "#/components/schemas/v1beta1.ResourceClaim" description: OK "401": content: {} @@ -83050,7 +85147,7 @@ paths: x-kubernetes-action: get x-kubernetes-group-version-kind: group: resource.k8s.io - kind: ResourceClaimTemplate + kind: ResourceClaim version: v1beta1 x-accepts: - application/cbor @@ -83058,10 +85155,10 @@ paths: - application/vnd.kubernetes.protobuf - application/yaml patch: - description: partially update the specified ResourceClaimTemplate - operationId: patchNamespacedResourceClaimTemplate + description: partially update the specified ResourceClaim + operationId: patchNamespacedResourceClaim parameters: - - description: name of the ResourceClaimTemplate + - description: name of the ResourceClaim in: path name: name required: true @@ -83132,31 +85229,31 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1beta1.ResourceClaimTemplate" + $ref: "#/components/schemas/v1beta1.ResourceClaim" application/yaml: schema: - $ref: "#/components/schemas/v1beta1.ResourceClaimTemplate" + $ref: "#/components/schemas/v1beta1.ResourceClaim" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1beta1.ResourceClaimTemplate" + $ref: "#/components/schemas/v1beta1.ResourceClaim" application/cbor: schema: - $ref: "#/components/schemas/v1beta1.ResourceClaimTemplate" + $ref: "#/components/schemas/v1beta1.ResourceClaim" description: OK "201": content: application/json: schema: - $ref: "#/components/schemas/v1beta1.ResourceClaimTemplate" + $ref: "#/components/schemas/v1beta1.ResourceClaim" application/yaml: schema: - $ref: "#/components/schemas/v1beta1.ResourceClaimTemplate" + $ref: "#/components/schemas/v1beta1.ResourceClaim" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1beta1.ResourceClaimTemplate" + $ref: "#/components/schemas/v1beta1.ResourceClaim" application/cbor: schema: - $ref: "#/components/schemas/v1beta1.ResourceClaimTemplate" + $ref: "#/components/schemas/v1beta1.ResourceClaim" description: Created "401": content: {} @@ -83166,7 +85263,7 @@ paths: x-kubernetes-action: patch x-kubernetes-group-version-kind: group: resource.k8s.io - kind: ResourceClaimTemplate + kind: ResourceClaim version: v1beta1 x-codegen-request-body-name: body x-content-type: application/json @@ -83176,10 +85273,10 @@ paths: - application/vnd.kubernetes.protobuf - application/yaml put: - description: replace the specified ResourceClaimTemplate - operationId: replaceNamespacedResourceClaimTemplate + description: replace the specified ResourceClaim + operationId: replaceNamespacedResourceClaim parameters: - - description: name of the ResourceClaimTemplate + - description: name of the ResourceClaim in: path name: name required: true @@ -83234,38 +85331,38 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1beta1.ResourceClaimTemplate" + $ref: "#/components/schemas/v1beta1.ResourceClaim" required: true responses: "200": content: application/json: schema: - $ref: "#/components/schemas/v1beta1.ResourceClaimTemplate" + $ref: "#/components/schemas/v1beta1.ResourceClaim" application/yaml: schema: - $ref: "#/components/schemas/v1beta1.ResourceClaimTemplate" + $ref: "#/components/schemas/v1beta1.ResourceClaim" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1beta1.ResourceClaimTemplate" + $ref: "#/components/schemas/v1beta1.ResourceClaim" application/cbor: schema: - $ref: "#/components/schemas/v1beta1.ResourceClaimTemplate" + $ref: "#/components/schemas/v1beta1.ResourceClaim" description: OK "201": content: application/json: schema: - $ref: "#/components/schemas/v1beta1.ResourceClaimTemplate" + $ref: "#/components/schemas/v1beta1.ResourceClaim" application/yaml: schema: - $ref: "#/components/schemas/v1beta1.ResourceClaimTemplate" + $ref: "#/components/schemas/v1beta1.ResourceClaim" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1beta1.ResourceClaimTemplate" + $ref: "#/components/schemas/v1beta1.ResourceClaim" application/cbor: schema: - $ref: "#/components/schemas/v1beta1.ResourceClaimTemplate" + $ref: "#/components/schemas/v1beta1.ResourceClaim" description: Created "401": content: {} @@ -83275,7 +85372,7 @@ paths: x-kubernetes-action: put x-kubernetes-group-version-kind: group: resource.k8s.io - kind: ResourceClaimTemplate + kind: ResourceClaim version: v1beta1 x-codegen-request-body-name: body x-content-type: application/json @@ -83284,49 +85381,77 @@ paths: - application/json - application/vnd.kubernetes.protobuf - application/yaml - /apis/resource.k8s.io/v1beta1/resourceclaims: + /apis/resource.k8s.io/v1beta1/namespaces/{namespace}/resourceclaims/{name}/status: get: - description: list or watch objects of kind ResourceClaim - operationId: listResourceClaimForAllNamespaces + description: read status of the specified ResourceClaim + operationId: readNamespacedResourceClaimStatus parameters: - - description: "allowWatchBookmarks requests watch events with type \"BOOKMARK\"\ - . Servers that do not implement bookmarks may ignore this flag and bookmarks\ - \ are sent at the server's discretion. Clients should not assume bookmarks\ - \ are returned at any specific interval, nor may they assume the server\ - \ will send any BOOKMARK event during a session. If this is not a watch,\ - \ this field is ignored." - in: query - name: allowWatchBookmarks + - description: name of the ResourceClaim + in: path + name: name + required: true schema: - type: boolean - - description: |- - The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". - - This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications. - in: query - name: continue + type: string + - description: "object name and auth scope, such as for teams and projects" + in: path + name: namespace + required: true schema: type: string - - description: A selector to restrict the list of returned objects by their - fields. Defaults to everything. + - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ + \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ + \ and wget)." in: query - name: fieldSelector + name: pretty schema: type: string - - description: A selector to restrict the list of returned objects by their - labels. Defaults to everything. - in: query - name: labelSelector + responses: + "200": + content: + application/json: + schema: + $ref: "#/components/schemas/v1beta1.ResourceClaim" + application/yaml: + schema: + $ref: "#/components/schemas/v1beta1.ResourceClaim" + application/vnd.kubernetes.protobuf: + schema: + $ref: "#/components/schemas/v1beta1.ResourceClaim" + application/cbor: + schema: + $ref: "#/components/schemas/v1beta1.ResourceClaim" + description: OK + "401": + content: {} + description: Unauthorized + tags: + - resource_v1beta1 + x-kubernetes-action: get + x-kubernetes-group-version-kind: + group: resource.k8s.io + kind: ResourceClaim + version: v1beta1 + x-accepts: + - application/cbor + - application/json + - application/vnd.kubernetes.protobuf + - application/yaml + patch: + description: partially update status of the specified ResourceClaim + operationId: patchNamespacedResourceClaimStatus + parameters: + - description: name of the ResourceClaim + in: path + name: name + required: true schema: type: string - - description: |- - limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. - - The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned. - in: query - name: limit + - description: "object name and auth scope, such as for teams and projects" + in: path + name: namespace + required: true schema: - type: integer + type: string - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ \ and wget)." @@ -83334,165 +85459,117 @@ paths: name: pretty schema: type: string - - description: |- - resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. - - Defaults to unset + - description: "When present, indicates that modifications should not be persisted.\ + \ An invalid or unrecognized dryRun directive will result in an error response\ + \ and no further processing of the request. Valid values are: - All: all\ + \ dry run stages will be processed" in: query - name: resourceVersion + name: dryRun schema: type: string - - description: |- - resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. - - Defaults to unset + - description: "fieldManager is a name associated with the actor or entity that\ + \ is making these changes. The value must be less than or 128 characters\ + \ long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.\ + \ This field is required for apply requests (application/apply-patch) but\ + \ optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch)." in: query - name: resourceVersionMatch + name: fieldManager schema: type: string - - description: |- - `sendInitialEvents=true` may be set together with `watch=true`. In that case, the watch stream will begin with synthetic events to produce the current state of objects in the collection. Once all such events have been sent, a synthetic "Bookmark" event will be sent. The bookmark will report the ResourceVersion (RV) corresponding to the set of objects, and be marked with `"k8s.io/initial-events-end": "true"` annotation. Afterwards, the watch stream will proceed as usual, sending watch events corresponding to changes (subsequent to the RV) to objects watched. - - When `sendInitialEvents` option is set, we require `resourceVersionMatch` option to also be set. The semantic of the watch request is as following: - `resourceVersionMatch` = NotOlderThan - is interpreted as "data at least as new as the provided `resourceVersion`" - and the bookmark event is send when the state is synced - to a `resourceVersion` at least as fresh as the one provided by the ListOptions. - If `resourceVersion` is unset, this is interpreted as "consistent read" and the - bookmark event is send when the state is synced at least to the moment - when request started being processed. - - `resourceVersionMatch` set to any other value or unset - Invalid error is returned. - - Defaults to true if `resourceVersion=""` or `resourceVersion="0"` (for backward compatibility reasons) and to false otherwise. - in: query - name: sendInitialEvents - schema: - type: boolean - - description: |- - shardSelector restricts the list of returned objects using a CEL-based shard selector expression. The format uses the shardRange() function combined with || (logical OR) to specify one or more hash ranges: - - shardRange(object.metadata.uid, '0x0', '0x8000000000000000') - shardRange(object.metadata.uid, '0x0', '0x8000000000000000') || shardRange(object.metadata.uid, '0x8000000000000000', '0x10000000000000000') - - Field paths use CEL-style object-rooted syntax (e.g. "object.metadata.uid"), NOT the fieldSelector format ("metadata.uid"). Currently supported paths: - - object.metadata.uid - - object.metadata.namespace - - hexStart and hexEnd are single-quoted CEL string literals with a '0x' prefix, defining the inclusive lower and exclusive upper bounds over the 64-bit FNV-1a hash space. The full range is [0x0, 0x10000000000000000), where the exclusive upper bound equals 2^64. - - Examples: - 2-shard split: - shard 0: shardRange(object.metadata.uid, '0x0000000000000000', '0x8000000000000000') - shard 1: shardRange(object.metadata.uid, '0x8000000000000000', '0x10000000000000000') - 4-shard split: - shard 0: shardRange(object.metadata.uid, '0x0000000000000000', '0x4000000000000000') - shard 1: shardRange(object.metadata.uid, '0x4000000000000000', '0x8000000000000000') - shard 2: shardRange(object.metadata.uid, '0x8000000000000000', '0xc000000000000000') - shard 3: shardRange(object.metadata.uid, '0xc000000000000000', '0x10000000000000000') - - This is an alpha field and requires enabling the ShardedListAndWatch feature gate. + - description: "fieldValidation instructs the server on how to handle objects\ + \ in the request (POST/PUT/PATCH) containing unknown or duplicate fields.\ + \ Valid values are: - Ignore: This will ignore any unknown fields that are\ + \ silently dropped from the object, and will ignore all but the last duplicate\ + \ field that the decoder encounters. This is the default behavior prior\ + \ to v1.23. - Warn: This will send a warning via the standard warning response\ + \ header for each unknown field that is dropped from the object, and for\ + \ each duplicate field that is encountered. The request will still succeed\ + \ if there are no other errors, and will only persist the last of any duplicate\ + \ fields. This is the default in v1.23+ - Strict: This will fail the request\ + \ with a BadRequest error if any unknown fields would be dropped from the\ + \ object, or if any duplicate fields are present. The error returned from\ + \ the server will contain all unknown and duplicate fields encountered." in: query - name: shardSelector + name: fieldValidation schema: type: string - - description: "Timeout for the list/watch call. This limits the duration of\ - \ the call, regardless of any activity or inactivity." - in: query - name: timeoutSeconds - schema: - type: integer - - description: "Watch for changes to the described resources and return them\ - \ as a stream of add, update, and remove notifications. Specify resourceVersion." + - description: Force is going to "force" Apply requests. It means user will + re-acquire conflicting fields owned by other people. Force flag must be + unset for non-apply patch requests. in: query - name: watch + name: force schema: type: boolean + requestBody: + content: + application/json: + schema: + $ref: "#/components/schemas/v1.Patch" + required: true responses: "200": content: application/json: schema: - $ref: "#/components/schemas/v1beta1.ResourceClaimList" + $ref: "#/components/schemas/v1beta1.ResourceClaim" application/yaml: schema: - $ref: "#/components/schemas/v1beta1.ResourceClaimList" + $ref: "#/components/schemas/v1beta1.ResourceClaim" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1beta1.ResourceClaimList" + $ref: "#/components/schemas/v1beta1.ResourceClaim" application/cbor: schema: - $ref: "#/components/schemas/v1beta1.ResourceClaimList" - application/json;stream=watch: + $ref: "#/components/schemas/v1beta1.ResourceClaim" + description: OK + "201": + content: + application/json: schema: - $ref: "#/components/schemas/v1beta1.ResourceClaimList" - application/vnd.kubernetes.protobuf;stream=watch: + $ref: "#/components/schemas/v1beta1.ResourceClaim" + application/yaml: schema: - $ref: "#/components/schemas/v1beta1.ResourceClaimList" - application/cbor-seq: + $ref: "#/components/schemas/v1beta1.ResourceClaim" + application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1beta1.ResourceClaimList" - description: OK + $ref: "#/components/schemas/v1beta1.ResourceClaim" + application/cbor: + schema: + $ref: "#/components/schemas/v1beta1.ResourceClaim" + description: Created "401": content: {} description: Unauthorized tags: - resource_v1beta1 - x-kubernetes-action: list + x-kubernetes-action: patch x-kubernetes-group-version-kind: group: resource.k8s.io kind: ResourceClaim version: v1beta1 + x-codegen-request-body-name: body + x-content-type: application/json x-accepts: - application/cbor - - application/cbor-seq - application/json - - application/json;stream=watch - application/vnd.kubernetes.protobuf - - application/vnd.kubernetes.protobuf;stream=watch - application/yaml - /apis/resource.k8s.io/v1beta1/resourceclaimtemplates: - get: - description: list or watch objects of kind ResourceClaimTemplate - operationId: listResourceClaimTemplateForAllNamespaces + put: + description: replace status of the specified ResourceClaim + operationId: replaceNamespacedResourceClaimStatus parameters: - - description: "allowWatchBookmarks requests watch events with type \"BOOKMARK\"\ - . Servers that do not implement bookmarks may ignore this flag and bookmarks\ - \ are sent at the server's discretion. Clients should not assume bookmarks\ - \ are returned at any specific interval, nor may they assume the server\ - \ will send any BOOKMARK event during a session. If this is not a watch,\ - \ this field is ignored." - in: query - name: allowWatchBookmarks - schema: - type: boolean - - description: |- - The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". - - This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications. - in: query - name: continue - schema: - type: string - - description: A selector to restrict the list of returned objects by their - fields. Defaults to everything. - in: query - name: fieldSelector + - description: name of the ResourceClaim + in: path + name: name + required: true schema: type: string - - description: A selector to restrict the list of returned objects by their - labels. Defaults to everything. - in: query - name: labelSelector + - description: "object name and auth scope, such as for teams and projects" + in: path + name: namespace + required: true schema: type: string - - description: |- - limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. - - The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned. - in: query - name: limit - schema: - type: integer - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ \ and wget)." @@ -83500,127 +85577,103 @@ paths: name: pretty schema: type: string - - description: |- - resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. - - Defaults to unset + - description: "When present, indicates that modifications should not be persisted.\ + \ An invalid or unrecognized dryRun directive will result in an error response\ + \ and no further processing of the request. Valid values are: - All: all\ + \ dry run stages will be processed" in: query - name: resourceVersion + name: dryRun schema: type: string - - description: |- - resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. - - Defaults to unset + - description: "fieldManager is a name associated with the actor or entity that\ + \ is making these changes. The value must be less than or 128 characters\ + \ long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." in: query - name: resourceVersionMatch + name: fieldManager schema: type: string - - description: |- - `sendInitialEvents=true` may be set together with `watch=true`. In that case, the watch stream will begin with synthetic events to produce the current state of objects in the collection. Once all such events have been sent, a synthetic "Bookmark" event will be sent. The bookmark will report the ResourceVersion (RV) corresponding to the set of objects, and be marked with `"k8s.io/initial-events-end": "true"` annotation. Afterwards, the watch stream will proceed as usual, sending watch events corresponding to changes (subsequent to the RV) to objects watched. - - When `sendInitialEvents` option is set, we require `resourceVersionMatch` option to also be set. The semantic of the watch request is as following: - `resourceVersionMatch` = NotOlderThan - is interpreted as "data at least as new as the provided `resourceVersion`" - and the bookmark event is send when the state is synced - to a `resourceVersion` at least as fresh as the one provided by the ListOptions. - If `resourceVersion` is unset, this is interpreted as "consistent read" and the - bookmark event is send when the state is synced at least to the moment - when request started being processed. - - `resourceVersionMatch` set to any other value or unset - Invalid error is returned. - - Defaults to true if `resourceVersion=""` or `resourceVersion="0"` (for backward compatibility reasons) and to false otherwise. - in: query - name: sendInitialEvents - schema: - type: boolean - - description: |- - shardSelector restricts the list of returned objects using a CEL-based shard selector expression. The format uses the shardRange() function combined with || (logical OR) to specify one or more hash ranges: - - shardRange(object.metadata.uid, '0x0', '0x8000000000000000') - shardRange(object.metadata.uid, '0x0', '0x8000000000000000') || shardRange(object.metadata.uid, '0x8000000000000000', '0x10000000000000000') - - Field paths use CEL-style object-rooted syntax (e.g. "object.metadata.uid"), NOT the fieldSelector format ("metadata.uid"). Currently supported paths: - - object.metadata.uid - - object.metadata.namespace - - hexStart and hexEnd are single-quoted CEL string literals with a '0x' prefix, defining the inclusive lower and exclusive upper bounds over the 64-bit FNV-1a hash space. The full range is [0x0, 0x10000000000000000), where the exclusive upper bound equals 2^64. - - Examples: - 2-shard split: - shard 0: shardRange(object.metadata.uid, '0x0000000000000000', '0x8000000000000000') - shard 1: shardRange(object.metadata.uid, '0x8000000000000000', '0x10000000000000000') - 4-shard split: - shard 0: shardRange(object.metadata.uid, '0x0000000000000000', '0x4000000000000000') - shard 1: shardRange(object.metadata.uid, '0x4000000000000000', '0x8000000000000000') - shard 2: shardRange(object.metadata.uid, '0x8000000000000000', '0xc000000000000000') - shard 3: shardRange(object.metadata.uid, '0xc000000000000000', '0x10000000000000000') - - This is an alpha field and requires enabling the ShardedListAndWatch feature gate. + - description: "fieldValidation instructs the server on how to handle objects\ + \ in the request (POST/PUT/PATCH) containing unknown or duplicate fields.\ + \ Valid values are: - Ignore: This will ignore any unknown fields that are\ + \ silently dropped from the object, and will ignore all but the last duplicate\ + \ field that the decoder encounters. This is the default behavior prior\ + \ to v1.23. - Warn: This will send a warning via the standard warning response\ + \ header for each unknown field that is dropped from the object, and for\ + \ each duplicate field that is encountered. The request will still succeed\ + \ if there are no other errors, and will only persist the last of any duplicate\ + \ fields. This is the default in v1.23+ - Strict: This will fail the request\ + \ with a BadRequest error if any unknown fields would be dropped from the\ + \ object, or if any duplicate fields are present. The error returned from\ + \ the server will contain all unknown and duplicate fields encountered." in: query - name: shardSelector + name: fieldValidation schema: type: string - - description: "Timeout for the list/watch call. This limits the duration of\ - \ the call, regardless of any activity or inactivity." - in: query - name: timeoutSeconds - schema: - type: integer - - description: "Watch for changes to the described resources and return them\ - \ as a stream of add, update, and remove notifications. Specify resourceVersion." - in: query - name: watch - schema: - type: boolean + requestBody: + content: + application/json: + schema: + $ref: "#/components/schemas/v1beta1.ResourceClaim" + required: true responses: "200": content: application/json: schema: - $ref: "#/components/schemas/v1beta1.ResourceClaimTemplateList" + $ref: "#/components/schemas/v1beta1.ResourceClaim" application/yaml: schema: - $ref: "#/components/schemas/v1beta1.ResourceClaimTemplateList" + $ref: "#/components/schemas/v1beta1.ResourceClaim" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1beta1.ResourceClaimTemplateList" + $ref: "#/components/schemas/v1beta1.ResourceClaim" application/cbor: schema: - $ref: "#/components/schemas/v1beta1.ResourceClaimTemplateList" - application/json;stream=watch: + $ref: "#/components/schemas/v1beta1.ResourceClaim" + description: OK + "201": + content: + application/json: schema: - $ref: "#/components/schemas/v1beta1.ResourceClaimTemplateList" - application/vnd.kubernetes.protobuf;stream=watch: + $ref: "#/components/schemas/v1beta1.ResourceClaim" + application/yaml: schema: - $ref: "#/components/schemas/v1beta1.ResourceClaimTemplateList" - application/cbor-seq: + $ref: "#/components/schemas/v1beta1.ResourceClaim" + application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1beta1.ResourceClaimTemplateList" - description: OK + $ref: "#/components/schemas/v1beta1.ResourceClaim" + application/cbor: + schema: + $ref: "#/components/schemas/v1beta1.ResourceClaim" + description: Created "401": content: {} description: Unauthorized tags: - resource_v1beta1 - x-kubernetes-action: list + x-kubernetes-action: put x-kubernetes-group-version-kind: group: resource.k8s.io - kind: ResourceClaimTemplate + kind: ResourceClaim version: v1beta1 + x-codegen-request-body-name: body + x-content-type: application/json x-accepts: - application/cbor - - application/cbor-seq - application/json - - application/json;stream=watch - application/vnd.kubernetes.protobuf - - application/vnd.kubernetes.protobuf;stream=watch - application/yaml - /apis/resource.k8s.io/v1beta1/resourceslices: + /apis/resource.k8s.io/v1beta1/namespaces/{namespace}/resourceclaimtemplates: delete: - description: delete collection of ResourceSlice - operationId: deleteCollectionResourceSlice + description: delete collection of ResourceClaimTemplate + operationId: deleteCollectionNamespacedResourceClaimTemplate parameters: + - description: "object name and auth scope, such as for teams and projects" + in: path + name: namespace + required: true + schema: + type: string - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ \ and wget)." @@ -83804,7 +85857,7 @@ paths: x-kubernetes-action: deletecollection x-kubernetes-group-version-kind: group: resource.k8s.io - kind: ResourceSlice + kind: ResourceClaimTemplate version: v1beta1 x-codegen-request-body-name: body x-content-type: application/json @@ -83814,9 +85867,15 @@ paths: - application/vnd.kubernetes.protobuf - application/yaml get: - description: list or watch objects of kind ResourceSlice - operationId: listResourceSlice + description: list or watch objects of kind ResourceClaimTemplate + operationId: listNamespacedResourceClaimTemplate parameters: + - description: "object name and auth scope, such as for teams and projects" + in: path + name: namespace + required: true + schema: + type: string - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ \ and wget)." @@ -83940,25 +85999,25 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1beta1.ResourceSliceList" + $ref: "#/components/schemas/v1beta1.ResourceClaimTemplateList" application/yaml: schema: - $ref: "#/components/schemas/v1beta1.ResourceSliceList" + $ref: "#/components/schemas/v1beta1.ResourceClaimTemplateList" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1beta1.ResourceSliceList" + $ref: "#/components/schemas/v1beta1.ResourceClaimTemplateList" application/cbor: schema: - $ref: "#/components/schemas/v1beta1.ResourceSliceList" + $ref: "#/components/schemas/v1beta1.ResourceClaimTemplateList" application/json;stream=watch: schema: - $ref: "#/components/schemas/v1beta1.ResourceSliceList" + $ref: "#/components/schemas/v1beta1.ResourceClaimTemplateList" application/vnd.kubernetes.protobuf;stream=watch: schema: - $ref: "#/components/schemas/v1beta1.ResourceSliceList" + $ref: "#/components/schemas/v1beta1.ResourceClaimTemplateList" application/cbor-seq: schema: - $ref: "#/components/schemas/v1beta1.ResourceSliceList" + $ref: "#/components/schemas/v1beta1.ResourceClaimTemplateList" description: OK "401": content: {} @@ -83968,7 +86027,7 @@ paths: x-kubernetes-action: list x-kubernetes-group-version-kind: group: resource.k8s.io - kind: ResourceSlice + kind: ResourceClaimTemplate version: v1beta1 x-accepts: - application/cbor @@ -83979,9 +86038,15 @@ paths: - application/vnd.kubernetes.protobuf;stream=watch - application/yaml post: - description: create a ResourceSlice - operationId: createResourceSlice + description: create a ResourceClaimTemplate + operationId: createNamespacedResourceClaimTemplate parameters: + - description: "object name and auth scope, such as for teams and projects" + in: path + name: namespace + required: true + schema: + type: string - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ \ and wget)." @@ -84025,53 +86090,53 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1beta1.ResourceSlice" + $ref: "#/components/schemas/v1beta1.ResourceClaimTemplate" required: true responses: "200": content: application/json: schema: - $ref: "#/components/schemas/v1beta1.ResourceSlice" + $ref: "#/components/schemas/v1beta1.ResourceClaimTemplate" application/yaml: schema: - $ref: "#/components/schemas/v1beta1.ResourceSlice" + $ref: "#/components/schemas/v1beta1.ResourceClaimTemplate" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1beta1.ResourceSlice" + $ref: "#/components/schemas/v1beta1.ResourceClaimTemplate" application/cbor: schema: - $ref: "#/components/schemas/v1beta1.ResourceSlice" + $ref: "#/components/schemas/v1beta1.ResourceClaimTemplate" description: OK "201": content: application/json: schema: - $ref: "#/components/schemas/v1beta1.ResourceSlice" + $ref: "#/components/schemas/v1beta1.ResourceClaimTemplate" application/yaml: schema: - $ref: "#/components/schemas/v1beta1.ResourceSlice" + $ref: "#/components/schemas/v1beta1.ResourceClaimTemplate" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1beta1.ResourceSlice" + $ref: "#/components/schemas/v1beta1.ResourceClaimTemplate" application/cbor: schema: - $ref: "#/components/schemas/v1beta1.ResourceSlice" + $ref: "#/components/schemas/v1beta1.ResourceClaimTemplate" description: Created "202": content: application/json: schema: - $ref: "#/components/schemas/v1beta1.ResourceSlice" + $ref: "#/components/schemas/v1beta1.ResourceClaimTemplate" application/yaml: schema: - $ref: "#/components/schemas/v1beta1.ResourceSlice" + $ref: "#/components/schemas/v1beta1.ResourceClaimTemplate" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1beta1.ResourceSlice" + $ref: "#/components/schemas/v1beta1.ResourceClaimTemplate" application/cbor: schema: - $ref: "#/components/schemas/v1beta1.ResourceSlice" + $ref: "#/components/schemas/v1beta1.ResourceClaimTemplate" description: Accepted "401": content: {} @@ -84081,7 +86146,7 @@ paths: x-kubernetes-action: post x-kubernetes-group-version-kind: group: resource.k8s.io - kind: ResourceSlice + kind: ResourceClaimTemplate version: v1beta1 x-codegen-request-body-name: body x-content-type: application/json @@ -84090,17 +86155,23 @@ paths: - application/json - application/vnd.kubernetes.protobuf - application/yaml - /apis/resource.k8s.io/v1beta1/resourceslices/{name}: + /apis/resource.k8s.io/v1beta1/namespaces/{namespace}/resourceclaimtemplates/{name}: delete: - description: delete a ResourceSlice - operationId: deleteResourceSlice + description: delete a ResourceClaimTemplate + operationId: deleteNamespacedResourceClaimTemplate parameters: - - description: name of the ResourceSlice + - description: name of the ResourceClaimTemplate in: path name: name required: true schema: type: string + - description: "object name and auth scope, such as for teams and projects" + in: path + name: namespace + required: true + schema: + type: string - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ \ and wget)." @@ -84170,31 +86241,31 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1beta1.ResourceSlice" + $ref: "#/components/schemas/v1beta1.ResourceClaimTemplate" application/yaml: schema: - $ref: "#/components/schemas/v1beta1.ResourceSlice" + $ref: "#/components/schemas/v1beta1.ResourceClaimTemplate" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1beta1.ResourceSlice" + $ref: "#/components/schemas/v1beta1.ResourceClaimTemplate" application/cbor: schema: - $ref: "#/components/schemas/v1beta1.ResourceSlice" + $ref: "#/components/schemas/v1beta1.ResourceClaimTemplate" description: OK "202": content: application/json: schema: - $ref: "#/components/schemas/v1beta1.ResourceSlice" + $ref: "#/components/schemas/v1beta1.ResourceClaimTemplate" application/yaml: schema: - $ref: "#/components/schemas/v1beta1.ResourceSlice" + $ref: "#/components/schemas/v1beta1.ResourceClaimTemplate" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1beta1.ResourceSlice" + $ref: "#/components/schemas/v1beta1.ResourceClaimTemplate" application/cbor: schema: - $ref: "#/components/schemas/v1beta1.ResourceSlice" + $ref: "#/components/schemas/v1beta1.ResourceClaimTemplate" description: Accepted "401": content: {} @@ -84204,7 +86275,7 @@ paths: x-kubernetes-action: delete x-kubernetes-group-version-kind: group: resource.k8s.io - kind: ResourceSlice + kind: ResourceClaimTemplate version: v1beta1 x-codegen-request-body-name: body x-content-type: application/json @@ -84214,15 +86285,21 @@ paths: - application/vnd.kubernetes.protobuf - application/yaml get: - description: read the specified ResourceSlice - operationId: readResourceSlice + description: read the specified ResourceClaimTemplate + operationId: readNamespacedResourceClaimTemplate parameters: - - description: name of the ResourceSlice + - description: name of the ResourceClaimTemplate in: path name: name required: true schema: type: string + - description: "object name and auth scope, such as for teams and projects" + in: path + name: namespace + required: true + schema: + type: string - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ \ and wget)." @@ -84235,16 +86312,16 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1beta1.ResourceSlice" + $ref: "#/components/schemas/v1beta1.ResourceClaimTemplate" application/yaml: schema: - $ref: "#/components/schemas/v1beta1.ResourceSlice" + $ref: "#/components/schemas/v1beta1.ResourceClaimTemplate" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1beta1.ResourceSlice" + $ref: "#/components/schemas/v1beta1.ResourceClaimTemplate" application/cbor: schema: - $ref: "#/components/schemas/v1beta1.ResourceSlice" + $ref: "#/components/schemas/v1beta1.ResourceClaimTemplate" description: OK "401": content: {} @@ -84254,7 +86331,7 @@ paths: x-kubernetes-action: get x-kubernetes-group-version-kind: group: resource.k8s.io - kind: ResourceSlice + kind: ResourceClaimTemplate version: v1beta1 x-accepts: - application/cbor @@ -84262,15 +86339,21 @@ paths: - application/vnd.kubernetes.protobuf - application/yaml patch: - description: partially update the specified ResourceSlice - operationId: patchResourceSlice + description: partially update the specified ResourceClaimTemplate + operationId: patchNamespacedResourceClaimTemplate parameters: - - description: name of the ResourceSlice + - description: name of the ResourceClaimTemplate in: path name: name required: true schema: type: string + - description: "object name and auth scope, such as for teams and projects" + in: path + name: namespace + required: true + schema: + type: string - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ \ and wget)." @@ -84330,31 +86413,31 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1beta1.ResourceSlice" + $ref: "#/components/schemas/v1beta1.ResourceClaimTemplate" application/yaml: schema: - $ref: "#/components/schemas/v1beta1.ResourceSlice" + $ref: "#/components/schemas/v1beta1.ResourceClaimTemplate" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1beta1.ResourceSlice" + $ref: "#/components/schemas/v1beta1.ResourceClaimTemplate" application/cbor: schema: - $ref: "#/components/schemas/v1beta1.ResourceSlice" + $ref: "#/components/schemas/v1beta1.ResourceClaimTemplate" description: OK "201": content: application/json: schema: - $ref: "#/components/schemas/v1beta1.ResourceSlice" + $ref: "#/components/schemas/v1beta1.ResourceClaimTemplate" application/yaml: schema: - $ref: "#/components/schemas/v1beta1.ResourceSlice" + $ref: "#/components/schemas/v1beta1.ResourceClaimTemplate" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1beta1.ResourceSlice" + $ref: "#/components/schemas/v1beta1.ResourceClaimTemplate" application/cbor: schema: - $ref: "#/components/schemas/v1beta1.ResourceSlice" + $ref: "#/components/schemas/v1beta1.ResourceClaimTemplate" description: Created "401": content: {} @@ -84364,7 +86447,7 @@ paths: x-kubernetes-action: patch x-kubernetes-group-version-kind: group: resource.k8s.io - kind: ResourceSlice + kind: ResourceClaimTemplate version: v1beta1 x-codegen-request-body-name: body x-content-type: application/json @@ -84374,15 +86457,21 @@ paths: - application/vnd.kubernetes.protobuf - application/yaml put: - description: replace the specified ResourceSlice - operationId: replaceResourceSlice + description: replace the specified ResourceClaimTemplate + operationId: replaceNamespacedResourceClaimTemplate parameters: - - description: name of the ResourceSlice + - description: name of the ResourceClaimTemplate in: path name: name required: true schema: type: string + - description: "object name and auth scope, such as for teams and projects" + in: path + name: namespace + required: true + schema: + type: string - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ \ and wget)." @@ -84426,38 +86515,38 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1beta1.ResourceSlice" + $ref: "#/components/schemas/v1beta1.ResourceClaimTemplate" required: true responses: "200": content: application/json: schema: - $ref: "#/components/schemas/v1beta1.ResourceSlice" + $ref: "#/components/schemas/v1beta1.ResourceClaimTemplate" application/yaml: schema: - $ref: "#/components/schemas/v1beta1.ResourceSlice" + $ref: "#/components/schemas/v1beta1.ResourceClaimTemplate" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1beta1.ResourceSlice" + $ref: "#/components/schemas/v1beta1.ResourceClaimTemplate" application/cbor: schema: - $ref: "#/components/schemas/v1beta1.ResourceSlice" + $ref: "#/components/schemas/v1beta1.ResourceClaimTemplate" description: OK "201": content: application/json: schema: - $ref: "#/components/schemas/v1beta1.ResourceSlice" + $ref: "#/components/schemas/v1beta1.ResourceClaimTemplate" application/yaml: schema: - $ref: "#/components/schemas/v1beta1.ResourceSlice" + $ref: "#/components/schemas/v1beta1.ResourceClaimTemplate" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1beta1.ResourceSlice" + $ref: "#/components/schemas/v1beta1.ResourceClaimTemplate" application/cbor: schema: - $ref: "#/components/schemas/v1beta1.ResourceSlice" + $ref: "#/components/schemas/v1beta1.ResourceClaimTemplate" description: Created "401": content: {} @@ -84467,7 +86556,7 @@ paths: x-kubernetes-action: put x-kubernetes-group-version-kind: group: resource.k8s.io - kind: ResourceSlice + kind: ResourceClaimTemplate version: v1beta1 x-codegen-request-body-name: body x-content-type: application/json @@ -84476,58 +86565,21 @@ paths: - application/json - application/vnd.kubernetes.protobuf - application/yaml - /apis/resource.k8s.io/v1beta1/watch/deviceclasses: {} - /apis/resource.k8s.io/v1beta1/watch/deviceclasses/{name}: {} - /apis/resource.k8s.io/v1beta1/watch/namespaces/{namespace}/resourceclaims: {} - /apis/resource.k8s.io/v1beta1/watch/namespaces/{namespace}/resourceclaims/{name}: {} - /apis/resource.k8s.io/v1beta1/watch/namespaces/{namespace}/resourceclaimtemplates: {} - /apis/resource.k8s.io/v1beta1/watch/namespaces/{namespace}/resourceclaimtemplates/{name}: {} - /apis/resource.k8s.io/v1beta1/watch/resourceclaims: {} - /apis/resource.k8s.io/v1beta1/watch/resourceclaimtemplates: {} - /apis/resource.k8s.io/v1beta1/watch/resourceslices: {} - /apis/resource.k8s.io/v1beta1/watch/resourceslices/{name}: {} - /apis/resource.k8s.io/v1beta2/: + /apis/resource.k8s.io/v1beta1/resourceclaims: get: - description: get available resources - operationId: getAPIResources - responses: - "200": - content: - application/json: - schema: - $ref: "#/components/schemas/v1.APIResourceList" - application/yaml: - schema: - $ref: "#/components/schemas/v1.APIResourceList" - application/vnd.kubernetes.protobuf: - schema: - $ref: "#/components/schemas/v1.APIResourceList" - application/cbor: - schema: - $ref: "#/components/schemas/v1.APIResourceList" - description: OK - "401": - content: {} - description: Unauthorized - tags: - - resource_v1beta2 - x-accepts: - - application/cbor - - application/json - - application/vnd.kubernetes.protobuf - - application/yaml - /apis/resource.k8s.io/v1beta2/deviceclasses: - delete: - description: delete collection of DeviceClass - operationId: deleteCollectionDeviceClass + description: list or watch objects of kind ResourceClaim + operationId: listResourceClaimForAllNamespaces parameters: - - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ - \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ - \ and wget)." + - description: "allowWatchBookmarks requests watch events with type \"BOOKMARK\"\ + . Servers that do not implement bookmarks may ignore this flag and bookmarks\ + \ are sent at the server's discretion. Clients should not assume bookmarks\ + \ are returned at any specific interval, nor may they assume the server\ + \ will send any BOOKMARK event during a session. If this is not a watch,\ + \ this field is ignored." in: query - name: pretty + name: allowWatchBookmarks schema: - type: string + type: boolean - description: |- The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". @@ -84536,44 +86588,12 @@ paths: name: continue schema: type: string - - description: "When present, indicates that modifications should not be persisted.\ - \ An invalid or unrecognized dryRun directive will result in an error response\ - \ and no further processing of the request. Valid values are: - All: all\ - \ dry run stages will be processed" - in: query - name: dryRun - schema: - type: string - description: A selector to restrict the list of returned objects by their fields. Defaults to everything. in: query name: fieldSelector schema: type: string - - description: "The duration in seconds before the object should be deleted.\ - \ Value must be non-negative integer. The value zero indicates delete immediately.\ - \ If this value is nil, the default grace period for the specified type\ - \ will be used. Defaults to a per object value if not specified. zero means\ - \ delete immediately." - in: query - name: gracePeriodSeconds - schema: - type: integer - - description: "if set to true, it will trigger an unsafe deletion of the resource\ - \ in case the normal deletion flow fails with a corrupt object error. A\ - \ resource is considered corrupt if it can not be retrieved from the underlying\ - \ storage successfully because of a) its data can not be transformed e.g.\ - \ decryption failure, or b) it fails to decode into an object. NOTE: unsafe\ - \ deletion ignores finalizer constraints, skips precondition checks, and\ - \ removes the object from the storage. WARNING: This may potentially break\ - \ the cluster if the workload associated with the resource being unsafe-deleted\ - \ relies on normal deletion flow. Use only if you REALLY know what you are\ - \ doing. The default value is false, and the user must opt in to enable\ - \ it" - in: query - name: ignoreStoreReadErrorWithClusterBreakingPotential - schema: - type: boolean - description: A selector to restrict the list of returned objects by their labels. Defaults to everything. in: query @@ -84588,23 +86608,384 @@ paths: name: limit schema: type: integer - - description: "Deprecated: please use the PropagationPolicy, this field will\ - \ be deprecated in 1.7. Should the dependent objects be orphaned. If true/false,\ - \ the \"orphan\" finalizer will be added to/removed from the object's finalizers\ - \ list. Either this field or PropagationPolicy may be set, but not both." - in: query - name: orphanDependents - schema: - type: boolean - - description: "Whether and how garbage collection will be performed. Either\ - \ this field or OrphanDependents may be set, but not both. The default policy\ - \ is decided by the existing finalizer set in the metadata.finalizers and\ - \ the resource-specific default policy. Acceptable values are: 'Orphan'\ - \ - orphan the dependents; 'Background' - allow the garbage collector to\ - \ delete the dependents in the background; 'Foreground' - a cascading policy\ - \ that deletes all dependents in the foreground." + - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ + \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ + \ and wget)." in: query - name: propagationPolicy + name: pretty + schema: + type: string + - description: |- + resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + + Defaults to unset + in: query + name: resourceVersion + schema: + type: string + - description: |- + resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + + Defaults to unset + in: query + name: resourceVersionMatch + schema: + type: string + - description: |- + `sendInitialEvents=true` may be set together with `watch=true`. In that case, the watch stream will begin with synthetic events to produce the current state of objects in the collection. Once all such events have been sent, a synthetic "Bookmark" event will be sent. The bookmark will report the ResourceVersion (RV) corresponding to the set of objects, and be marked with `"k8s.io/initial-events-end": "true"` annotation. Afterwards, the watch stream will proceed as usual, sending watch events corresponding to changes (subsequent to the RV) to objects watched. + + When `sendInitialEvents` option is set, we require `resourceVersionMatch` option to also be set. The semantic of the watch request is as following: - `resourceVersionMatch` = NotOlderThan + is interpreted as "data at least as new as the provided `resourceVersion`" + and the bookmark event is send when the state is synced + to a `resourceVersion` at least as fresh as the one provided by the ListOptions. + If `resourceVersion` is unset, this is interpreted as "consistent read" and the + bookmark event is send when the state is synced at least to the moment + when request started being processed. + - `resourceVersionMatch` set to any other value or unset + Invalid error is returned. + + Defaults to true if `resourceVersion=""` or `resourceVersion="0"` (for backward compatibility reasons) and to false otherwise. + in: query + name: sendInitialEvents + schema: + type: boolean + - description: |- + shardSelector restricts the list of returned objects using a CEL-based shard selector expression. The format uses the shardRange() function combined with || (logical OR) to specify one or more hash ranges: + + shardRange(object.metadata.uid, '0x0', '0x8000000000000000') + shardRange(object.metadata.uid, '0x0', '0x8000000000000000') || shardRange(object.metadata.uid, '0x8000000000000000', '0x10000000000000000') + + Field paths use CEL-style object-rooted syntax (e.g. "object.metadata.uid"), NOT the fieldSelector format ("metadata.uid"). Currently supported paths: + - object.metadata.uid + - object.metadata.namespace + + hexStart and hexEnd are single-quoted CEL string literals with a '0x' prefix, defining the inclusive lower and exclusive upper bounds over the 64-bit FNV-1a hash space. The full range is [0x0, 0x10000000000000000), where the exclusive upper bound equals 2^64. + + Examples: + 2-shard split: + shard 0: shardRange(object.metadata.uid, '0x0000000000000000', '0x8000000000000000') + shard 1: shardRange(object.metadata.uid, '0x8000000000000000', '0x10000000000000000') + 4-shard split: + shard 0: shardRange(object.metadata.uid, '0x0000000000000000', '0x4000000000000000') + shard 1: shardRange(object.metadata.uid, '0x4000000000000000', '0x8000000000000000') + shard 2: shardRange(object.metadata.uid, '0x8000000000000000', '0xc000000000000000') + shard 3: shardRange(object.metadata.uid, '0xc000000000000000', '0x10000000000000000') + + This is an alpha field and requires enabling the ShardedListAndWatch feature gate. + in: query + name: shardSelector + schema: + type: string + - description: "Timeout for the list/watch call. This limits the duration of\ + \ the call, regardless of any activity or inactivity." + in: query + name: timeoutSeconds + schema: + type: integer + - description: "Watch for changes to the described resources and return them\ + \ as a stream of add, update, and remove notifications. Specify resourceVersion." + in: query + name: watch + schema: + type: boolean + responses: + "200": + content: + application/json: + schema: + $ref: "#/components/schemas/v1beta1.ResourceClaimList" + application/yaml: + schema: + $ref: "#/components/schemas/v1beta1.ResourceClaimList" + application/vnd.kubernetes.protobuf: + schema: + $ref: "#/components/schemas/v1beta1.ResourceClaimList" + application/cbor: + schema: + $ref: "#/components/schemas/v1beta1.ResourceClaimList" + application/json;stream=watch: + schema: + $ref: "#/components/schemas/v1beta1.ResourceClaimList" + application/vnd.kubernetes.protobuf;stream=watch: + schema: + $ref: "#/components/schemas/v1beta1.ResourceClaimList" + application/cbor-seq: + schema: + $ref: "#/components/schemas/v1beta1.ResourceClaimList" + description: OK + "401": + content: {} + description: Unauthorized + tags: + - resource_v1beta1 + x-kubernetes-action: list + x-kubernetes-group-version-kind: + group: resource.k8s.io + kind: ResourceClaim + version: v1beta1 + x-accepts: + - application/cbor + - application/cbor-seq + - application/json + - application/json;stream=watch + - application/vnd.kubernetes.protobuf + - application/vnd.kubernetes.protobuf;stream=watch + - application/yaml + /apis/resource.k8s.io/v1beta1/resourceclaimtemplates: + get: + description: list or watch objects of kind ResourceClaimTemplate + operationId: listResourceClaimTemplateForAllNamespaces + parameters: + - description: "allowWatchBookmarks requests watch events with type \"BOOKMARK\"\ + . Servers that do not implement bookmarks may ignore this flag and bookmarks\ + \ are sent at the server's discretion. Clients should not assume bookmarks\ + \ are returned at any specific interval, nor may they assume the server\ + \ will send any BOOKMARK event during a session. If this is not a watch,\ + \ this field is ignored." + in: query + name: allowWatchBookmarks + schema: + type: boolean + - description: |- + The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + + This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications. + in: query + name: continue + schema: + type: string + - description: A selector to restrict the list of returned objects by their + fields. Defaults to everything. + in: query + name: fieldSelector + schema: + type: string + - description: A selector to restrict the list of returned objects by their + labels. Defaults to everything. + in: query + name: labelSelector + schema: + type: string + - description: |- + limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + + The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned. + in: query + name: limit + schema: + type: integer + - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ + \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ + \ and wget)." + in: query + name: pretty + schema: + type: string + - description: |- + resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + + Defaults to unset + in: query + name: resourceVersion + schema: + type: string + - description: |- + resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + + Defaults to unset + in: query + name: resourceVersionMatch + schema: + type: string + - description: |- + `sendInitialEvents=true` may be set together with `watch=true`. In that case, the watch stream will begin with synthetic events to produce the current state of objects in the collection. Once all such events have been sent, a synthetic "Bookmark" event will be sent. The bookmark will report the ResourceVersion (RV) corresponding to the set of objects, and be marked with `"k8s.io/initial-events-end": "true"` annotation. Afterwards, the watch stream will proceed as usual, sending watch events corresponding to changes (subsequent to the RV) to objects watched. + + When `sendInitialEvents` option is set, we require `resourceVersionMatch` option to also be set. The semantic of the watch request is as following: - `resourceVersionMatch` = NotOlderThan + is interpreted as "data at least as new as the provided `resourceVersion`" + and the bookmark event is send when the state is synced + to a `resourceVersion` at least as fresh as the one provided by the ListOptions. + If `resourceVersion` is unset, this is interpreted as "consistent read" and the + bookmark event is send when the state is synced at least to the moment + when request started being processed. + - `resourceVersionMatch` set to any other value or unset + Invalid error is returned. + + Defaults to true if `resourceVersion=""` or `resourceVersion="0"` (for backward compatibility reasons) and to false otherwise. + in: query + name: sendInitialEvents + schema: + type: boolean + - description: |- + shardSelector restricts the list of returned objects using a CEL-based shard selector expression. The format uses the shardRange() function combined with || (logical OR) to specify one or more hash ranges: + + shardRange(object.metadata.uid, '0x0', '0x8000000000000000') + shardRange(object.metadata.uid, '0x0', '0x8000000000000000') || shardRange(object.metadata.uid, '0x8000000000000000', '0x10000000000000000') + + Field paths use CEL-style object-rooted syntax (e.g. "object.metadata.uid"), NOT the fieldSelector format ("metadata.uid"). Currently supported paths: + - object.metadata.uid + - object.metadata.namespace + + hexStart and hexEnd are single-quoted CEL string literals with a '0x' prefix, defining the inclusive lower and exclusive upper bounds over the 64-bit FNV-1a hash space. The full range is [0x0, 0x10000000000000000), where the exclusive upper bound equals 2^64. + + Examples: + 2-shard split: + shard 0: shardRange(object.metadata.uid, '0x0000000000000000', '0x8000000000000000') + shard 1: shardRange(object.metadata.uid, '0x8000000000000000', '0x10000000000000000') + 4-shard split: + shard 0: shardRange(object.metadata.uid, '0x0000000000000000', '0x4000000000000000') + shard 1: shardRange(object.metadata.uid, '0x4000000000000000', '0x8000000000000000') + shard 2: shardRange(object.metadata.uid, '0x8000000000000000', '0xc000000000000000') + shard 3: shardRange(object.metadata.uid, '0xc000000000000000', '0x10000000000000000') + + This is an alpha field and requires enabling the ShardedListAndWatch feature gate. + in: query + name: shardSelector + schema: + type: string + - description: "Timeout for the list/watch call. This limits the duration of\ + \ the call, regardless of any activity or inactivity." + in: query + name: timeoutSeconds + schema: + type: integer + - description: "Watch for changes to the described resources and return them\ + \ as a stream of add, update, and remove notifications. Specify resourceVersion." + in: query + name: watch + schema: + type: boolean + responses: + "200": + content: + application/json: + schema: + $ref: "#/components/schemas/v1beta1.ResourceClaimTemplateList" + application/yaml: + schema: + $ref: "#/components/schemas/v1beta1.ResourceClaimTemplateList" + application/vnd.kubernetes.protobuf: + schema: + $ref: "#/components/schemas/v1beta1.ResourceClaimTemplateList" + application/cbor: + schema: + $ref: "#/components/schemas/v1beta1.ResourceClaimTemplateList" + application/json;stream=watch: + schema: + $ref: "#/components/schemas/v1beta1.ResourceClaimTemplateList" + application/vnd.kubernetes.protobuf;stream=watch: + schema: + $ref: "#/components/schemas/v1beta1.ResourceClaimTemplateList" + application/cbor-seq: + schema: + $ref: "#/components/schemas/v1beta1.ResourceClaimTemplateList" + description: OK + "401": + content: {} + description: Unauthorized + tags: + - resource_v1beta1 + x-kubernetes-action: list + x-kubernetes-group-version-kind: + group: resource.k8s.io + kind: ResourceClaimTemplate + version: v1beta1 + x-accepts: + - application/cbor + - application/cbor-seq + - application/json + - application/json;stream=watch + - application/vnd.kubernetes.protobuf + - application/vnd.kubernetes.protobuf;stream=watch + - application/yaml + /apis/resource.k8s.io/v1beta1/resourceslices: + delete: + description: delete collection of ResourceSlice + operationId: deleteCollectionResourceSlice + parameters: + - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ + \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ + \ and wget)." + in: query + name: pretty + schema: + type: string + - description: |- + The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + + This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications. + in: query + name: continue + schema: + type: string + - description: "When present, indicates that modifications should not be persisted.\ + \ An invalid or unrecognized dryRun directive will result in an error response\ + \ and no further processing of the request. Valid values are: - All: all\ + \ dry run stages will be processed" + in: query + name: dryRun + schema: + type: string + - description: A selector to restrict the list of returned objects by their + fields. Defaults to everything. + in: query + name: fieldSelector + schema: + type: string + - description: "The duration in seconds before the object should be deleted.\ + \ Value must be non-negative integer. The value zero indicates delete immediately.\ + \ If this value is nil, the default grace period for the specified type\ + \ will be used. Defaults to a per object value if not specified. zero means\ + \ delete immediately." + in: query + name: gracePeriodSeconds + schema: + type: integer + - description: "if set to true, it will trigger an unsafe deletion of the resource\ + \ in case the normal deletion flow fails with a corrupt object error. A\ + \ resource is considered corrupt if it can not be retrieved from the underlying\ + \ storage successfully because of a) its data can not be transformed e.g.\ + \ decryption failure, or b) it fails to decode into an object. NOTE: unsafe\ + \ deletion ignores finalizer constraints, skips precondition checks, and\ + \ removes the object from the storage. WARNING: This may potentially break\ + \ the cluster if the workload associated with the resource being unsafe-deleted\ + \ relies on normal deletion flow. Use only if you REALLY know what you are\ + \ doing. The default value is false, and the user must opt in to enable\ + \ it" + in: query + name: ignoreStoreReadErrorWithClusterBreakingPotential + schema: + type: boolean + - description: A selector to restrict the list of returned objects by their + labels. Defaults to everything. + in: query + name: labelSelector + schema: + type: string + - description: |- + limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + + The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned. + in: query + name: limit + schema: + type: integer + - description: "Deprecated: please use the PropagationPolicy, this field will\ + \ be deprecated in 1.7. Should the dependent objects be orphaned. If true/false,\ + \ the \"orphan\" finalizer will be added to/removed from the object's finalizers\ + \ list. Either this field or PropagationPolicy may be set, but not both." + in: query + name: orphanDependents + schema: + type: boolean + - description: "Whether and how garbage collection will be performed. Either\ + \ this field or OrphanDependents may be set, but not both. The default policy\ + \ is decided by the existing finalizer set in the metadata.finalizers and\ + \ the resource-specific default policy. Acceptable values are: 'Orphan'\ + \ - orphan the dependents; 'Background' - allow the garbage collector to\ + \ delete the dependents in the background; 'Foreground' - a cascading policy\ + \ that deletes all dependents in the foreground." + in: query + name: propagationPolicy schema: type: string - description: |- @@ -84700,12 +87081,12 @@ paths: content: {} description: Unauthorized tags: - - resource_v1beta2 + - resource_v1beta1 x-kubernetes-action: deletecollection x-kubernetes-group-version-kind: group: resource.k8s.io - kind: DeviceClass - version: v1beta2 + kind: ResourceSlice + version: v1beta1 x-codegen-request-body-name: body x-content-type: application/json x-accepts: @@ -84714,8 +87095,8 @@ paths: - application/vnd.kubernetes.protobuf - application/yaml get: - description: list or watch objects of kind DeviceClass - operationId: listDeviceClass + description: list or watch objects of kind ResourceSlice + operationId: listResourceSlice parameters: - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ @@ -84840,36 +87221,36 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1beta2.DeviceClassList" + $ref: "#/components/schemas/v1beta1.ResourceSliceList" application/yaml: schema: - $ref: "#/components/schemas/v1beta2.DeviceClassList" + $ref: "#/components/schemas/v1beta1.ResourceSliceList" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1beta2.DeviceClassList" + $ref: "#/components/schemas/v1beta1.ResourceSliceList" application/cbor: schema: - $ref: "#/components/schemas/v1beta2.DeviceClassList" + $ref: "#/components/schemas/v1beta1.ResourceSliceList" application/json;stream=watch: schema: - $ref: "#/components/schemas/v1beta2.DeviceClassList" + $ref: "#/components/schemas/v1beta1.ResourceSliceList" application/vnd.kubernetes.protobuf;stream=watch: schema: - $ref: "#/components/schemas/v1beta2.DeviceClassList" + $ref: "#/components/schemas/v1beta1.ResourceSliceList" application/cbor-seq: schema: - $ref: "#/components/schemas/v1beta2.DeviceClassList" + $ref: "#/components/schemas/v1beta1.ResourceSliceList" description: OK "401": content: {} description: Unauthorized tags: - - resource_v1beta2 + - resource_v1beta1 x-kubernetes-action: list x-kubernetes-group-version-kind: group: resource.k8s.io - kind: DeviceClass - version: v1beta2 + kind: ResourceSlice + version: v1beta1 x-accepts: - application/cbor - application/cbor-seq @@ -84879,8 +87260,8 @@ paths: - application/vnd.kubernetes.protobuf;stream=watch - application/yaml post: - description: create a DeviceClass - operationId: createDeviceClass + description: create a ResourceSlice + operationId: createResourceSlice parameters: - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ @@ -84925,64 +87306,64 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1beta2.DeviceClass" + $ref: "#/components/schemas/v1beta1.ResourceSlice" required: true responses: "200": content: application/json: schema: - $ref: "#/components/schemas/v1beta2.DeviceClass" + $ref: "#/components/schemas/v1beta1.ResourceSlice" application/yaml: schema: - $ref: "#/components/schemas/v1beta2.DeviceClass" + $ref: "#/components/schemas/v1beta1.ResourceSlice" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1beta2.DeviceClass" + $ref: "#/components/schemas/v1beta1.ResourceSlice" application/cbor: schema: - $ref: "#/components/schemas/v1beta2.DeviceClass" + $ref: "#/components/schemas/v1beta1.ResourceSlice" description: OK "201": content: application/json: schema: - $ref: "#/components/schemas/v1beta2.DeviceClass" + $ref: "#/components/schemas/v1beta1.ResourceSlice" application/yaml: schema: - $ref: "#/components/schemas/v1beta2.DeviceClass" + $ref: "#/components/schemas/v1beta1.ResourceSlice" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1beta2.DeviceClass" + $ref: "#/components/schemas/v1beta1.ResourceSlice" application/cbor: schema: - $ref: "#/components/schemas/v1beta2.DeviceClass" + $ref: "#/components/schemas/v1beta1.ResourceSlice" description: Created "202": content: application/json: schema: - $ref: "#/components/schemas/v1beta2.DeviceClass" + $ref: "#/components/schemas/v1beta1.ResourceSlice" application/yaml: schema: - $ref: "#/components/schemas/v1beta2.DeviceClass" + $ref: "#/components/schemas/v1beta1.ResourceSlice" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1beta2.DeviceClass" + $ref: "#/components/schemas/v1beta1.ResourceSlice" application/cbor: schema: - $ref: "#/components/schemas/v1beta2.DeviceClass" + $ref: "#/components/schemas/v1beta1.ResourceSlice" description: Accepted "401": content: {} description: Unauthorized tags: - - resource_v1beta2 + - resource_v1beta1 x-kubernetes-action: post x-kubernetes-group-version-kind: group: resource.k8s.io - kind: DeviceClass - version: v1beta2 + kind: ResourceSlice + version: v1beta1 x-codegen-request-body-name: body x-content-type: application/json x-accepts: @@ -84990,12 +87371,12 @@ paths: - application/json - application/vnd.kubernetes.protobuf - application/yaml - /apis/resource.k8s.io/v1beta2/deviceclasses/{name}: + /apis/resource.k8s.io/v1beta1/resourceslices/{name}: delete: - description: delete a DeviceClass - operationId: deleteDeviceClass + description: delete a ResourceSlice + operationId: deleteResourceSlice parameters: - - description: name of the DeviceClass + - description: name of the ResourceSlice in: path name: name required: true @@ -85070,42 +87451,42 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1beta2.DeviceClass" + $ref: "#/components/schemas/v1beta1.ResourceSlice" application/yaml: schema: - $ref: "#/components/schemas/v1beta2.DeviceClass" + $ref: "#/components/schemas/v1beta1.ResourceSlice" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1beta2.DeviceClass" + $ref: "#/components/schemas/v1beta1.ResourceSlice" application/cbor: schema: - $ref: "#/components/schemas/v1beta2.DeviceClass" + $ref: "#/components/schemas/v1beta1.ResourceSlice" description: OK "202": content: application/json: schema: - $ref: "#/components/schemas/v1beta2.DeviceClass" + $ref: "#/components/schemas/v1beta1.ResourceSlice" application/yaml: schema: - $ref: "#/components/schemas/v1beta2.DeviceClass" + $ref: "#/components/schemas/v1beta1.ResourceSlice" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1beta2.DeviceClass" + $ref: "#/components/schemas/v1beta1.ResourceSlice" application/cbor: schema: - $ref: "#/components/schemas/v1beta2.DeviceClass" + $ref: "#/components/schemas/v1beta1.ResourceSlice" description: Accepted "401": content: {} description: Unauthorized tags: - - resource_v1beta2 + - resource_v1beta1 x-kubernetes-action: delete x-kubernetes-group-version-kind: group: resource.k8s.io - kind: DeviceClass - version: v1beta2 + kind: ResourceSlice + version: v1beta1 x-codegen-request-body-name: body x-content-type: application/json x-accepts: @@ -85114,10 +87495,10 @@ paths: - application/vnd.kubernetes.protobuf - application/yaml get: - description: read the specified DeviceClass - operationId: readDeviceClass + description: read the specified ResourceSlice + operationId: readResourceSlice parameters: - - description: name of the DeviceClass + - description: name of the ResourceSlice in: path name: name required: true @@ -85135,37 +87516,37 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1beta2.DeviceClass" + $ref: "#/components/schemas/v1beta1.ResourceSlice" application/yaml: schema: - $ref: "#/components/schemas/v1beta2.DeviceClass" + $ref: "#/components/schemas/v1beta1.ResourceSlice" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1beta2.DeviceClass" + $ref: "#/components/schemas/v1beta1.ResourceSlice" application/cbor: schema: - $ref: "#/components/schemas/v1beta2.DeviceClass" + $ref: "#/components/schemas/v1beta1.ResourceSlice" description: OK "401": content: {} description: Unauthorized tags: - - resource_v1beta2 + - resource_v1beta1 x-kubernetes-action: get x-kubernetes-group-version-kind: group: resource.k8s.io - kind: DeviceClass - version: v1beta2 + kind: ResourceSlice + version: v1beta1 x-accepts: - application/cbor - application/json - application/vnd.kubernetes.protobuf - application/yaml patch: - description: partially update the specified DeviceClass - operationId: patchDeviceClass + description: partially update the specified ResourceSlice + operationId: patchResourceSlice parameters: - - description: name of the DeviceClass + - description: name of the ResourceSlice in: path name: name required: true @@ -85230,42 +87611,42 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1beta2.DeviceClass" + $ref: "#/components/schemas/v1beta1.ResourceSlice" application/yaml: schema: - $ref: "#/components/schemas/v1beta2.DeviceClass" + $ref: "#/components/schemas/v1beta1.ResourceSlice" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1beta2.DeviceClass" + $ref: "#/components/schemas/v1beta1.ResourceSlice" application/cbor: schema: - $ref: "#/components/schemas/v1beta2.DeviceClass" + $ref: "#/components/schemas/v1beta1.ResourceSlice" description: OK "201": content: application/json: schema: - $ref: "#/components/schemas/v1beta2.DeviceClass" + $ref: "#/components/schemas/v1beta1.ResourceSlice" application/yaml: schema: - $ref: "#/components/schemas/v1beta2.DeviceClass" + $ref: "#/components/schemas/v1beta1.ResourceSlice" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1beta2.DeviceClass" + $ref: "#/components/schemas/v1beta1.ResourceSlice" application/cbor: schema: - $ref: "#/components/schemas/v1beta2.DeviceClass" + $ref: "#/components/schemas/v1beta1.ResourceSlice" description: Created "401": content: {} description: Unauthorized tags: - - resource_v1beta2 + - resource_v1beta1 x-kubernetes-action: patch x-kubernetes-group-version-kind: group: resource.k8s.io - kind: DeviceClass - version: v1beta2 + kind: ResourceSlice + version: v1beta1 x-codegen-request-body-name: body x-content-type: application/json x-accepts: @@ -85274,10 +87655,10 @@ paths: - application/vnd.kubernetes.protobuf - application/yaml put: - description: replace the specified DeviceClass - operationId: replaceDeviceClass + description: replace the specified ResourceSlice + operationId: replaceResourceSlice parameters: - - description: name of the DeviceClass + - description: name of the ResourceSlice in: path name: name required: true @@ -85326,49 +87707,49 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1beta2.DeviceClass" + $ref: "#/components/schemas/v1beta1.ResourceSlice" required: true responses: "200": content: application/json: schema: - $ref: "#/components/schemas/v1beta2.DeviceClass" + $ref: "#/components/schemas/v1beta1.ResourceSlice" application/yaml: schema: - $ref: "#/components/schemas/v1beta2.DeviceClass" + $ref: "#/components/schemas/v1beta1.ResourceSlice" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1beta2.DeviceClass" + $ref: "#/components/schemas/v1beta1.ResourceSlice" application/cbor: schema: - $ref: "#/components/schemas/v1beta2.DeviceClass" + $ref: "#/components/schemas/v1beta1.ResourceSlice" description: OK "201": content: application/json: schema: - $ref: "#/components/schemas/v1beta2.DeviceClass" + $ref: "#/components/schemas/v1beta1.ResourceSlice" application/yaml: schema: - $ref: "#/components/schemas/v1beta2.DeviceClass" + $ref: "#/components/schemas/v1beta1.ResourceSlice" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1beta2.DeviceClass" + $ref: "#/components/schemas/v1beta1.ResourceSlice" application/cbor: schema: - $ref: "#/components/schemas/v1beta2.DeviceClass" + $ref: "#/components/schemas/v1beta1.ResourceSlice" description: Created "401": content: {} description: Unauthorized tags: - - resource_v1beta2 + - resource_v1beta1 x-kubernetes-action: put x-kubernetes-group-version-kind: group: resource.k8s.io - kind: DeviceClass - version: v1beta2 + kind: ResourceSlice + version: v1beta1 x-codegen-request-body-name: body x-content-type: application/json x-accepts: @@ -85376,10 +87757,50 @@ paths: - application/json - application/vnd.kubernetes.protobuf - application/yaml - /apis/resource.k8s.io/v1beta2/devicetaintrules: + /apis/resource.k8s.io/v1beta1/watch/deviceclasses: {} + /apis/resource.k8s.io/v1beta1/watch/deviceclasses/{name}: {} + /apis/resource.k8s.io/v1beta1/watch/namespaces/{namespace}/resourceclaims: {} + /apis/resource.k8s.io/v1beta1/watch/namespaces/{namespace}/resourceclaims/{name}: {} + /apis/resource.k8s.io/v1beta1/watch/namespaces/{namespace}/resourceclaimtemplates: {} + /apis/resource.k8s.io/v1beta1/watch/namespaces/{namespace}/resourceclaimtemplates/{name}: {} + /apis/resource.k8s.io/v1beta1/watch/resourceclaims: {} + /apis/resource.k8s.io/v1beta1/watch/resourceclaimtemplates: {} + /apis/resource.k8s.io/v1beta1/watch/resourceslices: {} + /apis/resource.k8s.io/v1beta1/watch/resourceslices/{name}: {} + /apis/resource.k8s.io/v1beta2/: + get: + description: get available resources + operationId: getAPIResources + responses: + "200": + content: + application/json: + schema: + $ref: "#/components/schemas/v1.APIResourceList" + application/yaml: + schema: + $ref: "#/components/schemas/v1.APIResourceList" + application/vnd.kubernetes.protobuf: + schema: + $ref: "#/components/schemas/v1.APIResourceList" + application/cbor: + schema: + $ref: "#/components/schemas/v1.APIResourceList" + description: OK + "401": + content: {} + description: Unauthorized + tags: + - resource_v1beta2 + x-accepts: + - application/cbor + - application/json + - application/vnd.kubernetes.protobuf + - application/yaml + /apis/resource.k8s.io/v1beta2/deviceclasses: delete: - description: delete collection of DeviceTaintRule - operationId: deleteCollectionDeviceTaintRule + description: delete collection of DeviceClass + operationId: deleteCollectionDeviceClass parameters: - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ @@ -85564,7 +87985,7 @@ paths: x-kubernetes-action: deletecollection x-kubernetes-group-version-kind: group: resource.k8s.io - kind: DeviceTaintRule + kind: DeviceClass version: v1beta2 x-codegen-request-body-name: body x-content-type: application/json @@ -85574,8 +87995,8 @@ paths: - application/vnd.kubernetes.protobuf - application/yaml get: - description: list or watch objects of kind DeviceTaintRule - operationId: listDeviceTaintRule + description: list or watch objects of kind DeviceClass + operationId: listDeviceClass parameters: - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ @@ -85700,25 +88121,25 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1beta2.DeviceTaintRuleList" + $ref: "#/components/schemas/v1beta2.DeviceClassList" application/yaml: schema: - $ref: "#/components/schemas/v1beta2.DeviceTaintRuleList" + $ref: "#/components/schemas/v1beta2.DeviceClassList" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1beta2.DeviceTaintRuleList" + $ref: "#/components/schemas/v1beta2.DeviceClassList" application/cbor: schema: - $ref: "#/components/schemas/v1beta2.DeviceTaintRuleList" + $ref: "#/components/schemas/v1beta2.DeviceClassList" application/json;stream=watch: schema: - $ref: "#/components/schemas/v1beta2.DeviceTaintRuleList" + $ref: "#/components/schemas/v1beta2.DeviceClassList" application/vnd.kubernetes.protobuf;stream=watch: schema: - $ref: "#/components/schemas/v1beta2.DeviceTaintRuleList" + $ref: "#/components/schemas/v1beta2.DeviceClassList" application/cbor-seq: schema: - $ref: "#/components/schemas/v1beta2.DeviceTaintRuleList" + $ref: "#/components/schemas/v1beta2.DeviceClassList" description: OK "401": content: {} @@ -85728,7 +88149,7 @@ paths: x-kubernetes-action: list x-kubernetes-group-version-kind: group: resource.k8s.io - kind: DeviceTaintRule + kind: DeviceClass version: v1beta2 x-accepts: - application/cbor @@ -85739,8 +88160,8 @@ paths: - application/vnd.kubernetes.protobuf;stream=watch - application/yaml post: - description: create a DeviceTaintRule - operationId: createDeviceTaintRule + description: create a DeviceClass + operationId: createDeviceClass parameters: - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ @@ -85785,53 +88206,53 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1beta2.DeviceTaintRule" + $ref: "#/components/schemas/v1beta2.DeviceClass" required: true responses: "200": content: application/json: schema: - $ref: "#/components/schemas/v1beta2.DeviceTaintRule" + $ref: "#/components/schemas/v1beta2.DeviceClass" application/yaml: schema: - $ref: "#/components/schemas/v1beta2.DeviceTaintRule" + $ref: "#/components/schemas/v1beta2.DeviceClass" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1beta2.DeviceTaintRule" + $ref: "#/components/schemas/v1beta2.DeviceClass" application/cbor: schema: - $ref: "#/components/schemas/v1beta2.DeviceTaintRule" + $ref: "#/components/schemas/v1beta2.DeviceClass" description: OK "201": content: application/json: schema: - $ref: "#/components/schemas/v1beta2.DeviceTaintRule" + $ref: "#/components/schemas/v1beta2.DeviceClass" application/yaml: schema: - $ref: "#/components/schemas/v1beta2.DeviceTaintRule" + $ref: "#/components/schemas/v1beta2.DeviceClass" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1beta2.DeviceTaintRule" + $ref: "#/components/schemas/v1beta2.DeviceClass" application/cbor: schema: - $ref: "#/components/schemas/v1beta2.DeviceTaintRule" + $ref: "#/components/schemas/v1beta2.DeviceClass" description: Created "202": content: application/json: schema: - $ref: "#/components/schemas/v1beta2.DeviceTaintRule" + $ref: "#/components/schemas/v1beta2.DeviceClass" application/yaml: schema: - $ref: "#/components/schemas/v1beta2.DeviceTaintRule" + $ref: "#/components/schemas/v1beta2.DeviceClass" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1beta2.DeviceTaintRule" + $ref: "#/components/schemas/v1beta2.DeviceClass" application/cbor: schema: - $ref: "#/components/schemas/v1beta2.DeviceTaintRule" + $ref: "#/components/schemas/v1beta2.DeviceClass" description: Accepted "401": content: {} @@ -85841,7 +88262,7 @@ paths: x-kubernetes-action: post x-kubernetes-group-version-kind: group: resource.k8s.io - kind: DeviceTaintRule + kind: DeviceClass version: v1beta2 x-codegen-request-body-name: body x-content-type: application/json @@ -85850,12 +88271,12 @@ paths: - application/json - application/vnd.kubernetes.protobuf - application/yaml - /apis/resource.k8s.io/v1beta2/devicetaintrules/{name}: + /apis/resource.k8s.io/v1beta2/deviceclasses/{name}: delete: - description: delete a DeviceTaintRule - operationId: deleteDeviceTaintRule + description: delete a DeviceClass + operationId: deleteDeviceClass parameters: - - description: name of the DeviceTaintRule + - description: name of the DeviceClass in: path name: name required: true @@ -85930,31 +88351,31 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1beta2.DeviceTaintRule" + $ref: "#/components/schemas/v1beta2.DeviceClass" application/yaml: schema: - $ref: "#/components/schemas/v1beta2.DeviceTaintRule" + $ref: "#/components/schemas/v1beta2.DeviceClass" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1beta2.DeviceTaintRule" + $ref: "#/components/schemas/v1beta2.DeviceClass" application/cbor: schema: - $ref: "#/components/schemas/v1beta2.DeviceTaintRule" + $ref: "#/components/schemas/v1beta2.DeviceClass" description: OK "202": content: application/json: schema: - $ref: "#/components/schemas/v1beta2.DeviceTaintRule" + $ref: "#/components/schemas/v1beta2.DeviceClass" application/yaml: schema: - $ref: "#/components/schemas/v1beta2.DeviceTaintRule" + $ref: "#/components/schemas/v1beta2.DeviceClass" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1beta2.DeviceTaintRule" + $ref: "#/components/schemas/v1beta2.DeviceClass" application/cbor: schema: - $ref: "#/components/schemas/v1beta2.DeviceTaintRule" + $ref: "#/components/schemas/v1beta2.DeviceClass" description: Accepted "401": content: {} @@ -85964,7 +88385,7 @@ paths: x-kubernetes-action: delete x-kubernetes-group-version-kind: group: resource.k8s.io - kind: DeviceTaintRule + kind: DeviceClass version: v1beta2 x-codegen-request-body-name: body x-content-type: application/json @@ -85974,10 +88395,10 @@ paths: - application/vnd.kubernetes.protobuf - application/yaml get: - description: read the specified DeviceTaintRule - operationId: readDeviceTaintRule + description: read the specified DeviceClass + operationId: readDeviceClass parameters: - - description: name of the DeviceTaintRule + - description: name of the DeviceClass in: path name: name required: true @@ -85995,16 +88416,16 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1beta2.DeviceTaintRule" + $ref: "#/components/schemas/v1beta2.DeviceClass" application/yaml: schema: - $ref: "#/components/schemas/v1beta2.DeviceTaintRule" + $ref: "#/components/schemas/v1beta2.DeviceClass" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1beta2.DeviceTaintRule" + $ref: "#/components/schemas/v1beta2.DeviceClass" application/cbor: schema: - $ref: "#/components/schemas/v1beta2.DeviceTaintRule" + $ref: "#/components/schemas/v1beta2.DeviceClass" description: OK "401": content: {} @@ -86014,7 +88435,7 @@ paths: x-kubernetes-action: get x-kubernetes-group-version-kind: group: resource.k8s.io - kind: DeviceTaintRule + kind: DeviceClass version: v1beta2 x-accepts: - application/cbor @@ -86022,10 +88443,10 @@ paths: - application/vnd.kubernetes.protobuf - application/yaml patch: - description: partially update the specified DeviceTaintRule - operationId: patchDeviceTaintRule + description: partially update the specified DeviceClass + operationId: patchDeviceClass parameters: - - description: name of the DeviceTaintRule + - description: name of the DeviceClass in: path name: name required: true @@ -86090,295 +88511,31 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1beta2.DeviceTaintRule" - application/yaml: - schema: - $ref: "#/components/schemas/v1beta2.DeviceTaintRule" - application/vnd.kubernetes.protobuf: - schema: - $ref: "#/components/schemas/v1beta2.DeviceTaintRule" - application/cbor: - schema: - $ref: "#/components/schemas/v1beta2.DeviceTaintRule" - description: OK - "201": - content: - application/json: - schema: - $ref: "#/components/schemas/v1beta2.DeviceTaintRule" - application/yaml: - schema: - $ref: "#/components/schemas/v1beta2.DeviceTaintRule" - application/vnd.kubernetes.protobuf: - schema: - $ref: "#/components/schemas/v1beta2.DeviceTaintRule" - application/cbor: - schema: - $ref: "#/components/schemas/v1beta2.DeviceTaintRule" - description: Created - "401": - content: {} - description: Unauthorized - tags: - - resource_v1beta2 - x-kubernetes-action: patch - x-kubernetes-group-version-kind: - group: resource.k8s.io - kind: DeviceTaintRule - version: v1beta2 - x-codegen-request-body-name: body - x-content-type: application/json - x-accepts: - - application/cbor - - application/json - - application/vnd.kubernetes.protobuf - - application/yaml - put: - description: replace the specified DeviceTaintRule - operationId: replaceDeviceTaintRule - parameters: - - description: name of the DeviceTaintRule - in: path - name: name - required: true - schema: - type: string - - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ - \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ - \ and wget)." - in: query - name: pretty - schema: - type: string - - description: "When present, indicates that modifications should not be persisted.\ - \ An invalid or unrecognized dryRun directive will result in an error response\ - \ and no further processing of the request. Valid values are: - All: all\ - \ dry run stages will be processed" - in: query - name: dryRun - schema: - type: string - - description: "fieldManager is a name associated with the actor or entity that\ - \ is making these changes. The value must be less than or 128 characters\ - \ long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." - in: query - name: fieldManager - schema: - type: string - - description: "fieldValidation instructs the server on how to handle objects\ - \ in the request (POST/PUT/PATCH) containing unknown or duplicate fields.\ - \ Valid values are: - Ignore: This will ignore any unknown fields that are\ - \ silently dropped from the object, and will ignore all but the last duplicate\ - \ field that the decoder encounters. This is the default behavior prior\ - \ to v1.23. - Warn: This will send a warning via the standard warning response\ - \ header for each unknown field that is dropped from the object, and for\ - \ each duplicate field that is encountered. The request will still succeed\ - \ if there are no other errors, and will only persist the last of any duplicate\ - \ fields. This is the default in v1.23+ - Strict: This will fail the request\ - \ with a BadRequest error if any unknown fields would be dropped from the\ - \ object, or if any duplicate fields are present. The error returned from\ - \ the server will contain all unknown and duplicate fields encountered." - in: query - name: fieldValidation - schema: - type: string - requestBody: - content: - application/json: - schema: - $ref: "#/components/schemas/v1beta2.DeviceTaintRule" - required: true - responses: - "200": - content: - application/json: - schema: - $ref: "#/components/schemas/v1beta2.DeviceTaintRule" - application/yaml: - schema: - $ref: "#/components/schemas/v1beta2.DeviceTaintRule" - application/vnd.kubernetes.protobuf: - schema: - $ref: "#/components/schemas/v1beta2.DeviceTaintRule" - application/cbor: - schema: - $ref: "#/components/schemas/v1beta2.DeviceTaintRule" - description: OK - "201": - content: - application/json: - schema: - $ref: "#/components/schemas/v1beta2.DeviceTaintRule" - application/yaml: - schema: - $ref: "#/components/schemas/v1beta2.DeviceTaintRule" - application/vnd.kubernetes.protobuf: - schema: - $ref: "#/components/schemas/v1beta2.DeviceTaintRule" - application/cbor: - schema: - $ref: "#/components/schemas/v1beta2.DeviceTaintRule" - description: Created - "401": - content: {} - description: Unauthorized - tags: - - resource_v1beta2 - x-kubernetes-action: put - x-kubernetes-group-version-kind: - group: resource.k8s.io - kind: DeviceTaintRule - version: v1beta2 - x-codegen-request-body-name: body - x-content-type: application/json - x-accepts: - - application/cbor - - application/json - - application/vnd.kubernetes.protobuf - - application/yaml - /apis/resource.k8s.io/v1beta2/devicetaintrules/{name}/status: - get: - description: read status of the specified DeviceTaintRule - operationId: readDeviceTaintRuleStatus - parameters: - - description: name of the DeviceTaintRule - in: path - name: name - required: true - schema: - type: string - - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ - \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ - \ and wget)." - in: query - name: pretty - schema: - type: string - responses: - "200": - content: - application/json: - schema: - $ref: "#/components/schemas/v1beta2.DeviceTaintRule" - application/yaml: - schema: - $ref: "#/components/schemas/v1beta2.DeviceTaintRule" - application/vnd.kubernetes.protobuf: - schema: - $ref: "#/components/schemas/v1beta2.DeviceTaintRule" - application/cbor: - schema: - $ref: "#/components/schemas/v1beta2.DeviceTaintRule" - description: OK - "401": - content: {} - description: Unauthorized - tags: - - resource_v1beta2 - x-kubernetes-action: get - x-kubernetes-group-version-kind: - group: resource.k8s.io - kind: DeviceTaintRule - version: v1beta2 - x-accepts: - - application/cbor - - application/json - - application/vnd.kubernetes.protobuf - - application/yaml - patch: - description: partially update status of the specified DeviceTaintRule - operationId: patchDeviceTaintRuleStatus - parameters: - - description: name of the DeviceTaintRule - in: path - name: name - required: true - schema: - type: string - - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ - \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ - \ and wget)." - in: query - name: pretty - schema: - type: string - - description: "When present, indicates that modifications should not be persisted.\ - \ An invalid or unrecognized dryRun directive will result in an error response\ - \ and no further processing of the request. Valid values are: - All: all\ - \ dry run stages will be processed" - in: query - name: dryRun - schema: - type: string - - description: "fieldManager is a name associated with the actor or entity that\ - \ is making these changes. The value must be less than or 128 characters\ - \ long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.\ - \ This field is required for apply requests (application/apply-patch) but\ - \ optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch)." - in: query - name: fieldManager - schema: - type: string - - description: "fieldValidation instructs the server on how to handle objects\ - \ in the request (POST/PUT/PATCH) containing unknown or duplicate fields.\ - \ Valid values are: - Ignore: This will ignore any unknown fields that are\ - \ silently dropped from the object, and will ignore all but the last duplicate\ - \ field that the decoder encounters. This is the default behavior prior\ - \ to v1.23. - Warn: This will send a warning via the standard warning response\ - \ header for each unknown field that is dropped from the object, and for\ - \ each duplicate field that is encountered. The request will still succeed\ - \ if there are no other errors, and will only persist the last of any duplicate\ - \ fields. This is the default in v1.23+ - Strict: This will fail the request\ - \ with a BadRequest error if any unknown fields would be dropped from the\ - \ object, or if any duplicate fields are present. The error returned from\ - \ the server will contain all unknown and duplicate fields encountered." - in: query - name: fieldValidation - schema: - type: string - - description: Force is going to "force" Apply requests. It means user will - re-acquire conflicting fields owned by other people. Force flag must be - unset for non-apply patch requests. - in: query - name: force - schema: - type: boolean - requestBody: - content: - application/json: - schema: - $ref: "#/components/schemas/v1.Patch" - required: true - responses: - "200": - content: - application/json: - schema: - $ref: "#/components/schemas/v1beta2.DeviceTaintRule" + $ref: "#/components/schemas/v1beta2.DeviceClass" application/yaml: schema: - $ref: "#/components/schemas/v1beta2.DeviceTaintRule" + $ref: "#/components/schemas/v1beta2.DeviceClass" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1beta2.DeviceTaintRule" + $ref: "#/components/schemas/v1beta2.DeviceClass" application/cbor: schema: - $ref: "#/components/schemas/v1beta2.DeviceTaintRule" + $ref: "#/components/schemas/v1beta2.DeviceClass" description: OK "201": content: application/json: schema: - $ref: "#/components/schemas/v1beta2.DeviceTaintRule" + $ref: "#/components/schemas/v1beta2.DeviceClass" application/yaml: schema: - $ref: "#/components/schemas/v1beta2.DeviceTaintRule" + $ref: "#/components/schemas/v1beta2.DeviceClass" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1beta2.DeviceTaintRule" + $ref: "#/components/schemas/v1beta2.DeviceClass" application/cbor: schema: - $ref: "#/components/schemas/v1beta2.DeviceTaintRule" + $ref: "#/components/schemas/v1beta2.DeviceClass" description: Created "401": content: {} @@ -86388,7 +88545,7 @@ paths: x-kubernetes-action: patch x-kubernetes-group-version-kind: group: resource.k8s.io - kind: DeviceTaintRule + kind: DeviceClass version: v1beta2 x-codegen-request-body-name: body x-content-type: application/json @@ -86398,10 +88555,10 @@ paths: - application/vnd.kubernetes.protobuf - application/yaml put: - description: replace status of the specified DeviceTaintRule - operationId: replaceDeviceTaintRuleStatus + description: replace the specified DeviceClass + operationId: replaceDeviceClass parameters: - - description: name of the DeviceTaintRule + - description: name of the DeviceClass in: path name: name required: true @@ -86450,38 +88607,38 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1beta2.DeviceTaintRule" + $ref: "#/components/schemas/v1beta2.DeviceClass" required: true responses: "200": content: application/json: schema: - $ref: "#/components/schemas/v1beta2.DeviceTaintRule" + $ref: "#/components/schemas/v1beta2.DeviceClass" application/yaml: schema: - $ref: "#/components/schemas/v1beta2.DeviceTaintRule" + $ref: "#/components/schemas/v1beta2.DeviceClass" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1beta2.DeviceTaintRule" + $ref: "#/components/schemas/v1beta2.DeviceClass" application/cbor: schema: - $ref: "#/components/schemas/v1beta2.DeviceTaintRule" + $ref: "#/components/schemas/v1beta2.DeviceClass" description: OK "201": content: application/json: schema: - $ref: "#/components/schemas/v1beta2.DeviceTaintRule" + $ref: "#/components/schemas/v1beta2.DeviceClass" application/yaml: schema: - $ref: "#/components/schemas/v1beta2.DeviceTaintRule" + $ref: "#/components/schemas/v1beta2.DeviceClass" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1beta2.DeviceTaintRule" + $ref: "#/components/schemas/v1beta2.DeviceClass" application/cbor: schema: - $ref: "#/components/schemas/v1beta2.DeviceTaintRule" + $ref: "#/components/schemas/v1beta2.DeviceClass" description: Created "401": content: {} @@ -86491,7 +88648,7 @@ paths: x-kubernetes-action: put x-kubernetes-group-version-kind: group: resource.k8s.io - kind: DeviceTaintRule + kind: DeviceClass version: v1beta2 x-codegen-request-body-name: body x-content-type: application/json @@ -86500,17 +88657,11 @@ paths: - application/json - application/vnd.kubernetes.protobuf - application/yaml - /apis/resource.k8s.io/v1beta2/namespaces/{namespace}/resourceclaims: + /apis/resource.k8s.io/v1beta2/devicetaintrules: delete: - description: delete collection of ResourceClaim - operationId: deleteCollectionNamespacedResourceClaim + description: delete collection of DeviceTaintRule + operationId: deleteCollectionDeviceTaintRule parameters: - - description: "object name and auth scope, such as for teams and projects" - in: path - name: namespace - required: true - schema: - type: string - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ \ and wget)." @@ -86694,7 +88845,7 @@ paths: x-kubernetes-action: deletecollection x-kubernetes-group-version-kind: group: resource.k8s.io - kind: ResourceClaim + kind: DeviceTaintRule version: v1beta2 x-codegen-request-body-name: body x-content-type: application/json @@ -86704,15 +88855,9 @@ paths: - application/vnd.kubernetes.protobuf - application/yaml get: - description: list or watch objects of kind ResourceClaim - operationId: listNamespacedResourceClaim + description: list or watch objects of kind DeviceTaintRule + operationId: listDeviceTaintRule parameters: - - description: "object name and auth scope, such as for teams and projects" - in: path - name: namespace - required: true - schema: - type: string - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ \ and wget)." @@ -86836,25 +88981,25 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1beta2.ResourceClaimList" + $ref: "#/components/schemas/v1beta2.DeviceTaintRuleList" application/yaml: schema: - $ref: "#/components/schemas/v1beta2.ResourceClaimList" + $ref: "#/components/schemas/v1beta2.DeviceTaintRuleList" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1beta2.ResourceClaimList" + $ref: "#/components/schemas/v1beta2.DeviceTaintRuleList" application/cbor: schema: - $ref: "#/components/schemas/v1beta2.ResourceClaimList" + $ref: "#/components/schemas/v1beta2.DeviceTaintRuleList" application/json;stream=watch: schema: - $ref: "#/components/schemas/v1beta2.ResourceClaimList" + $ref: "#/components/schemas/v1beta2.DeviceTaintRuleList" application/vnd.kubernetes.protobuf;stream=watch: schema: - $ref: "#/components/schemas/v1beta2.ResourceClaimList" + $ref: "#/components/schemas/v1beta2.DeviceTaintRuleList" application/cbor-seq: schema: - $ref: "#/components/schemas/v1beta2.ResourceClaimList" + $ref: "#/components/schemas/v1beta2.DeviceTaintRuleList" description: OK "401": content: {} @@ -86864,7 +89009,7 @@ paths: x-kubernetes-action: list x-kubernetes-group-version-kind: group: resource.k8s.io - kind: ResourceClaim + kind: DeviceTaintRule version: v1beta2 x-accepts: - application/cbor @@ -86875,15 +89020,9 @@ paths: - application/vnd.kubernetes.protobuf;stream=watch - application/yaml post: - description: create a ResourceClaim - operationId: createNamespacedResourceClaim + description: create a DeviceTaintRule + operationId: createDeviceTaintRule parameters: - - description: "object name and auth scope, such as for teams and projects" - in: path - name: namespace - required: true - schema: - type: string - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ \ and wget)." @@ -86927,53 +89066,53 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1beta2.ResourceClaim" + $ref: "#/components/schemas/v1beta2.DeviceTaintRule" required: true responses: "200": content: application/json: schema: - $ref: "#/components/schemas/v1beta2.ResourceClaim" + $ref: "#/components/schemas/v1beta2.DeviceTaintRule" application/yaml: schema: - $ref: "#/components/schemas/v1beta2.ResourceClaim" + $ref: "#/components/schemas/v1beta2.DeviceTaintRule" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1beta2.ResourceClaim" + $ref: "#/components/schemas/v1beta2.DeviceTaintRule" application/cbor: schema: - $ref: "#/components/schemas/v1beta2.ResourceClaim" + $ref: "#/components/schemas/v1beta2.DeviceTaintRule" description: OK "201": content: application/json: schema: - $ref: "#/components/schemas/v1beta2.ResourceClaim" + $ref: "#/components/schemas/v1beta2.DeviceTaintRule" application/yaml: schema: - $ref: "#/components/schemas/v1beta2.ResourceClaim" + $ref: "#/components/schemas/v1beta2.DeviceTaintRule" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1beta2.ResourceClaim" + $ref: "#/components/schemas/v1beta2.DeviceTaintRule" application/cbor: schema: - $ref: "#/components/schemas/v1beta2.ResourceClaim" + $ref: "#/components/schemas/v1beta2.DeviceTaintRule" description: Created "202": content: application/json: schema: - $ref: "#/components/schemas/v1beta2.ResourceClaim" + $ref: "#/components/schemas/v1beta2.DeviceTaintRule" application/yaml: schema: - $ref: "#/components/schemas/v1beta2.ResourceClaim" + $ref: "#/components/schemas/v1beta2.DeviceTaintRule" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1beta2.ResourceClaim" + $ref: "#/components/schemas/v1beta2.DeviceTaintRule" application/cbor: schema: - $ref: "#/components/schemas/v1beta2.ResourceClaim" + $ref: "#/components/schemas/v1beta2.DeviceTaintRule" description: Accepted "401": content: {} @@ -86983,7 +89122,7 @@ paths: x-kubernetes-action: post x-kubernetes-group-version-kind: group: resource.k8s.io - kind: ResourceClaim + kind: DeviceTaintRule version: v1beta2 x-codegen-request-body-name: body x-content-type: application/json @@ -86992,23 +89131,17 @@ paths: - application/json - application/vnd.kubernetes.protobuf - application/yaml - /apis/resource.k8s.io/v1beta2/namespaces/{namespace}/resourceclaims/{name}: + /apis/resource.k8s.io/v1beta2/devicetaintrules/{name}: delete: - description: delete a ResourceClaim - operationId: deleteNamespacedResourceClaim + description: delete a DeviceTaintRule + operationId: deleteDeviceTaintRule parameters: - - description: name of the ResourceClaim + - description: name of the DeviceTaintRule in: path name: name required: true schema: type: string - - description: "object name and auth scope, such as for teams and projects" - in: path - name: namespace - required: true - schema: - type: string - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ \ and wget)." @@ -87078,31 +89211,31 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1beta2.ResourceClaim" + $ref: "#/components/schemas/v1beta2.DeviceTaintRule" application/yaml: schema: - $ref: "#/components/schemas/v1beta2.ResourceClaim" + $ref: "#/components/schemas/v1beta2.DeviceTaintRule" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1beta2.ResourceClaim" + $ref: "#/components/schemas/v1beta2.DeviceTaintRule" application/cbor: schema: - $ref: "#/components/schemas/v1beta2.ResourceClaim" + $ref: "#/components/schemas/v1beta2.DeviceTaintRule" description: OK "202": content: application/json: schema: - $ref: "#/components/schemas/v1beta2.ResourceClaim" + $ref: "#/components/schemas/v1beta2.DeviceTaintRule" application/yaml: schema: - $ref: "#/components/schemas/v1beta2.ResourceClaim" + $ref: "#/components/schemas/v1beta2.DeviceTaintRule" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1beta2.ResourceClaim" + $ref: "#/components/schemas/v1beta2.DeviceTaintRule" application/cbor: schema: - $ref: "#/components/schemas/v1beta2.ResourceClaim" + $ref: "#/components/schemas/v1beta2.DeviceTaintRule" description: Accepted "401": content: {} @@ -87112,7 +89245,7 @@ paths: x-kubernetes-action: delete x-kubernetes-group-version-kind: group: resource.k8s.io - kind: ResourceClaim + kind: DeviceTaintRule version: v1beta2 x-codegen-request-body-name: body x-content-type: application/json @@ -87122,21 +89255,15 @@ paths: - application/vnd.kubernetes.protobuf - application/yaml get: - description: read the specified ResourceClaim - operationId: readNamespacedResourceClaim + description: read the specified DeviceTaintRule + operationId: readDeviceTaintRule parameters: - - description: name of the ResourceClaim + - description: name of the DeviceTaintRule in: path name: name required: true schema: type: string - - description: "object name and auth scope, such as for teams and projects" - in: path - name: namespace - required: true - schema: - type: string - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ \ and wget)." @@ -87149,16 +89276,16 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1beta2.ResourceClaim" + $ref: "#/components/schemas/v1beta2.DeviceTaintRule" application/yaml: schema: - $ref: "#/components/schemas/v1beta2.ResourceClaim" + $ref: "#/components/schemas/v1beta2.DeviceTaintRule" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1beta2.ResourceClaim" + $ref: "#/components/schemas/v1beta2.DeviceTaintRule" application/cbor: schema: - $ref: "#/components/schemas/v1beta2.ResourceClaim" + $ref: "#/components/schemas/v1beta2.DeviceTaintRule" description: OK "401": content: {} @@ -87168,7 +89295,7 @@ paths: x-kubernetes-action: get x-kubernetes-group-version-kind: group: resource.k8s.io - kind: ResourceClaim + kind: DeviceTaintRule version: v1beta2 x-accepts: - application/cbor @@ -87176,21 +89303,15 @@ paths: - application/vnd.kubernetes.protobuf - application/yaml patch: - description: partially update the specified ResourceClaim - operationId: patchNamespacedResourceClaim + description: partially update the specified DeviceTaintRule + operationId: patchDeviceTaintRule parameters: - - description: name of the ResourceClaim + - description: name of the DeviceTaintRule in: path name: name required: true schema: type: string - - description: "object name and auth scope, such as for teams and projects" - in: path - name: namespace - required: true - schema: - type: string - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ \ and wget)." @@ -87250,31 +89371,31 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1beta2.ResourceClaim" + $ref: "#/components/schemas/v1beta2.DeviceTaintRule" application/yaml: schema: - $ref: "#/components/schemas/v1beta2.ResourceClaim" + $ref: "#/components/schemas/v1beta2.DeviceTaintRule" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1beta2.ResourceClaim" + $ref: "#/components/schemas/v1beta2.DeviceTaintRule" application/cbor: schema: - $ref: "#/components/schemas/v1beta2.ResourceClaim" + $ref: "#/components/schemas/v1beta2.DeviceTaintRule" description: OK "201": content: application/json: schema: - $ref: "#/components/schemas/v1beta2.ResourceClaim" + $ref: "#/components/schemas/v1beta2.DeviceTaintRule" application/yaml: schema: - $ref: "#/components/schemas/v1beta2.ResourceClaim" + $ref: "#/components/schemas/v1beta2.DeviceTaintRule" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1beta2.ResourceClaim" + $ref: "#/components/schemas/v1beta2.DeviceTaintRule" application/cbor: schema: - $ref: "#/components/schemas/v1beta2.ResourceClaim" + $ref: "#/components/schemas/v1beta2.DeviceTaintRule" description: Created "401": content: {} @@ -87284,7 +89405,7 @@ paths: x-kubernetes-action: patch x-kubernetes-group-version-kind: group: resource.k8s.io - kind: ResourceClaim + kind: DeviceTaintRule version: v1beta2 x-codegen-request-body-name: body x-content-type: application/json @@ -87294,21 +89415,15 @@ paths: - application/vnd.kubernetes.protobuf - application/yaml put: - description: replace the specified ResourceClaim - operationId: replaceNamespacedResourceClaim + description: replace the specified DeviceTaintRule + operationId: replaceDeviceTaintRule parameters: - - description: name of the ResourceClaim + - description: name of the DeviceTaintRule in: path name: name required: true schema: type: string - - description: "object name and auth scope, such as for teams and projects" - in: path - name: namespace - required: true - schema: - type: string - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ \ and wget)." @@ -87352,38 +89467,38 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1beta2.ResourceClaim" + $ref: "#/components/schemas/v1beta2.DeviceTaintRule" required: true responses: "200": content: application/json: schema: - $ref: "#/components/schemas/v1beta2.ResourceClaim" + $ref: "#/components/schemas/v1beta2.DeviceTaintRule" application/yaml: schema: - $ref: "#/components/schemas/v1beta2.ResourceClaim" + $ref: "#/components/schemas/v1beta2.DeviceTaintRule" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1beta2.ResourceClaim" + $ref: "#/components/schemas/v1beta2.DeviceTaintRule" application/cbor: schema: - $ref: "#/components/schemas/v1beta2.ResourceClaim" + $ref: "#/components/schemas/v1beta2.DeviceTaintRule" description: OK "201": content: application/json: schema: - $ref: "#/components/schemas/v1beta2.ResourceClaim" + $ref: "#/components/schemas/v1beta2.DeviceTaintRule" application/yaml: schema: - $ref: "#/components/schemas/v1beta2.ResourceClaim" + $ref: "#/components/schemas/v1beta2.DeviceTaintRule" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1beta2.ResourceClaim" + $ref: "#/components/schemas/v1beta2.DeviceTaintRule" application/cbor: schema: - $ref: "#/components/schemas/v1beta2.ResourceClaim" + $ref: "#/components/schemas/v1beta2.DeviceTaintRule" description: Created "401": content: {} @@ -87393,7 +89508,7 @@ paths: x-kubernetes-action: put x-kubernetes-group-version-kind: group: resource.k8s.io - kind: ResourceClaim + kind: DeviceTaintRule version: v1beta2 x-codegen-request-body-name: body x-content-type: application/json @@ -87402,23 +89517,17 @@ paths: - application/json - application/vnd.kubernetes.protobuf - application/yaml - /apis/resource.k8s.io/v1beta2/namespaces/{namespace}/resourceclaims/{name}/status: + /apis/resource.k8s.io/v1beta2/devicetaintrules/{name}/status: get: - description: read status of the specified ResourceClaim - operationId: readNamespacedResourceClaimStatus + description: read status of the specified DeviceTaintRule + operationId: readDeviceTaintRuleStatus parameters: - - description: name of the ResourceClaim + - description: name of the DeviceTaintRule in: path name: name required: true schema: type: string - - description: "object name and auth scope, such as for teams and projects" - in: path - name: namespace - required: true - schema: - type: string - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ \ and wget)." @@ -87431,16 +89540,16 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1beta2.ResourceClaim" + $ref: "#/components/schemas/v1beta2.DeviceTaintRule" application/yaml: schema: - $ref: "#/components/schemas/v1beta2.ResourceClaim" + $ref: "#/components/schemas/v1beta2.DeviceTaintRule" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1beta2.ResourceClaim" + $ref: "#/components/schemas/v1beta2.DeviceTaintRule" application/cbor: schema: - $ref: "#/components/schemas/v1beta2.ResourceClaim" + $ref: "#/components/schemas/v1beta2.DeviceTaintRule" description: OK "401": content: {} @@ -87450,7 +89559,7 @@ paths: x-kubernetes-action: get x-kubernetes-group-version-kind: group: resource.k8s.io - kind: ResourceClaim + kind: DeviceTaintRule version: v1beta2 x-accepts: - application/cbor @@ -87458,21 +89567,15 @@ paths: - application/vnd.kubernetes.protobuf - application/yaml patch: - description: partially update status of the specified ResourceClaim - operationId: patchNamespacedResourceClaimStatus + description: partially update status of the specified DeviceTaintRule + operationId: patchDeviceTaintRuleStatus parameters: - - description: name of the ResourceClaim + - description: name of the DeviceTaintRule in: path name: name required: true schema: type: string - - description: "object name and auth scope, such as for teams and projects" - in: path - name: namespace - required: true - schema: - type: string - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ \ and wget)." @@ -87532,31 +89635,31 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1beta2.ResourceClaim" + $ref: "#/components/schemas/v1beta2.DeviceTaintRule" application/yaml: schema: - $ref: "#/components/schemas/v1beta2.ResourceClaim" + $ref: "#/components/schemas/v1beta2.DeviceTaintRule" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1beta2.ResourceClaim" + $ref: "#/components/schemas/v1beta2.DeviceTaintRule" application/cbor: schema: - $ref: "#/components/schemas/v1beta2.ResourceClaim" + $ref: "#/components/schemas/v1beta2.DeviceTaintRule" description: OK "201": content: application/json: schema: - $ref: "#/components/schemas/v1beta2.ResourceClaim" + $ref: "#/components/schemas/v1beta2.DeviceTaintRule" application/yaml: schema: - $ref: "#/components/schemas/v1beta2.ResourceClaim" + $ref: "#/components/schemas/v1beta2.DeviceTaintRule" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1beta2.ResourceClaim" + $ref: "#/components/schemas/v1beta2.DeviceTaintRule" application/cbor: schema: - $ref: "#/components/schemas/v1beta2.ResourceClaim" + $ref: "#/components/schemas/v1beta2.DeviceTaintRule" description: Created "401": content: {} @@ -87566,7 +89669,7 @@ paths: x-kubernetes-action: patch x-kubernetes-group-version-kind: group: resource.k8s.io - kind: ResourceClaim + kind: DeviceTaintRule version: v1beta2 x-codegen-request-body-name: body x-content-type: application/json @@ -87576,21 +89679,15 @@ paths: - application/vnd.kubernetes.protobuf - application/yaml put: - description: replace status of the specified ResourceClaim - operationId: replaceNamespacedResourceClaimStatus + description: replace status of the specified DeviceTaintRule + operationId: replaceDeviceTaintRuleStatus parameters: - - description: name of the ResourceClaim + - description: name of the DeviceTaintRule in: path name: name required: true schema: type: string - - description: "object name and auth scope, such as for teams and projects" - in: path - name: namespace - required: true - schema: - type: string - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ \ and wget)." @@ -87634,38 +89731,38 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1beta2.ResourceClaim" + $ref: "#/components/schemas/v1beta2.DeviceTaintRule" required: true responses: "200": content: application/json: schema: - $ref: "#/components/schemas/v1beta2.ResourceClaim" + $ref: "#/components/schemas/v1beta2.DeviceTaintRule" application/yaml: schema: - $ref: "#/components/schemas/v1beta2.ResourceClaim" + $ref: "#/components/schemas/v1beta2.DeviceTaintRule" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1beta2.ResourceClaim" + $ref: "#/components/schemas/v1beta2.DeviceTaintRule" application/cbor: schema: - $ref: "#/components/schemas/v1beta2.ResourceClaim" + $ref: "#/components/schemas/v1beta2.DeviceTaintRule" description: OK "201": content: application/json: schema: - $ref: "#/components/schemas/v1beta2.ResourceClaim" + $ref: "#/components/schemas/v1beta2.DeviceTaintRule" application/yaml: schema: - $ref: "#/components/schemas/v1beta2.ResourceClaim" + $ref: "#/components/schemas/v1beta2.DeviceTaintRule" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1beta2.ResourceClaim" + $ref: "#/components/schemas/v1beta2.DeviceTaintRule" application/cbor: schema: - $ref: "#/components/schemas/v1beta2.ResourceClaim" + $ref: "#/components/schemas/v1beta2.DeviceTaintRule" description: Created "401": content: {} @@ -87675,7 +89772,7 @@ paths: x-kubernetes-action: put x-kubernetes-group-version-kind: group: resource.k8s.io - kind: ResourceClaim + kind: DeviceTaintRule version: v1beta2 x-codegen-request-body-name: body x-content-type: application/json @@ -87684,10 +89781,10 @@ paths: - application/json - application/vnd.kubernetes.protobuf - application/yaml - /apis/resource.k8s.io/v1beta2/namespaces/{namespace}/resourceclaimtemplates: + /apis/resource.k8s.io/v1beta2/namespaces/{namespace}/resourceclaims: delete: - description: delete collection of ResourceClaimTemplate - operationId: deleteCollectionNamespacedResourceClaimTemplate + description: delete collection of ResourceClaim + operationId: deleteCollectionNamespacedResourceClaim parameters: - description: "object name and auth scope, such as for teams and projects" in: path @@ -87878,7 +89975,7 @@ paths: x-kubernetes-action: deletecollection x-kubernetes-group-version-kind: group: resource.k8s.io - kind: ResourceClaimTemplate + kind: ResourceClaim version: v1beta2 x-codegen-request-body-name: body x-content-type: application/json @@ -87888,8 +89985,8 @@ paths: - application/vnd.kubernetes.protobuf - application/yaml get: - description: list or watch objects of kind ResourceClaimTemplate - operationId: listNamespacedResourceClaimTemplate + description: list or watch objects of kind ResourceClaim + operationId: listNamespacedResourceClaim parameters: - description: "object name and auth scope, such as for teams and projects" in: path @@ -88020,25 +90117,25 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1beta2.ResourceClaimTemplateList" + $ref: "#/components/schemas/v1beta2.ResourceClaimList" application/yaml: schema: - $ref: "#/components/schemas/v1beta2.ResourceClaimTemplateList" + $ref: "#/components/schemas/v1beta2.ResourceClaimList" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1beta2.ResourceClaimTemplateList" + $ref: "#/components/schemas/v1beta2.ResourceClaimList" application/cbor: schema: - $ref: "#/components/schemas/v1beta2.ResourceClaimTemplateList" + $ref: "#/components/schemas/v1beta2.ResourceClaimList" application/json;stream=watch: schema: - $ref: "#/components/schemas/v1beta2.ResourceClaimTemplateList" + $ref: "#/components/schemas/v1beta2.ResourceClaimList" application/vnd.kubernetes.protobuf;stream=watch: schema: - $ref: "#/components/schemas/v1beta2.ResourceClaimTemplateList" + $ref: "#/components/schemas/v1beta2.ResourceClaimList" application/cbor-seq: schema: - $ref: "#/components/schemas/v1beta2.ResourceClaimTemplateList" + $ref: "#/components/schemas/v1beta2.ResourceClaimList" description: OK "401": content: {} @@ -88048,7 +90145,7 @@ paths: x-kubernetes-action: list x-kubernetes-group-version-kind: group: resource.k8s.io - kind: ResourceClaimTemplate + kind: ResourceClaim version: v1beta2 x-accepts: - application/cbor @@ -88059,8 +90156,8 @@ paths: - application/vnd.kubernetes.protobuf;stream=watch - application/yaml post: - description: create a ResourceClaimTemplate - operationId: createNamespacedResourceClaimTemplate + description: create a ResourceClaim + operationId: createNamespacedResourceClaim parameters: - description: "object name and auth scope, such as for teams and projects" in: path @@ -88111,53 +90208,53 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1beta2.ResourceClaimTemplate" + $ref: "#/components/schemas/v1beta2.ResourceClaim" required: true responses: "200": content: application/json: schema: - $ref: "#/components/schemas/v1beta2.ResourceClaimTemplate" + $ref: "#/components/schemas/v1beta2.ResourceClaim" application/yaml: schema: - $ref: "#/components/schemas/v1beta2.ResourceClaimTemplate" + $ref: "#/components/schemas/v1beta2.ResourceClaim" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1beta2.ResourceClaimTemplate" + $ref: "#/components/schemas/v1beta2.ResourceClaim" application/cbor: schema: - $ref: "#/components/schemas/v1beta2.ResourceClaimTemplate" + $ref: "#/components/schemas/v1beta2.ResourceClaim" description: OK "201": content: application/json: schema: - $ref: "#/components/schemas/v1beta2.ResourceClaimTemplate" + $ref: "#/components/schemas/v1beta2.ResourceClaim" application/yaml: schema: - $ref: "#/components/schemas/v1beta2.ResourceClaimTemplate" + $ref: "#/components/schemas/v1beta2.ResourceClaim" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1beta2.ResourceClaimTemplate" + $ref: "#/components/schemas/v1beta2.ResourceClaim" application/cbor: schema: - $ref: "#/components/schemas/v1beta2.ResourceClaimTemplate" + $ref: "#/components/schemas/v1beta2.ResourceClaim" description: Created "202": content: application/json: schema: - $ref: "#/components/schemas/v1beta2.ResourceClaimTemplate" + $ref: "#/components/schemas/v1beta2.ResourceClaim" application/yaml: schema: - $ref: "#/components/schemas/v1beta2.ResourceClaimTemplate" + $ref: "#/components/schemas/v1beta2.ResourceClaim" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1beta2.ResourceClaimTemplate" + $ref: "#/components/schemas/v1beta2.ResourceClaim" application/cbor: schema: - $ref: "#/components/schemas/v1beta2.ResourceClaimTemplate" + $ref: "#/components/schemas/v1beta2.ResourceClaim" description: Accepted "401": content: {} @@ -88167,7 +90264,7 @@ paths: x-kubernetes-action: post x-kubernetes-group-version-kind: group: resource.k8s.io - kind: ResourceClaimTemplate + kind: ResourceClaim version: v1beta2 x-codegen-request-body-name: body x-content-type: application/json @@ -88176,12 +90273,12 @@ paths: - application/json - application/vnd.kubernetes.protobuf - application/yaml - /apis/resource.k8s.io/v1beta2/namespaces/{namespace}/resourceclaimtemplates/{name}: + /apis/resource.k8s.io/v1beta2/namespaces/{namespace}/resourceclaims/{name}: delete: - description: delete a ResourceClaimTemplate - operationId: deleteNamespacedResourceClaimTemplate + description: delete a ResourceClaim + operationId: deleteNamespacedResourceClaim parameters: - - description: name of the ResourceClaimTemplate + - description: name of the ResourceClaim in: path name: name required: true @@ -88262,31 +90359,31 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1beta2.ResourceClaimTemplate" + $ref: "#/components/schemas/v1beta2.ResourceClaim" application/yaml: schema: - $ref: "#/components/schemas/v1beta2.ResourceClaimTemplate" + $ref: "#/components/schemas/v1beta2.ResourceClaim" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1beta2.ResourceClaimTemplate" + $ref: "#/components/schemas/v1beta2.ResourceClaim" application/cbor: schema: - $ref: "#/components/schemas/v1beta2.ResourceClaimTemplate" + $ref: "#/components/schemas/v1beta2.ResourceClaim" description: OK "202": content: application/json: schema: - $ref: "#/components/schemas/v1beta2.ResourceClaimTemplate" + $ref: "#/components/schemas/v1beta2.ResourceClaim" application/yaml: schema: - $ref: "#/components/schemas/v1beta2.ResourceClaimTemplate" + $ref: "#/components/schemas/v1beta2.ResourceClaim" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1beta2.ResourceClaimTemplate" + $ref: "#/components/schemas/v1beta2.ResourceClaim" application/cbor: schema: - $ref: "#/components/schemas/v1beta2.ResourceClaimTemplate" + $ref: "#/components/schemas/v1beta2.ResourceClaim" description: Accepted "401": content: {} @@ -88296,7 +90393,7 @@ paths: x-kubernetes-action: delete x-kubernetes-group-version-kind: group: resource.k8s.io - kind: ResourceClaimTemplate + kind: ResourceClaim version: v1beta2 x-codegen-request-body-name: body x-content-type: application/json @@ -88306,10 +90403,10 @@ paths: - application/vnd.kubernetes.protobuf - application/yaml get: - description: read the specified ResourceClaimTemplate - operationId: readNamespacedResourceClaimTemplate + description: read the specified ResourceClaim + operationId: readNamespacedResourceClaim parameters: - - description: name of the ResourceClaimTemplate + - description: name of the ResourceClaim in: path name: name required: true @@ -88333,16 +90430,16 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1beta2.ResourceClaimTemplate" + $ref: "#/components/schemas/v1beta2.ResourceClaim" application/yaml: schema: - $ref: "#/components/schemas/v1beta2.ResourceClaimTemplate" + $ref: "#/components/schemas/v1beta2.ResourceClaim" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1beta2.ResourceClaimTemplate" + $ref: "#/components/schemas/v1beta2.ResourceClaim" application/cbor: schema: - $ref: "#/components/schemas/v1beta2.ResourceClaimTemplate" + $ref: "#/components/schemas/v1beta2.ResourceClaim" description: OK "401": content: {} @@ -88352,7 +90449,7 @@ paths: x-kubernetes-action: get x-kubernetes-group-version-kind: group: resource.k8s.io - kind: ResourceClaimTemplate + kind: ResourceClaim version: v1beta2 x-accepts: - application/cbor @@ -88360,10 +90457,10 @@ paths: - application/vnd.kubernetes.protobuf - application/yaml patch: - description: partially update the specified ResourceClaimTemplate - operationId: patchNamespacedResourceClaimTemplate + description: partially update the specified ResourceClaim + operationId: patchNamespacedResourceClaim parameters: - - description: name of the ResourceClaimTemplate + - description: name of the ResourceClaim in: path name: name required: true @@ -88434,31 +90531,31 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1beta2.ResourceClaimTemplate" + $ref: "#/components/schemas/v1beta2.ResourceClaim" application/yaml: schema: - $ref: "#/components/schemas/v1beta2.ResourceClaimTemplate" + $ref: "#/components/schemas/v1beta2.ResourceClaim" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1beta2.ResourceClaimTemplate" + $ref: "#/components/schemas/v1beta2.ResourceClaim" application/cbor: schema: - $ref: "#/components/schemas/v1beta2.ResourceClaimTemplate" + $ref: "#/components/schemas/v1beta2.ResourceClaim" description: OK "201": content: application/json: schema: - $ref: "#/components/schemas/v1beta2.ResourceClaimTemplate" + $ref: "#/components/schemas/v1beta2.ResourceClaim" application/yaml: schema: - $ref: "#/components/schemas/v1beta2.ResourceClaimTemplate" + $ref: "#/components/schemas/v1beta2.ResourceClaim" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1beta2.ResourceClaimTemplate" + $ref: "#/components/schemas/v1beta2.ResourceClaim" application/cbor: schema: - $ref: "#/components/schemas/v1beta2.ResourceClaimTemplate" + $ref: "#/components/schemas/v1beta2.ResourceClaim" description: Created "401": content: {} @@ -88468,7 +90565,7 @@ paths: x-kubernetes-action: patch x-kubernetes-group-version-kind: group: resource.k8s.io - kind: ResourceClaimTemplate + kind: ResourceClaim version: v1beta2 x-codegen-request-body-name: body x-content-type: application/json @@ -88478,10 +90575,10 @@ paths: - application/vnd.kubernetes.protobuf - application/yaml put: - description: replace the specified ResourceClaimTemplate - operationId: replaceNamespacedResourceClaimTemplate + description: replace the specified ResourceClaim + operationId: replaceNamespacedResourceClaim parameters: - - description: name of the ResourceClaimTemplate + - description: name of the ResourceClaim in: path name: name required: true @@ -88536,38 +90633,38 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1beta2.ResourceClaimTemplate" + $ref: "#/components/schemas/v1beta2.ResourceClaim" required: true responses: "200": content: application/json: schema: - $ref: "#/components/schemas/v1beta2.ResourceClaimTemplate" + $ref: "#/components/schemas/v1beta2.ResourceClaim" application/yaml: schema: - $ref: "#/components/schemas/v1beta2.ResourceClaimTemplate" + $ref: "#/components/schemas/v1beta2.ResourceClaim" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1beta2.ResourceClaimTemplate" + $ref: "#/components/schemas/v1beta2.ResourceClaim" application/cbor: schema: - $ref: "#/components/schemas/v1beta2.ResourceClaimTemplate" + $ref: "#/components/schemas/v1beta2.ResourceClaim" description: OK "201": content: application/json: schema: - $ref: "#/components/schemas/v1beta2.ResourceClaimTemplate" + $ref: "#/components/schemas/v1beta2.ResourceClaim" application/yaml: schema: - $ref: "#/components/schemas/v1beta2.ResourceClaimTemplate" + $ref: "#/components/schemas/v1beta2.ResourceClaim" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1beta2.ResourceClaimTemplate" + $ref: "#/components/schemas/v1beta2.ResourceClaim" application/cbor: schema: - $ref: "#/components/schemas/v1beta2.ResourceClaimTemplate" + $ref: "#/components/schemas/v1beta2.ResourceClaim" description: Created "401": content: {} @@ -88577,7 +90674,7 @@ paths: x-kubernetes-action: put x-kubernetes-group-version-kind: group: resource.k8s.io - kind: ResourceClaimTemplate + kind: ResourceClaim version: v1beta2 x-codegen-request-body-name: body x-content-type: application/json @@ -88586,21 +90683,306 @@ paths: - application/json - application/vnd.kubernetes.protobuf - application/yaml - /apis/resource.k8s.io/v1beta2/resourceclaims: + /apis/resource.k8s.io/v1beta2/namespaces/{namespace}/resourceclaims/{name}/status: get: - description: list or watch objects of kind ResourceClaim - operationId: listResourceClaimForAllNamespaces + description: read status of the specified ResourceClaim + operationId: readNamespacedResourceClaimStatus parameters: - - description: "allowWatchBookmarks requests watch events with type \"BOOKMARK\"\ - . Servers that do not implement bookmarks may ignore this flag and bookmarks\ - \ are sent at the server's discretion. Clients should not assume bookmarks\ - \ are returned at any specific interval, nor may they assume the server\ - \ will send any BOOKMARK event during a session. If this is not a watch,\ - \ this field is ignored." + - description: name of the ResourceClaim + in: path + name: name + required: true + schema: + type: string + - description: "object name and auth scope, such as for teams and projects" + in: path + name: namespace + required: true + schema: + type: string + - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ + \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ + \ and wget)." in: query - name: allowWatchBookmarks + name: pretty + schema: + type: string + responses: + "200": + content: + application/json: + schema: + $ref: "#/components/schemas/v1beta2.ResourceClaim" + application/yaml: + schema: + $ref: "#/components/schemas/v1beta2.ResourceClaim" + application/vnd.kubernetes.protobuf: + schema: + $ref: "#/components/schemas/v1beta2.ResourceClaim" + application/cbor: + schema: + $ref: "#/components/schemas/v1beta2.ResourceClaim" + description: OK + "401": + content: {} + description: Unauthorized + tags: + - resource_v1beta2 + x-kubernetes-action: get + x-kubernetes-group-version-kind: + group: resource.k8s.io + kind: ResourceClaim + version: v1beta2 + x-accepts: + - application/cbor + - application/json + - application/vnd.kubernetes.protobuf + - application/yaml + patch: + description: partially update status of the specified ResourceClaim + operationId: patchNamespacedResourceClaimStatus + parameters: + - description: name of the ResourceClaim + in: path + name: name + required: true + schema: + type: string + - description: "object name and auth scope, such as for teams and projects" + in: path + name: namespace + required: true + schema: + type: string + - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ + \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ + \ and wget)." + in: query + name: pretty + schema: + type: string + - description: "When present, indicates that modifications should not be persisted.\ + \ An invalid or unrecognized dryRun directive will result in an error response\ + \ and no further processing of the request. Valid values are: - All: all\ + \ dry run stages will be processed" + in: query + name: dryRun + schema: + type: string + - description: "fieldManager is a name associated with the actor or entity that\ + \ is making these changes. The value must be less than or 128 characters\ + \ long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.\ + \ This field is required for apply requests (application/apply-patch) but\ + \ optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch)." + in: query + name: fieldManager + schema: + type: string + - description: "fieldValidation instructs the server on how to handle objects\ + \ in the request (POST/PUT/PATCH) containing unknown or duplicate fields.\ + \ Valid values are: - Ignore: This will ignore any unknown fields that are\ + \ silently dropped from the object, and will ignore all but the last duplicate\ + \ field that the decoder encounters. This is the default behavior prior\ + \ to v1.23. - Warn: This will send a warning via the standard warning response\ + \ header for each unknown field that is dropped from the object, and for\ + \ each duplicate field that is encountered. The request will still succeed\ + \ if there are no other errors, and will only persist the last of any duplicate\ + \ fields. This is the default in v1.23+ - Strict: This will fail the request\ + \ with a BadRequest error if any unknown fields would be dropped from the\ + \ object, or if any duplicate fields are present. The error returned from\ + \ the server will contain all unknown and duplicate fields encountered." + in: query + name: fieldValidation + schema: + type: string + - description: Force is going to "force" Apply requests. It means user will + re-acquire conflicting fields owned by other people. Force flag must be + unset for non-apply patch requests. + in: query + name: force schema: type: boolean + requestBody: + content: + application/json: + schema: + $ref: "#/components/schemas/v1.Patch" + required: true + responses: + "200": + content: + application/json: + schema: + $ref: "#/components/schemas/v1beta2.ResourceClaim" + application/yaml: + schema: + $ref: "#/components/schemas/v1beta2.ResourceClaim" + application/vnd.kubernetes.protobuf: + schema: + $ref: "#/components/schemas/v1beta2.ResourceClaim" + application/cbor: + schema: + $ref: "#/components/schemas/v1beta2.ResourceClaim" + description: OK + "201": + content: + application/json: + schema: + $ref: "#/components/schemas/v1beta2.ResourceClaim" + application/yaml: + schema: + $ref: "#/components/schemas/v1beta2.ResourceClaim" + application/vnd.kubernetes.protobuf: + schema: + $ref: "#/components/schemas/v1beta2.ResourceClaim" + application/cbor: + schema: + $ref: "#/components/schemas/v1beta2.ResourceClaim" + description: Created + "401": + content: {} + description: Unauthorized + tags: + - resource_v1beta2 + x-kubernetes-action: patch + x-kubernetes-group-version-kind: + group: resource.k8s.io + kind: ResourceClaim + version: v1beta2 + x-codegen-request-body-name: body + x-content-type: application/json + x-accepts: + - application/cbor + - application/json + - application/vnd.kubernetes.protobuf + - application/yaml + put: + description: replace status of the specified ResourceClaim + operationId: replaceNamespacedResourceClaimStatus + parameters: + - description: name of the ResourceClaim + in: path + name: name + required: true + schema: + type: string + - description: "object name and auth scope, such as for teams and projects" + in: path + name: namespace + required: true + schema: + type: string + - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ + \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ + \ and wget)." + in: query + name: pretty + schema: + type: string + - description: "When present, indicates that modifications should not be persisted.\ + \ An invalid or unrecognized dryRun directive will result in an error response\ + \ and no further processing of the request. Valid values are: - All: all\ + \ dry run stages will be processed" + in: query + name: dryRun + schema: + type: string + - description: "fieldManager is a name associated with the actor or entity that\ + \ is making these changes. The value must be less than or 128 characters\ + \ long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." + in: query + name: fieldManager + schema: + type: string + - description: "fieldValidation instructs the server on how to handle objects\ + \ in the request (POST/PUT/PATCH) containing unknown or duplicate fields.\ + \ Valid values are: - Ignore: This will ignore any unknown fields that are\ + \ silently dropped from the object, and will ignore all but the last duplicate\ + \ field that the decoder encounters. This is the default behavior prior\ + \ to v1.23. - Warn: This will send a warning via the standard warning response\ + \ header for each unknown field that is dropped from the object, and for\ + \ each duplicate field that is encountered. The request will still succeed\ + \ if there are no other errors, and will only persist the last of any duplicate\ + \ fields. This is the default in v1.23+ - Strict: This will fail the request\ + \ with a BadRequest error if any unknown fields would be dropped from the\ + \ object, or if any duplicate fields are present. The error returned from\ + \ the server will contain all unknown and duplicate fields encountered." + in: query + name: fieldValidation + schema: + type: string + requestBody: + content: + application/json: + schema: + $ref: "#/components/schemas/v1beta2.ResourceClaim" + required: true + responses: + "200": + content: + application/json: + schema: + $ref: "#/components/schemas/v1beta2.ResourceClaim" + application/yaml: + schema: + $ref: "#/components/schemas/v1beta2.ResourceClaim" + application/vnd.kubernetes.protobuf: + schema: + $ref: "#/components/schemas/v1beta2.ResourceClaim" + application/cbor: + schema: + $ref: "#/components/schemas/v1beta2.ResourceClaim" + description: OK + "201": + content: + application/json: + schema: + $ref: "#/components/schemas/v1beta2.ResourceClaim" + application/yaml: + schema: + $ref: "#/components/schemas/v1beta2.ResourceClaim" + application/vnd.kubernetes.protobuf: + schema: + $ref: "#/components/schemas/v1beta2.ResourceClaim" + application/cbor: + schema: + $ref: "#/components/schemas/v1beta2.ResourceClaim" + description: Created + "401": + content: {} + description: Unauthorized + tags: + - resource_v1beta2 + x-kubernetes-action: put + x-kubernetes-group-version-kind: + group: resource.k8s.io + kind: ResourceClaim + version: v1beta2 + x-codegen-request-body-name: body + x-content-type: application/json + x-accepts: + - application/cbor + - application/json + - application/vnd.kubernetes.protobuf + - application/yaml + /apis/resource.k8s.io/v1beta2/namespaces/{namespace}/resourceclaimtemplates: + delete: + description: delete collection of ResourceClaimTemplate + operationId: deleteCollectionNamespacedResourceClaimTemplate + parameters: + - description: "object name and auth scope, such as for teams and projects" + in: path + name: namespace + required: true + schema: + type: string + - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ + \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ + \ and wget)." + in: query + name: pretty + schema: + type: string - description: |- The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". @@ -88609,12 +90991,44 @@ paths: name: continue schema: type: string + - description: "When present, indicates that modifications should not be persisted.\ + \ An invalid or unrecognized dryRun directive will result in an error response\ + \ and no further processing of the request. Valid values are: - All: all\ + \ dry run stages will be processed" + in: query + name: dryRun + schema: + type: string - description: A selector to restrict the list of returned objects by their fields. Defaults to everything. in: query name: fieldSelector schema: type: string + - description: "The duration in seconds before the object should be deleted.\ + \ Value must be non-negative integer. The value zero indicates delete immediately.\ + \ If this value is nil, the default grace period for the specified type\ + \ will be used. Defaults to a per object value if not specified. zero means\ + \ delete immediately." + in: query + name: gracePeriodSeconds + schema: + type: integer + - description: "if set to true, it will trigger an unsafe deletion of the resource\ + \ in case the normal deletion flow fails with a corrupt object error. A\ + \ resource is considered corrupt if it can not be retrieved from the underlying\ + \ storage successfully because of a) its data can not be transformed e.g.\ + \ decryption failure, or b) it fails to decode into an object. NOTE: unsafe\ + \ deletion ignores finalizer constraints, skips precondition checks, and\ + \ removes the object from the storage. WARNING: This may potentially break\ + \ the cluster if the workload associated with the resource being unsafe-deleted\ + \ relies on normal deletion flow. Use only if you REALLY know what you are\ + \ doing. The default value is false, and the user must opt in to enable\ + \ it" + in: query + name: ignoreStoreReadErrorWithClusterBreakingPotential + schema: + type: boolean - description: A selector to restrict the list of returned objects by their labels. Defaults to everything. in: query @@ -88629,11 +91043,878 @@ paths: name: limit schema: type: integer - - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ - \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ - \ and wget)." + - description: "Deprecated: please use the PropagationPolicy, this field will\ + \ be deprecated in 1.7. Should the dependent objects be orphaned. If true/false,\ + \ the \"orphan\" finalizer will be added to/removed from the object's finalizers\ + \ list. Either this field or PropagationPolicy may be set, but not both." in: query - name: pretty + name: orphanDependents + schema: + type: boolean + - description: "Whether and how garbage collection will be performed. Either\ + \ this field or OrphanDependents may be set, but not both. The default policy\ + \ is decided by the existing finalizer set in the metadata.finalizers and\ + \ the resource-specific default policy. Acceptable values are: 'Orphan'\ + \ - orphan the dependents; 'Background' - allow the garbage collector to\ + \ delete the dependents in the background; 'Foreground' - a cascading policy\ + \ that deletes all dependents in the foreground." + in: query + name: propagationPolicy + schema: + type: string + - description: |- + resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + + Defaults to unset + in: query + name: resourceVersion + schema: + type: string + - description: |- + resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + + Defaults to unset + in: query + name: resourceVersionMatch + schema: + type: string + - description: |- + `sendInitialEvents=true` may be set together with `watch=true`. In that case, the watch stream will begin with synthetic events to produce the current state of objects in the collection. Once all such events have been sent, a synthetic "Bookmark" event will be sent. The bookmark will report the ResourceVersion (RV) corresponding to the set of objects, and be marked with `"k8s.io/initial-events-end": "true"` annotation. Afterwards, the watch stream will proceed as usual, sending watch events corresponding to changes (subsequent to the RV) to objects watched. + + When `sendInitialEvents` option is set, we require `resourceVersionMatch` option to also be set. The semantic of the watch request is as following: - `resourceVersionMatch` = NotOlderThan + is interpreted as "data at least as new as the provided `resourceVersion`" + and the bookmark event is send when the state is synced + to a `resourceVersion` at least as fresh as the one provided by the ListOptions. + If `resourceVersion` is unset, this is interpreted as "consistent read" and the + bookmark event is send when the state is synced at least to the moment + when request started being processed. + - `resourceVersionMatch` set to any other value or unset + Invalid error is returned. + + Defaults to true if `resourceVersion=""` or `resourceVersion="0"` (for backward compatibility reasons) and to false otherwise. + in: query + name: sendInitialEvents + schema: + type: boolean + - description: |- + shardSelector restricts the list of returned objects using a CEL-based shard selector expression. The format uses the shardRange() function combined with || (logical OR) to specify one or more hash ranges: + + shardRange(object.metadata.uid, '0x0', '0x8000000000000000') + shardRange(object.metadata.uid, '0x0', '0x8000000000000000') || shardRange(object.metadata.uid, '0x8000000000000000', '0x10000000000000000') + + Field paths use CEL-style object-rooted syntax (e.g. "object.metadata.uid"), NOT the fieldSelector format ("metadata.uid"). Currently supported paths: + - object.metadata.uid + - object.metadata.namespace + + hexStart and hexEnd are single-quoted CEL string literals with a '0x' prefix, defining the inclusive lower and exclusive upper bounds over the 64-bit FNV-1a hash space. The full range is [0x0, 0x10000000000000000), where the exclusive upper bound equals 2^64. + + Examples: + 2-shard split: + shard 0: shardRange(object.metadata.uid, '0x0000000000000000', '0x8000000000000000') + shard 1: shardRange(object.metadata.uid, '0x8000000000000000', '0x10000000000000000') + 4-shard split: + shard 0: shardRange(object.metadata.uid, '0x0000000000000000', '0x4000000000000000') + shard 1: shardRange(object.metadata.uid, '0x4000000000000000', '0x8000000000000000') + shard 2: shardRange(object.metadata.uid, '0x8000000000000000', '0xc000000000000000') + shard 3: shardRange(object.metadata.uid, '0xc000000000000000', '0x10000000000000000') + + This is an alpha field and requires enabling the ShardedListAndWatch feature gate. + in: query + name: shardSelector + schema: + type: string + - description: "Timeout for the list/watch call. This limits the duration of\ + \ the call, regardless of any activity or inactivity." + in: query + name: timeoutSeconds + schema: + type: integer + requestBody: + content: + application/json: + schema: + $ref: "#/components/schemas/v1.DeleteOptions" + required: false + responses: + "200": + content: + application/json: + schema: + $ref: "#/components/schemas/v1.Status" + application/yaml: + schema: + $ref: "#/components/schemas/v1.Status" + application/vnd.kubernetes.protobuf: + schema: + $ref: "#/components/schemas/v1.Status" + application/cbor: + schema: + $ref: "#/components/schemas/v1.Status" + description: OK + "401": + content: {} + description: Unauthorized + tags: + - resource_v1beta2 + x-kubernetes-action: deletecollection + x-kubernetes-group-version-kind: + group: resource.k8s.io + kind: ResourceClaimTemplate + version: v1beta2 + x-codegen-request-body-name: body + x-content-type: application/json + x-accepts: + - application/cbor + - application/json + - application/vnd.kubernetes.protobuf + - application/yaml + get: + description: list or watch objects of kind ResourceClaimTemplate + operationId: listNamespacedResourceClaimTemplate + parameters: + - description: "object name and auth scope, such as for teams and projects" + in: path + name: namespace + required: true + schema: + type: string + - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ + \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ + \ and wget)." + in: query + name: pretty + schema: + type: string + - description: "allowWatchBookmarks requests watch events with type \"BOOKMARK\"\ + . Servers that do not implement bookmarks may ignore this flag and bookmarks\ + \ are sent at the server's discretion. Clients should not assume bookmarks\ + \ are returned at any specific interval, nor may they assume the server\ + \ will send any BOOKMARK event during a session. If this is not a watch,\ + \ this field is ignored." + in: query + name: allowWatchBookmarks + schema: + type: boolean + - description: |- + The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + + This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications. + in: query + name: continue + schema: + type: string + - description: A selector to restrict the list of returned objects by their + fields. Defaults to everything. + in: query + name: fieldSelector + schema: + type: string + - description: A selector to restrict the list of returned objects by their + labels. Defaults to everything. + in: query + name: labelSelector + schema: + type: string + - description: |- + limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + + The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned. + in: query + name: limit + schema: + type: integer + - description: |- + resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + + Defaults to unset + in: query + name: resourceVersion + schema: + type: string + - description: |- + resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + + Defaults to unset + in: query + name: resourceVersionMatch + schema: + type: string + - description: |- + `sendInitialEvents=true` may be set together with `watch=true`. In that case, the watch stream will begin with synthetic events to produce the current state of objects in the collection. Once all such events have been sent, a synthetic "Bookmark" event will be sent. The bookmark will report the ResourceVersion (RV) corresponding to the set of objects, and be marked with `"k8s.io/initial-events-end": "true"` annotation. Afterwards, the watch stream will proceed as usual, sending watch events corresponding to changes (subsequent to the RV) to objects watched. + + When `sendInitialEvents` option is set, we require `resourceVersionMatch` option to also be set. The semantic of the watch request is as following: - `resourceVersionMatch` = NotOlderThan + is interpreted as "data at least as new as the provided `resourceVersion`" + and the bookmark event is send when the state is synced + to a `resourceVersion` at least as fresh as the one provided by the ListOptions. + If `resourceVersion` is unset, this is interpreted as "consistent read" and the + bookmark event is send when the state is synced at least to the moment + when request started being processed. + - `resourceVersionMatch` set to any other value or unset + Invalid error is returned. + + Defaults to true if `resourceVersion=""` or `resourceVersion="0"` (for backward compatibility reasons) and to false otherwise. + in: query + name: sendInitialEvents + schema: + type: boolean + - description: |- + shardSelector restricts the list of returned objects using a CEL-based shard selector expression. The format uses the shardRange() function combined with || (logical OR) to specify one or more hash ranges: + + shardRange(object.metadata.uid, '0x0', '0x8000000000000000') + shardRange(object.metadata.uid, '0x0', '0x8000000000000000') || shardRange(object.metadata.uid, '0x8000000000000000', '0x10000000000000000') + + Field paths use CEL-style object-rooted syntax (e.g. "object.metadata.uid"), NOT the fieldSelector format ("metadata.uid"). Currently supported paths: + - object.metadata.uid + - object.metadata.namespace + + hexStart and hexEnd are single-quoted CEL string literals with a '0x' prefix, defining the inclusive lower and exclusive upper bounds over the 64-bit FNV-1a hash space. The full range is [0x0, 0x10000000000000000), where the exclusive upper bound equals 2^64. + + Examples: + 2-shard split: + shard 0: shardRange(object.metadata.uid, '0x0000000000000000', '0x8000000000000000') + shard 1: shardRange(object.metadata.uid, '0x8000000000000000', '0x10000000000000000') + 4-shard split: + shard 0: shardRange(object.metadata.uid, '0x0000000000000000', '0x4000000000000000') + shard 1: shardRange(object.metadata.uid, '0x4000000000000000', '0x8000000000000000') + shard 2: shardRange(object.metadata.uid, '0x8000000000000000', '0xc000000000000000') + shard 3: shardRange(object.metadata.uid, '0xc000000000000000', '0x10000000000000000') + + This is an alpha field and requires enabling the ShardedListAndWatch feature gate. + in: query + name: shardSelector + schema: + type: string + - description: "Timeout for the list/watch call. This limits the duration of\ + \ the call, regardless of any activity or inactivity." + in: query + name: timeoutSeconds + schema: + type: integer + - description: "Watch for changes to the described resources and return them\ + \ as a stream of add, update, and remove notifications. Specify resourceVersion." + in: query + name: watch + schema: + type: boolean + responses: + "200": + content: + application/json: + schema: + $ref: "#/components/schemas/v1beta2.ResourceClaimTemplateList" + application/yaml: + schema: + $ref: "#/components/schemas/v1beta2.ResourceClaimTemplateList" + application/vnd.kubernetes.protobuf: + schema: + $ref: "#/components/schemas/v1beta2.ResourceClaimTemplateList" + application/cbor: + schema: + $ref: "#/components/schemas/v1beta2.ResourceClaimTemplateList" + application/json;stream=watch: + schema: + $ref: "#/components/schemas/v1beta2.ResourceClaimTemplateList" + application/vnd.kubernetes.protobuf;stream=watch: + schema: + $ref: "#/components/schemas/v1beta2.ResourceClaimTemplateList" + application/cbor-seq: + schema: + $ref: "#/components/schemas/v1beta2.ResourceClaimTemplateList" + description: OK + "401": + content: {} + description: Unauthorized + tags: + - resource_v1beta2 + x-kubernetes-action: list + x-kubernetes-group-version-kind: + group: resource.k8s.io + kind: ResourceClaimTemplate + version: v1beta2 + x-accepts: + - application/cbor + - application/cbor-seq + - application/json + - application/json;stream=watch + - application/vnd.kubernetes.protobuf + - application/vnd.kubernetes.protobuf;stream=watch + - application/yaml + post: + description: create a ResourceClaimTemplate + operationId: createNamespacedResourceClaimTemplate + parameters: + - description: "object name and auth scope, such as for teams and projects" + in: path + name: namespace + required: true + schema: + type: string + - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ + \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ + \ and wget)." + in: query + name: pretty + schema: + type: string + - description: "When present, indicates that modifications should not be persisted.\ + \ An invalid or unrecognized dryRun directive will result in an error response\ + \ and no further processing of the request. Valid values are: - All: all\ + \ dry run stages will be processed" + in: query + name: dryRun + schema: + type: string + - description: "fieldManager is a name associated with the actor or entity that\ + \ is making these changes. The value must be less than or 128 characters\ + \ long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." + in: query + name: fieldManager + schema: + type: string + - description: "fieldValidation instructs the server on how to handle objects\ + \ in the request (POST/PUT/PATCH) containing unknown or duplicate fields.\ + \ Valid values are: - Ignore: This will ignore any unknown fields that are\ + \ silently dropped from the object, and will ignore all but the last duplicate\ + \ field that the decoder encounters. This is the default behavior prior\ + \ to v1.23. - Warn: This will send a warning via the standard warning response\ + \ header for each unknown field that is dropped from the object, and for\ + \ each duplicate field that is encountered. The request will still succeed\ + \ if there are no other errors, and will only persist the last of any duplicate\ + \ fields. This is the default in v1.23+ - Strict: This will fail the request\ + \ with a BadRequest error if any unknown fields would be dropped from the\ + \ object, or if any duplicate fields are present. The error returned from\ + \ the server will contain all unknown and duplicate fields encountered." + in: query + name: fieldValidation + schema: + type: string + requestBody: + content: + application/json: + schema: + $ref: "#/components/schemas/v1beta2.ResourceClaimTemplate" + required: true + responses: + "200": + content: + application/json: + schema: + $ref: "#/components/schemas/v1beta2.ResourceClaimTemplate" + application/yaml: + schema: + $ref: "#/components/schemas/v1beta2.ResourceClaimTemplate" + application/vnd.kubernetes.protobuf: + schema: + $ref: "#/components/schemas/v1beta2.ResourceClaimTemplate" + application/cbor: + schema: + $ref: "#/components/schemas/v1beta2.ResourceClaimTemplate" + description: OK + "201": + content: + application/json: + schema: + $ref: "#/components/schemas/v1beta2.ResourceClaimTemplate" + application/yaml: + schema: + $ref: "#/components/schemas/v1beta2.ResourceClaimTemplate" + application/vnd.kubernetes.protobuf: + schema: + $ref: "#/components/schemas/v1beta2.ResourceClaimTemplate" + application/cbor: + schema: + $ref: "#/components/schemas/v1beta2.ResourceClaimTemplate" + description: Created + "202": + content: + application/json: + schema: + $ref: "#/components/schemas/v1beta2.ResourceClaimTemplate" + application/yaml: + schema: + $ref: "#/components/schemas/v1beta2.ResourceClaimTemplate" + application/vnd.kubernetes.protobuf: + schema: + $ref: "#/components/schemas/v1beta2.ResourceClaimTemplate" + application/cbor: + schema: + $ref: "#/components/schemas/v1beta2.ResourceClaimTemplate" + description: Accepted + "401": + content: {} + description: Unauthorized + tags: + - resource_v1beta2 + x-kubernetes-action: post + x-kubernetes-group-version-kind: + group: resource.k8s.io + kind: ResourceClaimTemplate + version: v1beta2 + x-codegen-request-body-name: body + x-content-type: application/json + x-accepts: + - application/cbor + - application/json + - application/vnd.kubernetes.protobuf + - application/yaml + /apis/resource.k8s.io/v1beta2/namespaces/{namespace}/resourceclaimtemplates/{name}: + delete: + description: delete a ResourceClaimTemplate + operationId: deleteNamespacedResourceClaimTemplate + parameters: + - description: name of the ResourceClaimTemplate + in: path + name: name + required: true + schema: + type: string + - description: "object name and auth scope, such as for teams and projects" + in: path + name: namespace + required: true + schema: + type: string + - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ + \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ + \ and wget)." + in: query + name: pretty + schema: + type: string + - description: "When present, indicates that modifications should not be persisted.\ + \ An invalid or unrecognized dryRun directive will result in an error response\ + \ and no further processing of the request. Valid values are: - All: all\ + \ dry run stages will be processed" + in: query + name: dryRun + schema: + type: string + - description: "The duration in seconds before the object should be deleted.\ + \ Value must be non-negative integer. The value zero indicates delete immediately.\ + \ If this value is nil, the default grace period for the specified type\ + \ will be used. Defaults to a per object value if not specified. zero means\ + \ delete immediately." + in: query + name: gracePeriodSeconds + schema: + type: integer + - description: "if set to true, it will trigger an unsafe deletion of the resource\ + \ in case the normal deletion flow fails with a corrupt object error. A\ + \ resource is considered corrupt if it can not be retrieved from the underlying\ + \ storage successfully because of a) its data can not be transformed e.g.\ + \ decryption failure, or b) it fails to decode into an object. NOTE: unsafe\ + \ deletion ignores finalizer constraints, skips precondition checks, and\ + \ removes the object from the storage. WARNING: This may potentially break\ + \ the cluster if the workload associated with the resource being unsafe-deleted\ + \ relies on normal deletion flow. Use only if you REALLY know what you are\ + \ doing. The default value is false, and the user must opt in to enable\ + \ it" + in: query + name: ignoreStoreReadErrorWithClusterBreakingPotential + schema: + type: boolean + - description: "Deprecated: please use the PropagationPolicy, this field will\ + \ be deprecated in 1.7. Should the dependent objects be orphaned. If true/false,\ + \ the \"orphan\" finalizer will be added to/removed from the object's finalizers\ + \ list. Either this field or PropagationPolicy may be set, but not both." + in: query + name: orphanDependents + schema: + type: boolean + - description: "Whether and how garbage collection will be performed. Either\ + \ this field or OrphanDependents may be set, but not both. The default policy\ + \ is decided by the existing finalizer set in the metadata.finalizers and\ + \ the resource-specific default policy. Acceptable values are: 'Orphan'\ + \ - orphan the dependents; 'Background' - allow the garbage collector to\ + \ delete the dependents in the background; 'Foreground' - a cascading policy\ + \ that deletes all dependents in the foreground." + in: query + name: propagationPolicy + schema: + type: string + requestBody: + content: + application/json: + schema: + $ref: "#/components/schemas/v1.DeleteOptions" + required: false + responses: + "200": + content: + application/json: + schema: + $ref: "#/components/schemas/v1beta2.ResourceClaimTemplate" + application/yaml: + schema: + $ref: "#/components/schemas/v1beta2.ResourceClaimTemplate" + application/vnd.kubernetes.protobuf: + schema: + $ref: "#/components/schemas/v1beta2.ResourceClaimTemplate" + application/cbor: + schema: + $ref: "#/components/schemas/v1beta2.ResourceClaimTemplate" + description: OK + "202": + content: + application/json: + schema: + $ref: "#/components/schemas/v1beta2.ResourceClaimTemplate" + application/yaml: + schema: + $ref: "#/components/schemas/v1beta2.ResourceClaimTemplate" + application/vnd.kubernetes.protobuf: + schema: + $ref: "#/components/schemas/v1beta2.ResourceClaimTemplate" + application/cbor: + schema: + $ref: "#/components/schemas/v1beta2.ResourceClaimTemplate" + description: Accepted + "401": + content: {} + description: Unauthorized + tags: + - resource_v1beta2 + x-kubernetes-action: delete + x-kubernetes-group-version-kind: + group: resource.k8s.io + kind: ResourceClaimTemplate + version: v1beta2 + x-codegen-request-body-name: body + x-content-type: application/json + x-accepts: + - application/cbor + - application/json + - application/vnd.kubernetes.protobuf + - application/yaml + get: + description: read the specified ResourceClaimTemplate + operationId: readNamespacedResourceClaimTemplate + parameters: + - description: name of the ResourceClaimTemplate + in: path + name: name + required: true + schema: + type: string + - description: "object name and auth scope, such as for teams and projects" + in: path + name: namespace + required: true + schema: + type: string + - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ + \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ + \ and wget)." + in: query + name: pretty + schema: + type: string + responses: + "200": + content: + application/json: + schema: + $ref: "#/components/schemas/v1beta2.ResourceClaimTemplate" + application/yaml: + schema: + $ref: "#/components/schemas/v1beta2.ResourceClaimTemplate" + application/vnd.kubernetes.protobuf: + schema: + $ref: "#/components/schemas/v1beta2.ResourceClaimTemplate" + application/cbor: + schema: + $ref: "#/components/schemas/v1beta2.ResourceClaimTemplate" + description: OK + "401": + content: {} + description: Unauthorized + tags: + - resource_v1beta2 + x-kubernetes-action: get + x-kubernetes-group-version-kind: + group: resource.k8s.io + kind: ResourceClaimTemplate + version: v1beta2 + x-accepts: + - application/cbor + - application/json + - application/vnd.kubernetes.protobuf + - application/yaml + patch: + description: partially update the specified ResourceClaimTemplate + operationId: patchNamespacedResourceClaimTemplate + parameters: + - description: name of the ResourceClaimTemplate + in: path + name: name + required: true + schema: + type: string + - description: "object name and auth scope, such as for teams and projects" + in: path + name: namespace + required: true + schema: + type: string + - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ + \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ + \ and wget)." + in: query + name: pretty + schema: + type: string + - description: "When present, indicates that modifications should not be persisted.\ + \ An invalid or unrecognized dryRun directive will result in an error response\ + \ and no further processing of the request. Valid values are: - All: all\ + \ dry run stages will be processed" + in: query + name: dryRun + schema: + type: string + - description: "fieldManager is a name associated with the actor or entity that\ + \ is making these changes. The value must be less than or 128 characters\ + \ long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.\ + \ This field is required for apply requests (application/apply-patch) but\ + \ optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch)." + in: query + name: fieldManager + schema: + type: string + - description: "fieldValidation instructs the server on how to handle objects\ + \ in the request (POST/PUT/PATCH) containing unknown or duplicate fields.\ + \ Valid values are: - Ignore: This will ignore any unknown fields that are\ + \ silently dropped from the object, and will ignore all but the last duplicate\ + \ field that the decoder encounters. This is the default behavior prior\ + \ to v1.23. - Warn: This will send a warning via the standard warning response\ + \ header for each unknown field that is dropped from the object, and for\ + \ each duplicate field that is encountered. The request will still succeed\ + \ if there are no other errors, and will only persist the last of any duplicate\ + \ fields. This is the default in v1.23+ - Strict: This will fail the request\ + \ with a BadRequest error if any unknown fields would be dropped from the\ + \ object, or if any duplicate fields are present. The error returned from\ + \ the server will contain all unknown and duplicate fields encountered." + in: query + name: fieldValidation + schema: + type: string + - description: Force is going to "force" Apply requests. It means user will + re-acquire conflicting fields owned by other people. Force flag must be + unset for non-apply patch requests. + in: query + name: force + schema: + type: boolean + requestBody: + content: + application/json: + schema: + $ref: "#/components/schemas/v1.Patch" + required: true + responses: + "200": + content: + application/json: + schema: + $ref: "#/components/schemas/v1beta2.ResourceClaimTemplate" + application/yaml: + schema: + $ref: "#/components/schemas/v1beta2.ResourceClaimTemplate" + application/vnd.kubernetes.protobuf: + schema: + $ref: "#/components/schemas/v1beta2.ResourceClaimTemplate" + application/cbor: + schema: + $ref: "#/components/schemas/v1beta2.ResourceClaimTemplate" + description: OK + "201": + content: + application/json: + schema: + $ref: "#/components/schemas/v1beta2.ResourceClaimTemplate" + application/yaml: + schema: + $ref: "#/components/schemas/v1beta2.ResourceClaimTemplate" + application/vnd.kubernetes.protobuf: + schema: + $ref: "#/components/schemas/v1beta2.ResourceClaimTemplate" + application/cbor: + schema: + $ref: "#/components/schemas/v1beta2.ResourceClaimTemplate" + description: Created + "401": + content: {} + description: Unauthorized + tags: + - resource_v1beta2 + x-kubernetes-action: patch + x-kubernetes-group-version-kind: + group: resource.k8s.io + kind: ResourceClaimTemplate + version: v1beta2 + x-codegen-request-body-name: body + x-content-type: application/json + x-accepts: + - application/cbor + - application/json + - application/vnd.kubernetes.protobuf + - application/yaml + put: + description: replace the specified ResourceClaimTemplate + operationId: replaceNamespacedResourceClaimTemplate + parameters: + - description: name of the ResourceClaimTemplate + in: path + name: name + required: true + schema: + type: string + - description: "object name and auth scope, such as for teams and projects" + in: path + name: namespace + required: true + schema: + type: string + - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ + \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ + \ and wget)." + in: query + name: pretty + schema: + type: string + - description: "When present, indicates that modifications should not be persisted.\ + \ An invalid or unrecognized dryRun directive will result in an error response\ + \ and no further processing of the request. Valid values are: - All: all\ + \ dry run stages will be processed" + in: query + name: dryRun + schema: + type: string + - description: "fieldManager is a name associated with the actor or entity that\ + \ is making these changes. The value must be less than or 128 characters\ + \ long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." + in: query + name: fieldManager + schema: + type: string + - description: "fieldValidation instructs the server on how to handle objects\ + \ in the request (POST/PUT/PATCH) containing unknown or duplicate fields.\ + \ Valid values are: - Ignore: This will ignore any unknown fields that are\ + \ silently dropped from the object, and will ignore all but the last duplicate\ + \ field that the decoder encounters. This is the default behavior prior\ + \ to v1.23. - Warn: This will send a warning via the standard warning response\ + \ header for each unknown field that is dropped from the object, and for\ + \ each duplicate field that is encountered. The request will still succeed\ + \ if there are no other errors, and will only persist the last of any duplicate\ + \ fields. This is the default in v1.23+ - Strict: This will fail the request\ + \ with a BadRequest error if any unknown fields would be dropped from the\ + \ object, or if any duplicate fields are present. The error returned from\ + \ the server will contain all unknown and duplicate fields encountered." + in: query + name: fieldValidation + schema: + type: string + requestBody: + content: + application/json: + schema: + $ref: "#/components/schemas/v1beta2.ResourceClaimTemplate" + required: true + responses: + "200": + content: + application/json: + schema: + $ref: "#/components/schemas/v1beta2.ResourceClaimTemplate" + application/yaml: + schema: + $ref: "#/components/schemas/v1beta2.ResourceClaimTemplate" + application/vnd.kubernetes.protobuf: + schema: + $ref: "#/components/schemas/v1beta2.ResourceClaimTemplate" + application/cbor: + schema: + $ref: "#/components/schemas/v1beta2.ResourceClaimTemplate" + description: OK + "201": + content: + application/json: + schema: + $ref: "#/components/schemas/v1beta2.ResourceClaimTemplate" + application/yaml: + schema: + $ref: "#/components/schemas/v1beta2.ResourceClaimTemplate" + application/vnd.kubernetes.protobuf: + schema: + $ref: "#/components/schemas/v1beta2.ResourceClaimTemplate" + application/cbor: + schema: + $ref: "#/components/schemas/v1beta2.ResourceClaimTemplate" + description: Created + "401": + content: {} + description: Unauthorized + tags: + - resource_v1beta2 + x-kubernetes-action: put + x-kubernetes-group-version-kind: + group: resource.k8s.io + kind: ResourceClaimTemplate + version: v1beta2 + x-codegen-request-body-name: body + x-content-type: application/json + x-accepts: + - application/cbor + - application/json + - application/vnd.kubernetes.protobuf + - application/yaml + /apis/resource.k8s.io/v1beta2/resourceclaims: + get: + description: list or watch objects of kind ResourceClaim + operationId: listResourceClaimForAllNamespaces + parameters: + - description: "allowWatchBookmarks requests watch events with type \"BOOKMARK\"\ + . Servers that do not implement bookmarks may ignore this flag and bookmarks\ + \ are sent at the server's discretion. Clients should not assume bookmarks\ + \ are returned at any specific interval, nor may they assume the server\ + \ will send any BOOKMARK event during a session. If this is not a watch,\ + \ this field is ignored." + in: query + name: allowWatchBookmarks + schema: + type: boolean + - description: |- + The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + + This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications. + in: query + name: continue + schema: + type: string + - description: A selector to restrict the list of returned objects by their + fields. Defaults to everything. + in: query + name: fieldSelector + schema: + type: string + - description: A selector to restrict the list of returned objects by their + labels. Defaults to everything. + in: query + name: labelSelector + schema: + type: string + - description: |- + limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + + The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned. + in: query + name: limit + schema: + type: integer + - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ + \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ + \ and wget)." + in: query + name: pretty schema: type: string - description: |- @@ -89806,6 +93087,9 @@ paths: application/vnd.kubernetes.protobuf: schema: $ref: "#/components/schemas/v1.APIGroup" + application/cbor: + schema: + $ref: "#/components/schemas/v1.APIGroup" description: OK "401": content: {} @@ -89813,6 +93097,7 @@ paths: tags: - scheduling x-accepts: + - application/cbor - application/json - application/vnd.kubernetes.protobuf - application/yaml @@ -90708,7 +93993,7 @@ paths: - application/yaml /apis/scheduling.k8s.io/v1/watch/priorityclasses: {} /apis/scheduling.k8s.io/v1/watch/priorityclasses/{name}: {} - /apis/scheduling.k8s.io/v1alpha2/: + /apis/scheduling.k8s.io/v1alpha3/: get: description: get available resources operationId: getAPIResources @@ -90732,16 +94017,182 @@ paths: content: {} description: Unauthorized tags: - - scheduling_v1alpha2 + - scheduling_v1alpha3 x-accepts: - application/cbor - application/json - application/vnd.kubernetes.protobuf - application/yaml - /apis/scheduling.k8s.io/v1alpha2/namespaces/{namespace}/podgroups: + /apis/scheduling.k8s.io/v1alpha3/compositepodgroups: + get: + description: list or watch objects of kind CompositePodGroup + operationId: listCompositePodGroupForAllNamespaces + parameters: + - description: "allowWatchBookmarks requests watch events with type \"BOOKMARK\"\ + . Servers that do not implement bookmarks may ignore this flag and bookmarks\ + \ are sent at the server's discretion. Clients should not assume bookmarks\ + \ are returned at any specific interval, nor may they assume the server\ + \ will send any BOOKMARK event during a session. If this is not a watch,\ + \ this field is ignored." + in: query + name: allowWatchBookmarks + schema: + type: boolean + - description: |- + The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + + This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications. + in: query + name: continue + schema: + type: string + - description: A selector to restrict the list of returned objects by their + fields. Defaults to everything. + in: query + name: fieldSelector + schema: + type: string + - description: A selector to restrict the list of returned objects by their + labels. Defaults to everything. + in: query + name: labelSelector + schema: + type: string + - description: |- + limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + + The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned. + in: query + name: limit + schema: + type: integer + - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ + \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ + \ and wget)." + in: query + name: pretty + schema: + type: string + - description: |- + resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + + Defaults to unset + in: query + name: resourceVersion + schema: + type: string + - description: |- + resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + + Defaults to unset + in: query + name: resourceVersionMatch + schema: + type: string + - description: |- + `sendInitialEvents=true` may be set together with `watch=true`. In that case, the watch stream will begin with synthetic events to produce the current state of objects in the collection. Once all such events have been sent, a synthetic "Bookmark" event will be sent. The bookmark will report the ResourceVersion (RV) corresponding to the set of objects, and be marked with `"k8s.io/initial-events-end": "true"` annotation. Afterwards, the watch stream will proceed as usual, sending watch events corresponding to changes (subsequent to the RV) to objects watched. + + When `sendInitialEvents` option is set, we require `resourceVersionMatch` option to also be set. The semantic of the watch request is as following: - `resourceVersionMatch` = NotOlderThan + is interpreted as "data at least as new as the provided `resourceVersion`" + and the bookmark event is send when the state is synced + to a `resourceVersion` at least as fresh as the one provided by the ListOptions. + If `resourceVersion` is unset, this is interpreted as "consistent read" and the + bookmark event is send when the state is synced at least to the moment + when request started being processed. + - `resourceVersionMatch` set to any other value or unset + Invalid error is returned. + + Defaults to true if `resourceVersion=""` or `resourceVersion="0"` (for backward compatibility reasons) and to false otherwise. + in: query + name: sendInitialEvents + schema: + type: boolean + - description: |- + shardSelector restricts the list of returned objects using a CEL-based shard selector expression. The format uses the shardRange() function combined with || (logical OR) to specify one or more hash ranges: + + shardRange(object.metadata.uid, '0x0', '0x8000000000000000') + shardRange(object.metadata.uid, '0x0', '0x8000000000000000') || shardRange(object.metadata.uid, '0x8000000000000000', '0x10000000000000000') + + Field paths use CEL-style object-rooted syntax (e.g. "object.metadata.uid"), NOT the fieldSelector format ("metadata.uid"). Currently supported paths: + - object.metadata.uid + - object.metadata.namespace + + hexStart and hexEnd are single-quoted CEL string literals with a '0x' prefix, defining the inclusive lower and exclusive upper bounds over the 64-bit FNV-1a hash space. The full range is [0x0, 0x10000000000000000), where the exclusive upper bound equals 2^64. + + Examples: + 2-shard split: + shard 0: shardRange(object.metadata.uid, '0x0000000000000000', '0x8000000000000000') + shard 1: shardRange(object.metadata.uid, '0x8000000000000000', '0x10000000000000000') + 4-shard split: + shard 0: shardRange(object.metadata.uid, '0x0000000000000000', '0x4000000000000000') + shard 1: shardRange(object.metadata.uid, '0x4000000000000000', '0x8000000000000000') + shard 2: shardRange(object.metadata.uid, '0x8000000000000000', '0xc000000000000000') + shard 3: shardRange(object.metadata.uid, '0xc000000000000000', '0x10000000000000000') + + This is an alpha field and requires enabling the ShardedListAndWatch feature gate. + in: query + name: shardSelector + schema: + type: string + - description: "Timeout for the list/watch call. This limits the duration of\ + \ the call, regardless of any activity or inactivity." + in: query + name: timeoutSeconds + schema: + type: integer + - description: "Watch for changes to the described resources and return them\ + \ as a stream of add, update, and remove notifications. Specify resourceVersion." + in: query + name: watch + schema: + type: boolean + responses: + "200": + content: + application/json: + schema: + $ref: "#/components/schemas/v1alpha3.CompositePodGroupList" + application/yaml: + schema: + $ref: "#/components/schemas/v1alpha3.CompositePodGroupList" + application/vnd.kubernetes.protobuf: + schema: + $ref: "#/components/schemas/v1alpha3.CompositePodGroupList" + application/cbor: + schema: + $ref: "#/components/schemas/v1alpha3.CompositePodGroupList" + application/json;stream=watch: + schema: + $ref: "#/components/schemas/v1alpha3.CompositePodGroupList" + application/vnd.kubernetes.protobuf;stream=watch: + schema: + $ref: "#/components/schemas/v1alpha3.CompositePodGroupList" + application/cbor-seq: + schema: + $ref: "#/components/schemas/v1alpha3.CompositePodGroupList" + description: OK + "401": + content: {} + description: Unauthorized + tags: + - scheduling_v1alpha3 + x-kubernetes-action: list + x-kubernetes-group-version-kind: + group: scheduling.k8s.io + kind: CompositePodGroup + version: v1alpha3 + x-accepts: + - application/cbor + - application/cbor-seq + - application/json + - application/json;stream=watch + - application/vnd.kubernetes.protobuf + - application/vnd.kubernetes.protobuf;stream=watch + - application/yaml + /apis/scheduling.k8s.io/v1alpha3/namespaces/{namespace}/compositepodgroups: delete: - description: delete collection of PodGroup - operationId: deleteCollectionNamespacedPodGroup + description: delete collection of CompositePodGroup + operationId: deleteCollectionNamespacedCompositePodGroup parameters: - description: "object name and auth scope, such as for teams and projects" in: path @@ -90928,12 +94379,12 @@ paths: content: {} description: Unauthorized tags: - - scheduling_v1alpha2 + - scheduling_v1alpha3 x-kubernetes-action: deletecollection x-kubernetes-group-version-kind: group: scheduling.k8s.io - kind: PodGroup - version: v1alpha2 + kind: CompositePodGroup + version: v1alpha3 x-codegen-request-body-name: body x-content-type: application/json x-accepts: @@ -90942,8 +94393,8 @@ paths: - application/vnd.kubernetes.protobuf - application/yaml get: - description: list or watch objects of kind PodGroup - operationId: listNamespacedPodGroup + description: list or watch objects of kind CompositePodGroup + operationId: listNamespacedCompositePodGroup parameters: - description: "object name and auth scope, such as for teams and projects" in: path @@ -91074,36 +94525,36 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1alpha2.PodGroupList" + $ref: "#/components/schemas/v1alpha3.CompositePodGroupList" application/yaml: schema: - $ref: "#/components/schemas/v1alpha2.PodGroupList" + $ref: "#/components/schemas/v1alpha3.CompositePodGroupList" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1alpha2.PodGroupList" + $ref: "#/components/schemas/v1alpha3.CompositePodGroupList" application/cbor: schema: - $ref: "#/components/schemas/v1alpha2.PodGroupList" + $ref: "#/components/schemas/v1alpha3.CompositePodGroupList" application/json;stream=watch: schema: - $ref: "#/components/schemas/v1alpha2.PodGroupList" + $ref: "#/components/schemas/v1alpha3.CompositePodGroupList" application/vnd.kubernetes.protobuf;stream=watch: schema: - $ref: "#/components/schemas/v1alpha2.PodGroupList" + $ref: "#/components/schemas/v1alpha3.CompositePodGroupList" application/cbor-seq: schema: - $ref: "#/components/schemas/v1alpha2.PodGroupList" + $ref: "#/components/schemas/v1alpha3.CompositePodGroupList" description: OK "401": content: {} description: Unauthorized tags: - - scheduling_v1alpha2 + - scheduling_v1alpha3 x-kubernetes-action: list x-kubernetes-group-version-kind: group: scheduling.k8s.io - kind: PodGroup - version: v1alpha2 + kind: CompositePodGroup + version: v1alpha3 x-accepts: - application/cbor - application/cbor-seq @@ -91113,8 +94564,8 @@ paths: - application/vnd.kubernetes.protobuf;stream=watch - application/yaml post: - description: create a PodGroup - operationId: createNamespacedPodGroup + description: create a CompositePodGroup + operationId: createNamespacedCompositePodGroup parameters: - description: "object name and auth scope, such as for teams and projects" in: path @@ -91165,64 +94616,64 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1alpha2.PodGroup" + $ref: "#/components/schemas/v1alpha3.CompositePodGroup" required: true responses: "200": content: application/json: schema: - $ref: "#/components/schemas/v1alpha2.PodGroup" + $ref: "#/components/schemas/v1alpha3.CompositePodGroup" application/yaml: schema: - $ref: "#/components/schemas/v1alpha2.PodGroup" + $ref: "#/components/schemas/v1alpha3.CompositePodGroup" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1alpha2.PodGroup" + $ref: "#/components/schemas/v1alpha3.CompositePodGroup" application/cbor: schema: - $ref: "#/components/schemas/v1alpha2.PodGroup" + $ref: "#/components/schemas/v1alpha3.CompositePodGroup" description: OK "201": content: application/json: schema: - $ref: "#/components/schemas/v1alpha2.PodGroup" + $ref: "#/components/schemas/v1alpha3.CompositePodGroup" application/yaml: schema: - $ref: "#/components/schemas/v1alpha2.PodGroup" + $ref: "#/components/schemas/v1alpha3.CompositePodGroup" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1alpha2.PodGroup" + $ref: "#/components/schemas/v1alpha3.CompositePodGroup" application/cbor: schema: - $ref: "#/components/schemas/v1alpha2.PodGroup" + $ref: "#/components/schemas/v1alpha3.CompositePodGroup" description: Created "202": content: application/json: schema: - $ref: "#/components/schemas/v1alpha2.PodGroup" + $ref: "#/components/schemas/v1alpha3.CompositePodGroup" application/yaml: schema: - $ref: "#/components/schemas/v1alpha2.PodGroup" + $ref: "#/components/schemas/v1alpha3.CompositePodGroup" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1alpha2.PodGroup" + $ref: "#/components/schemas/v1alpha3.CompositePodGroup" application/cbor: schema: - $ref: "#/components/schemas/v1alpha2.PodGroup" + $ref: "#/components/schemas/v1alpha3.CompositePodGroup" description: Accepted "401": content: {} description: Unauthorized tags: - - scheduling_v1alpha2 + - scheduling_v1alpha3 x-kubernetes-action: post x-kubernetes-group-version-kind: group: scheduling.k8s.io - kind: PodGroup - version: v1alpha2 + kind: CompositePodGroup + version: v1alpha3 x-codegen-request-body-name: body x-content-type: application/json x-accepts: @@ -91230,12 +94681,12 @@ paths: - application/json - application/vnd.kubernetes.protobuf - application/yaml - /apis/scheduling.k8s.io/v1alpha2/namespaces/{namespace}/podgroups/{name}: + /apis/scheduling.k8s.io/v1alpha3/namespaces/{namespace}/compositepodgroups/{name}: delete: - description: delete a PodGroup - operationId: deleteNamespacedPodGroup + description: delete a CompositePodGroup + operationId: deleteNamespacedCompositePodGroup parameters: - - description: name of the PodGroup + - description: name of the CompositePodGroup in: path name: name required: true @@ -91346,12 +94797,12 @@ paths: content: {} description: Unauthorized tags: - - scheduling_v1alpha2 + - scheduling_v1alpha3 x-kubernetes-action: delete x-kubernetes-group-version-kind: group: scheduling.k8s.io - kind: PodGroup - version: v1alpha2 + kind: CompositePodGroup + version: v1alpha3 x-codegen-request-body-name: body x-content-type: application/json x-accepts: @@ -91360,10 +94811,10 @@ paths: - application/vnd.kubernetes.protobuf - application/yaml get: - description: read the specified PodGroup - operationId: readNamespacedPodGroup + description: read the specified CompositePodGroup + operationId: readNamespacedCompositePodGroup parameters: - - description: name of the PodGroup + - description: name of the CompositePodGroup in: path name: name required: true @@ -91387,37 +94838,37 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1alpha2.PodGroup" + $ref: "#/components/schemas/v1alpha3.CompositePodGroup" application/yaml: schema: - $ref: "#/components/schemas/v1alpha2.PodGroup" + $ref: "#/components/schemas/v1alpha3.CompositePodGroup" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1alpha2.PodGroup" + $ref: "#/components/schemas/v1alpha3.CompositePodGroup" application/cbor: schema: - $ref: "#/components/schemas/v1alpha2.PodGroup" + $ref: "#/components/schemas/v1alpha3.CompositePodGroup" description: OK "401": content: {} description: Unauthorized tags: - - scheduling_v1alpha2 + - scheduling_v1alpha3 x-kubernetes-action: get x-kubernetes-group-version-kind: group: scheduling.k8s.io - kind: PodGroup - version: v1alpha2 + kind: CompositePodGroup + version: v1alpha3 x-accepts: - application/cbor - application/json - application/vnd.kubernetes.protobuf - application/yaml patch: - description: partially update the specified PodGroup - operationId: patchNamespacedPodGroup + description: partially update the specified CompositePodGroup + operationId: patchNamespacedCompositePodGroup parameters: - - description: name of the PodGroup + - description: name of the CompositePodGroup in: path name: name required: true @@ -91488,42 +94939,42 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1alpha2.PodGroup" + $ref: "#/components/schemas/v1alpha3.CompositePodGroup" application/yaml: schema: - $ref: "#/components/schemas/v1alpha2.PodGroup" + $ref: "#/components/schemas/v1alpha3.CompositePodGroup" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1alpha2.PodGroup" + $ref: "#/components/schemas/v1alpha3.CompositePodGroup" application/cbor: schema: - $ref: "#/components/schemas/v1alpha2.PodGroup" + $ref: "#/components/schemas/v1alpha3.CompositePodGroup" description: OK "201": content: application/json: schema: - $ref: "#/components/schemas/v1alpha2.PodGroup" + $ref: "#/components/schemas/v1alpha3.CompositePodGroup" application/yaml: schema: - $ref: "#/components/schemas/v1alpha2.PodGroup" + $ref: "#/components/schemas/v1alpha3.CompositePodGroup" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1alpha2.PodGroup" + $ref: "#/components/schemas/v1alpha3.CompositePodGroup" application/cbor: schema: - $ref: "#/components/schemas/v1alpha2.PodGroup" + $ref: "#/components/schemas/v1alpha3.CompositePodGroup" description: Created "401": content: {} description: Unauthorized tags: - - scheduling_v1alpha2 + - scheduling_v1alpha3 x-kubernetes-action: patch x-kubernetes-group-version-kind: group: scheduling.k8s.io - kind: PodGroup - version: v1alpha2 + kind: CompositePodGroup + version: v1alpha3 x-codegen-request-body-name: body x-content-type: application/json x-accepts: @@ -91532,10 +94983,10 @@ paths: - application/vnd.kubernetes.protobuf - application/yaml put: - description: replace the specified PodGroup - operationId: replaceNamespacedPodGroup + description: replace the specified CompositePodGroup + operationId: replaceNamespacedCompositePodGroup parameters: - - description: name of the PodGroup + - description: name of the CompositePodGroup in: path name: name required: true @@ -91590,49 +95041,49 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1alpha2.PodGroup" + $ref: "#/components/schemas/v1alpha3.CompositePodGroup" required: true responses: "200": content: application/json: schema: - $ref: "#/components/schemas/v1alpha2.PodGroup" + $ref: "#/components/schemas/v1alpha3.CompositePodGroup" application/yaml: schema: - $ref: "#/components/schemas/v1alpha2.PodGroup" + $ref: "#/components/schemas/v1alpha3.CompositePodGroup" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1alpha2.PodGroup" + $ref: "#/components/schemas/v1alpha3.CompositePodGroup" application/cbor: schema: - $ref: "#/components/schemas/v1alpha2.PodGroup" + $ref: "#/components/schemas/v1alpha3.CompositePodGroup" description: OK "201": content: application/json: schema: - $ref: "#/components/schemas/v1alpha2.PodGroup" + $ref: "#/components/schemas/v1alpha3.CompositePodGroup" application/yaml: schema: - $ref: "#/components/schemas/v1alpha2.PodGroup" + $ref: "#/components/schemas/v1alpha3.CompositePodGroup" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1alpha2.PodGroup" + $ref: "#/components/schemas/v1alpha3.CompositePodGroup" application/cbor: schema: - $ref: "#/components/schemas/v1alpha2.PodGroup" + $ref: "#/components/schemas/v1alpha3.CompositePodGroup" description: Created "401": content: {} description: Unauthorized tags: - - scheduling_v1alpha2 + - scheduling_v1alpha3 x-kubernetes-action: put x-kubernetes-group-version-kind: group: scheduling.k8s.io - kind: PodGroup - version: v1alpha2 + kind: CompositePodGroup + version: v1alpha3 x-codegen-request-body-name: body x-content-type: application/json x-accepts: @@ -91640,12 +95091,12 @@ paths: - application/json - application/vnd.kubernetes.protobuf - application/yaml - /apis/scheduling.k8s.io/v1alpha2/namespaces/{namespace}/podgroups/{name}/status: + /apis/scheduling.k8s.io/v1alpha3/namespaces/{namespace}/compositepodgroups/{name}/status: get: - description: read status of the specified PodGroup - operationId: readNamespacedPodGroupStatus + description: read status of the specified CompositePodGroup + operationId: readNamespacedCompositePodGroupStatus parameters: - - description: name of the PodGroup + - description: name of the CompositePodGroup in: path name: name required: true @@ -91669,37 +95120,37 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1alpha2.PodGroup" + $ref: "#/components/schemas/v1alpha3.CompositePodGroup" application/yaml: schema: - $ref: "#/components/schemas/v1alpha2.PodGroup" + $ref: "#/components/schemas/v1alpha3.CompositePodGroup" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1alpha2.PodGroup" + $ref: "#/components/schemas/v1alpha3.CompositePodGroup" application/cbor: schema: - $ref: "#/components/schemas/v1alpha2.PodGroup" + $ref: "#/components/schemas/v1alpha3.CompositePodGroup" description: OK "401": content: {} description: Unauthorized tags: - - scheduling_v1alpha2 + - scheduling_v1alpha3 x-kubernetes-action: get x-kubernetes-group-version-kind: group: scheduling.k8s.io - kind: PodGroup - version: v1alpha2 + kind: CompositePodGroup + version: v1alpha3 x-accepts: - application/cbor - application/json - application/vnd.kubernetes.protobuf - application/yaml patch: - description: partially update status of the specified PodGroup - operationId: patchNamespacedPodGroupStatus + description: partially update status of the specified CompositePodGroup + operationId: patchNamespacedCompositePodGroupStatus parameters: - - description: name of the PodGroup + - description: name of the CompositePodGroup in: path name: name required: true @@ -91770,42 +95221,42 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1alpha2.PodGroup" + $ref: "#/components/schemas/v1alpha3.CompositePodGroup" application/yaml: schema: - $ref: "#/components/schemas/v1alpha2.PodGroup" + $ref: "#/components/schemas/v1alpha3.CompositePodGroup" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1alpha2.PodGroup" + $ref: "#/components/schemas/v1alpha3.CompositePodGroup" application/cbor: schema: - $ref: "#/components/schemas/v1alpha2.PodGroup" + $ref: "#/components/schemas/v1alpha3.CompositePodGroup" description: OK "201": content: application/json: schema: - $ref: "#/components/schemas/v1alpha2.PodGroup" + $ref: "#/components/schemas/v1alpha3.CompositePodGroup" application/yaml: schema: - $ref: "#/components/schemas/v1alpha2.PodGroup" + $ref: "#/components/schemas/v1alpha3.CompositePodGroup" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1alpha2.PodGroup" + $ref: "#/components/schemas/v1alpha3.CompositePodGroup" application/cbor: schema: - $ref: "#/components/schemas/v1alpha2.PodGroup" + $ref: "#/components/schemas/v1alpha3.CompositePodGroup" description: Created "401": content: {} description: Unauthorized tags: - - scheduling_v1alpha2 + - scheduling_v1alpha3 x-kubernetes-action: patch x-kubernetes-group-version-kind: group: scheduling.k8s.io - kind: PodGroup - version: v1alpha2 + kind: CompositePodGroup + version: v1alpha3 x-codegen-request-body-name: body x-content-type: application/json x-accepts: @@ -91814,10 +95265,10 @@ paths: - application/vnd.kubernetes.protobuf - application/yaml put: - description: replace status of the specified PodGroup - operationId: replaceNamespacedPodGroupStatus + description: replace status of the specified CompositePodGroup + operationId: replaceNamespacedCompositePodGroupStatus parameters: - - description: name of the PodGroup + - description: name of the CompositePodGroup in: path name: name required: true @@ -91872,49 +95323,49 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1alpha2.PodGroup" + $ref: "#/components/schemas/v1alpha3.CompositePodGroup" required: true responses: "200": content: application/json: schema: - $ref: "#/components/schemas/v1alpha2.PodGroup" + $ref: "#/components/schemas/v1alpha3.CompositePodGroup" application/yaml: schema: - $ref: "#/components/schemas/v1alpha2.PodGroup" + $ref: "#/components/schemas/v1alpha3.CompositePodGroup" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1alpha2.PodGroup" + $ref: "#/components/schemas/v1alpha3.CompositePodGroup" application/cbor: schema: - $ref: "#/components/schemas/v1alpha2.PodGroup" + $ref: "#/components/schemas/v1alpha3.CompositePodGroup" description: OK "201": content: application/json: schema: - $ref: "#/components/schemas/v1alpha2.PodGroup" + $ref: "#/components/schemas/v1alpha3.CompositePodGroup" application/yaml: schema: - $ref: "#/components/schemas/v1alpha2.PodGroup" + $ref: "#/components/schemas/v1alpha3.CompositePodGroup" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1alpha2.PodGroup" + $ref: "#/components/schemas/v1alpha3.CompositePodGroup" application/cbor: schema: - $ref: "#/components/schemas/v1alpha2.PodGroup" + $ref: "#/components/schemas/v1alpha3.CompositePodGroup" description: Created "401": content: {} description: Unauthorized tags: - - scheduling_v1alpha2 + - scheduling_v1alpha3 x-kubernetes-action: put x-kubernetes-group-version-kind: group: scheduling.k8s.io - kind: PodGroup - version: v1alpha2 + kind: CompositePodGroup + version: v1alpha3 x-codegen-request-body-name: body x-content-type: application/json x-accepts: @@ -91922,10 +95373,10 @@ paths: - application/json - application/vnd.kubernetes.protobuf - application/yaml - /apis/scheduling.k8s.io/v1alpha2/namespaces/{namespace}/workloads: + /apis/scheduling.k8s.io/v1alpha3/namespaces/{namespace}/podgroups: delete: - description: delete collection of Workload - operationId: deleteCollectionNamespacedWorkload + description: delete collection of PodGroup + operationId: deleteCollectionNamespacedPodGroup parameters: - description: "object name and auth scope, such as for teams and projects" in: path @@ -92112,12 +95563,12 @@ paths: content: {} description: Unauthorized tags: - - scheduling_v1alpha2 + - scheduling_v1alpha3 x-kubernetes-action: deletecollection x-kubernetes-group-version-kind: group: scheduling.k8s.io - kind: Workload - version: v1alpha2 + kind: PodGroup + version: v1alpha3 x-codegen-request-body-name: body x-content-type: application/json x-accepts: @@ -92126,8 +95577,8 @@ paths: - application/vnd.kubernetes.protobuf - application/yaml get: - description: list or watch objects of kind Workload - operationId: listNamespacedWorkload + description: list or watch objects of kind PodGroup + operationId: listNamespacedPodGroup parameters: - description: "object name and auth scope, such as for teams and projects" in: path @@ -92258,36 +95709,36 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1alpha2.WorkloadList" + $ref: "#/components/schemas/v1alpha3.PodGroupList" application/yaml: schema: - $ref: "#/components/schemas/v1alpha2.WorkloadList" + $ref: "#/components/schemas/v1alpha3.PodGroupList" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1alpha2.WorkloadList" + $ref: "#/components/schemas/v1alpha3.PodGroupList" application/cbor: schema: - $ref: "#/components/schemas/v1alpha2.WorkloadList" + $ref: "#/components/schemas/v1alpha3.PodGroupList" application/json;stream=watch: schema: - $ref: "#/components/schemas/v1alpha2.WorkloadList" + $ref: "#/components/schemas/v1alpha3.PodGroupList" application/vnd.kubernetes.protobuf;stream=watch: schema: - $ref: "#/components/schemas/v1alpha2.WorkloadList" + $ref: "#/components/schemas/v1alpha3.PodGroupList" application/cbor-seq: schema: - $ref: "#/components/schemas/v1alpha2.WorkloadList" + $ref: "#/components/schemas/v1alpha3.PodGroupList" description: OK "401": content: {} description: Unauthorized tags: - - scheduling_v1alpha2 + - scheduling_v1alpha3 x-kubernetes-action: list x-kubernetes-group-version-kind: group: scheduling.k8s.io - kind: Workload - version: v1alpha2 + kind: PodGroup + version: v1alpha3 x-accepts: - application/cbor - application/cbor-seq @@ -92297,8 +95748,8 @@ paths: - application/vnd.kubernetes.protobuf;stream=watch - application/yaml post: - description: create a Workload - operationId: createNamespacedWorkload + description: create a PodGroup + operationId: createNamespacedPodGroup parameters: - description: "object name and auth scope, such as for teams and projects" in: path @@ -92349,64 +95800,64 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1alpha2.Workload" + $ref: "#/components/schemas/v1alpha3.PodGroup" required: true responses: "200": content: application/json: schema: - $ref: "#/components/schemas/v1alpha2.Workload" + $ref: "#/components/schemas/v1alpha3.PodGroup" application/yaml: schema: - $ref: "#/components/schemas/v1alpha2.Workload" + $ref: "#/components/schemas/v1alpha3.PodGroup" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1alpha2.Workload" + $ref: "#/components/schemas/v1alpha3.PodGroup" application/cbor: schema: - $ref: "#/components/schemas/v1alpha2.Workload" + $ref: "#/components/schemas/v1alpha3.PodGroup" description: OK "201": content: application/json: schema: - $ref: "#/components/schemas/v1alpha2.Workload" + $ref: "#/components/schemas/v1alpha3.PodGroup" application/yaml: schema: - $ref: "#/components/schemas/v1alpha2.Workload" + $ref: "#/components/schemas/v1alpha3.PodGroup" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1alpha2.Workload" + $ref: "#/components/schemas/v1alpha3.PodGroup" application/cbor: schema: - $ref: "#/components/schemas/v1alpha2.Workload" + $ref: "#/components/schemas/v1alpha3.PodGroup" description: Created "202": content: application/json: schema: - $ref: "#/components/schemas/v1alpha2.Workload" + $ref: "#/components/schemas/v1alpha3.PodGroup" application/yaml: schema: - $ref: "#/components/schemas/v1alpha2.Workload" + $ref: "#/components/schemas/v1alpha3.PodGroup" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1alpha2.Workload" + $ref: "#/components/schemas/v1alpha3.PodGroup" application/cbor: schema: - $ref: "#/components/schemas/v1alpha2.Workload" + $ref: "#/components/schemas/v1alpha3.PodGroup" description: Accepted "401": content: {} description: Unauthorized tags: - - scheduling_v1alpha2 + - scheduling_v1alpha3 x-kubernetes-action: post x-kubernetes-group-version-kind: group: scheduling.k8s.io - kind: Workload - version: v1alpha2 + kind: PodGroup + version: v1alpha3 x-codegen-request-body-name: body x-content-type: application/json x-accepts: @@ -92414,12 +95865,12 @@ paths: - application/json - application/vnd.kubernetes.protobuf - application/yaml - /apis/scheduling.k8s.io/v1alpha2/namespaces/{namespace}/workloads/{name}: + /apis/scheduling.k8s.io/v1alpha3/namespaces/{namespace}/podgroups/{name}: delete: - description: delete a Workload - operationId: deleteNamespacedWorkload + description: delete a PodGroup + operationId: deleteNamespacedPodGroup parameters: - - description: name of the Workload + - description: name of the PodGroup in: path name: name required: true @@ -92530,12 +95981,12 @@ paths: content: {} description: Unauthorized tags: - - scheduling_v1alpha2 + - scheduling_v1alpha3 x-kubernetes-action: delete x-kubernetes-group-version-kind: group: scheduling.k8s.io - kind: Workload - version: v1alpha2 + kind: PodGroup + version: v1alpha3 x-codegen-request-body-name: body x-content-type: application/json x-accepts: @@ -92544,10 +95995,10 @@ paths: - application/vnd.kubernetes.protobuf - application/yaml get: - description: read the specified Workload - operationId: readNamespacedWorkload + description: read the specified PodGroup + operationId: readNamespacedPodGroup parameters: - - description: name of the Workload + - description: name of the PodGroup in: path name: name required: true @@ -92571,37 +96022,37 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1alpha2.Workload" + $ref: "#/components/schemas/v1alpha3.PodGroup" application/yaml: schema: - $ref: "#/components/schemas/v1alpha2.Workload" + $ref: "#/components/schemas/v1alpha3.PodGroup" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1alpha2.Workload" + $ref: "#/components/schemas/v1alpha3.PodGroup" application/cbor: schema: - $ref: "#/components/schemas/v1alpha2.Workload" + $ref: "#/components/schemas/v1alpha3.PodGroup" description: OK "401": content: {} description: Unauthorized tags: - - scheduling_v1alpha2 + - scheduling_v1alpha3 x-kubernetes-action: get x-kubernetes-group-version-kind: group: scheduling.k8s.io - kind: Workload - version: v1alpha2 + kind: PodGroup + version: v1alpha3 x-accepts: - application/cbor - application/json - application/vnd.kubernetes.protobuf - application/yaml patch: - description: partially update the specified Workload - operationId: patchNamespacedWorkload + description: partially update the specified PodGroup + operationId: patchNamespacedPodGroup parameters: - - description: name of the Workload + - description: name of the PodGroup in: path name: name required: true @@ -92672,42 +96123,42 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1alpha2.Workload" + $ref: "#/components/schemas/v1alpha3.PodGroup" application/yaml: schema: - $ref: "#/components/schemas/v1alpha2.Workload" + $ref: "#/components/schemas/v1alpha3.PodGroup" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1alpha2.Workload" + $ref: "#/components/schemas/v1alpha3.PodGroup" application/cbor: schema: - $ref: "#/components/schemas/v1alpha2.Workload" + $ref: "#/components/schemas/v1alpha3.PodGroup" description: OK "201": content: application/json: schema: - $ref: "#/components/schemas/v1alpha2.Workload" + $ref: "#/components/schemas/v1alpha3.PodGroup" application/yaml: schema: - $ref: "#/components/schemas/v1alpha2.Workload" + $ref: "#/components/schemas/v1alpha3.PodGroup" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1alpha2.Workload" + $ref: "#/components/schemas/v1alpha3.PodGroup" application/cbor: schema: - $ref: "#/components/schemas/v1alpha2.Workload" + $ref: "#/components/schemas/v1alpha3.PodGroup" description: Created "401": content: {} description: Unauthorized tags: - - scheduling_v1alpha2 + - scheduling_v1alpha3 x-kubernetes-action: patch x-kubernetes-group-version-kind: group: scheduling.k8s.io - kind: Workload - version: v1alpha2 + kind: PodGroup + version: v1alpha3 x-codegen-request-body-name: body x-content-type: application/json x-accepts: @@ -92716,10 +96167,10 @@ paths: - application/vnd.kubernetes.protobuf - application/yaml put: - description: replace the specified Workload - operationId: replaceNamespacedWorkload + description: replace the specified PodGroup + operationId: replaceNamespacedPodGroup parameters: - - description: name of the Workload + - description: name of the PodGroup in: path name: name required: true @@ -92774,49 +96225,49 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1alpha2.Workload" + $ref: "#/components/schemas/v1alpha3.PodGroup" required: true responses: "200": content: application/json: schema: - $ref: "#/components/schemas/v1alpha2.Workload" + $ref: "#/components/schemas/v1alpha3.PodGroup" application/yaml: schema: - $ref: "#/components/schemas/v1alpha2.Workload" + $ref: "#/components/schemas/v1alpha3.PodGroup" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1alpha2.Workload" + $ref: "#/components/schemas/v1alpha3.PodGroup" application/cbor: schema: - $ref: "#/components/schemas/v1alpha2.Workload" + $ref: "#/components/schemas/v1alpha3.PodGroup" description: OK "201": content: application/json: schema: - $ref: "#/components/schemas/v1alpha2.Workload" + $ref: "#/components/schemas/v1alpha3.PodGroup" application/yaml: schema: - $ref: "#/components/schemas/v1alpha2.Workload" + $ref: "#/components/schemas/v1alpha3.PodGroup" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1alpha2.Workload" + $ref: "#/components/schemas/v1alpha3.PodGroup" application/cbor: schema: - $ref: "#/components/schemas/v1alpha2.Workload" + $ref: "#/components/schemas/v1alpha3.PodGroup" description: Created "401": content: {} description: Unauthorized tags: - - scheduling_v1alpha2 + - scheduling_v1alpha3 x-kubernetes-action: put x-kubernetes-group-version-kind: group: scheduling.k8s.io - kind: Workload - version: v1alpha2 + kind: PodGroup + version: v1alpha3 x-codegen-request-body-name: body x-content-type: application/json x-accepts: @@ -92824,49 +96275,23 @@ paths: - application/json - application/vnd.kubernetes.protobuf - application/yaml - /apis/scheduling.k8s.io/v1alpha2/podgroups: + /apis/scheduling.k8s.io/v1alpha3/namespaces/{namespace}/podgroups/{name}/status: get: - description: list or watch objects of kind PodGroup - operationId: listPodGroupForAllNamespaces + description: read status of the specified PodGroup + operationId: readNamespacedPodGroupStatus parameters: - - description: "allowWatchBookmarks requests watch events with type \"BOOKMARK\"\ - . Servers that do not implement bookmarks may ignore this flag and bookmarks\ - \ are sent at the server's discretion. Clients should not assume bookmarks\ - \ are returned at any specific interval, nor may they assume the server\ - \ will send any BOOKMARK event during a session. If this is not a watch,\ - \ this field is ignored." - in: query - name: allowWatchBookmarks - schema: - type: boolean - - description: |- - The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". - - This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications. - in: query - name: continue - schema: - type: string - - description: A selector to restrict the list of returned objects by their - fields. Defaults to everything. - in: query - name: fieldSelector + - description: name of the PodGroup + in: path + name: name + required: true schema: type: string - - description: A selector to restrict the list of returned objects by their - labels. Defaults to everything. - in: query - name: labelSelector + - description: "object name and auth scope, such as for teams and projects" + in: path + name: namespace + required: true schema: type: string - - description: |- - limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. - - The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned. - in: query - name: limit - schema: - type: integer - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ \ and wget)." @@ -92874,171 +96299,53 @@ paths: name: pretty schema: type: string - - description: |- - resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. - - Defaults to unset - in: query - name: resourceVersion - schema: - type: string - - description: |- - resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. - - Defaults to unset - in: query - name: resourceVersionMatch - schema: - type: string - - description: |- - `sendInitialEvents=true` may be set together with `watch=true`. In that case, the watch stream will begin with synthetic events to produce the current state of objects in the collection. Once all such events have been sent, a synthetic "Bookmark" event will be sent. The bookmark will report the ResourceVersion (RV) corresponding to the set of objects, and be marked with `"k8s.io/initial-events-end": "true"` annotation. Afterwards, the watch stream will proceed as usual, sending watch events corresponding to changes (subsequent to the RV) to objects watched. - - When `sendInitialEvents` option is set, we require `resourceVersionMatch` option to also be set. The semantic of the watch request is as following: - `resourceVersionMatch` = NotOlderThan - is interpreted as "data at least as new as the provided `resourceVersion`" - and the bookmark event is send when the state is synced - to a `resourceVersion` at least as fresh as the one provided by the ListOptions. - If `resourceVersion` is unset, this is interpreted as "consistent read" and the - bookmark event is send when the state is synced at least to the moment - when request started being processed. - - `resourceVersionMatch` set to any other value or unset - Invalid error is returned. - - Defaults to true if `resourceVersion=""` or `resourceVersion="0"` (for backward compatibility reasons) and to false otherwise. - in: query - name: sendInitialEvents - schema: - type: boolean - - description: |- - shardSelector restricts the list of returned objects using a CEL-based shard selector expression. The format uses the shardRange() function combined with || (logical OR) to specify one or more hash ranges: - - shardRange(object.metadata.uid, '0x0', '0x8000000000000000') - shardRange(object.metadata.uid, '0x0', '0x8000000000000000') || shardRange(object.metadata.uid, '0x8000000000000000', '0x10000000000000000') - - Field paths use CEL-style object-rooted syntax (e.g. "object.metadata.uid"), NOT the fieldSelector format ("metadata.uid"). Currently supported paths: - - object.metadata.uid - - object.metadata.namespace - - hexStart and hexEnd are single-quoted CEL string literals with a '0x' prefix, defining the inclusive lower and exclusive upper bounds over the 64-bit FNV-1a hash space. The full range is [0x0, 0x10000000000000000), where the exclusive upper bound equals 2^64. - - Examples: - 2-shard split: - shard 0: shardRange(object.metadata.uid, '0x0000000000000000', '0x8000000000000000') - shard 1: shardRange(object.metadata.uid, '0x8000000000000000', '0x10000000000000000') - 4-shard split: - shard 0: shardRange(object.metadata.uid, '0x0000000000000000', '0x4000000000000000') - shard 1: shardRange(object.metadata.uid, '0x4000000000000000', '0x8000000000000000') - shard 2: shardRange(object.metadata.uid, '0x8000000000000000', '0xc000000000000000') - shard 3: shardRange(object.metadata.uid, '0xc000000000000000', '0x10000000000000000') - - This is an alpha field and requires enabling the ShardedListAndWatch feature gate. - in: query - name: shardSelector - schema: - type: string - - description: "Timeout for the list/watch call. This limits the duration of\ - \ the call, regardless of any activity or inactivity." - in: query - name: timeoutSeconds - schema: - type: integer - - description: "Watch for changes to the described resources and return them\ - \ as a stream of add, update, and remove notifications. Specify resourceVersion." - in: query - name: watch - schema: - type: boolean responses: "200": content: application/json: schema: - $ref: "#/components/schemas/v1alpha2.PodGroupList" + $ref: "#/components/schemas/v1alpha3.PodGroup" application/yaml: schema: - $ref: "#/components/schemas/v1alpha2.PodGroupList" + $ref: "#/components/schemas/v1alpha3.PodGroup" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1alpha2.PodGroupList" + $ref: "#/components/schemas/v1alpha3.PodGroup" application/cbor: schema: - $ref: "#/components/schemas/v1alpha2.PodGroupList" - application/json;stream=watch: - schema: - $ref: "#/components/schemas/v1alpha2.PodGroupList" - application/vnd.kubernetes.protobuf;stream=watch: - schema: - $ref: "#/components/schemas/v1alpha2.PodGroupList" - application/cbor-seq: - schema: - $ref: "#/components/schemas/v1alpha2.PodGroupList" + $ref: "#/components/schemas/v1alpha3.PodGroup" description: OK "401": content: {} description: Unauthorized tags: - - scheduling_v1alpha2 - x-kubernetes-action: list + - scheduling_v1alpha3 + x-kubernetes-action: get x-kubernetes-group-version-kind: group: scheduling.k8s.io kind: PodGroup - version: v1alpha2 + version: v1alpha3 x-accepts: - application/cbor - - application/cbor-seq - application/json - - application/json;stream=watch - application/vnd.kubernetes.protobuf - - application/vnd.kubernetes.protobuf;stream=watch - application/yaml - /apis/scheduling.k8s.io/v1alpha2/watch/namespaces/{namespace}/podgroups: {} - /apis/scheduling.k8s.io/v1alpha2/watch/namespaces/{namespace}/podgroups/{name}: {} - /apis/scheduling.k8s.io/v1alpha2/watch/namespaces/{namespace}/workloads: {} - /apis/scheduling.k8s.io/v1alpha2/watch/namespaces/{namespace}/workloads/{name}: {} - /apis/scheduling.k8s.io/v1alpha2/watch/podgroups: {} - /apis/scheduling.k8s.io/v1alpha2/watch/workloads: {} - /apis/scheduling.k8s.io/v1alpha2/workloads: - get: - description: list or watch objects of kind Workload - operationId: listWorkloadForAllNamespaces + patch: + description: partially update status of the specified PodGroup + operationId: patchNamespacedPodGroupStatus parameters: - - description: "allowWatchBookmarks requests watch events with type \"BOOKMARK\"\ - . Servers that do not implement bookmarks may ignore this flag and bookmarks\ - \ are sent at the server's discretion. Clients should not assume bookmarks\ - \ are returned at any specific interval, nor may they assume the server\ - \ will send any BOOKMARK event during a session. If this is not a watch,\ - \ this field is ignored." - in: query - name: allowWatchBookmarks - schema: - type: boolean - - description: |- - The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". - - This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications. - in: query - name: continue - schema: - type: string - - description: A selector to restrict the list of returned objects by their - fields. Defaults to everything. - in: query - name: fieldSelector + - description: name of the PodGroup + in: path + name: name + required: true schema: type: string - - description: A selector to restrict the list of returned objects by their - labels. Defaults to everything. - in: query - name: labelSelector + - description: "object name and auth scope, such as for teams and projects" + in: path + name: namespace + required: true schema: type: string - - description: |- - limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. - - The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned. - in: query - name: limit - schema: - type: integer - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ \ and wget)." @@ -93046,183 +96353,221 @@ paths: name: pretty schema: type: string - - description: |- - resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. - - Defaults to unset + - description: "When present, indicates that modifications should not be persisted.\ + \ An invalid or unrecognized dryRun directive will result in an error response\ + \ and no further processing of the request. Valid values are: - All: all\ + \ dry run stages will be processed" in: query - name: resourceVersion + name: dryRun schema: type: string - - description: |- - resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. - - Defaults to unset + - description: "fieldManager is a name associated with the actor or entity that\ + \ is making these changes. The value must be less than or 128 characters\ + \ long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.\ + \ This field is required for apply requests (application/apply-patch) but\ + \ optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch)." in: query - name: resourceVersionMatch + name: fieldManager schema: type: string - - description: |- - `sendInitialEvents=true` may be set together with `watch=true`. In that case, the watch stream will begin with synthetic events to produce the current state of objects in the collection. Once all such events have been sent, a synthetic "Bookmark" event will be sent. The bookmark will report the ResourceVersion (RV) corresponding to the set of objects, and be marked with `"k8s.io/initial-events-end": "true"` annotation. Afterwards, the watch stream will proceed as usual, sending watch events corresponding to changes (subsequent to the RV) to objects watched. - - When `sendInitialEvents` option is set, we require `resourceVersionMatch` option to also be set. The semantic of the watch request is as following: - `resourceVersionMatch` = NotOlderThan - is interpreted as "data at least as new as the provided `resourceVersion`" - and the bookmark event is send when the state is synced - to a `resourceVersion` at least as fresh as the one provided by the ListOptions. - If `resourceVersion` is unset, this is interpreted as "consistent read" and the - bookmark event is send when the state is synced at least to the moment - when request started being processed. - - `resourceVersionMatch` set to any other value or unset - Invalid error is returned. - - Defaults to true if `resourceVersion=""` or `resourceVersion="0"` (for backward compatibility reasons) and to false otherwise. - in: query - name: sendInitialEvents - schema: - type: boolean - - description: |- - shardSelector restricts the list of returned objects using a CEL-based shard selector expression. The format uses the shardRange() function combined with || (logical OR) to specify one or more hash ranges: - - shardRange(object.metadata.uid, '0x0', '0x8000000000000000') - shardRange(object.metadata.uid, '0x0', '0x8000000000000000') || shardRange(object.metadata.uid, '0x8000000000000000', '0x10000000000000000') - - Field paths use CEL-style object-rooted syntax (e.g. "object.metadata.uid"), NOT the fieldSelector format ("metadata.uid"). Currently supported paths: - - object.metadata.uid - - object.metadata.namespace - - hexStart and hexEnd are single-quoted CEL string literals with a '0x' prefix, defining the inclusive lower and exclusive upper bounds over the 64-bit FNV-1a hash space. The full range is [0x0, 0x10000000000000000), where the exclusive upper bound equals 2^64. - - Examples: - 2-shard split: - shard 0: shardRange(object.metadata.uid, '0x0000000000000000', '0x8000000000000000') - shard 1: shardRange(object.metadata.uid, '0x8000000000000000', '0x10000000000000000') - 4-shard split: - shard 0: shardRange(object.metadata.uid, '0x0000000000000000', '0x4000000000000000') - shard 1: shardRange(object.metadata.uid, '0x4000000000000000', '0x8000000000000000') - shard 2: shardRange(object.metadata.uid, '0x8000000000000000', '0xc000000000000000') - shard 3: shardRange(object.metadata.uid, '0xc000000000000000', '0x10000000000000000') - - This is an alpha field and requires enabling the ShardedListAndWatch feature gate. + - description: "fieldValidation instructs the server on how to handle objects\ + \ in the request (POST/PUT/PATCH) containing unknown or duplicate fields.\ + \ Valid values are: - Ignore: This will ignore any unknown fields that are\ + \ silently dropped from the object, and will ignore all but the last duplicate\ + \ field that the decoder encounters. This is the default behavior prior\ + \ to v1.23. - Warn: This will send a warning via the standard warning response\ + \ header for each unknown field that is dropped from the object, and for\ + \ each duplicate field that is encountered. The request will still succeed\ + \ if there are no other errors, and will only persist the last of any duplicate\ + \ fields. This is the default in v1.23+ - Strict: This will fail the request\ + \ with a BadRequest error if any unknown fields would be dropped from the\ + \ object, or if any duplicate fields are present. The error returned from\ + \ the server will contain all unknown and duplicate fields encountered." in: query - name: shardSelector + name: fieldValidation schema: type: string - - description: "Timeout for the list/watch call. This limits the duration of\ - \ the call, regardless of any activity or inactivity." - in: query - name: timeoutSeconds - schema: - type: integer - - description: "Watch for changes to the described resources and return them\ - \ as a stream of add, update, and remove notifications. Specify resourceVersion." + - description: Force is going to "force" Apply requests. It means user will + re-acquire conflicting fields owned by other people. Force flag must be + unset for non-apply patch requests. in: query - name: watch + name: force schema: type: boolean + requestBody: + content: + application/json: + schema: + $ref: "#/components/schemas/v1.Patch" + required: true responses: "200": content: application/json: schema: - $ref: "#/components/schemas/v1alpha2.WorkloadList" + $ref: "#/components/schemas/v1alpha3.PodGroup" application/yaml: schema: - $ref: "#/components/schemas/v1alpha2.WorkloadList" + $ref: "#/components/schemas/v1alpha3.PodGroup" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1alpha2.WorkloadList" + $ref: "#/components/schemas/v1alpha3.PodGroup" application/cbor: schema: - $ref: "#/components/schemas/v1alpha2.WorkloadList" - application/json;stream=watch: + $ref: "#/components/schemas/v1alpha3.PodGroup" + description: OK + "201": + content: + application/json: schema: - $ref: "#/components/schemas/v1alpha2.WorkloadList" - application/vnd.kubernetes.protobuf;stream=watch: + $ref: "#/components/schemas/v1alpha3.PodGroup" + application/yaml: schema: - $ref: "#/components/schemas/v1alpha2.WorkloadList" - application/cbor-seq: + $ref: "#/components/schemas/v1alpha3.PodGroup" + application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1alpha2.WorkloadList" - description: OK + $ref: "#/components/schemas/v1alpha3.PodGroup" + application/cbor: + schema: + $ref: "#/components/schemas/v1alpha3.PodGroup" + description: Created "401": content: {} description: Unauthorized tags: - - scheduling_v1alpha2 - x-kubernetes-action: list + - scheduling_v1alpha3 + x-kubernetes-action: patch x-kubernetes-group-version-kind: group: scheduling.k8s.io - kind: Workload - version: v1alpha2 + kind: PodGroup + version: v1alpha3 + x-codegen-request-body-name: body + x-content-type: application/json x-accepts: - application/cbor - - application/cbor-seq - application/json - - application/json;stream=watch - application/vnd.kubernetes.protobuf - - application/vnd.kubernetes.protobuf;stream=watch - application/yaml - /apis/storage.k8s.io/: - get: - description: get information of a group - operationId: getAPIGroup + put: + description: replace status of the specified PodGroup + operationId: replaceNamespacedPodGroupStatus + parameters: + - description: name of the PodGroup + in: path + name: name + required: true + schema: + type: string + - description: "object name and auth scope, such as for teams and projects" + in: path + name: namespace + required: true + schema: + type: string + - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ + \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ + \ and wget)." + in: query + name: pretty + schema: + type: string + - description: "When present, indicates that modifications should not be persisted.\ + \ An invalid or unrecognized dryRun directive will result in an error response\ + \ and no further processing of the request. Valid values are: - All: all\ + \ dry run stages will be processed" + in: query + name: dryRun + schema: + type: string + - description: "fieldManager is a name associated with the actor or entity that\ + \ is making these changes. The value must be less than or 128 characters\ + \ long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." + in: query + name: fieldManager + schema: + type: string + - description: "fieldValidation instructs the server on how to handle objects\ + \ in the request (POST/PUT/PATCH) containing unknown or duplicate fields.\ + \ Valid values are: - Ignore: This will ignore any unknown fields that are\ + \ silently dropped from the object, and will ignore all but the last duplicate\ + \ field that the decoder encounters. This is the default behavior prior\ + \ to v1.23. - Warn: This will send a warning via the standard warning response\ + \ header for each unknown field that is dropped from the object, and for\ + \ each duplicate field that is encountered. The request will still succeed\ + \ if there are no other errors, and will only persist the last of any duplicate\ + \ fields. This is the default in v1.23+ - Strict: This will fail the request\ + \ with a BadRequest error if any unknown fields would be dropped from the\ + \ object, or if any duplicate fields are present. The error returned from\ + \ the server will contain all unknown and duplicate fields encountered." + in: query + name: fieldValidation + schema: + type: string + requestBody: + content: + application/json: + schema: + $ref: "#/components/schemas/v1alpha3.PodGroup" + required: true responses: "200": content: application/json: schema: - $ref: "#/components/schemas/v1.APIGroup" + $ref: "#/components/schemas/v1alpha3.PodGroup" application/yaml: schema: - $ref: "#/components/schemas/v1.APIGroup" + $ref: "#/components/schemas/v1alpha3.PodGroup" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1.APIGroup" + $ref: "#/components/schemas/v1alpha3.PodGroup" + application/cbor: + schema: + $ref: "#/components/schemas/v1alpha3.PodGroup" description: OK - "401": - content: {} - description: Unauthorized - tags: - - storage - x-accepts: - - application/json - - application/vnd.kubernetes.protobuf - - application/yaml - /apis/storage.k8s.io/v1/: - get: - description: get available resources - operationId: getAPIResources - responses: - "200": + "201": content: application/json: schema: - $ref: "#/components/schemas/v1.APIResourceList" + $ref: "#/components/schemas/v1alpha3.PodGroup" application/yaml: schema: - $ref: "#/components/schemas/v1.APIResourceList" + $ref: "#/components/schemas/v1alpha3.PodGroup" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1.APIResourceList" + $ref: "#/components/schemas/v1alpha3.PodGroup" application/cbor: schema: - $ref: "#/components/schemas/v1.APIResourceList" - description: OK + $ref: "#/components/schemas/v1alpha3.PodGroup" + description: Created "401": content: {} description: Unauthorized tags: - - storage_v1 + - scheduling_v1alpha3 + x-kubernetes-action: put + x-kubernetes-group-version-kind: + group: scheduling.k8s.io + kind: PodGroup + version: v1alpha3 + x-codegen-request-body-name: body + x-content-type: application/json x-accepts: - application/cbor - application/json - application/vnd.kubernetes.protobuf - application/yaml - /apis/storage.k8s.io/v1/csidrivers: + /apis/scheduling.k8s.io/v1alpha3/namespaces/{namespace}/workloads: delete: - description: delete collection of CSIDriver - operationId: deleteCollectionCSIDriver + description: delete collection of Workload + operationId: deleteCollectionNamespacedWorkload parameters: + - description: "object name and auth scope, such as for teams and projects" + in: path + name: namespace + required: true + schema: + type: string - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ \ and wget)." @@ -93402,12 +96747,12 @@ paths: content: {} description: Unauthorized tags: - - storage_v1 + - scheduling_v1alpha3 x-kubernetes-action: deletecollection x-kubernetes-group-version-kind: - group: storage.k8s.io - kind: CSIDriver - version: v1 + group: scheduling.k8s.io + kind: Workload + version: v1alpha3 x-codegen-request-body-name: body x-content-type: application/json x-accepts: @@ -93416,9 +96761,15 @@ paths: - application/vnd.kubernetes.protobuf - application/yaml get: - description: list or watch objects of kind CSIDriver - operationId: listCSIDriver + description: list or watch objects of kind Workload + operationId: listNamespacedWorkload parameters: + - description: "object name and auth scope, such as for teams and projects" + in: path + name: namespace + required: true + schema: + type: string - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ \ and wget)." @@ -93542,36 +96893,36 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1.CSIDriverList" + $ref: "#/components/schemas/v1alpha3.WorkloadList" application/yaml: schema: - $ref: "#/components/schemas/v1.CSIDriverList" + $ref: "#/components/schemas/v1alpha3.WorkloadList" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1.CSIDriverList" + $ref: "#/components/schemas/v1alpha3.WorkloadList" application/cbor: schema: - $ref: "#/components/schemas/v1.CSIDriverList" + $ref: "#/components/schemas/v1alpha3.WorkloadList" application/json;stream=watch: schema: - $ref: "#/components/schemas/v1.CSIDriverList" + $ref: "#/components/schemas/v1alpha3.WorkloadList" application/vnd.kubernetes.protobuf;stream=watch: schema: - $ref: "#/components/schemas/v1.CSIDriverList" + $ref: "#/components/schemas/v1alpha3.WorkloadList" application/cbor-seq: schema: - $ref: "#/components/schemas/v1.CSIDriverList" + $ref: "#/components/schemas/v1alpha3.WorkloadList" description: OK "401": content: {} description: Unauthorized tags: - - storage_v1 + - scheduling_v1alpha3 x-kubernetes-action: list x-kubernetes-group-version-kind: - group: storage.k8s.io - kind: CSIDriver - version: v1 + group: scheduling.k8s.io + kind: Workload + version: v1alpha3 x-accepts: - application/cbor - application/cbor-seq @@ -93581,9 +96932,15 @@ paths: - application/vnd.kubernetes.protobuf;stream=watch - application/yaml post: - description: create a CSIDriver - operationId: createCSIDriver + description: create a Workload + operationId: createNamespacedWorkload parameters: + - description: "object name and auth scope, such as for teams and projects" + in: path + name: namespace + required: true + schema: + type: string - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ \ and wget)." @@ -93627,64 +96984,64 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1.CSIDriver" + $ref: "#/components/schemas/v1alpha3.Workload" required: true responses: "200": content: application/json: schema: - $ref: "#/components/schemas/v1.CSIDriver" + $ref: "#/components/schemas/v1alpha3.Workload" application/yaml: schema: - $ref: "#/components/schemas/v1.CSIDriver" + $ref: "#/components/schemas/v1alpha3.Workload" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1.CSIDriver" + $ref: "#/components/schemas/v1alpha3.Workload" application/cbor: schema: - $ref: "#/components/schemas/v1.CSIDriver" + $ref: "#/components/schemas/v1alpha3.Workload" description: OK "201": content: application/json: schema: - $ref: "#/components/schemas/v1.CSIDriver" + $ref: "#/components/schemas/v1alpha3.Workload" application/yaml: schema: - $ref: "#/components/schemas/v1.CSIDriver" + $ref: "#/components/schemas/v1alpha3.Workload" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1.CSIDriver" + $ref: "#/components/schemas/v1alpha3.Workload" application/cbor: schema: - $ref: "#/components/schemas/v1.CSIDriver" + $ref: "#/components/schemas/v1alpha3.Workload" description: Created "202": content: application/json: schema: - $ref: "#/components/schemas/v1.CSIDriver" + $ref: "#/components/schemas/v1alpha3.Workload" application/yaml: schema: - $ref: "#/components/schemas/v1.CSIDriver" + $ref: "#/components/schemas/v1alpha3.Workload" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1.CSIDriver" + $ref: "#/components/schemas/v1alpha3.Workload" application/cbor: schema: - $ref: "#/components/schemas/v1.CSIDriver" + $ref: "#/components/schemas/v1alpha3.Workload" description: Accepted "401": content: {} description: Unauthorized tags: - - storage_v1 + - scheduling_v1alpha3 x-kubernetes-action: post x-kubernetes-group-version-kind: - group: storage.k8s.io - kind: CSIDriver - version: v1 + group: scheduling.k8s.io + kind: Workload + version: v1alpha3 x-codegen-request-body-name: body x-content-type: application/json x-accepts: @@ -93692,17 +97049,23 @@ paths: - application/json - application/vnd.kubernetes.protobuf - application/yaml - /apis/storage.k8s.io/v1/csidrivers/{name}: + /apis/scheduling.k8s.io/v1alpha3/namespaces/{namespace}/workloads/{name}: delete: - description: delete a CSIDriver - operationId: deleteCSIDriver + description: delete a Workload + operationId: deleteNamespacedWorkload parameters: - - description: name of the CSIDriver + - description: name of the Workload in: path name: name required: true schema: type: string + - description: "object name and auth scope, such as for teams and projects" + in: path + name: namespace + required: true + schema: + type: string - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ \ and wget)." @@ -93772,42 +97135,42 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1.CSIDriver" + $ref: "#/components/schemas/v1.Status" application/yaml: schema: - $ref: "#/components/schemas/v1.CSIDriver" + $ref: "#/components/schemas/v1.Status" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1.CSIDriver" + $ref: "#/components/schemas/v1.Status" application/cbor: schema: - $ref: "#/components/schemas/v1.CSIDriver" + $ref: "#/components/schemas/v1.Status" description: OK "202": content: application/json: schema: - $ref: "#/components/schemas/v1.CSIDriver" + $ref: "#/components/schemas/v1.Status" application/yaml: schema: - $ref: "#/components/schemas/v1.CSIDriver" + $ref: "#/components/schemas/v1.Status" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1.CSIDriver" + $ref: "#/components/schemas/v1.Status" application/cbor: schema: - $ref: "#/components/schemas/v1.CSIDriver" + $ref: "#/components/schemas/v1.Status" description: Accepted "401": content: {} description: Unauthorized tags: - - storage_v1 + - scheduling_v1alpha3 x-kubernetes-action: delete x-kubernetes-group-version-kind: - group: storage.k8s.io - kind: CSIDriver - version: v1 + group: scheduling.k8s.io + kind: Workload + version: v1alpha3 x-codegen-request-body-name: body x-content-type: application/json x-accepts: @@ -93816,15 +97179,21 @@ paths: - application/vnd.kubernetes.protobuf - application/yaml get: - description: read the specified CSIDriver - operationId: readCSIDriver + description: read the specified Workload + operationId: readNamespacedWorkload parameters: - - description: name of the CSIDriver + - description: name of the Workload in: path name: name required: true schema: type: string + - description: "object name and auth scope, such as for teams and projects" + in: path + name: namespace + required: true + schema: + type: string - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ \ and wget)." @@ -93837,42 +97206,48 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1.CSIDriver" + $ref: "#/components/schemas/v1alpha3.Workload" application/yaml: schema: - $ref: "#/components/schemas/v1.CSIDriver" + $ref: "#/components/schemas/v1alpha3.Workload" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1.CSIDriver" + $ref: "#/components/schemas/v1alpha3.Workload" application/cbor: schema: - $ref: "#/components/schemas/v1.CSIDriver" + $ref: "#/components/schemas/v1alpha3.Workload" description: OK "401": content: {} description: Unauthorized tags: - - storage_v1 + - scheduling_v1alpha3 x-kubernetes-action: get x-kubernetes-group-version-kind: - group: storage.k8s.io - kind: CSIDriver - version: v1 + group: scheduling.k8s.io + kind: Workload + version: v1alpha3 x-accepts: - application/cbor - application/json - application/vnd.kubernetes.protobuf - application/yaml patch: - description: partially update the specified CSIDriver - operationId: patchCSIDriver + description: partially update the specified Workload + operationId: patchNamespacedWorkload parameters: - - description: name of the CSIDriver + - description: name of the Workload in: path name: name required: true schema: type: string + - description: "object name and auth scope, such as for teams and projects" + in: path + name: namespace + required: true + schema: + type: string - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ \ and wget)." @@ -93932,42 +97307,42 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1.CSIDriver" + $ref: "#/components/schemas/v1alpha3.Workload" application/yaml: schema: - $ref: "#/components/schemas/v1.CSIDriver" + $ref: "#/components/schemas/v1alpha3.Workload" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1.CSIDriver" + $ref: "#/components/schemas/v1alpha3.Workload" application/cbor: schema: - $ref: "#/components/schemas/v1.CSIDriver" + $ref: "#/components/schemas/v1alpha3.Workload" description: OK "201": content: application/json: schema: - $ref: "#/components/schemas/v1.CSIDriver" + $ref: "#/components/schemas/v1alpha3.Workload" application/yaml: schema: - $ref: "#/components/schemas/v1.CSIDriver" + $ref: "#/components/schemas/v1alpha3.Workload" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1.CSIDriver" + $ref: "#/components/schemas/v1alpha3.Workload" application/cbor: schema: - $ref: "#/components/schemas/v1.CSIDriver" + $ref: "#/components/schemas/v1alpha3.Workload" description: Created "401": content: {} description: Unauthorized tags: - - storage_v1 + - scheduling_v1alpha3 x-kubernetes-action: patch x-kubernetes-group-version-kind: - group: storage.k8s.io - kind: CSIDriver - version: v1 + group: scheduling.k8s.io + kind: Workload + version: v1alpha3 x-codegen-request-body-name: body x-content-type: application/json x-accepts: @@ -93976,15 +97351,21 @@ paths: - application/vnd.kubernetes.protobuf - application/yaml put: - description: replace the specified CSIDriver - operationId: replaceCSIDriver + description: replace the specified Workload + operationId: replaceNamespacedWorkload parameters: - - description: name of the CSIDriver + - description: name of the Workload in: path name: name required: true schema: type: string + - description: "object name and auth scope, such as for teams and projects" + in: path + name: namespace + required: true + schema: + type: string - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ \ and wget)." @@ -94028,49 +97409,49 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1.CSIDriver" + $ref: "#/components/schemas/v1alpha3.Workload" required: true responses: "200": content: application/json: schema: - $ref: "#/components/schemas/v1.CSIDriver" + $ref: "#/components/schemas/v1alpha3.Workload" application/yaml: schema: - $ref: "#/components/schemas/v1.CSIDriver" + $ref: "#/components/schemas/v1alpha3.Workload" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1.CSIDriver" + $ref: "#/components/schemas/v1alpha3.Workload" application/cbor: schema: - $ref: "#/components/schemas/v1.CSIDriver" + $ref: "#/components/schemas/v1alpha3.Workload" description: OK "201": content: application/json: schema: - $ref: "#/components/schemas/v1.CSIDriver" + $ref: "#/components/schemas/v1alpha3.Workload" application/yaml: schema: - $ref: "#/components/schemas/v1.CSIDriver" + $ref: "#/components/schemas/v1alpha3.Workload" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1.CSIDriver" + $ref: "#/components/schemas/v1alpha3.Workload" application/cbor: schema: - $ref: "#/components/schemas/v1.CSIDriver" + $ref: "#/components/schemas/v1alpha3.Workload" description: Created "401": content: {} description: Unauthorized tags: - - storage_v1 + - scheduling_v1alpha3 x-kubernetes-action: put x-kubernetes-group-version-kind: - group: storage.k8s.io - kind: CSIDriver - version: v1 + group: scheduling.k8s.io + kind: Workload + version: v1alpha3 x-codegen-request-body-name: body x-content-type: application/json x-accepts: @@ -94078,11 +97459,388 @@ paths: - application/json - application/vnd.kubernetes.protobuf - application/yaml - /apis/storage.k8s.io/v1/csinodes: + /apis/scheduling.k8s.io/v1alpha3/podgroups: + get: + description: list or watch objects of kind PodGroup + operationId: listPodGroupForAllNamespaces + parameters: + - description: "allowWatchBookmarks requests watch events with type \"BOOKMARK\"\ + . Servers that do not implement bookmarks may ignore this flag and bookmarks\ + \ are sent at the server's discretion. Clients should not assume bookmarks\ + \ are returned at any specific interval, nor may they assume the server\ + \ will send any BOOKMARK event during a session. If this is not a watch,\ + \ this field is ignored." + in: query + name: allowWatchBookmarks + schema: + type: boolean + - description: |- + The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + + This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications. + in: query + name: continue + schema: + type: string + - description: A selector to restrict the list of returned objects by their + fields. Defaults to everything. + in: query + name: fieldSelector + schema: + type: string + - description: A selector to restrict the list of returned objects by their + labels. Defaults to everything. + in: query + name: labelSelector + schema: + type: string + - description: |- + limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + + The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned. + in: query + name: limit + schema: + type: integer + - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ + \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ + \ and wget)." + in: query + name: pretty + schema: + type: string + - description: |- + resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + + Defaults to unset + in: query + name: resourceVersion + schema: + type: string + - description: |- + resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + + Defaults to unset + in: query + name: resourceVersionMatch + schema: + type: string + - description: |- + `sendInitialEvents=true` may be set together with `watch=true`. In that case, the watch stream will begin with synthetic events to produce the current state of objects in the collection. Once all such events have been sent, a synthetic "Bookmark" event will be sent. The bookmark will report the ResourceVersion (RV) corresponding to the set of objects, and be marked with `"k8s.io/initial-events-end": "true"` annotation. Afterwards, the watch stream will proceed as usual, sending watch events corresponding to changes (subsequent to the RV) to objects watched. + + When `sendInitialEvents` option is set, we require `resourceVersionMatch` option to also be set. The semantic of the watch request is as following: - `resourceVersionMatch` = NotOlderThan + is interpreted as "data at least as new as the provided `resourceVersion`" + and the bookmark event is send when the state is synced + to a `resourceVersion` at least as fresh as the one provided by the ListOptions. + If `resourceVersion` is unset, this is interpreted as "consistent read" and the + bookmark event is send when the state is synced at least to the moment + when request started being processed. + - `resourceVersionMatch` set to any other value or unset + Invalid error is returned. + + Defaults to true if `resourceVersion=""` or `resourceVersion="0"` (for backward compatibility reasons) and to false otherwise. + in: query + name: sendInitialEvents + schema: + type: boolean + - description: |- + shardSelector restricts the list of returned objects using a CEL-based shard selector expression. The format uses the shardRange() function combined with || (logical OR) to specify one or more hash ranges: + + shardRange(object.metadata.uid, '0x0', '0x8000000000000000') + shardRange(object.metadata.uid, '0x0', '0x8000000000000000') || shardRange(object.metadata.uid, '0x8000000000000000', '0x10000000000000000') + + Field paths use CEL-style object-rooted syntax (e.g. "object.metadata.uid"), NOT the fieldSelector format ("metadata.uid"). Currently supported paths: + - object.metadata.uid + - object.metadata.namespace + + hexStart and hexEnd are single-quoted CEL string literals with a '0x' prefix, defining the inclusive lower and exclusive upper bounds over the 64-bit FNV-1a hash space. The full range is [0x0, 0x10000000000000000), where the exclusive upper bound equals 2^64. + + Examples: + 2-shard split: + shard 0: shardRange(object.metadata.uid, '0x0000000000000000', '0x8000000000000000') + shard 1: shardRange(object.metadata.uid, '0x8000000000000000', '0x10000000000000000') + 4-shard split: + shard 0: shardRange(object.metadata.uid, '0x0000000000000000', '0x4000000000000000') + shard 1: shardRange(object.metadata.uid, '0x4000000000000000', '0x8000000000000000') + shard 2: shardRange(object.metadata.uid, '0x8000000000000000', '0xc000000000000000') + shard 3: shardRange(object.metadata.uid, '0xc000000000000000', '0x10000000000000000') + + This is an alpha field and requires enabling the ShardedListAndWatch feature gate. + in: query + name: shardSelector + schema: + type: string + - description: "Timeout for the list/watch call. This limits the duration of\ + \ the call, regardless of any activity or inactivity." + in: query + name: timeoutSeconds + schema: + type: integer + - description: "Watch for changes to the described resources and return them\ + \ as a stream of add, update, and remove notifications. Specify resourceVersion." + in: query + name: watch + schema: + type: boolean + responses: + "200": + content: + application/json: + schema: + $ref: "#/components/schemas/v1alpha3.PodGroupList" + application/yaml: + schema: + $ref: "#/components/schemas/v1alpha3.PodGroupList" + application/vnd.kubernetes.protobuf: + schema: + $ref: "#/components/schemas/v1alpha3.PodGroupList" + application/cbor: + schema: + $ref: "#/components/schemas/v1alpha3.PodGroupList" + application/json;stream=watch: + schema: + $ref: "#/components/schemas/v1alpha3.PodGroupList" + application/vnd.kubernetes.protobuf;stream=watch: + schema: + $ref: "#/components/schemas/v1alpha3.PodGroupList" + application/cbor-seq: + schema: + $ref: "#/components/schemas/v1alpha3.PodGroupList" + description: OK + "401": + content: {} + description: Unauthorized + tags: + - scheduling_v1alpha3 + x-kubernetes-action: list + x-kubernetes-group-version-kind: + group: scheduling.k8s.io + kind: PodGroup + version: v1alpha3 + x-accepts: + - application/cbor + - application/cbor-seq + - application/json + - application/json;stream=watch + - application/vnd.kubernetes.protobuf + - application/vnd.kubernetes.protobuf;stream=watch + - application/yaml + /apis/scheduling.k8s.io/v1alpha3/watch/compositepodgroups: {} + /apis/scheduling.k8s.io/v1alpha3/watch/namespaces/{namespace}/compositepodgroups: {} + /apis/scheduling.k8s.io/v1alpha3/watch/namespaces/{namespace}/compositepodgroups/{name}: {} + /apis/scheduling.k8s.io/v1alpha3/watch/namespaces/{namespace}/podgroups: {} + /apis/scheduling.k8s.io/v1alpha3/watch/namespaces/{namespace}/podgroups/{name}: {} + /apis/scheduling.k8s.io/v1alpha3/watch/namespaces/{namespace}/workloads: {} + /apis/scheduling.k8s.io/v1alpha3/watch/namespaces/{namespace}/workloads/{name}: {} + /apis/scheduling.k8s.io/v1alpha3/watch/podgroups: {} + /apis/scheduling.k8s.io/v1alpha3/watch/workloads: {} + /apis/scheduling.k8s.io/v1alpha3/workloads: + get: + description: list or watch objects of kind Workload + operationId: listWorkloadForAllNamespaces + parameters: + - description: "allowWatchBookmarks requests watch events with type \"BOOKMARK\"\ + . Servers that do not implement bookmarks may ignore this flag and bookmarks\ + \ are sent at the server's discretion. Clients should not assume bookmarks\ + \ are returned at any specific interval, nor may they assume the server\ + \ will send any BOOKMARK event during a session. If this is not a watch,\ + \ this field is ignored." + in: query + name: allowWatchBookmarks + schema: + type: boolean + - description: |- + The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + + This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications. + in: query + name: continue + schema: + type: string + - description: A selector to restrict the list of returned objects by their + fields. Defaults to everything. + in: query + name: fieldSelector + schema: + type: string + - description: A selector to restrict the list of returned objects by their + labels. Defaults to everything. + in: query + name: labelSelector + schema: + type: string + - description: |- + limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + + The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned. + in: query + name: limit + schema: + type: integer + - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ + \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ + \ and wget)." + in: query + name: pretty + schema: + type: string + - description: |- + resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + + Defaults to unset + in: query + name: resourceVersion + schema: + type: string + - description: |- + resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + + Defaults to unset + in: query + name: resourceVersionMatch + schema: + type: string + - description: |- + `sendInitialEvents=true` may be set together with `watch=true`. In that case, the watch stream will begin with synthetic events to produce the current state of objects in the collection. Once all such events have been sent, a synthetic "Bookmark" event will be sent. The bookmark will report the ResourceVersion (RV) corresponding to the set of objects, and be marked with `"k8s.io/initial-events-end": "true"` annotation. Afterwards, the watch stream will proceed as usual, sending watch events corresponding to changes (subsequent to the RV) to objects watched. + + When `sendInitialEvents` option is set, we require `resourceVersionMatch` option to also be set. The semantic of the watch request is as following: - `resourceVersionMatch` = NotOlderThan + is interpreted as "data at least as new as the provided `resourceVersion`" + and the bookmark event is send when the state is synced + to a `resourceVersion` at least as fresh as the one provided by the ListOptions. + If `resourceVersion` is unset, this is interpreted as "consistent read" and the + bookmark event is send when the state is synced at least to the moment + when request started being processed. + - `resourceVersionMatch` set to any other value or unset + Invalid error is returned. + + Defaults to true if `resourceVersion=""` or `resourceVersion="0"` (for backward compatibility reasons) and to false otherwise. + in: query + name: sendInitialEvents + schema: + type: boolean + - description: |- + shardSelector restricts the list of returned objects using a CEL-based shard selector expression. The format uses the shardRange() function combined with || (logical OR) to specify one or more hash ranges: + + shardRange(object.metadata.uid, '0x0', '0x8000000000000000') + shardRange(object.metadata.uid, '0x0', '0x8000000000000000') || shardRange(object.metadata.uid, '0x8000000000000000', '0x10000000000000000') + + Field paths use CEL-style object-rooted syntax (e.g. "object.metadata.uid"), NOT the fieldSelector format ("metadata.uid"). Currently supported paths: + - object.metadata.uid + - object.metadata.namespace + + hexStart and hexEnd are single-quoted CEL string literals with a '0x' prefix, defining the inclusive lower and exclusive upper bounds over the 64-bit FNV-1a hash space. The full range is [0x0, 0x10000000000000000), where the exclusive upper bound equals 2^64. + + Examples: + 2-shard split: + shard 0: shardRange(object.metadata.uid, '0x0000000000000000', '0x8000000000000000') + shard 1: shardRange(object.metadata.uid, '0x8000000000000000', '0x10000000000000000') + 4-shard split: + shard 0: shardRange(object.metadata.uid, '0x0000000000000000', '0x4000000000000000') + shard 1: shardRange(object.metadata.uid, '0x4000000000000000', '0x8000000000000000') + shard 2: shardRange(object.metadata.uid, '0x8000000000000000', '0xc000000000000000') + shard 3: shardRange(object.metadata.uid, '0xc000000000000000', '0x10000000000000000') + + This is an alpha field and requires enabling the ShardedListAndWatch feature gate. + in: query + name: shardSelector + schema: + type: string + - description: "Timeout for the list/watch call. This limits the duration of\ + \ the call, regardless of any activity or inactivity." + in: query + name: timeoutSeconds + schema: + type: integer + - description: "Watch for changes to the described resources and return them\ + \ as a stream of add, update, and remove notifications. Specify resourceVersion." + in: query + name: watch + schema: + type: boolean + responses: + "200": + content: + application/json: + schema: + $ref: "#/components/schemas/v1alpha3.WorkloadList" + application/yaml: + schema: + $ref: "#/components/schemas/v1alpha3.WorkloadList" + application/vnd.kubernetes.protobuf: + schema: + $ref: "#/components/schemas/v1alpha3.WorkloadList" + application/cbor: + schema: + $ref: "#/components/schemas/v1alpha3.WorkloadList" + application/json;stream=watch: + schema: + $ref: "#/components/schemas/v1alpha3.WorkloadList" + application/vnd.kubernetes.protobuf;stream=watch: + schema: + $ref: "#/components/schemas/v1alpha3.WorkloadList" + application/cbor-seq: + schema: + $ref: "#/components/schemas/v1alpha3.WorkloadList" + description: OK + "401": + content: {} + description: Unauthorized + tags: + - scheduling_v1alpha3 + x-kubernetes-action: list + x-kubernetes-group-version-kind: + group: scheduling.k8s.io + kind: Workload + version: v1alpha3 + x-accepts: + - application/cbor + - application/cbor-seq + - application/json + - application/json;stream=watch + - application/vnd.kubernetes.protobuf + - application/vnd.kubernetes.protobuf;stream=watch + - application/yaml + /apis/scheduling.k8s.io/v1beta1/: + get: + description: get available resources + operationId: getAPIResources + responses: + "200": + content: + application/json: + schema: + $ref: "#/components/schemas/v1.APIResourceList" + application/yaml: + schema: + $ref: "#/components/schemas/v1.APIResourceList" + application/vnd.kubernetes.protobuf: + schema: + $ref: "#/components/schemas/v1.APIResourceList" + application/cbor: + schema: + $ref: "#/components/schemas/v1.APIResourceList" + description: OK + "401": + content: {} + description: Unauthorized + tags: + - scheduling_v1beta1 + x-accepts: + - application/cbor + - application/json + - application/vnd.kubernetes.protobuf + - application/yaml + /apis/scheduling.k8s.io/v1beta1/namespaces/{namespace}/podgroups: delete: - description: delete collection of CSINode - operationId: deleteCollectionCSINode + description: delete collection of PodGroup + operationId: deleteCollectionNamespacedPodGroup parameters: + - description: "object name and auth scope, such as for teams and projects" + in: path + name: namespace + required: true + schema: + type: string - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ \ and wget)." @@ -94262,12 +98020,12 @@ paths: content: {} description: Unauthorized tags: - - storage_v1 + - scheduling_v1beta1 x-kubernetes-action: deletecollection x-kubernetes-group-version-kind: - group: storage.k8s.io - kind: CSINode - version: v1 + group: scheduling.k8s.io + kind: PodGroup + version: v1beta1 x-codegen-request-body-name: body x-content-type: application/json x-accepts: @@ -94276,9 +98034,15 @@ paths: - application/vnd.kubernetes.protobuf - application/yaml get: - description: list or watch objects of kind CSINode - operationId: listCSINode + description: list or watch objects of kind PodGroup + operationId: listNamespacedPodGroup parameters: + - description: "object name and auth scope, such as for teams and projects" + in: path + name: namespace + required: true + schema: + type: string - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ \ and wget)." @@ -94402,36 +98166,36 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1.CSINodeList" + $ref: "#/components/schemas/v1beta1.PodGroupList" application/yaml: schema: - $ref: "#/components/schemas/v1.CSINodeList" + $ref: "#/components/schemas/v1beta1.PodGroupList" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1.CSINodeList" + $ref: "#/components/schemas/v1beta1.PodGroupList" application/cbor: schema: - $ref: "#/components/schemas/v1.CSINodeList" + $ref: "#/components/schemas/v1beta1.PodGroupList" application/json;stream=watch: schema: - $ref: "#/components/schemas/v1.CSINodeList" + $ref: "#/components/schemas/v1beta1.PodGroupList" application/vnd.kubernetes.protobuf;stream=watch: schema: - $ref: "#/components/schemas/v1.CSINodeList" + $ref: "#/components/schemas/v1beta1.PodGroupList" application/cbor-seq: schema: - $ref: "#/components/schemas/v1.CSINodeList" + $ref: "#/components/schemas/v1beta1.PodGroupList" description: OK "401": content: {} description: Unauthorized tags: - - storage_v1 + - scheduling_v1beta1 x-kubernetes-action: list x-kubernetes-group-version-kind: - group: storage.k8s.io - kind: CSINode - version: v1 + group: scheduling.k8s.io + kind: PodGroup + version: v1beta1 x-accepts: - application/cbor - application/cbor-seq @@ -94441,9 +98205,15 @@ paths: - application/vnd.kubernetes.protobuf;stream=watch - application/yaml post: - description: create a CSINode - operationId: createCSINode + description: create a PodGroup + operationId: createNamespacedPodGroup parameters: + - description: "object name and auth scope, such as for teams and projects" + in: path + name: namespace + required: true + schema: + type: string - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ \ and wget)." @@ -94487,64 +98257,64 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1.CSINode" + $ref: "#/components/schemas/v1beta1.PodGroup" required: true responses: "200": content: application/json: schema: - $ref: "#/components/schemas/v1.CSINode" + $ref: "#/components/schemas/v1beta1.PodGroup" application/yaml: schema: - $ref: "#/components/schemas/v1.CSINode" + $ref: "#/components/schemas/v1beta1.PodGroup" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1.CSINode" + $ref: "#/components/schemas/v1beta1.PodGroup" application/cbor: schema: - $ref: "#/components/schemas/v1.CSINode" + $ref: "#/components/schemas/v1beta1.PodGroup" description: OK "201": content: application/json: schema: - $ref: "#/components/schemas/v1.CSINode" + $ref: "#/components/schemas/v1beta1.PodGroup" application/yaml: schema: - $ref: "#/components/schemas/v1.CSINode" + $ref: "#/components/schemas/v1beta1.PodGroup" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1.CSINode" + $ref: "#/components/schemas/v1beta1.PodGroup" application/cbor: schema: - $ref: "#/components/schemas/v1.CSINode" + $ref: "#/components/schemas/v1beta1.PodGroup" description: Created "202": content: application/json: schema: - $ref: "#/components/schemas/v1.CSINode" + $ref: "#/components/schemas/v1beta1.PodGroup" application/yaml: schema: - $ref: "#/components/schemas/v1.CSINode" + $ref: "#/components/schemas/v1beta1.PodGroup" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1.CSINode" + $ref: "#/components/schemas/v1beta1.PodGroup" application/cbor: schema: - $ref: "#/components/schemas/v1.CSINode" + $ref: "#/components/schemas/v1beta1.PodGroup" description: Accepted "401": content: {} description: Unauthorized tags: - - storage_v1 + - scheduling_v1beta1 x-kubernetes-action: post x-kubernetes-group-version-kind: - group: storage.k8s.io - kind: CSINode - version: v1 + group: scheduling.k8s.io + kind: PodGroup + version: v1beta1 x-codegen-request-body-name: body x-content-type: application/json x-accepts: @@ -94552,17 +98322,23 @@ paths: - application/json - application/vnd.kubernetes.protobuf - application/yaml - /apis/storage.k8s.io/v1/csinodes/{name}: + /apis/scheduling.k8s.io/v1beta1/namespaces/{namespace}/podgroups/{name}: delete: - description: delete a CSINode - operationId: deleteCSINode + description: delete a PodGroup + operationId: deleteNamespacedPodGroup parameters: - - description: name of the CSINode + - description: name of the PodGroup in: path name: name required: true schema: type: string + - description: "object name and auth scope, such as for teams and projects" + in: path + name: namespace + required: true + schema: + type: string - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ \ and wget)." @@ -94632,42 +98408,42 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1.CSINode" + $ref: "#/components/schemas/v1.Status" application/yaml: schema: - $ref: "#/components/schemas/v1.CSINode" + $ref: "#/components/schemas/v1.Status" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1.CSINode" + $ref: "#/components/schemas/v1.Status" application/cbor: schema: - $ref: "#/components/schemas/v1.CSINode" + $ref: "#/components/schemas/v1.Status" description: OK "202": content: application/json: schema: - $ref: "#/components/schemas/v1.CSINode" + $ref: "#/components/schemas/v1.Status" application/yaml: schema: - $ref: "#/components/schemas/v1.CSINode" + $ref: "#/components/schemas/v1.Status" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1.CSINode" + $ref: "#/components/schemas/v1.Status" application/cbor: schema: - $ref: "#/components/schemas/v1.CSINode" + $ref: "#/components/schemas/v1.Status" description: Accepted "401": content: {} description: Unauthorized tags: - - storage_v1 + - scheduling_v1beta1 x-kubernetes-action: delete x-kubernetes-group-version-kind: - group: storage.k8s.io - kind: CSINode - version: v1 + group: scheduling.k8s.io + kind: PodGroup + version: v1beta1 x-codegen-request-body-name: body x-content-type: application/json x-accepts: @@ -94676,15 +98452,21 @@ paths: - application/vnd.kubernetes.protobuf - application/yaml get: - description: read the specified CSINode - operationId: readCSINode + description: read the specified PodGroup + operationId: readNamespacedPodGroup parameters: - - description: name of the CSINode + - description: name of the PodGroup in: path name: name required: true schema: type: string + - description: "object name and auth scope, such as for teams and projects" + in: path + name: namespace + required: true + schema: + type: string - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ \ and wget)." @@ -94697,42 +98479,48 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1.CSINode" + $ref: "#/components/schemas/v1beta1.PodGroup" application/yaml: schema: - $ref: "#/components/schemas/v1.CSINode" + $ref: "#/components/schemas/v1beta1.PodGroup" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1.CSINode" + $ref: "#/components/schemas/v1beta1.PodGroup" application/cbor: schema: - $ref: "#/components/schemas/v1.CSINode" + $ref: "#/components/schemas/v1beta1.PodGroup" description: OK "401": content: {} description: Unauthorized tags: - - storage_v1 + - scheduling_v1beta1 x-kubernetes-action: get x-kubernetes-group-version-kind: - group: storage.k8s.io - kind: CSINode - version: v1 + group: scheduling.k8s.io + kind: PodGroup + version: v1beta1 x-accepts: - application/cbor - application/json - application/vnd.kubernetes.protobuf - application/yaml patch: - description: partially update the specified CSINode - operationId: patchCSINode + description: partially update the specified PodGroup + operationId: patchNamespacedPodGroup parameters: - - description: name of the CSINode + - description: name of the PodGroup in: path name: name required: true schema: type: string + - description: "object name and auth scope, such as for teams and projects" + in: path + name: namespace + required: true + schema: + type: string - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ \ and wget)." @@ -94792,42 +98580,42 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1.CSINode" + $ref: "#/components/schemas/v1beta1.PodGroup" application/yaml: schema: - $ref: "#/components/schemas/v1.CSINode" + $ref: "#/components/schemas/v1beta1.PodGroup" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1.CSINode" + $ref: "#/components/schemas/v1beta1.PodGroup" application/cbor: schema: - $ref: "#/components/schemas/v1.CSINode" + $ref: "#/components/schemas/v1beta1.PodGroup" description: OK "201": content: application/json: schema: - $ref: "#/components/schemas/v1.CSINode" + $ref: "#/components/schemas/v1beta1.PodGroup" application/yaml: schema: - $ref: "#/components/schemas/v1.CSINode" + $ref: "#/components/schemas/v1beta1.PodGroup" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1.CSINode" + $ref: "#/components/schemas/v1beta1.PodGroup" application/cbor: schema: - $ref: "#/components/schemas/v1.CSINode" + $ref: "#/components/schemas/v1beta1.PodGroup" description: Created "401": content: {} description: Unauthorized tags: - - storage_v1 + - scheduling_v1beta1 x-kubernetes-action: patch x-kubernetes-group-version-kind: - group: storage.k8s.io - kind: CSINode - version: v1 + group: scheduling.k8s.io + kind: PodGroup + version: v1beta1 x-codegen-request-body-name: body x-content-type: application/json x-accepts: @@ -94836,15 +98624,21 @@ paths: - application/vnd.kubernetes.protobuf - application/yaml put: - description: replace the specified CSINode - operationId: replaceCSINode + description: replace the specified PodGroup + operationId: replaceNamespacedPodGroup parameters: - - description: name of the CSINode + - description: name of the PodGroup in: path name: name required: true schema: type: string + - description: "object name and auth scope, such as for teams and projects" + in: path + name: namespace + required: true + schema: + type: string - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ \ and wget)." @@ -94888,49 +98682,49 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1.CSINode" + $ref: "#/components/schemas/v1beta1.PodGroup" required: true responses: "200": content: application/json: schema: - $ref: "#/components/schemas/v1.CSINode" + $ref: "#/components/schemas/v1beta1.PodGroup" application/yaml: schema: - $ref: "#/components/schemas/v1.CSINode" + $ref: "#/components/schemas/v1beta1.PodGroup" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1.CSINode" + $ref: "#/components/schemas/v1beta1.PodGroup" application/cbor: schema: - $ref: "#/components/schemas/v1.CSINode" + $ref: "#/components/schemas/v1beta1.PodGroup" description: OK "201": content: application/json: schema: - $ref: "#/components/schemas/v1.CSINode" + $ref: "#/components/schemas/v1beta1.PodGroup" application/yaml: schema: - $ref: "#/components/schemas/v1.CSINode" + $ref: "#/components/schemas/v1beta1.PodGroup" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1.CSINode" + $ref: "#/components/schemas/v1beta1.PodGroup" application/cbor: schema: - $ref: "#/components/schemas/v1.CSINode" + $ref: "#/components/schemas/v1beta1.PodGroup" description: Created "401": content: {} description: Unauthorized tags: - - storage_v1 + - scheduling_v1beta1 x-kubernetes-action: put x-kubernetes-group-version-kind: - group: storage.k8s.io - kind: CSINode - version: v1 + group: scheduling.k8s.io + kind: PodGroup + version: v1beta1 x-codegen-request-body-name: body x-content-type: application/json x-accepts: @@ -94938,49 +98732,77 @@ paths: - application/json - application/vnd.kubernetes.protobuf - application/yaml - /apis/storage.k8s.io/v1/csistoragecapacities: + /apis/scheduling.k8s.io/v1beta1/namespaces/{namespace}/podgroups/{name}/status: get: - description: list or watch objects of kind CSIStorageCapacity - operationId: listCSIStorageCapacityForAllNamespaces + description: read status of the specified PodGroup + operationId: readNamespacedPodGroupStatus parameters: - - description: "allowWatchBookmarks requests watch events with type \"BOOKMARK\"\ - . Servers that do not implement bookmarks may ignore this flag and bookmarks\ - \ are sent at the server's discretion. Clients should not assume bookmarks\ - \ are returned at any specific interval, nor may they assume the server\ - \ will send any BOOKMARK event during a session. If this is not a watch,\ - \ this field is ignored." - in: query - name: allowWatchBookmarks + - description: name of the PodGroup + in: path + name: name + required: true schema: - type: boolean - - description: |- - The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". - - This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications. - in: query - name: continue + type: string + - description: "object name and auth scope, such as for teams and projects" + in: path + name: namespace + required: true schema: type: string - - description: A selector to restrict the list of returned objects by their - fields. Defaults to everything. + - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ + \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ + \ and wget)." in: query - name: fieldSelector + name: pretty schema: type: string - - description: A selector to restrict the list of returned objects by their - labels. Defaults to everything. - in: query - name: labelSelector + responses: + "200": + content: + application/json: + schema: + $ref: "#/components/schemas/v1beta1.PodGroup" + application/yaml: + schema: + $ref: "#/components/schemas/v1beta1.PodGroup" + application/vnd.kubernetes.protobuf: + schema: + $ref: "#/components/schemas/v1beta1.PodGroup" + application/cbor: + schema: + $ref: "#/components/schemas/v1beta1.PodGroup" + description: OK + "401": + content: {} + description: Unauthorized + tags: + - scheduling_v1beta1 + x-kubernetes-action: get + x-kubernetes-group-version-kind: + group: scheduling.k8s.io + kind: PodGroup + version: v1beta1 + x-accepts: + - application/cbor + - application/json + - application/vnd.kubernetes.protobuf + - application/yaml + patch: + description: partially update status of the specified PodGroup + operationId: patchNamespacedPodGroupStatus + parameters: + - description: name of the PodGroup + in: path + name: name + required: true schema: type: string - - description: |- - limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. - - The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned. - in: query - name: limit + - description: "object name and auth scope, such as for teams and projects" + in: path + name: namespace + required: true schema: - type: integer + type: string - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ \ and wget)." @@ -94988,126 +98810,214 @@ paths: name: pretty schema: type: string - - description: |- - resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. - - Defaults to unset + - description: "When present, indicates that modifications should not be persisted.\ + \ An invalid or unrecognized dryRun directive will result in an error response\ + \ and no further processing of the request. Valid values are: - All: all\ + \ dry run stages will be processed" in: query - name: resourceVersion + name: dryRun schema: type: string - - description: |- - resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. - - Defaults to unset + - description: "fieldManager is a name associated with the actor or entity that\ + \ is making these changes. The value must be less than or 128 characters\ + \ long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.\ + \ This field is required for apply requests (application/apply-patch) but\ + \ optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch)." in: query - name: resourceVersionMatch + name: fieldManager schema: type: string - - description: |- - `sendInitialEvents=true` may be set together with `watch=true`. In that case, the watch stream will begin with synthetic events to produce the current state of objects in the collection. Once all such events have been sent, a synthetic "Bookmark" event will be sent. The bookmark will report the ResourceVersion (RV) corresponding to the set of objects, and be marked with `"k8s.io/initial-events-end": "true"` annotation. Afterwards, the watch stream will proceed as usual, sending watch events corresponding to changes (subsequent to the RV) to objects watched. - - When `sendInitialEvents` option is set, we require `resourceVersionMatch` option to also be set. The semantic of the watch request is as following: - `resourceVersionMatch` = NotOlderThan - is interpreted as "data at least as new as the provided `resourceVersion`" - and the bookmark event is send when the state is synced - to a `resourceVersion` at least as fresh as the one provided by the ListOptions. - If `resourceVersion` is unset, this is interpreted as "consistent read" and the - bookmark event is send when the state is synced at least to the moment - when request started being processed. - - `resourceVersionMatch` set to any other value or unset - Invalid error is returned. - - Defaults to true if `resourceVersion=""` or `resourceVersion="0"` (for backward compatibility reasons) and to false otherwise. + - description: "fieldValidation instructs the server on how to handle objects\ + \ in the request (POST/PUT/PATCH) containing unknown or duplicate fields.\ + \ Valid values are: - Ignore: This will ignore any unknown fields that are\ + \ silently dropped from the object, and will ignore all but the last duplicate\ + \ field that the decoder encounters. This is the default behavior prior\ + \ to v1.23. - Warn: This will send a warning via the standard warning response\ + \ header for each unknown field that is dropped from the object, and for\ + \ each duplicate field that is encountered. The request will still succeed\ + \ if there are no other errors, and will only persist the last of any duplicate\ + \ fields. This is the default in v1.23+ - Strict: This will fail the request\ + \ with a BadRequest error if any unknown fields would be dropped from the\ + \ object, or if any duplicate fields are present. The error returned from\ + \ the server will contain all unknown and duplicate fields encountered." in: query - name: sendInitialEvents + name: fieldValidation + schema: + type: string + - description: Force is going to "force" Apply requests. It means user will + re-acquire conflicting fields owned by other people. Force flag must be + unset for non-apply patch requests. + in: query + name: force schema: type: boolean - - description: |- - shardSelector restricts the list of returned objects using a CEL-based shard selector expression. The format uses the shardRange() function combined with || (logical OR) to specify one or more hash ranges: - - shardRange(object.metadata.uid, '0x0', '0x8000000000000000') - shardRange(object.metadata.uid, '0x0', '0x8000000000000000') || shardRange(object.metadata.uid, '0x8000000000000000', '0x10000000000000000') - - Field paths use CEL-style object-rooted syntax (e.g. "object.metadata.uid"), NOT the fieldSelector format ("metadata.uid"). Currently supported paths: - - object.metadata.uid - - object.metadata.namespace - - hexStart and hexEnd are single-quoted CEL string literals with a '0x' prefix, defining the inclusive lower and exclusive upper bounds over the 64-bit FNV-1a hash space. The full range is [0x0, 0x10000000000000000), where the exclusive upper bound equals 2^64. - - Examples: - 2-shard split: - shard 0: shardRange(object.metadata.uid, '0x0000000000000000', '0x8000000000000000') - shard 1: shardRange(object.metadata.uid, '0x8000000000000000', '0x10000000000000000') - 4-shard split: - shard 0: shardRange(object.metadata.uid, '0x0000000000000000', '0x4000000000000000') - shard 1: shardRange(object.metadata.uid, '0x4000000000000000', '0x8000000000000000') - shard 2: shardRange(object.metadata.uid, '0x8000000000000000', '0xc000000000000000') - shard 3: shardRange(object.metadata.uid, '0xc000000000000000', '0x10000000000000000') - - This is an alpha field and requires enabling the ShardedListAndWatch feature gate. + requestBody: + content: + application/json: + schema: + $ref: "#/components/schemas/v1.Patch" + required: true + responses: + "200": + content: + application/json: + schema: + $ref: "#/components/schemas/v1beta1.PodGroup" + application/yaml: + schema: + $ref: "#/components/schemas/v1beta1.PodGroup" + application/vnd.kubernetes.protobuf: + schema: + $ref: "#/components/schemas/v1beta1.PodGroup" + application/cbor: + schema: + $ref: "#/components/schemas/v1beta1.PodGroup" + description: OK + "201": + content: + application/json: + schema: + $ref: "#/components/schemas/v1beta1.PodGroup" + application/yaml: + schema: + $ref: "#/components/schemas/v1beta1.PodGroup" + application/vnd.kubernetes.protobuf: + schema: + $ref: "#/components/schemas/v1beta1.PodGroup" + application/cbor: + schema: + $ref: "#/components/schemas/v1beta1.PodGroup" + description: Created + "401": + content: {} + description: Unauthorized + tags: + - scheduling_v1beta1 + x-kubernetes-action: patch + x-kubernetes-group-version-kind: + group: scheduling.k8s.io + kind: PodGroup + version: v1beta1 + x-codegen-request-body-name: body + x-content-type: application/json + x-accepts: + - application/cbor + - application/json + - application/vnd.kubernetes.protobuf + - application/yaml + put: + description: replace status of the specified PodGroup + operationId: replaceNamespacedPodGroupStatus + parameters: + - description: name of the PodGroup + in: path + name: name + required: true + schema: + type: string + - description: "object name and auth scope, such as for teams and projects" + in: path + name: namespace + required: true + schema: + type: string + - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ + \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ + \ and wget)." in: query - name: shardSelector + name: pretty schema: type: string - - description: "Timeout for the list/watch call. This limits the duration of\ - \ the call, regardless of any activity or inactivity." + - description: "When present, indicates that modifications should not be persisted.\ + \ An invalid or unrecognized dryRun directive will result in an error response\ + \ and no further processing of the request. Valid values are: - All: all\ + \ dry run stages will be processed" in: query - name: timeoutSeconds + name: dryRun schema: - type: integer - - description: "Watch for changes to the described resources and return them\ - \ as a stream of add, update, and remove notifications. Specify resourceVersion." + type: string + - description: "fieldManager is a name associated with the actor or entity that\ + \ is making these changes. The value must be less than or 128 characters\ + \ long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." in: query - name: watch + name: fieldManager schema: - type: boolean + type: string + - description: "fieldValidation instructs the server on how to handle objects\ + \ in the request (POST/PUT/PATCH) containing unknown or duplicate fields.\ + \ Valid values are: - Ignore: This will ignore any unknown fields that are\ + \ silently dropped from the object, and will ignore all but the last duplicate\ + \ field that the decoder encounters. This is the default behavior prior\ + \ to v1.23. - Warn: This will send a warning via the standard warning response\ + \ header for each unknown field that is dropped from the object, and for\ + \ each duplicate field that is encountered. The request will still succeed\ + \ if there are no other errors, and will only persist the last of any duplicate\ + \ fields. This is the default in v1.23+ - Strict: This will fail the request\ + \ with a BadRequest error if any unknown fields would be dropped from the\ + \ object, or if any duplicate fields are present. The error returned from\ + \ the server will contain all unknown and duplicate fields encountered." + in: query + name: fieldValidation + schema: + type: string + requestBody: + content: + application/json: + schema: + $ref: "#/components/schemas/v1beta1.PodGroup" + required: true responses: "200": content: application/json: schema: - $ref: "#/components/schemas/v1.CSIStorageCapacityList" + $ref: "#/components/schemas/v1beta1.PodGroup" application/yaml: schema: - $ref: "#/components/schemas/v1.CSIStorageCapacityList" + $ref: "#/components/schemas/v1beta1.PodGroup" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1.CSIStorageCapacityList" + $ref: "#/components/schemas/v1beta1.PodGroup" application/cbor: schema: - $ref: "#/components/schemas/v1.CSIStorageCapacityList" - application/json;stream=watch: + $ref: "#/components/schemas/v1beta1.PodGroup" + description: OK + "201": + content: + application/json: schema: - $ref: "#/components/schemas/v1.CSIStorageCapacityList" - application/vnd.kubernetes.protobuf;stream=watch: + $ref: "#/components/schemas/v1beta1.PodGroup" + application/yaml: schema: - $ref: "#/components/schemas/v1.CSIStorageCapacityList" - application/cbor-seq: + $ref: "#/components/schemas/v1beta1.PodGroup" + application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1.CSIStorageCapacityList" - description: OK + $ref: "#/components/schemas/v1beta1.PodGroup" + application/cbor: + schema: + $ref: "#/components/schemas/v1beta1.PodGroup" + description: Created "401": content: {} description: Unauthorized tags: - - storage_v1 - x-kubernetes-action: list + - scheduling_v1beta1 + x-kubernetes-action: put x-kubernetes-group-version-kind: - group: storage.k8s.io - kind: CSIStorageCapacity - version: v1 + group: scheduling.k8s.io + kind: PodGroup + version: v1beta1 + x-codegen-request-body-name: body + x-content-type: application/json x-accepts: - application/cbor - - application/cbor-seq - application/json - - application/json;stream=watch - application/vnd.kubernetes.protobuf - - application/vnd.kubernetes.protobuf;stream=watch - application/yaml - /apis/storage.k8s.io/v1/namespaces/{namespace}/csistoragecapacities: + /apis/scheduling.k8s.io/v1beta1/namespaces/{namespace}/workloads: delete: - description: delete collection of CSIStorageCapacity - operationId: deleteCollectionNamespacedCSIStorageCapacity + description: delete collection of Workload + operationId: deleteCollectionNamespacedWorkload parameters: - description: "object name and auth scope, such as for teams and projects" in: path @@ -95294,12 +99204,12 @@ paths: content: {} description: Unauthorized tags: - - storage_v1 + - scheduling_v1beta1 x-kubernetes-action: deletecollection x-kubernetes-group-version-kind: - group: storage.k8s.io - kind: CSIStorageCapacity - version: v1 + group: scheduling.k8s.io + kind: Workload + version: v1beta1 x-codegen-request-body-name: body x-content-type: application/json x-accepts: @@ -95308,8 +99218,8 @@ paths: - application/vnd.kubernetes.protobuf - application/yaml get: - description: list or watch objects of kind CSIStorageCapacity - operationId: listNamespacedCSIStorageCapacity + description: list or watch objects of kind Workload + operationId: listNamespacedWorkload parameters: - description: "object name and auth scope, such as for teams and projects" in: path @@ -95440,36 +99350,36 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1.CSIStorageCapacityList" + $ref: "#/components/schemas/v1beta1.WorkloadList" application/yaml: schema: - $ref: "#/components/schemas/v1.CSIStorageCapacityList" + $ref: "#/components/schemas/v1beta1.WorkloadList" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1.CSIStorageCapacityList" + $ref: "#/components/schemas/v1beta1.WorkloadList" application/cbor: schema: - $ref: "#/components/schemas/v1.CSIStorageCapacityList" + $ref: "#/components/schemas/v1beta1.WorkloadList" application/json;stream=watch: schema: - $ref: "#/components/schemas/v1.CSIStorageCapacityList" + $ref: "#/components/schemas/v1beta1.WorkloadList" application/vnd.kubernetes.protobuf;stream=watch: schema: - $ref: "#/components/schemas/v1.CSIStorageCapacityList" + $ref: "#/components/schemas/v1beta1.WorkloadList" application/cbor-seq: schema: - $ref: "#/components/schemas/v1.CSIStorageCapacityList" + $ref: "#/components/schemas/v1beta1.WorkloadList" description: OK "401": content: {} description: Unauthorized tags: - - storage_v1 + - scheduling_v1beta1 x-kubernetes-action: list x-kubernetes-group-version-kind: - group: storage.k8s.io - kind: CSIStorageCapacity - version: v1 + group: scheduling.k8s.io + kind: Workload + version: v1beta1 x-accepts: - application/cbor - application/cbor-seq @@ -95479,8 +99389,8 @@ paths: - application/vnd.kubernetes.protobuf;stream=watch - application/yaml post: - description: create a CSIStorageCapacity - operationId: createNamespacedCSIStorageCapacity + description: create a Workload + operationId: createNamespacedWorkload parameters: - description: "object name and auth scope, such as for teams and projects" in: path @@ -95531,64 +99441,64 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1.CSIStorageCapacity" + $ref: "#/components/schemas/v1beta1.Workload" required: true responses: "200": content: application/json: schema: - $ref: "#/components/schemas/v1.CSIStorageCapacity" + $ref: "#/components/schemas/v1beta1.Workload" application/yaml: schema: - $ref: "#/components/schemas/v1.CSIStorageCapacity" + $ref: "#/components/schemas/v1beta1.Workload" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1.CSIStorageCapacity" + $ref: "#/components/schemas/v1beta1.Workload" application/cbor: schema: - $ref: "#/components/schemas/v1.CSIStorageCapacity" + $ref: "#/components/schemas/v1beta1.Workload" description: OK "201": content: application/json: schema: - $ref: "#/components/schemas/v1.CSIStorageCapacity" + $ref: "#/components/schemas/v1beta1.Workload" application/yaml: schema: - $ref: "#/components/schemas/v1.CSIStorageCapacity" + $ref: "#/components/schemas/v1beta1.Workload" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1.CSIStorageCapacity" + $ref: "#/components/schemas/v1beta1.Workload" application/cbor: schema: - $ref: "#/components/schemas/v1.CSIStorageCapacity" + $ref: "#/components/schemas/v1beta1.Workload" description: Created "202": content: application/json: schema: - $ref: "#/components/schemas/v1.CSIStorageCapacity" + $ref: "#/components/schemas/v1beta1.Workload" application/yaml: schema: - $ref: "#/components/schemas/v1.CSIStorageCapacity" + $ref: "#/components/schemas/v1beta1.Workload" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1.CSIStorageCapacity" + $ref: "#/components/schemas/v1beta1.Workload" application/cbor: schema: - $ref: "#/components/schemas/v1.CSIStorageCapacity" + $ref: "#/components/schemas/v1beta1.Workload" description: Accepted "401": content: {} description: Unauthorized tags: - - storage_v1 + - scheduling_v1beta1 x-kubernetes-action: post x-kubernetes-group-version-kind: - group: storage.k8s.io - kind: CSIStorageCapacity - version: v1 + group: scheduling.k8s.io + kind: Workload + version: v1beta1 x-codegen-request-body-name: body x-content-type: application/json x-accepts: @@ -95596,12 +99506,12 @@ paths: - application/json - application/vnd.kubernetes.protobuf - application/yaml - /apis/storage.k8s.io/v1/namespaces/{namespace}/csistoragecapacities/{name}: + /apis/scheduling.k8s.io/v1beta1/namespaces/{namespace}/workloads/{name}: delete: - description: delete a CSIStorageCapacity - operationId: deleteNamespacedCSIStorageCapacity + description: delete a Workload + operationId: deleteNamespacedWorkload parameters: - - description: name of the CSIStorageCapacity + - description: name of the Workload in: path name: name required: true @@ -95712,12 +99622,12 @@ paths: content: {} description: Unauthorized tags: - - storage_v1 + - scheduling_v1beta1 x-kubernetes-action: delete x-kubernetes-group-version-kind: - group: storage.k8s.io - kind: CSIStorageCapacity - version: v1 + group: scheduling.k8s.io + kind: Workload + version: v1beta1 x-codegen-request-body-name: body x-content-type: application/json x-accepts: @@ -95726,10 +99636,10 @@ paths: - application/vnd.kubernetes.protobuf - application/yaml get: - description: read the specified CSIStorageCapacity - operationId: readNamespacedCSIStorageCapacity + description: read the specified Workload + operationId: readNamespacedWorkload parameters: - - description: name of the CSIStorageCapacity + - description: name of the Workload in: path name: name required: true @@ -95753,37 +99663,37 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1.CSIStorageCapacity" + $ref: "#/components/schemas/v1beta1.Workload" application/yaml: schema: - $ref: "#/components/schemas/v1.CSIStorageCapacity" + $ref: "#/components/schemas/v1beta1.Workload" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1.CSIStorageCapacity" + $ref: "#/components/schemas/v1beta1.Workload" application/cbor: schema: - $ref: "#/components/schemas/v1.CSIStorageCapacity" + $ref: "#/components/schemas/v1beta1.Workload" description: OK "401": content: {} description: Unauthorized tags: - - storage_v1 + - scheduling_v1beta1 x-kubernetes-action: get x-kubernetes-group-version-kind: - group: storage.k8s.io - kind: CSIStorageCapacity - version: v1 + group: scheduling.k8s.io + kind: Workload + version: v1beta1 x-accepts: - application/cbor - application/json - application/vnd.kubernetes.protobuf - application/yaml patch: - description: partially update the specified CSIStorageCapacity - operationId: patchNamespacedCSIStorageCapacity + description: partially update the specified Workload + operationId: patchNamespacedWorkload parameters: - - description: name of the CSIStorageCapacity + - description: name of the Workload in: path name: name required: true @@ -95854,42 +99764,42 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1.CSIStorageCapacity" + $ref: "#/components/schemas/v1beta1.Workload" application/yaml: schema: - $ref: "#/components/schemas/v1.CSIStorageCapacity" + $ref: "#/components/schemas/v1beta1.Workload" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1.CSIStorageCapacity" + $ref: "#/components/schemas/v1beta1.Workload" application/cbor: schema: - $ref: "#/components/schemas/v1.CSIStorageCapacity" + $ref: "#/components/schemas/v1beta1.Workload" description: OK "201": content: application/json: schema: - $ref: "#/components/schemas/v1.CSIStorageCapacity" + $ref: "#/components/schemas/v1beta1.Workload" application/yaml: schema: - $ref: "#/components/schemas/v1.CSIStorageCapacity" + $ref: "#/components/schemas/v1beta1.Workload" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1.CSIStorageCapacity" + $ref: "#/components/schemas/v1beta1.Workload" application/cbor: schema: - $ref: "#/components/schemas/v1.CSIStorageCapacity" + $ref: "#/components/schemas/v1beta1.Workload" description: Created "401": content: {} description: Unauthorized tags: - - storage_v1 + - scheduling_v1beta1 x-kubernetes-action: patch x-kubernetes-group-version-kind: - group: storage.k8s.io - kind: CSIStorageCapacity - version: v1 + group: scheduling.k8s.io + kind: Workload + version: v1beta1 x-codegen-request-body-name: body x-content-type: application/json x-accepts: @@ -95898,10 +99808,10 @@ paths: - application/vnd.kubernetes.protobuf - application/yaml put: - description: replace the specified CSIStorageCapacity - operationId: replaceNamespacedCSIStorageCapacity + description: replace the specified Workload + operationId: replaceNamespacedWorkload parameters: - - description: name of the CSIStorageCapacity + - description: name of the Workload in: path name: name required: true @@ -95956,49 +99866,49 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1.CSIStorageCapacity" + $ref: "#/components/schemas/v1beta1.Workload" required: true responses: "200": content: application/json: schema: - $ref: "#/components/schemas/v1.CSIStorageCapacity" + $ref: "#/components/schemas/v1beta1.Workload" application/yaml: schema: - $ref: "#/components/schemas/v1.CSIStorageCapacity" + $ref: "#/components/schemas/v1beta1.Workload" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1.CSIStorageCapacity" + $ref: "#/components/schemas/v1beta1.Workload" application/cbor: schema: - $ref: "#/components/schemas/v1.CSIStorageCapacity" + $ref: "#/components/schemas/v1beta1.Workload" description: OK "201": content: application/json: schema: - $ref: "#/components/schemas/v1.CSIStorageCapacity" + $ref: "#/components/schemas/v1beta1.Workload" application/yaml: schema: - $ref: "#/components/schemas/v1.CSIStorageCapacity" + $ref: "#/components/schemas/v1beta1.Workload" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1.CSIStorageCapacity" + $ref: "#/components/schemas/v1beta1.Workload" application/cbor: schema: - $ref: "#/components/schemas/v1.CSIStorageCapacity" + $ref: "#/components/schemas/v1beta1.Workload" description: Created "401": content: {} description: Unauthorized tags: - - storage_v1 + - scheduling_v1beta1 x-kubernetes-action: put x-kubernetes-group-version-kind: - group: storage.k8s.io - kind: CSIStorageCapacity - version: v1 + group: scheduling.k8s.io + kind: Workload + version: v1beta1 x-codegen-request-body-name: body x-content-type: application/json x-accepts: @@ -96006,10 +99916,408 @@ paths: - application/json - application/vnd.kubernetes.protobuf - application/yaml - /apis/storage.k8s.io/v1/storageclasses: + /apis/scheduling.k8s.io/v1beta1/podgroups: + get: + description: list or watch objects of kind PodGroup + operationId: listPodGroupForAllNamespaces + parameters: + - description: "allowWatchBookmarks requests watch events with type \"BOOKMARK\"\ + . Servers that do not implement bookmarks may ignore this flag and bookmarks\ + \ are sent at the server's discretion. Clients should not assume bookmarks\ + \ are returned at any specific interval, nor may they assume the server\ + \ will send any BOOKMARK event during a session. If this is not a watch,\ + \ this field is ignored." + in: query + name: allowWatchBookmarks + schema: + type: boolean + - description: |- + The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + + This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications. + in: query + name: continue + schema: + type: string + - description: A selector to restrict the list of returned objects by their + fields. Defaults to everything. + in: query + name: fieldSelector + schema: + type: string + - description: A selector to restrict the list of returned objects by their + labels. Defaults to everything. + in: query + name: labelSelector + schema: + type: string + - description: |- + limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + + The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned. + in: query + name: limit + schema: + type: integer + - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ + \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ + \ and wget)." + in: query + name: pretty + schema: + type: string + - description: |- + resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + + Defaults to unset + in: query + name: resourceVersion + schema: + type: string + - description: |- + resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + + Defaults to unset + in: query + name: resourceVersionMatch + schema: + type: string + - description: |- + `sendInitialEvents=true` may be set together with `watch=true`. In that case, the watch stream will begin with synthetic events to produce the current state of objects in the collection. Once all such events have been sent, a synthetic "Bookmark" event will be sent. The bookmark will report the ResourceVersion (RV) corresponding to the set of objects, and be marked with `"k8s.io/initial-events-end": "true"` annotation. Afterwards, the watch stream will proceed as usual, sending watch events corresponding to changes (subsequent to the RV) to objects watched. + + When `sendInitialEvents` option is set, we require `resourceVersionMatch` option to also be set. The semantic of the watch request is as following: - `resourceVersionMatch` = NotOlderThan + is interpreted as "data at least as new as the provided `resourceVersion`" + and the bookmark event is send when the state is synced + to a `resourceVersion` at least as fresh as the one provided by the ListOptions. + If `resourceVersion` is unset, this is interpreted as "consistent read" and the + bookmark event is send when the state is synced at least to the moment + when request started being processed. + - `resourceVersionMatch` set to any other value or unset + Invalid error is returned. + + Defaults to true if `resourceVersion=""` or `resourceVersion="0"` (for backward compatibility reasons) and to false otherwise. + in: query + name: sendInitialEvents + schema: + type: boolean + - description: |- + shardSelector restricts the list of returned objects using a CEL-based shard selector expression. The format uses the shardRange() function combined with || (logical OR) to specify one or more hash ranges: + + shardRange(object.metadata.uid, '0x0', '0x8000000000000000') + shardRange(object.metadata.uid, '0x0', '0x8000000000000000') || shardRange(object.metadata.uid, '0x8000000000000000', '0x10000000000000000') + + Field paths use CEL-style object-rooted syntax (e.g. "object.metadata.uid"), NOT the fieldSelector format ("metadata.uid"). Currently supported paths: + - object.metadata.uid + - object.metadata.namespace + + hexStart and hexEnd are single-quoted CEL string literals with a '0x' prefix, defining the inclusive lower and exclusive upper bounds over the 64-bit FNV-1a hash space. The full range is [0x0, 0x10000000000000000), where the exclusive upper bound equals 2^64. + + Examples: + 2-shard split: + shard 0: shardRange(object.metadata.uid, '0x0000000000000000', '0x8000000000000000') + shard 1: shardRange(object.metadata.uid, '0x8000000000000000', '0x10000000000000000') + 4-shard split: + shard 0: shardRange(object.metadata.uid, '0x0000000000000000', '0x4000000000000000') + shard 1: shardRange(object.metadata.uid, '0x4000000000000000', '0x8000000000000000') + shard 2: shardRange(object.metadata.uid, '0x8000000000000000', '0xc000000000000000') + shard 3: shardRange(object.metadata.uid, '0xc000000000000000', '0x10000000000000000') + + This is an alpha field and requires enabling the ShardedListAndWatch feature gate. + in: query + name: shardSelector + schema: + type: string + - description: "Timeout for the list/watch call. This limits the duration of\ + \ the call, regardless of any activity or inactivity." + in: query + name: timeoutSeconds + schema: + type: integer + - description: "Watch for changes to the described resources and return them\ + \ as a stream of add, update, and remove notifications. Specify resourceVersion." + in: query + name: watch + schema: + type: boolean + responses: + "200": + content: + application/json: + schema: + $ref: "#/components/schemas/v1beta1.PodGroupList" + application/yaml: + schema: + $ref: "#/components/schemas/v1beta1.PodGroupList" + application/vnd.kubernetes.protobuf: + schema: + $ref: "#/components/schemas/v1beta1.PodGroupList" + application/cbor: + schema: + $ref: "#/components/schemas/v1beta1.PodGroupList" + application/json;stream=watch: + schema: + $ref: "#/components/schemas/v1beta1.PodGroupList" + application/vnd.kubernetes.protobuf;stream=watch: + schema: + $ref: "#/components/schemas/v1beta1.PodGroupList" + application/cbor-seq: + schema: + $ref: "#/components/schemas/v1beta1.PodGroupList" + description: OK + "401": + content: {} + description: Unauthorized + tags: + - scheduling_v1beta1 + x-kubernetes-action: list + x-kubernetes-group-version-kind: + group: scheduling.k8s.io + kind: PodGroup + version: v1beta1 + x-accepts: + - application/cbor + - application/cbor-seq + - application/json + - application/json;stream=watch + - application/vnd.kubernetes.protobuf + - application/vnd.kubernetes.protobuf;stream=watch + - application/yaml + /apis/scheduling.k8s.io/v1beta1/watch/namespaces/{namespace}/podgroups: {} + /apis/scheduling.k8s.io/v1beta1/watch/namespaces/{namespace}/podgroups/{name}: {} + /apis/scheduling.k8s.io/v1beta1/watch/namespaces/{namespace}/workloads: {} + /apis/scheduling.k8s.io/v1beta1/watch/namespaces/{namespace}/workloads/{name}: {} + /apis/scheduling.k8s.io/v1beta1/watch/podgroups: {} + /apis/scheduling.k8s.io/v1beta1/watch/workloads: {} + /apis/scheduling.k8s.io/v1beta1/workloads: + get: + description: list or watch objects of kind Workload + operationId: listWorkloadForAllNamespaces + parameters: + - description: "allowWatchBookmarks requests watch events with type \"BOOKMARK\"\ + . Servers that do not implement bookmarks may ignore this flag and bookmarks\ + \ are sent at the server's discretion. Clients should not assume bookmarks\ + \ are returned at any specific interval, nor may they assume the server\ + \ will send any BOOKMARK event during a session. If this is not a watch,\ + \ this field is ignored." + in: query + name: allowWatchBookmarks + schema: + type: boolean + - description: |- + The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + + This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications. + in: query + name: continue + schema: + type: string + - description: A selector to restrict the list of returned objects by their + fields. Defaults to everything. + in: query + name: fieldSelector + schema: + type: string + - description: A selector to restrict the list of returned objects by their + labels. Defaults to everything. + in: query + name: labelSelector + schema: + type: string + - description: |- + limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + + The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned. + in: query + name: limit + schema: + type: integer + - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ + \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ + \ and wget)." + in: query + name: pretty + schema: + type: string + - description: |- + resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + + Defaults to unset + in: query + name: resourceVersion + schema: + type: string + - description: |- + resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + + Defaults to unset + in: query + name: resourceVersionMatch + schema: + type: string + - description: |- + `sendInitialEvents=true` may be set together with `watch=true`. In that case, the watch stream will begin with synthetic events to produce the current state of objects in the collection. Once all such events have been sent, a synthetic "Bookmark" event will be sent. The bookmark will report the ResourceVersion (RV) corresponding to the set of objects, and be marked with `"k8s.io/initial-events-end": "true"` annotation. Afterwards, the watch stream will proceed as usual, sending watch events corresponding to changes (subsequent to the RV) to objects watched. + + When `sendInitialEvents` option is set, we require `resourceVersionMatch` option to also be set. The semantic of the watch request is as following: - `resourceVersionMatch` = NotOlderThan + is interpreted as "data at least as new as the provided `resourceVersion`" + and the bookmark event is send when the state is synced + to a `resourceVersion` at least as fresh as the one provided by the ListOptions. + If `resourceVersion` is unset, this is interpreted as "consistent read" and the + bookmark event is send when the state is synced at least to the moment + when request started being processed. + - `resourceVersionMatch` set to any other value or unset + Invalid error is returned. + + Defaults to true if `resourceVersion=""` or `resourceVersion="0"` (for backward compatibility reasons) and to false otherwise. + in: query + name: sendInitialEvents + schema: + type: boolean + - description: |- + shardSelector restricts the list of returned objects using a CEL-based shard selector expression. The format uses the shardRange() function combined with || (logical OR) to specify one or more hash ranges: + + shardRange(object.metadata.uid, '0x0', '0x8000000000000000') + shardRange(object.metadata.uid, '0x0', '0x8000000000000000') || shardRange(object.metadata.uid, '0x8000000000000000', '0x10000000000000000') + + Field paths use CEL-style object-rooted syntax (e.g. "object.metadata.uid"), NOT the fieldSelector format ("metadata.uid"). Currently supported paths: + - object.metadata.uid + - object.metadata.namespace + + hexStart and hexEnd are single-quoted CEL string literals with a '0x' prefix, defining the inclusive lower and exclusive upper bounds over the 64-bit FNV-1a hash space. The full range is [0x0, 0x10000000000000000), where the exclusive upper bound equals 2^64. + + Examples: + 2-shard split: + shard 0: shardRange(object.metadata.uid, '0x0000000000000000', '0x8000000000000000') + shard 1: shardRange(object.metadata.uid, '0x8000000000000000', '0x10000000000000000') + 4-shard split: + shard 0: shardRange(object.metadata.uid, '0x0000000000000000', '0x4000000000000000') + shard 1: shardRange(object.metadata.uid, '0x4000000000000000', '0x8000000000000000') + shard 2: shardRange(object.metadata.uid, '0x8000000000000000', '0xc000000000000000') + shard 3: shardRange(object.metadata.uid, '0xc000000000000000', '0x10000000000000000') + + This is an alpha field and requires enabling the ShardedListAndWatch feature gate. + in: query + name: shardSelector + schema: + type: string + - description: "Timeout for the list/watch call. This limits the duration of\ + \ the call, regardless of any activity or inactivity." + in: query + name: timeoutSeconds + schema: + type: integer + - description: "Watch for changes to the described resources and return them\ + \ as a stream of add, update, and remove notifications. Specify resourceVersion." + in: query + name: watch + schema: + type: boolean + responses: + "200": + content: + application/json: + schema: + $ref: "#/components/schemas/v1beta1.WorkloadList" + application/yaml: + schema: + $ref: "#/components/schemas/v1beta1.WorkloadList" + application/vnd.kubernetes.protobuf: + schema: + $ref: "#/components/schemas/v1beta1.WorkloadList" + application/cbor: + schema: + $ref: "#/components/schemas/v1beta1.WorkloadList" + application/json;stream=watch: + schema: + $ref: "#/components/schemas/v1beta1.WorkloadList" + application/vnd.kubernetes.protobuf;stream=watch: + schema: + $ref: "#/components/schemas/v1beta1.WorkloadList" + application/cbor-seq: + schema: + $ref: "#/components/schemas/v1beta1.WorkloadList" + description: OK + "401": + content: {} + description: Unauthorized + tags: + - scheduling_v1beta1 + x-kubernetes-action: list + x-kubernetes-group-version-kind: + group: scheduling.k8s.io + kind: Workload + version: v1beta1 + x-accepts: + - application/cbor + - application/cbor-seq + - application/json + - application/json;stream=watch + - application/vnd.kubernetes.protobuf + - application/vnd.kubernetes.protobuf;stream=watch + - application/yaml + /apis/storage.k8s.io/: + get: + description: get information of a group + operationId: getAPIGroup + responses: + "200": + content: + application/json: + schema: + $ref: "#/components/schemas/v1.APIGroup" + application/yaml: + schema: + $ref: "#/components/schemas/v1.APIGroup" + application/vnd.kubernetes.protobuf: + schema: + $ref: "#/components/schemas/v1.APIGroup" + application/cbor: + schema: + $ref: "#/components/schemas/v1.APIGroup" + description: OK + "401": + content: {} + description: Unauthorized + tags: + - storage + x-accepts: + - application/cbor + - application/json + - application/vnd.kubernetes.protobuf + - application/yaml + /apis/storage.k8s.io/v1/: + get: + description: get available resources + operationId: getAPIResources + responses: + "200": + content: + application/json: + schema: + $ref: "#/components/schemas/v1.APIResourceList" + application/yaml: + schema: + $ref: "#/components/schemas/v1.APIResourceList" + application/vnd.kubernetes.protobuf: + schema: + $ref: "#/components/schemas/v1.APIResourceList" + application/cbor: + schema: + $ref: "#/components/schemas/v1.APIResourceList" + description: OK + "401": + content: {} + description: Unauthorized + tags: + - storage_v1 + x-accepts: + - application/cbor + - application/json + - application/vnd.kubernetes.protobuf + - application/yaml + /apis/storage.k8s.io/v1/csidrivers: delete: - description: delete collection of StorageClass - operationId: deleteCollectionStorageClass + description: delete collection of CSIDriver + operationId: deleteCollectionCSIDriver parameters: - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ @@ -96194,7 +100502,7 @@ paths: x-kubernetes-action: deletecollection x-kubernetes-group-version-kind: group: storage.k8s.io - kind: StorageClass + kind: CSIDriver version: v1 x-codegen-request-body-name: body x-content-type: application/json @@ -96204,8 +100512,8 @@ paths: - application/vnd.kubernetes.protobuf - application/yaml get: - description: list or watch objects of kind StorageClass - operationId: listStorageClass + description: list or watch objects of kind CSIDriver + operationId: listCSIDriver parameters: - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ @@ -96330,25 +100638,25 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1.StorageClassList" + $ref: "#/components/schemas/v1.CSIDriverList" application/yaml: schema: - $ref: "#/components/schemas/v1.StorageClassList" + $ref: "#/components/schemas/v1.CSIDriverList" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1.StorageClassList" + $ref: "#/components/schemas/v1.CSIDriverList" application/cbor: schema: - $ref: "#/components/schemas/v1.StorageClassList" + $ref: "#/components/schemas/v1.CSIDriverList" application/json;stream=watch: schema: - $ref: "#/components/schemas/v1.StorageClassList" + $ref: "#/components/schemas/v1.CSIDriverList" application/vnd.kubernetes.protobuf;stream=watch: schema: - $ref: "#/components/schemas/v1.StorageClassList" + $ref: "#/components/schemas/v1.CSIDriverList" application/cbor-seq: schema: - $ref: "#/components/schemas/v1.StorageClassList" + $ref: "#/components/schemas/v1.CSIDriverList" description: OK "401": content: {} @@ -96358,7 +100666,7 @@ paths: x-kubernetes-action: list x-kubernetes-group-version-kind: group: storage.k8s.io - kind: StorageClass + kind: CSIDriver version: v1 x-accepts: - application/cbor @@ -96369,8 +100677,8 @@ paths: - application/vnd.kubernetes.protobuf;stream=watch - application/yaml post: - description: create a StorageClass - operationId: createStorageClass + description: create a CSIDriver + operationId: createCSIDriver parameters: - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ @@ -96415,53 +100723,53 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1.StorageClass" + $ref: "#/components/schemas/v1.CSIDriver" required: true responses: "200": content: application/json: schema: - $ref: "#/components/schemas/v1.StorageClass" + $ref: "#/components/schemas/v1.CSIDriver" application/yaml: schema: - $ref: "#/components/schemas/v1.StorageClass" + $ref: "#/components/schemas/v1.CSIDriver" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1.StorageClass" + $ref: "#/components/schemas/v1.CSIDriver" application/cbor: schema: - $ref: "#/components/schemas/v1.StorageClass" + $ref: "#/components/schemas/v1.CSIDriver" description: OK "201": content: application/json: schema: - $ref: "#/components/schemas/v1.StorageClass" + $ref: "#/components/schemas/v1.CSIDriver" application/yaml: schema: - $ref: "#/components/schemas/v1.StorageClass" + $ref: "#/components/schemas/v1.CSIDriver" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1.StorageClass" + $ref: "#/components/schemas/v1.CSIDriver" application/cbor: schema: - $ref: "#/components/schemas/v1.StorageClass" + $ref: "#/components/schemas/v1.CSIDriver" description: Created "202": content: application/json: schema: - $ref: "#/components/schemas/v1.StorageClass" + $ref: "#/components/schemas/v1.CSIDriver" application/yaml: schema: - $ref: "#/components/schemas/v1.StorageClass" + $ref: "#/components/schemas/v1.CSIDriver" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1.StorageClass" + $ref: "#/components/schemas/v1.CSIDriver" application/cbor: schema: - $ref: "#/components/schemas/v1.StorageClass" + $ref: "#/components/schemas/v1.CSIDriver" description: Accepted "401": content: {} @@ -96471,7 +100779,7 @@ paths: x-kubernetes-action: post x-kubernetes-group-version-kind: group: storage.k8s.io - kind: StorageClass + kind: CSIDriver version: v1 x-codegen-request-body-name: body x-content-type: application/json @@ -96480,12 +100788,12 @@ paths: - application/json - application/vnd.kubernetes.protobuf - application/yaml - /apis/storage.k8s.io/v1/storageclasses/{name}: + /apis/storage.k8s.io/v1/csidrivers/{name}: delete: - description: delete a StorageClass - operationId: deleteStorageClass + description: delete a CSIDriver + operationId: deleteCSIDriver parameters: - - description: name of the StorageClass + - description: name of the CSIDriver in: path name: name required: true @@ -96560,31 +100868,31 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1.StorageClass" + $ref: "#/components/schemas/v1.CSIDriver" application/yaml: schema: - $ref: "#/components/schemas/v1.StorageClass" + $ref: "#/components/schemas/v1.CSIDriver" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1.StorageClass" + $ref: "#/components/schemas/v1.CSIDriver" application/cbor: schema: - $ref: "#/components/schemas/v1.StorageClass" + $ref: "#/components/schemas/v1.CSIDriver" description: OK "202": content: application/json: schema: - $ref: "#/components/schemas/v1.StorageClass" + $ref: "#/components/schemas/v1.CSIDriver" application/yaml: schema: - $ref: "#/components/schemas/v1.StorageClass" + $ref: "#/components/schemas/v1.CSIDriver" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1.StorageClass" + $ref: "#/components/schemas/v1.CSIDriver" application/cbor: schema: - $ref: "#/components/schemas/v1.StorageClass" + $ref: "#/components/schemas/v1.CSIDriver" description: Accepted "401": content: {} @@ -96594,7 +100902,7 @@ paths: x-kubernetes-action: delete x-kubernetes-group-version-kind: group: storage.k8s.io - kind: StorageClass + kind: CSIDriver version: v1 x-codegen-request-body-name: body x-content-type: application/json @@ -96604,10 +100912,10 @@ paths: - application/vnd.kubernetes.protobuf - application/yaml get: - description: read the specified StorageClass - operationId: readStorageClass + description: read the specified CSIDriver + operationId: readCSIDriver parameters: - - description: name of the StorageClass + - description: name of the CSIDriver in: path name: name required: true @@ -96625,16 +100933,16 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1.StorageClass" + $ref: "#/components/schemas/v1.CSIDriver" application/yaml: schema: - $ref: "#/components/schemas/v1.StorageClass" + $ref: "#/components/schemas/v1.CSIDriver" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1.StorageClass" + $ref: "#/components/schemas/v1.CSIDriver" application/cbor: schema: - $ref: "#/components/schemas/v1.StorageClass" + $ref: "#/components/schemas/v1.CSIDriver" description: OK "401": content: {} @@ -96644,7 +100952,7 @@ paths: x-kubernetes-action: get x-kubernetes-group-version-kind: group: storage.k8s.io - kind: StorageClass + kind: CSIDriver version: v1 x-accepts: - application/cbor @@ -96652,10 +100960,10 @@ paths: - application/vnd.kubernetes.protobuf - application/yaml patch: - description: partially update the specified StorageClass - operationId: patchStorageClass + description: partially update the specified CSIDriver + operationId: patchCSIDriver parameters: - - description: name of the StorageClass + - description: name of the CSIDriver in: path name: name required: true @@ -96720,31 +101028,31 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1.StorageClass" + $ref: "#/components/schemas/v1.CSIDriver" application/yaml: schema: - $ref: "#/components/schemas/v1.StorageClass" + $ref: "#/components/schemas/v1.CSIDriver" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1.StorageClass" + $ref: "#/components/schemas/v1.CSIDriver" application/cbor: schema: - $ref: "#/components/schemas/v1.StorageClass" + $ref: "#/components/schemas/v1.CSIDriver" description: OK "201": content: application/json: schema: - $ref: "#/components/schemas/v1.StorageClass" + $ref: "#/components/schemas/v1.CSIDriver" application/yaml: schema: - $ref: "#/components/schemas/v1.StorageClass" + $ref: "#/components/schemas/v1.CSIDriver" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1.StorageClass" + $ref: "#/components/schemas/v1.CSIDriver" application/cbor: schema: - $ref: "#/components/schemas/v1.StorageClass" + $ref: "#/components/schemas/v1.CSIDriver" description: Created "401": content: {} @@ -96754,7 +101062,7 @@ paths: x-kubernetes-action: patch x-kubernetes-group-version-kind: group: storage.k8s.io - kind: StorageClass + kind: CSIDriver version: v1 x-codegen-request-body-name: body x-content-type: application/json @@ -96764,10 +101072,10 @@ paths: - application/vnd.kubernetes.protobuf - application/yaml put: - description: replace the specified StorageClass - operationId: replaceStorageClass + description: replace the specified CSIDriver + operationId: replaceCSIDriver parameters: - - description: name of the StorageClass + - description: name of the CSIDriver in: path name: name required: true @@ -96816,38 +101124,38 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1.StorageClass" + $ref: "#/components/schemas/v1.CSIDriver" required: true responses: "200": content: application/json: schema: - $ref: "#/components/schemas/v1.StorageClass" + $ref: "#/components/schemas/v1.CSIDriver" application/yaml: schema: - $ref: "#/components/schemas/v1.StorageClass" + $ref: "#/components/schemas/v1.CSIDriver" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1.StorageClass" + $ref: "#/components/schemas/v1.CSIDriver" application/cbor: schema: - $ref: "#/components/schemas/v1.StorageClass" + $ref: "#/components/schemas/v1.CSIDriver" description: OK "201": content: application/json: schema: - $ref: "#/components/schemas/v1.StorageClass" + $ref: "#/components/schemas/v1.CSIDriver" application/yaml: schema: - $ref: "#/components/schemas/v1.StorageClass" + $ref: "#/components/schemas/v1.CSIDriver" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1.StorageClass" + $ref: "#/components/schemas/v1.CSIDriver" application/cbor: schema: - $ref: "#/components/schemas/v1.StorageClass" + $ref: "#/components/schemas/v1.CSIDriver" description: Created "401": content: {} @@ -96857,7 +101165,7 @@ paths: x-kubernetes-action: put x-kubernetes-group-version-kind: group: storage.k8s.io - kind: StorageClass + kind: CSIDriver version: v1 x-codegen-request-body-name: body x-content-type: application/json @@ -96866,10 +101174,10 @@ paths: - application/json - application/vnd.kubernetes.protobuf - application/yaml - /apis/storage.k8s.io/v1/volumeattachments: + /apis/storage.k8s.io/v1/csinodes: delete: - description: delete collection of VolumeAttachment - operationId: deleteCollectionVolumeAttachment + description: delete collection of CSINode + operationId: deleteCollectionCSINode parameters: - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ @@ -97054,7 +101362,7 @@ paths: x-kubernetes-action: deletecollection x-kubernetes-group-version-kind: group: storage.k8s.io - kind: VolumeAttachment + kind: CSINode version: v1 x-codegen-request-body-name: body x-content-type: application/json @@ -97064,8 +101372,8 @@ paths: - application/vnd.kubernetes.protobuf - application/yaml get: - description: list or watch objects of kind VolumeAttachment - operationId: listVolumeAttachment + description: list or watch objects of kind CSINode + operationId: listCSINode parameters: - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ @@ -97190,25 +101498,25 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1.VolumeAttachmentList" + $ref: "#/components/schemas/v1.CSINodeList" application/yaml: schema: - $ref: "#/components/schemas/v1.VolumeAttachmentList" + $ref: "#/components/schemas/v1.CSINodeList" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1.VolumeAttachmentList" + $ref: "#/components/schemas/v1.CSINodeList" application/cbor: schema: - $ref: "#/components/schemas/v1.VolumeAttachmentList" + $ref: "#/components/schemas/v1.CSINodeList" application/json;stream=watch: schema: - $ref: "#/components/schemas/v1.VolumeAttachmentList" + $ref: "#/components/schemas/v1.CSINodeList" application/vnd.kubernetes.protobuf;stream=watch: schema: - $ref: "#/components/schemas/v1.VolumeAttachmentList" + $ref: "#/components/schemas/v1.CSINodeList" application/cbor-seq: schema: - $ref: "#/components/schemas/v1.VolumeAttachmentList" + $ref: "#/components/schemas/v1.CSINodeList" description: OK "401": content: {} @@ -97218,7 +101526,7 @@ paths: x-kubernetes-action: list x-kubernetes-group-version-kind: group: storage.k8s.io - kind: VolumeAttachment + kind: CSINode version: v1 x-accepts: - application/cbor @@ -97229,8 +101537,8 @@ paths: - application/vnd.kubernetes.protobuf;stream=watch - application/yaml post: - description: create a VolumeAttachment - operationId: createVolumeAttachment + description: create a CSINode + operationId: createCSINode parameters: - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ @@ -97275,53 +101583,53 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1.VolumeAttachment" + $ref: "#/components/schemas/v1.CSINode" required: true responses: "200": content: application/json: schema: - $ref: "#/components/schemas/v1.VolumeAttachment" + $ref: "#/components/schemas/v1.CSINode" application/yaml: schema: - $ref: "#/components/schemas/v1.VolumeAttachment" + $ref: "#/components/schemas/v1.CSINode" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1.VolumeAttachment" + $ref: "#/components/schemas/v1.CSINode" application/cbor: schema: - $ref: "#/components/schemas/v1.VolumeAttachment" + $ref: "#/components/schemas/v1.CSINode" description: OK "201": content: application/json: schema: - $ref: "#/components/schemas/v1.VolumeAttachment" + $ref: "#/components/schemas/v1.CSINode" application/yaml: schema: - $ref: "#/components/schemas/v1.VolumeAttachment" + $ref: "#/components/schemas/v1.CSINode" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1.VolumeAttachment" + $ref: "#/components/schemas/v1.CSINode" application/cbor: schema: - $ref: "#/components/schemas/v1.VolumeAttachment" + $ref: "#/components/schemas/v1.CSINode" description: Created "202": content: application/json: schema: - $ref: "#/components/schemas/v1.VolumeAttachment" + $ref: "#/components/schemas/v1.CSINode" application/yaml: schema: - $ref: "#/components/schemas/v1.VolumeAttachment" + $ref: "#/components/schemas/v1.CSINode" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1.VolumeAttachment" + $ref: "#/components/schemas/v1.CSINode" application/cbor: schema: - $ref: "#/components/schemas/v1.VolumeAttachment" + $ref: "#/components/schemas/v1.CSINode" description: Accepted "401": content: {} @@ -97331,7 +101639,7 @@ paths: x-kubernetes-action: post x-kubernetes-group-version-kind: group: storage.k8s.io - kind: VolumeAttachment + kind: CSINode version: v1 x-codegen-request-body-name: body x-content-type: application/json @@ -97340,12 +101648,12 @@ paths: - application/json - application/vnd.kubernetes.protobuf - application/yaml - /apis/storage.k8s.io/v1/volumeattachments/{name}: + /apis/storage.k8s.io/v1/csinodes/{name}: delete: - description: delete a VolumeAttachment - operationId: deleteVolumeAttachment + description: delete a CSINode + operationId: deleteCSINode parameters: - - description: name of the VolumeAttachment + - description: name of the CSINode in: path name: name required: true @@ -97420,31 +101728,31 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1.VolumeAttachment" + $ref: "#/components/schemas/v1.CSINode" application/yaml: schema: - $ref: "#/components/schemas/v1.VolumeAttachment" + $ref: "#/components/schemas/v1.CSINode" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1.VolumeAttachment" + $ref: "#/components/schemas/v1.CSINode" application/cbor: schema: - $ref: "#/components/schemas/v1.VolumeAttachment" + $ref: "#/components/schemas/v1.CSINode" description: OK "202": content: application/json: schema: - $ref: "#/components/schemas/v1.VolumeAttachment" + $ref: "#/components/schemas/v1.CSINode" application/yaml: schema: - $ref: "#/components/schemas/v1.VolumeAttachment" + $ref: "#/components/schemas/v1.CSINode" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1.VolumeAttachment" + $ref: "#/components/schemas/v1.CSINode" application/cbor: schema: - $ref: "#/components/schemas/v1.VolumeAttachment" + $ref: "#/components/schemas/v1.CSINode" description: Accepted "401": content: {} @@ -97454,7 +101762,7 @@ paths: x-kubernetes-action: delete x-kubernetes-group-version-kind: group: storage.k8s.io - kind: VolumeAttachment + kind: CSINode version: v1 x-codegen-request-body-name: body x-content-type: application/json @@ -97464,10 +101772,10 @@ paths: - application/vnd.kubernetes.protobuf - application/yaml get: - description: read the specified VolumeAttachment - operationId: readVolumeAttachment + description: read the specified CSINode + operationId: readCSINode parameters: - - description: name of the VolumeAttachment + - description: name of the CSINode in: path name: name required: true @@ -97485,16 +101793,16 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1.VolumeAttachment" + $ref: "#/components/schemas/v1.CSINode" application/yaml: schema: - $ref: "#/components/schemas/v1.VolumeAttachment" + $ref: "#/components/schemas/v1.CSINode" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1.VolumeAttachment" + $ref: "#/components/schemas/v1.CSINode" application/cbor: schema: - $ref: "#/components/schemas/v1.VolumeAttachment" + $ref: "#/components/schemas/v1.CSINode" description: OK "401": content: {} @@ -97504,7 +101812,7 @@ paths: x-kubernetes-action: get x-kubernetes-group-version-kind: group: storage.k8s.io - kind: VolumeAttachment + kind: CSINode version: v1 x-accepts: - application/cbor @@ -97512,10 +101820,10 @@ paths: - application/vnd.kubernetes.protobuf - application/yaml patch: - description: partially update the specified VolumeAttachment - operationId: patchVolumeAttachment + description: partially update the specified CSINode + operationId: patchCSINode parameters: - - description: name of the VolumeAttachment + - description: name of the CSINode in: path name: name required: true @@ -97580,31 +101888,31 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1.VolumeAttachment" + $ref: "#/components/schemas/v1.CSINode" application/yaml: schema: - $ref: "#/components/schemas/v1.VolumeAttachment" + $ref: "#/components/schemas/v1.CSINode" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1.VolumeAttachment" + $ref: "#/components/schemas/v1.CSINode" application/cbor: schema: - $ref: "#/components/schemas/v1.VolumeAttachment" + $ref: "#/components/schemas/v1.CSINode" description: OK "201": content: application/json: schema: - $ref: "#/components/schemas/v1.VolumeAttachment" + $ref: "#/components/schemas/v1.CSINode" application/yaml: schema: - $ref: "#/components/schemas/v1.VolumeAttachment" + $ref: "#/components/schemas/v1.CSINode" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1.VolumeAttachment" + $ref: "#/components/schemas/v1.CSINode" application/cbor: schema: - $ref: "#/components/schemas/v1.VolumeAttachment" + $ref: "#/components/schemas/v1.CSINode" description: Created "401": content: {} @@ -97614,7 +101922,7 @@ paths: x-kubernetes-action: patch x-kubernetes-group-version-kind: group: storage.k8s.io - kind: VolumeAttachment + kind: CSINode version: v1 x-codegen-request-body-name: body x-content-type: application/json @@ -97624,10 +101932,10 @@ paths: - application/vnd.kubernetes.protobuf - application/yaml put: - description: replace the specified VolumeAttachment - operationId: replaceVolumeAttachment + description: replace the specified CSINode + operationId: replaceCSINode parameters: - - description: name of the VolumeAttachment + - description: name of the CSINode in: path name: name required: true @@ -97676,38 +101984,38 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1.VolumeAttachment" + $ref: "#/components/schemas/v1.CSINode" required: true responses: "200": content: application/json: schema: - $ref: "#/components/schemas/v1.VolumeAttachment" + $ref: "#/components/schemas/v1.CSINode" application/yaml: schema: - $ref: "#/components/schemas/v1.VolumeAttachment" + $ref: "#/components/schemas/v1.CSINode" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1.VolumeAttachment" + $ref: "#/components/schemas/v1.CSINode" application/cbor: schema: - $ref: "#/components/schemas/v1.VolumeAttachment" + $ref: "#/components/schemas/v1.CSINode" description: OK "201": content: application/json: schema: - $ref: "#/components/schemas/v1.VolumeAttachment" + $ref: "#/components/schemas/v1.CSINode" application/yaml: schema: - $ref: "#/components/schemas/v1.VolumeAttachment" + $ref: "#/components/schemas/v1.CSINode" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1.VolumeAttachment" + $ref: "#/components/schemas/v1.CSINode" application/cbor: schema: - $ref: "#/components/schemas/v1.VolumeAttachment" + $ref: "#/components/schemas/v1.CSINode" description: Created "401": content: {} @@ -97717,7 +102025,7 @@ paths: x-kubernetes-action: put x-kubernetes-group-version-kind: group: storage.k8s.io - kind: VolumeAttachment + kind: CSINode version: v1 x-codegen-request-body-name: body x-content-type: application/json @@ -97726,12 +102034,12 @@ paths: - application/json - application/vnd.kubernetes.protobuf - application/yaml - /apis/storage.k8s.io/v1/volumeattachments/{name}/status: + /apis/storage.k8s.io/v1/csinodes/{name}/status: get: - description: read status of the specified VolumeAttachment - operationId: readVolumeAttachmentStatus + description: read status of the specified CSINode + operationId: readCSINodeStatus parameters: - - description: name of the VolumeAttachment + - description: name of the CSINode in: path name: name required: true @@ -97749,16 +102057,16 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1.VolumeAttachment" + $ref: "#/components/schemas/v1.CSINode" application/yaml: schema: - $ref: "#/components/schemas/v1.VolumeAttachment" + $ref: "#/components/schemas/v1.CSINode" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1.VolumeAttachment" + $ref: "#/components/schemas/v1.CSINode" application/cbor: schema: - $ref: "#/components/schemas/v1.VolumeAttachment" + $ref: "#/components/schemas/v1.CSINode" description: OK "401": content: {} @@ -97768,7 +102076,7 @@ paths: x-kubernetes-action: get x-kubernetes-group-version-kind: group: storage.k8s.io - kind: VolumeAttachment + kind: CSINode version: v1 x-accepts: - application/cbor @@ -97776,10 +102084,10 @@ paths: - application/vnd.kubernetes.protobuf - application/yaml patch: - description: partially update status of the specified VolumeAttachment - operationId: patchVolumeAttachmentStatus + description: partially update status of the specified CSINode + operationId: patchCSINodeStatus parameters: - - description: name of the VolumeAttachment + - description: name of the CSINode in: path name: name required: true @@ -97844,31 +102152,31 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1.VolumeAttachment" + $ref: "#/components/schemas/v1.CSINode" application/yaml: schema: - $ref: "#/components/schemas/v1.VolumeAttachment" + $ref: "#/components/schemas/v1.CSINode" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1.VolumeAttachment" + $ref: "#/components/schemas/v1.CSINode" application/cbor: schema: - $ref: "#/components/schemas/v1.VolumeAttachment" + $ref: "#/components/schemas/v1.CSINode" description: OK "201": content: application/json: schema: - $ref: "#/components/schemas/v1.VolumeAttachment" + $ref: "#/components/schemas/v1.CSINode" application/yaml: schema: - $ref: "#/components/schemas/v1.VolumeAttachment" + $ref: "#/components/schemas/v1.CSINode" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1.VolumeAttachment" + $ref: "#/components/schemas/v1.CSINode" application/cbor: schema: - $ref: "#/components/schemas/v1.VolumeAttachment" + $ref: "#/components/schemas/v1.CSINode" description: Created "401": content: {} @@ -97878,7 +102186,7 @@ paths: x-kubernetes-action: patch x-kubernetes-group-version-kind: group: storage.k8s.io - kind: VolumeAttachment + kind: CSINode version: v1 x-codegen-request-body-name: body x-content-type: application/json @@ -97888,10 +102196,10 @@ paths: - application/vnd.kubernetes.protobuf - application/yaml put: - description: replace status of the specified VolumeAttachment - operationId: replaceVolumeAttachmentStatus + description: replace status of the specified CSINode + operationId: replaceCSINodeStatus parameters: - - description: name of the VolumeAttachment + - description: name of the CSINode in: path name: name required: true @@ -97940,38 +102248,38 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1.VolumeAttachment" + $ref: "#/components/schemas/v1.CSINode" required: true responses: "200": content: application/json: schema: - $ref: "#/components/schemas/v1.VolumeAttachment" + $ref: "#/components/schemas/v1.CSINode" application/yaml: schema: - $ref: "#/components/schemas/v1.VolumeAttachment" + $ref: "#/components/schemas/v1.CSINode" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1.VolumeAttachment" + $ref: "#/components/schemas/v1.CSINode" application/cbor: schema: - $ref: "#/components/schemas/v1.VolumeAttachment" + $ref: "#/components/schemas/v1.CSINode" description: OK "201": content: application/json: schema: - $ref: "#/components/schemas/v1.VolumeAttachment" + $ref: "#/components/schemas/v1.CSINode" application/yaml: schema: - $ref: "#/components/schemas/v1.VolumeAttachment" + $ref: "#/components/schemas/v1.CSINode" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1.VolumeAttachment" + $ref: "#/components/schemas/v1.CSINode" application/cbor: schema: - $ref: "#/components/schemas/v1.VolumeAttachment" + $ref: "#/components/schemas/v1.CSINode" description: Created "401": content: {} @@ -97981,7 +102289,7 @@ paths: x-kubernetes-action: put x-kubernetes-group-version-kind: group: storage.k8s.io - kind: VolumeAttachment + kind: CSINode version: v1 x-codegen-request-body-name: body x-content-type: application/json @@ -97990,18 +102298,21 @@ paths: - application/json - application/vnd.kubernetes.protobuf - application/yaml - /apis/storage.k8s.io/v1/volumeattributesclasses: - delete: - description: delete collection of VolumeAttributesClass - operationId: deleteCollectionVolumeAttributesClass + /apis/storage.k8s.io/v1/csistoragecapacities: + get: + description: list or watch objects of kind CSIStorageCapacity + operationId: listCSIStorageCapacityForAllNamespaces parameters: - - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ - \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ - \ and wget)." + - description: "allowWatchBookmarks requests watch events with type \"BOOKMARK\"\ + . Servers that do not implement bookmarks may ignore this flag and bookmarks\ + \ are sent at the server's discretion. Clients should not assume bookmarks\ + \ are returned at any specific interval, nor may they assume the server\ + \ will send any BOOKMARK event during a session. If this is not a watch,\ + \ this field is ignored." in: query - name: pretty + name: allowWatchBookmarks schema: - type: string + type: boolean - description: |- The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". @@ -98010,44 +102321,12 @@ paths: name: continue schema: type: string - - description: "When present, indicates that modifications should not be persisted.\ - \ An invalid or unrecognized dryRun directive will result in an error response\ - \ and no further processing of the request. Valid values are: - All: all\ - \ dry run stages will be processed" - in: query - name: dryRun - schema: - type: string - description: A selector to restrict the list of returned objects by their fields. Defaults to everything. in: query name: fieldSelector schema: type: string - - description: "The duration in seconds before the object should be deleted.\ - \ Value must be non-negative integer. The value zero indicates delete immediately.\ - \ If this value is nil, the default grace period for the specified type\ - \ will be used. Defaults to a per object value if not specified. zero means\ - \ delete immediately." - in: query - name: gracePeriodSeconds - schema: - type: integer - - description: "if set to true, it will trigger an unsafe deletion of the resource\ - \ in case the normal deletion flow fails with a corrupt object error. A\ - \ resource is considered corrupt if it can not be retrieved from the underlying\ - \ storage successfully because of a) its data can not be transformed e.g.\ - \ decryption failure, or b) it fails to decode into an object. NOTE: unsafe\ - \ deletion ignores finalizer constraints, skips precondition checks, and\ - \ removes the object from the storage. WARNING: This may potentially break\ - \ the cluster if the workload associated with the resource being unsafe-deleted\ - \ relies on normal deletion flow. Use only if you REALLY know what you are\ - \ doing. The default value is false, and the user must opt in to enable\ - \ it" - in: query - name: ignoreStoreReadErrorWithClusterBreakingPotential - schema: - type: boolean - description: A selector to restrict the list of returned objects by their labels. Defaults to everything. in: query @@ -98062,23 +102341,224 @@ paths: name: limit schema: type: integer - - description: "Deprecated: please use the PropagationPolicy, this field will\ - \ be deprecated in 1.7. Should the dependent objects be orphaned. If true/false,\ - \ the \"orphan\" finalizer will be added to/removed from the object's finalizers\ - \ list. Either this field or PropagationPolicy may be set, but not both." - in: query - name: orphanDependents - schema: - type: boolean - - description: "Whether and how garbage collection will be performed. Either\ - \ this field or OrphanDependents may be set, but not both. The default policy\ - \ is decided by the existing finalizer set in the metadata.finalizers and\ - \ the resource-specific default policy. Acceptable values are: 'Orphan'\ - \ - orphan the dependents; 'Background' - allow the garbage collector to\ - \ delete the dependents in the background; 'Foreground' - a cascading policy\ - \ that deletes all dependents in the foreground." + - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ + \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ + \ and wget)." in: query - name: propagationPolicy + name: pretty + schema: + type: string + - description: |- + resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + + Defaults to unset + in: query + name: resourceVersion + schema: + type: string + - description: |- + resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + + Defaults to unset + in: query + name: resourceVersionMatch + schema: + type: string + - description: |- + `sendInitialEvents=true` may be set together with `watch=true`. In that case, the watch stream will begin with synthetic events to produce the current state of objects in the collection. Once all such events have been sent, a synthetic "Bookmark" event will be sent. The bookmark will report the ResourceVersion (RV) corresponding to the set of objects, and be marked with `"k8s.io/initial-events-end": "true"` annotation. Afterwards, the watch stream will proceed as usual, sending watch events corresponding to changes (subsequent to the RV) to objects watched. + + When `sendInitialEvents` option is set, we require `resourceVersionMatch` option to also be set. The semantic of the watch request is as following: - `resourceVersionMatch` = NotOlderThan + is interpreted as "data at least as new as the provided `resourceVersion`" + and the bookmark event is send when the state is synced + to a `resourceVersion` at least as fresh as the one provided by the ListOptions. + If `resourceVersion` is unset, this is interpreted as "consistent read" and the + bookmark event is send when the state is synced at least to the moment + when request started being processed. + - `resourceVersionMatch` set to any other value or unset + Invalid error is returned. + + Defaults to true if `resourceVersion=""` or `resourceVersion="0"` (for backward compatibility reasons) and to false otherwise. + in: query + name: sendInitialEvents + schema: + type: boolean + - description: |- + shardSelector restricts the list of returned objects using a CEL-based shard selector expression. The format uses the shardRange() function combined with || (logical OR) to specify one or more hash ranges: + + shardRange(object.metadata.uid, '0x0', '0x8000000000000000') + shardRange(object.metadata.uid, '0x0', '0x8000000000000000') || shardRange(object.metadata.uid, '0x8000000000000000', '0x10000000000000000') + + Field paths use CEL-style object-rooted syntax (e.g. "object.metadata.uid"), NOT the fieldSelector format ("metadata.uid"). Currently supported paths: + - object.metadata.uid + - object.metadata.namespace + + hexStart and hexEnd are single-quoted CEL string literals with a '0x' prefix, defining the inclusive lower and exclusive upper bounds over the 64-bit FNV-1a hash space. The full range is [0x0, 0x10000000000000000), where the exclusive upper bound equals 2^64. + + Examples: + 2-shard split: + shard 0: shardRange(object.metadata.uid, '0x0000000000000000', '0x8000000000000000') + shard 1: shardRange(object.metadata.uid, '0x8000000000000000', '0x10000000000000000') + 4-shard split: + shard 0: shardRange(object.metadata.uid, '0x0000000000000000', '0x4000000000000000') + shard 1: shardRange(object.metadata.uid, '0x4000000000000000', '0x8000000000000000') + shard 2: shardRange(object.metadata.uid, '0x8000000000000000', '0xc000000000000000') + shard 3: shardRange(object.metadata.uid, '0xc000000000000000', '0x10000000000000000') + + This is an alpha field and requires enabling the ShardedListAndWatch feature gate. + in: query + name: shardSelector + schema: + type: string + - description: "Timeout for the list/watch call. This limits the duration of\ + \ the call, regardless of any activity or inactivity." + in: query + name: timeoutSeconds + schema: + type: integer + - description: "Watch for changes to the described resources and return them\ + \ as a stream of add, update, and remove notifications. Specify resourceVersion." + in: query + name: watch + schema: + type: boolean + responses: + "200": + content: + application/json: + schema: + $ref: "#/components/schemas/v1.CSIStorageCapacityList" + application/yaml: + schema: + $ref: "#/components/schemas/v1.CSIStorageCapacityList" + application/vnd.kubernetes.protobuf: + schema: + $ref: "#/components/schemas/v1.CSIStorageCapacityList" + application/cbor: + schema: + $ref: "#/components/schemas/v1.CSIStorageCapacityList" + application/json;stream=watch: + schema: + $ref: "#/components/schemas/v1.CSIStorageCapacityList" + application/vnd.kubernetes.protobuf;stream=watch: + schema: + $ref: "#/components/schemas/v1.CSIStorageCapacityList" + application/cbor-seq: + schema: + $ref: "#/components/schemas/v1.CSIStorageCapacityList" + description: OK + "401": + content: {} + description: Unauthorized + tags: + - storage_v1 + x-kubernetes-action: list + x-kubernetes-group-version-kind: + group: storage.k8s.io + kind: CSIStorageCapacity + version: v1 + x-accepts: + - application/cbor + - application/cbor-seq + - application/json + - application/json;stream=watch + - application/vnd.kubernetes.protobuf + - application/vnd.kubernetes.protobuf;stream=watch + - application/yaml + /apis/storage.k8s.io/v1/namespaces/{namespace}/csistoragecapacities: + delete: + description: delete collection of CSIStorageCapacity + operationId: deleteCollectionNamespacedCSIStorageCapacity + parameters: + - description: "object name and auth scope, such as for teams and projects" + in: path + name: namespace + required: true + schema: + type: string + - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ + \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ + \ and wget)." + in: query + name: pretty + schema: + type: string + - description: |- + The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + + This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications. + in: query + name: continue + schema: + type: string + - description: "When present, indicates that modifications should not be persisted.\ + \ An invalid or unrecognized dryRun directive will result in an error response\ + \ and no further processing of the request. Valid values are: - All: all\ + \ dry run stages will be processed" + in: query + name: dryRun + schema: + type: string + - description: A selector to restrict the list of returned objects by their + fields. Defaults to everything. + in: query + name: fieldSelector + schema: + type: string + - description: "The duration in seconds before the object should be deleted.\ + \ Value must be non-negative integer. The value zero indicates delete immediately.\ + \ If this value is nil, the default grace period for the specified type\ + \ will be used. Defaults to a per object value if not specified. zero means\ + \ delete immediately." + in: query + name: gracePeriodSeconds + schema: + type: integer + - description: "if set to true, it will trigger an unsafe deletion of the resource\ + \ in case the normal deletion flow fails with a corrupt object error. A\ + \ resource is considered corrupt if it can not be retrieved from the underlying\ + \ storage successfully because of a) its data can not be transformed e.g.\ + \ decryption failure, or b) it fails to decode into an object. NOTE: unsafe\ + \ deletion ignores finalizer constraints, skips precondition checks, and\ + \ removes the object from the storage. WARNING: This may potentially break\ + \ the cluster if the workload associated with the resource being unsafe-deleted\ + \ relies on normal deletion flow. Use only if you REALLY know what you are\ + \ doing. The default value is false, and the user must opt in to enable\ + \ it" + in: query + name: ignoreStoreReadErrorWithClusterBreakingPotential + schema: + type: boolean + - description: A selector to restrict the list of returned objects by their + labels. Defaults to everything. + in: query + name: labelSelector + schema: + type: string + - description: |- + limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + + The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned. + in: query + name: limit + schema: + type: integer + - description: "Deprecated: please use the PropagationPolicy, this field will\ + \ be deprecated in 1.7. Should the dependent objects be orphaned. If true/false,\ + \ the \"orphan\" finalizer will be added to/removed from the object's finalizers\ + \ list. Either this field or PropagationPolicy may be set, but not both." + in: query + name: orphanDependents + schema: + type: boolean + - description: "Whether and how garbage collection will be performed. Either\ + \ this field or OrphanDependents may be set, but not both. The default policy\ + \ is decided by the existing finalizer set in the metadata.finalizers and\ + \ the resource-specific default policy. Acceptable values are: 'Orphan'\ + \ - orphan the dependents; 'Background' - allow the garbage collector to\ + \ delete the dependents in the background; 'Foreground' - a cascading policy\ + \ that deletes all dependents in the foreground." + in: query + name: propagationPolicy schema: type: string - description: |- @@ -98178,7 +102658,7 @@ paths: x-kubernetes-action: deletecollection x-kubernetes-group-version-kind: group: storage.k8s.io - kind: VolumeAttributesClass + kind: CSIStorageCapacity version: v1 x-codegen-request-body-name: body x-content-type: application/json @@ -98188,9 +102668,15 @@ paths: - application/vnd.kubernetes.protobuf - application/yaml get: - description: list or watch objects of kind VolumeAttributesClass - operationId: listVolumeAttributesClass + description: list or watch objects of kind CSIStorageCapacity + operationId: listNamespacedCSIStorageCapacity parameters: + - description: "object name and auth scope, such as for teams and projects" + in: path + name: namespace + required: true + schema: + type: string - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ \ and wget)." @@ -98314,25 +102800,25 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1.VolumeAttributesClassList" + $ref: "#/components/schemas/v1.CSIStorageCapacityList" application/yaml: schema: - $ref: "#/components/schemas/v1.VolumeAttributesClassList" + $ref: "#/components/schemas/v1.CSIStorageCapacityList" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1.VolumeAttributesClassList" + $ref: "#/components/schemas/v1.CSIStorageCapacityList" application/cbor: schema: - $ref: "#/components/schemas/v1.VolumeAttributesClassList" + $ref: "#/components/schemas/v1.CSIStorageCapacityList" application/json;stream=watch: schema: - $ref: "#/components/schemas/v1.VolumeAttributesClassList" + $ref: "#/components/schemas/v1.CSIStorageCapacityList" application/vnd.kubernetes.protobuf;stream=watch: schema: - $ref: "#/components/schemas/v1.VolumeAttributesClassList" + $ref: "#/components/schemas/v1.CSIStorageCapacityList" application/cbor-seq: schema: - $ref: "#/components/schemas/v1.VolumeAttributesClassList" + $ref: "#/components/schemas/v1.CSIStorageCapacityList" description: OK "401": content: {} @@ -98342,7 +102828,7 @@ paths: x-kubernetes-action: list x-kubernetes-group-version-kind: group: storage.k8s.io - kind: VolumeAttributesClass + kind: CSIStorageCapacity version: v1 x-accepts: - application/cbor @@ -98353,9 +102839,15 @@ paths: - application/vnd.kubernetes.protobuf;stream=watch - application/yaml post: - description: create a VolumeAttributesClass - operationId: createVolumeAttributesClass + description: create a CSIStorageCapacity + operationId: createNamespacedCSIStorageCapacity parameters: + - description: "object name and auth scope, such as for teams and projects" + in: path + name: namespace + required: true + schema: + type: string - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ \ and wget)." @@ -98399,53 +102891,53 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1.VolumeAttributesClass" + $ref: "#/components/schemas/v1.CSIStorageCapacity" required: true responses: "200": content: application/json: schema: - $ref: "#/components/schemas/v1.VolumeAttributesClass" + $ref: "#/components/schemas/v1.CSIStorageCapacity" application/yaml: schema: - $ref: "#/components/schemas/v1.VolumeAttributesClass" + $ref: "#/components/schemas/v1.CSIStorageCapacity" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1.VolumeAttributesClass" + $ref: "#/components/schemas/v1.CSIStorageCapacity" application/cbor: schema: - $ref: "#/components/schemas/v1.VolumeAttributesClass" + $ref: "#/components/schemas/v1.CSIStorageCapacity" description: OK "201": content: application/json: schema: - $ref: "#/components/schemas/v1.VolumeAttributesClass" + $ref: "#/components/schemas/v1.CSIStorageCapacity" application/yaml: schema: - $ref: "#/components/schemas/v1.VolumeAttributesClass" + $ref: "#/components/schemas/v1.CSIStorageCapacity" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1.VolumeAttributesClass" + $ref: "#/components/schemas/v1.CSIStorageCapacity" application/cbor: schema: - $ref: "#/components/schemas/v1.VolumeAttributesClass" + $ref: "#/components/schemas/v1.CSIStorageCapacity" description: Created "202": content: application/json: schema: - $ref: "#/components/schemas/v1.VolumeAttributesClass" + $ref: "#/components/schemas/v1.CSIStorageCapacity" application/yaml: schema: - $ref: "#/components/schemas/v1.VolumeAttributesClass" + $ref: "#/components/schemas/v1.CSIStorageCapacity" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1.VolumeAttributesClass" + $ref: "#/components/schemas/v1.CSIStorageCapacity" application/cbor: schema: - $ref: "#/components/schemas/v1.VolumeAttributesClass" + $ref: "#/components/schemas/v1.CSIStorageCapacity" description: Accepted "401": content: {} @@ -98455,7 +102947,7 @@ paths: x-kubernetes-action: post x-kubernetes-group-version-kind: group: storage.k8s.io - kind: VolumeAttributesClass + kind: CSIStorageCapacity version: v1 x-codegen-request-body-name: body x-content-type: application/json @@ -98464,17 +102956,23 @@ paths: - application/json - application/vnd.kubernetes.protobuf - application/yaml - /apis/storage.k8s.io/v1/volumeattributesclasses/{name}: + /apis/storage.k8s.io/v1/namespaces/{namespace}/csistoragecapacities/{name}: delete: - description: delete a VolumeAttributesClass - operationId: deleteVolumeAttributesClass + description: delete a CSIStorageCapacity + operationId: deleteNamespacedCSIStorageCapacity parameters: - - description: name of the VolumeAttributesClass + - description: name of the CSIStorageCapacity in: path name: name required: true schema: type: string + - description: "object name and auth scope, such as for teams and projects" + in: path + name: namespace + required: true + schema: + type: string - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ \ and wget)." @@ -98544,31 +103042,31 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1.VolumeAttributesClass" + $ref: "#/components/schemas/v1.Status" application/yaml: schema: - $ref: "#/components/schemas/v1.VolumeAttributesClass" + $ref: "#/components/schemas/v1.Status" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1.VolumeAttributesClass" + $ref: "#/components/schemas/v1.Status" application/cbor: schema: - $ref: "#/components/schemas/v1.VolumeAttributesClass" + $ref: "#/components/schemas/v1.Status" description: OK "202": content: application/json: schema: - $ref: "#/components/schemas/v1.VolumeAttributesClass" + $ref: "#/components/schemas/v1.Status" application/yaml: schema: - $ref: "#/components/schemas/v1.VolumeAttributesClass" + $ref: "#/components/schemas/v1.Status" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1.VolumeAttributesClass" + $ref: "#/components/schemas/v1.Status" application/cbor: schema: - $ref: "#/components/schemas/v1.VolumeAttributesClass" + $ref: "#/components/schemas/v1.Status" description: Accepted "401": content: {} @@ -98578,7 +103076,7 @@ paths: x-kubernetes-action: delete x-kubernetes-group-version-kind: group: storage.k8s.io - kind: VolumeAttributesClass + kind: CSIStorageCapacity version: v1 x-codegen-request-body-name: body x-content-type: application/json @@ -98588,15 +103086,21 @@ paths: - application/vnd.kubernetes.protobuf - application/yaml get: - description: read the specified VolumeAttributesClass - operationId: readVolumeAttributesClass + description: read the specified CSIStorageCapacity + operationId: readNamespacedCSIStorageCapacity parameters: - - description: name of the VolumeAttributesClass + - description: name of the CSIStorageCapacity in: path name: name required: true schema: type: string + - description: "object name and auth scope, such as for teams and projects" + in: path + name: namespace + required: true + schema: + type: string - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ \ and wget)." @@ -98609,16 +103113,16 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1.VolumeAttributesClass" + $ref: "#/components/schemas/v1.CSIStorageCapacity" application/yaml: schema: - $ref: "#/components/schemas/v1.VolumeAttributesClass" + $ref: "#/components/schemas/v1.CSIStorageCapacity" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1.VolumeAttributesClass" + $ref: "#/components/schemas/v1.CSIStorageCapacity" application/cbor: schema: - $ref: "#/components/schemas/v1.VolumeAttributesClass" + $ref: "#/components/schemas/v1.CSIStorageCapacity" description: OK "401": content: {} @@ -98628,7 +103132,7 @@ paths: x-kubernetes-action: get x-kubernetes-group-version-kind: group: storage.k8s.io - kind: VolumeAttributesClass + kind: CSIStorageCapacity version: v1 x-accepts: - application/cbor @@ -98636,15 +103140,21 @@ paths: - application/vnd.kubernetes.protobuf - application/yaml patch: - description: partially update the specified VolumeAttributesClass - operationId: patchVolumeAttributesClass + description: partially update the specified CSIStorageCapacity + operationId: patchNamespacedCSIStorageCapacity parameters: - - description: name of the VolumeAttributesClass + - description: name of the CSIStorageCapacity in: path name: name required: true schema: type: string + - description: "object name and auth scope, such as for teams and projects" + in: path + name: namespace + required: true + schema: + type: string - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ \ and wget)." @@ -98704,31 +103214,31 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1.VolumeAttributesClass" + $ref: "#/components/schemas/v1.CSIStorageCapacity" application/yaml: schema: - $ref: "#/components/schemas/v1.VolumeAttributesClass" + $ref: "#/components/schemas/v1.CSIStorageCapacity" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1.VolumeAttributesClass" + $ref: "#/components/schemas/v1.CSIStorageCapacity" application/cbor: schema: - $ref: "#/components/schemas/v1.VolumeAttributesClass" + $ref: "#/components/schemas/v1.CSIStorageCapacity" description: OK "201": content: application/json: schema: - $ref: "#/components/schemas/v1.VolumeAttributesClass" + $ref: "#/components/schemas/v1.CSIStorageCapacity" application/yaml: schema: - $ref: "#/components/schemas/v1.VolumeAttributesClass" + $ref: "#/components/schemas/v1.CSIStorageCapacity" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1.VolumeAttributesClass" + $ref: "#/components/schemas/v1.CSIStorageCapacity" application/cbor: schema: - $ref: "#/components/schemas/v1.VolumeAttributesClass" + $ref: "#/components/schemas/v1.CSIStorageCapacity" description: Created "401": content: {} @@ -98738,7 +103248,7 @@ paths: x-kubernetes-action: patch x-kubernetes-group-version-kind: group: storage.k8s.io - kind: VolumeAttributesClass + kind: CSIStorageCapacity version: v1 x-codegen-request-body-name: body x-content-type: application/json @@ -98748,15 +103258,21 @@ paths: - application/vnd.kubernetes.protobuf - application/yaml put: - description: replace the specified VolumeAttributesClass - operationId: replaceVolumeAttributesClass + description: replace the specified CSIStorageCapacity + operationId: replaceNamespacedCSIStorageCapacity parameters: - - description: name of the VolumeAttributesClass + - description: name of the CSIStorageCapacity in: path name: name required: true schema: type: string + - description: "object name and auth scope, such as for teams and projects" + in: path + name: namespace + required: true + schema: + type: string - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ \ and wget)." @@ -98800,38 +103316,38 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1.VolumeAttributesClass" + $ref: "#/components/schemas/v1.CSIStorageCapacity" required: true responses: "200": content: application/json: schema: - $ref: "#/components/schemas/v1.VolumeAttributesClass" + $ref: "#/components/schemas/v1.CSIStorageCapacity" application/yaml: schema: - $ref: "#/components/schemas/v1.VolumeAttributesClass" + $ref: "#/components/schemas/v1.CSIStorageCapacity" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1.VolumeAttributesClass" + $ref: "#/components/schemas/v1.CSIStorageCapacity" application/cbor: schema: - $ref: "#/components/schemas/v1.VolumeAttributesClass" + $ref: "#/components/schemas/v1.CSIStorageCapacity" description: OK "201": content: application/json: schema: - $ref: "#/components/schemas/v1.VolumeAttributesClass" + $ref: "#/components/schemas/v1.CSIStorageCapacity" application/yaml: schema: - $ref: "#/components/schemas/v1.VolumeAttributesClass" + $ref: "#/components/schemas/v1.CSIStorageCapacity" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1.VolumeAttributesClass" + $ref: "#/components/schemas/v1.CSIStorageCapacity" application/cbor: schema: - $ref: "#/components/schemas/v1.VolumeAttributesClass" + $ref: "#/components/schemas/v1.CSIStorageCapacity" description: Created "401": content: {} @@ -98841,7 +103357,7 @@ paths: x-kubernetes-action: put x-kubernetes-group-version-kind: group: storage.k8s.io - kind: VolumeAttributesClass + kind: CSIStorageCapacity version: v1 x-codegen-request-body-name: body x-content-type: application/json @@ -98850,53 +103366,10 @@ paths: - application/json - application/vnd.kubernetes.protobuf - application/yaml - /apis/storage.k8s.io/v1/watch/csidrivers: {} - /apis/storage.k8s.io/v1/watch/csidrivers/{name}: {} - /apis/storage.k8s.io/v1/watch/csinodes: {} - /apis/storage.k8s.io/v1/watch/csinodes/{name}: {} - /apis/storage.k8s.io/v1/watch/csistoragecapacities: {} - /apis/storage.k8s.io/v1/watch/namespaces/{namespace}/csistoragecapacities: {} - /apis/storage.k8s.io/v1/watch/namespaces/{namespace}/csistoragecapacities/{name}: {} - /apis/storage.k8s.io/v1/watch/storageclasses: {} - /apis/storage.k8s.io/v1/watch/storageclasses/{name}: {} - /apis/storage.k8s.io/v1/watch/volumeattachments: {} - /apis/storage.k8s.io/v1/watch/volumeattachments/{name}: {} - /apis/storage.k8s.io/v1/watch/volumeattributesclasses: {} - /apis/storage.k8s.io/v1/watch/volumeattributesclasses/{name}: {} - /apis/storage.k8s.io/v1beta1/: - get: - description: get available resources - operationId: getAPIResources - responses: - "200": - content: - application/json: - schema: - $ref: "#/components/schemas/v1.APIResourceList" - application/yaml: - schema: - $ref: "#/components/schemas/v1.APIResourceList" - application/vnd.kubernetes.protobuf: - schema: - $ref: "#/components/schemas/v1.APIResourceList" - application/cbor: - schema: - $ref: "#/components/schemas/v1.APIResourceList" - description: OK - "401": - content: {} - description: Unauthorized - tags: - - storage_v1beta1 - x-accepts: - - application/cbor - - application/json - - application/vnd.kubernetes.protobuf - - application/yaml - /apis/storage.k8s.io/v1beta1/volumeattributesclasses: + /apis/storage.k8s.io/v1/storageclasses: delete: - description: delete collection of VolumeAttributesClass - operationId: deleteCollectionVolumeAttributesClass + description: delete collection of StorageClass + operationId: deleteCollectionStorageClass parameters: - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ @@ -99077,12 +103550,12 @@ paths: content: {} description: Unauthorized tags: - - storage_v1beta1 + - storage_v1 x-kubernetes-action: deletecollection x-kubernetes-group-version-kind: group: storage.k8s.io - kind: VolumeAttributesClass - version: v1beta1 + kind: StorageClass + version: v1 x-codegen-request-body-name: body x-content-type: application/json x-accepts: @@ -99091,8 +103564,8 @@ paths: - application/vnd.kubernetes.protobuf - application/yaml get: - description: list or watch objects of kind VolumeAttributesClass - operationId: listVolumeAttributesClass + description: list or watch objects of kind StorageClass + operationId: listStorageClass parameters: - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ @@ -99217,36 +103690,36 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1beta1.VolumeAttributesClassList" + $ref: "#/components/schemas/v1.StorageClassList" application/yaml: schema: - $ref: "#/components/schemas/v1beta1.VolumeAttributesClassList" + $ref: "#/components/schemas/v1.StorageClassList" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1beta1.VolumeAttributesClassList" + $ref: "#/components/schemas/v1.StorageClassList" application/cbor: schema: - $ref: "#/components/schemas/v1beta1.VolumeAttributesClassList" + $ref: "#/components/schemas/v1.StorageClassList" application/json;stream=watch: schema: - $ref: "#/components/schemas/v1beta1.VolumeAttributesClassList" + $ref: "#/components/schemas/v1.StorageClassList" application/vnd.kubernetes.protobuf;stream=watch: schema: - $ref: "#/components/schemas/v1beta1.VolumeAttributesClassList" + $ref: "#/components/schemas/v1.StorageClassList" application/cbor-seq: schema: - $ref: "#/components/schemas/v1beta1.VolumeAttributesClassList" + $ref: "#/components/schemas/v1.StorageClassList" description: OK "401": content: {} description: Unauthorized tags: - - storage_v1beta1 + - storage_v1 x-kubernetes-action: list x-kubernetes-group-version-kind: group: storage.k8s.io - kind: VolumeAttributesClass - version: v1beta1 + kind: StorageClass + version: v1 x-accepts: - application/cbor - application/cbor-seq @@ -99256,8 +103729,8 @@ paths: - application/vnd.kubernetes.protobuf;stream=watch - application/yaml post: - description: create a VolumeAttributesClass - operationId: createVolumeAttributesClass + description: create a StorageClass + operationId: createStorageClass parameters: - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ @@ -99302,64 +103775,64 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1beta1.VolumeAttributesClass" + $ref: "#/components/schemas/v1.StorageClass" required: true responses: "200": content: application/json: schema: - $ref: "#/components/schemas/v1beta1.VolumeAttributesClass" + $ref: "#/components/schemas/v1.StorageClass" application/yaml: schema: - $ref: "#/components/schemas/v1beta1.VolumeAttributesClass" + $ref: "#/components/schemas/v1.StorageClass" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1beta1.VolumeAttributesClass" + $ref: "#/components/schemas/v1.StorageClass" application/cbor: schema: - $ref: "#/components/schemas/v1beta1.VolumeAttributesClass" + $ref: "#/components/schemas/v1.StorageClass" description: OK "201": content: application/json: schema: - $ref: "#/components/schemas/v1beta1.VolumeAttributesClass" + $ref: "#/components/schemas/v1.StorageClass" application/yaml: schema: - $ref: "#/components/schemas/v1beta1.VolumeAttributesClass" + $ref: "#/components/schemas/v1.StorageClass" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1beta1.VolumeAttributesClass" + $ref: "#/components/schemas/v1.StorageClass" application/cbor: schema: - $ref: "#/components/schemas/v1beta1.VolumeAttributesClass" + $ref: "#/components/schemas/v1.StorageClass" description: Created "202": content: application/json: schema: - $ref: "#/components/schemas/v1beta1.VolumeAttributesClass" + $ref: "#/components/schemas/v1.StorageClass" application/yaml: schema: - $ref: "#/components/schemas/v1beta1.VolumeAttributesClass" + $ref: "#/components/schemas/v1.StorageClass" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1beta1.VolumeAttributesClass" + $ref: "#/components/schemas/v1.StorageClass" application/cbor: schema: - $ref: "#/components/schemas/v1beta1.VolumeAttributesClass" + $ref: "#/components/schemas/v1.StorageClass" description: Accepted "401": content: {} description: Unauthorized tags: - - storage_v1beta1 + - storage_v1 x-kubernetes-action: post x-kubernetes-group-version-kind: group: storage.k8s.io - kind: VolumeAttributesClass - version: v1beta1 + kind: StorageClass + version: v1 x-codegen-request-body-name: body x-content-type: application/json x-accepts: @@ -99367,12 +103840,12 @@ paths: - application/json - application/vnd.kubernetes.protobuf - application/yaml - /apis/storage.k8s.io/v1beta1/volumeattributesclasses/{name}: + /apis/storage.k8s.io/v1/storageclasses/{name}: delete: - description: delete a VolumeAttributesClass - operationId: deleteVolumeAttributesClass + description: delete a StorageClass + operationId: deleteStorageClass parameters: - - description: name of the VolumeAttributesClass + - description: name of the StorageClass in: path name: name required: true @@ -99447,42 +103920,42 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1beta1.VolumeAttributesClass" + $ref: "#/components/schemas/v1.StorageClass" application/yaml: schema: - $ref: "#/components/schemas/v1beta1.VolumeAttributesClass" + $ref: "#/components/schemas/v1.StorageClass" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1beta1.VolumeAttributesClass" + $ref: "#/components/schemas/v1.StorageClass" application/cbor: schema: - $ref: "#/components/schemas/v1beta1.VolumeAttributesClass" + $ref: "#/components/schemas/v1.StorageClass" description: OK "202": content: application/json: schema: - $ref: "#/components/schemas/v1beta1.VolumeAttributesClass" + $ref: "#/components/schemas/v1.StorageClass" application/yaml: schema: - $ref: "#/components/schemas/v1beta1.VolumeAttributesClass" + $ref: "#/components/schemas/v1.StorageClass" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1beta1.VolumeAttributesClass" + $ref: "#/components/schemas/v1.StorageClass" application/cbor: schema: - $ref: "#/components/schemas/v1beta1.VolumeAttributesClass" + $ref: "#/components/schemas/v1.StorageClass" description: Accepted "401": content: {} description: Unauthorized tags: - - storage_v1beta1 + - storage_v1 x-kubernetes-action: delete x-kubernetes-group-version-kind: group: storage.k8s.io - kind: VolumeAttributesClass - version: v1beta1 + kind: StorageClass + version: v1 x-codegen-request-body-name: body x-content-type: application/json x-accepts: @@ -99491,10 +103964,10 @@ paths: - application/vnd.kubernetes.protobuf - application/yaml get: - description: read the specified VolumeAttributesClass - operationId: readVolumeAttributesClass + description: read the specified StorageClass + operationId: readStorageClass parameters: - - description: name of the VolumeAttributesClass + - description: name of the StorageClass in: path name: name required: true @@ -99512,37 +103985,37 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1beta1.VolumeAttributesClass" + $ref: "#/components/schemas/v1.StorageClass" application/yaml: schema: - $ref: "#/components/schemas/v1beta1.VolumeAttributesClass" + $ref: "#/components/schemas/v1.StorageClass" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1beta1.VolumeAttributesClass" + $ref: "#/components/schemas/v1.StorageClass" application/cbor: schema: - $ref: "#/components/schemas/v1beta1.VolumeAttributesClass" + $ref: "#/components/schemas/v1.StorageClass" description: OK "401": content: {} description: Unauthorized tags: - - storage_v1beta1 + - storage_v1 x-kubernetes-action: get x-kubernetes-group-version-kind: group: storage.k8s.io - kind: VolumeAttributesClass - version: v1beta1 + kind: StorageClass + version: v1 x-accepts: - application/cbor - application/json - application/vnd.kubernetes.protobuf - application/yaml patch: - description: partially update the specified VolumeAttributesClass - operationId: patchVolumeAttributesClass + description: partially update the specified StorageClass + operationId: patchStorageClass parameters: - - description: name of the VolumeAttributesClass + - description: name of the StorageClass in: path name: name required: true @@ -99607,42 +104080,42 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1beta1.VolumeAttributesClass" + $ref: "#/components/schemas/v1.StorageClass" application/yaml: schema: - $ref: "#/components/schemas/v1beta1.VolumeAttributesClass" + $ref: "#/components/schemas/v1.StorageClass" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1beta1.VolumeAttributesClass" + $ref: "#/components/schemas/v1.StorageClass" application/cbor: schema: - $ref: "#/components/schemas/v1beta1.VolumeAttributesClass" + $ref: "#/components/schemas/v1.StorageClass" description: OK "201": content: application/json: schema: - $ref: "#/components/schemas/v1beta1.VolumeAttributesClass" + $ref: "#/components/schemas/v1.StorageClass" application/yaml: schema: - $ref: "#/components/schemas/v1beta1.VolumeAttributesClass" + $ref: "#/components/schemas/v1.StorageClass" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1beta1.VolumeAttributesClass" + $ref: "#/components/schemas/v1.StorageClass" application/cbor: schema: - $ref: "#/components/schemas/v1beta1.VolumeAttributesClass" + $ref: "#/components/schemas/v1.StorageClass" description: Created "401": content: {} description: Unauthorized tags: - - storage_v1beta1 + - storage_v1 x-kubernetes-action: patch x-kubernetes-group-version-kind: group: storage.k8s.io - kind: VolumeAttributesClass - version: v1beta1 + kind: StorageClass + version: v1 x-codegen-request-body-name: body x-content-type: application/json x-accepts: @@ -99651,10 +104124,10 @@ paths: - application/vnd.kubernetes.protobuf - application/yaml put: - description: replace the specified VolumeAttributesClass - operationId: replaceVolumeAttributesClass + description: replace the specified StorageClass + operationId: replaceStorageClass parameters: - - description: name of the VolumeAttributesClass + - description: name of the StorageClass in: path name: name required: true @@ -99703,49 +104176,49 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1beta1.VolumeAttributesClass" + $ref: "#/components/schemas/v1.StorageClass" required: true responses: "200": content: application/json: schema: - $ref: "#/components/schemas/v1beta1.VolumeAttributesClass" + $ref: "#/components/schemas/v1.StorageClass" application/yaml: schema: - $ref: "#/components/schemas/v1beta1.VolumeAttributesClass" + $ref: "#/components/schemas/v1.StorageClass" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1beta1.VolumeAttributesClass" + $ref: "#/components/schemas/v1.StorageClass" application/cbor: schema: - $ref: "#/components/schemas/v1beta1.VolumeAttributesClass" + $ref: "#/components/schemas/v1.StorageClass" description: OK "201": content: application/json: schema: - $ref: "#/components/schemas/v1beta1.VolumeAttributesClass" + $ref: "#/components/schemas/v1.StorageClass" application/yaml: schema: - $ref: "#/components/schemas/v1beta1.VolumeAttributesClass" + $ref: "#/components/schemas/v1.StorageClass" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1beta1.VolumeAttributesClass" + $ref: "#/components/schemas/v1.StorageClass" application/cbor: schema: - $ref: "#/components/schemas/v1beta1.VolumeAttributesClass" + $ref: "#/components/schemas/v1.StorageClass" description: Created "401": content: {} description: Unauthorized tags: - - storage_v1beta1 + - storage_v1 x-kubernetes-action: put x-kubernetes-group-version-kind: group: storage.k8s.io - kind: VolumeAttributesClass - version: v1beta1 + kind: StorageClass + version: v1 x-codegen-request-body-name: body x-content-type: application/json x-accepts: @@ -99753,68 +104226,10 @@ paths: - application/json - application/vnd.kubernetes.protobuf - application/yaml - /apis/storage.k8s.io/v1beta1/watch/volumeattributesclasses: {} - /apis/storage.k8s.io/v1beta1/watch/volumeattributesclasses/{name}: {} - /apis/storagemigration.k8s.io/: - get: - description: get information of a group - operationId: getAPIGroup - responses: - "200": - content: - application/json: - schema: - $ref: "#/components/schemas/v1.APIGroup" - application/yaml: - schema: - $ref: "#/components/schemas/v1.APIGroup" - application/vnd.kubernetes.protobuf: - schema: - $ref: "#/components/schemas/v1.APIGroup" - description: OK - "401": - content: {} - description: Unauthorized - tags: - - storagemigration - x-accepts: - - application/json - - application/vnd.kubernetes.protobuf - - application/yaml - /apis/storagemigration.k8s.io/v1beta1/: - get: - description: get available resources - operationId: getAPIResources - responses: - "200": - content: - application/json: - schema: - $ref: "#/components/schemas/v1.APIResourceList" - application/yaml: - schema: - $ref: "#/components/schemas/v1.APIResourceList" - application/vnd.kubernetes.protobuf: - schema: - $ref: "#/components/schemas/v1.APIResourceList" - application/cbor: - schema: - $ref: "#/components/schemas/v1.APIResourceList" - description: OK - "401": - content: {} - description: Unauthorized - tags: - - storagemigration_v1beta1 - x-accepts: - - application/cbor - - application/json - - application/vnd.kubernetes.protobuf - - application/yaml - /apis/storagemigration.k8s.io/v1beta1/storageversionmigrations: + /apis/storage.k8s.io/v1/volumeattachments: delete: - description: delete collection of StorageVersionMigration - operationId: deleteCollectionStorageVersionMigration + description: delete collection of VolumeAttachment + operationId: deleteCollectionVolumeAttachment parameters: - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ @@ -99995,12 +104410,12 @@ paths: content: {} description: Unauthorized tags: - - storagemigration_v1beta1 + - storage_v1 x-kubernetes-action: deletecollection x-kubernetes-group-version-kind: - group: storagemigration.k8s.io - kind: StorageVersionMigration - version: v1beta1 + group: storage.k8s.io + kind: VolumeAttachment + version: v1 x-codegen-request-body-name: body x-content-type: application/json x-accepts: @@ -100009,8 +104424,8 @@ paths: - application/vnd.kubernetes.protobuf - application/yaml get: - description: list or watch objects of kind StorageVersionMigration - operationId: listStorageVersionMigration + description: list or watch objects of kind VolumeAttachment + operationId: listVolumeAttachment parameters: - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ @@ -100135,36 +104550,36 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1beta1.StorageVersionMigrationList" + $ref: "#/components/schemas/v1.VolumeAttachmentList" application/yaml: schema: - $ref: "#/components/schemas/v1beta1.StorageVersionMigrationList" + $ref: "#/components/schemas/v1.VolumeAttachmentList" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1beta1.StorageVersionMigrationList" + $ref: "#/components/schemas/v1.VolumeAttachmentList" application/cbor: schema: - $ref: "#/components/schemas/v1beta1.StorageVersionMigrationList" + $ref: "#/components/schemas/v1.VolumeAttachmentList" application/json;stream=watch: schema: - $ref: "#/components/schemas/v1beta1.StorageVersionMigrationList" + $ref: "#/components/schemas/v1.VolumeAttachmentList" application/vnd.kubernetes.protobuf;stream=watch: schema: - $ref: "#/components/schemas/v1beta1.StorageVersionMigrationList" + $ref: "#/components/schemas/v1.VolumeAttachmentList" application/cbor-seq: schema: - $ref: "#/components/schemas/v1beta1.StorageVersionMigrationList" + $ref: "#/components/schemas/v1.VolumeAttachmentList" description: OK "401": content: {} description: Unauthorized tags: - - storagemigration_v1beta1 + - storage_v1 x-kubernetes-action: list x-kubernetes-group-version-kind: - group: storagemigration.k8s.io - kind: StorageVersionMigration - version: v1beta1 + group: storage.k8s.io + kind: VolumeAttachment + version: v1 x-accepts: - application/cbor - application/cbor-seq @@ -100174,8 +104589,8 @@ paths: - application/vnd.kubernetes.protobuf;stream=watch - application/yaml post: - description: create a StorageVersionMigration - operationId: createStorageVersionMigration + description: create a VolumeAttachment + operationId: createVolumeAttachment parameters: - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ @@ -100220,64 +104635,64 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1beta1.StorageVersionMigration" + $ref: "#/components/schemas/v1.VolumeAttachment" required: true responses: "200": content: application/json: schema: - $ref: "#/components/schemas/v1beta1.StorageVersionMigration" + $ref: "#/components/schemas/v1.VolumeAttachment" application/yaml: schema: - $ref: "#/components/schemas/v1beta1.StorageVersionMigration" + $ref: "#/components/schemas/v1.VolumeAttachment" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1beta1.StorageVersionMigration" + $ref: "#/components/schemas/v1.VolumeAttachment" application/cbor: schema: - $ref: "#/components/schemas/v1beta1.StorageVersionMigration" + $ref: "#/components/schemas/v1.VolumeAttachment" description: OK "201": content: application/json: schema: - $ref: "#/components/schemas/v1beta1.StorageVersionMigration" + $ref: "#/components/schemas/v1.VolumeAttachment" application/yaml: schema: - $ref: "#/components/schemas/v1beta1.StorageVersionMigration" + $ref: "#/components/schemas/v1.VolumeAttachment" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1beta1.StorageVersionMigration" + $ref: "#/components/schemas/v1.VolumeAttachment" application/cbor: schema: - $ref: "#/components/schemas/v1beta1.StorageVersionMigration" + $ref: "#/components/schemas/v1.VolumeAttachment" description: Created "202": content: application/json: schema: - $ref: "#/components/schemas/v1beta1.StorageVersionMigration" + $ref: "#/components/schemas/v1.VolumeAttachment" application/yaml: schema: - $ref: "#/components/schemas/v1beta1.StorageVersionMigration" + $ref: "#/components/schemas/v1.VolumeAttachment" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1beta1.StorageVersionMigration" + $ref: "#/components/schemas/v1.VolumeAttachment" application/cbor: schema: - $ref: "#/components/schemas/v1beta1.StorageVersionMigration" + $ref: "#/components/schemas/v1.VolumeAttachment" description: Accepted "401": content: {} description: Unauthorized tags: - - storagemigration_v1beta1 + - storage_v1 x-kubernetes-action: post x-kubernetes-group-version-kind: - group: storagemigration.k8s.io - kind: StorageVersionMigration - version: v1beta1 + group: storage.k8s.io + kind: VolumeAttachment + version: v1 x-codegen-request-body-name: body x-content-type: application/json x-accepts: @@ -100285,12 +104700,12 @@ paths: - application/json - application/vnd.kubernetes.protobuf - application/yaml - /apis/storagemigration.k8s.io/v1beta1/storageversionmigrations/{name}: + /apis/storage.k8s.io/v1/volumeattachments/{name}: delete: - description: delete a StorageVersionMigration - operationId: deleteStorageVersionMigration + description: delete a VolumeAttachment + operationId: deleteVolumeAttachment parameters: - - description: name of the StorageVersionMigration + - description: name of the VolumeAttachment in: path name: name required: true @@ -100365,42 +104780,42 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1.Status" + $ref: "#/components/schemas/v1.VolumeAttachment" application/yaml: schema: - $ref: "#/components/schemas/v1.Status" + $ref: "#/components/schemas/v1.VolumeAttachment" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1.Status" + $ref: "#/components/schemas/v1.VolumeAttachment" application/cbor: schema: - $ref: "#/components/schemas/v1.Status" + $ref: "#/components/schemas/v1.VolumeAttachment" description: OK "202": content: application/json: schema: - $ref: "#/components/schemas/v1.Status" + $ref: "#/components/schemas/v1.VolumeAttachment" application/yaml: schema: - $ref: "#/components/schemas/v1.Status" + $ref: "#/components/schemas/v1.VolumeAttachment" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1.Status" + $ref: "#/components/schemas/v1.VolumeAttachment" application/cbor: schema: - $ref: "#/components/schemas/v1.Status" + $ref: "#/components/schemas/v1.VolumeAttachment" description: Accepted "401": content: {} description: Unauthorized tags: - - storagemigration_v1beta1 + - storage_v1 x-kubernetes-action: delete x-kubernetes-group-version-kind: - group: storagemigration.k8s.io - kind: StorageVersionMigration - version: v1beta1 + group: storage.k8s.io + kind: VolumeAttachment + version: v1 x-codegen-request-body-name: body x-content-type: application/json x-accepts: @@ -100409,10 +104824,10 @@ paths: - application/vnd.kubernetes.protobuf - application/yaml get: - description: read the specified StorageVersionMigration - operationId: readStorageVersionMigration + description: read the specified VolumeAttachment + operationId: readVolumeAttachment parameters: - - description: name of the StorageVersionMigration + - description: name of the VolumeAttachment in: path name: name required: true @@ -100430,37 +104845,37 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1beta1.StorageVersionMigration" + $ref: "#/components/schemas/v1.VolumeAttachment" application/yaml: schema: - $ref: "#/components/schemas/v1beta1.StorageVersionMigration" + $ref: "#/components/schemas/v1.VolumeAttachment" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1beta1.StorageVersionMigration" + $ref: "#/components/schemas/v1.VolumeAttachment" application/cbor: schema: - $ref: "#/components/schemas/v1beta1.StorageVersionMigration" + $ref: "#/components/schemas/v1.VolumeAttachment" description: OK "401": content: {} description: Unauthorized tags: - - storagemigration_v1beta1 + - storage_v1 x-kubernetes-action: get x-kubernetes-group-version-kind: - group: storagemigration.k8s.io - kind: StorageVersionMigration - version: v1beta1 + group: storage.k8s.io + kind: VolumeAttachment + version: v1 x-accepts: - application/cbor - application/json - application/vnd.kubernetes.protobuf - application/yaml patch: - description: partially update the specified StorageVersionMigration - operationId: patchStorageVersionMigration + description: partially update the specified VolumeAttachment + operationId: patchVolumeAttachment parameters: - - description: name of the StorageVersionMigration + - description: name of the VolumeAttachment in: path name: name required: true @@ -100525,42 +104940,42 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1beta1.StorageVersionMigration" + $ref: "#/components/schemas/v1.VolumeAttachment" application/yaml: schema: - $ref: "#/components/schemas/v1beta1.StorageVersionMigration" + $ref: "#/components/schemas/v1.VolumeAttachment" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1beta1.StorageVersionMigration" + $ref: "#/components/schemas/v1.VolumeAttachment" application/cbor: schema: - $ref: "#/components/schemas/v1beta1.StorageVersionMigration" + $ref: "#/components/schemas/v1.VolumeAttachment" description: OK "201": content: application/json: schema: - $ref: "#/components/schemas/v1beta1.StorageVersionMigration" + $ref: "#/components/schemas/v1.VolumeAttachment" application/yaml: schema: - $ref: "#/components/schemas/v1beta1.StorageVersionMigration" + $ref: "#/components/schemas/v1.VolumeAttachment" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1beta1.StorageVersionMigration" + $ref: "#/components/schemas/v1.VolumeAttachment" application/cbor: schema: - $ref: "#/components/schemas/v1beta1.StorageVersionMigration" + $ref: "#/components/schemas/v1.VolumeAttachment" description: Created "401": content: {} description: Unauthorized tags: - - storagemigration_v1beta1 + - storage_v1 x-kubernetes-action: patch x-kubernetes-group-version-kind: - group: storagemigration.k8s.io - kind: StorageVersionMigration - version: v1beta1 + group: storage.k8s.io + kind: VolumeAttachment + version: v1 x-codegen-request-body-name: body x-content-type: application/json x-accepts: @@ -100569,10 +104984,10 @@ paths: - application/vnd.kubernetes.protobuf - application/yaml put: - description: replace the specified StorageVersionMigration - operationId: replaceStorageVersionMigration + description: replace the specified VolumeAttachment + operationId: replaceVolumeAttachment parameters: - - description: name of the StorageVersionMigration + - description: name of the VolumeAttachment in: path name: name required: true @@ -100621,49 +105036,49 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1beta1.StorageVersionMigration" + $ref: "#/components/schemas/v1.VolumeAttachment" required: true responses: "200": content: application/json: schema: - $ref: "#/components/schemas/v1beta1.StorageVersionMigration" + $ref: "#/components/schemas/v1.VolumeAttachment" application/yaml: schema: - $ref: "#/components/schemas/v1beta1.StorageVersionMigration" + $ref: "#/components/schemas/v1.VolumeAttachment" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1beta1.StorageVersionMigration" + $ref: "#/components/schemas/v1.VolumeAttachment" application/cbor: schema: - $ref: "#/components/schemas/v1beta1.StorageVersionMigration" + $ref: "#/components/schemas/v1.VolumeAttachment" description: OK "201": content: application/json: schema: - $ref: "#/components/schemas/v1beta1.StorageVersionMigration" + $ref: "#/components/schemas/v1.VolumeAttachment" application/yaml: schema: - $ref: "#/components/schemas/v1beta1.StorageVersionMigration" + $ref: "#/components/schemas/v1.VolumeAttachment" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1beta1.StorageVersionMigration" + $ref: "#/components/schemas/v1.VolumeAttachment" application/cbor: schema: - $ref: "#/components/schemas/v1beta1.StorageVersionMigration" + $ref: "#/components/schemas/v1.VolumeAttachment" description: Created "401": content: {} description: Unauthorized tags: - - storagemigration_v1beta1 + - storage_v1 x-kubernetes-action: put x-kubernetes-group-version-kind: - group: storagemigration.k8s.io - kind: StorageVersionMigration - version: v1beta1 + group: storage.k8s.io + kind: VolumeAttachment + version: v1 x-codegen-request-body-name: body x-content-type: application/json x-accepts: @@ -100671,12 +105086,12 @@ paths: - application/json - application/vnd.kubernetes.protobuf - application/yaml - /apis/storagemigration.k8s.io/v1beta1/storageversionmigrations/{name}/status: + /apis/storage.k8s.io/v1/volumeattachments/{name}/status: get: - description: read status of the specified StorageVersionMigration - operationId: readStorageVersionMigrationStatus + description: read status of the specified VolumeAttachment + operationId: readVolumeAttachmentStatus parameters: - - description: name of the StorageVersionMigration + - description: name of the VolumeAttachment in: path name: name required: true @@ -100694,37 +105109,37 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1beta1.StorageVersionMigration" + $ref: "#/components/schemas/v1.VolumeAttachment" application/yaml: schema: - $ref: "#/components/schemas/v1beta1.StorageVersionMigration" + $ref: "#/components/schemas/v1.VolumeAttachment" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1beta1.StorageVersionMigration" + $ref: "#/components/schemas/v1.VolumeAttachment" application/cbor: schema: - $ref: "#/components/schemas/v1beta1.StorageVersionMigration" + $ref: "#/components/schemas/v1.VolumeAttachment" description: OK "401": content: {} description: Unauthorized tags: - - storagemigration_v1beta1 + - storage_v1 x-kubernetes-action: get x-kubernetes-group-version-kind: - group: storagemigration.k8s.io - kind: StorageVersionMigration - version: v1beta1 + group: storage.k8s.io + kind: VolumeAttachment + version: v1 x-accepts: - application/cbor - application/json - application/vnd.kubernetes.protobuf - application/yaml patch: - description: partially update status of the specified StorageVersionMigration - operationId: patchStorageVersionMigrationStatus + description: partially update status of the specified VolumeAttachment + operationId: patchVolumeAttachmentStatus parameters: - - description: name of the StorageVersionMigration + - description: name of the VolumeAttachment in: path name: name required: true @@ -100789,42 +105204,42 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1beta1.StorageVersionMigration" + $ref: "#/components/schemas/v1.VolumeAttachment" application/yaml: schema: - $ref: "#/components/schemas/v1beta1.StorageVersionMigration" + $ref: "#/components/schemas/v1.VolumeAttachment" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1beta1.StorageVersionMigration" + $ref: "#/components/schemas/v1.VolumeAttachment" application/cbor: schema: - $ref: "#/components/schemas/v1beta1.StorageVersionMigration" + $ref: "#/components/schemas/v1.VolumeAttachment" description: OK "201": content: application/json: schema: - $ref: "#/components/schemas/v1beta1.StorageVersionMigration" + $ref: "#/components/schemas/v1.VolumeAttachment" application/yaml: schema: - $ref: "#/components/schemas/v1beta1.StorageVersionMigration" + $ref: "#/components/schemas/v1.VolumeAttachment" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1beta1.StorageVersionMigration" + $ref: "#/components/schemas/v1.VolumeAttachment" application/cbor: schema: - $ref: "#/components/schemas/v1beta1.StorageVersionMigration" + $ref: "#/components/schemas/v1.VolumeAttachment" description: Created "401": content: {} description: Unauthorized tags: - - storagemigration_v1beta1 + - storage_v1 x-kubernetes-action: patch x-kubernetes-group-version-kind: - group: storagemigration.k8s.io - kind: StorageVersionMigration - version: v1beta1 + group: storage.k8s.io + kind: VolumeAttachment + version: v1 x-codegen-request-body-name: body x-content-type: application/json x-accepts: @@ -100833,10 +105248,10 @@ paths: - application/vnd.kubernetes.protobuf - application/yaml put: - description: replace status of the specified StorageVersionMigration - operationId: replaceStorageVersionMigrationStatus + description: replace status of the specified VolumeAttachment + operationId: replaceVolumeAttachmentStatus parameters: - - description: name of the StorageVersionMigration + - description: name of the VolumeAttachment in: path name: name required: true @@ -100885,49 +105300,49 @@ paths: content: application/json: schema: - $ref: "#/components/schemas/v1beta1.StorageVersionMigration" + $ref: "#/components/schemas/v1.VolumeAttachment" required: true responses: "200": content: application/json: schema: - $ref: "#/components/schemas/v1beta1.StorageVersionMigration" + $ref: "#/components/schemas/v1.VolumeAttachment" application/yaml: schema: - $ref: "#/components/schemas/v1beta1.StorageVersionMigration" + $ref: "#/components/schemas/v1.VolumeAttachment" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1beta1.StorageVersionMigration" + $ref: "#/components/schemas/v1.VolumeAttachment" application/cbor: schema: - $ref: "#/components/schemas/v1beta1.StorageVersionMigration" + $ref: "#/components/schemas/v1.VolumeAttachment" description: OK "201": content: application/json: schema: - $ref: "#/components/schemas/v1beta1.StorageVersionMigration" + $ref: "#/components/schemas/v1.VolumeAttachment" application/yaml: schema: - $ref: "#/components/schemas/v1beta1.StorageVersionMigration" + $ref: "#/components/schemas/v1.VolumeAttachment" application/vnd.kubernetes.protobuf: schema: - $ref: "#/components/schemas/v1beta1.StorageVersionMigration" + $ref: "#/components/schemas/v1.VolumeAttachment" application/cbor: schema: - $ref: "#/components/schemas/v1beta1.StorageVersionMigration" + $ref: "#/components/schemas/v1.VolumeAttachment" description: Created "401": content: {} description: Unauthorized tags: - - storagemigration_v1beta1 + - storage_v1 x-kubernetes-action: put x-kubernetes-group-version-kind: - group: storagemigration.k8s.io - kind: StorageVersionMigration - version: v1beta1 + group: storage.k8s.io + kind: VolumeAttachment + version: v1 x-codegen-request-body-name: body x-content-type: application/json x-accepts: @@ -100935,126 +105350,18 @@ paths: - application/json - application/vnd.kubernetes.protobuf - application/yaml - /apis/storagemigration.k8s.io/v1beta1/watch/storageversionmigrations: {} - /apis/storagemigration.k8s.io/v1beta1/watch/storageversionmigrations/{name}: {} - /logs/: - get: - operationId: logFileListHandler - responses: - "401": - content: {} - description: Unauthorized - tags: - - logs - x-accepts: - - application/json - /logs/{logpath}: - get: - operationId: logFileHandler - parameters: - - description: path to the log - in: path - name: logpath - required: true - schema: - type: string - responses: - "401": - content: {} - description: Unauthorized - tags: - - logs - x-accepts: - - application/json - /version/: - get: - description: get the version information for this server - operationId: getCode - responses: - "200": - content: - application/json: - schema: - $ref: "#/components/schemas/version.Info" - description: OK - "401": - content: {} - description: Unauthorized - tags: - - version - x-accepts: - - application/json - /apis/{group}/{version}: - get: - description: get available resources - operationId: getAPIResources - parameters: - - description: The custom resource's group name - in: path - name: group - required: true - schema: - type: string - - description: The custom resource's version - in: path - name: version - required: true - schema: - type: string - responses: - "200": - content: - application/json: - schema: - $ref: "#/components/schemas/v1.APIResourceList" - description: OK - "401": - content: {} - description: Unauthorized - tags: - - custom_objects - x-accepts: - - application/json - /apis/{group}/{version}/{resource_plural}: - get: - description: list or watch namespace scoped custom objects - operationId: listCustomObjectForAllNamespaces + /apis/storage.k8s.io/v1/volumeattributesclasses: + delete: + description: delete collection of VolumeAttributesClass + operationId: deleteCollectionVolumeAttributesClass parameters: - - description: "If 'true', then the output is pretty printed." + - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ + \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ + \ and wget)." in: query name: pretty schema: type: string - - description: The custom resource's group name - in: path - name: group - required: true - schema: - type: string - - description: The custom resource's version - in: path - name: version - required: true - schema: - type: string - - description: The custom resource's plural name. For TPRs this would be lowercase - plural kind. - in: path - name: resource_plural - required: true - schema: - type: string - - description: "allowWatchBookmarks requests watch events with type \"BOOKMARK\"\ - . Servers that do not implement bookmarks may ignore this flag and bookmarks\ - \ are sent at the server's discretion. Clients should not assume bookmarks\ - \ are returned at any specific interval, nor may they assume the server\ - \ will send any BOOKMARK event during a session. If this is not a watch,\ - \ this field is ignored. If the feature gate WatchBookmarks is not enabled\ - \ in apiserver, this field is ignored." - in: query - name: allowWatchBookmarks - schema: - type: boolean - description: |- The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". @@ -101063,12 +105370,44 @@ paths: name: continue schema: type: string + - description: "When present, indicates that modifications should not be persisted.\ + \ An invalid or unrecognized dryRun directive will result in an error response\ + \ and no further processing of the request. Valid values are: - All: all\ + \ dry run stages will be processed" + in: query + name: dryRun + schema: + type: string - description: A selector to restrict the list of returned objects by their fields. Defaults to everything. in: query name: fieldSelector schema: type: string + - description: "The duration in seconds before the object should be deleted.\ + \ Value must be non-negative integer. The value zero indicates delete immediately.\ + \ If this value is nil, the default grace period for the specified type\ + \ will be used. Defaults to a per object value if not specified. zero means\ + \ delete immediately." + in: query + name: gracePeriodSeconds + schema: + type: integer + - description: "if set to true, it will trigger an unsafe deletion of the resource\ + \ in case the normal deletion flow fails with a corrupt object error. A\ + \ resource is considered corrupt if it can not be retrieved from the underlying\ + \ storage successfully because of a) its data can not be transformed e.g.\ + \ decryption failure, or b) it fails to decode into an object. NOTE: unsafe\ + \ deletion ignores finalizer constraints, skips precondition checks, and\ + \ removes the object from the storage. WARNING: This may potentially break\ + \ the cluster if the workload associated with the resource being unsafe-deleted\ + \ relies on normal deletion flow. Use only if you REALLY know what you are\ + \ doing. The default value is false, and the user must opt in to enable\ + \ it" + in: query + name: ignoreStoreReadErrorWithClusterBreakingPotential + schema: + type: boolean - description: A selector to restrict the list of returned objects by their labels. Defaults to everything. in: query @@ -101083,12 +105422,29 @@ paths: name: limit schema: type: integer - - description: "When specified with a watch call, shows changes that occur after\ - \ that particular version of a resource. Defaults to changes from the beginning\ - \ of history. When specified for list: - if unset, then the result is returned\ - \ from remote storage based on quorum-read flag; - if it's 0, then we simply\ - \ return what we currently have in cache, no guarantee; - if set to non\ - \ zero, then the result is at least as fresh as given rv." + - description: "Deprecated: please use the PropagationPolicy, this field will\ + \ be deprecated in 1.7. Should the dependent objects be orphaned. If true/false,\ + \ the \"orphan\" finalizer will be added to/removed from the object's finalizers\ + \ list. Either this field or PropagationPolicy may be set, but not both." + in: query + name: orphanDependents + schema: + type: boolean + - description: "Whether and how garbage collection will be performed. Either\ + \ this field or OrphanDependents may be set, but not both. The default policy\ + \ is decided by the existing finalizer set in the metadata.finalizers and\ + \ the resource-specific default policy. Acceptable values are: 'Orphan'\ + \ - orphan the dependents; 'Background' - allow the garbage collector to\ + \ delete the dependents in the background; 'Foreground' - a cascading policy\ + \ that deletes all dependents in the foreground." + in: query + name: propagationPolicy + schema: + type: string + - description: |- + resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + + Defaults to unset in: query name: resourceVersion schema: @@ -101101,104 +105457,57 @@ paths: name: resourceVersionMatch schema: type: string - - description: "Timeout for the list/watch call. This limits the duration of\ - \ the call, regardless of any activity or inactivity." - in: query - name: timeoutSeconds - schema: - type: integer - - description: "Watch for changes to the described resources and return them\ - \ as a stream of add, update, and remove notifications." + - description: |- + `sendInitialEvents=true` may be set together with `watch=true`. In that case, the watch stream will begin with synthetic events to produce the current state of objects in the collection. Once all such events have been sent, a synthetic "Bookmark" event will be sent. The bookmark will report the ResourceVersion (RV) corresponding to the set of objects, and be marked with `"k8s.io/initial-events-end": "true"` annotation. Afterwards, the watch stream will proceed as usual, sending watch events corresponding to changes (subsequent to the RV) to objects watched. + + When `sendInitialEvents` option is set, we require `resourceVersionMatch` option to also be set. The semantic of the watch request is as following: - `resourceVersionMatch` = NotOlderThan + is interpreted as "data at least as new as the provided `resourceVersion`" + and the bookmark event is send when the state is synced + to a `resourceVersion` at least as fresh as the one provided by the ListOptions. + If `resourceVersion` is unset, this is interpreted as "consistent read" and the + bookmark event is send when the state is synced at least to the moment + when request started being processed. + - `resourceVersionMatch` set to any other value or unset + Invalid error is returned. + + Defaults to true if `resourceVersion=""` or `resourceVersion="0"` (for backward compatibility reasons) and to false otherwise. in: query - name: watch + name: sendInitialEvents schema: type: boolean - responses: - "200": - content: - application/json: - schema: - type: object - application/json;stream=watch: - schema: - type: object - description: OK - "401": - content: {} - description: Unauthorized - tags: - - custom_objects - x-accepts: - - application/json - - application/json;stream=watch - /apis/{group}/{version}/{plural}: - delete: - description: Delete collection of cluster scoped custom objects - operationId: deleteCollectionClusterCustomObject - parameters: - - description: "If 'true', then the output is pretty printed." - in: query - name: pretty - schema: - type: string - - description: The custom resource's group name - in: path - name: group - required: true - schema: - type: string - - description: The custom resource's version - in: path - name: version - required: true - schema: - type: string - - description: The custom resource's plural name. For TPRs this would be lowercase - plural kind. - in: path - name: plural - required: true - schema: - type: string - - description: A selector to restrict the list of returned objects by their - labels. Defaults to everything. + - description: |- + shardSelector restricts the list of returned objects using a CEL-based shard selector expression. The format uses the shardRange() function combined with || (logical OR) to specify one or more hash ranges: + + shardRange(object.metadata.uid, '0x0', '0x8000000000000000') + shardRange(object.metadata.uid, '0x0', '0x8000000000000000') || shardRange(object.metadata.uid, '0x8000000000000000', '0x10000000000000000') + + Field paths use CEL-style object-rooted syntax (e.g. "object.metadata.uid"), NOT the fieldSelector format ("metadata.uid"). Currently supported paths: + - object.metadata.uid + - object.metadata.namespace + + hexStart and hexEnd are single-quoted CEL string literals with a '0x' prefix, defining the inclusive lower and exclusive upper bounds over the 64-bit FNV-1a hash space. The full range is [0x0, 0x10000000000000000), where the exclusive upper bound equals 2^64. + + Examples: + 2-shard split: + shard 0: shardRange(object.metadata.uid, '0x0000000000000000', '0x8000000000000000') + shard 1: shardRange(object.metadata.uid, '0x8000000000000000', '0x10000000000000000') + 4-shard split: + shard 0: shardRange(object.metadata.uid, '0x0000000000000000', '0x4000000000000000') + shard 1: shardRange(object.metadata.uid, '0x4000000000000000', '0x8000000000000000') + shard 2: shardRange(object.metadata.uid, '0x8000000000000000', '0xc000000000000000') + shard 3: shardRange(object.metadata.uid, '0xc000000000000000', '0x10000000000000000') + + This is an alpha field and requires enabling the ShardedListAndWatch feature gate. in: query - name: labelSelector + name: shardSelector schema: type: string - - description: "The duration in seconds before the object should be deleted.\ - \ Value must be non-negative integer. The value zero indicates delete immediately.\ - \ If this value is nil, the default grace period for the specified type\ - \ will be used. Defaults to a per object value if not specified. zero means\ - \ delete immediately." + - description: "Timeout for the list/watch call. This limits the duration of\ + \ the call, regardless of any activity or inactivity." in: query - name: gracePeriodSeconds + name: timeoutSeconds schema: type: integer - - description: "Deprecated: please use the PropagationPolicy, this field will\ - \ be deprecated in 1.7. Should the dependent objects be orphaned. If true/false,\ - \ the \"orphan\" finalizer will be added to/removed from the object's finalizers\ - \ list. Either this field or PropagationPolicy may be set, but not both." - in: query - name: orphanDependents - schema: - type: boolean - - description: "Whether and how garbage collection will be performed. Either\ - \ this field or OrphanDependents may be set, but not both. The default policy\ - \ is decided by the existing finalizer set in the metadata.finalizers and\ - \ the resource-specific default policy." - in: query - name: propagationPolicy - schema: - type: string - - description: "When present, indicates that modifications should not be persisted.\ - \ An invalid or unrecognized dryRun directive will result in an error response\ - \ and no further processing of the request. Valid values are: - All: all\ - \ dry run stages will be processed" - in: query - name: dryRun - schema: - type: string requestBody: content: application/json: @@ -101210,52 +105519,51 @@ paths: content: application/json: schema: - type: object + $ref: "#/components/schemas/v1.Status" + application/yaml: + schema: + $ref: "#/components/schemas/v1.Status" + application/vnd.kubernetes.protobuf: + schema: + $ref: "#/components/schemas/v1.Status" + application/cbor: + schema: + $ref: "#/components/schemas/v1.Status" description: OK "401": content: {} description: Unauthorized tags: - - custom_objects + - storage_v1 + x-kubernetes-action: deletecollection + x-kubernetes-group-version-kind: + group: storage.k8s.io + kind: VolumeAttributesClass + version: v1 x-codegen-request-body-name: body x-content-type: application/json x-accepts: + - application/cbor - application/json + - application/vnd.kubernetes.protobuf + - application/yaml get: - description: list or watch cluster scoped custom objects - operationId: listClusterCustomObject + description: list or watch objects of kind VolumeAttributesClass + operationId: listVolumeAttributesClass parameters: - - description: "If 'true', then the output is pretty printed." + - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ + \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ + \ and wget)." in: query name: pretty schema: type: string - - description: The custom resource's group name - in: path - name: group - required: true - schema: - type: string - - description: The custom resource's version - in: path - name: version - required: true - schema: - type: string - - description: The custom resource's plural name. For TPRs this would be lowercase - plural kind. - in: path - name: plural - required: true - schema: - type: string - description: "allowWatchBookmarks requests watch events with type \"BOOKMARK\"\ . Servers that do not implement bookmarks may ignore this flag and bookmarks\ \ are sent at the server's discretion. Clients should not assume bookmarks\ \ are returned at any specific interval, nor may they assume the server\ \ will send any BOOKMARK event during a session. If this is not a watch,\ - \ this field is ignored. If the feature gate WatchBookmarks is not enabled\ - \ in apiserver, this field is ignored." + \ this field is ignored." in: query name: allowWatchBookmarks schema: @@ -101288,12 +105596,10 @@ paths: name: limit schema: type: integer - - description: "When specified with a watch call, shows changes that occur after\ - \ that particular version of a resource. Defaults to changes from the beginning\ - \ of history. When specified for list: - if unset, then the result is returned\ - \ from remote storage based on quorum-read flag; - if it's 0, then we simply\ - \ return what we currently have in cache, no guarantee; - if set to non\ - \ zero, then the result is at least as fresh as given rv." + - description: |- + resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + + Defaults to unset in: query name: resourceVersion schema: @@ -101306,6 +105612,51 @@ paths: name: resourceVersionMatch schema: type: string + - description: |- + `sendInitialEvents=true` may be set together with `watch=true`. In that case, the watch stream will begin with synthetic events to produce the current state of objects in the collection. Once all such events have been sent, a synthetic "Bookmark" event will be sent. The bookmark will report the ResourceVersion (RV) corresponding to the set of objects, and be marked with `"k8s.io/initial-events-end": "true"` annotation. Afterwards, the watch stream will proceed as usual, sending watch events corresponding to changes (subsequent to the RV) to objects watched. + + When `sendInitialEvents` option is set, we require `resourceVersionMatch` option to also be set. The semantic of the watch request is as following: - `resourceVersionMatch` = NotOlderThan + is interpreted as "data at least as new as the provided `resourceVersion`" + and the bookmark event is send when the state is synced + to a `resourceVersion` at least as fresh as the one provided by the ListOptions. + If `resourceVersion` is unset, this is interpreted as "consistent read" and the + bookmark event is send when the state is synced at least to the moment + when request started being processed. + - `resourceVersionMatch` set to any other value or unset + Invalid error is returned. + + Defaults to true if `resourceVersion=""` or `resourceVersion="0"` (for backward compatibility reasons) and to false otherwise. + in: query + name: sendInitialEvents + schema: + type: boolean + - description: |- + shardSelector restricts the list of returned objects using a CEL-based shard selector expression. The format uses the shardRange() function combined with || (logical OR) to specify one or more hash ranges: + + shardRange(object.metadata.uid, '0x0', '0x8000000000000000') + shardRange(object.metadata.uid, '0x0', '0x8000000000000000') || shardRange(object.metadata.uid, '0x8000000000000000', '0x10000000000000000') + + Field paths use CEL-style object-rooted syntax (e.g. "object.metadata.uid"), NOT the fieldSelector format ("metadata.uid"). Currently supported paths: + - object.metadata.uid + - object.metadata.namespace + + hexStart and hexEnd are single-quoted CEL string literals with a '0x' prefix, defining the inclusive lower and exclusive upper bounds over the 64-bit FNV-1a hash space. The full range is [0x0, 0x10000000000000000), where the exclusive upper bound equals 2^64. + + Examples: + 2-shard split: + shard 0: shardRange(object.metadata.uid, '0x0000000000000000', '0x8000000000000000') + shard 1: shardRange(object.metadata.uid, '0x8000000000000000', '0x10000000000000000') + 4-shard split: + shard 0: shardRange(object.metadata.uid, '0x0000000000000000', '0x4000000000000000') + shard 1: shardRange(object.metadata.uid, '0x4000000000000000', '0x8000000000000000') + shard 2: shardRange(object.metadata.uid, '0x8000000000000000', '0xc000000000000000') + shard 3: shardRange(object.metadata.uid, '0xc000000000000000', '0x10000000000000000') + + This is an alpha field and requires enabling the ShardedListAndWatch feature gate. + in: query + name: shardSelector + schema: + type: string - description: "Timeout for the list/watch call. This limits the duration of\ \ the call, regardless of any activity or inactivity." in: query @@ -101313,7 +105664,7 @@ paths: schema: type: integer - description: "Watch for changes to the described resources and return them\ - \ as a stream of add, update, and remove notifications." + \ as a stream of add, update, and remove notifications. Specify resourceVersion." in: query name: watch schema: @@ -101323,47 +105674,55 @@ paths: content: application/json: schema: - type: object + $ref: "#/components/schemas/v1.VolumeAttributesClassList" + application/yaml: + schema: + $ref: "#/components/schemas/v1.VolumeAttributesClassList" + application/vnd.kubernetes.protobuf: + schema: + $ref: "#/components/schemas/v1.VolumeAttributesClassList" + application/cbor: + schema: + $ref: "#/components/schemas/v1.VolumeAttributesClassList" application/json;stream=watch: schema: - type: object + $ref: "#/components/schemas/v1.VolumeAttributesClassList" + application/vnd.kubernetes.protobuf;stream=watch: + schema: + $ref: "#/components/schemas/v1.VolumeAttributesClassList" + application/cbor-seq: + schema: + $ref: "#/components/schemas/v1.VolumeAttributesClassList" description: OK "401": content: {} description: Unauthorized tags: - - custom_objects + - storage_v1 + x-kubernetes-action: list + x-kubernetes-group-version-kind: + group: storage.k8s.io + kind: VolumeAttributesClass + version: v1 x-accepts: + - application/cbor + - application/cbor-seq - application/json - application/json;stream=watch + - application/vnd.kubernetes.protobuf + - application/vnd.kubernetes.protobuf;stream=watch + - application/yaml post: - description: Creates a cluster scoped Custom object - operationId: createClusterCustomObject + description: create a VolumeAttributesClass + operationId: createVolumeAttributesClass parameters: - - description: "If 'true', then the output is pretty printed." + - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ + \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ + \ and wget)." in: query name: pretty schema: type: string - - description: The custom resource's group name - in: path - name: group - required: true - schema: - type: string - - description: The custom resource's version - in: path - name: version - required: true - schema: - type: string - - description: The custom resource's plural name. For TPRs this would be lowercase - plural kind. - in: path - name: plural - required: true - schema: - type: string - description: "When present, indicates that modifications should not be persisted.\ \ An invalid or unrecognized dryRun directive will result in an error response\ \ and no further processing of the request. Valid values are: - All: all\ @@ -101374,9 +105733,7 @@ paths: type: string - description: "fieldManager is a name associated with the actor or entity that\ \ is making these changes. The value must be less than or 128 characters\ - \ long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.\ - \ This field is required for apply requests (application/apply-patch) but\ - \ optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch)." + \ long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." in: query name: fieldManager schema: @@ -101393,8 +105750,7 @@ paths: \ fields. This is the default in v1.23+ - Strict: This will fail the request\ \ with a BadRequest error if any unknown fields would be dropped from the\ \ object, or if any duplicate fields are present. The error returned from\ - \ the server will contain all unknown and duplicate fields encountered.\ - \ (optional)" + \ the server will contain all unknown and duplicate fields encountered." in: query name: fieldValidation schema: @@ -101403,64 +105759,95 @@ paths: content: application/json: schema: - type: object - description: The JSON schema of the Resource to create. + $ref: "#/components/schemas/v1.VolumeAttributesClass" required: true responses: + "200": + content: + application/json: + schema: + $ref: "#/components/schemas/v1.VolumeAttributesClass" + application/yaml: + schema: + $ref: "#/components/schemas/v1.VolumeAttributesClass" + application/vnd.kubernetes.protobuf: + schema: + $ref: "#/components/schemas/v1.VolumeAttributesClass" + application/cbor: + schema: + $ref: "#/components/schemas/v1.VolumeAttributesClass" + description: OK "201": content: application/json: schema: - type: object + $ref: "#/components/schemas/v1.VolumeAttributesClass" + application/yaml: + schema: + $ref: "#/components/schemas/v1.VolumeAttributesClass" + application/vnd.kubernetes.protobuf: + schema: + $ref: "#/components/schemas/v1.VolumeAttributesClass" + application/cbor: + schema: + $ref: "#/components/schemas/v1.VolumeAttributesClass" description: Created + "202": + content: + application/json: + schema: + $ref: "#/components/schemas/v1.VolumeAttributesClass" + application/yaml: + schema: + $ref: "#/components/schemas/v1.VolumeAttributesClass" + application/vnd.kubernetes.protobuf: + schema: + $ref: "#/components/schemas/v1.VolumeAttributesClass" + application/cbor: + schema: + $ref: "#/components/schemas/v1.VolumeAttributesClass" + description: Accepted "401": content: {} description: Unauthorized tags: - - custom_objects + - storage_v1 + x-kubernetes-action: post + x-kubernetes-group-version-kind: + group: storage.k8s.io + kind: VolumeAttributesClass + version: v1 x-codegen-request-body-name: body x-content-type: application/json x-accepts: + - application/cbor - application/json - /apis/{group}/{version}/namespaces/{namespace}/{plural}: + - application/vnd.kubernetes.protobuf + - application/yaml + /apis/storage.k8s.io/v1/volumeattributesclasses/{name}: delete: - description: Delete collection of namespace scoped custom objects - operationId: deleteCollectionNamespacedCustomObject + description: delete a VolumeAttributesClass + operationId: deleteVolumeAttributesClass parameters: - - description: "If 'true', then the output is pretty printed." - in: query - name: pretty - schema: - type: string - - description: The custom resource's group name - in: path - name: group - required: true - schema: - type: string - - description: The custom resource's version - in: path - name: version - required: true - schema: - type: string - - description: The custom resource's namespace + - description: name of the VolumeAttributesClass in: path - name: namespace + name: name required: true schema: type: string - - description: The custom resource's plural name. For TPRs this would be lowercase - plural kind. - in: path - name: plural - required: true + - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ + \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ + \ and wget)." + in: query + name: pretty schema: type: string - - description: A selector to restrict the list of returned objects by their - labels. Defaults to everything. + - description: "When present, indicates that modifications should not be persisted.\ + \ An invalid or unrecognized dryRun directive will result in an error response\ + \ and no further processing of the request. Valid values are: - All: all\ + \ dry run stages will be processed" in: query - name: labelSelector + name: dryRun schema: type: string - description: "The duration in seconds before the object should be deleted.\ @@ -101472,6 +105859,21 @@ paths: name: gracePeriodSeconds schema: type: integer + - description: "if set to true, it will trigger an unsafe deletion of the resource\ + \ in case the normal deletion flow fails with a corrupt object error. A\ + \ resource is considered corrupt if it can not be retrieved from the underlying\ + \ storage successfully because of a) its data can not be transformed e.g.\ + \ decryption failure, or b) it fails to decode into an object. NOTE: unsafe\ + \ deletion ignores finalizer constraints, skips precondition checks, and\ + \ removes the object from the storage. WARNING: This may potentially break\ + \ the cluster if the workload associated with the resource being unsafe-deleted\ + \ relies on normal deletion flow. Use only if you REALLY know what you are\ + \ doing. The default value is false, and the user must opt in to enable\ + \ it" + in: query + name: ignoreStoreReadErrorWithClusterBreakingPotential + schema: + type: boolean - description: "Deprecated: please use the PropagationPolicy, this field will\ \ be deprecated in 1.7. Should the dependent objects be orphaned. If true/false,\ \ the \"orphan\" finalizer will be added to/removed from the object's finalizers\ @@ -101483,25 +105885,14 @@ paths: - description: "Whether and how garbage collection will be performed. Either\ \ this field or OrphanDependents may be set, but not both. The default policy\ \ is decided by the existing finalizer set in the metadata.finalizers and\ - \ the resource-specific default policy." + \ the resource-specific default policy. Acceptable values are: 'Orphan'\ + \ - orphan the dependents; 'Background' - allow the garbage collector to\ + \ delete the dependents in the background; 'Foreground' - a cascading policy\ + \ that deletes all dependents in the foreground." in: query name: propagationPolicy schema: type: string - - description: "When present, indicates that modifications should not be persisted.\ - \ An invalid or unrecognized dryRun directive will result in an error response\ - \ and no further processing of the request. Valid values are: - All: all\ - \ dry run stages will be processed" - in: query - name: dryRun - schema: - type: string - - description: A selector to restrict the list of returned objects by their - fields. Defaults to everything. - in: query - name: fieldSelector - schema: - type: string requestBody: content: application/json: @@ -101513,170 +105904,112 @@ paths: content: application/json: schema: - type: object + $ref: "#/components/schemas/v1.VolumeAttributesClass" + application/yaml: + schema: + $ref: "#/components/schemas/v1.VolumeAttributesClass" + application/vnd.kubernetes.protobuf: + schema: + $ref: "#/components/schemas/v1.VolumeAttributesClass" + application/cbor: + schema: + $ref: "#/components/schemas/v1.VolumeAttributesClass" description: OK + "202": + content: + application/json: + schema: + $ref: "#/components/schemas/v1.VolumeAttributesClass" + application/yaml: + schema: + $ref: "#/components/schemas/v1.VolumeAttributesClass" + application/vnd.kubernetes.protobuf: + schema: + $ref: "#/components/schemas/v1.VolumeAttributesClass" + application/cbor: + schema: + $ref: "#/components/schemas/v1.VolumeAttributesClass" + description: Accepted "401": content: {} description: Unauthorized tags: - - custom_objects + - storage_v1 + x-kubernetes-action: delete + x-kubernetes-group-version-kind: + group: storage.k8s.io + kind: VolumeAttributesClass + version: v1 x-codegen-request-body-name: body x-content-type: application/json x-accepts: + - application/cbor - application/json + - application/vnd.kubernetes.protobuf + - application/yaml get: - description: list or watch namespace scoped custom objects - operationId: listNamespacedCustomObject + description: read the specified VolumeAttributesClass + operationId: readVolumeAttributesClass parameters: - - description: "If 'true', then the output is pretty printed." - in: query - name: pretty - schema: - type: string - - description: The custom resource's group name - in: path - name: group - required: true - schema: - type: string - - description: The custom resource's version - in: path - name: version - required: true - schema: - type: string - - description: The custom resource's namespace - in: path - name: namespace - required: true - schema: - type: string - - description: The custom resource's plural name. For TPRs this would be lowercase - plural kind. + - description: name of the VolumeAttributesClass in: path - name: plural + name: name required: true schema: type: string - - description: "allowWatchBookmarks requests watch events with type \"BOOKMARK\"\ - . Servers that do not implement bookmarks may ignore this flag and bookmarks\ - \ are sent at the server's discretion. Clients should not assume bookmarks\ - \ are returned at any specific interval, nor may they assume the server\ - \ will send any BOOKMARK event during a session. If this is not a watch,\ - \ this field is ignored. If the feature gate WatchBookmarks is not enabled\ - \ in apiserver, this field is ignored." - in: query - name: allowWatchBookmarks - schema: - type: boolean - - description: |- - The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". - - This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications. - in: query - name: continue - schema: - type: string - - description: A selector to restrict the list of returned objects by their - fields. Defaults to everything. - in: query - name: fieldSelector - schema: - type: string - - description: A selector to restrict the list of returned objects by their - labels. Defaults to everything. - in: query - name: labelSelector - schema: - type: string - - description: |- - limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. - - The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned. - in: query - name: limit - schema: - type: integer - - description: "When specified with a watch call, shows changes that occur after\ - \ that particular version of a resource. Defaults to changes from the beginning\ - \ of history. When specified for list: - if unset, then the result is returned\ - \ from remote storage based on quorum-read flag; - if it's 0, then we simply\ - \ return what we currently have in cache, no guarantee; - if set to non\ - \ zero, then the result is at least as fresh as given rv." - in: query - name: resourceVersion - schema: - type: string - - description: |- - resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. - - Defaults to unset + - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ + \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ + \ and wget)." in: query - name: resourceVersionMatch + name: pretty schema: type: string - - description: "Timeout for the list/watch call. This limits the duration of\ - \ the call, regardless of any activity or inactivity." - in: query - name: timeoutSeconds - schema: - type: integer - - description: "Watch for changes to the described resources and return them\ - \ as a stream of add, update, and remove notifications." - in: query - name: watch - schema: - type: boolean responses: "200": content: application/json: schema: - type: object - application/json;stream=watch: + $ref: "#/components/schemas/v1.VolumeAttributesClass" + application/yaml: schema: - type: object + $ref: "#/components/schemas/v1.VolumeAttributesClass" + application/vnd.kubernetes.protobuf: + schema: + $ref: "#/components/schemas/v1.VolumeAttributesClass" + application/cbor: + schema: + $ref: "#/components/schemas/v1.VolumeAttributesClass" description: OK "401": content: {} description: Unauthorized tags: - - custom_objects + - storage_v1 + x-kubernetes-action: get + x-kubernetes-group-version-kind: + group: storage.k8s.io + kind: VolumeAttributesClass + version: v1 x-accepts: + - application/cbor - application/json - - application/json;stream=watch - post: - description: Creates a namespace scoped Custom object - operationId: createNamespacedCustomObject + - application/vnd.kubernetes.protobuf + - application/yaml + patch: + description: partially update the specified VolumeAttributesClass + operationId: patchVolumeAttributesClass parameters: - - description: "If 'true', then the output is pretty printed." - in: query - name: pretty - schema: - type: string - - description: The custom resource's group name - in: path - name: group - required: true - schema: - type: string - - description: The custom resource's version - in: path - name: version - required: true - schema: - type: string - - description: The custom resource's namespace + - description: name of the VolumeAttributesClass in: path - name: namespace + name: name required: true schema: type: string - - description: The custom resource's plural name. For TPRs this would be lowercase - plural kind. - in: path - name: plural - required: true + - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ + \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ + \ and wget)." + in: query + name: pretty schema: type: string - description: "When present, indicates that modifications should not be persisted.\ @@ -101689,7 +106022,9 @@ paths: type: string - description: "fieldManager is a name associated with the actor or entity that\ \ is making these changes. The value must be less than or 128 characters\ - \ long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." + \ long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.\ + \ This field is required for apply requests (application/apply-patch) but\ + \ optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch)." in: query name: fieldManager schema: @@ -101706,63 +106041,280 @@ paths: \ fields. This is the default in v1.23+ - Strict: This will fail the request\ \ with a BadRequest error if any unknown fields would be dropped from the\ \ object, or if any duplicate fields are present. The error returned from\ - \ the server will contain all unknown and duplicate fields encountered.\ - \ (optional)" + \ the server will contain all unknown and duplicate fields encountered." in: query name: fieldValidation schema: type: string - requestBody: - content: - application/json: - schema: - type: object - description: The JSON schema of the Resource to create. + - description: Force is going to "force" Apply requests. It means user will + re-acquire conflicting fields owned by other people. Force flag must be + unset for non-apply patch requests. + in: query + name: force + schema: + type: boolean + requestBody: + content: + application/json: + schema: + $ref: "#/components/schemas/v1.Patch" required: true responses: + "200": + content: + application/json: + schema: + $ref: "#/components/schemas/v1.VolumeAttributesClass" + application/yaml: + schema: + $ref: "#/components/schemas/v1.VolumeAttributesClass" + application/vnd.kubernetes.protobuf: + schema: + $ref: "#/components/schemas/v1.VolumeAttributesClass" + application/cbor: + schema: + $ref: "#/components/schemas/v1.VolumeAttributesClass" + description: OK "201": content: application/json: schema: - type: object + $ref: "#/components/schemas/v1.VolumeAttributesClass" + application/yaml: + schema: + $ref: "#/components/schemas/v1.VolumeAttributesClass" + application/vnd.kubernetes.protobuf: + schema: + $ref: "#/components/schemas/v1.VolumeAttributesClass" + application/cbor: + schema: + $ref: "#/components/schemas/v1.VolumeAttributesClass" description: Created "401": content: {} description: Unauthorized tags: - - custom_objects + - storage_v1 + x-kubernetes-action: patch + x-kubernetes-group-version-kind: + group: storage.k8s.io + kind: VolumeAttributesClass + version: v1 x-codegen-request-body-name: body x-content-type: application/json x-accepts: + - application/cbor - application/json - /apis/{group}/{version}/{plural}/{name}: - delete: - description: Deletes the specified cluster scoped custom object - operationId: deleteClusterCustomObject + - application/vnd.kubernetes.protobuf + - application/yaml + put: + description: replace the specified VolumeAttributesClass + operationId: replaceVolumeAttributesClass parameters: - - description: the custom resource's group + - description: name of the VolumeAttributesClass in: path - name: group + name: name required: true schema: type: string - - description: the custom resource's version - in: path - name: version - required: true + - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ + \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ + \ and wget)." + in: query + name: pretty schema: type: string - - description: the custom object's plural name. For TPRs this would be lowercase - plural kind. - in: path - name: plural - required: true + - description: "When present, indicates that modifications should not be persisted.\ + \ An invalid or unrecognized dryRun directive will result in an error response\ + \ and no further processing of the request. Valid values are: - All: all\ + \ dry run stages will be processed" + in: query + name: dryRun schema: type: string - - description: the custom object's name - in: path - name: name + - description: "fieldManager is a name associated with the actor or entity that\ + \ is making these changes. The value must be less than or 128 characters\ + \ long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." + in: query + name: fieldManager + schema: + type: string + - description: "fieldValidation instructs the server on how to handle objects\ + \ in the request (POST/PUT/PATCH) containing unknown or duplicate fields.\ + \ Valid values are: - Ignore: This will ignore any unknown fields that are\ + \ silently dropped from the object, and will ignore all but the last duplicate\ + \ field that the decoder encounters. This is the default behavior prior\ + \ to v1.23. - Warn: This will send a warning via the standard warning response\ + \ header for each unknown field that is dropped from the object, and for\ + \ each duplicate field that is encountered. The request will still succeed\ + \ if there are no other errors, and will only persist the last of any duplicate\ + \ fields. This is the default in v1.23+ - Strict: This will fail the request\ + \ with a BadRequest error if any unknown fields would be dropped from the\ + \ object, or if any duplicate fields are present. The error returned from\ + \ the server will contain all unknown and duplicate fields encountered." + in: query + name: fieldValidation + schema: + type: string + requestBody: + content: + application/json: + schema: + $ref: "#/components/schemas/v1.VolumeAttributesClass" required: true + responses: + "200": + content: + application/json: + schema: + $ref: "#/components/schemas/v1.VolumeAttributesClass" + application/yaml: + schema: + $ref: "#/components/schemas/v1.VolumeAttributesClass" + application/vnd.kubernetes.protobuf: + schema: + $ref: "#/components/schemas/v1.VolumeAttributesClass" + application/cbor: + schema: + $ref: "#/components/schemas/v1.VolumeAttributesClass" + description: OK + "201": + content: + application/json: + schema: + $ref: "#/components/schemas/v1.VolumeAttributesClass" + application/yaml: + schema: + $ref: "#/components/schemas/v1.VolumeAttributesClass" + application/vnd.kubernetes.protobuf: + schema: + $ref: "#/components/schemas/v1.VolumeAttributesClass" + application/cbor: + schema: + $ref: "#/components/schemas/v1.VolumeAttributesClass" + description: Created + "401": + content: {} + description: Unauthorized + tags: + - storage_v1 + x-kubernetes-action: put + x-kubernetes-group-version-kind: + group: storage.k8s.io + kind: VolumeAttributesClass + version: v1 + x-codegen-request-body-name: body + x-content-type: application/json + x-accepts: + - application/cbor + - application/json + - application/vnd.kubernetes.protobuf + - application/yaml + /apis/storage.k8s.io/v1/watch/csidrivers: {} + /apis/storage.k8s.io/v1/watch/csidrivers/{name}: {} + /apis/storage.k8s.io/v1/watch/csinodes: {} + /apis/storage.k8s.io/v1/watch/csinodes/{name}: {} + /apis/storage.k8s.io/v1/watch/csistoragecapacities: {} + /apis/storage.k8s.io/v1/watch/namespaces/{namespace}/csistoragecapacities: {} + /apis/storage.k8s.io/v1/watch/namespaces/{namespace}/csistoragecapacities/{name}: {} + /apis/storage.k8s.io/v1/watch/storageclasses: {} + /apis/storage.k8s.io/v1/watch/storageclasses/{name}: {} + /apis/storage.k8s.io/v1/watch/volumeattachments: {} + /apis/storage.k8s.io/v1/watch/volumeattachments/{name}: {} + /apis/storage.k8s.io/v1/watch/volumeattributesclasses: {} + /apis/storage.k8s.io/v1/watch/volumeattributesclasses/{name}: {} + /apis/storagemigration.k8s.io/: + get: + description: get information of a group + operationId: getAPIGroup + responses: + "200": + content: + application/json: + schema: + $ref: "#/components/schemas/v1.APIGroup" + application/yaml: + schema: + $ref: "#/components/schemas/v1.APIGroup" + application/vnd.kubernetes.protobuf: + schema: + $ref: "#/components/schemas/v1.APIGroup" + application/cbor: + schema: + $ref: "#/components/schemas/v1.APIGroup" + description: OK + "401": + content: {} + description: Unauthorized + tags: + - storagemigration + x-accepts: + - application/cbor + - application/json + - application/vnd.kubernetes.protobuf + - application/yaml + /apis/storagemigration.k8s.io/v1/: + get: + description: get available resources + operationId: getAPIResources + responses: + "200": + content: + application/json: + schema: + $ref: "#/components/schemas/v1.APIResourceList" + application/yaml: + schema: + $ref: "#/components/schemas/v1.APIResourceList" + application/vnd.kubernetes.protobuf: + schema: + $ref: "#/components/schemas/v1.APIResourceList" + application/cbor: + schema: + $ref: "#/components/schemas/v1.APIResourceList" + description: OK + "401": + content: {} + description: Unauthorized + tags: + - storagemigration_v1 + x-accepts: + - application/cbor + - application/json + - application/vnd.kubernetes.protobuf + - application/yaml + /apis/storagemigration.k8s.io/v1/storageversionmigrations: + delete: + description: delete collection of StorageVersionMigration + operationId: deleteCollectionStorageVersionMigration + parameters: + - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ + \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ + \ and wget)." + in: query + name: pretty + schema: + type: string + - description: |- + The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + + This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications. + in: query + name: continue + schema: + type: string + - description: "When present, indicates that modifications should not be persisted.\ + \ An invalid or unrecognized dryRun directive will result in an error response\ + \ and no further processing of the request. Valid values are: - All: all\ + \ dry run stages will be processed" + in: query + name: dryRun + schema: + type: string + - description: A selector to restrict the list of returned objects by their + fields. Defaults to everything. + in: query + name: fieldSelector schema: type: string - description: "The duration in seconds before the object should be deleted.\ @@ -101774,6 +106326,35 @@ paths: name: gracePeriodSeconds schema: type: integer + - description: "if set to true, it will trigger an unsafe deletion of the resource\ + \ in case the normal deletion flow fails with a corrupt object error. A\ + \ resource is considered corrupt if it can not be retrieved from the underlying\ + \ storage successfully because of a) its data can not be transformed e.g.\ + \ decryption failure, or b) it fails to decode into an object. NOTE: unsafe\ + \ deletion ignores finalizer constraints, skips precondition checks, and\ + \ removes the object from the storage. WARNING: This may potentially break\ + \ the cluster if the workload associated with the resource being unsafe-deleted\ + \ relies on normal deletion flow. Use only if you REALLY know what you are\ + \ doing. The default value is false, and the user must opt in to enable\ + \ it" + in: query + name: ignoreStoreReadErrorWithClusterBreakingPotential + schema: + type: boolean + - description: A selector to restrict the list of returned objects by their + labels. Defaults to everything. + in: query + name: labelSelector + schema: + type: string + - description: |- + limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + + The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned. + in: query + name: limit + schema: + type: integer - description: "Deprecated: please use the PropagationPolicy, this field will\ \ be deprecated in 1.7. Should the dependent objects be orphaned. If true/false,\ \ the \"orphan\" finalizer will be added to/removed from the object's finalizers\ @@ -101785,19 +106366,81 @@ paths: - description: "Whether and how garbage collection will be performed. Either\ \ this field or OrphanDependents may be set, but not both. The default policy\ \ is decided by the existing finalizer set in the metadata.finalizers and\ - \ the resource-specific default policy." + \ the resource-specific default policy. Acceptable values are: 'Orphan'\ + \ - orphan the dependents; 'Background' - allow the garbage collector to\ + \ delete the dependents in the background; 'Foreground' - a cascading policy\ + \ that deletes all dependents in the foreground." in: query name: propagationPolicy schema: type: string - - description: "When present, indicates that modifications should not be persisted.\ - \ An invalid or unrecognized dryRun directive will result in an error response\ - \ and no further processing of the request. Valid values are: - All: all\ - \ dry run stages will be processed" + - description: |- + resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + + Defaults to unset in: query - name: dryRun + name: resourceVersion + schema: + type: string + - description: |- + resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + + Defaults to unset + in: query + name: resourceVersionMatch + schema: + type: string + - description: |- + `sendInitialEvents=true` may be set together with `watch=true`. In that case, the watch stream will begin with synthetic events to produce the current state of objects in the collection. Once all such events have been sent, a synthetic "Bookmark" event will be sent. The bookmark will report the ResourceVersion (RV) corresponding to the set of objects, and be marked with `"k8s.io/initial-events-end": "true"` annotation. Afterwards, the watch stream will proceed as usual, sending watch events corresponding to changes (subsequent to the RV) to objects watched. + + When `sendInitialEvents` option is set, we require `resourceVersionMatch` option to also be set. The semantic of the watch request is as following: - `resourceVersionMatch` = NotOlderThan + is interpreted as "data at least as new as the provided `resourceVersion`" + and the bookmark event is send when the state is synced + to a `resourceVersion` at least as fresh as the one provided by the ListOptions. + If `resourceVersion` is unset, this is interpreted as "consistent read" and the + bookmark event is send when the state is synced at least to the moment + when request started being processed. + - `resourceVersionMatch` set to any other value or unset + Invalid error is returned. + + Defaults to true if `resourceVersion=""` or `resourceVersion="0"` (for backward compatibility reasons) and to false otherwise. + in: query + name: sendInitialEvents + schema: + type: boolean + - description: |- + shardSelector restricts the list of returned objects using a CEL-based shard selector expression. The format uses the shardRange() function combined with || (logical OR) to specify one or more hash ranges: + + shardRange(object.metadata.uid, '0x0', '0x8000000000000000') + shardRange(object.metadata.uid, '0x0', '0x8000000000000000') || shardRange(object.metadata.uid, '0x8000000000000000', '0x10000000000000000') + + Field paths use CEL-style object-rooted syntax (e.g. "object.metadata.uid"), NOT the fieldSelector format ("metadata.uid"). Currently supported paths: + - object.metadata.uid + - object.metadata.namespace + + hexStart and hexEnd are single-quoted CEL string literals with a '0x' prefix, defining the inclusive lower and exclusive upper bounds over the 64-bit FNV-1a hash space. The full range is [0x0, 0x10000000000000000), where the exclusive upper bound equals 2^64. + + Examples: + 2-shard split: + shard 0: shardRange(object.metadata.uid, '0x0000000000000000', '0x8000000000000000') + shard 1: shardRange(object.metadata.uid, '0x8000000000000000', '0x10000000000000000') + 4-shard split: + shard 0: shardRange(object.metadata.uid, '0x0000000000000000', '0x4000000000000000') + shard 1: shardRange(object.metadata.uid, '0x4000000000000000', '0x8000000000000000') + shard 2: shardRange(object.metadata.uid, '0x8000000000000000', '0xc000000000000000') + shard 3: shardRange(object.metadata.uid, '0xc000000000000000', '0x10000000000000000') + + This is an alpha field and requires enabling the ShardedListAndWatch feature gate. + in: query + name: shardSelector schema: type: string + - description: "Timeout for the list/watch call. This limits the duration of\ + \ the call, regardless of any activity or inactivity." + in: query + name: timeoutSeconds + schema: + type: integer requestBody: content: application/json: @@ -101809,87 +106452,208 @@ paths: content: application/json: schema: - type: object + $ref: "#/components/schemas/v1.Status" + application/yaml: + schema: + $ref: "#/components/schemas/v1.Status" + application/vnd.kubernetes.protobuf: + schema: + $ref: "#/components/schemas/v1.Status" + application/cbor: + schema: + $ref: "#/components/schemas/v1.Status" description: OK "401": content: {} description: Unauthorized tags: - - custom_objects + - storagemigration_v1 + x-kubernetes-action: deletecollection + x-kubernetes-group-version-kind: + group: storagemigration.k8s.io + kind: StorageVersionMigration + version: v1 x-codegen-request-body-name: body x-content-type: application/json x-accepts: + - application/cbor - application/json + - application/vnd.kubernetes.protobuf + - application/yaml get: - description: Returns a cluster scoped custom object - operationId: getClusterCustomObject + description: list or watch objects of kind StorageVersionMigration + operationId: listStorageVersionMigration parameters: - - description: the custom resource's group - in: path - name: group - required: true + - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ + \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ + \ and wget)." + in: query + name: pretty schema: type: string - - description: the custom resource's version - in: path - name: version - required: true + - description: "allowWatchBookmarks requests watch events with type \"BOOKMARK\"\ + . Servers that do not implement bookmarks may ignore this flag and bookmarks\ + \ are sent at the server's discretion. Clients should not assume bookmarks\ + \ are returned at any specific interval, nor may they assume the server\ + \ will send any BOOKMARK event during a session. If this is not a watch,\ + \ this field is ignored." + in: query + name: allowWatchBookmarks + schema: + type: boolean + - description: |- + The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + + This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications. + in: query + name: continue schema: type: string - - description: the custom object's plural name. For TPRs this would be lowercase - plural kind. - in: path - name: plural - required: true + - description: A selector to restrict the list of returned objects by their + fields. Defaults to everything. + in: query + name: fieldSelector schema: type: string - - description: the custom object's name - in: path - name: name - required: true + - description: A selector to restrict the list of returned objects by their + labels. Defaults to everything. + in: query + name: labelSelector + schema: + type: string + - description: |- + limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + + The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned. + in: query + name: limit + schema: + type: integer + - description: |- + resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + + Defaults to unset + in: query + name: resourceVersion + schema: + type: string + - description: |- + resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + + Defaults to unset + in: query + name: resourceVersionMatch + schema: + type: string + - description: |- + `sendInitialEvents=true` may be set together with `watch=true`. In that case, the watch stream will begin with synthetic events to produce the current state of objects in the collection. Once all such events have been sent, a synthetic "Bookmark" event will be sent. The bookmark will report the ResourceVersion (RV) corresponding to the set of objects, and be marked with `"k8s.io/initial-events-end": "true"` annotation. Afterwards, the watch stream will proceed as usual, sending watch events corresponding to changes (subsequent to the RV) to objects watched. + + When `sendInitialEvents` option is set, we require `resourceVersionMatch` option to also be set. The semantic of the watch request is as following: - `resourceVersionMatch` = NotOlderThan + is interpreted as "data at least as new as the provided `resourceVersion`" + and the bookmark event is send when the state is synced + to a `resourceVersion` at least as fresh as the one provided by the ListOptions. + If `resourceVersion` is unset, this is interpreted as "consistent read" and the + bookmark event is send when the state is synced at least to the moment + when request started being processed. + - `resourceVersionMatch` set to any other value or unset + Invalid error is returned. + + Defaults to true if `resourceVersion=""` or `resourceVersion="0"` (for backward compatibility reasons) and to false otherwise. + in: query + name: sendInitialEvents + schema: + type: boolean + - description: |- + shardSelector restricts the list of returned objects using a CEL-based shard selector expression. The format uses the shardRange() function combined with || (logical OR) to specify one or more hash ranges: + + shardRange(object.metadata.uid, '0x0', '0x8000000000000000') + shardRange(object.metadata.uid, '0x0', '0x8000000000000000') || shardRange(object.metadata.uid, '0x8000000000000000', '0x10000000000000000') + + Field paths use CEL-style object-rooted syntax (e.g. "object.metadata.uid"), NOT the fieldSelector format ("metadata.uid"). Currently supported paths: + - object.metadata.uid + - object.metadata.namespace + + hexStart and hexEnd are single-quoted CEL string literals with a '0x' prefix, defining the inclusive lower and exclusive upper bounds over the 64-bit FNV-1a hash space. The full range is [0x0, 0x10000000000000000), where the exclusive upper bound equals 2^64. + + Examples: + 2-shard split: + shard 0: shardRange(object.metadata.uid, '0x0000000000000000', '0x8000000000000000') + shard 1: shardRange(object.metadata.uid, '0x8000000000000000', '0x10000000000000000') + 4-shard split: + shard 0: shardRange(object.metadata.uid, '0x0000000000000000', '0x4000000000000000') + shard 1: shardRange(object.metadata.uid, '0x4000000000000000', '0x8000000000000000') + shard 2: shardRange(object.metadata.uid, '0x8000000000000000', '0xc000000000000000') + shard 3: shardRange(object.metadata.uid, '0xc000000000000000', '0x10000000000000000') + + This is an alpha field and requires enabling the ShardedListAndWatch feature gate. + in: query + name: shardSelector schema: type: string + - description: "Timeout for the list/watch call. This limits the duration of\ + \ the call, regardless of any activity or inactivity." + in: query + name: timeoutSeconds + schema: + type: integer + - description: "Watch for changes to the described resources and return them\ + \ as a stream of add, update, and remove notifications. Specify resourceVersion." + in: query + name: watch + schema: + type: boolean responses: "200": content: application/json: schema: - type: object - description: A single Resource + $ref: "#/components/schemas/v1.StorageVersionMigrationList" + application/yaml: + schema: + $ref: "#/components/schemas/v1.StorageVersionMigrationList" + application/vnd.kubernetes.protobuf: + schema: + $ref: "#/components/schemas/v1.StorageVersionMigrationList" + application/cbor: + schema: + $ref: "#/components/schemas/v1.StorageVersionMigrationList" + application/json;stream=watch: + schema: + $ref: "#/components/schemas/v1.StorageVersionMigrationList" + application/vnd.kubernetes.protobuf;stream=watch: + schema: + $ref: "#/components/schemas/v1.StorageVersionMigrationList" + application/cbor-seq: + schema: + $ref: "#/components/schemas/v1.StorageVersionMigrationList" + description: OK "401": content: {} description: Unauthorized tags: - - custom_objects + - storagemigration_v1 + x-kubernetes-action: list + x-kubernetes-group-version-kind: + group: storagemigration.k8s.io + kind: StorageVersionMigration + version: v1 x-accepts: + - application/cbor + - application/cbor-seq - application/json - patch: - description: patch the specified cluster scoped custom object - operationId: patchClusterCustomObject + - application/json;stream=watch + - application/vnd.kubernetes.protobuf + - application/vnd.kubernetes.protobuf;stream=watch + - application/yaml + post: + description: create a StorageVersionMigration + operationId: createStorageVersionMigration parameters: - - description: the custom resource's group - in: path - name: group - required: true - schema: - type: string - - description: the custom resource's version - in: path - name: version - required: true - schema: - type: string - - description: the custom object's plural name. For TPRs this would be lowercase - plural kind. - in: path - name: plural - required: true - schema: - type: string - - description: the custom object's name - in: path - name: name - required: true + - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ + \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ + \ and wget)." + in: query + name: pretty schema: type: string - description: "When present, indicates that modifications should not be persisted.\ @@ -101902,9 +106666,7 @@ paths: type: string - description: "fieldManager is a name associated with the actor or entity that\ \ is making these changes. The value must be less than or 128 characters\ - \ long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.\ - \ This field is required for apply requests (application/apply-patch) but\ - \ optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch)." + \ long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." in: query name: fieldManager schema: @@ -101921,69 +106683,96 @@ paths: \ fields. This is the default in v1.23+ - Strict: This will fail the request\ \ with a BadRequest error if any unknown fields would be dropped from the\ \ object, or if any duplicate fields are present. The error returned from\ - \ the server will contain all unknown and duplicate fields encountered.\ - \ (optional)" + \ the server will contain all unknown and duplicate fields encountered." in: query name: fieldValidation schema: type: string - - description: Force is going to "force" Apply requests. It means user will - re-acquire conflicting fields owned by other people. Force flag must be - unset for non-apply patch requests. - in: query - name: force - schema: - type: boolean requestBody: content: application/json: schema: - type: object - description: The JSON schema of the Resource to patch. + $ref: "#/components/schemas/v1.StorageVersionMigration" required: true responses: "200": content: application/json: schema: - type: object + $ref: "#/components/schemas/v1.StorageVersionMigration" + application/yaml: + schema: + $ref: "#/components/schemas/v1.StorageVersionMigration" + application/vnd.kubernetes.protobuf: + schema: + $ref: "#/components/schemas/v1.StorageVersionMigration" + application/cbor: + schema: + $ref: "#/components/schemas/v1.StorageVersionMigration" description: OK + "201": + content: + application/json: + schema: + $ref: "#/components/schemas/v1.StorageVersionMigration" + application/yaml: + schema: + $ref: "#/components/schemas/v1.StorageVersionMigration" + application/vnd.kubernetes.protobuf: + schema: + $ref: "#/components/schemas/v1.StorageVersionMigration" + application/cbor: + schema: + $ref: "#/components/schemas/v1.StorageVersionMigration" + description: Created + "202": + content: + application/json: + schema: + $ref: "#/components/schemas/v1.StorageVersionMigration" + application/yaml: + schema: + $ref: "#/components/schemas/v1.StorageVersionMigration" + application/vnd.kubernetes.protobuf: + schema: + $ref: "#/components/schemas/v1.StorageVersionMigration" + application/cbor: + schema: + $ref: "#/components/schemas/v1.StorageVersionMigration" + description: Accepted "401": content: {} description: Unauthorized tags: - - custom_objects + - storagemigration_v1 + x-kubernetes-action: post + x-kubernetes-group-version-kind: + group: storagemigration.k8s.io + kind: StorageVersionMigration + version: v1 x-codegen-request-body-name: body x-content-type: application/json x-accepts: + - application/cbor - application/json - put: - description: replace the specified cluster scoped custom object - operationId: replaceClusterCustomObject + - application/vnd.kubernetes.protobuf + - application/yaml + /apis/storagemigration.k8s.io/v1/storageversionmigrations/{name}: + delete: + description: delete a StorageVersionMigration + operationId: deleteStorageVersionMigration parameters: - - description: the custom resource's group - in: path - name: group - required: true - schema: - type: string - - description: the custom resource's version - in: path - name: version - required: true - schema: - type: string - - description: the custom object's plural name. For TPRs this would be lowercase - plural kind. + - description: name of the StorageVersionMigration in: path - name: plural + name: name required: true schema: type: string - - description: the custom object's name - in: path - name: name - required: true + - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ + \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ + \ and wget)." + in: query + name: pretty schema: type: string - description: "When present, indicates that modifications should not be persisted.\ @@ -101994,82 +106783,118 @@ paths: name: dryRun schema: type: string - - description: "fieldManager is a name associated with the actor or entity that\ - \ is making these changes. The value must be less than or 128 characters\ - \ long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." + - description: "The duration in seconds before the object should be deleted.\ + \ Value must be non-negative integer. The value zero indicates delete immediately.\ + \ If this value is nil, the default grace period for the specified type\ + \ will be used. Defaults to a per object value if not specified. zero means\ + \ delete immediately." in: query - name: fieldManager + name: gracePeriodSeconds schema: - type: string - - description: "fieldValidation instructs the server on how to handle objects\ - \ in the request (POST/PUT/PATCH) containing unknown or duplicate fields.\ - \ Valid values are: - Ignore: This will ignore any unknown fields that are\ - \ silently dropped from the object, and will ignore all but the last duplicate\ - \ field that the decoder encounters. This is the default behavior prior\ - \ to v1.23. - Warn: This will send a warning via the standard warning response\ - \ header for each unknown field that is dropped from the object, and for\ - \ each duplicate field that is encountered. The request will still succeed\ - \ if there are no other errors, and will only persist the last of any duplicate\ - \ fields. This is the default in v1.23+ - Strict: This will fail the request\ - \ with a BadRequest error if any unknown fields would be dropped from the\ - \ object, or if any duplicate fields are present. The error returned from\ - \ the server will contain all unknown and duplicate fields encountered.\ - \ (optional)" + type: integer + - description: "if set to true, it will trigger an unsafe deletion of the resource\ + \ in case the normal deletion flow fails with a corrupt object error. A\ + \ resource is considered corrupt if it can not be retrieved from the underlying\ + \ storage successfully because of a) its data can not be transformed e.g.\ + \ decryption failure, or b) it fails to decode into an object. NOTE: unsafe\ + \ deletion ignores finalizer constraints, skips precondition checks, and\ + \ removes the object from the storage. WARNING: This may potentially break\ + \ the cluster if the workload associated with the resource being unsafe-deleted\ + \ relies on normal deletion flow. Use only if you REALLY know what you are\ + \ doing. The default value is false, and the user must opt in to enable\ + \ it" in: query - name: fieldValidation + name: ignoreStoreReadErrorWithClusterBreakingPotential + schema: + type: boolean + - description: "Deprecated: please use the PropagationPolicy, this field will\ + \ be deprecated in 1.7. Should the dependent objects be orphaned. If true/false,\ + \ the \"orphan\" finalizer will be added to/removed from the object's finalizers\ + \ list. Either this field or PropagationPolicy may be set, but not both." + in: query + name: orphanDependents + schema: + type: boolean + - description: "Whether and how garbage collection will be performed. Either\ + \ this field or OrphanDependents may be set, but not both. The default policy\ + \ is decided by the existing finalizer set in the metadata.finalizers and\ + \ the resource-specific default policy. Acceptable values are: 'Orphan'\ + \ - orphan the dependents; 'Background' - allow the garbage collector to\ + \ delete the dependents in the background; 'Foreground' - a cascading policy\ + \ that deletes all dependents in the foreground." + in: query + name: propagationPolicy schema: type: string requestBody: content: application/json: schema: - type: object - description: The JSON schema of the Resource to replace. - required: true + $ref: "#/components/schemas/v1.DeleteOptions" + required: false responses: "200": content: application/json: schema: - type: object + $ref: "#/components/schemas/v1.Status" + application/yaml: + schema: + $ref: "#/components/schemas/v1.Status" + application/vnd.kubernetes.protobuf: + schema: + $ref: "#/components/schemas/v1.Status" + application/cbor: + schema: + $ref: "#/components/schemas/v1.Status" description: OK + "202": + content: + application/json: + schema: + $ref: "#/components/schemas/v1.Status" + application/yaml: + schema: + $ref: "#/components/schemas/v1.Status" + application/vnd.kubernetes.protobuf: + schema: + $ref: "#/components/schemas/v1.Status" + application/cbor: + schema: + $ref: "#/components/schemas/v1.Status" + description: Accepted "401": content: {} description: Unauthorized tags: - - custom_objects + - storagemigration_v1 + x-kubernetes-action: delete + x-kubernetes-group-version-kind: + group: storagemigration.k8s.io + kind: StorageVersionMigration + version: v1 x-codegen-request-body-name: body x-content-type: application/json x-accepts: + - application/cbor - application/json - /apis/{group}/{version}/{plural}/{name}/status: + - application/vnd.kubernetes.protobuf + - application/yaml get: - description: read status of the specified cluster scoped custom object - operationId: getClusterCustomObjectStatus + description: read the specified StorageVersionMigration + operationId: readStorageVersionMigration parameters: - - description: the custom resource's group - in: path - name: group - required: true - schema: - type: string - - description: the custom resource's version - in: path - name: version - required: true - schema: - type: string - - description: the custom resource's plural name. For TPRs this would be lowercase - plural kind. + - description: name of the StorageVersionMigration in: path - name: plural + name: name required: true schema: type: string - - description: the custom object's name - in: path - name: name - required: true + - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ + \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ + \ and wget)." + in: query + name: pretty schema: type: string responses: @@ -102077,51 +106902,47 @@ paths: content: application/json: schema: - type: object + $ref: "#/components/schemas/v1.StorageVersionMigration" application/yaml: schema: - type: object + $ref: "#/components/schemas/v1.StorageVersionMigration" application/vnd.kubernetes.protobuf: schema: - type: object + $ref: "#/components/schemas/v1.StorageVersionMigration" + application/cbor: + schema: + $ref: "#/components/schemas/v1.StorageVersionMigration" description: OK "401": content: {} description: Unauthorized tags: - - custom_objects + - storagemigration_v1 + x-kubernetes-action: get + x-kubernetes-group-version-kind: + group: storagemigration.k8s.io + kind: StorageVersionMigration + version: v1 x-accepts: + - application/cbor - application/json - application/vnd.kubernetes.protobuf - application/yaml patch: - description: partially update status of the specified cluster scoped custom - object - operationId: patchClusterCustomObjectStatus + description: partially update the specified StorageVersionMigration + operationId: patchStorageVersionMigration parameters: - - description: the custom resource's group - in: path - name: group - required: true - schema: - type: string - - description: the custom resource's version - in: path - name: version - required: true - schema: - type: string - - description: the custom resource's plural name. For TPRs this would be lowercase - plural kind. + - description: name of the StorageVersionMigration in: path - name: plural + name: name required: true schema: type: string - - description: the custom object's name - in: path - name: name - required: true + - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ + \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ + \ and wget)." + in: query + name: pretty schema: type: string - description: "When present, indicates that modifications should not be persisted.\ @@ -102153,8 +106974,7 @@ paths: \ fields. This is the default in v1.23+ - Strict: This will fail the request\ \ with a BadRequest error if any unknown fields would be dropped from the\ \ object, or if any duplicate fields are present. The error returned from\ - \ the server will contain all unknown and duplicate fields encountered.\ - \ (optional)" + \ the server will contain all unknown and duplicate fields encountered." in: query name: fieldValidation schema: @@ -102170,60 +106990,71 @@ paths: content: application/json: schema: - description: The JSON schema of the Resource to patch. - type: object + $ref: "#/components/schemas/v1.Patch" required: true responses: "200": content: application/json: schema: - type: object + $ref: "#/components/schemas/v1.StorageVersionMigration" application/yaml: schema: - type: object + $ref: "#/components/schemas/v1.StorageVersionMigration" application/vnd.kubernetes.protobuf: schema: - type: object + $ref: "#/components/schemas/v1.StorageVersionMigration" + application/cbor: + schema: + $ref: "#/components/schemas/v1.StorageVersionMigration" description: OK + "201": + content: + application/json: + schema: + $ref: "#/components/schemas/v1.StorageVersionMigration" + application/yaml: + schema: + $ref: "#/components/schemas/v1.StorageVersionMigration" + application/vnd.kubernetes.protobuf: + schema: + $ref: "#/components/schemas/v1.StorageVersionMigration" + application/cbor: + schema: + $ref: "#/components/schemas/v1.StorageVersionMigration" + description: Created "401": content: {} description: Unauthorized tags: - - custom_objects + - storagemigration_v1 + x-kubernetes-action: patch + x-kubernetes-group-version-kind: + group: storagemigration.k8s.io + kind: StorageVersionMigration + version: v1 x-codegen-request-body-name: body x-content-type: application/json x-accepts: + - application/cbor - application/json - application/vnd.kubernetes.protobuf - application/yaml put: - description: replace status of the cluster scoped specified custom object - operationId: replaceClusterCustomObjectStatus + description: replace the specified StorageVersionMigration + operationId: replaceStorageVersionMigration parameters: - - description: the custom resource's group - in: path - name: group - required: true - schema: - type: string - - description: the custom resource's version - in: path - name: version - required: true - schema: - type: string - - description: the custom resource's plural name. For TPRs this would be lowercase - plural kind. + - description: name of the StorageVersionMigration in: path - name: plural + name: name required: true schema: type: string - - description: the custom object's name - in: path - name: name - required: true + - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ + \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ + \ and wget)." + in: query + name: pretty schema: type: string - description: "When present, indicates that modifications should not be persisted.\ @@ -102253,8 +107084,7 @@ paths: \ fields. This is the default in v1.23+ - Strict: This will fail the request\ \ with a BadRequest error if any unknown fields would be dropped from the\ \ object, or if any duplicate fields are present. The error returned from\ - \ the server will contain all unknown and duplicate fields encountered.\ - \ (optional)" + \ the server will contain all unknown and duplicate fields encountered." in: query name: fieldValidation schema: @@ -102263,72 +107093,72 @@ paths: content: application/json: schema: - type: object + $ref: "#/components/schemas/v1.StorageVersionMigration" required: true responses: "200": content: application/json: schema: - type: object + $ref: "#/components/schemas/v1.StorageVersionMigration" application/yaml: schema: - type: object + $ref: "#/components/schemas/v1.StorageVersionMigration" application/vnd.kubernetes.protobuf: schema: - type: object + $ref: "#/components/schemas/v1.StorageVersionMigration" + application/cbor: + schema: + $ref: "#/components/schemas/v1.StorageVersionMigration" description: OK "201": content: application/json: schema: - type: object + $ref: "#/components/schemas/v1.StorageVersionMigration" application/yaml: schema: - type: object + $ref: "#/components/schemas/v1.StorageVersionMigration" application/vnd.kubernetes.protobuf: schema: - type: object + $ref: "#/components/schemas/v1.StorageVersionMigration" + application/cbor: + schema: + $ref: "#/components/schemas/v1.StorageVersionMigration" description: Created "401": content: {} description: Unauthorized tags: - - custom_objects + - storagemigration_v1 + x-kubernetes-action: put + x-kubernetes-group-version-kind: + group: storagemigration.k8s.io + kind: StorageVersionMigration + version: v1 x-codegen-request-body-name: body x-content-type: application/json x-accepts: + - application/cbor - application/json - application/vnd.kubernetes.protobuf - application/yaml - /apis/{group}/{version}/{plural}/{name}/scale: + /apis/storagemigration.k8s.io/v1/storageversionmigrations/{name}/status: get: - description: read scale of the specified custom object - operationId: getClusterCustomObjectScale + description: read status of the specified StorageVersionMigration + operationId: readStorageVersionMigrationStatus parameters: - - description: the custom resource's group - in: path - name: group - required: true - schema: - type: string - - description: the custom resource's version - in: path - name: version - required: true - schema: - type: string - - description: the custom resource's plural name. For TPRs this would be lowercase - plural kind. + - description: name of the StorageVersionMigration in: path - name: plural + name: name required: true schema: type: string - - description: the custom object's name - in: path - name: name - required: true + - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ + \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ + \ and wget)." + in: query + name: pretty schema: type: string responses: @@ -102336,50 +107166,47 @@ paths: content: application/json: schema: - type: object + $ref: "#/components/schemas/v1.StorageVersionMigration" application/yaml: schema: - type: object + $ref: "#/components/schemas/v1.StorageVersionMigration" application/vnd.kubernetes.protobuf: schema: - type: object + $ref: "#/components/schemas/v1.StorageVersionMigration" + application/cbor: + schema: + $ref: "#/components/schemas/v1.StorageVersionMigration" description: OK "401": content: {} description: Unauthorized tags: - - custom_objects + - storagemigration_v1 + x-kubernetes-action: get + x-kubernetes-group-version-kind: + group: storagemigration.k8s.io + kind: StorageVersionMigration + version: v1 x-accepts: + - application/cbor - application/json - application/vnd.kubernetes.protobuf - application/yaml patch: - description: partially update scale of the specified cluster scoped custom object - operationId: patchClusterCustomObjectScale + description: partially update status of the specified StorageVersionMigration + operationId: patchStorageVersionMigrationStatus parameters: - - description: the custom resource's group - in: path - name: group - required: true - schema: - type: string - - description: the custom resource's version - in: path - name: version - required: true - schema: - type: string - - description: the custom resource's plural name. For TPRs this would be lowercase - plural kind. + - description: name of the StorageVersionMigration in: path - name: plural + name: name required: true schema: type: string - - description: the custom object's name - in: path - name: name - required: true + - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ + \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ + \ and wget)." + in: query + name: pretty schema: type: string - description: "When present, indicates that modifications should not be persisted.\ @@ -102411,8 +107238,7 @@ paths: \ fields. This is the default in v1.23+ - Strict: This will fail the request\ \ with a BadRequest error if any unknown fields would be dropped from the\ \ object, or if any duplicate fields are present. The error returned from\ - \ the server will contain all unknown and duplicate fields encountered.\ - \ (optional)" + \ the server will contain all unknown and duplicate fields encountered." in: query name: fieldValidation schema: @@ -102428,60 +107254,71 @@ paths: content: application/json: schema: - description: The JSON schema of the Resource to patch. - type: object + $ref: "#/components/schemas/v1.Patch" required: true responses: "200": content: application/json: schema: - type: object + $ref: "#/components/schemas/v1.StorageVersionMigration" application/yaml: schema: - type: object + $ref: "#/components/schemas/v1.StorageVersionMigration" application/vnd.kubernetes.protobuf: schema: - type: object + $ref: "#/components/schemas/v1.StorageVersionMigration" + application/cbor: + schema: + $ref: "#/components/schemas/v1.StorageVersionMigration" description: OK + "201": + content: + application/json: + schema: + $ref: "#/components/schemas/v1.StorageVersionMigration" + application/yaml: + schema: + $ref: "#/components/schemas/v1.StorageVersionMigration" + application/vnd.kubernetes.protobuf: + schema: + $ref: "#/components/schemas/v1.StorageVersionMigration" + application/cbor: + schema: + $ref: "#/components/schemas/v1.StorageVersionMigration" + description: Created "401": content: {} description: Unauthorized tags: - - custom_objects + - storagemigration_v1 + x-kubernetes-action: patch + x-kubernetes-group-version-kind: + group: storagemigration.k8s.io + kind: StorageVersionMigration + version: v1 x-codegen-request-body-name: body x-content-type: application/json x-accepts: + - application/cbor - application/json - application/vnd.kubernetes.protobuf - application/yaml put: - description: replace scale of the specified cluster scoped custom object - operationId: replaceClusterCustomObjectScale + description: replace status of the specified StorageVersionMigration + operationId: replaceStorageVersionMigrationStatus parameters: - - description: the custom resource's group + - description: name of the StorageVersionMigration in: path - name: group - required: true - schema: - type: string - - description: the custom resource's version - in: path - name: version - required: true - schema: - type: string - - description: the custom resource's plural name. For TPRs this would be lowercase - plural kind. - in: path - name: plural + name: name required: true schema: type: string - - description: the custom object's name - in: path - name: name - required: true + - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ + \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ + \ and wget)." + in: query + name: pretty schema: type: string - description: "When present, indicates that modifications should not be persisted.\ @@ -102511,8 +107348,7 @@ paths: \ fields. This is the default in v1.23+ - Strict: This will fail the request\ \ with a BadRequest error if any unknown fields would be dropped from the\ \ object, or if any duplicate fields are present. The error returned from\ - \ the server will contain all unknown and duplicate fields encountered.\ - \ (optional)" + \ the server will contain all unknown and duplicate fields encountered." in: query name: fieldValidation schema: @@ -102521,78 +107357,120 @@ paths: content: application/json: schema: - type: object + $ref: "#/components/schemas/v1.StorageVersionMigration" required: true responses: "200": content: application/json: schema: - type: object + $ref: "#/components/schemas/v1.StorageVersionMigration" application/yaml: schema: - type: object + $ref: "#/components/schemas/v1.StorageVersionMigration" application/vnd.kubernetes.protobuf: schema: - type: object + $ref: "#/components/schemas/v1.StorageVersionMigration" + application/cbor: + schema: + $ref: "#/components/schemas/v1.StorageVersionMigration" description: OK "201": content: application/json: schema: - type: object + $ref: "#/components/schemas/v1.StorageVersionMigration" application/yaml: schema: - type: object + $ref: "#/components/schemas/v1.StorageVersionMigration" application/vnd.kubernetes.protobuf: schema: - type: object + $ref: "#/components/schemas/v1.StorageVersionMigration" + application/cbor: + schema: + $ref: "#/components/schemas/v1.StorageVersionMigration" description: Created "401": content: {} description: Unauthorized tags: - - custom_objects + - storagemigration_v1 + x-kubernetes-action: put + x-kubernetes-group-version-kind: + group: storagemigration.k8s.io + kind: StorageVersionMigration + version: v1 x-codegen-request-body-name: body x-content-type: application/json x-accepts: + - application/cbor - application/json - application/vnd.kubernetes.protobuf - application/yaml - /apis/{group}/{version}/namespaces/{namespace}/{plural}/{name}: + /apis/storagemigration.k8s.io/v1/watch/storageversionmigrations: {} + /apis/storagemigration.k8s.io/v1/watch/storageversionmigrations/{name}: {} + /apis/storagemigration.k8s.io/v1beta1/: + get: + description: get available resources + operationId: getAPIResources + responses: + "200": + content: + application/json: + schema: + $ref: "#/components/schemas/v1.APIResourceList" + application/yaml: + schema: + $ref: "#/components/schemas/v1.APIResourceList" + application/vnd.kubernetes.protobuf: + schema: + $ref: "#/components/schemas/v1.APIResourceList" + application/cbor: + schema: + $ref: "#/components/schemas/v1.APIResourceList" + description: OK + "401": + content: {} + description: Unauthorized + tags: + - storagemigration_v1beta1 + x-accepts: + - application/cbor + - application/json + - application/vnd.kubernetes.protobuf + - application/yaml + /apis/storagemigration.k8s.io/v1beta1/storageversionmigrations: delete: - description: Deletes the specified namespace scoped custom object - operationId: deleteNamespacedCustomObject + description: delete collection of StorageVersionMigration + operationId: deleteCollectionStorageVersionMigration parameters: - - description: the custom resource's group - in: path - name: group - required: true - schema: - type: string - - description: the custom resource's version - in: path - name: version - required: true + - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ + \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ + \ and wget)." + in: query + name: pretty schema: type: string - - description: The custom resource's namespace - in: path - name: namespace - required: true + - description: |- + The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + + This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications. + in: query + name: continue schema: type: string - - description: the custom resource's plural name. For TPRs this would be lowercase - plural kind. - in: path - name: plural - required: true + - description: "When present, indicates that modifications should not be persisted.\ + \ An invalid or unrecognized dryRun directive will result in an error response\ + \ and no further processing of the request. Valid values are: - All: all\ + \ dry run stages will be processed" + in: query + name: dryRun schema: type: string - - description: the custom object's name - in: path - name: name - required: true + - description: A selector to restrict the list of returned objects by their + fields. Defaults to everything. + in: query + name: fieldSelector schema: type: string - description: "The duration in seconds before the object should be deleted.\ @@ -102604,6 +107482,35 @@ paths: name: gracePeriodSeconds schema: type: integer + - description: "if set to true, it will trigger an unsafe deletion of the resource\ + \ in case the normal deletion flow fails with a corrupt object error. A\ + \ resource is considered corrupt if it can not be retrieved from the underlying\ + \ storage successfully because of a) its data can not be transformed e.g.\ + \ decryption failure, or b) it fails to decode into an object. NOTE: unsafe\ + \ deletion ignores finalizer constraints, skips precondition checks, and\ + \ removes the object from the storage. WARNING: This may potentially break\ + \ the cluster if the workload associated with the resource being unsafe-deleted\ + \ relies on normal deletion flow. Use only if you REALLY know what you are\ + \ doing. The default value is false, and the user must opt in to enable\ + \ it" + in: query + name: ignoreStoreReadErrorWithClusterBreakingPotential + schema: + type: boolean + - description: A selector to restrict the list of returned objects by their + labels. Defaults to everything. + in: query + name: labelSelector + schema: + type: string + - description: |- + limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + + The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned. + in: query + name: limit + schema: + type: integer - description: "Deprecated: please use the PropagationPolicy, this field will\ \ be deprecated in 1.7. Should the dependent objects be orphaned. If true/false,\ \ the \"orphan\" finalizer will be added to/removed from the object's finalizers\ @@ -102615,19 +107522,81 @@ paths: - description: "Whether and how garbage collection will be performed. Either\ \ this field or OrphanDependents may be set, but not both. The default policy\ \ is decided by the existing finalizer set in the metadata.finalizers and\ - \ the resource-specific default policy." + \ the resource-specific default policy. Acceptable values are: 'Orphan'\ + \ - orphan the dependents; 'Background' - allow the garbage collector to\ + \ delete the dependents in the background; 'Foreground' - a cascading policy\ + \ that deletes all dependents in the foreground." in: query name: propagationPolicy schema: type: string - - description: "When present, indicates that modifications should not be persisted.\ - \ An invalid or unrecognized dryRun directive will result in an error response\ - \ and no further processing of the request. Valid values are: - All: all\ - \ dry run stages will be processed" + - description: |- + resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + + Defaults to unset in: query - name: dryRun + name: resourceVersion + schema: + type: string + - description: |- + resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + + Defaults to unset + in: query + name: resourceVersionMatch + schema: + type: string + - description: |- + `sendInitialEvents=true` may be set together with `watch=true`. In that case, the watch stream will begin with synthetic events to produce the current state of objects in the collection. Once all such events have been sent, a synthetic "Bookmark" event will be sent. The bookmark will report the ResourceVersion (RV) corresponding to the set of objects, and be marked with `"k8s.io/initial-events-end": "true"` annotation. Afterwards, the watch stream will proceed as usual, sending watch events corresponding to changes (subsequent to the RV) to objects watched. + + When `sendInitialEvents` option is set, we require `resourceVersionMatch` option to also be set. The semantic of the watch request is as following: - `resourceVersionMatch` = NotOlderThan + is interpreted as "data at least as new as the provided `resourceVersion`" + and the bookmark event is send when the state is synced + to a `resourceVersion` at least as fresh as the one provided by the ListOptions. + If `resourceVersion` is unset, this is interpreted as "consistent read" and the + bookmark event is send when the state is synced at least to the moment + when request started being processed. + - `resourceVersionMatch` set to any other value or unset + Invalid error is returned. + + Defaults to true if `resourceVersion=""` or `resourceVersion="0"` (for backward compatibility reasons) and to false otherwise. + in: query + name: sendInitialEvents + schema: + type: boolean + - description: |- + shardSelector restricts the list of returned objects using a CEL-based shard selector expression. The format uses the shardRange() function combined with || (logical OR) to specify one or more hash ranges: + + shardRange(object.metadata.uid, '0x0', '0x8000000000000000') + shardRange(object.metadata.uid, '0x0', '0x8000000000000000') || shardRange(object.metadata.uid, '0x8000000000000000', '0x10000000000000000') + + Field paths use CEL-style object-rooted syntax (e.g. "object.metadata.uid"), NOT the fieldSelector format ("metadata.uid"). Currently supported paths: + - object.metadata.uid + - object.metadata.namespace + + hexStart and hexEnd are single-quoted CEL string literals with a '0x' prefix, defining the inclusive lower and exclusive upper bounds over the 64-bit FNV-1a hash space. The full range is [0x0, 0x10000000000000000), where the exclusive upper bound equals 2^64. + + Examples: + 2-shard split: + shard 0: shardRange(object.metadata.uid, '0x0000000000000000', '0x8000000000000000') + shard 1: shardRange(object.metadata.uid, '0x8000000000000000', '0x10000000000000000') + 4-shard split: + shard 0: shardRange(object.metadata.uid, '0x0000000000000000', '0x4000000000000000') + shard 1: shardRange(object.metadata.uid, '0x4000000000000000', '0x8000000000000000') + shard 2: shardRange(object.metadata.uid, '0x8000000000000000', '0xc000000000000000') + shard 3: shardRange(object.metadata.uid, '0xc000000000000000', '0x10000000000000000') + + This is an alpha field and requires enabling the ShardedListAndWatch feature gate. + in: query + name: shardSelector schema: type: string + - description: "Timeout for the list/watch call. This limits the duration of\ + \ the call, regardless of any activity or inactivity." + in: query + name: timeoutSeconds + schema: + type: integer requestBody: content: application/json: @@ -102639,99 +107608,208 @@ paths: content: application/json: schema: - type: object + $ref: "#/components/schemas/v1.Status" + application/yaml: + schema: + $ref: "#/components/schemas/v1.Status" + application/vnd.kubernetes.protobuf: + schema: + $ref: "#/components/schemas/v1.Status" + application/cbor: + schema: + $ref: "#/components/schemas/v1.Status" description: OK "401": content: {} description: Unauthorized tags: - - custom_objects + - storagemigration_v1beta1 + x-kubernetes-action: deletecollection + x-kubernetes-group-version-kind: + group: storagemigration.k8s.io + kind: StorageVersionMigration + version: v1beta1 x-codegen-request-body-name: body x-content-type: application/json x-accepts: + - application/cbor - application/json + - application/vnd.kubernetes.protobuf + - application/yaml get: - description: Returns a namespace scoped custom object - operationId: getNamespacedCustomObject + description: list or watch objects of kind StorageVersionMigration + operationId: listStorageVersionMigration parameters: - - description: the custom resource's group - in: path - name: group - required: true + - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ + \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ + \ and wget)." + in: query + name: pretty schema: type: string - - description: the custom resource's version - in: path - name: version - required: true + - description: "allowWatchBookmarks requests watch events with type \"BOOKMARK\"\ + . Servers that do not implement bookmarks may ignore this flag and bookmarks\ + \ are sent at the server's discretion. Clients should not assume bookmarks\ + \ are returned at any specific interval, nor may they assume the server\ + \ will send any BOOKMARK event during a session. If this is not a watch,\ + \ this field is ignored." + in: query + name: allowWatchBookmarks + schema: + type: boolean + - description: |- + The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + + This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications. + in: query + name: continue schema: type: string - - description: The custom resource's namespace - in: path - name: namespace - required: true + - description: A selector to restrict the list of returned objects by their + fields. Defaults to everything. + in: query + name: fieldSelector schema: type: string - - description: the custom resource's plural name. For TPRs this would be lowercase - plural kind. - in: path - name: plural - required: true + - description: A selector to restrict the list of returned objects by their + labels. Defaults to everything. + in: query + name: labelSelector schema: type: string - - description: the custom object's name - in: path - name: name - required: true + - description: |- + limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + + The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned. + in: query + name: limit + schema: + type: integer + - description: |- + resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + + Defaults to unset + in: query + name: resourceVersion + schema: + type: string + - description: |- + resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + + Defaults to unset + in: query + name: resourceVersionMatch + schema: + type: string + - description: |- + `sendInitialEvents=true` may be set together with `watch=true`. In that case, the watch stream will begin with synthetic events to produce the current state of objects in the collection. Once all such events have been sent, a synthetic "Bookmark" event will be sent. The bookmark will report the ResourceVersion (RV) corresponding to the set of objects, and be marked with `"k8s.io/initial-events-end": "true"` annotation. Afterwards, the watch stream will proceed as usual, sending watch events corresponding to changes (subsequent to the RV) to objects watched. + + When `sendInitialEvents` option is set, we require `resourceVersionMatch` option to also be set. The semantic of the watch request is as following: - `resourceVersionMatch` = NotOlderThan + is interpreted as "data at least as new as the provided `resourceVersion`" + and the bookmark event is send when the state is synced + to a `resourceVersion` at least as fresh as the one provided by the ListOptions. + If `resourceVersion` is unset, this is interpreted as "consistent read" and the + bookmark event is send when the state is synced at least to the moment + when request started being processed. + - `resourceVersionMatch` set to any other value or unset + Invalid error is returned. + + Defaults to true if `resourceVersion=""` or `resourceVersion="0"` (for backward compatibility reasons) and to false otherwise. + in: query + name: sendInitialEvents + schema: + type: boolean + - description: |- + shardSelector restricts the list of returned objects using a CEL-based shard selector expression. The format uses the shardRange() function combined with || (logical OR) to specify one or more hash ranges: + + shardRange(object.metadata.uid, '0x0', '0x8000000000000000') + shardRange(object.metadata.uid, '0x0', '0x8000000000000000') || shardRange(object.metadata.uid, '0x8000000000000000', '0x10000000000000000') + + Field paths use CEL-style object-rooted syntax (e.g. "object.metadata.uid"), NOT the fieldSelector format ("metadata.uid"). Currently supported paths: + - object.metadata.uid + - object.metadata.namespace + + hexStart and hexEnd are single-quoted CEL string literals with a '0x' prefix, defining the inclusive lower and exclusive upper bounds over the 64-bit FNV-1a hash space. The full range is [0x0, 0x10000000000000000), where the exclusive upper bound equals 2^64. + + Examples: + 2-shard split: + shard 0: shardRange(object.metadata.uid, '0x0000000000000000', '0x8000000000000000') + shard 1: shardRange(object.metadata.uid, '0x8000000000000000', '0x10000000000000000') + 4-shard split: + shard 0: shardRange(object.metadata.uid, '0x0000000000000000', '0x4000000000000000') + shard 1: shardRange(object.metadata.uid, '0x4000000000000000', '0x8000000000000000') + shard 2: shardRange(object.metadata.uid, '0x8000000000000000', '0xc000000000000000') + shard 3: shardRange(object.metadata.uid, '0xc000000000000000', '0x10000000000000000') + + This is an alpha field and requires enabling the ShardedListAndWatch feature gate. + in: query + name: shardSelector schema: type: string + - description: "Timeout for the list/watch call. This limits the duration of\ + \ the call, regardless of any activity or inactivity." + in: query + name: timeoutSeconds + schema: + type: integer + - description: "Watch for changes to the described resources and return them\ + \ as a stream of add, update, and remove notifications. Specify resourceVersion." + in: query + name: watch + schema: + type: boolean responses: "200": content: application/json: schema: - type: object - description: A single Resource + $ref: "#/components/schemas/v1beta1.StorageVersionMigrationList" + application/yaml: + schema: + $ref: "#/components/schemas/v1beta1.StorageVersionMigrationList" + application/vnd.kubernetes.protobuf: + schema: + $ref: "#/components/schemas/v1beta1.StorageVersionMigrationList" + application/cbor: + schema: + $ref: "#/components/schemas/v1beta1.StorageVersionMigrationList" + application/json;stream=watch: + schema: + $ref: "#/components/schemas/v1beta1.StorageVersionMigrationList" + application/vnd.kubernetes.protobuf;stream=watch: + schema: + $ref: "#/components/schemas/v1beta1.StorageVersionMigrationList" + application/cbor-seq: + schema: + $ref: "#/components/schemas/v1beta1.StorageVersionMigrationList" + description: OK "401": content: {} description: Unauthorized tags: - - custom_objects + - storagemigration_v1beta1 + x-kubernetes-action: list + x-kubernetes-group-version-kind: + group: storagemigration.k8s.io + kind: StorageVersionMigration + version: v1beta1 x-accepts: + - application/cbor + - application/cbor-seq - application/json - patch: - description: patch the specified namespace scoped custom object - operationId: patchNamespacedCustomObject + - application/json;stream=watch + - application/vnd.kubernetes.protobuf + - application/vnd.kubernetes.protobuf;stream=watch + - application/yaml + post: + description: create a StorageVersionMigration + operationId: createStorageVersionMigration parameters: - - description: the custom resource's group - in: path - name: group - required: true - schema: - type: string - - description: the custom resource's version - in: path - name: version - required: true - schema: - type: string - - description: The custom resource's namespace - in: path - name: namespace - required: true - schema: - type: string - - description: the custom resource's plural name. For TPRs this would be lowercase - plural kind. - in: path - name: plural - required: true - schema: - type: string - - description: the custom object's name - in: path - name: name - required: true + - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ + \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ + \ and wget)." + in: query + name: pretty schema: type: string - description: "When present, indicates that modifications should not be persisted.\ @@ -102744,9 +107822,7 @@ paths: type: string - description: "fieldManager is a name associated with the actor or entity that\ \ is making these changes. The value must be less than or 128 characters\ - \ long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.\ - \ This field is required for apply requests (application/apply-patch) but\ - \ optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch)." + \ long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." in: query name: fieldManager schema: @@ -102763,75 +107839,96 @@ paths: \ fields. This is the default in v1.23+ - Strict: This will fail the request\ \ with a BadRequest error if any unknown fields would be dropped from the\ \ object, or if any duplicate fields are present. The error returned from\ - \ the server will contain all unknown and duplicate fields encountered.\ - \ (optional)" + \ the server will contain all unknown and duplicate fields encountered." in: query name: fieldValidation schema: type: string - - description: Force is going to "force" Apply requests. It means user will - re-acquire conflicting fields owned by other people. Force flag must be - unset for non-apply patch requests. - in: query - name: force - schema: - type: boolean requestBody: content: application/json: schema: - type: object - description: The JSON schema of the Resource to patch. + $ref: "#/components/schemas/v1beta1.StorageVersionMigration" required: true responses: "200": content: application/json: schema: - type: object + $ref: "#/components/schemas/v1beta1.StorageVersionMigration" + application/yaml: + schema: + $ref: "#/components/schemas/v1beta1.StorageVersionMigration" + application/vnd.kubernetes.protobuf: + schema: + $ref: "#/components/schemas/v1beta1.StorageVersionMigration" + application/cbor: + schema: + $ref: "#/components/schemas/v1beta1.StorageVersionMigration" description: OK + "201": + content: + application/json: + schema: + $ref: "#/components/schemas/v1beta1.StorageVersionMigration" + application/yaml: + schema: + $ref: "#/components/schemas/v1beta1.StorageVersionMigration" + application/vnd.kubernetes.protobuf: + schema: + $ref: "#/components/schemas/v1beta1.StorageVersionMigration" + application/cbor: + schema: + $ref: "#/components/schemas/v1beta1.StorageVersionMigration" + description: Created + "202": + content: + application/json: + schema: + $ref: "#/components/schemas/v1beta1.StorageVersionMigration" + application/yaml: + schema: + $ref: "#/components/schemas/v1beta1.StorageVersionMigration" + application/vnd.kubernetes.protobuf: + schema: + $ref: "#/components/schemas/v1beta1.StorageVersionMigration" + application/cbor: + schema: + $ref: "#/components/schemas/v1beta1.StorageVersionMigration" + description: Accepted "401": content: {} description: Unauthorized tags: - - custom_objects + - storagemigration_v1beta1 + x-kubernetes-action: post + x-kubernetes-group-version-kind: + group: storagemigration.k8s.io + kind: StorageVersionMigration + version: v1beta1 x-codegen-request-body-name: body x-content-type: application/json x-accepts: + - application/cbor - application/json - put: - description: replace the specified namespace scoped custom object - operationId: replaceNamespacedCustomObject + - application/vnd.kubernetes.protobuf + - application/yaml + /apis/storagemigration.k8s.io/v1beta1/storageversionmigrations/{name}: + delete: + description: delete a StorageVersionMigration + operationId: deleteStorageVersionMigration parameters: - - description: the custom resource's group - in: path - name: group - required: true - schema: - type: string - - description: the custom resource's version - in: path - name: version - required: true - schema: - type: string - - description: The custom resource's namespace - in: path - name: namespace - required: true - schema: - type: string - - description: the custom resource's plural name. For TPRs this would be lowercase - plural kind. + - description: name of the StorageVersionMigration in: path - name: plural + name: name required: true schema: type: string - - description: the custom object's name - in: path - name: name - required: true + - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ + \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ + \ and wget)." + in: query + name: pretty schema: type: string - description: "When present, indicates that modifications should not be persisted.\ @@ -102842,88 +107939,118 @@ paths: name: dryRun schema: type: string - - description: "fieldManager is a name associated with the actor or entity that\ - \ is making these changes. The value must be less than or 128 characters\ - \ long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." + - description: "The duration in seconds before the object should be deleted.\ + \ Value must be non-negative integer. The value zero indicates delete immediately.\ + \ If this value is nil, the default grace period for the specified type\ + \ will be used. Defaults to a per object value if not specified. zero means\ + \ delete immediately." in: query - name: fieldManager + name: gracePeriodSeconds schema: - type: string - - description: "fieldValidation instructs the server on how to handle objects\ - \ in the request (POST/PUT/PATCH) containing unknown or duplicate fields.\ - \ Valid values are: - Ignore: This will ignore any unknown fields that are\ - \ silently dropped from the object, and will ignore all but the last duplicate\ - \ field that the decoder encounters. This is the default behavior prior\ - \ to v1.23. - Warn: This will send a warning via the standard warning response\ - \ header for each unknown field that is dropped from the object, and for\ - \ each duplicate field that is encountered. The request will still succeed\ - \ if there are no other errors, and will only persist the last of any duplicate\ - \ fields. This is the default in v1.23+ - Strict: This will fail the request\ - \ with a BadRequest error if any unknown fields would be dropped from the\ - \ object, or if any duplicate fields are present. The error returned from\ - \ the server will contain all unknown and duplicate fields encountered.\ - \ (optional)" + type: integer + - description: "if set to true, it will trigger an unsafe deletion of the resource\ + \ in case the normal deletion flow fails with a corrupt object error. A\ + \ resource is considered corrupt if it can not be retrieved from the underlying\ + \ storage successfully because of a) its data can not be transformed e.g.\ + \ decryption failure, or b) it fails to decode into an object. NOTE: unsafe\ + \ deletion ignores finalizer constraints, skips precondition checks, and\ + \ removes the object from the storage. WARNING: This may potentially break\ + \ the cluster if the workload associated with the resource being unsafe-deleted\ + \ relies on normal deletion flow. Use only if you REALLY know what you are\ + \ doing. The default value is false, and the user must opt in to enable\ + \ it" in: query - name: fieldValidation + name: ignoreStoreReadErrorWithClusterBreakingPotential + schema: + type: boolean + - description: "Deprecated: please use the PropagationPolicy, this field will\ + \ be deprecated in 1.7. Should the dependent objects be orphaned. If true/false,\ + \ the \"orphan\" finalizer will be added to/removed from the object's finalizers\ + \ list. Either this field or PropagationPolicy may be set, but not both." + in: query + name: orphanDependents + schema: + type: boolean + - description: "Whether and how garbage collection will be performed. Either\ + \ this field or OrphanDependents may be set, but not both. The default policy\ + \ is decided by the existing finalizer set in the metadata.finalizers and\ + \ the resource-specific default policy. Acceptable values are: 'Orphan'\ + \ - orphan the dependents; 'Background' - allow the garbage collector to\ + \ delete the dependents in the background; 'Foreground' - a cascading policy\ + \ that deletes all dependents in the foreground." + in: query + name: propagationPolicy schema: type: string requestBody: content: application/json: schema: - type: object - description: The JSON schema of the Resource to replace. - required: true + $ref: "#/components/schemas/v1.DeleteOptions" + required: false responses: "200": content: application/json: schema: - type: object + $ref: "#/components/schemas/v1.Status" + application/yaml: + schema: + $ref: "#/components/schemas/v1.Status" + application/vnd.kubernetes.protobuf: + schema: + $ref: "#/components/schemas/v1.Status" + application/cbor: + schema: + $ref: "#/components/schemas/v1.Status" description: OK + "202": + content: + application/json: + schema: + $ref: "#/components/schemas/v1.Status" + application/yaml: + schema: + $ref: "#/components/schemas/v1.Status" + application/vnd.kubernetes.protobuf: + schema: + $ref: "#/components/schemas/v1.Status" + application/cbor: + schema: + $ref: "#/components/schemas/v1.Status" + description: Accepted "401": content: {} description: Unauthorized tags: - - custom_objects + - storagemigration_v1beta1 + x-kubernetes-action: delete + x-kubernetes-group-version-kind: + group: storagemigration.k8s.io + kind: StorageVersionMigration + version: v1beta1 x-codegen-request-body-name: body x-content-type: application/json x-accepts: + - application/cbor - application/json - /apis/{group}/{version}/namespaces/{namespace}/{plural}/{name}/status: + - application/vnd.kubernetes.protobuf + - application/yaml get: - description: read status of the specified namespace scoped custom object - operationId: getNamespacedCustomObjectStatus + description: read the specified StorageVersionMigration + operationId: readStorageVersionMigration parameters: - - description: the custom resource's group - in: path - name: group - required: true - schema: - type: string - - description: the custom resource's version - in: path - name: version - required: true - schema: - type: string - - description: The custom resource's namespace - in: path - name: namespace - required: true - schema: - type: string - - description: the custom resource's plural name. For TPRs this would be lowercase - plural kind. + - description: name of the StorageVersionMigration in: path - name: plural + name: name required: true schema: type: string - - description: the custom object's name - in: path - name: name - required: true + - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ + \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ + \ and wget)." + in: query + name: pretty schema: type: string responses: @@ -102931,57 +108058,47 @@ paths: content: application/json: schema: - type: object + $ref: "#/components/schemas/v1beta1.StorageVersionMigration" application/yaml: schema: - type: object + $ref: "#/components/schemas/v1beta1.StorageVersionMigration" application/vnd.kubernetes.protobuf: schema: - type: object + $ref: "#/components/schemas/v1beta1.StorageVersionMigration" + application/cbor: + schema: + $ref: "#/components/schemas/v1beta1.StorageVersionMigration" description: OK "401": content: {} description: Unauthorized tags: - - custom_objects + - storagemigration_v1beta1 + x-kubernetes-action: get + x-kubernetes-group-version-kind: + group: storagemigration.k8s.io + kind: StorageVersionMigration + version: v1beta1 x-accepts: + - application/cbor - application/json - application/vnd.kubernetes.protobuf - application/yaml patch: - description: partially update status of the specified namespace scoped custom - object - operationId: patchNamespacedCustomObjectStatus + description: partially update the specified StorageVersionMigration + operationId: patchStorageVersionMigration parameters: - - description: the custom resource's group - in: path - name: group - required: true - schema: - type: string - - description: the custom resource's version - in: path - name: version - required: true - schema: - type: string - - description: The custom resource's namespace - in: path - name: namespace - required: true - schema: - type: string - - description: the custom resource's plural name. For TPRs this would be lowercase - plural kind. + - description: name of the StorageVersionMigration in: path - name: plural + name: name required: true schema: type: string - - description: the custom object's name - in: path - name: name - required: true + - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ + \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ + \ and wget)." + in: query + name: pretty schema: type: string - description: "When present, indicates that modifications should not be persisted.\ @@ -103013,8 +108130,7 @@ paths: \ fields. This is the default in v1.23+ - Strict: This will fail the request\ \ with a BadRequest error if any unknown fields would be dropped from the\ \ object, or if any duplicate fields are present. The error returned from\ - \ the server will contain all unknown and duplicate fields encountered.\ - \ (optional)" + \ the server will contain all unknown and duplicate fields encountered." in: query name: fieldValidation schema: @@ -103030,66 +108146,71 @@ paths: content: application/json: schema: - description: The JSON schema of the Resource to patch. - type: object + $ref: "#/components/schemas/v1.Patch" required: true responses: "200": content: application/json: schema: - type: object + $ref: "#/components/schemas/v1beta1.StorageVersionMigration" application/yaml: schema: - type: object + $ref: "#/components/schemas/v1beta1.StorageVersionMigration" application/vnd.kubernetes.protobuf: schema: - type: object + $ref: "#/components/schemas/v1beta1.StorageVersionMigration" + application/cbor: + schema: + $ref: "#/components/schemas/v1beta1.StorageVersionMigration" description: OK + "201": + content: + application/json: + schema: + $ref: "#/components/schemas/v1beta1.StorageVersionMigration" + application/yaml: + schema: + $ref: "#/components/schemas/v1beta1.StorageVersionMigration" + application/vnd.kubernetes.protobuf: + schema: + $ref: "#/components/schemas/v1beta1.StorageVersionMigration" + application/cbor: + schema: + $ref: "#/components/schemas/v1beta1.StorageVersionMigration" + description: Created "401": content: {} description: Unauthorized tags: - - custom_objects + - storagemigration_v1beta1 + x-kubernetes-action: patch + x-kubernetes-group-version-kind: + group: storagemigration.k8s.io + kind: StorageVersionMigration + version: v1beta1 x-codegen-request-body-name: body x-content-type: application/json x-accepts: + - application/cbor - application/json - application/vnd.kubernetes.protobuf - application/yaml put: - description: replace status of the specified namespace scoped custom object - operationId: replaceNamespacedCustomObjectStatus + description: replace the specified StorageVersionMigration + operationId: replaceStorageVersionMigration parameters: - - description: the custom resource's group - in: path - name: group - required: true - schema: - type: string - - description: the custom resource's version - in: path - name: version - required: true - schema: - type: string - - description: The custom resource's namespace - in: path - name: namespace - required: true - schema: - type: string - - description: the custom resource's plural name. For TPRs this would be lowercase - plural kind. + - description: name of the StorageVersionMigration in: path - name: plural + name: name required: true schema: type: string - - description: the custom object's name - in: path - name: name - required: true + - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ + \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ + \ and wget)." + in: query + name: pretty schema: type: string - description: "When present, indicates that modifications should not be persisted.\ @@ -103119,8 +108240,7 @@ paths: \ fields. This is the default in v1.23+ - Strict: This will fail the request\ \ with a BadRequest error if any unknown fields would be dropped from the\ \ object, or if any duplicate fields are present. The error returned from\ - \ the server will contain all unknown and duplicate fields encountered.\ - \ (optional)" + \ the server will contain all unknown and duplicate fields encountered." in: query name: fieldValidation schema: @@ -103129,78 +108249,72 @@ paths: content: application/json: schema: - type: object + $ref: "#/components/schemas/v1beta1.StorageVersionMigration" required: true responses: "200": content: application/json: schema: - type: object + $ref: "#/components/schemas/v1beta1.StorageVersionMigration" application/yaml: schema: - type: object + $ref: "#/components/schemas/v1beta1.StorageVersionMigration" application/vnd.kubernetes.protobuf: schema: - type: object + $ref: "#/components/schemas/v1beta1.StorageVersionMigration" + application/cbor: + schema: + $ref: "#/components/schemas/v1beta1.StorageVersionMigration" description: OK "201": content: application/json: schema: - type: object + $ref: "#/components/schemas/v1beta1.StorageVersionMigration" application/yaml: schema: - type: object + $ref: "#/components/schemas/v1beta1.StorageVersionMigration" application/vnd.kubernetes.protobuf: schema: - type: object + $ref: "#/components/schemas/v1beta1.StorageVersionMigration" + application/cbor: + schema: + $ref: "#/components/schemas/v1beta1.StorageVersionMigration" description: Created "401": content: {} description: Unauthorized tags: - - custom_objects + - storagemigration_v1beta1 + x-kubernetes-action: put + x-kubernetes-group-version-kind: + group: storagemigration.k8s.io + kind: StorageVersionMigration + version: v1beta1 x-codegen-request-body-name: body x-content-type: application/json x-accepts: + - application/cbor - application/json - application/vnd.kubernetes.protobuf - application/yaml - /apis/{group}/{version}/namespaces/{namespace}/{plural}/{name}/scale: + /apis/storagemigration.k8s.io/v1beta1/storageversionmigrations/{name}/status: get: - description: read scale of the specified namespace scoped custom object - operationId: getNamespacedCustomObjectScale + description: read status of the specified StorageVersionMigration + operationId: readStorageVersionMigrationStatus parameters: - - description: the custom resource's group - in: path - name: group - required: true - schema: - type: string - - description: the custom resource's version - in: path - name: version - required: true - schema: - type: string - - description: The custom resource's namespace - in: path - name: namespace - required: true - schema: - type: string - - description: the custom resource's plural name. For TPRs this would be lowercase - plural kind. + - description: name of the StorageVersionMigration in: path - name: plural + name: name required: true schema: type: string - - description: the custom object's name - in: path - name: name - required: true + - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ + \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ + \ and wget)." + in: query + name: pretty schema: type: string responses: @@ -103208,57 +108322,47 @@ paths: content: application/json: schema: - type: object + $ref: "#/components/schemas/v1beta1.StorageVersionMigration" application/yaml: schema: - type: object + $ref: "#/components/schemas/v1beta1.StorageVersionMigration" application/vnd.kubernetes.protobuf: schema: - type: object + $ref: "#/components/schemas/v1beta1.StorageVersionMigration" + application/cbor: + schema: + $ref: "#/components/schemas/v1beta1.StorageVersionMigration" description: OK "401": content: {} description: Unauthorized tags: - - custom_objects + - storagemigration_v1beta1 + x-kubernetes-action: get + x-kubernetes-group-version-kind: + group: storagemigration.k8s.io + kind: StorageVersionMigration + version: v1beta1 x-accepts: + - application/cbor - application/json - application/vnd.kubernetes.protobuf - application/yaml patch: - description: partially update scale of the specified namespace scoped custom - object - operationId: patchNamespacedCustomObjectScale + description: partially update status of the specified StorageVersionMigration + operationId: patchStorageVersionMigrationStatus parameters: - - description: the custom resource's group - in: path - name: group - required: true - schema: - type: string - - description: the custom resource's version - in: path - name: version - required: true - schema: - type: string - - description: The custom resource's namespace - in: path - name: namespace - required: true - schema: - type: string - - description: the custom resource's plural name. For TPRs this would be lowercase - plural kind. + - description: name of the StorageVersionMigration in: path - name: plural + name: name required: true schema: type: string - - description: the custom object's name - in: path - name: name - required: true + - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ + \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ + \ and wget)." + in: query + name: pretty schema: type: string - description: "When present, indicates that modifications should not be persisted.\ @@ -103290,8 +108394,7 @@ paths: \ fields. This is the default in v1.23+ - Strict: This will fail the request\ \ with a BadRequest error if any unknown fields would be dropped from the\ \ object, or if any duplicate fields are present. The error returned from\ - \ the server will contain all unknown and duplicate fields encountered.\ - \ (optional)" + \ the server will contain all unknown and duplicate fields encountered." in: query name: fieldValidation schema: @@ -103307,66 +108410,71 @@ paths: content: application/json: schema: - description: The JSON schema of the Resource to patch. - type: object + $ref: "#/components/schemas/v1.Patch" required: true responses: "200": content: application/json: schema: - type: object + $ref: "#/components/schemas/v1beta1.StorageVersionMigration" application/yaml: schema: - type: object + $ref: "#/components/schemas/v1beta1.StorageVersionMigration" application/vnd.kubernetes.protobuf: schema: - type: object + $ref: "#/components/schemas/v1beta1.StorageVersionMigration" + application/cbor: + schema: + $ref: "#/components/schemas/v1beta1.StorageVersionMigration" description: OK + "201": + content: + application/json: + schema: + $ref: "#/components/schemas/v1beta1.StorageVersionMigration" + application/yaml: + schema: + $ref: "#/components/schemas/v1beta1.StorageVersionMigration" + application/vnd.kubernetes.protobuf: + schema: + $ref: "#/components/schemas/v1beta1.StorageVersionMigration" + application/cbor: + schema: + $ref: "#/components/schemas/v1beta1.StorageVersionMigration" + description: Created "401": content: {} description: Unauthorized tags: - - custom_objects + - storagemigration_v1beta1 + x-kubernetes-action: patch + x-kubernetes-group-version-kind: + group: storagemigration.k8s.io + kind: StorageVersionMigration + version: v1beta1 x-codegen-request-body-name: body x-content-type: application/json x-accepts: + - application/cbor - application/json - application/vnd.kubernetes.protobuf - application/yaml put: - description: replace scale of the specified namespace scoped custom object - operationId: replaceNamespacedCustomObjectScale + description: replace status of the specified StorageVersionMigration + operationId: replaceStorageVersionMigrationStatus parameters: - - description: the custom resource's group - in: path - name: group - required: true - schema: - type: string - - description: the custom resource's version - in: path - name: version - required: true - schema: - type: string - - description: The custom resource's namespace - in: path - name: namespace - required: true - schema: - type: string - - description: the custom resource's plural name. For TPRs this would be lowercase - plural kind. + - description: name of the StorageVersionMigration in: path - name: plural + name: name required: true schema: type: string - - description: the custom object's name - in: path - name: name - required: true + - description: "If 'true', then the output is pretty printed. Defaults to 'false'\ + \ unless the user-agent indicates a browser or command-line HTTP tool (curl\ + \ and wget)." + in: query + name: pretty schema: type: string - description: "When present, indicates that modifications should not be persisted.\ @@ -103396,8 +108504,7 @@ paths: \ fields. This is the default in v1.23+ - Strict: This will fail the request\ \ with a BadRequest error if any unknown fields would be dropped from the\ \ object, or if any duplicate fields are present. The error returned from\ - \ the server will contain all unknown and duplicate fields encountered.\ - \ (optional)" + \ the server will contain all unknown and duplicate fields encountered." in: query name: fieldValidation schema: @@ -103406,7575 +108513,2721 @@ paths: content: application/json: schema: - type: object + $ref: "#/components/schemas/v1beta1.StorageVersionMigration" required: true responses: "200": content: application/json: schema: - type: object + $ref: "#/components/schemas/v1beta1.StorageVersionMigration" application/yaml: schema: - type: object + $ref: "#/components/schemas/v1beta1.StorageVersionMigration" application/vnd.kubernetes.protobuf: schema: - type: object + $ref: "#/components/schemas/v1beta1.StorageVersionMigration" + application/cbor: + schema: + $ref: "#/components/schemas/v1beta1.StorageVersionMigration" description: OK "201": content: application/json: schema: - type: object + $ref: "#/components/schemas/v1beta1.StorageVersionMigration" application/yaml: schema: - type: object + $ref: "#/components/schemas/v1beta1.StorageVersionMigration" application/vnd.kubernetes.protobuf: schema: - type: object + $ref: "#/components/schemas/v1beta1.StorageVersionMigration" + application/cbor: + schema: + $ref: "#/components/schemas/v1beta1.StorageVersionMigration" description: Created "401": content: {} description: Unauthorized tags: - - custom_objects + - storagemigration_v1beta1 + x-kubernetes-action: put + x-kubernetes-group-version-kind: + group: storagemigration.k8s.io + kind: StorageVersionMigration + version: v1beta1 x-codegen-request-body-name: body x-content-type: application/json x-accepts: + - application/cbor - application/json - application/vnd.kubernetes.protobuf - application/yaml - /.well-known/openid-configuration: + /apis/storagemigration.k8s.io/v1beta1/watch/storageversionmigrations: {} + /apis/storagemigration.k8s.io/v1beta1/watch/storageversionmigrations/{name}: {} + /logs/: get: - description: "get service account issuer OpenID configuration, also known as\ - \ the 'OIDC discovery doc'" - operationId: getServiceAccountIssuerOpenIDConfiguration + operationId: logFileListHandler + responses: + "401": + content: {} + description: Unauthorized + tags: + - logs + x-accepts: + - application/json + /logs/{logpath}: + get: + operationId: logFileHandler + parameters: + - description: path to the log + in: path + name: logpath + required: true + schema: + type: string + responses: + "401": + content: {} + description: Unauthorized + tags: + - logs + x-accepts: + - application/json + /version/: + get: + description: get the version information for this server + operationId: getCode responses: "200": content: application/json: schema: - type: string + $ref: "#/components/schemas/version.Info" description: OK "401": content: {} description: Unauthorized tags: - - WellKnown + - version x-accepts: - application/json - /openid/v1/jwks: + /apis/{group}/{version}: get: - description: get service account issuer OpenID JSON Web Key Set (contains public - token verification keys) - operationId: getServiceAccountIssuerOpenIDKeyset + description: get available resources + operationId: getAPIResources + parameters: + - description: The custom resource's group name + in: path + name: group + required: true + schema: + type: string + - description: The custom resource's version + in: path + name: version + required: true + schema: + type: string responses: "200": content: - application/jwk-set+json: + application/json: schema: - type: string + $ref: "#/components/schemas/v1.APIResourceList" description: OK "401": content: {} description: Unauthorized tags: - - openid + - custom_objects x-accepts: - - application/jwk-set+json -components: - schemas: - v1.ApplyConfiguration: - description: ApplyConfiguration defines the desired configuration values of - an object. - example: - expression: expression - properties: - expression: - description: "expression will be evaluated by CEL to create an apply configuration.\ - \ ref: https://github.com/google/cel-spec\n\nApply configurations are\ - \ declared in CEL using object initialization. For example, this CEL expression\ - \ returns an apply configuration to set a single field:\n\n\tObject{\n\ - \t spec: Object.spec{\n\t serviceAccountName: \"example\"\n\t }\n\ - \t}\n\nApply configurations may not modify atomic structs, maps or arrays\ - \ due to the risk of accidental deletion of values not included in the\ - \ apply configuration.\n\nCEL expressions have access to the object types\ - \ needed to create apply configurations:\n\n- 'Object' - CEL type of the\ - \ resource object. - 'Object.' - CEL type of object field (such\ - \ as 'Object.spec') - 'Object.....`\ - \ - CEL type of nested field (such as 'Object.spec.containers')\n\nCEL\ - \ expressions have access to the contents of the API request, organized\ - \ into CEL variables as well as some other useful variables:\n\n- 'object'\ - \ - The object from the incoming request. The value is null for DELETE\ - \ requests. - 'oldObject' - The existing object. The value is null for\ - \ CREATE requests. - 'request' - Attributes of the API request([ref](/pkg/apis/admission/types.go#AdmissionRequest)).\ - \ - 'params' - Parameter resource referred to by the policy binding being\ - \ evaluated. Only populated if the policy has a ParamKind. - 'namespaceObject'\ - \ - The namespace object that the incoming object belongs to. The value\ - \ is null for cluster-scoped resources. - 'variables' - Map of composited\ - \ variables, from its name to its lazily evaluated value.\n For example,\ - \ a variable named 'foo' can be accessed as 'variables.foo'.\n- 'authorizer'\ - \ - A CEL Authorizer. May be used to perform authorization checks for\ - \ the principal (user or service account) of the request.\n See https://pkg.go.dev/k8s.io/apiserver/pkg/cel/library#Authz\n\ - - 'authorizer.requestResource' - A CEL ResourceCheck constructed from\ - \ the 'authorizer' and configured with the\n request resource.\n\nThe\ - \ `apiVersion`, `kind`, `metadata.name` and `metadata.generateName` are\ - \ always accessible from the root of the object. No other metadata properties\ - \ are accessible.\n\nOnly property names of the form `[a-zA-Z_.-/][a-zA-Z0-9_.-/]*`\ - \ are accessible. Required." + - application/json + /apis/{group}/{version}/{resource_plural}: + get: + description: list or watch namespace scoped custom objects + operationId: listCustomObjectForAllNamespaces + parameters: + - description: "If 'true', then the output is pretty printed." + in: query + name: pretty + schema: type: string - type: object - v1.AuditAnnotation: - description: AuditAnnotation describes how to produce an audit annotation for - an API request. - example: - valueExpression: valueExpression - key: key - properties: - key: - description: |- - key specifies the audit annotation key. The audit annotation keys of a ValidatingAdmissionPolicy must be unique. The key must be a qualified name ([A-Za-z0-9][-A-Za-z0-9_.]*) no more than 63 bytes in length. - - The key is combined with the resource name of the ValidatingAdmissionPolicy to construct an audit annotation key: "{ValidatingAdmissionPolicy name}/{key}". - - If an admission webhook uses the same resource name as this ValidatingAdmissionPolicy and the same audit annotation key, the annotation key will be identical. In this case, the first annotation written with the key will be included in the audit event and all subsequent annotations with the same key will be discarded. + - description: The custom resource's group name + in: path + name: group + required: true + schema: + type: string + - description: The custom resource's version + in: path + name: version + required: true + schema: + type: string + - description: The custom resource's plural name. For TPRs this would be lowercase + plural kind. + in: path + name: resource_plural + required: true + schema: + type: string + - description: "allowWatchBookmarks requests watch events with type \"BOOKMARK\"\ + . Servers that do not implement bookmarks may ignore this flag and bookmarks\ + \ are sent at the server's discretion. Clients should not assume bookmarks\ + \ are returned at any specific interval, nor may they assume the server\ + \ will send any BOOKMARK event during a session. If this is not a watch,\ + \ this field is ignored. If the feature gate WatchBookmarks is not enabled\ + \ in apiserver, this field is ignored." + in: query + name: allowWatchBookmarks + schema: + type: boolean + - description: |- + The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". - Required. + This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications. + in: query + name: continue + schema: type: string - valueExpression: - description: |- - valueExpression represents the expression which is evaluated by CEL to produce an audit annotation value. The expression must evaluate to either a string or null value. If the expression evaluates to a string, the audit annotation is included with the string value. If the expression evaluates to null or empty string the audit annotation will be omitted. The valueExpression may be no longer than 5kb in length. If the result of the valueExpression is more than 10kb in length, it will be truncated to 10kb. + - description: A selector to restrict the list of returned objects by their + fields. Defaults to everything. + in: query + name: fieldSelector + schema: + type: string + - description: A selector to restrict the list of returned objects by their + labels. Defaults to everything. + in: query + name: labelSelector + schema: + type: string + - description: |- + limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. - If multiple ValidatingAdmissionPolicyBinding resources match an API request, then the valueExpression will be evaluated for each binding. All unique values produced by the valueExpressions will be joined together in a comma-separated list. + The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned. + in: query + name: limit + schema: + type: integer + - description: "When specified with a watch call, shows changes that occur after\ + \ that particular version of a resource. Defaults to changes from the beginning\ + \ of history. When specified for list: - if unset, then the result is returned\ + \ from remote storage based on quorum-read flag; - if it's 0, then we simply\ + \ return what we currently have in cache, no guarantee; - if set to non\ + \ zero, then the result is at least as fresh as given rv." + in: query + name: resourceVersion + schema: + type: string + - description: |- + resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. - Required. + Defaults to unset + in: query + name: resourceVersionMatch + schema: type: string - required: - - key - - valueExpression - type: object - v1.ExpressionWarning: - description: ExpressionWarning is a warning information that targets a specific - expression. - example: - fieldRef: fieldRef - warning: warning - properties: - fieldRef: - description: "fieldRef is the path to the field that refers to the expression.\ - \ For example, the reference to the expression of the first item of validations\ - \ is \"spec.validations[0].expression\"" + - description: "Timeout for the list/watch call. This limits the duration of\ + \ the call, regardless of any activity or inactivity." + in: query + name: timeoutSeconds + schema: + type: integer + - description: "Watch for changes to the described resources and return them\ + \ as a stream of add, update, and remove notifications." + in: query + name: watch + schema: + type: boolean + responses: + "200": + content: + application/json: + schema: + type: object + application/json;stream=watch: + schema: + type: object + description: OK + "401": + content: {} + description: Unauthorized + tags: + - custom_objects + x-accepts: + - application/json + - application/json;stream=watch + /apis/{group}/{version}/{plural}: + delete: + description: Delete collection of cluster scoped custom objects + operationId: deleteCollectionClusterCustomObject + parameters: + - description: "If 'true', then the output is pretty printed." + in: query + name: pretty + schema: type: string - warning: - description: "warning contains the content of type checking information\ - \ in a human-readable form. Each line of the warning contains the type\ - \ that the expression is checked against, followed by the type check error\ - \ from the compiler." + - description: The custom resource's group name + in: path + name: group + required: true + schema: type: string - required: - - fieldRef - - warning - type: object - v1.JSONPatch: - description: JSONPatch defines a JSON Patch. - example: - expression: expression - properties: - expression: - description: "expression will be evaluated by CEL to create a [JSON patch](https://jsonpatch.com/).\ - \ ref: https://github.com/google/cel-spec\n\nexpression must return an\ - \ array of JSONPatch values.\n\nFor example, this CEL expression returns\ - \ a JSON patch to conditionally modify a value:\n\n\t [\n\t JSONPatch{op:\ - \ \"test\", path: \"/spec/example\", value: \"Red\"},\n\t JSONPatch{op:\ - \ \"replace\", path: \"/spec/example\", value: \"Green\"}\n\t ]\n\nTo\ - \ define an object for the patch value, use Object types. For example:\n\ - \n\t [\n\t JSONPatch{\n\t op: \"add\",\n\t path: \"/spec/selector\"\ - ,\n\t value: Object.spec.selector{matchLabels: {\"environment\":\ - \ \"test\"}}\n\t }\n\t ]\n\nTo use strings containing '/' and '~'\ - \ as JSONPatch path keys, use \"jsonpatch.escapeKey\". For example:\n\n\ - \t [\n\t JSONPatch{\n\t op: \"add\",\n\t path: \"/metadata/labels/\"\ - \ + jsonpatch.escapeKey(\"example.com/environment\"),\n\t value:\ - \ \"test\"\n\t },\n\t ]\n\nCEL expressions have access to the types\ - \ needed to create JSON patches and objects:\n\n- 'JSONPatch' - CEL type\ - \ of JSON Patch operations. JSONPatch has the fields 'op', 'from', 'path'\ - \ and 'value'.\n See [JSON patch](https://jsonpatch.com/) for more details.\ - \ The 'value' field may be set to any of: string,\n integer, array, map\ - \ or object. If set, the 'path' and 'from' fields must be set to a\n\ - \ [JSON pointer](https://datatracker.ietf.org/doc/html/rfc6901/) string,\ - \ where the 'jsonpatch.escapeKey()' CEL\n function may be used to escape\ - \ path keys containing '/' and '~'.\n- 'Object' - CEL type of the resource\ - \ object. - 'Object.' - CEL type of object field (such as 'Object.spec')\ - \ - 'Object.....` - CEL type of nested\ - \ field (such as 'Object.spec.containers')\n\nCEL expressions have access\ - \ to the contents of the API request, organized into CEL variables as\ - \ well as some other useful variables:\n\n- 'object' - The object from\ - \ the incoming request. The value is null for DELETE requests. - 'oldObject'\ - \ - The existing object. The value is null for CREATE requests. - 'request'\ - \ - Attributes of the API request([ref](/pkg/apis/admission/types.go#AdmissionRequest)).\ - \ - 'params' - Parameter resource referred to by the policy binding being\ - \ evaluated. Only populated if the policy has a ParamKind. - 'namespaceObject'\ - \ - The namespace object that the incoming object belongs to. The value\ - \ is null for cluster-scoped resources. - 'variables' - Map of composited\ - \ variables, from its name to its lazily evaluated value.\n For example,\ - \ a variable named 'foo' can be accessed as 'variables.foo'.\n- 'authorizer'\ - \ - A CEL Authorizer. May be used to perform authorization checks for\ - \ the principal (user or service account) of the request.\n See https://pkg.go.dev/k8s.io/apiserver/pkg/cel/library#Authz\n\ - - 'authorizer.requestResource' - A CEL ResourceCheck constructed from\ - \ the 'authorizer' and configured with the\n request resource.\n\nCEL\ - \ expressions have access to [Kubernetes CEL function libraries](https://kubernetes.io/docs/reference/using-api/cel/#cel-options-language-features-and-libraries)\ - \ as well as:\n\n- 'jsonpatch.escapeKey' - Performs JSONPatch key escaping.\ - \ '~' and '/' are escaped as '~0' and `~1' respectively).\n\nOnly property\ - \ names of the form `[a-zA-Z_.-/][a-zA-Z0-9_.-/]*` are accessible. Required." + - description: The custom resource's version + in: path + name: version + required: true + schema: type: string - type: object - v1.MatchCondition: - description: MatchCondition represents a condition which must by fulfilled for - a request to be sent to a webhook. - example: - expression: expression - name: name - properties: - expression: - description: |- - expression represents the expression which will be evaluated by CEL. Must evaluate to bool. CEL expressions have access to the contents of the AdmissionRequest and Authorizer, organized into CEL variables: + - description: The custom resource's plural name. For TPRs this would be lowercase + plural kind. + in: path + name: plural + required: true + schema: + type: string + - description: A selector to restrict the list of returned objects by their + labels. Defaults to everything. + in: query + name: labelSelector + schema: + type: string + - description: "The duration in seconds before the object should be deleted.\ + \ Value must be non-negative integer. The value zero indicates delete immediately.\ + \ If this value is nil, the default grace period for the specified type\ + \ will be used. Defaults to a per object value if not specified. zero means\ + \ delete immediately." + in: query + name: gracePeriodSeconds + schema: + type: integer + - description: "Deprecated: please use the PropagationPolicy, this field will\ + \ be deprecated in 1.7. Should the dependent objects be orphaned. If true/false,\ + \ the \"orphan\" finalizer will be added to/removed from the object's finalizers\ + \ list. Either this field or PropagationPolicy may be set, but not both." + in: query + name: orphanDependents + schema: + type: boolean + - description: "Whether and how garbage collection will be performed. Either\ + \ this field or OrphanDependents may be set, but not both. The default policy\ + \ is decided by the existing finalizer set in the metadata.finalizers and\ + \ the resource-specific default policy." + in: query + name: propagationPolicy + schema: + type: string + - description: "When present, indicates that modifications should not be persisted.\ + \ An invalid or unrecognized dryRun directive will result in an error response\ + \ and no further processing of the request. Valid values are: - All: all\ + \ dry run stages will be processed" + in: query + name: dryRun + schema: + type: string + requestBody: + content: + application/json: + schema: + $ref: "#/components/schemas/v1.DeleteOptions" + required: false + responses: + "200": + content: + application/json: + schema: + type: object + description: OK + "401": + content: {} + description: Unauthorized + tags: + - custom_objects + x-codegen-request-body-name: body + x-content-type: application/json + x-accepts: + - application/json + get: + description: list or watch cluster scoped custom objects + operationId: listClusterCustomObject + parameters: + - description: "If 'true', then the output is pretty printed." + in: query + name: pretty + schema: + type: string + - description: The custom resource's group name + in: path + name: group + required: true + schema: + type: string + - description: The custom resource's version + in: path + name: version + required: true + schema: + type: string + - description: The custom resource's plural name. For TPRs this would be lowercase + plural kind. + in: path + name: plural + required: true + schema: + type: string + - description: "allowWatchBookmarks requests watch events with type \"BOOKMARK\"\ + . Servers that do not implement bookmarks may ignore this flag and bookmarks\ + \ are sent at the server's discretion. Clients should not assume bookmarks\ + \ are returned at any specific interval, nor may they assume the server\ + \ will send any BOOKMARK event during a session. If this is not a watch,\ + \ this field is ignored. If the feature gate WatchBookmarks is not enabled\ + \ in apiserver, this field is ignored." + in: query + name: allowWatchBookmarks + schema: + type: boolean + - description: |- + The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". - 'object' - The object from the incoming request. The value is null for DELETE requests. 'oldObject' - The existing object. The value is null for CREATE requests. 'request' - Attributes of the admission request(/pkg/apis/admission/types.go#AdmissionRequest). 'authorizer' - A CEL Authorizer. May be used to perform authorization checks for the principal (user or service account) of the request. - See https://pkg.go.dev/k8s.io/apiserver/pkg/cel/library#Authz - 'authorizer.requestResource' - A CEL ResourceCheck constructed from the 'authorizer' and configured with the - request resource. - Documentation on CEL: https://kubernetes.io/docs/reference/using-api/cel/ + This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications. + in: query + name: continue + schema: + type: string + - description: A selector to restrict the list of returned objects by their + fields. Defaults to everything. + in: query + name: fieldSelector + schema: + type: string + - description: A selector to restrict the list of returned objects by their + labels. Defaults to everything. + in: query + name: labelSelector + schema: + type: string + - description: |- + limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. - Required. + The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned. + in: query + name: limit + schema: + type: integer + - description: "When specified with a watch call, shows changes that occur after\ + \ that particular version of a resource. Defaults to changes from the beginning\ + \ of history. When specified for list: - if unset, then the result is returned\ + \ from remote storage based on quorum-read flag; - if it's 0, then we simply\ + \ return what we currently have in cache, no guarantee; - if set to non\ + \ zero, then the result is at least as fresh as given rv." + in: query + name: resourceVersion + schema: type: string - name: - description: |- - name is an identifier for this match condition, used for strategic merging of MatchConditions, as well as providing an identifier for logging purposes. A good name should be descriptive of the associated expression. Name must be a qualified name consisting of alphanumeric characters, '-', '_' or '.', and must start and end with an alphanumeric character (e.g. 'MyName', or 'my.name', or '123-abc', regex used for validation is '([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9]') with an optional DNS subdomain prefix and '/' (e.g. 'example.com/MyName') + - description: |- + resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. - Required. + Defaults to unset + in: query + name: resourceVersionMatch + schema: type: string - required: - - expression - - name - type: object - v1.MatchResources: - description: "MatchResources decides whether to run the admission control policy\ - \ on an object based on whether it meets the match criteria. The exclude rules\ - \ take precedence over include rules (if a resource matches both, it is excluded)" - example: - matchPolicy: matchPolicy - resourceRules: - - resourceNames: - - resourceNames - - resourceNames - operations: - - operations - - operations - apiVersions: - - apiVersions - - apiVersions - scope: scope - resources: - - resources - - resources - apiGroups: - - apiGroups - - apiGroups - - resourceNames: - - resourceNames - - resourceNames - operations: - - operations - - operations - apiVersions: - - apiVersions - - apiVersions - scope: scope - resources: - - resources - - resources - apiGroups: - - apiGroups - - apiGroups - excludeResourceRules: - - resourceNames: - - resourceNames - - resourceNames - operations: - - operations - - operations - apiVersions: - - apiVersions - - apiVersions - scope: scope - resources: - - resources - - resources - apiGroups: - - apiGroups - - apiGroups - - resourceNames: - - resourceNames - - resourceNames - operations: - - operations - - operations - apiVersions: - - apiVersions - - apiVersions - scope: scope - resources: - - resources - - resources - apiGroups: - - apiGroups - - apiGroups - namespaceSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - objectSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - properties: - excludeResourceRules: - description: "excludeResourceRules describes what operations on what resources/subresources\ - \ the ValidatingAdmissionPolicy should not care about. The exclude rules\ - \ take precedence over include rules (if a resource matches both, it is\ - \ excluded)" - items: - $ref: "#/components/schemas/v1.NamedRuleWithOperations" - type: array - x-kubernetes-list-type: atomic - matchPolicy: - description: |- - matchPolicy defines how the "MatchResources" list is used to match incoming requests. Allowed values are "Exact" or "Equivalent". + - description: "Timeout for the list/watch call. This limits the duration of\ + \ the call, regardless of any activity or inactivity." + in: query + name: timeoutSeconds + schema: + type: integer + - description: "Watch for changes to the described resources and return them\ + \ as a stream of add, update, and remove notifications." + in: query + name: watch + schema: + type: boolean + responses: + "200": + content: + application/json: + schema: + type: object + application/json;stream=watch: + schema: + type: object + description: OK + "401": + content: {} + description: Unauthorized + tags: + - custom_objects + x-accepts: + - application/json + - application/json;stream=watch + post: + description: Creates a cluster scoped Custom object + operationId: createClusterCustomObject + parameters: + - description: "If 'true', then the output is pretty printed." + in: query + name: pretty + schema: + type: string + - description: The custom resource's group name + in: path + name: group + required: true + schema: + type: string + - description: The custom resource's version + in: path + name: version + required: true + schema: + type: string + - description: The custom resource's plural name. For TPRs this would be lowercase + plural kind. + in: path + name: plural + required: true + schema: + type: string + - description: "When present, indicates that modifications should not be persisted.\ + \ An invalid or unrecognized dryRun directive will result in an error response\ + \ and no further processing of the request. Valid values are: - All: all\ + \ dry run stages will be processed" + in: query + name: dryRun + schema: + type: string + - description: "fieldManager is a name associated with the actor or entity that\ + \ is making these changes. The value must be less than or 128 characters\ + \ long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.\ + \ This field is required for apply requests (application/apply-patch) but\ + \ optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch)." + in: query + name: fieldManager + schema: + type: string + - description: "fieldValidation instructs the server on how to handle objects\ + \ in the request (POST/PUT/PATCH) containing unknown or duplicate fields.\ + \ Valid values are: - Ignore: This will ignore any unknown fields that are\ + \ silently dropped from the object, and will ignore all but the last duplicate\ + \ field that the decoder encounters. This is the default behavior prior\ + \ to v1.23. - Warn: This will send a warning via the standard warning response\ + \ header for each unknown field that is dropped from the object, and for\ + \ each duplicate field that is encountered. The request will still succeed\ + \ if there are no other errors, and will only persist the last of any duplicate\ + \ fields. This is the default in v1.23+ - Strict: This will fail the request\ + \ with a BadRequest error if any unknown fields would be dropped from the\ + \ object, or if any duplicate fields are present. The error returned from\ + \ the server will contain all unknown and duplicate fields encountered.\ + \ (optional)" + in: query + name: fieldValidation + schema: + type: string + requestBody: + content: + application/json: + schema: + type: object + description: The JSON schema of the Resource to create. + required: true + responses: + "201": + content: + application/json: + schema: + type: object + description: Created + "401": + content: {} + description: Unauthorized + tags: + - custom_objects + x-codegen-request-body-name: body + x-content-type: application/json + x-accepts: + - application/json + /apis/{group}/{version}/namespaces/{namespace}/{plural}: + delete: + description: Delete collection of namespace scoped custom objects + operationId: deleteCollectionNamespacedCustomObject + parameters: + - description: "If 'true', then the output is pretty printed." + in: query + name: pretty + schema: + type: string + - description: The custom resource's group name + in: path + name: group + required: true + schema: + type: string + - description: The custom resource's version + in: path + name: version + required: true + schema: + type: string + - description: The custom resource's namespace + in: path + name: namespace + required: true + schema: + type: string + - description: The custom resource's plural name. For TPRs this would be lowercase + plural kind. + in: path + name: plural + required: true + schema: + type: string + - description: A selector to restrict the list of returned objects by their + labels. Defaults to everything. + in: query + name: labelSelector + schema: + type: string + - description: "The duration in seconds before the object should be deleted.\ + \ Value must be non-negative integer. The value zero indicates delete immediately.\ + \ If this value is nil, the default grace period for the specified type\ + \ will be used. Defaults to a per object value if not specified. zero means\ + \ delete immediately." + in: query + name: gracePeriodSeconds + schema: + type: integer + - description: "Deprecated: please use the PropagationPolicy, this field will\ + \ be deprecated in 1.7. Should the dependent objects be orphaned. If true/false,\ + \ the \"orphan\" finalizer will be added to/removed from the object's finalizers\ + \ list. Either this field or PropagationPolicy may be set, but not both." + in: query + name: orphanDependents + schema: + type: boolean + - description: "Whether and how garbage collection will be performed. Either\ + \ this field or OrphanDependents may be set, but not both. The default policy\ + \ is decided by the existing finalizer set in the metadata.finalizers and\ + \ the resource-specific default policy." + in: query + name: propagationPolicy + schema: + type: string + - description: "When present, indicates that modifications should not be persisted.\ + \ An invalid or unrecognized dryRun directive will result in an error response\ + \ and no further processing of the request. Valid values are: - All: all\ + \ dry run stages will be processed" + in: query + name: dryRun + schema: + type: string + - description: A selector to restrict the list of returned objects by their + fields. Defaults to everything. + in: query + name: fieldSelector + schema: + type: string + requestBody: + content: + application/json: + schema: + $ref: "#/components/schemas/v1.DeleteOptions" + required: false + responses: + "200": + content: + application/json: + schema: + type: object + description: OK + "401": + content: {} + description: Unauthorized + tags: + - custom_objects + x-codegen-request-body-name: body + x-content-type: application/json + x-accepts: + - application/json + get: + description: list or watch namespace scoped custom objects + operationId: listNamespacedCustomObject + parameters: + - description: "If 'true', then the output is pretty printed." + in: query + name: pretty + schema: + type: string + - description: The custom resource's group name + in: path + name: group + required: true + schema: + type: string + - description: The custom resource's version + in: path + name: version + required: true + schema: + type: string + - description: The custom resource's namespace + in: path + name: namespace + required: true + schema: + type: string + - description: The custom resource's plural name. For TPRs this would be lowercase + plural kind. + in: path + name: plural + required: true + schema: + type: string + - description: "allowWatchBookmarks requests watch events with type \"BOOKMARK\"\ + . Servers that do not implement bookmarks may ignore this flag and bookmarks\ + \ are sent at the server's discretion. Clients should not assume bookmarks\ + \ are returned at any specific interval, nor may they assume the server\ + \ will send any BOOKMARK event during a session. If this is not a watch,\ + \ this field is ignored. If the feature gate WatchBookmarks is not enabled\ + \ in apiserver, this field is ignored." + in: query + name: allowWatchBookmarks + schema: + type: boolean + - description: |- + The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". - - Exact: match a request only if it exactly matches a specified rule. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, but "rules" only included `apiGroups:["apps"], apiVersions:["v1"], resources: ["deployments"]`, a request to apps/v1beta1 or extensions/v1beta1 would not be sent to the ValidatingAdmissionPolicy. + This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications. + in: query + name: continue + schema: + type: string + - description: A selector to restrict the list of returned objects by their + fields. Defaults to everything. + in: query + name: fieldSelector + schema: + type: string + - description: A selector to restrict the list of returned objects by their + labels. Defaults to everything. + in: query + name: labelSelector + schema: + type: string + - description: |- + limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. - - Equivalent: match a request if modifies a resource listed in rules, even via another API group or version. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, and "rules" only included `apiGroups:["apps"], apiVersions:["v1"], resources: ["deployments"]`, a request to apps/v1beta1 or extensions/v1beta1 would be converted to apps/v1 and sent to the ValidatingAdmissionPolicy. + The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned. + in: query + name: limit + schema: + type: integer + - description: "When specified with a watch call, shows changes that occur after\ + \ that particular version of a resource. Defaults to changes from the beginning\ + \ of history. When specified for list: - if unset, then the result is returned\ + \ from remote storage based on quorum-read flag; - if it's 0, then we simply\ + \ return what we currently have in cache, no guarantee; - if set to non\ + \ zero, then the result is at least as fresh as given rv." + in: query + name: resourceVersion + schema: + type: string + - description: |- + resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. - Defaults to "Equivalent" + Defaults to unset + in: query + name: resourceVersionMatch + schema: type: string - namespaceSelector: - $ref: "#/components/schemas/v1.LabelSelector" - objectSelector: - $ref: "#/components/schemas/v1.LabelSelector" - resourceRules: - description: resourceRules describes what operations on what resources/subresources - the ValidatingAdmissionPolicy matches. The policy cares about an operation - if it matches _any_ Rule. - items: - $ref: "#/components/schemas/v1.NamedRuleWithOperations" - type: array - x-kubernetes-list-type: atomic - type: object - x-kubernetes-map-type: atomic - v1.MutatingAdmissionPolicy: - description: MutatingAdmissionPolicy describes the definition of an admission - mutation policy that mutates the object coming into admission chain. - example: - metadata: - generation: 6 - finalizers: - - finalizers - - finalizers - resourceVersion: resourceVersion - annotations: - key: annotations - generateName: generateName - deletionTimestamp: 2000-01-23T04:56:07.000+00:00 - labels: - key: labels - ownerReferences: - - uid: uid - controller: true - apiVersion: apiVersion - kind: kind - name: name - blockOwnerDeletion: true - - uid: uid - controller: true - apiVersion: apiVersion - kind: kind - name: name - blockOwnerDeletion: true - selfLink: selfLink - deletionGracePeriodSeconds: 0 - uid: uid - managedFields: - - apiVersion: apiVersion - fieldsV1: "{}" - manager: manager - subresource: subresource - time: 2000-01-23T04:56:07.000+00:00 - operation: operation - fieldsType: fieldsType - - apiVersion: apiVersion - fieldsV1: "{}" - manager: manager - subresource: subresource - time: 2000-01-23T04:56:07.000+00:00 - operation: operation - fieldsType: fieldsType - creationTimestamp: 2000-01-23T04:56:07.000+00:00 - name: name - namespace: namespace - apiVersion: apiVersion - kind: kind - spec: - reinvocationPolicy: reinvocationPolicy - variables: - - expression: expression - name: name - - expression: expression - name: name - mutations: - - patchType: patchType - applyConfiguration: - expression: expression - jsonPatch: - expression: expression - - patchType: patchType - applyConfiguration: - expression: expression - jsonPatch: - expression: expression - paramKind: - apiVersion: apiVersion - kind: kind - matchConditions: - - expression: expression - name: name - - expression: expression - name: name - matchConstraints: - matchPolicy: matchPolicy - resourceRules: - - resourceNames: - - resourceNames - - resourceNames - operations: - - operations - - operations - apiVersions: - - apiVersions - - apiVersions - scope: scope - resources: - - resources - - resources - apiGroups: - - apiGroups - - apiGroups - - resourceNames: - - resourceNames - - resourceNames - operations: - - operations - - operations - apiVersions: - - apiVersions - - apiVersions - scope: scope - resources: - - resources - - resources - apiGroups: - - apiGroups - - apiGroups - excludeResourceRules: - - resourceNames: - - resourceNames - - resourceNames - operations: - - operations - - operations - apiVersions: - - apiVersions - - apiVersions - scope: scope - resources: - - resources - - resources - apiGroups: - - apiGroups - - apiGroups - - resourceNames: - - resourceNames - - resourceNames - operations: - - operations - - operations - apiVersions: - - apiVersions - - apiVersions - scope: scope - resources: - - resources - - resources - apiGroups: - - apiGroups - - apiGroups - namespaceSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - objectSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - failurePolicy: failurePolicy - properties: - apiVersion: - description: "APIVersion defines the versioned schema of this representation\ - \ of an object. Servers should convert recognized schemas to the latest\ - \ internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources" + - description: "Timeout for the list/watch call. This limits the duration of\ + \ the call, regardless of any activity or inactivity." + in: query + name: timeoutSeconds + schema: + type: integer + - description: "Watch for changes to the described resources and return them\ + \ as a stream of add, update, and remove notifications." + in: query + name: watch + schema: + type: boolean + responses: + "200": + content: + application/json: + schema: + type: object + application/json;stream=watch: + schema: + type: object + description: OK + "401": + content: {} + description: Unauthorized + tags: + - custom_objects + x-accepts: + - application/json + - application/json;stream=watch + post: + description: Creates a namespace scoped Custom object + operationId: createNamespacedCustomObject + parameters: + - description: "If 'true', then the output is pretty printed." + in: query + name: pretty + schema: type: string - kind: - description: "Kind is a string value representing the REST resource this\ - \ object represents. Servers may infer this from the endpoint the client\ - \ submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds" + - description: The custom resource's group name + in: path + name: group + required: true + schema: type: string - metadata: - $ref: "#/components/schemas/v1.ObjectMeta" - spec: - $ref: "#/components/schemas/v1.MutatingAdmissionPolicySpec" - type: object - x-kubernetes-group-version-kind: - - group: admissionregistration.k8s.io - kind: MutatingAdmissionPolicy - version: v1 - x-implements: - - io.kubernetes.client.common.KubernetesObject - v1.MutatingAdmissionPolicyBinding: - description: |- - MutatingAdmissionPolicyBinding binds the MutatingAdmissionPolicy with parametrized resources. MutatingAdmissionPolicyBinding and the optional parameter resource together define how cluster administrators configure policies for clusters. - - For a given admission request, each binding will cause its policy to be evaluated N times, where N is 1 for policies/bindings that don't use params, otherwise N is the number of parameters selected by the binding. Each evaluation is constrained by a [runtime cost budget](https://kubernetes.io/docs/reference/using-api/cel/#runtime-cost-budget). - - Adding/removing policies, bindings, or params can not affect whether a given (policy, binding, param) combination is within its own CEL budget. - example: - metadata: - generation: 6 - finalizers: - - finalizers - - finalizers - resourceVersion: resourceVersion - annotations: - key: annotations - generateName: generateName - deletionTimestamp: 2000-01-23T04:56:07.000+00:00 - labels: - key: labels - ownerReferences: - - uid: uid - controller: true - apiVersion: apiVersion - kind: kind - name: name - blockOwnerDeletion: true - - uid: uid - controller: true - apiVersion: apiVersion - kind: kind - name: name - blockOwnerDeletion: true - selfLink: selfLink - deletionGracePeriodSeconds: 0 - uid: uid - managedFields: - - apiVersion: apiVersion - fieldsV1: "{}" - manager: manager - subresource: subresource - time: 2000-01-23T04:56:07.000+00:00 - operation: operation - fieldsType: fieldsType - - apiVersion: apiVersion - fieldsV1: "{}" - manager: manager - subresource: subresource - time: 2000-01-23T04:56:07.000+00:00 - operation: operation - fieldsType: fieldsType - creationTimestamp: 2000-01-23T04:56:07.000+00:00 - name: name - namespace: namespace - apiVersion: apiVersion - kind: kind - spec: - paramRef: - name: name - namespace: namespace - selector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - parameterNotFoundAction: parameterNotFoundAction - policyName: policyName - matchResources: - matchPolicy: matchPolicy - resourceRules: - - resourceNames: - - resourceNames - - resourceNames - operations: - - operations - - operations - apiVersions: - - apiVersions - - apiVersions - scope: scope - resources: - - resources - - resources - apiGroups: - - apiGroups - - apiGroups - - resourceNames: - - resourceNames - - resourceNames - operations: - - operations - - operations - apiVersions: - - apiVersions - - apiVersions - scope: scope - resources: - - resources - - resources - apiGroups: - - apiGroups - - apiGroups - excludeResourceRules: - - resourceNames: - - resourceNames - - resourceNames - operations: - - operations - - operations - apiVersions: - - apiVersions - - apiVersions - scope: scope - resources: - - resources - - resources - apiGroups: - - apiGroups - - apiGroups - - resourceNames: - - resourceNames - - resourceNames - operations: - - operations - - operations - apiVersions: - - apiVersions - - apiVersions - scope: scope - resources: - - resources - - resources - apiGroups: - - apiGroups - - apiGroups - namespaceSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - objectSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - properties: - apiVersion: - description: "APIVersion defines the versioned schema of this representation\ - \ of an object. Servers should convert recognized schemas to the latest\ - \ internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources" + - description: The custom resource's version + in: path + name: version + required: true + schema: type: string - kind: - description: "Kind is a string value representing the REST resource this\ - \ object represents. Servers may infer this from the endpoint the client\ - \ submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds" + - description: The custom resource's namespace + in: path + name: namespace + required: true + schema: type: string - metadata: - $ref: "#/components/schemas/v1.ObjectMeta" - spec: - $ref: "#/components/schemas/v1.MutatingAdmissionPolicyBindingSpec" - type: object - x-kubernetes-group-version-kind: - - group: admissionregistration.k8s.io - kind: MutatingAdmissionPolicyBinding - version: v1 - x-implements: - - io.kubernetes.client.common.KubernetesObject - v1.MutatingAdmissionPolicyBindingList: - description: MutatingAdmissionPolicyBindingList is a list of MutatingAdmissionPolicyBinding. - example: - metadata: - remainingItemCount: 1 - continue: continue - resourceVersion: resourceVersion - shardInfo: - selector: selector - selfLink: selfLink - apiVersion: apiVersion - kind: kind - items: - - metadata: - generation: 6 - finalizers: - - finalizers - - finalizers - resourceVersion: resourceVersion - annotations: - key: annotations - generateName: generateName - deletionTimestamp: 2000-01-23T04:56:07.000+00:00 - labels: - key: labels - ownerReferences: - - uid: uid - controller: true - apiVersion: apiVersion - kind: kind - name: name - blockOwnerDeletion: true - - uid: uid - controller: true - apiVersion: apiVersion - kind: kind - name: name - blockOwnerDeletion: true - selfLink: selfLink - deletionGracePeriodSeconds: 0 - uid: uid - managedFields: - - apiVersion: apiVersion - fieldsV1: "{}" - manager: manager - subresource: subresource - time: 2000-01-23T04:56:07.000+00:00 - operation: operation - fieldsType: fieldsType - - apiVersion: apiVersion - fieldsV1: "{}" - manager: manager - subresource: subresource - time: 2000-01-23T04:56:07.000+00:00 - operation: operation - fieldsType: fieldsType - creationTimestamp: 2000-01-23T04:56:07.000+00:00 - name: name - namespace: namespace - apiVersion: apiVersion - kind: kind - spec: - paramRef: - name: name - namespace: namespace - selector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - parameterNotFoundAction: parameterNotFoundAction - policyName: policyName - matchResources: - matchPolicy: matchPolicy - resourceRules: - - resourceNames: - - resourceNames - - resourceNames - operations: - - operations - - operations - apiVersions: - - apiVersions - - apiVersions - scope: scope - resources: - - resources - - resources - apiGroups: - - apiGroups - - apiGroups - - resourceNames: - - resourceNames - - resourceNames - operations: - - operations - - operations - apiVersions: - - apiVersions - - apiVersions - scope: scope - resources: - - resources - - resources - apiGroups: - - apiGroups - - apiGroups - excludeResourceRules: - - resourceNames: - - resourceNames - - resourceNames - operations: - - operations - - operations - apiVersions: - - apiVersions - - apiVersions - scope: scope - resources: - - resources - - resources - apiGroups: - - apiGroups - - apiGroups - - resourceNames: - - resourceNames - - resourceNames - operations: - - operations - - operations - apiVersions: - - apiVersions - - apiVersions - scope: scope - resources: - - resources - - resources - apiGroups: - - apiGroups - - apiGroups - namespaceSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - objectSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - - metadata: - generation: 6 - finalizers: - - finalizers - - finalizers - resourceVersion: resourceVersion - annotations: - key: annotations - generateName: generateName - deletionTimestamp: 2000-01-23T04:56:07.000+00:00 - labels: - key: labels - ownerReferences: - - uid: uid - controller: true - apiVersion: apiVersion - kind: kind - name: name - blockOwnerDeletion: true - - uid: uid - controller: true - apiVersion: apiVersion - kind: kind - name: name - blockOwnerDeletion: true - selfLink: selfLink - deletionGracePeriodSeconds: 0 - uid: uid - managedFields: - - apiVersion: apiVersion - fieldsV1: "{}" - manager: manager - subresource: subresource - time: 2000-01-23T04:56:07.000+00:00 - operation: operation - fieldsType: fieldsType - - apiVersion: apiVersion - fieldsV1: "{}" - manager: manager - subresource: subresource - time: 2000-01-23T04:56:07.000+00:00 - operation: operation - fieldsType: fieldsType - creationTimestamp: 2000-01-23T04:56:07.000+00:00 - name: name - namespace: namespace - apiVersion: apiVersion - kind: kind - spec: - paramRef: - name: name - namespace: namespace - selector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - parameterNotFoundAction: parameterNotFoundAction - policyName: policyName - matchResources: - matchPolicy: matchPolicy - resourceRules: - - resourceNames: - - resourceNames - - resourceNames - operations: - - operations - - operations - apiVersions: - - apiVersions - - apiVersions - scope: scope - resources: - - resources - - resources - apiGroups: - - apiGroups - - apiGroups - - resourceNames: - - resourceNames - - resourceNames - operations: - - operations - - operations - apiVersions: - - apiVersions - - apiVersions - scope: scope - resources: - - resources - - resources - apiGroups: - - apiGroups - - apiGroups - excludeResourceRules: - - resourceNames: - - resourceNames - - resourceNames - operations: - - operations - - operations - apiVersions: - - apiVersions - - apiVersions - scope: scope - resources: - - resources - - resources - apiGroups: - - apiGroups - - apiGroups - - resourceNames: - - resourceNames - - resourceNames - operations: - - operations - - operations - apiVersions: - - apiVersions - - apiVersions - scope: scope - resources: - - resources - - resources - apiGroups: - - apiGroups - - apiGroups - namespaceSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - objectSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - properties: - apiVersion: - description: "APIVersion defines the versioned schema of this representation\ - \ of an object. Servers should convert recognized schemas to the latest\ - \ internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources" + - description: The custom resource's plural name. For TPRs this would be lowercase + plural kind. + in: path + name: plural + required: true + schema: type: string - items: - description: List of PolicyBinding. - items: - $ref: "#/components/schemas/v1.MutatingAdmissionPolicyBinding" - type: array - kind: - description: "Kind is a string value representing the REST resource this\ - \ object represents. Servers may infer this from the endpoint the client\ - \ submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds" + - description: "When present, indicates that modifications should not be persisted.\ + \ An invalid or unrecognized dryRun directive will result in an error response\ + \ and no further processing of the request. Valid values are: - All: all\ + \ dry run stages will be processed" + in: query + name: dryRun + schema: type: string - metadata: - $ref: "#/components/schemas/v1.ListMeta" - required: - - items - type: object - x-kubernetes-group-version-kind: - - group: admissionregistration.k8s.io - kind: MutatingAdmissionPolicyBindingList - version: v1 - x-implements: - - io.kubernetes.client.common.KubernetesListObject - v1.MutatingAdmissionPolicyBindingSpec: - description: MutatingAdmissionPolicyBindingSpec defines the specification of - the MutatingAdmissionPolicyBinding. - example: - paramRef: - name: name - namespace: namespace - selector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - parameterNotFoundAction: parameterNotFoundAction - policyName: policyName - matchResources: - matchPolicy: matchPolicy - resourceRules: - - resourceNames: - - resourceNames - - resourceNames - operations: - - operations - - operations - apiVersions: - - apiVersions - - apiVersions - scope: scope - resources: - - resources - - resources - apiGroups: - - apiGroups - - apiGroups - - resourceNames: - - resourceNames - - resourceNames - operations: - - operations - - operations - apiVersions: - - apiVersions - - apiVersions - scope: scope - resources: - - resources - - resources - apiGroups: - - apiGroups - - apiGroups - excludeResourceRules: - - resourceNames: - - resourceNames - - resourceNames - operations: - - operations - - operations - apiVersions: - - apiVersions - - apiVersions - scope: scope - resources: - - resources - - resources - apiGroups: - - apiGroups - - apiGroups - - resourceNames: - - resourceNames - - resourceNames - operations: - - operations - - operations - apiVersions: - - apiVersions - - apiVersions - scope: scope - resources: - - resources - - resources - apiGroups: - - apiGroups - - apiGroups - namespaceSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - objectSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - properties: - matchResources: - $ref: "#/components/schemas/v1.MatchResources" - paramRef: - $ref: "#/components/schemas/v1.ParamRef" - policyName: - description: "policyName references a MutatingAdmissionPolicy name which\ - \ the MutatingAdmissionPolicyBinding binds to. If the referenced resource\ - \ does not exist, this binding is considered invalid and will be ignored\ - \ Required." + - description: "fieldManager is a name associated with the actor or entity that\ + \ is making these changes. The value must be less than or 128 characters\ + \ long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." + in: query + name: fieldManager + schema: type: string - type: object - v1.MutatingAdmissionPolicyList: - description: MutatingAdmissionPolicyList is a list of MutatingAdmissionPolicy. - example: - metadata: - remainingItemCount: 1 - continue: continue - resourceVersion: resourceVersion - shardInfo: - selector: selector - selfLink: selfLink - apiVersion: apiVersion - kind: kind - items: - - metadata: - generation: 6 - finalizers: - - finalizers - - finalizers - resourceVersion: resourceVersion - annotations: - key: annotations - generateName: generateName - deletionTimestamp: 2000-01-23T04:56:07.000+00:00 - labels: - key: labels - ownerReferences: - - uid: uid - controller: true - apiVersion: apiVersion - kind: kind - name: name - blockOwnerDeletion: true - - uid: uid - controller: true - apiVersion: apiVersion - kind: kind - name: name - blockOwnerDeletion: true - selfLink: selfLink - deletionGracePeriodSeconds: 0 - uid: uid - managedFields: - - apiVersion: apiVersion - fieldsV1: "{}" - manager: manager - subresource: subresource - time: 2000-01-23T04:56:07.000+00:00 - operation: operation - fieldsType: fieldsType - - apiVersion: apiVersion - fieldsV1: "{}" - manager: manager - subresource: subresource - time: 2000-01-23T04:56:07.000+00:00 - operation: operation - fieldsType: fieldsType - creationTimestamp: 2000-01-23T04:56:07.000+00:00 - name: name - namespace: namespace - apiVersion: apiVersion - kind: kind - spec: - reinvocationPolicy: reinvocationPolicy - variables: - - expression: expression - name: name - - expression: expression - name: name - mutations: - - patchType: patchType - applyConfiguration: - expression: expression - jsonPatch: - expression: expression - - patchType: patchType - applyConfiguration: - expression: expression - jsonPatch: - expression: expression - paramKind: - apiVersion: apiVersion - kind: kind - matchConditions: - - expression: expression - name: name - - expression: expression - name: name - matchConstraints: - matchPolicy: matchPolicy - resourceRules: - - resourceNames: - - resourceNames - - resourceNames - operations: - - operations - - operations - apiVersions: - - apiVersions - - apiVersions - scope: scope - resources: - - resources - - resources - apiGroups: - - apiGroups - - apiGroups - - resourceNames: - - resourceNames - - resourceNames - operations: - - operations - - operations - apiVersions: - - apiVersions - - apiVersions - scope: scope - resources: - - resources - - resources - apiGroups: - - apiGroups - - apiGroups - excludeResourceRules: - - resourceNames: - - resourceNames - - resourceNames - operations: - - operations - - operations - apiVersions: - - apiVersions - - apiVersions - scope: scope - resources: - - resources - - resources - apiGroups: - - apiGroups - - apiGroups - - resourceNames: - - resourceNames - - resourceNames - operations: - - operations - - operations - apiVersions: - - apiVersions - - apiVersions - scope: scope - resources: - - resources - - resources - apiGroups: - - apiGroups - - apiGroups - namespaceSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - objectSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - failurePolicy: failurePolicy - - metadata: - generation: 6 - finalizers: - - finalizers - - finalizers - resourceVersion: resourceVersion - annotations: - key: annotations - generateName: generateName - deletionTimestamp: 2000-01-23T04:56:07.000+00:00 - labels: - key: labels - ownerReferences: - - uid: uid - controller: true - apiVersion: apiVersion - kind: kind - name: name - blockOwnerDeletion: true - - uid: uid - controller: true - apiVersion: apiVersion - kind: kind - name: name - blockOwnerDeletion: true - selfLink: selfLink - deletionGracePeriodSeconds: 0 - uid: uid - managedFields: - - apiVersion: apiVersion - fieldsV1: "{}" - manager: manager - subresource: subresource - time: 2000-01-23T04:56:07.000+00:00 - operation: operation - fieldsType: fieldsType - - apiVersion: apiVersion - fieldsV1: "{}" - manager: manager - subresource: subresource - time: 2000-01-23T04:56:07.000+00:00 - operation: operation - fieldsType: fieldsType - creationTimestamp: 2000-01-23T04:56:07.000+00:00 - name: name - namespace: namespace - apiVersion: apiVersion - kind: kind - spec: - reinvocationPolicy: reinvocationPolicy - variables: - - expression: expression - name: name - - expression: expression - name: name - mutations: - - patchType: patchType - applyConfiguration: - expression: expression - jsonPatch: - expression: expression - - patchType: patchType - applyConfiguration: - expression: expression - jsonPatch: - expression: expression - paramKind: - apiVersion: apiVersion - kind: kind - matchConditions: - - expression: expression - name: name - - expression: expression - name: name - matchConstraints: - matchPolicy: matchPolicy - resourceRules: - - resourceNames: - - resourceNames - - resourceNames - operations: - - operations - - operations - apiVersions: - - apiVersions - - apiVersions - scope: scope - resources: - - resources - - resources - apiGroups: - - apiGroups - - apiGroups - - resourceNames: - - resourceNames - - resourceNames - operations: - - operations - - operations - apiVersions: - - apiVersions - - apiVersions - scope: scope - resources: - - resources - - resources - apiGroups: - - apiGroups - - apiGroups - excludeResourceRules: - - resourceNames: - - resourceNames - - resourceNames - operations: - - operations - - operations - apiVersions: - - apiVersions - - apiVersions - scope: scope - resources: - - resources - - resources - apiGroups: - - apiGroups - - apiGroups - - resourceNames: - - resourceNames - - resourceNames - operations: - - operations - - operations - apiVersions: - - apiVersions - - apiVersions - scope: scope - resources: - - resources - - resources - apiGroups: - - apiGroups - - apiGroups - namespaceSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - objectSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - failurePolicy: failurePolicy - properties: - apiVersion: - description: "APIVersion defines the versioned schema of this representation\ - \ of an object. Servers should convert recognized schemas to the latest\ - \ internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources" + - description: "fieldValidation instructs the server on how to handle objects\ + \ in the request (POST/PUT/PATCH) containing unknown or duplicate fields.\ + \ Valid values are: - Ignore: This will ignore any unknown fields that are\ + \ silently dropped from the object, and will ignore all but the last duplicate\ + \ field that the decoder encounters. This is the default behavior prior\ + \ to v1.23. - Warn: This will send a warning via the standard warning response\ + \ header for each unknown field that is dropped from the object, and for\ + \ each duplicate field that is encountered. The request will still succeed\ + \ if there are no other errors, and will only persist the last of any duplicate\ + \ fields. This is the default in v1.23+ - Strict: This will fail the request\ + \ with a BadRequest error if any unknown fields would be dropped from the\ + \ object, or if any duplicate fields are present. The error returned from\ + \ the server will contain all unknown and duplicate fields encountered.\ + \ (optional)" + in: query + name: fieldValidation + schema: type: string - items: - description: List of ValidatingAdmissionPolicy. - items: - $ref: "#/components/schemas/v1.MutatingAdmissionPolicy" - type: array - kind: - description: "Kind is a string value representing the REST resource this\ - \ object represents. Servers may infer this from the endpoint the client\ - \ submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds" + requestBody: + content: + application/json: + schema: + type: object + description: The JSON schema of the Resource to create. + required: true + responses: + "201": + content: + application/json: + schema: + type: object + description: Created + "401": + content: {} + description: Unauthorized + tags: + - custom_objects + x-codegen-request-body-name: body + x-content-type: application/json + x-accepts: + - application/json + /apis/{group}/{version}/{plural}/{name}: + delete: + description: Deletes the specified cluster scoped custom object + operationId: deleteClusterCustomObject + parameters: + - description: the custom resource's group + in: path + name: group + required: true + schema: type: string - metadata: - $ref: "#/components/schemas/v1.ListMeta" - required: - - items - type: object - x-kubernetes-group-version-kind: - - group: admissionregistration.k8s.io - kind: MutatingAdmissionPolicyList - version: v1 - x-implements: - - io.kubernetes.client.common.KubernetesListObject - v1.MutatingAdmissionPolicySpec: - description: MutatingAdmissionPolicySpec defines the desired behavior of the - admission policy. - example: - reinvocationPolicy: reinvocationPolicy - variables: - - expression: expression - name: name - - expression: expression - name: name - mutations: - - patchType: patchType - applyConfiguration: - expression: expression - jsonPatch: - expression: expression - - patchType: patchType - applyConfiguration: - expression: expression - jsonPatch: - expression: expression - paramKind: - apiVersion: apiVersion - kind: kind - matchConditions: - - expression: expression - name: name - - expression: expression - name: name - matchConstraints: - matchPolicy: matchPolicy - resourceRules: - - resourceNames: - - resourceNames - - resourceNames - operations: - - operations - - operations - apiVersions: - - apiVersions - - apiVersions - scope: scope - resources: - - resources - - resources - apiGroups: - - apiGroups - - apiGroups - - resourceNames: - - resourceNames - - resourceNames - operations: - - operations - - operations - apiVersions: - - apiVersions - - apiVersions - scope: scope - resources: - - resources - - resources - apiGroups: - - apiGroups - - apiGroups - excludeResourceRules: - - resourceNames: - - resourceNames - - resourceNames - operations: - - operations - - operations - apiVersions: - - apiVersions - - apiVersions - scope: scope - resources: - - resources - - resources - apiGroups: - - apiGroups - - apiGroups - - resourceNames: - - resourceNames - - resourceNames - operations: - - operations - - operations - apiVersions: - - apiVersions - - apiVersions - scope: scope - resources: - - resources - - resources - apiGroups: - - apiGroups - - apiGroups - namespaceSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - objectSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - failurePolicy: failurePolicy - properties: - failurePolicy: - description: |- - failurePolicy defines how to handle failures for the admission policy. Failures can occur from CEL expression parse errors, type check errors, runtime errors and invalid or mis-configured policy definitions or bindings. - - A policy is invalid if paramKind refers to a non-existent Kind. A binding is invalid if paramRef.name refers to a non-existent resource. - - failurePolicy does not define how validations that evaluate to false are handled. - - Allowed values are Ignore or Fail. Defaults to Fail. + - description: the custom resource's version + in: path + name: version + required: true + schema: type: string - matchConditions: - description: |- - matchConditions is a list of conditions that must be met for a request to be validated. Match conditions filter requests that have already been matched by the matchConstraints. An empty list of matchConditions matches all requests. There are a maximum of 64 match conditions allowed. - - If a parameter object is provided, it can be accessed via the `params` handle in the same manner as validation expressions. - - The exact matching logic is (in order): - 1. If ANY matchCondition evaluates to FALSE, the policy is skipped. - 2. If ALL matchConditions evaluate to TRUE, the policy is evaluated. - 3. If any matchCondition evaluates to an error (but none are FALSE): - - If failurePolicy=Fail, reject the request - - If failurePolicy=Ignore, the policy is skipped - items: - $ref: "#/components/schemas/v1.MatchCondition" - type: array - x-kubernetes-patch-strategy: merge - x-kubernetes-list-type: map - x-kubernetes-list-map-keys: - - name - x-kubernetes-patch-merge-key: name - matchConstraints: - $ref: "#/components/schemas/v1.MatchResources" - mutations: - description: "mutations contain operations to perform on matching objects.\ - \ mutations may not be empty; a minimum of one mutation is required. mutations\ - \ are evaluated in order, and are reinvoked according to the reinvocationPolicy.\ - \ The mutations of a policy are invoked for each binding of this policy\ - \ and reinvocation of mutations occurs on a per binding basis." - items: - $ref: "#/components/schemas/v1.Mutation" - type: array - x-kubernetes-list-type: atomic - paramKind: - $ref: "#/components/schemas/v1.ParamKind" - reinvocationPolicy: - description: |- - reinvocationPolicy indicates whether mutations may be called multiple times per MutatingAdmissionPolicyBinding as part of a single admission evaluation. Allowed values are "Never" and "IfNeeded". - - Never: These mutations will not be called more than once per binding in a single admission evaluation. - - IfNeeded: These mutations may be invoked more than once per binding for a single admission request and there is no guarantee of order with respect to other admission plugins, admission webhooks, bindings of this policy and admission policies. Mutations are only reinvoked when mutations change the object after this mutation is invoked. Required. + - description: the custom object's plural name. For TPRs this would be lowercase + plural kind. + in: path + name: plural + required: true + schema: type: string - variables: - description: |- - variables contain definitions of variables that can be used in composition of other expressions. Each variable is defined as a named CEL expression. The variables defined here will be available under `variables` in other expressions of the policy except matchConditions because matchConditions are evaluated before the rest of the policy. - - The expression of a variable can refer to other variables defined earlier in the list but not those after. Thus, variables must be sorted by the order of first appearance and acyclic. - items: - $ref: "#/components/schemas/v1.Variable" - type: array - x-kubernetes-list-type: atomic - type: object - v1.MutatingWebhook: - description: MutatingWebhook describes an admission webhook and the resources - and operations it applies to. - example: - admissionReviewVersions: - - admissionReviewVersions - - admissionReviewVersions - matchPolicy: matchPolicy - reinvocationPolicy: reinvocationPolicy + - description: the custom object's name + in: path name: name - namespaceSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - timeoutSeconds: 6 - rules: - - operations: - - operations - - operations - apiVersions: - - apiVersions - - apiVersions - scope: scope - resources: - - resources - - resources - apiGroups: - - apiGroups - - apiGroups - - operations: - - operations - - operations - apiVersions: - - apiVersions - - apiVersions - scope: scope - resources: - - resources - - resources - apiGroups: - - apiGroups - - apiGroups - clientConfig: - caBundle: caBundle - service: - path: path - port: 0 - name: name - namespace: namespace - url: url - matchConditions: - - expression: expression - name: name - - expression: expression - name: name - objectSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - failurePolicy: failurePolicy - sideEffects: sideEffects - properties: - admissionReviewVersions: - description: "admissionReviewVersions is an ordered list of preferred `AdmissionReview`\ - \ versions the Webhook expects. API server will try to use first version\ - \ in the list which it supports. If none of the versions specified in\ - \ this list supported by API server, validation will fail for this object.\ - \ If a persisted webhook configuration specifies allowed versions and\ - \ does not include any versions known to the API Server, calls to the\ - \ webhook will fail and be subject to the failure policy." - items: - type: string - type: array - x-kubernetes-list-type: atomic - clientConfig: - $ref: "#/components/schemas/admissionregistration.v1.WebhookClientConfig" - failurePolicy: - description: failurePolicy defines how unrecognized errors from the admission - endpoint are handled - allowed values are Ignore or Fail. Defaults to - Fail. + required: true + schema: type: string - matchConditions: - description: |- - matchConditions is a list of conditions that must be met for a request to be sent to this webhook. Match conditions filter requests that have already been matched by the rules, namespaceSelector, and objectSelector. An empty list of matchConditions matches all requests. There are a maximum of 64 match conditions allowed. - - The exact matching logic is (in order): - 1. If ANY matchCondition evaluates to FALSE, the webhook is skipped. - 2. If ALL matchConditions evaluate to TRUE, the webhook is called. - 3. If any matchCondition evaluates to an error (but none are FALSE): - - If failurePolicy=Fail, reject the request - - If failurePolicy=Ignore, the error is ignored and the webhook is skipped - items: - $ref: "#/components/schemas/v1.MatchCondition" - type: array - x-kubernetes-patch-strategy: merge - x-kubernetes-list-type: map - x-kubernetes-list-map-keys: - - name - x-kubernetes-patch-merge-key: name - matchPolicy: - description: |- - matchPolicy defines how the "rules" list is used to match incoming requests. Allowed values are "Exact" or "Equivalent". - - - Exact: match a request only if it exactly matches a specified rule. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, but "rules" only included `apiGroups:["apps"], apiVersions:["v1"], resources: ["deployments"]`, a request to apps/v1beta1 or extensions/v1beta1 would not be sent to the webhook. - - - Equivalent: match a request if modifies a resource listed in rules, even via another API group or version. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, and "rules" only included `apiGroups:["apps"], apiVersions:["v1"], resources: ["deployments"]`, a request to apps/v1beta1 or extensions/v1beta1 would be converted to apps/v1 and sent to the webhook. - - Defaults to "Equivalent" + - description: "The duration in seconds before the object should be deleted.\ + \ Value must be non-negative integer. The value zero indicates delete immediately.\ + \ If this value is nil, the default grace period for the specified type\ + \ will be used. Defaults to a per object value if not specified. zero means\ + \ delete immediately." + in: query + name: gracePeriodSeconds + schema: + type: integer + - description: "Deprecated: please use the PropagationPolicy, this field will\ + \ be deprecated in 1.7. Should the dependent objects be orphaned. If true/false,\ + \ the \"orphan\" finalizer will be added to/removed from the object's finalizers\ + \ list. Either this field or PropagationPolicy may be set, but not both." + in: query + name: orphanDependents + schema: + type: boolean + - description: "Whether and how garbage collection will be performed. Either\ + \ this field or OrphanDependents may be set, but not both. The default policy\ + \ is decided by the existing finalizer set in the metadata.finalizers and\ + \ the resource-specific default policy." + in: query + name: propagationPolicy + schema: type: string - name: - description: "name is the name of the admission webhook. Name should be\ - \ fully qualified, e.g., imagepolicy.kubernetes.io, where \"imagepolicy\"\ - \ is the name of the webhook, and kubernetes.io is the name of the organization.\ - \ Required." + - description: "When present, indicates that modifications should not be persisted.\ + \ An invalid or unrecognized dryRun directive will result in an error response\ + \ and no further processing of the request. Valid values are: - All: all\ + \ dry run stages will be processed" + in: query + name: dryRun + schema: type: string - namespaceSelector: - $ref: "#/components/schemas/v1.LabelSelector" - objectSelector: - $ref: "#/components/schemas/v1.LabelSelector" - reinvocationPolicy: - description: |- - reinvocationPolicy indicates whether this webhook should be called multiple times as part of a single admission evaluation. Allowed values are "Never" and "IfNeeded". - - Never: the webhook will not be called more than once in a single admission evaluation. - - IfNeeded: the webhook will be called at least one additional time as part of the admission evaluation if the object being admitted is modified by other admission plugins after the initial webhook call. Webhooks that specify this option *must* be idempotent, able to process objects they previously admitted. Note: * the number of additional invocations is not guaranteed to be exactly one. * if additional invocations result in further modifications to the object, webhooks are not guaranteed to be invoked again. * webhooks that use this option may be reordered to minimize the number of additional invocations. * to validate an object after all mutations are guaranteed complete, use a validating admission webhook instead. - - Defaults to "Never". + requestBody: + content: + application/json: + schema: + $ref: "#/components/schemas/v1.DeleteOptions" + required: false + responses: + "200": + content: + application/json: + schema: + type: object + description: OK + "401": + content: {} + description: Unauthorized + tags: + - custom_objects + x-codegen-request-body-name: body + x-content-type: application/json + x-accepts: + - application/json + get: + description: Returns a cluster scoped custom object + operationId: getClusterCustomObject + parameters: + - description: the custom resource's group + in: path + name: group + required: true + schema: type: string - rules: - description: "rules describes what operations on what resources/subresources\ - \ the webhook cares about. The webhook cares about an operation if it\ - \ matches _any_ Rule. However, in order to prevent ValidatingAdmissionWebhooks\ - \ and MutatingAdmissionWebhooks from putting the cluster in a state which\ - \ cannot be recovered from without completely disabling the plugin, ValidatingAdmissionWebhooks\ - \ and MutatingAdmissionWebhooks are never called on admission requests\ - \ for ValidatingWebhookConfiguration and MutatingWebhookConfiguration\ - \ objects." - items: - $ref: "#/components/schemas/v1.RuleWithOperations" - type: array - x-kubernetes-list-type: atomic - sideEffects: - description: "sideEffects states whether this webhook has side effects.\ - \ Acceptable values are: None, NoneOnDryRun (webhooks created via v1beta1\ - \ may also specify Some or Unknown). Webhooks with side effects MUST implement\ - \ a reconciliation system, since a request may be rejected by a future\ - \ step in the admission chain and the side effects therefore need to be\ - \ undone. Requests with the dryRun attribute will be auto-rejected if\ - \ they match a webhook with sideEffects == Unknown or Some." + - description: the custom resource's version + in: path + name: version + required: true + schema: type: string - timeoutSeconds: - description: "timeoutSeconds specifies the timeout for this webhook. After\ - \ the timeout passes, the webhook call will be ignored or the API call\ - \ will fail based on the failure policy. The timeout value must be between\ - \ 1 and 30 seconds. Default to 10 seconds." - format: int32 - type: integer - required: - - admissionReviewVersions - - clientConfig - - name - - sideEffects - type: object - v1.MutatingWebhookConfiguration: - description: MutatingWebhookConfiguration describes the configuration of and - admission webhook that accept or reject and may change the object. - example: - metadata: - generation: 6 - finalizers: - - finalizers - - finalizers - resourceVersion: resourceVersion - annotations: - key: annotations - generateName: generateName - deletionTimestamp: 2000-01-23T04:56:07.000+00:00 - labels: - key: labels - ownerReferences: - - uid: uid - controller: true - apiVersion: apiVersion - kind: kind - name: name - blockOwnerDeletion: true - - uid: uid - controller: true - apiVersion: apiVersion - kind: kind - name: name - blockOwnerDeletion: true - selfLink: selfLink - deletionGracePeriodSeconds: 0 - uid: uid - managedFields: - - apiVersion: apiVersion - fieldsV1: "{}" - manager: manager - subresource: subresource - time: 2000-01-23T04:56:07.000+00:00 - operation: operation - fieldsType: fieldsType - - apiVersion: apiVersion - fieldsV1: "{}" - manager: manager - subresource: subresource - time: 2000-01-23T04:56:07.000+00:00 - operation: operation - fieldsType: fieldsType - creationTimestamp: 2000-01-23T04:56:07.000+00:00 - name: name - namespace: namespace - apiVersion: apiVersion - webhooks: - - admissionReviewVersions: - - admissionReviewVersions - - admissionReviewVersions - matchPolicy: matchPolicy - reinvocationPolicy: reinvocationPolicy - name: name - namespaceSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - timeoutSeconds: 6 - rules: - - operations: - - operations - - operations - apiVersions: - - apiVersions - - apiVersions - scope: scope - resources: - - resources - - resources - apiGroups: - - apiGroups - - apiGroups - - operations: - - operations - - operations - apiVersions: - - apiVersions - - apiVersions - scope: scope - resources: - - resources - - resources - apiGroups: - - apiGroups - - apiGroups - clientConfig: - caBundle: caBundle - service: - path: path - port: 0 - name: name - namespace: namespace - url: url - matchConditions: - - expression: expression - name: name - - expression: expression - name: name - objectSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - failurePolicy: failurePolicy - sideEffects: sideEffects - - admissionReviewVersions: - - admissionReviewVersions - - admissionReviewVersions - matchPolicy: matchPolicy - reinvocationPolicy: reinvocationPolicy - name: name - namespaceSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - timeoutSeconds: 6 - rules: - - operations: - - operations - - operations - apiVersions: - - apiVersions - - apiVersions - scope: scope - resources: - - resources - - resources - apiGroups: - - apiGroups - - apiGroups - - operations: - - operations - - operations - apiVersions: - - apiVersions - - apiVersions - scope: scope - resources: - - resources - - resources - apiGroups: - - apiGroups - - apiGroups - clientConfig: - caBundle: caBundle - service: - path: path - port: 0 - name: name - namespace: namespace - url: url - matchConditions: - - expression: expression - name: name - - expression: expression - name: name - objectSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - failurePolicy: failurePolicy - sideEffects: sideEffects - kind: kind - properties: - apiVersion: - description: "APIVersion defines the versioned schema of this representation\ - \ of an object. Servers should convert recognized schemas to the latest\ - \ internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources" + - description: the custom object's plural name. For TPRs this would be lowercase + plural kind. + in: path + name: plural + required: true + schema: type: string - kind: - description: "Kind is a string value representing the REST resource this\ - \ object represents. Servers may infer this from the endpoint the client\ - \ submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds" + - description: the custom object's name + in: path + name: name + required: true + schema: type: string - metadata: - $ref: "#/components/schemas/v1.ObjectMeta" - webhooks: - description: webhooks is a list of webhooks and the affected resources and - operations. - items: - $ref: "#/components/schemas/v1.MutatingWebhook" - type: array - x-kubernetes-patch-strategy: merge - x-kubernetes-list-type: map - x-kubernetes-list-map-keys: - - name - x-kubernetes-patch-merge-key: name - type: object - x-kubernetes-group-version-kind: - - group: admissionregistration.k8s.io - kind: MutatingWebhookConfiguration - version: v1 - x-implements: - - io.kubernetes.client.common.KubernetesObject - v1.MutatingWebhookConfigurationList: - description: MutatingWebhookConfigurationList is a list of MutatingWebhookConfiguration. - example: - metadata: - remainingItemCount: 1 - continue: continue - resourceVersion: resourceVersion - shardInfo: - selector: selector - selfLink: selfLink - apiVersion: apiVersion - kind: kind - items: - - metadata: - generation: 6 - finalizers: - - finalizers - - finalizers - resourceVersion: resourceVersion - annotations: - key: annotations - generateName: generateName - deletionTimestamp: 2000-01-23T04:56:07.000+00:00 - labels: - key: labels - ownerReferences: - - uid: uid - controller: true - apiVersion: apiVersion - kind: kind - name: name - blockOwnerDeletion: true - - uid: uid - controller: true - apiVersion: apiVersion - kind: kind - name: name - blockOwnerDeletion: true - selfLink: selfLink - deletionGracePeriodSeconds: 0 - uid: uid - managedFields: - - apiVersion: apiVersion - fieldsV1: "{}" - manager: manager - subresource: subresource - time: 2000-01-23T04:56:07.000+00:00 - operation: operation - fieldsType: fieldsType - - apiVersion: apiVersion - fieldsV1: "{}" - manager: manager - subresource: subresource - time: 2000-01-23T04:56:07.000+00:00 - operation: operation - fieldsType: fieldsType - creationTimestamp: 2000-01-23T04:56:07.000+00:00 - name: name - namespace: namespace - apiVersion: apiVersion - webhooks: - - admissionReviewVersions: - - admissionReviewVersions - - admissionReviewVersions - matchPolicy: matchPolicy - reinvocationPolicy: reinvocationPolicy - name: name - namespaceSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - timeoutSeconds: 6 - rules: - - operations: - - operations - - operations - apiVersions: - - apiVersions - - apiVersions - scope: scope - resources: - - resources - - resources - apiGroups: - - apiGroups - - apiGroups - - operations: - - operations - - operations - apiVersions: - - apiVersions - - apiVersions - scope: scope - resources: - - resources - - resources - apiGroups: - - apiGroups - - apiGroups - clientConfig: - caBundle: caBundle - service: - path: path - port: 0 - name: name - namespace: namespace - url: url - matchConditions: - - expression: expression - name: name - - expression: expression - name: name - objectSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - failurePolicy: failurePolicy - sideEffects: sideEffects - - admissionReviewVersions: - - admissionReviewVersions - - admissionReviewVersions - matchPolicy: matchPolicy - reinvocationPolicy: reinvocationPolicy - name: name - namespaceSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - timeoutSeconds: 6 - rules: - - operations: - - operations - - operations - apiVersions: - - apiVersions - - apiVersions - scope: scope - resources: - - resources - - resources - apiGroups: - - apiGroups - - apiGroups - - operations: - - operations - - operations - apiVersions: - - apiVersions - - apiVersions - scope: scope - resources: - - resources - - resources - apiGroups: - - apiGroups - - apiGroups - clientConfig: - caBundle: caBundle - service: - path: path - port: 0 - name: name - namespace: namespace - url: url - matchConditions: - - expression: expression - name: name - - expression: expression - name: name - objectSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - failurePolicy: failurePolicy - sideEffects: sideEffects - kind: kind - - metadata: - generation: 6 - finalizers: - - finalizers - - finalizers - resourceVersion: resourceVersion - annotations: - key: annotations - generateName: generateName - deletionTimestamp: 2000-01-23T04:56:07.000+00:00 - labels: - key: labels - ownerReferences: - - uid: uid - controller: true - apiVersion: apiVersion - kind: kind - name: name - blockOwnerDeletion: true - - uid: uid - controller: true - apiVersion: apiVersion - kind: kind - name: name - blockOwnerDeletion: true - selfLink: selfLink - deletionGracePeriodSeconds: 0 - uid: uid - managedFields: - - apiVersion: apiVersion - fieldsV1: "{}" - manager: manager - subresource: subresource - time: 2000-01-23T04:56:07.000+00:00 - operation: operation - fieldsType: fieldsType - - apiVersion: apiVersion - fieldsV1: "{}" - manager: manager - subresource: subresource - time: 2000-01-23T04:56:07.000+00:00 - operation: operation - fieldsType: fieldsType - creationTimestamp: 2000-01-23T04:56:07.000+00:00 - name: name - namespace: namespace - apiVersion: apiVersion - webhooks: - - admissionReviewVersions: - - admissionReviewVersions - - admissionReviewVersions - matchPolicy: matchPolicy - reinvocationPolicy: reinvocationPolicy - name: name - namespaceSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - timeoutSeconds: 6 - rules: - - operations: - - operations - - operations - apiVersions: - - apiVersions - - apiVersions - scope: scope - resources: - - resources - - resources - apiGroups: - - apiGroups - - apiGroups - - operations: - - operations - - operations - apiVersions: - - apiVersions - - apiVersions - scope: scope - resources: - - resources - - resources - apiGroups: - - apiGroups - - apiGroups - clientConfig: - caBundle: caBundle - service: - path: path - port: 0 - name: name - namespace: namespace - url: url - matchConditions: - - expression: expression - name: name - - expression: expression - name: name - objectSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - failurePolicy: failurePolicy - sideEffects: sideEffects - - admissionReviewVersions: - - admissionReviewVersions - - admissionReviewVersions - matchPolicy: matchPolicy - reinvocationPolicy: reinvocationPolicy - name: name - namespaceSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - timeoutSeconds: 6 - rules: - - operations: - - operations - - operations - apiVersions: - - apiVersions - - apiVersions - scope: scope - resources: - - resources - - resources - apiGroups: - - apiGroups - - apiGroups - - operations: - - operations - - operations - apiVersions: - - apiVersions - - apiVersions - scope: scope - resources: - - resources - - resources - apiGroups: - - apiGroups - - apiGroups - clientConfig: - caBundle: caBundle - service: - path: path - port: 0 - name: name - namespace: namespace - url: url - matchConditions: - - expression: expression - name: name - - expression: expression - name: name - objectSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - failurePolicy: failurePolicy - sideEffects: sideEffects - kind: kind - properties: - apiVersion: - description: "APIVersion defines the versioned schema of this representation\ - \ of an object. Servers should convert recognized schemas to the latest\ - \ internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources" + responses: + "200": + content: + application/json: + schema: + type: object + description: A single Resource + "401": + content: {} + description: Unauthorized + tags: + - custom_objects + x-accepts: + - application/json + patch: + description: patch the specified cluster scoped custom object + operationId: patchClusterCustomObject + parameters: + - description: the custom resource's group + in: path + name: group + required: true + schema: type: string - items: - description: List of MutatingWebhookConfiguration. - items: - $ref: "#/components/schemas/v1.MutatingWebhookConfiguration" - type: array - kind: - description: "Kind is a string value representing the REST resource this\ - \ object represents. Servers may infer this from the endpoint the client\ - \ submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds" + - description: the custom resource's version + in: path + name: version + required: true + schema: type: string - metadata: - $ref: "#/components/schemas/v1.ListMeta" - required: - - items - type: object - x-kubernetes-group-version-kind: - - group: admissionregistration.k8s.io - kind: MutatingWebhookConfigurationList - version: v1 - x-implements: - - io.kubernetes.client.common.KubernetesListObject - v1.Mutation: - description: Mutation specifies the CEL expression which is used to apply the - Mutation. - example: - patchType: patchType - applyConfiguration: - expression: expression - jsonPatch: - expression: expression - properties: - applyConfiguration: - $ref: "#/components/schemas/v1.ApplyConfiguration" - jsonPatch: - $ref: "#/components/schemas/v1.JSONPatch" - patchType: - description: patchType indicates the patch strategy used. Allowed values - are "ApplyConfiguration" and "JSONPatch". Required. + - description: the custom object's plural name. For TPRs this would be lowercase + plural kind. + in: path + name: plural + required: true + schema: type: string - required: - - patchType - type: object - v1.NamedRuleWithOperations: - description: NamedRuleWithOperations is a tuple of Operations and Resources - with ResourceNames. - example: - resourceNames: - - resourceNames - - resourceNames - operations: - - operations - - operations - apiVersions: - - apiVersions - - apiVersions - scope: scope - resources: - - resources - - resources - apiGroups: - - apiGroups - - apiGroups - properties: - apiGroups: - description: "apiGroups is the API groups the resources belong to. '*' is\ - \ all groups. If '*' is present, the length of the slice must be one.\ - \ Required." - items: - type: string - type: array - x-kubernetes-list-type: atomic - apiVersions: - description: "apiVersions is the API versions the resources belong to. '*'\ - \ is all versions. If '*' is present, the length of the slice must be\ - \ one. Required." - items: - type: string - type: array - x-kubernetes-list-type: atomic - operations: - description: "operations is the operations the admission hook cares about\ - \ - CREATE, UPDATE, DELETE, CONNECT or * for all of those operations and\ - \ any future admission operations that are added. If '*' is present, the\ - \ length of the slice must be one. Required." - items: - type: string - type: array - x-kubernetes-list-type: atomic - resourceNames: - description: resourceNames is an optional white list of names that the rule - applies to. An empty set means that everything is allowed. - items: - type: string - type: array - x-kubernetes-list-type: atomic - resources: - description: |- - resources is a list of resources this rule applies to. - - For example: 'pods' means pods. 'pods/log' means the log subresource of pods. '*' means all resources, but not subresources. 'pods/*' means all subresources of pods. '*/scale' means all scale subresources. '*/*' means all resources and their subresources. - - If wildcard is present, the validation rule will ensure resources do not overlap with each other. - - Depending on the enclosing object, subresources might not be allowed. Required. - items: - type: string - type: array - x-kubernetes-list-type: atomic - scope: - description: "scope specifies the scope of this rule. Valid values are \"\ - Cluster\", \"Namespaced\", and \"*\" \"Cluster\" means that only cluster-scoped\ - \ resources will match this rule. Namespace API objects are cluster-scoped.\ - \ \"Namespaced\" means that only namespaced resources will match this\ - \ rule. \"*\" means that there are no scope restrictions. Subresources\ - \ match the scope of their parent resource. Default is \"*\"." + - description: the custom object's name + in: path + name: name + required: true + schema: type: string - type: object - x-kubernetes-map-type: atomic - v1.ParamKind: - description: ParamKind is a tuple of Group Kind and Version. - example: - apiVersion: apiVersion - kind: kind - properties: - apiVersion: - description: apiVersion is the API group version the resources belong to. - In format of "group/version". Required. + - description: "When present, indicates that modifications should not be persisted.\ + \ An invalid or unrecognized dryRun directive will result in an error response\ + \ and no further processing of the request. Valid values are: - All: all\ + \ dry run stages will be processed" + in: query + name: dryRun + schema: type: string - kind: - description: kind is the API kind the resources belong to. Required. + - description: "fieldManager is a name associated with the actor or entity that\ + \ is making these changes. The value must be less than or 128 characters\ + \ long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.\ + \ This field is required for apply requests (application/apply-patch) but\ + \ optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch)." + in: query + name: fieldManager + schema: type: string - type: object - x-kubernetes-map-type: atomic - v1.ParamRef: - description: ParamRef describes how to locate the params to be used as input - to expressions of rules applied by a policy binding. - example: + - description: "fieldValidation instructs the server on how to handle objects\ + \ in the request (POST/PUT/PATCH) containing unknown or duplicate fields.\ + \ Valid values are: - Ignore: This will ignore any unknown fields that are\ + \ silently dropped from the object, and will ignore all but the last duplicate\ + \ field that the decoder encounters. This is the default behavior prior\ + \ to v1.23. - Warn: This will send a warning via the standard warning response\ + \ header for each unknown field that is dropped from the object, and for\ + \ each duplicate field that is encountered. The request will still succeed\ + \ if there are no other errors, and will only persist the last of any duplicate\ + \ fields. This is the default in v1.23+ - Strict: This will fail the request\ + \ with a BadRequest error if any unknown fields would be dropped from the\ + \ object, or if any duplicate fields are present. The error returned from\ + \ the server will contain all unknown and duplicate fields encountered.\ + \ (optional)" + in: query + name: fieldValidation + schema: + type: string + - description: Force is going to "force" Apply requests. It means user will + re-acquire conflicting fields owned by other people. Force flag must be + unset for non-apply patch requests. + in: query + name: force + schema: + type: boolean + requestBody: + content: + application/json: + schema: + type: object + description: The JSON schema of the Resource to patch. + required: true + responses: + "200": + content: + application/json: + schema: + type: object + description: OK + "401": + content: {} + description: Unauthorized + tags: + - custom_objects + x-codegen-request-body-name: body + x-content-type: application/json + x-accepts: + - application/json + put: + description: replace the specified cluster scoped custom object + operationId: replaceClusterCustomObject + parameters: + - description: the custom resource's group + in: path + name: group + required: true + schema: + type: string + - description: the custom resource's version + in: path + name: version + required: true + schema: + type: string + - description: the custom object's plural name. For TPRs this would be lowercase + plural kind. + in: path + name: plural + required: true + schema: + type: string + - description: the custom object's name + in: path name: name - namespace: namespace - selector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - parameterNotFoundAction: parameterNotFoundAction - properties: - name: - description: |- - name is the name of the resource being referenced. - - One of `name` or `selector` must be set, but `name` and `selector` are mutually exclusive properties. If one is set, the other must be unset. - - A single parameter used for all admission requests can be configured by setting the `name` field, leaving `selector` blank, and setting namespace if `paramKind` is namespace-scoped. + required: true + schema: type: string - namespace: - description: |- - namespace is the namespace of the referenced resource. Allows limiting the search for params to a specific namespace. Applies to both `name` and `selector` fields. - - A per-namespace parameter may be used by specifying a namespace-scoped `paramKind` in the policy and leaving this field empty. - - - If `paramKind` is cluster-scoped, this field MUST be unset. Setting this field results in a configuration error. - - - If `paramKind` is namespace-scoped, the namespace of the object being evaluated for admission will be used when this field is left unset. Take care that if this is left empty the binding must not match any cluster-scoped resources, which will result in an error. + - description: "When present, indicates that modifications should not be persisted.\ + \ An invalid or unrecognized dryRun directive will result in an error response\ + \ and no further processing of the request. Valid values are: - All: all\ + \ dry run stages will be processed" + in: query + name: dryRun + schema: type: string - parameterNotFoundAction: - description: |- - parameterNotFoundAction controls the behavior of the binding when the resource exists, and name or selector is valid, but there are no parameters matched by the binding. If the value is set to `Allow`, then no matched parameters will be treated as successful validation by the binding. If set to `Deny`, then no matched parameters will be subject to the `failurePolicy` of the policy. - - Allowed values are `Allow` or `Deny` - - Required + - description: "fieldManager is a name associated with the actor or entity that\ + \ is making these changes. The value must be less than or 128 characters\ + \ long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." + in: query + name: fieldManager + schema: type: string - selector: - $ref: "#/components/schemas/v1.LabelSelector" - type: object - x-kubernetes-map-type: atomic - v1.RuleWithOperations: - description: RuleWithOperations is a tuple of Operations and Resources. It is - recommended to make sure that all the tuple expansions are valid. - example: - operations: - - operations - - operations - apiVersions: - - apiVersions - - apiVersions - scope: scope - resources: - - resources - - resources - apiGroups: - - apiGroups - - apiGroups - properties: - apiGroups: - description: "apiGroups is the API groups the resources belong to. '*' is\ - \ all groups. If '*' is present, the length of the slice must be one.\ - \ Required." - items: - type: string - type: array - x-kubernetes-list-type: atomic - apiVersions: - description: "apiVersions is the API versions the resources belong to. '*'\ - \ is all versions. If '*' is present, the length of the slice must be\ - \ one. Required." - items: - type: string - type: array - x-kubernetes-list-type: atomic - operations: - description: "operations is the operations the admission hook cares about\ - \ - CREATE, UPDATE, DELETE, CONNECT or * for all of those operations and\ - \ any future admission operations that are added. If '*' is present, the\ - \ length of the slice must be one. Required." - items: - type: string - type: array - x-kubernetes-list-type: atomic - resources: - description: |- - resources is a list of resources this rule applies to. - - For example: 'pods' means pods. 'pods/log' means the log subresource of pods. '*' means all resources, but not subresources. 'pods/*' means all subresources of pods. '*/scale' means all scale subresources. '*/*' means all resources and their subresources. - - If wildcard is present, the validation rule will ensure resources do not overlap with each other. - - Depending on the enclosing object, subresources might not be allowed. Required. - items: - type: string - type: array - x-kubernetes-list-type: atomic - scope: - description: "scope specifies the scope of this rule. Valid values are \"\ - Cluster\", \"Namespaced\", and \"*\" \"Cluster\" means that only cluster-scoped\ - \ resources will match this rule. Namespace API objects are cluster-scoped.\ - \ \"Namespaced\" means that only namespaced resources will match this\ - \ rule. \"*\" means that there are no scope restrictions. Subresources\ - \ match the scope of their parent resource. Default is \"*\"." + - description: "fieldValidation instructs the server on how to handle objects\ + \ in the request (POST/PUT/PATCH) containing unknown or duplicate fields.\ + \ Valid values are: - Ignore: This will ignore any unknown fields that are\ + \ silently dropped from the object, and will ignore all but the last duplicate\ + \ field that the decoder encounters. This is the default behavior prior\ + \ to v1.23. - Warn: This will send a warning via the standard warning response\ + \ header for each unknown field that is dropped from the object, and for\ + \ each duplicate field that is encountered. The request will still succeed\ + \ if there are no other errors, and will only persist the last of any duplicate\ + \ fields. This is the default in v1.23+ - Strict: This will fail the request\ + \ with a BadRequest error if any unknown fields would be dropped from the\ + \ object, or if any duplicate fields are present. The error returned from\ + \ the server will contain all unknown and duplicate fields encountered.\ + \ (optional)" + in: query + name: fieldValidation + schema: type: string - type: object - admissionregistration.v1.ServiceReference: - description: ServiceReference holds a reference to Service.legacy.k8s.io - example: - path: path - port: 0 + requestBody: + content: + application/json: + schema: + type: object + description: The JSON schema of the Resource to replace. + required: true + responses: + "200": + content: + application/json: + schema: + type: object + description: OK + "401": + content: {} + description: Unauthorized + tags: + - custom_objects + x-codegen-request-body-name: body + x-content-type: application/json + x-accepts: + - application/json + /apis/{group}/{version}/{plural}/{name}/status: + get: + description: read status of the specified cluster scoped custom object + operationId: getClusterCustomObjectStatus + parameters: + - description: the custom resource's group + in: path + name: group + required: true + schema: + type: string + - description: the custom resource's version + in: path + name: version + required: true + schema: + type: string + - description: the custom resource's plural name. For TPRs this would be lowercase + plural kind. + in: path + name: plural + required: true + schema: + type: string + - description: the custom object's name + in: path name: name - namespace: namespace - properties: - name: - description: name is the name of the service. Required + required: true + schema: type: string - namespace: - description: namespace is the namespace of the service. Required + responses: + "200": + content: + application/json: + schema: + type: object + application/yaml: + schema: + type: object + application/vnd.kubernetes.protobuf: + schema: + type: object + description: OK + "401": + content: {} + description: Unauthorized + tags: + - custom_objects + x-accepts: + - application/json + - application/vnd.kubernetes.protobuf + - application/yaml + patch: + description: partially update status of the specified cluster scoped custom + object + operationId: patchClusterCustomObjectStatus + parameters: + - description: the custom resource's group + in: path + name: group + required: true + schema: type: string - path: - description: path is an optional URL path which will be sent in any request - to this service. + - description: the custom resource's version + in: path + name: version + required: true + schema: type: string - port: - description: "port is the port on the service that hosts the webhook. Default\ - \ to 443 for backward compatibility. `port` should be a valid port number\ - \ (1-65535, inclusive)." - format: int32 - type: integer - required: - - name - - namespace - type: object - v1.TypeChecking: - description: TypeChecking contains results of type checking the expressions - in the ValidatingAdmissionPolicy - example: - expressionWarnings: - - fieldRef: fieldRef - warning: warning - - fieldRef: fieldRef - warning: warning - properties: - expressionWarnings: - description: expressionWarnings contains the type checking warnings for - each expression. - items: - $ref: "#/components/schemas/v1.ExpressionWarning" - type: array - x-kubernetes-list-type: atomic - type: object - v1.ValidatingAdmissionPolicy: - description: ValidatingAdmissionPolicy describes the definition of an admission - validation policy that accepts or rejects an object without changing it. - example: - metadata: - generation: 6 - finalizers: - - finalizers - - finalizers - resourceVersion: resourceVersion - annotations: - key: annotations - generateName: generateName - deletionTimestamp: 2000-01-23T04:56:07.000+00:00 - labels: - key: labels - ownerReferences: - - uid: uid - controller: true - apiVersion: apiVersion - kind: kind - name: name - blockOwnerDeletion: true - - uid: uid - controller: true - apiVersion: apiVersion - kind: kind - name: name - blockOwnerDeletion: true - selfLink: selfLink - deletionGracePeriodSeconds: 0 - uid: uid - managedFields: - - apiVersion: apiVersion - fieldsV1: "{}" - manager: manager - subresource: subresource - time: 2000-01-23T04:56:07.000+00:00 - operation: operation - fieldsType: fieldsType - - apiVersion: apiVersion - fieldsV1: "{}" - manager: manager - subresource: subresource - time: 2000-01-23T04:56:07.000+00:00 - operation: operation - fieldsType: fieldsType - creationTimestamp: 2000-01-23T04:56:07.000+00:00 - name: name - namespace: namespace - apiVersion: apiVersion - kind: kind - spec: - variables: - - expression: expression - name: name - - expression: expression - name: name - paramKind: - apiVersion: apiVersion - kind: kind - auditAnnotations: - - valueExpression: valueExpression - key: key - - valueExpression: valueExpression - key: key - matchConditions: - - expression: expression - name: name - - expression: expression - name: name - matchConstraints: - matchPolicy: matchPolicy - resourceRules: - - resourceNames: - - resourceNames - - resourceNames - operations: - - operations - - operations - apiVersions: - - apiVersions - - apiVersions - scope: scope - resources: - - resources - - resources - apiGroups: - - apiGroups - - apiGroups - - resourceNames: - - resourceNames - - resourceNames - operations: - - operations - - operations - apiVersions: - - apiVersions - - apiVersions - scope: scope - resources: - - resources - - resources - apiGroups: - - apiGroups - - apiGroups - excludeResourceRules: - - resourceNames: - - resourceNames - - resourceNames - operations: - - operations - - operations - apiVersions: - - apiVersions - - apiVersions - scope: scope - resources: - - resources - - resources - apiGroups: - - apiGroups - - apiGroups - - resourceNames: - - resourceNames - - resourceNames - operations: - - operations - - operations - apiVersions: - - apiVersions - - apiVersions - scope: scope - resources: - - resources - - resources - apiGroups: - - apiGroups - - apiGroups - namespaceSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - objectSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - validations: - - reason: reason - expression: expression - messageExpression: messageExpression - message: message - - reason: reason - expression: expression - messageExpression: messageExpression - message: message - failurePolicy: failurePolicy - status: - typeChecking: - expressionWarnings: - - fieldRef: fieldRef - warning: warning - - fieldRef: fieldRef - warning: warning - conditions: - - reason: reason - lastTransitionTime: 2000-01-23T04:56:07.000+00:00 - message: message - type: type - observedGeneration: 5 - status: status - - reason: reason - lastTransitionTime: 2000-01-23T04:56:07.000+00:00 - message: message - type: type - observedGeneration: 5 - status: status - observedGeneration: 0 - properties: - apiVersion: - description: "APIVersion defines the versioned schema of this representation\ - \ of an object. Servers should convert recognized schemas to the latest\ - \ internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources" + - description: the custom resource's plural name. For TPRs this would be lowercase + plural kind. + in: path + name: plural + required: true + schema: type: string - kind: - description: "Kind is a string value representing the REST resource this\ - \ object represents. Servers may infer this from the endpoint the client\ - \ submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds" + - description: the custom object's name + in: path + name: name + required: true + schema: type: string - metadata: - $ref: "#/components/schemas/v1.ObjectMeta" - spec: - $ref: "#/components/schemas/v1.ValidatingAdmissionPolicySpec" - status: - $ref: "#/components/schemas/v1.ValidatingAdmissionPolicyStatus" - type: object - x-kubernetes-group-version-kind: - - group: admissionregistration.k8s.io - kind: ValidatingAdmissionPolicy - version: v1 - x-implements: - - io.kubernetes.client.common.KubernetesObject - v1.ValidatingAdmissionPolicyBinding: - description: |- - ValidatingAdmissionPolicyBinding binds the ValidatingAdmissionPolicy with paramerized resources. ValidatingAdmissionPolicyBinding and parameter CRDs together define how cluster administrators configure policies for clusters. - - For a given admission request, each binding will cause its policy to be evaluated N times, where N is 1 for policies/bindings that don't use params, otherwise N is the number of parameters selected by the binding. - - The CEL expressions of a policy must have a computed CEL cost below the maximum CEL budget. Each evaluation of the policy is given an independent CEL cost budget. Adding/removing policies, bindings, or params can not affect whether a given (policy, binding, param) combination is within its own CEL budget. - example: - metadata: - generation: 6 - finalizers: - - finalizers - - finalizers - resourceVersion: resourceVersion - annotations: - key: annotations - generateName: generateName - deletionTimestamp: 2000-01-23T04:56:07.000+00:00 - labels: - key: labels - ownerReferences: - - uid: uid - controller: true - apiVersion: apiVersion - kind: kind - name: name - blockOwnerDeletion: true - - uid: uid - controller: true - apiVersion: apiVersion - kind: kind - name: name - blockOwnerDeletion: true - selfLink: selfLink - deletionGracePeriodSeconds: 0 - uid: uid - managedFields: - - apiVersion: apiVersion - fieldsV1: "{}" - manager: manager - subresource: subresource - time: 2000-01-23T04:56:07.000+00:00 - operation: operation - fieldsType: fieldsType - - apiVersion: apiVersion - fieldsV1: "{}" - manager: manager - subresource: subresource - time: 2000-01-23T04:56:07.000+00:00 - operation: operation - fieldsType: fieldsType - creationTimestamp: 2000-01-23T04:56:07.000+00:00 - name: name - namespace: namespace - apiVersion: apiVersion - kind: kind - spec: - paramRef: - name: name - namespace: namespace - selector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - parameterNotFoundAction: parameterNotFoundAction - policyName: policyName - matchResources: - matchPolicy: matchPolicy - resourceRules: - - resourceNames: - - resourceNames - - resourceNames - operations: - - operations - - operations - apiVersions: - - apiVersions - - apiVersions - scope: scope - resources: - - resources - - resources - apiGroups: - - apiGroups - - apiGroups - - resourceNames: - - resourceNames - - resourceNames - operations: - - operations - - operations - apiVersions: - - apiVersions - - apiVersions - scope: scope - resources: - - resources - - resources - apiGroups: - - apiGroups - - apiGroups - excludeResourceRules: - - resourceNames: - - resourceNames - - resourceNames - operations: - - operations - - operations - apiVersions: - - apiVersions - - apiVersions - scope: scope - resources: - - resources - - resources - apiGroups: - - apiGroups - - apiGroups - - resourceNames: - - resourceNames - - resourceNames - operations: - - operations - - operations - apiVersions: - - apiVersions - - apiVersions - scope: scope - resources: - - resources - - resources - apiGroups: - - apiGroups - - apiGroups - namespaceSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - objectSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - validationActions: - - validationActions - - validationActions - properties: - apiVersion: - description: "APIVersion defines the versioned schema of this representation\ - \ of an object. Servers should convert recognized schemas to the latest\ - \ internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources" + - description: "When present, indicates that modifications should not be persisted.\ + \ An invalid or unrecognized dryRun directive will result in an error response\ + \ and no further processing of the request. Valid values are: - All: all\ + \ dry run stages will be processed" + in: query + name: dryRun + schema: type: string - kind: - description: "Kind is a string value representing the REST resource this\ - \ object represents. Servers may infer this from the endpoint the client\ - \ submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds" + - description: "fieldManager is a name associated with the actor or entity that\ + \ is making these changes. The value must be less than or 128 characters\ + \ long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.\ + \ This field is required for apply requests (application/apply-patch) but\ + \ optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch)." + in: query + name: fieldManager + schema: type: string - metadata: - $ref: "#/components/schemas/v1.ObjectMeta" - spec: - $ref: "#/components/schemas/v1.ValidatingAdmissionPolicyBindingSpec" - required: - - spec - type: object - x-kubernetes-group-version-kind: - - group: admissionregistration.k8s.io - kind: ValidatingAdmissionPolicyBinding - version: v1 - x-implements: - - io.kubernetes.client.common.KubernetesObject - v1.ValidatingAdmissionPolicyBindingList: - description: ValidatingAdmissionPolicyBindingList is a list of ValidatingAdmissionPolicyBinding. - example: - metadata: - remainingItemCount: 1 - continue: continue - resourceVersion: resourceVersion - shardInfo: - selector: selector - selfLink: selfLink - apiVersion: apiVersion - kind: kind - items: - - metadata: - generation: 6 - finalizers: - - finalizers - - finalizers - resourceVersion: resourceVersion - annotations: - key: annotations - generateName: generateName - deletionTimestamp: 2000-01-23T04:56:07.000+00:00 - labels: - key: labels - ownerReferences: - - uid: uid - controller: true - apiVersion: apiVersion - kind: kind - name: name - blockOwnerDeletion: true - - uid: uid - controller: true - apiVersion: apiVersion - kind: kind - name: name - blockOwnerDeletion: true - selfLink: selfLink - deletionGracePeriodSeconds: 0 - uid: uid - managedFields: - - apiVersion: apiVersion - fieldsV1: "{}" - manager: manager - subresource: subresource - time: 2000-01-23T04:56:07.000+00:00 - operation: operation - fieldsType: fieldsType - - apiVersion: apiVersion - fieldsV1: "{}" - manager: manager - subresource: subresource - time: 2000-01-23T04:56:07.000+00:00 - operation: operation - fieldsType: fieldsType - creationTimestamp: 2000-01-23T04:56:07.000+00:00 - name: name - namespace: namespace - apiVersion: apiVersion - kind: kind - spec: - paramRef: - name: name - namespace: namespace - selector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - parameterNotFoundAction: parameterNotFoundAction - policyName: policyName - matchResources: - matchPolicy: matchPolicy - resourceRules: - - resourceNames: - - resourceNames - - resourceNames - operations: - - operations - - operations - apiVersions: - - apiVersions - - apiVersions - scope: scope - resources: - - resources - - resources - apiGroups: - - apiGroups - - apiGroups - - resourceNames: - - resourceNames - - resourceNames - operations: - - operations - - operations - apiVersions: - - apiVersions - - apiVersions - scope: scope - resources: - - resources - - resources - apiGroups: - - apiGroups - - apiGroups - excludeResourceRules: - - resourceNames: - - resourceNames - - resourceNames - operations: - - operations - - operations - apiVersions: - - apiVersions - - apiVersions - scope: scope - resources: - - resources - - resources - apiGroups: - - apiGroups - - apiGroups - - resourceNames: - - resourceNames - - resourceNames - operations: - - operations - - operations - apiVersions: - - apiVersions - - apiVersions - scope: scope - resources: - - resources - - resources - apiGroups: - - apiGroups - - apiGroups - namespaceSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - objectSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - validationActions: - - validationActions - - validationActions - - metadata: - generation: 6 - finalizers: - - finalizers - - finalizers - resourceVersion: resourceVersion - annotations: - key: annotations - generateName: generateName - deletionTimestamp: 2000-01-23T04:56:07.000+00:00 - labels: - key: labels - ownerReferences: - - uid: uid - controller: true - apiVersion: apiVersion - kind: kind - name: name - blockOwnerDeletion: true - - uid: uid - controller: true - apiVersion: apiVersion - kind: kind - name: name - blockOwnerDeletion: true - selfLink: selfLink - deletionGracePeriodSeconds: 0 - uid: uid - managedFields: - - apiVersion: apiVersion - fieldsV1: "{}" - manager: manager - subresource: subresource - time: 2000-01-23T04:56:07.000+00:00 - operation: operation - fieldsType: fieldsType - - apiVersion: apiVersion - fieldsV1: "{}" - manager: manager - subresource: subresource - time: 2000-01-23T04:56:07.000+00:00 - operation: operation - fieldsType: fieldsType - creationTimestamp: 2000-01-23T04:56:07.000+00:00 - name: name - namespace: namespace - apiVersion: apiVersion - kind: kind - spec: - paramRef: - name: name - namespace: namespace - selector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - parameterNotFoundAction: parameterNotFoundAction - policyName: policyName - matchResources: - matchPolicy: matchPolicy - resourceRules: - - resourceNames: - - resourceNames - - resourceNames - operations: - - operations - - operations - apiVersions: - - apiVersions - - apiVersions - scope: scope - resources: - - resources - - resources - apiGroups: - - apiGroups - - apiGroups - - resourceNames: - - resourceNames - - resourceNames - operations: - - operations - - operations - apiVersions: - - apiVersions - - apiVersions - scope: scope - resources: - - resources - - resources - apiGroups: - - apiGroups - - apiGroups - excludeResourceRules: - - resourceNames: - - resourceNames - - resourceNames - operations: - - operations - - operations - apiVersions: - - apiVersions - - apiVersions - scope: scope - resources: - - resources - - resources - apiGroups: - - apiGroups - - apiGroups - - resourceNames: - - resourceNames - - resourceNames - operations: - - operations - - operations - apiVersions: - - apiVersions - - apiVersions - scope: scope - resources: - - resources - - resources - apiGroups: - - apiGroups - - apiGroups - namespaceSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - objectSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - validationActions: - - validationActions - - validationActions - properties: - apiVersion: - description: "APIVersion defines the versioned schema of this representation\ - \ of an object. Servers should convert recognized schemas to the latest\ - \ internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources" + - description: "fieldValidation instructs the server on how to handle objects\ + \ in the request (POST/PUT/PATCH) containing unknown or duplicate fields.\ + \ Valid values are: - Ignore: This will ignore any unknown fields that are\ + \ silently dropped from the object, and will ignore all but the last duplicate\ + \ field that the decoder encounters. This is the default behavior prior\ + \ to v1.23. - Warn: This will send a warning via the standard warning response\ + \ header for each unknown field that is dropped from the object, and for\ + \ each duplicate field that is encountered. The request will still succeed\ + \ if there are no other errors, and will only persist the last of any duplicate\ + \ fields. This is the default in v1.23+ - Strict: This will fail the request\ + \ with a BadRequest error if any unknown fields would be dropped from the\ + \ object, or if any duplicate fields are present. The error returned from\ + \ the server will contain all unknown and duplicate fields encountered.\ + \ (optional)" + in: query + name: fieldValidation + schema: type: string - items: - description: List of PolicyBinding. - items: - $ref: "#/components/schemas/v1.ValidatingAdmissionPolicyBinding" - type: array - kind: - description: "Kind is a string value representing the REST resource this\ - \ object represents. Servers may infer this from the endpoint the client\ - \ submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds" + - description: Force is going to "force" Apply requests. It means user will + re-acquire conflicting fields owned by other people. Force flag must be + unset for non-apply patch requests. + in: query + name: force + schema: + type: boolean + requestBody: + content: + application/json: + schema: + description: The JSON schema of the Resource to patch. + type: object + required: true + responses: + "200": + content: + application/json: + schema: + type: object + application/yaml: + schema: + type: object + application/vnd.kubernetes.protobuf: + schema: + type: object + description: OK + "401": + content: {} + description: Unauthorized + tags: + - custom_objects + x-codegen-request-body-name: body + x-content-type: application/json + x-accepts: + - application/json + - application/vnd.kubernetes.protobuf + - application/yaml + put: + description: replace status of the cluster scoped specified custom object + operationId: replaceClusterCustomObjectStatus + parameters: + - description: the custom resource's group + in: path + name: group + required: true + schema: type: string - metadata: - $ref: "#/components/schemas/v1.ListMeta" - required: - - items - type: object - x-kubernetes-group-version-kind: - - group: admissionregistration.k8s.io - kind: ValidatingAdmissionPolicyBindingList - version: v1 - x-implements: - - io.kubernetes.client.common.KubernetesListObject - v1.ValidatingAdmissionPolicyBindingSpec: - description: ValidatingAdmissionPolicyBindingSpec is the specification of the - ValidatingAdmissionPolicyBinding. - example: - paramRef: - name: name - namespace: namespace - selector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - parameterNotFoundAction: parameterNotFoundAction - policyName: policyName - matchResources: - matchPolicy: matchPolicy - resourceRules: - - resourceNames: - - resourceNames - - resourceNames - operations: - - operations - - operations - apiVersions: - - apiVersions - - apiVersions - scope: scope - resources: - - resources - - resources - apiGroups: - - apiGroups - - apiGroups - - resourceNames: - - resourceNames - - resourceNames - operations: - - operations - - operations - apiVersions: - - apiVersions - - apiVersions - scope: scope - resources: - - resources - - resources - apiGroups: - - apiGroups - - apiGroups - excludeResourceRules: - - resourceNames: - - resourceNames - - resourceNames - operations: - - operations - - operations - apiVersions: - - apiVersions - - apiVersions - scope: scope - resources: - - resources - - resources - apiGroups: - - apiGroups - - apiGroups - - resourceNames: - - resourceNames - - resourceNames - operations: - - operations - - operations - apiVersions: - - apiVersions - - apiVersions - scope: scope - resources: - - resources - - resources - apiGroups: - - apiGroups - - apiGroups - namespaceSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - objectSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - validationActions: - - validationActions - - validationActions - properties: - matchResources: - $ref: "#/components/schemas/v1.MatchResources" - paramRef: - $ref: "#/components/schemas/v1.ParamRef" - policyName: - description: "policyName references a ValidatingAdmissionPolicy name which\ - \ the ValidatingAdmissionPolicyBinding binds to. If the referenced resource\ - \ does not exist, this binding is considered invalid and will be ignored\ - \ Required." + - description: the custom resource's version + in: path + name: version + required: true + schema: type: string - validationActions: - description: |- - validationActions declares how Validations of the referenced ValidatingAdmissionPolicy are enforced. If a validation evaluates to false it is always enforced according to these actions. - - Failures defined by the ValidatingAdmissionPolicy's FailurePolicy are enforced according to these actions only if the FailurePolicy is set to Fail, otherwise the failures are ignored. This includes compilation errors, runtime errors and misconfigurations of the policy. - - validationActions is declared as a set of action values. Order does not matter. validationActions may not contain duplicates of the same action. - - The supported actions values are: - - "Deny" specifies that a validation failure results in a denied request. - - "Warn" specifies that a validation failure is reported to the request client in HTTP Warning headers, with a warning code of 299. Warnings can be sent both for allowed or denied admission responses. - - "Audit" specifies that a validation failure is included in the published audit event for the request. The audit event will contain a `validation.policy.admission.k8s.io/validation_failure` audit annotation with a value containing the details of the validation failures, formatted as a JSON list of objects, each with the following fields: - message: The validation failure message string - policy: The resource name of the ValidatingAdmissionPolicy - binding: The resource name of the ValidatingAdmissionPolicyBinding - expressionIndex: The index of the failed validations in the ValidatingAdmissionPolicy - validationActions: The enforcement actions enacted for the validation failure Example audit annotation: `"validation.policy.admission.k8s.io/validation_failure": "[{\"message\": \"Invalid value\", {\"policy\": \"policy.example.com\", {\"binding\": \"policybinding.example.com\", {\"expressionIndex\": \"1\", {\"validationActions\": [\"Audit\"]}]"` - - Clients should expect to handle additional values by ignoring any values not recognized. - - "Deny" and "Warn" may not be used together since this combination needlessly duplicates the validation failure both in the API response body and the HTTP warning headers. - - Required. - items: - type: string - type: array - x-kubernetes-list-type: set - required: - - policyName - - validationActions - type: object - v1.ValidatingAdmissionPolicyList: - description: ValidatingAdmissionPolicyList is a list of ValidatingAdmissionPolicy. - example: - metadata: - remainingItemCount: 1 - continue: continue - resourceVersion: resourceVersion - shardInfo: - selector: selector - selfLink: selfLink - apiVersion: apiVersion - kind: kind - items: - - metadata: - generation: 6 - finalizers: - - finalizers - - finalizers - resourceVersion: resourceVersion - annotations: - key: annotations - generateName: generateName - deletionTimestamp: 2000-01-23T04:56:07.000+00:00 - labels: - key: labels - ownerReferences: - - uid: uid - controller: true - apiVersion: apiVersion - kind: kind - name: name - blockOwnerDeletion: true - - uid: uid - controller: true - apiVersion: apiVersion - kind: kind - name: name - blockOwnerDeletion: true - selfLink: selfLink - deletionGracePeriodSeconds: 0 - uid: uid - managedFields: - - apiVersion: apiVersion - fieldsV1: "{}" - manager: manager - subresource: subresource - time: 2000-01-23T04:56:07.000+00:00 - operation: operation - fieldsType: fieldsType - - apiVersion: apiVersion - fieldsV1: "{}" - manager: manager - subresource: subresource - time: 2000-01-23T04:56:07.000+00:00 - operation: operation - fieldsType: fieldsType - creationTimestamp: 2000-01-23T04:56:07.000+00:00 - name: name - namespace: namespace - apiVersion: apiVersion - kind: kind - spec: - variables: - - expression: expression - name: name - - expression: expression - name: name - paramKind: - apiVersion: apiVersion - kind: kind - auditAnnotations: - - valueExpression: valueExpression - key: key - - valueExpression: valueExpression - key: key - matchConditions: - - expression: expression - name: name - - expression: expression - name: name - matchConstraints: - matchPolicy: matchPolicy - resourceRules: - - resourceNames: - - resourceNames - - resourceNames - operations: - - operations - - operations - apiVersions: - - apiVersions - - apiVersions - scope: scope - resources: - - resources - - resources - apiGroups: - - apiGroups - - apiGroups - - resourceNames: - - resourceNames - - resourceNames - operations: - - operations - - operations - apiVersions: - - apiVersions - - apiVersions - scope: scope - resources: - - resources - - resources - apiGroups: - - apiGroups - - apiGroups - excludeResourceRules: - - resourceNames: - - resourceNames - - resourceNames - operations: - - operations - - operations - apiVersions: - - apiVersions - - apiVersions - scope: scope - resources: - - resources - - resources - apiGroups: - - apiGroups - - apiGroups - - resourceNames: - - resourceNames - - resourceNames - operations: - - operations - - operations - apiVersions: - - apiVersions - - apiVersions - scope: scope - resources: - - resources - - resources - apiGroups: - - apiGroups - - apiGroups - namespaceSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - objectSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - validations: - - reason: reason - expression: expression - messageExpression: messageExpression - message: message - - reason: reason - expression: expression - messageExpression: messageExpression - message: message - failurePolicy: failurePolicy - status: - typeChecking: - expressionWarnings: - - fieldRef: fieldRef - warning: warning - - fieldRef: fieldRef - warning: warning - conditions: - - reason: reason - lastTransitionTime: 2000-01-23T04:56:07.000+00:00 - message: message - type: type - observedGeneration: 5 - status: status - - reason: reason - lastTransitionTime: 2000-01-23T04:56:07.000+00:00 - message: message - type: type - observedGeneration: 5 - status: status - observedGeneration: 0 - - metadata: - generation: 6 - finalizers: - - finalizers - - finalizers - resourceVersion: resourceVersion - annotations: - key: annotations - generateName: generateName - deletionTimestamp: 2000-01-23T04:56:07.000+00:00 - labels: - key: labels - ownerReferences: - - uid: uid - controller: true - apiVersion: apiVersion - kind: kind - name: name - blockOwnerDeletion: true - - uid: uid - controller: true - apiVersion: apiVersion - kind: kind - name: name - blockOwnerDeletion: true - selfLink: selfLink - deletionGracePeriodSeconds: 0 - uid: uid - managedFields: - - apiVersion: apiVersion - fieldsV1: "{}" - manager: manager - subresource: subresource - time: 2000-01-23T04:56:07.000+00:00 - operation: operation - fieldsType: fieldsType - - apiVersion: apiVersion - fieldsV1: "{}" - manager: manager - subresource: subresource - time: 2000-01-23T04:56:07.000+00:00 - operation: operation - fieldsType: fieldsType - creationTimestamp: 2000-01-23T04:56:07.000+00:00 - name: name - namespace: namespace - apiVersion: apiVersion - kind: kind - spec: - variables: - - expression: expression - name: name - - expression: expression - name: name - paramKind: - apiVersion: apiVersion - kind: kind - auditAnnotations: - - valueExpression: valueExpression - key: key - - valueExpression: valueExpression - key: key - matchConditions: - - expression: expression - name: name - - expression: expression - name: name - matchConstraints: - matchPolicy: matchPolicy - resourceRules: - - resourceNames: - - resourceNames - - resourceNames - operations: - - operations - - operations - apiVersions: - - apiVersions - - apiVersions - scope: scope - resources: - - resources - - resources - apiGroups: - - apiGroups - - apiGroups - - resourceNames: - - resourceNames - - resourceNames - operations: - - operations - - operations - apiVersions: - - apiVersions - - apiVersions - scope: scope - resources: - - resources - - resources - apiGroups: - - apiGroups - - apiGroups - excludeResourceRules: - - resourceNames: - - resourceNames - - resourceNames - operations: - - operations - - operations - apiVersions: - - apiVersions - - apiVersions - scope: scope - resources: - - resources - - resources - apiGroups: - - apiGroups - - apiGroups - - resourceNames: - - resourceNames - - resourceNames - operations: - - operations - - operations - apiVersions: - - apiVersions - - apiVersions - scope: scope - resources: - - resources - - resources - apiGroups: - - apiGroups - - apiGroups - namespaceSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - objectSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - validations: - - reason: reason - expression: expression - messageExpression: messageExpression - message: message - - reason: reason - expression: expression - messageExpression: messageExpression - message: message - failurePolicy: failurePolicy - status: - typeChecking: - expressionWarnings: - - fieldRef: fieldRef - warning: warning - - fieldRef: fieldRef - warning: warning - conditions: - - reason: reason - lastTransitionTime: 2000-01-23T04:56:07.000+00:00 - message: message - type: type - observedGeneration: 5 - status: status - - reason: reason - lastTransitionTime: 2000-01-23T04:56:07.000+00:00 - message: message - type: type - observedGeneration: 5 - status: status - observedGeneration: 0 - properties: - apiVersion: - description: "APIVersion defines the versioned schema of this representation\ - \ of an object. Servers should convert recognized schemas to the latest\ - \ internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources" + - description: the custom resource's plural name. For TPRs this would be lowercase + plural kind. + in: path + name: plural + required: true + schema: type: string - items: - description: List of ValidatingAdmissionPolicy. - items: - $ref: "#/components/schemas/v1.ValidatingAdmissionPolicy" - type: array - kind: - description: "Kind is a string value representing the REST resource this\ - \ object represents. Servers may infer this from the endpoint the client\ - \ submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds" + - description: the custom object's name + in: path + name: name + required: true + schema: type: string - metadata: - $ref: "#/components/schemas/v1.ListMeta" - required: - - items - type: object - x-kubernetes-group-version-kind: - - group: admissionregistration.k8s.io - kind: ValidatingAdmissionPolicyList - version: v1 - x-implements: - - io.kubernetes.client.common.KubernetesListObject - v1.ValidatingAdmissionPolicySpec: - description: ValidatingAdmissionPolicySpec is the specification of the desired - behavior of the AdmissionPolicy. - example: - variables: - - expression: expression - name: name - - expression: expression - name: name - paramKind: - apiVersion: apiVersion - kind: kind - auditAnnotations: - - valueExpression: valueExpression - key: key - - valueExpression: valueExpression - key: key - matchConditions: - - expression: expression - name: name - - expression: expression - name: name - matchConstraints: - matchPolicy: matchPolicy - resourceRules: - - resourceNames: - - resourceNames - - resourceNames - operations: - - operations - - operations - apiVersions: - - apiVersions - - apiVersions - scope: scope - resources: - - resources - - resources - apiGroups: - - apiGroups - - apiGroups - - resourceNames: - - resourceNames - - resourceNames - operations: - - operations - - operations - apiVersions: - - apiVersions - - apiVersions - scope: scope - resources: - - resources - - resources - apiGroups: - - apiGroups - - apiGroups - excludeResourceRules: - - resourceNames: - - resourceNames - - resourceNames - operations: - - operations - - operations - apiVersions: - - apiVersions - - apiVersions - scope: scope - resources: - - resources - - resources - apiGroups: - - apiGroups - - apiGroups - - resourceNames: - - resourceNames - - resourceNames - operations: - - operations - - operations - apiVersions: - - apiVersions - - apiVersions - scope: scope - resources: - - resources - - resources - apiGroups: - - apiGroups - - apiGroups - namespaceSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - objectSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - validations: - - reason: reason - expression: expression - messageExpression: messageExpression - message: message - - reason: reason - expression: expression - messageExpression: messageExpression - message: message - failurePolicy: failurePolicy - properties: - auditAnnotations: - description: auditAnnotations contains CEL expressions which are used to - produce audit annotations for the audit event of the API request. validations - and auditAnnotations may not both be empty; a least one of validations - or auditAnnotations is required. - items: - $ref: "#/components/schemas/v1.AuditAnnotation" - type: array - x-kubernetes-list-type: atomic - failurePolicy: - description: |- - failurePolicy defines how to handle failures for the admission policy. Failures can occur from CEL expression parse errors, type check errors, runtime errors and invalid or mis-configured policy definitions or bindings. - - A policy is invalid if spec.paramKind refers to a non-existent Kind. A binding is invalid if spec.paramRef.name refers to a non-existent resource. - - failurePolicy does not define how validations that evaluate to false are handled. - - When failurePolicy is set to Fail, ValidatingAdmissionPolicyBinding validationActions define how failures are enforced. - - Allowed values are Ignore or Fail. Defaults to Fail. + - description: "When present, indicates that modifications should not be persisted.\ + \ An invalid or unrecognized dryRun directive will result in an error response\ + \ and no further processing of the request. Valid values are: - All: all\ + \ dry run stages will be processed" + in: query + name: dryRun + schema: type: string - matchConditions: - description: |- - matchConditions is a list of conditions that must be met for a request to be validated. Match conditions filter requests that have already been matched by the rules, namespaceSelector, and objectSelector. An empty list of matchConditions matches all requests. There are a maximum of 64 match conditions allowed. - - If a parameter object is provided, it can be accessed via the `params` handle in the same manner as validation expressions. - - The exact matching logic is (in order): - 1. If ANY matchCondition evaluates to FALSE, the policy is skipped. - 2. If ALL matchConditions evaluate to TRUE, the policy is evaluated. - 3. If any matchCondition evaluates to an error (but none are FALSE): - - If failurePolicy=Fail, reject the request - - If failurePolicy=Ignore, the policy is skipped - items: - $ref: "#/components/schemas/v1.MatchCondition" - type: array - x-kubernetes-patch-strategy: merge - x-kubernetes-list-type: map - x-kubernetes-list-map-keys: - - name - x-kubernetes-patch-merge-key: name - matchConstraints: - $ref: "#/components/schemas/v1.MatchResources" - paramKind: - $ref: "#/components/schemas/v1.ParamKind" - validations: - description: validations contain CEL expressions which is used to apply - the validation. Validations and AuditAnnotations may not both be empty; - a minimum of one Validations or AuditAnnotations is required. - items: - $ref: "#/components/schemas/v1.Validation" - type: array - x-kubernetes-list-type: atomic - variables: - description: |- - variables contain definitions of variables that can be used in composition of other expressions. Each variable is defined as a named CEL expression. The variables defined here will be available under `variables` in other expressions of the policy except MatchConditions because MatchConditions are evaluated before the rest of the policy. - - The expression of a variable can refer to other variables defined earlier in the list but not those after. Thus, Variables must be sorted by the order of first appearance and acyclic. - items: - $ref: "#/components/schemas/v1.Variable" - type: array - x-kubernetes-patch-strategy: merge - x-kubernetes-list-type: map - x-kubernetes-list-map-keys: - - name - x-kubernetes-patch-merge-key: name - type: object - v1.ValidatingAdmissionPolicyStatus: - description: ValidatingAdmissionPolicyStatus represents the status of an admission - validation policy. - example: - typeChecking: - expressionWarnings: - - fieldRef: fieldRef - warning: warning - - fieldRef: fieldRef - warning: warning - conditions: - - reason: reason - lastTransitionTime: 2000-01-23T04:56:07.000+00:00 - message: message - type: type - observedGeneration: 5 - status: status - - reason: reason - lastTransitionTime: 2000-01-23T04:56:07.000+00:00 - message: message - type: type - observedGeneration: 5 - status: status - observedGeneration: 0 - properties: - conditions: - description: conditions represent the latest available observations of a - policy's current state. - items: - $ref: "#/components/schemas/v1.Condition" - type: array - x-kubernetes-list-type: map - x-kubernetes-list-map-keys: - - type - observedGeneration: - description: observedGeneration is the generation observed by the controller. - format: int64 - type: integer - typeChecking: - $ref: "#/components/schemas/v1.TypeChecking" - type: object - v1.ValidatingWebhook: - description: ValidatingWebhook describes an admission webhook and the resources - and operations it applies to. - example: - admissionReviewVersions: - - admissionReviewVersions - - admissionReviewVersions - matchPolicy: matchPolicy + - description: "fieldManager is a name associated with the actor or entity that\ + \ is making these changes. The value must be less than or 128 characters\ + \ long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." + in: query + name: fieldManager + schema: + type: string + - description: "fieldValidation instructs the server on how to handle objects\ + \ in the request (POST/PUT/PATCH) containing unknown or duplicate fields.\ + \ Valid values are: - Ignore: This will ignore any unknown fields that are\ + \ silently dropped from the object, and will ignore all but the last duplicate\ + \ field that the decoder encounters. This is the default behavior prior\ + \ to v1.23. - Warn: This will send a warning via the standard warning response\ + \ header for each unknown field that is dropped from the object, and for\ + \ each duplicate field that is encountered. The request will still succeed\ + \ if there are no other errors, and will only persist the last of any duplicate\ + \ fields. This is the default in v1.23+ - Strict: This will fail the request\ + \ with a BadRequest error if any unknown fields would be dropped from the\ + \ object, or if any duplicate fields are present. The error returned from\ + \ the server will contain all unknown and duplicate fields encountered.\ + \ (optional)" + in: query + name: fieldValidation + schema: + type: string + requestBody: + content: + application/json: + schema: + type: object + required: true + responses: + "200": + content: + application/json: + schema: + type: object + application/yaml: + schema: + type: object + application/vnd.kubernetes.protobuf: + schema: + type: object + description: OK + "201": + content: + application/json: + schema: + type: object + application/yaml: + schema: + type: object + application/vnd.kubernetes.protobuf: + schema: + type: object + description: Created + "401": + content: {} + description: Unauthorized + tags: + - custom_objects + x-codegen-request-body-name: body + x-content-type: application/json + x-accepts: + - application/json + - application/vnd.kubernetes.protobuf + - application/yaml + /apis/{group}/{version}/{plural}/{name}/scale: + get: + description: read scale of the specified custom object + operationId: getClusterCustomObjectScale + parameters: + - description: the custom resource's group + in: path + name: group + required: true + schema: + type: string + - description: the custom resource's version + in: path + name: version + required: true + schema: + type: string + - description: the custom resource's plural name. For TPRs this would be lowercase + plural kind. + in: path + name: plural + required: true + schema: + type: string + - description: the custom object's name + in: path name: name - namespaceSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - timeoutSeconds: 0 - rules: - - operations: - - operations - - operations - apiVersions: - - apiVersions - - apiVersions - scope: scope - resources: - - resources - - resources - apiGroups: - - apiGroups - - apiGroups - - operations: - - operations - - operations - apiVersions: - - apiVersions - - apiVersions - scope: scope - resources: - - resources - - resources - apiGroups: - - apiGroups - - apiGroups - clientConfig: - caBundle: caBundle - service: - path: path - port: 0 - name: name - namespace: namespace - url: url - matchConditions: - - expression: expression - name: name - - expression: expression - name: name - objectSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - failurePolicy: failurePolicy - sideEffects: sideEffects - properties: - admissionReviewVersions: - description: "admissionReviewVersions is an ordered list of preferred `AdmissionReview`\ - \ versions the Webhook expects. API server will try to use first version\ - \ in the list which it supports. If none of the versions specified in\ - \ this list supported by API server, validation will fail for this object.\ - \ If a persisted webhook configuration specifies allowed versions and\ - \ does not include any versions known to the API Server, calls to the\ - \ webhook will fail and be subject to the failure policy." - items: - type: string - type: array - x-kubernetes-list-type: atomic - clientConfig: - $ref: "#/components/schemas/admissionregistration.v1.WebhookClientConfig" - failurePolicy: - description: failurePolicy defines how unrecognized errors from the admission - endpoint are handled - allowed values are Ignore or Fail. Defaults to - Fail. + required: true + schema: type: string - matchConditions: - description: |- - matchConditions is a list of conditions that must be met for a request to be sent to this webhook. Match conditions filter requests that have already been matched by the rules, namespaceSelector, and objectSelector. An empty list of matchConditions matches all requests. There are a maximum of 64 match conditions allowed. - - The exact matching logic is (in order): - 1. If ANY matchCondition evaluates to FALSE, the webhook is skipped. - 2. If ALL matchConditions evaluate to TRUE, the webhook is called. - 3. If any matchCondition evaluates to an error (but none are FALSE): - - If failurePolicy=Fail, reject the request - - If failurePolicy=Ignore, the error is ignored and the webhook is skipped - items: - $ref: "#/components/schemas/v1.MatchCondition" - type: array - x-kubernetes-patch-strategy: merge - x-kubernetes-list-type: map - x-kubernetes-list-map-keys: - - name - x-kubernetes-patch-merge-key: name - matchPolicy: - description: |- - matchPolicy defines how the "rules" list is used to match incoming requests. Allowed values are "Exact" or "Equivalent". - - - Exact: match a request only if it exactly matches a specified rule. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, but "rules" only included `apiGroups:["apps"], apiVersions:["v1"], resources: ["deployments"]`, a request to apps/v1beta1 or extensions/v1beta1 would not be sent to the webhook. - - - Equivalent: match a request if modifies a resource listed in rules, even via another API group or version. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, and "rules" only included `apiGroups:["apps"], apiVersions:["v1"], resources: ["deployments"]`, a request to apps/v1beta1 or extensions/v1beta1 would be converted to apps/v1 and sent to the webhook. - - Defaults to "Equivalent" + responses: + "200": + content: + application/json: + schema: + type: object + application/yaml: + schema: + type: object + application/vnd.kubernetes.protobuf: + schema: + type: object + description: OK + "401": + content: {} + description: Unauthorized + tags: + - custom_objects + x-accepts: + - application/json + - application/vnd.kubernetes.protobuf + - application/yaml + patch: + description: partially update scale of the specified cluster scoped custom object + operationId: patchClusterCustomObjectScale + parameters: + - description: the custom resource's group + in: path + name: group + required: true + schema: type: string - name: - description: "name is the name of the admission webhook. Name should be\ - \ fully qualified, e.g., imagepolicy.kubernetes.io, where \"imagepolicy\"\ - \ is the name of the webhook, and kubernetes.io is the name of the organization.\ - \ Required." + - description: the custom resource's version + in: path + name: version + required: true + schema: type: string - namespaceSelector: - $ref: "#/components/schemas/v1.LabelSelector" - objectSelector: - $ref: "#/components/schemas/v1.LabelSelector" - rules: - description: "rules describes what operations on what resources/subresources\ - \ the webhook cares about. The webhook cares about an operation if it\ - \ matches _any_ Rule. However, in order to prevent ValidatingAdmissionWebhooks\ - \ and MutatingAdmissionWebhooks from putting the cluster in a state which\ - \ cannot be recovered from without completely disabling the plugin, ValidatingAdmissionWebhooks\ - \ and MutatingAdmissionWebhooks are never called on admission requests\ - \ for ValidatingWebhookConfiguration and MutatingWebhookConfiguration\ - \ objects." - items: - $ref: "#/components/schemas/v1.RuleWithOperations" - type: array - x-kubernetes-list-type: atomic - sideEffects: - description: "sideEffects states whether this webhook has side effects.\ - \ Acceptable values are: None, NoneOnDryRun (webhooks created via v1beta1\ - \ may also specify Some or Unknown). Webhooks with side effects MUST implement\ - \ a reconciliation system, since a request may be rejected by a future\ - \ step in the admission chain and the side effects therefore need to be\ - \ undone. Requests with the dryRun attribute will be auto-rejected if\ - \ they match a webhook with sideEffects == Unknown or Some." + - description: the custom resource's plural name. For TPRs this would be lowercase + plural kind. + in: path + name: plural + required: true + schema: type: string - timeoutSeconds: - description: "timeoutSeconds specifies the timeout for this webhook. After\ - \ the timeout passes, the webhook call will be ignored or the API call\ - \ will fail based on the failure policy. The timeout value must be between\ - \ 1 and 30 seconds. Default to 10 seconds." - format: int32 - type: integer - required: - - admissionReviewVersions - - clientConfig - - name - - sideEffects - type: object - v1.ValidatingWebhookConfiguration: - description: ValidatingWebhookConfiguration describes the configuration of and - admission webhook that accept or reject and object without changing it. - example: - metadata: - generation: 6 - finalizers: - - finalizers - - finalizers - resourceVersion: resourceVersion - annotations: - key: annotations - generateName: generateName - deletionTimestamp: 2000-01-23T04:56:07.000+00:00 - labels: - key: labels - ownerReferences: - - uid: uid - controller: true - apiVersion: apiVersion - kind: kind - name: name - blockOwnerDeletion: true - - uid: uid - controller: true - apiVersion: apiVersion - kind: kind - name: name - blockOwnerDeletion: true - selfLink: selfLink - deletionGracePeriodSeconds: 0 - uid: uid - managedFields: - - apiVersion: apiVersion - fieldsV1: "{}" - manager: manager - subresource: subresource - time: 2000-01-23T04:56:07.000+00:00 - operation: operation - fieldsType: fieldsType - - apiVersion: apiVersion - fieldsV1: "{}" - manager: manager - subresource: subresource - time: 2000-01-23T04:56:07.000+00:00 - operation: operation - fieldsType: fieldsType - creationTimestamp: 2000-01-23T04:56:07.000+00:00 - name: name - namespace: namespace - apiVersion: apiVersion - webhooks: - - admissionReviewVersions: - - admissionReviewVersions - - admissionReviewVersions - matchPolicy: matchPolicy - name: name - namespaceSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - timeoutSeconds: 0 - rules: - - operations: - - operations - - operations - apiVersions: - - apiVersions - - apiVersions - scope: scope - resources: - - resources - - resources - apiGroups: - - apiGroups - - apiGroups - - operations: - - operations - - operations - apiVersions: - - apiVersions - - apiVersions - scope: scope - resources: - - resources - - resources - apiGroups: - - apiGroups - - apiGroups - clientConfig: - caBundle: caBundle - service: - path: path - port: 0 - name: name - namespace: namespace - url: url - matchConditions: - - expression: expression - name: name - - expression: expression - name: name - objectSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - failurePolicy: failurePolicy - sideEffects: sideEffects - - admissionReviewVersions: - - admissionReviewVersions - - admissionReviewVersions - matchPolicy: matchPolicy - name: name - namespaceSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - timeoutSeconds: 0 - rules: - - operations: - - operations - - operations - apiVersions: - - apiVersions - - apiVersions - scope: scope - resources: - - resources - - resources - apiGroups: - - apiGroups - - apiGroups - - operations: - - operations - - operations - apiVersions: - - apiVersions - - apiVersions - scope: scope - resources: - - resources - - resources - apiGroups: - - apiGroups - - apiGroups - clientConfig: - caBundle: caBundle - service: - path: path - port: 0 - name: name - namespace: namespace - url: url - matchConditions: - - expression: expression - name: name - - expression: expression - name: name - objectSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - failurePolicy: failurePolicy - sideEffects: sideEffects - kind: kind - properties: - apiVersion: - description: "APIVersion defines the versioned schema of this representation\ - \ of an object. Servers should convert recognized schemas to the latest\ - \ internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources" - type: string - kind: - description: "Kind is a string value representing the REST resource this\ - \ object represents. Servers may infer this from the endpoint the client\ - \ submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds" + - description: the custom object's name + in: path + name: name + required: true + schema: type: string - metadata: - $ref: "#/components/schemas/v1.ObjectMeta" - webhooks: - description: webhooks is a list of webhooks and the affected resources and - operations. - items: - $ref: "#/components/schemas/v1.ValidatingWebhook" - type: array - x-kubernetes-patch-strategy: merge - x-kubernetes-list-type: map - x-kubernetes-list-map-keys: - - name - x-kubernetes-patch-merge-key: name - type: object - x-kubernetes-group-version-kind: - - group: admissionregistration.k8s.io - kind: ValidatingWebhookConfiguration - version: v1 - x-implements: - - io.kubernetes.client.common.KubernetesObject - v1.ValidatingWebhookConfigurationList: - description: ValidatingWebhookConfigurationList is a list of ValidatingWebhookConfiguration. - example: - metadata: - remainingItemCount: 1 - continue: continue - resourceVersion: resourceVersion - shardInfo: - selector: selector - selfLink: selfLink - apiVersion: apiVersion - kind: kind - items: - - metadata: - generation: 6 - finalizers: - - finalizers - - finalizers - resourceVersion: resourceVersion - annotations: - key: annotations - generateName: generateName - deletionTimestamp: 2000-01-23T04:56:07.000+00:00 - labels: - key: labels - ownerReferences: - - uid: uid - controller: true - apiVersion: apiVersion - kind: kind - name: name - blockOwnerDeletion: true - - uid: uid - controller: true - apiVersion: apiVersion - kind: kind - name: name - blockOwnerDeletion: true - selfLink: selfLink - deletionGracePeriodSeconds: 0 - uid: uid - managedFields: - - apiVersion: apiVersion - fieldsV1: "{}" - manager: manager - subresource: subresource - time: 2000-01-23T04:56:07.000+00:00 - operation: operation - fieldsType: fieldsType - - apiVersion: apiVersion - fieldsV1: "{}" - manager: manager - subresource: subresource - time: 2000-01-23T04:56:07.000+00:00 - operation: operation - fieldsType: fieldsType - creationTimestamp: 2000-01-23T04:56:07.000+00:00 - name: name - namespace: namespace - apiVersion: apiVersion - webhooks: - - admissionReviewVersions: - - admissionReviewVersions - - admissionReviewVersions - matchPolicy: matchPolicy - name: name - namespaceSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - timeoutSeconds: 0 - rules: - - operations: - - operations - - operations - apiVersions: - - apiVersions - - apiVersions - scope: scope - resources: - - resources - - resources - apiGroups: - - apiGroups - - apiGroups - - operations: - - operations - - operations - apiVersions: - - apiVersions - - apiVersions - scope: scope - resources: - - resources - - resources - apiGroups: - - apiGroups - - apiGroups - clientConfig: - caBundle: caBundle - service: - path: path - port: 0 - name: name - namespace: namespace - url: url - matchConditions: - - expression: expression - name: name - - expression: expression - name: name - objectSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - failurePolicy: failurePolicy - sideEffects: sideEffects - - admissionReviewVersions: - - admissionReviewVersions - - admissionReviewVersions - matchPolicy: matchPolicy - name: name - namespaceSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - timeoutSeconds: 0 - rules: - - operations: - - operations - - operations - apiVersions: - - apiVersions - - apiVersions - scope: scope - resources: - - resources - - resources - apiGroups: - - apiGroups - - apiGroups - - operations: - - operations - - operations - apiVersions: - - apiVersions - - apiVersions - scope: scope - resources: - - resources - - resources - apiGroups: - - apiGroups - - apiGroups - clientConfig: - caBundle: caBundle - service: - path: path - port: 0 - name: name - namespace: namespace - url: url - matchConditions: - - expression: expression - name: name - - expression: expression - name: name - objectSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - failurePolicy: failurePolicy - sideEffects: sideEffects - kind: kind - - metadata: - generation: 6 - finalizers: - - finalizers - - finalizers - resourceVersion: resourceVersion - annotations: - key: annotations - generateName: generateName - deletionTimestamp: 2000-01-23T04:56:07.000+00:00 - labels: - key: labels - ownerReferences: - - uid: uid - controller: true - apiVersion: apiVersion - kind: kind - name: name - blockOwnerDeletion: true - - uid: uid - controller: true - apiVersion: apiVersion - kind: kind - name: name - blockOwnerDeletion: true - selfLink: selfLink - deletionGracePeriodSeconds: 0 - uid: uid - managedFields: - - apiVersion: apiVersion - fieldsV1: "{}" - manager: manager - subresource: subresource - time: 2000-01-23T04:56:07.000+00:00 - operation: operation - fieldsType: fieldsType - - apiVersion: apiVersion - fieldsV1: "{}" - manager: manager - subresource: subresource - time: 2000-01-23T04:56:07.000+00:00 - operation: operation - fieldsType: fieldsType - creationTimestamp: 2000-01-23T04:56:07.000+00:00 - name: name - namespace: namespace - apiVersion: apiVersion - webhooks: - - admissionReviewVersions: - - admissionReviewVersions - - admissionReviewVersions - matchPolicy: matchPolicy - name: name - namespaceSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - timeoutSeconds: 0 - rules: - - operations: - - operations - - operations - apiVersions: - - apiVersions - - apiVersions - scope: scope - resources: - - resources - - resources - apiGroups: - - apiGroups - - apiGroups - - operations: - - operations - - operations - apiVersions: - - apiVersions - - apiVersions - scope: scope - resources: - - resources - - resources - apiGroups: - - apiGroups - - apiGroups - clientConfig: - caBundle: caBundle - service: - path: path - port: 0 - name: name - namespace: namespace - url: url - matchConditions: - - expression: expression - name: name - - expression: expression - name: name - objectSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - failurePolicy: failurePolicy - sideEffects: sideEffects - - admissionReviewVersions: - - admissionReviewVersions - - admissionReviewVersions - matchPolicy: matchPolicy - name: name - namespaceSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - timeoutSeconds: 0 - rules: - - operations: - - operations - - operations - apiVersions: - - apiVersions - - apiVersions - scope: scope - resources: - - resources - - resources - apiGroups: - - apiGroups - - apiGroups - - operations: - - operations - - operations - apiVersions: - - apiVersions - - apiVersions - scope: scope - resources: - - resources - - resources - apiGroups: - - apiGroups - - apiGroups - clientConfig: - caBundle: caBundle - service: - path: path - port: 0 - name: name - namespace: namespace - url: url - matchConditions: - - expression: expression - name: name - - expression: expression - name: name - objectSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - failurePolicy: failurePolicy - sideEffects: sideEffects - kind: kind - properties: - apiVersion: - description: "APIVersion defines the versioned schema of this representation\ - \ of an object. Servers should convert recognized schemas to the latest\ - \ internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources" + - description: "When present, indicates that modifications should not be persisted.\ + \ An invalid or unrecognized dryRun directive will result in an error response\ + \ and no further processing of the request. Valid values are: - All: all\ + \ dry run stages will be processed" + in: query + name: dryRun + schema: type: string - items: - description: List of ValidatingWebhookConfiguration. - items: - $ref: "#/components/schemas/v1.ValidatingWebhookConfiguration" - type: array - kind: - description: "Kind is a string value representing the REST resource this\ - \ object represents. Servers may infer this from the endpoint the client\ - \ submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds" + - description: "fieldManager is a name associated with the actor or entity that\ + \ is making these changes. The value must be less than or 128 characters\ + \ long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.\ + \ This field is required for apply requests (application/apply-patch) but\ + \ optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch)." + in: query + name: fieldManager + schema: type: string - metadata: - $ref: "#/components/schemas/v1.ListMeta" - required: - - items - type: object - x-kubernetes-group-version-kind: - - group: admissionregistration.k8s.io - kind: ValidatingWebhookConfigurationList - version: v1 - x-implements: - - io.kubernetes.client.common.KubernetesListObject - v1.Validation: - description: Validation specifies the CEL expression which is used to apply - the validation. - example: - reason: reason - expression: expression - messageExpression: messageExpression - message: message - properties: - expression: - description: "expression represents the expression which will be evaluated\ - \ by CEL. ref: https://github.com/google/cel-spec CEL expressions have\ - \ access to the contents of the API request/response, organized into CEL\ - \ variables as well as some other useful variables:\n\n- 'object' - The\ - \ object from the incoming request. The value is null for DELETE requests.\ - \ - 'oldObject' - The existing object. The value is null for CREATE requests.\ - \ - 'request' - Attributes of the API request([ref](/pkg/apis/admission/types.go#AdmissionRequest)).\ - \ - 'params' - Parameter resource referred to by the policy binding being\ - \ evaluated. Only populated if the policy has a ParamKind. - 'namespaceObject'\ - \ - The namespace object that the incoming object belongs to. The value\ - \ is null for cluster-scoped resources. - 'variables' - Map of composited\ - \ variables, from its name to its lazily evaluated value.\n For example,\ - \ a variable named 'foo' can be accessed as 'variables.foo'.\n- 'authorizer'\ - \ - A CEL Authorizer. May be used to perform authorization checks for\ - \ the principal (user or service account) of the request.\n See https://pkg.go.dev/k8s.io/apiserver/pkg/cel/library#Authz\n\ - - 'authorizer.requestResource' - A CEL ResourceCheck constructed from\ - \ the 'authorizer' and configured with the\n request resource.\n\nThe\ - \ `apiVersion`, `kind`, `metadata.name` and `metadata.generateName` are\ - \ always accessible from the root of the object. No other metadata properties\ - \ are accessible.\n\nOnly property names of the form `[a-zA-Z_.-/][a-zA-Z0-9_.-/]*`\ - \ are accessible. Accessible property names are escaped according to the\ - \ following rules when accessed in the expression: - '__' escapes to '__underscores__'\ - \ - '.' escapes to '__dot__' - '-' escapes to '__dash__' - '/' escapes\ - \ to '__slash__' - Property names that exactly match a CEL RESERVED keyword\ - \ escape to '__{keyword}__'. The keywords are:\n\t \"true\", \"false\"\ - , \"null\", \"in\", \"as\", \"break\", \"const\", \"continue\", \"else\"\ - , \"for\", \"function\", \"if\",\n\t \"import\", \"let\", \"loop\", \"\ - package\", \"namespace\", \"return\".\nExamples:\n - Expression accessing\ - \ a property named \"namespace\": {\"Expression\": \"object.__namespace__\ - \ > 0\"}\n - Expression accessing a property named \"x-prop\": {\"Expression\"\ - : \"object.x__dash__prop > 0\"}\n - Expression accessing a property named\ - \ \"redact__d\": {\"Expression\": \"object.redact__underscores__d > 0\"\ - }\n\nEquality on arrays with list type of 'set' or 'map' ignores element\ - \ order, i.e. [1, 2] == [2, 1]. Concatenation on arrays with x-kubernetes-list-type\ - \ use the semantics of the list type:\n - 'set': `X + Y` performs a union\ - \ where the array positions of all elements in `X` are preserved and\n\ - \ non-intersecting elements in `Y` are appended, retaining their partial\ - \ order.\n - 'map': `X + Y` performs a merge where the array positions\ - \ of all keys in `X` are preserved but the values\n are overwritten\ - \ by values in `Y` when the key sets of `X` and `Y` intersect. Elements\ - \ in `Y` with\n non-intersecting keys are appended, retaining their\ - \ partial order.\nRequired." + - description: "fieldValidation instructs the server on how to handle objects\ + \ in the request (POST/PUT/PATCH) containing unknown or duplicate fields.\ + \ Valid values are: - Ignore: This will ignore any unknown fields that are\ + \ silently dropped from the object, and will ignore all but the last duplicate\ + \ field that the decoder encounters. This is the default behavior prior\ + \ to v1.23. - Warn: This will send a warning via the standard warning response\ + \ header for each unknown field that is dropped from the object, and for\ + \ each duplicate field that is encountered. The request will still succeed\ + \ if there are no other errors, and will only persist the last of any duplicate\ + \ fields. This is the default in v1.23+ - Strict: This will fail the request\ + \ with a BadRequest error if any unknown fields would be dropped from the\ + \ object, or if any duplicate fields are present. The error returned from\ + \ the server will contain all unknown and duplicate fields encountered.\ + \ (optional)" + in: query + name: fieldValidation + schema: type: string - message: - description: "message represents the message displayed when validation fails.\ - \ The message is required if the Expression contains line breaks. The\ - \ message must not contain line breaks. If unset, the message is \"failed\ - \ rule: {Rule}\". e.g. \"must be a URL with the host matching spec.host\"\ - \ If the Expression contains line breaks. Message is required. The message\ - \ must not contain line breaks. If unset, the message is \"failed Expression:\ - \ {Expression}\"." + - description: Force is going to "force" Apply requests. It means user will + re-acquire conflicting fields owned by other people. Force flag must be + unset for non-apply patch requests. + in: query + name: force + schema: + type: boolean + requestBody: + content: + application/json: + schema: + description: The JSON schema of the Resource to patch. + type: object + required: true + responses: + "200": + content: + application/json: + schema: + type: object + application/yaml: + schema: + type: object + application/vnd.kubernetes.protobuf: + schema: + type: object + description: OK + "401": + content: {} + description: Unauthorized + tags: + - custom_objects + x-codegen-request-body-name: body + x-content-type: application/json + x-accepts: + - application/json + - application/vnd.kubernetes.protobuf + - application/yaml + put: + description: replace scale of the specified cluster scoped custom object + operationId: replaceClusterCustomObjectScale + parameters: + - description: the custom resource's group + in: path + name: group + required: true + schema: type: string - messageExpression: - description: "messageExpression declares a CEL expression that evaluates\ - \ to the validation failure message that is returned when this rule fails.\ - \ Since messageExpression is used as a failure message, it must evaluate\ - \ to a string. If both message and messageExpression are present on a\ - \ validation, then messageExpression will be used if validation fails.\ - \ If messageExpression results in a runtime error, the runtime error is\ - \ logged, and the validation failure message is produced as if the messageExpression\ - \ field were unset. If messageExpression evaluates to an empty string,\ - \ a string with only spaces, or a string that contains line breaks, then\ - \ the validation failure message will also be produced as if the messageExpression\ - \ field were unset, and the fact that messageExpression produced an empty\ - \ string/string with only spaces/string with line breaks will be logged.\ - \ messageExpression has access to all the same variables as the `expression`\ - \ except for 'authorizer' and 'authorizer.requestResource'. Example: \"\ - object.x must be less than max (\"+string(params.max)+\")\"" + - description: the custom resource's version + in: path + name: version + required: true + schema: type: string - reason: - description: "reason represents a machine-readable description of why this\ - \ validation failed. If this is the first validation in the list to fail,\ - \ this reason, as well as the corresponding HTTP response code, are used\ - \ in the HTTP response to the client. The currently supported reasons\ - \ are: \"Unauthorized\", \"Forbidden\", \"Invalid\", \"RequestEntityTooLarge\"\ - . If not set, StatusReasonInvalid is used in the response to the client." + - description: the custom resource's plural name. For TPRs this would be lowercase + plural kind. + in: path + name: plural + required: true + schema: type: string - required: - - expression - type: object - v1.Variable: - description: Variable is the definition of a variable that is used for composition. - A variable is defined as a named expression. - example: - expression: expression + - description: the custom object's name + in: path name: name - properties: - expression: - description: expression is the expression that will be evaluated as the - value of the variable. The CEL expression has access to the same identifiers - as the CEL expressions in Validation. + required: true + schema: type: string - name: - description: "name is the name of the variable. The name must be a valid\ - \ CEL identifier and unique among all variables. The variable can be accessed\ - \ in other expressions through `variables` For example, if name is \"\ - foo\", the variable will be available as `variables.foo`" + - description: "When present, indicates that modifications should not be persisted.\ + \ An invalid or unrecognized dryRun directive will result in an error response\ + \ and no further processing of the request. Valid values are: - All: all\ + \ dry run stages will be processed" + in: query + name: dryRun + schema: type: string - required: - - expression - - name - type: object - x-kubernetes-map-type: atomic - admissionregistration.v1.WebhookClientConfig: - description: WebhookClientConfig contains the information to make a TLS connection - with the webhook - example: - caBundle: caBundle - service: - path: path - port: 0 - name: name - namespace: namespace - url: url - properties: - caBundle: - description: "caBundle is a PEM encoded CA bundle which will be used to\ - \ validate the webhook's server certificate. If unspecified, system trust\ - \ roots on the apiserver are used." - format: byte - pattern: "^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$" + - description: "fieldManager is a name associated with the actor or entity that\ + \ is making these changes. The value must be less than or 128 characters\ + \ long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." + in: query + name: fieldManager + schema: type: string - service: - $ref: "#/components/schemas/admissionregistration.v1.ServiceReference" - url: - description: |- - url gives the location of the webhook, in standard URL form (`scheme://host:port/path`). Exactly one of `url` or `service` must be specified. - - The `host` should not refer to a service running in the cluster; use the `service` field instead. The host might be resolved via external DNS in some apiservers (e.g., `kube-apiserver` cannot resolve in-cluster DNS as that would be a layering violation). `host` may also be an IP address. - - Please note that using `localhost` or `127.0.0.1` as a `host` is risky unless you take great care to run this webhook on all hosts which run an apiserver which might need to make calls to this webhook. Such installs are likely to be non-portable, i.e., not easy to turn up in a new cluster. - - The scheme must be "https"; the URL must begin with "https://". - - A path is optional, and if present may be any string permissible in a URL. You may use the path to pass an arbitrary string to the webhook, for example, a cluster identifier. - - Attempting to use a user or basic auth e.g. "user:password@" is not allowed. Fragments ("#...") and query parameters ("?...") are not allowed, either. + - description: "fieldValidation instructs the server on how to handle objects\ + \ in the request (POST/PUT/PATCH) containing unknown or duplicate fields.\ + \ Valid values are: - Ignore: This will ignore any unknown fields that are\ + \ silently dropped from the object, and will ignore all but the last duplicate\ + \ field that the decoder encounters. This is the default behavior prior\ + \ to v1.23. - Warn: This will send a warning via the standard warning response\ + \ header for each unknown field that is dropped from the object, and for\ + \ each duplicate field that is encountered. The request will still succeed\ + \ if there are no other errors, and will only persist the last of any duplicate\ + \ fields. This is the default in v1.23+ - Strict: This will fail the request\ + \ with a BadRequest error if any unknown fields would be dropped from the\ + \ object, or if any duplicate fields are present. The error returned from\ + \ the server will contain all unknown and duplicate fields encountered.\ + \ (optional)" + in: query + name: fieldValidation + schema: type: string - type: object - v1alpha1.ApplyConfiguration: - description: ApplyConfiguration defines the desired configuration values of - an object. - example: - expression: expression - properties: - expression: - description: "expression will be evaluated by CEL to create an apply configuration.\ - \ ref: https://github.com/google/cel-spec\n\nApply configurations are\ - \ declared in CEL using object initialization. For example, this CEL expression\ - \ returns an apply configuration to set a single field:\n\n\tObject{\n\ - \t spec: Object.spec{\n\t serviceAccountName: \"example\"\n\t }\n\ - \t}\n\nApply configurations may not modify atomic structs, maps or arrays\ - \ due to the risk of accidental deletion of values not included in the\ - \ apply configuration.\n\nCEL expressions have access to the object types\ - \ needed to create apply configurations:\n\n- 'Object' - CEL type of the\ - \ resource object. - 'Object.' - CEL type of object field (such\ - \ as 'Object.spec') - 'Object.....`\ - \ - CEL type of nested field (such as 'Object.spec.containers')\n\nCEL\ - \ expressions have access to the contents of the API request, organized\ - \ into CEL variables as well as some other useful variables:\n\n- 'object'\ - \ - The object from the incoming request. The value is null for DELETE\ - \ requests. - 'oldObject' - The existing object. The value is null for\ - \ CREATE requests. - 'request' - Attributes of the API request([ref](/pkg/apis/admission/types.go#AdmissionRequest)).\ - \ - 'params' - Parameter resource referred to by the policy binding being\ - \ evaluated. Only populated if the policy has a ParamKind. - 'namespaceObject'\ - \ - The namespace object that the incoming object belongs to. The value\ - \ is null for cluster-scoped resources. - 'variables' - Map of composited\ - \ variables, from its name to its lazily evaluated value.\n For example,\ - \ a variable named 'foo' can be accessed as 'variables.foo'.\n- 'authorizer'\ - \ - A CEL Authorizer. May be used to perform authorization checks for\ - \ the principal (user or service account) of the request.\n See https://pkg.go.dev/k8s.io/apiserver/pkg/cel/library#Authz\n\ - - 'authorizer.requestResource' - A CEL ResourceCheck constructed from\ - \ the 'authorizer' and configured with the\n request resource.\n\nThe\ - \ `apiVersion`, `kind`, `metadata.name` and `metadata.generateName` are\ - \ always accessible from the root of the object. No other metadata properties\ - \ are accessible.\n\nOnly property names of the form `[a-zA-Z_.-/][a-zA-Z0-9_.-/]*`\ - \ are accessible. Required." + requestBody: + content: + application/json: + schema: + type: object + required: true + responses: + "200": + content: + application/json: + schema: + type: object + application/yaml: + schema: + type: object + application/vnd.kubernetes.protobuf: + schema: + type: object + description: OK + "201": + content: + application/json: + schema: + type: object + application/yaml: + schema: + type: object + application/vnd.kubernetes.protobuf: + schema: + type: object + description: Created + "401": + content: {} + description: Unauthorized + tags: + - custom_objects + x-codegen-request-body-name: body + x-content-type: application/json + x-accepts: + - application/json + - application/vnd.kubernetes.protobuf + - application/yaml + /apis/{group}/{version}/namespaces/{namespace}/{plural}/{name}: + delete: + description: Deletes the specified namespace scoped custom object + operationId: deleteNamespacedCustomObject + parameters: + - description: the custom resource's group + in: path + name: group + required: true + schema: type: string - type: object - v1alpha1.JSONPatch: - description: JSONPatch defines a JSON Patch. - example: - expression: expression - properties: - expression: - description: "expression will be evaluated by CEL to create a [JSON patch](https://jsonpatch.com/).\ - \ ref: https://github.com/google/cel-spec\n\nexpression must return an\ - \ array of JSONPatch values.\n\nFor example, this CEL expression returns\ - \ a JSON patch to conditionally modify a value:\n\n\t [\n\t JSONPatch{op:\ - \ \"test\", path: \"/spec/example\", value: \"Red\"},\n\t JSONPatch{op:\ - \ \"replace\", path: \"/spec/example\", value: \"Green\"}\n\t ]\n\nTo\ - \ define an object for the patch value, use Object types. For example:\n\ - \n\t [\n\t JSONPatch{\n\t op: \"add\",\n\t path: \"/spec/selector\"\ - ,\n\t value: Object.spec.selector{matchLabels: {\"environment\":\ - \ \"test\"}}\n\t }\n\t ]\n\nTo use strings containing '/' and '~'\ - \ as JSONPatch path keys, use \"jsonpatch.escapeKey\". For example:\n\n\ - \t [\n\t JSONPatch{\n\t op: \"add\",\n\t path: \"/metadata/labels/\"\ - \ + jsonpatch.escapeKey(\"example.com/environment\"),\n\t value:\ - \ \"test\"\n\t },\n\t ]\n\nCEL expressions have access to the types\ - \ needed to create JSON patches and objects:\n\n- 'JSONPatch' - CEL type\ - \ of JSON Patch operations. JSONPatch has the fields 'op', 'from', 'path'\ - \ and 'value'.\n See [JSON patch](https://jsonpatch.com/) for more details.\ - \ The 'value' field may be set to any of: string,\n integer, array, map\ - \ or object. If set, the 'path' and 'from' fields must be set to a\n\ - \ [JSON pointer](https://datatracker.ietf.org/doc/html/rfc6901/) string,\ - \ where the 'jsonpatch.escapeKey()' CEL\n function may be used to escape\ - \ path keys containing '/' and '~'.\n- 'Object' - CEL type of the resource\ - \ object. - 'Object.' - CEL type of object field (such as 'Object.spec')\ - \ - 'Object.....` - CEL type of nested\ - \ field (such as 'Object.spec.containers')\n\nCEL expressions have access\ - \ to the contents of the API request, organized into CEL variables as\ - \ well as some other useful variables:\n\n- 'object' - The object from\ - \ the incoming request. The value is null for DELETE requests. - 'oldObject'\ - \ - The existing object. The value is null for CREATE requests. - 'request'\ - \ - Attributes of the API request([ref](/pkg/apis/admission/types.go#AdmissionRequest)).\ - \ - 'params' - Parameter resource referred to by the policy binding being\ - \ evaluated. Only populated if the policy has a ParamKind. - 'namespaceObject'\ - \ - The namespace object that the incoming object belongs to. The value\ - \ is null for cluster-scoped resources. - 'variables' - Map of composited\ - \ variables, from its name to its lazily evaluated value.\n For example,\ - \ a variable named 'foo' can be accessed as 'variables.foo'.\n- 'authorizer'\ - \ - A CEL Authorizer. May be used to perform authorization checks for\ - \ the principal (user or service account) of the request.\n See https://pkg.go.dev/k8s.io/apiserver/pkg/cel/library#Authz\n\ - - 'authorizer.requestResource' - A CEL ResourceCheck constructed from\ - \ the 'authorizer' and configured with the\n request resource.\n\nCEL\ - \ expressions have access to [Kubernetes CEL function libraries](https://kubernetes.io/docs/reference/using-api/cel/#cel-options-language-features-and-libraries)\ - \ as well as:\n\n- 'jsonpatch.escapeKey' - Performs JSONPatch key escaping.\ - \ '~' and '/' are escaped as '~0' and `~1' respectively).\n\nOnly property\ - \ names of the form `[a-zA-Z_.-/][a-zA-Z0-9_.-/]*` are accessible. Required." + - description: the custom resource's version + in: path + name: version + required: true + schema: type: string - type: object - v1alpha1.MatchCondition: - example: - expression: expression - name: name - properties: - expression: - description: |- - expression represents the expression which will be evaluated by CEL. Must evaluate to bool. CEL expressions have access to the contents of the AdmissionRequest and Authorizer, organized into CEL variables: - - 'object' - The object from the incoming request. The value is null for DELETE requests. 'oldObject' - The existing object. The value is null for CREATE requests. 'request' - Attributes of the admission request(/pkg/apis/admission/types.go#AdmissionRequest). 'authorizer' - A CEL Authorizer. May be used to perform authorization checks for the principal (user or service account) of the request. - See https://pkg.go.dev/k8s.io/apiserver/pkg/cel/library#Authz - 'authorizer.requestResource' - A CEL ResourceCheck constructed from the 'authorizer' and configured with the - request resource. - Documentation on CEL: https://kubernetes.io/docs/reference/using-api/cel/ - - Required. + - description: The custom resource's namespace + in: path + name: namespace + required: true + schema: type: string - name: - description: |- - name is an identifier for this match condition, used for strategic merging of MatchConditions, as well as providing an identifier for logging purposes. A good name should be descriptive of the associated expression. Name must be a qualified name consisting of alphanumeric characters, '-', '_' or '.', and must start and end with an alphanumeric character (e.g. 'MyName', or 'my.name', or '123-abc', regex used for validation is '([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9]') with an optional DNS subdomain prefix and '/' (e.g. 'example.com/MyName') - - Required. + - description: the custom resource's plural name. For TPRs this would be lowercase + plural kind. + in: path + name: plural + required: true + schema: type: string - required: - - expression - - name - type: object - v1alpha1.MatchResources: - description: "MatchResources decides whether to run the admission control policy\ - \ on an object based on whether it meets the match criteria. The exclude rules\ - \ take precedence over include rules (if a resource matches both, it is excluded)" - example: - matchPolicy: matchPolicy - resourceRules: - - resourceNames: - - resourceNames - - resourceNames - operations: - - operations - - operations - apiVersions: - - apiVersions - - apiVersions - scope: scope - resources: - - resources - - resources - apiGroups: - - apiGroups - - apiGroups - - resourceNames: - - resourceNames - - resourceNames - operations: - - operations - - operations - apiVersions: - - apiVersions - - apiVersions - scope: scope - resources: - - resources - - resources - apiGroups: - - apiGroups - - apiGroups - excludeResourceRules: - - resourceNames: - - resourceNames - - resourceNames - operations: - - operations - - operations - apiVersions: - - apiVersions - - apiVersions - scope: scope - resources: - - resources - - resources - apiGroups: - - apiGroups - - apiGroups - - resourceNames: - - resourceNames - - resourceNames - operations: - - operations - - operations - apiVersions: - - apiVersions - - apiVersions - scope: scope - resources: - - resources - - resources - apiGroups: - - apiGroups - - apiGroups - namespaceSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - objectSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - properties: - excludeResourceRules: - description: "excludeResourceRules describes what operations on what resources/subresources\ - \ the policy should not care about. The exclude rules take precedence\ - \ over include rules (if a resource matches both, it is excluded)" - items: - $ref: "#/components/schemas/v1alpha1.NamedRuleWithOperations" - type: array - x-kubernetes-list-type: atomic - matchPolicy: - description: |- - matchPolicy defines how the "MatchResources" list is used to match incoming requests. Allowed values are "Exact" or "Equivalent". - - - Exact: match a request only if it exactly matches a specified rule. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, but "rules" only included `apiGroups:["apps"], apiVersions:["v1"], resources: ["deployments"]`, the admission policy does not consider requests to apps/v1beta1 or extensions/v1beta1 API groups. - - - Equivalent: match a request if modifies a resource listed in rules, even via another API group or version. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, and "rules" only included `apiGroups:["apps"], apiVersions:["v1"], resources: ["deployments"]`, the admission policy **does** consider requests made to apps/v1beta1 or extensions/v1beta1 API groups. The API server translates the request to a matched resource API if necessary. - - Defaults to "Equivalent" + - description: the custom object's name + in: path + name: name + required: true + schema: type: string - namespaceSelector: - $ref: "#/components/schemas/v1.LabelSelector" - objectSelector: - $ref: "#/components/schemas/v1.LabelSelector" - resourceRules: - description: resourceRules describes what operations on what resources/subresources - the admission policy matches. The policy cares about an operation if it - matches _any_ Rule. - items: - $ref: "#/components/schemas/v1alpha1.NamedRuleWithOperations" - type: array - x-kubernetes-list-type: atomic - type: object - x-kubernetes-map-type: atomic - v1alpha1.MutatingAdmissionPolicy: - description: MutatingAdmissionPolicy describes the definition of an admission - mutation policy that mutates the object coming into admission chain. - example: - metadata: - generation: 6 - finalizers: - - finalizers - - finalizers - resourceVersion: resourceVersion - annotations: - key: annotations - generateName: generateName - deletionTimestamp: 2000-01-23T04:56:07.000+00:00 - labels: - key: labels - ownerReferences: - - uid: uid - controller: true - apiVersion: apiVersion - kind: kind - name: name - blockOwnerDeletion: true - - uid: uid - controller: true - apiVersion: apiVersion - kind: kind - name: name - blockOwnerDeletion: true - selfLink: selfLink - deletionGracePeriodSeconds: 0 - uid: uid - managedFields: - - apiVersion: apiVersion - fieldsV1: "{}" - manager: manager - subresource: subresource - time: 2000-01-23T04:56:07.000+00:00 - operation: operation - fieldsType: fieldsType - - apiVersion: apiVersion - fieldsV1: "{}" - manager: manager - subresource: subresource - time: 2000-01-23T04:56:07.000+00:00 - operation: operation - fieldsType: fieldsType - creationTimestamp: 2000-01-23T04:56:07.000+00:00 - name: name - namespace: namespace - apiVersion: apiVersion - kind: kind - spec: - reinvocationPolicy: reinvocationPolicy - variables: - - expression: expression - name: name - - expression: expression - name: name - mutations: - - patchType: patchType - applyConfiguration: - expression: expression - jsonPatch: - expression: expression - - patchType: patchType - applyConfiguration: - expression: expression - jsonPatch: - expression: expression - paramKind: - apiVersion: apiVersion - kind: kind - matchConditions: - - expression: expression - name: name - - expression: expression - name: name - matchConstraints: - matchPolicy: matchPolicy - resourceRules: - - resourceNames: - - resourceNames - - resourceNames - operations: - - operations - - operations - apiVersions: - - apiVersions - - apiVersions - scope: scope - resources: - - resources - - resources - apiGroups: - - apiGroups - - apiGroups - - resourceNames: - - resourceNames - - resourceNames - operations: - - operations - - operations - apiVersions: - - apiVersions - - apiVersions - scope: scope - resources: - - resources - - resources - apiGroups: - - apiGroups - - apiGroups - excludeResourceRules: - - resourceNames: - - resourceNames - - resourceNames - operations: - - operations - - operations - apiVersions: - - apiVersions - - apiVersions - scope: scope - resources: - - resources - - resources - apiGroups: - - apiGroups - - apiGroups - - resourceNames: - - resourceNames - - resourceNames - operations: - - operations - - operations - apiVersions: - - apiVersions - - apiVersions - scope: scope - resources: - - resources - - resources - apiGroups: - - apiGroups - - apiGroups - namespaceSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - objectSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - failurePolicy: failurePolicy - properties: - apiVersion: - description: "APIVersion defines the versioned schema of this representation\ - \ of an object. Servers should convert recognized schemas to the latest\ - \ internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources" + - description: "The duration in seconds before the object should be deleted.\ + \ Value must be non-negative integer. The value zero indicates delete immediately.\ + \ If this value is nil, the default grace period for the specified type\ + \ will be used. Defaults to a per object value if not specified. zero means\ + \ delete immediately." + in: query + name: gracePeriodSeconds + schema: + type: integer + - description: "Deprecated: please use the PropagationPolicy, this field will\ + \ be deprecated in 1.7. Should the dependent objects be orphaned. If true/false,\ + \ the \"orphan\" finalizer will be added to/removed from the object's finalizers\ + \ list. Either this field or PropagationPolicy may be set, but not both." + in: query + name: orphanDependents + schema: + type: boolean + - description: "Whether and how garbage collection will be performed. Either\ + \ this field or OrphanDependents may be set, but not both. The default policy\ + \ is decided by the existing finalizer set in the metadata.finalizers and\ + \ the resource-specific default policy." + in: query + name: propagationPolicy + schema: type: string - kind: - description: "Kind is a string value representing the REST resource this\ - \ object represents. Servers may infer this from the endpoint the client\ - \ submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds" + - description: "When present, indicates that modifications should not be persisted.\ + \ An invalid or unrecognized dryRun directive will result in an error response\ + \ and no further processing of the request. Valid values are: - All: all\ + \ dry run stages will be processed" + in: query + name: dryRun + schema: type: string - metadata: - $ref: "#/components/schemas/v1.ObjectMeta" - spec: - $ref: "#/components/schemas/v1alpha1.MutatingAdmissionPolicySpec" - type: object - x-kubernetes-group-version-kind: - - group: admissionregistration.k8s.io - kind: MutatingAdmissionPolicy - version: v1alpha1 - x-implements: - - io.kubernetes.client.common.KubernetesObject - v1alpha1.MutatingAdmissionPolicyBinding: - description: |- - MutatingAdmissionPolicyBinding binds the MutatingAdmissionPolicy with parametrized resources. MutatingAdmissionPolicyBinding and the optional parameter resource together define how cluster administrators configure policies for clusters. - - For a given admission request, each binding will cause its policy to be evaluated N times, where N is 1 for policies/bindings that don't use params, otherwise N is the number of parameters selected by the binding. Each evaluation is constrained by a [runtime cost budget](https://kubernetes.io/docs/reference/using-api/cel/#runtime-cost-budget). - - Adding/removing policies, bindings, or params can not affect whether a given (policy, binding, param) combination is within its own CEL budget. - example: - metadata: - generation: 6 - finalizers: - - finalizers - - finalizers - resourceVersion: resourceVersion - annotations: - key: annotations - generateName: generateName - deletionTimestamp: 2000-01-23T04:56:07.000+00:00 - labels: - key: labels - ownerReferences: - - uid: uid - controller: true - apiVersion: apiVersion - kind: kind - name: name - blockOwnerDeletion: true - - uid: uid - controller: true - apiVersion: apiVersion - kind: kind - name: name - blockOwnerDeletion: true - selfLink: selfLink - deletionGracePeriodSeconds: 0 - uid: uid - managedFields: - - apiVersion: apiVersion - fieldsV1: "{}" - manager: manager - subresource: subresource - time: 2000-01-23T04:56:07.000+00:00 - operation: operation - fieldsType: fieldsType - - apiVersion: apiVersion - fieldsV1: "{}" - manager: manager - subresource: subresource - time: 2000-01-23T04:56:07.000+00:00 - operation: operation - fieldsType: fieldsType - creationTimestamp: 2000-01-23T04:56:07.000+00:00 - name: name - namespace: namespace - apiVersion: apiVersion - kind: kind - spec: - paramRef: - name: name - namespace: namespace - selector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - parameterNotFoundAction: parameterNotFoundAction - policyName: policyName - matchResources: - matchPolicy: matchPolicy - resourceRules: - - resourceNames: - - resourceNames - - resourceNames - operations: - - operations - - operations - apiVersions: - - apiVersions - - apiVersions - scope: scope - resources: - - resources - - resources - apiGroups: - - apiGroups - - apiGroups - - resourceNames: - - resourceNames - - resourceNames - operations: - - operations - - operations - apiVersions: - - apiVersions - - apiVersions - scope: scope - resources: - - resources - - resources - apiGroups: - - apiGroups - - apiGroups - excludeResourceRules: - - resourceNames: - - resourceNames - - resourceNames - operations: - - operations - - operations - apiVersions: - - apiVersions - - apiVersions - scope: scope - resources: - - resources - - resources - apiGroups: - - apiGroups - - apiGroups - - resourceNames: - - resourceNames - - resourceNames - operations: - - operations - - operations - apiVersions: - - apiVersions - - apiVersions - scope: scope - resources: - - resources - - resources - apiGroups: - - apiGroups - - apiGroups - namespaceSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - objectSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - properties: - apiVersion: - description: "APIVersion defines the versioned schema of this representation\ - \ of an object. Servers should convert recognized schemas to the latest\ - \ internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources" + requestBody: + content: + application/json: + schema: + $ref: "#/components/schemas/v1.DeleteOptions" + required: false + responses: + "200": + content: + application/json: + schema: + type: object + description: OK + "401": + content: {} + description: Unauthorized + tags: + - custom_objects + x-codegen-request-body-name: body + x-content-type: application/json + x-accepts: + - application/json + get: + description: Returns a namespace scoped custom object + operationId: getNamespacedCustomObject + parameters: + - description: the custom resource's group + in: path + name: group + required: true + schema: type: string - kind: - description: "Kind is a string value representing the REST resource this\ - \ object represents. Servers may infer this from the endpoint the client\ - \ submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds" + - description: the custom resource's version + in: path + name: version + required: true + schema: type: string - metadata: - $ref: "#/components/schemas/v1.ObjectMeta" - spec: - $ref: "#/components/schemas/v1alpha1.MutatingAdmissionPolicyBindingSpec" - type: object - x-kubernetes-group-version-kind: - - group: admissionregistration.k8s.io - kind: MutatingAdmissionPolicyBinding - version: v1alpha1 - x-implements: - - io.kubernetes.client.common.KubernetesObject - v1alpha1.MutatingAdmissionPolicyBindingList: - description: MutatingAdmissionPolicyBindingList is a list of MutatingAdmissionPolicyBinding. - example: - metadata: - remainingItemCount: 1 - continue: continue - resourceVersion: resourceVersion - shardInfo: - selector: selector - selfLink: selfLink - apiVersion: apiVersion - kind: kind - items: - - metadata: - generation: 6 - finalizers: - - finalizers - - finalizers - resourceVersion: resourceVersion - annotations: - key: annotations - generateName: generateName - deletionTimestamp: 2000-01-23T04:56:07.000+00:00 - labels: - key: labels - ownerReferences: - - uid: uid - controller: true - apiVersion: apiVersion - kind: kind - name: name - blockOwnerDeletion: true - - uid: uid - controller: true - apiVersion: apiVersion - kind: kind - name: name - blockOwnerDeletion: true - selfLink: selfLink - deletionGracePeriodSeconds: 0 - uid: uid - managedFields: - - apiVersion: apiVersion - fieldsV1: "{}" - manager: manager - subresource: subresource - time: 2000-01-23T04:56:07.000+00:00 - operation: operation - fieldsType: fieldsType - - apiVersion: apiVersion - fieldsV1: "{}" - manager: manager - subresource: subresource - time: 2000-01-23T04:56:07.000+00:00 - operation: operation - fieldsType: fieldsType - creationTimestamp: 2000-01-23T04:56:07.000+00:00 - name: name - namespace: namespace - apiVersion: apiVersion - kind: kind - spec: - paramRef: - name: name - namespace: namespace - selector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - parameterNotFoundAction: parameterNotFoundAction - policyName: policyName - matchResources: - matchPolicy: matchPolicy - resourceRules: - - resourceNames: - - resourceNames - - resourceNames - operations: - - operations - - operations - apiVersions: - - apiVersions - - apiVersions - scope: scope - resources: - - resources - - resources - apiGroups: - - apiGroups - - apiGroups - - resourceNames: - - resourceNames - - resourceNames - operations: - - operations - - operations - apiVersions: - - apiVersions - - apiVersions - scope: scope - resources: - - resources - - resources - apiGroups: - - apiGroups - - apiGroups - excludeResourceRules: - - resourceNames: - - resourceNames - - resourceNames - operations: - - operations - - operations - apiVersions: - - apiVersions - - apiVersions - scope: scope - resources: - - resources - - resources - apiGroups: - - apiGroups - - apiGroups - - resourceNames: - - resourceNames - - resourceNames - operations: - - operations - - operations - apiVersions: - - apiVersions - - apiVersions - scope: scope - resources: - - resources - - resources - apiGroups: - - apiGroups - - apiGroups - namespaceSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - objectSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - - metadata: - generation: 6 - finalizers: - - finalizers - - finalizers - resourceVersion: resourceVersion - annotations: - key: annotations - generateName: generateName - deletionTimestamp: 2000-01-23T04:56:07.000+00:00 - labels: - key: labels - ownerReferences: - - uid: uid - controller: true - apiVersion: apiVersion - kind: kind - name: name - blockOwnerDeletion: true - - uid: uid - controller: true - apiVersion: apiVersion - kind: kind - name: name - blockOwnerDeletion: true - selfLink: selfLink - deletionGracePeriodSeconds: 0 - uid: uid - managedFields: - - apiVersion: apiVersion - fieldsV1: "{}" - manager: manager - subresource: subresource - time: 2000-01-23T04:56:07.000+00:00 - operation: operation - fieldsType: fieldsType - - apiVersion: apiVersion - fieldsV1: "{}" - manager: manager - subresource: subresource - time: 2000-01-23T04:56:07.000+00:00 - operation: operation - fieldsType: fieldsType - creationTimestamp: 2000-01-23T04:56:07.000+00:00 - name: name - namespace: namespace - apiVersion: apiVersion - kind: kind - spec: - paramRef: - name: name - namespace: namespace - selector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - parameterNotFoundAction: parameterNotFoundAction - policyName: policyName - matchResources: - matchPolicy: matchPolicy - resourceRules: - - resourceNames: - - resourceNames - - resourceNames - operations: - - operations - - operations - apiVersions: - - apiVersions - - apiVersions - scope: scope - resources: - - resources - - resources - apiGroups: - - apiGroups - - apiGroups - - resourceNames: - - resourceNames - - resourceNames - operations: - - operations - - operations - apiVersions: - - apiVersions - - apiVersions - scope: scope - resources: - - resources - - resources - apiGroups: - - apiGroups - - apiGroups - excludeResourceRules: - - resourceNames: - - resourceNames - - resourceNames - operations: - - operations - - operations - apiVersions: - - apiVersions - - apiVersions - scope: scope - resources: - - resources - - resources - apiGroups: - - apiGroups - - apiGroups - - resourceNames: - - resourceNames - - resourceNames - operations: - - operations - - operations - apiVersions: - - apiVersions - - apiVersions - scope: scope - resources: - - resources - - resources - apiGroups: - - apiGroups - - apiGroups - namespaceSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - objectSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - properties: - apiVersion: - description: "APIVersion defines the versioned schema of this representation\ - \ of an object. Servers should convert recognized schemas to the latest\ - \ internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources" + - description: The custom resource's namespace + in: path + name: namespace + required: true + schema: type: string - items: - description: List of PolicyBinding. - items: - $ref: "#/components/schemas/v1alpha1.MutatingAdmissionPolicyBinding" - type: array - kind: - description: "Kind is a string value representing the REST resource this\ - \ object represents. Servers may infer this from the endpoint the client\ - \ submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds" + - description: the custom resource's plural name. For TPRs this would be lowercase + plural kind. + in: path + name: plural + required: true + schema: type: string - metadata: - $ref: "#/components/schemas/v1.ListMeta" - required: - - items - type: object - x-kubernetes-group-version-kind: - - group: admissionregistration.k8s.io - kind: MutatingAdmissionPolicyBindingList - version: v1alpha1 - x-implements: - - io.kubernetes.client.common.KubernetesListObject - v1alpha1.MutatingAdmissionPolicyBindingSpec: - description: MutatingAdmissionPolicyBindingSpec is the specification of the - MutatingAdmissionPolicyBinding. - example: - paramRef: - name: name - namespace: namespace - selector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - parameterNotFoundAction: parameterNotFoundAction - policyName: policyName - matchResources: - matchPolicy: matchPolicy - resourceRules: - - resourceNames: - - resourceNames - - resourceNames - operations: - - operations - - operations - apiVersions: - - apiVersions - - apiVersions - scope: scope - resources: - - resources - - resources - apiGroups: - - apiGroups - - apiGroups - - resourceNames: - - resourceNames - - resourceNames - operations: - - operations - - operations - apiVersions: - - apiVersions - - apiVersions - scope: scope - resources: - - resources - - resources - apiGroups: - - apiGroups - - apiGroups - excludeResourceRules: - - resourceNames: - - resourceNames - - resourceNames - operations: - - operations - - operations - apiVersions: - - apiVersions - - apiVersions - scope: scope - resources: - - resources - - resources - apiGroups: - - apiGroups - - apiGroups - - resourceNames: - - resourceNames - - resourceNames - operations: - - operations - - operations - apiVersions: - - apiVersions - - apiVersions - scope: scope - resources: - - resources - - resources - apiGroups: - - apiGroups - - apiGroups - namespaceSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - objectSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - properties: - matchResources: - $ref: "#/components/schemas/v1alpha1.MatchResources" - paramRef: - $ref: "#/components/schemas/v1alpha1.ParamRef" - policyName: - description: "policyName references a MutatingAdmissionPolicy name which\ - \ the MutatingAdmissionPolicyBinding binds to. If the referenced resource\ - \ does not exist, this binding is considered invalid and will be ignored\ - \ Required." + - description: the custom object's name + in: path + name: name + required: true + schema: type: string - type: object - v1alpha1.MutatingAdmissionPolicyList: - description: MutatingAdmissionPolicyList is a list of MutatingAdmissionPolicy. - example: - metadata: - remainingItemCount: 1 - continue: continue - resourceVersion: resourceVersion - shardInfo: - selector: selector - selfLink: selfLink - apiVersion: apiVersion - kind: kind - items: - - metadata: - generation: 6 - finalizers: - - finalizers - - finalizers - resourceVersion: resourceVersion - annotations: - key: annotations - generateName: generateName - deletionTimestamp: 2000-01-23T04:56:07.000+00:00 - labels: - key: labels - ownerReferences: - - uid: uid - controller: true - apiVersion: apiVersion - kind: kind - name: name - blockOwnerDeletion: true - - uid: uid - controller: true - apiVersion: apiVersion - kind: kind - name: name - blockOwnerDeletion: true - selfLink: selfLink - deletionGracePeriodSeconds: 0 - uid: uid - managedFields: - - apiVersion: apiVersion - fieldsV1: "{}" - manager: manager - subresource: subresource - time: 2000-01-23T04:56:07.000+00:00 - operation: operation - fieldsType: fieldsType - - apiVersion: apiVersion - fieldsV1: "{}" - manager: manager - subresource: subresource - time: 2000-01-23T04:56:07.000+00:00 - operation: operation - fieldsType: fieldsType - creationTimestamp: 2000-01-23T04:56:07.000+00:00 - name: name - namespace: namespace - apiVersion: apiVersion - kind: kind - spec: - reinvocationPolicy: reinvocationPolicy - variables: - - expression: expression - name: name - - expression: expression - name: name - mutations: - - patchType: patchType - applyConfiguration: - expression: expression - jsonPatch: - expression: expression - - patchType: patchType - applyConfiguration: - expression: expression - jsonPatch: - expression: expression - paramKind: - apiVersion: apiVersion - kind: kind - matchConditions: - - expression: expression - name: name - - expression: expression - name: name - matchConstraints: - matchPolicy: matchPolicy - resourceRules: - - resourceNames: - - resourceNames - - resourceNames - operations: - - operations - - operations - apiVersions: - - apiVersions - - apiVersions - scope: scope - resources: - - resources - - resources - apiGroups: - - apiGroups - - apiGroups - - resourceNames: - - resourceNames - - resourceNames - operations: - - operations - - operations - apiVersions: - - apiVersions - - apiVersions - scope: scope - resources: - - resources - - resources - apiGroups: - - apiGroups - - apiGroups - excludeResourceRules: - - resourceNames: - - resourceNames - - resourceNames - operations: - - operations - - operations - apiVersions: - - apiVersions - - apiVersions - scope: scope - resources: - - resources - - resources - apiGroups: - - apiGroups - - apiGroups - - resourceNames: - - resourceNames - - resourceNames - operations: - - operations - - operations - apiVersions: - - apiVersions - - apiVersions - scope: scope - resources: - - resources - - resources - apiGroups: - - apiGroups - - apiGroups - namespaceSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - objectSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - failurePolicy: failurePolicy - - metadata: - generation: 6 - finalizers: - - finalizers - - finalizers - resourceVersion: resourceVersion - annotations: - key: annotations - generateName: generateName - deletionTimestamp: 2000-01-23T04:56:07.000+00:00 - labels: - key: labels - ownerReferences: - - uid: uid - controller: true - apiVersion: apiVersion - kind: kind - name: name - blockOwnerDeletion: true - - uid: uid - controller: true - apiVersion: apiVersion - kind: kind - name: name - blockOwnerDeletion: true - selfLink: selfLink - deletionGracePeriodSeconds: 0 - uid: uid - managedFields: - - apiVersion: apiVersion - fieldsV1: "{}" - manager: manager - subresource: subresource - time: 2000-01-23T04:56:07.000+00:00 - operation: operation - fieldsType: fieldsType - - apiVersion: apiVersion - fieldsV1: "{}" - manager: manager - subresource: subresource - time: 2000-01-23T04:56:07.000+00:00 - operation: operation - fieldsType: fieldsType - creationTimestamp: 2000-01-23T04:56:07.000+00:00 - name: name - namespace: namespace - apiVersion: apiVersion - kind: kind - spec: - reinvocationPolicy: reinvocationPolicy - variables: - - expression: expression - name: name - - expression: expression - name: name - mutations: - - patchType: patchType - applyConfiguration: - expression: expression - jsonPatch: - expression: expression - - patchType: patchType - applyConfiguration: - expression: expression - jsonPatch: - expression: expression - paramKind: - apiVersion: apiVersion - kind: kind - matchConditions: - - expression: expression - name: name - - expression: expression - name: name - matchConstraints: - matchPolicy: matchPolicy - resourceRules: - - resourceNames: - - resourceNames - - resourceNames - operations: - - operations - - operations - apiVersions: - - apiVersions - - apiVersions - scope: scope - resources: - - resources - - resources - apiGroups: - - apiGroups - - apiGroups - - resourceNames: - - resourceNames - - resourceNames - operations: - - operations - - operations - apiVersions: - - apiVersions - - apiVersions - scope: scope - resources: - - resources - - resources - apiGroups: - - apiGroups - - apiGroups - excludeResourceRules: - - resourceNames: - - resourceNames - - resourceNames - operations: - - operations - - operations - apiVersions: - - apiVersions - - apiVersions - scope: scope - resources: - - resources - - resources - apiGroups: - - apiGroups - - apiGroups - - resourceNames: - - resourceNames - - resourceNames - operations: - - operations - - operations - apiVersions: - - apiVersions - - apiVersions - scope: scope - resources: - - resources - - resources - apiGroups: - - apiGroups - - apiGroups - namespaceSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - objectSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - failurePolicy: failurePolicy - properties: - apiVersion: - description: "APIVersion defines the versioned schema of this representation\ - \ of an object. Servers should convert recognized schemas to the latest\ - \ internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources" + responses: + "200": + content: + application/json: + schema: + type: object + description: A single Resource + "401": + content: {} + description: Unauthorized + tags: + - custom_objects + x-accepts: + - application/json + patch: + description: patch the specified namespace scoped custom object + operationId: patchNamespacedCustomObject + parameters: + - description: the custom resource's group + in: path + name: group + required: true + schema: type: string - items: - description: List of ValidatingAdmissionPolicy. - items: - $ref: "#/components/schemas/v1alpha1.MutatingAdmissionPolicy" - type: array - kind: - description: "Kind is a string value representing the REST resource this\ - \ object represents. Servers may infer this from the endpoint the client\ - \ submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds" + - description: the custom resource's version + in: path + name: version + required: true + schema: type: string - metadata: - $ref: "#/components/schemas/v1.ListMeta" - required: - - items - type: object - x-kubernetes-group-version-kind: - - group: admissionregistration.k8s.io - kind: MutatingAdmissionPolicyList - version: v1alpha1 - x-implements: - - io.kubernetes.client.common.KubernetesListObject - v1alpha1.MutatingAdmissionPolicySpec: - description: MutatingAdmissionPolicySpec is the specification of the desired - behavior of the admission policy. - example: - reinvocationPolicy: reinvocationPolicy - variables: - - expression: expression - name: name - - expression: expression - name: name - mutations: - - patchType: patchType - applyConfiguration: - expression: expression - jsonPatch: - expression: expression - - patchType: patchType - applyConfiguration: - expression: expression - jsonPatch: - expression: expression - paramKind: - apiVersion: apiVersion - kind: kind - matchConditions: - - expression: expression - name: name - - expression: expression - name: name - matchConstraints: - matchPolicy: matchPolicy - resourceRules: - - resourceNames: - - resourceNames - - resourceNames - operations: - - operations - - operations - apiVersions: - - apiVersions - - apiVersions - scope: scope - resources: - - resources - - resources - apiGroups: - - apiGroups - - apiGroups - - resourceNames: - - resourceNames - - resourceNames - operations: - - operations - - operations - apiVersions: - - apiVersions - - apiVersions - scope: scope - resources: - - resources - - resources - apiGroups: - - apiGroups - - apiGroups - excludeResourceRules: - - resourceNames: - - resourceNames - - resourceNames - operations: - - operations - - operations - apiVersions: - - apiVersions - - apiVersions - scope: scope - resources: - - resources - - resources - apiGroups: - - apiGroups - - apiGroups - - resourceNames: - - resourceNames - - resourceNames - operations: - - operations - - operations - apiVersions: - - apiVersions - - apiVersions - scope: scope - resources: - - resources - - resources - apiGroups: - - apiGroups - - apiGroups - namespaceSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - objectSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - failurePolicy: failurePolicy - properties: - failurePolicy: - description: |- - failurePolicy defines how to handle failures for the admission policy. Failures can occur from CEL expression parse errors, type check errors, runtime errors and invalid or mis-configured policy definitions or bindings. - - A policy is invalid if paramKind refers to a non-existent Kind. A binding is invalid if paramRef.name refers to a non-existent resource. - - failurePolicy does not define how validations that evaluate to false are handled. - - Allowed values are Ignore or Fail. Defaults to Fail. + - description: The custom resource's namespace + in: path + name: namespace + required: true + schema: type: string - matchConditions: - description: |- - matchConditions is a list of conditions that must be met for a request to be validated. Match conditions filter requests that have already been matched by the matchConstraints. An empty list of matchConditions matches all requests. There are a maximum of 64 match conditions allowed. - - If a parameter object is provided, it can be accessed via the `params` handle in the same manner as validation expressions. - - The exact matching logic is (in order): - 1. If ANY matchCondition evaluates to FALSE, the policy is skipped. - 2. If ALL matchConditions evaluate to TRUE, the policy is evaluated. - 3. If any matchCondition evaluates to an error (but none are FALSE): - - If failurePolicy=Fail, reject the request - - If failurePolicy=Ignore, the policy is skipped - items: - $ref: "#/components/schemas/v1alpha1.MatchCondition" - type: array - x-kubernetes-patch-strategy: merge - x-kubernetes-list-type: map - x-kubernetes-list-map-keys: - - name - x-kubernetes-patch-merge-key: name - matchConstraints: - $ref: "#/components/schemas/v1alpha1.MatchResources" - mutations: - description: "mutations contain operations to perform on matching objects.\ - \ mutations may not be empty; a minimum of one mutation is required. mutations\ - \ are evaluated in order, and are reinvoked according to the reinvocationPolicy.\ - \ The mutations of a policy are invoked for each binding of this policy\ - \ and reinvocation of mutations occurs on a per binding basis." - items: - $ref: "#/components/schemas/v1alpha1.Mutation" - type: array - x-kubernetes-list-type: atomic - paramKind: - $ref: "#/components/schemas/v1alpha1.ParamKind" - reinvocationPolicy: - description: |- - reinvocationPolicy indicates whether mutations may be called multiple times per MutatingAdmissionPolicyBinding as part of a single admission evaluation. Allowed values are "Never" and "IfNeeded". - - Never: These mutations will not be called more than once per binding in a single admission evaluation. - - IfNeeded: These mutations may be invoked more than once per binding for a single admission request and there is no guarantee of order with respect to other admission plugins, admission webhooks, bindings of this policy and admission policies. Mutations are only reinvoked when mutations change the object after this mutation is invoked. Required. + - description: the custom resource's plural name. For TPRs this would be lowercase + plural kind. + in: path + name: plural + required: true + schema: type: string - variables: - description: |- - variables contain definitions of variables that can be used in composition of other expressions. Each variable is defined as a named CEL expression. The variables defined here will be available under `variables` in other expressions of the policy except matchConditions because matchConditions are evaluated before the rest of the policy. - - The expression of a variable can refer to other variables defined earlier in the list but not those after. Thus, variables must be sorted by the order of first appearance and acyclic. - items: - $ref: "#/components/schemas/v1alpha1.Variable" - type: array - x-kubernetes-list-type: atomic - type: object - v1alpha1.Mutation: - description: Mutation specifies the CEL expression which is used to apply the - Mutation. - example: - patchType: patchType - applyConfiguration: - expression: expression - jsonPatch: - expression: expression - properties: - applyConfiguration: - $ref: "#/components/schemas/v1alpha1.ApplyConfiguration" - jsonPatch: - $ref: "#/components/schemas/v1alpha1.JSONPatch" - patchType: - description: patchType indicates the patch strategy used. Allowed values - are "ApplyConfiguration" and "JSONPatch". Required. + - description: the custom object's name + in: path + name: name + required: true + schema: type: string - required: - - patchType - type: object - v1alpha1.NamedRuleWithOperations: - description: NamedRuleWithOperations is a tuple of Operations and Resources - with ResourceNames. - example: - resourceNames: - - resourceNames - - resourceNames - operations: - - operations - - operations - apiVersions: - - apiVersions - - apiVersions - scope: scope - resources: - - resources - - resources - apiGroups: - - apiGroups - - apiGroups - properties: - apiGroups: - description: "apiGroups is the API groups the resources belong to. '*' is\ - \ all groups. If '*' is present, the length of the slice must be one.\ - \ Required." - items: - type: string - type: array - x-kubernetes-list-type: atomic - apiVersions: - description: "apiVersions is the API versions the resources belong to. '*'\ - \ is all versions. If '*' is present, the length of the slice must be\ - \ one. Required." - items: - type: string - type: array - x-kubernetes-list-type: atomic - operations: - description: "operations is the operations the admission hook cares about\ - \ - CREATE, UPDATE, DELETE, CONNECT or * for all of those operations and\ - \ any future admission operations that are added. If '*' is present, the\ - \ length of the slice must be one. Required." - items: - type: string - type: array - x-kubernetes-list-type: atomic - resourceNames: - description: resourceNames is an optional white list of names that the rule - applies to. An empty set means that everything is allowed. - items: - type: string - type: array - x-kubernetes-list-type: atomic - resources: - description: |- - resources is a list of resources this rule applies to. - - For example: 'pods' means pods. 'pods/log' means the log subresource of pods. '*' means all resources, but not subresources. 'pods/*' means all subresources of pods. '*/scale' means all scale subresources. '*/*' means all resources and their subresources. - - If wildcard is present, the validation rule will ensure resources do not overlap with each other. - - Depending on the enclosing object, subresources might not be allowed. Required. - items: - type: string - type: array - x-kubernetes-list-type: atomic - scope: - description: "scope specifies the scope of this rule. Valid values are \"\ - Cluster\", \"Namespaced\", and \"*\" \"Cluster\" means that only cluster-scoped\ - \ resources will match this rule. Namespace API objects are cluster-scoped.\ - \ \"Namespaced\" means that only namespaced resources will match this\ - \ rule. \"*\" means that there are no scope restrictions. Subresources\ - \ match the scope of their parent resource. Default is \"*\"." + - description: "When present, indicates that modifications should not be persisted.\ + \ An invalid or unrecognized dryRun directive will result in an error response\ + \ and no further processing of the request. Valid values are: - All: all\ + \ dry run stages will be processed" + in: query + name: dryRun + schema: type: string - type: object - x-kubernetes-map-type: atomic - v1alpha1.ParamKind: - description: ParamKind is a tuple of Group Kind and Version. - example: - apiVersion: apiVersion - kind: kind - properties: - apiVersion: - description: apiVersion is the API group version the resources belong to. - In format of "group/version". Required. + - description: "fieldManager is a name associated with the actor or entity that\ + \ is making these changes. The value must be less than or 128 characters\ + \ long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.\ + \ This field is required for apply requests (application/apply-patch) but\ + \ optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch)." + in: query + name: fieldManager + schema: type: string - kind: - description: kind is the API kind the resources belong to. Required. + - description: "fieldValidation instructs the server on how to handle objects\ + \ in the request (POST/PUT/PATCH) containing unknown or duplicate fields.\ + \ Valid values are: - Ignore: This will ignore any unknown fields that are\ + \ silently dropped from the object, and will ignore all but the last duplicate\ + \ field that the decoder encounters. This is the default behavior prior\ + \ to v1.23. - Warn: This will send a warning via the standard warning response\ + \ header for each unknown field that is dropped from the object, and for\ + \ each duplicate field that is encountered. The request will still succeed\ + \ if there are no other errors, and will only persist the last of any duplicate\ + \ fields. This is the default in v1.23+ - Strict: This will fail the request\ + \ with a BadRequest error if any unknown fields would be dropped from the\ + \ object, or if any duplicate fields are present. The error returned from\ + \ the server will contain all unknown and duplicate fields encountered.\ + \ (optional)" + in: query + name: fieldValidation + schema: type: string - type: object - x-kubernetes-map-type: atomic - v1alpha1.ParamRef: - description: ParamRef describes how to locate the params to be used as input - to expressions of rules applied by a policy binding. - example: - name: name - namespace: namespace - selector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - parameterNotFoundAction: parameterNotFoundAction - properties: - name: - description: |- - name is the name of the resource being referenced. - - `name` and `selector` are mutually exclusive properties. If one is set, the other must be unset. + - description: Force is going to "force" Apply requests. It means user will + re-acquire conflicting fields owned by other people. Force flag must be + unset for non-apply patch requests. + in: query + name: force + schema: + type: boolean + requestBody: + content: + application/json: + schema: + type: object + description: The JSON schema of the Resource to patch. + required: true + responses: + "200": + content: + application/json: + schema: + type: object + description: OK + "401": + content: {} + description: Unauthorized + tags: + - custom_objects + x-codegen-request-body-name: body + x-content-type: application/json + x-accepts: + - application/json + put: + description: replace the specified namespace scoped custom object + operationId: replaceNamespacedCustomObject + parameters: + - description: the custom resource's group + in: path + name: group + required: true + schema: type: string - namespace: - description: |- - namespace is the namespace of the referenced resource. Allows limiting the search for params to a specific namespace. Applies to both `name` and `selector` fields. - - A per-namespace parameter may be used by specifying a namespace-scoped `paramKind` in the policy and leaving this field empty. - - - If `paramKind` is cluster-scoped, this field MUST be unset. Setting this field results in a configuration error. - - - If `paramKind` is namespace-scoped, the namespace of the object being evaluated for admission will be used when this field is left unset. Take care that if this is left empty the binding must not match any cluster-scoped resources, which will result in an error. + - description: the custom resource's version + in: path + name: version + required: true + schema: type: string - parameterNotFoundAction: - description: |- - parameterNotFoundAction controls the behavior of the binding when the resource exists, and name or selector is valid, but there are no parameters matched by the binding. If the value is set to `Allow`, then no matched parameters will be treated as successful validation by the binding. If set to `Deny`, then no matched parameters will be subject to the `failurePolicy` of the policy. - - Allowed values are `Allow` or `Deny` Default to `Deny` + - description: The custom resource's namespace + in: path + name: namespace + required: true + schema: type: string - selector: - $ref: "#/components/schemas/v1.LabelSelector" - type: object - x-kubernetes-map-type: atomic - v1alpha1.Variable: - description: Variable is the definition of a variable that is used for composition. - example: - expression: expression + - description: the custom resource's plural name. For TPRs this would be lowercase + plural kind. + in: path + name: plural + required: true + schema: + type: string + - description: the custom object's name + in: path name: name - properties: - expression: - description: expression is the expression that will be evaluated as the - value of the variable. The CEL expression has access to the same identifiers - as the CEL expressions in Validation. + required: true + schema: type: string - name: - description: "name is the name of the variable. The name must be a valid\ - \ CEL identifier and unique among all variables. The variable can be accessed\ - \ in other expressions through `variables` For example, if name is \"\ - foo\", the variable will be available as `variables.foo`" + - description: "When present, indicates that modifications should not be persisted.\ + \ An invalid or unrecognized dryRun directive will result in an error response\ + \ and no further processing of the request. Valid values are: - All: all\ + \ dry run stages will be processed" + in: query + name: dryRun + schema: type: string - required: - - expression - - name - type: object - v1beta1.ApplyConfiguration: - description: ApplyConfiguration defines the desired configuration values of - an object. - example: - expression: expression - properties: - expression: - description: "expression will be evaluated by CEL to create an apply configuration.\ - \ ref: https://github.com/google/cel-spec\n\nApply configurations are\ - \ declared in CEL using object initialization. For example, this CEL expression\ - \ returns an apply configuration to set a single field:\n\n\tObject{\n\ - \t spec: Object.spec{\n\t serviceAccountName: \"example\"\n\t }\n\ - \t}\n\nApply configurations may not modify atomic structs, maps or arrays\ - \ due to the risk of accidental deletion of values not included in the\ - \ apply configuration.\n\nCEL expressions have access to the object types\ - \ needed to create apply configurations:\n\n- 'Object' - CEL type of the\ - \ resource object. - 'Object.' - CEL type of object field (such\ - \ as 'Object.spec') - 'Object.....`\ - \ - CEL type of nested field (such as 'Object.spec.containers')\n\nCEL\ - \ expressions have access to the contents of the API request, organized\ - \ into CEL variables as well as some other useful variables:\n\n- 'object'\ - \ - The object from the incoming request. The value is null for DELETE\ - \ requests. - 'oldObject' - The existing object. The value is null for\ - \ CREATE requests. - 'request' - Attributes of the API request([ref](/pkg/apis/admission/types.go#AdmissionRequest)).\ - \ - 'params' - Parameter resource referred to by the policy binding being\ - \ evaluated. Only populated if the policy has a ParamKind. - 'namespaceObject'\ - \ - The namespace object that the incoming object belongs to. The value\ - \ is null for cluster-scoped resources. - 'variables' - Map of composited\ - \ variables, from its name to its lazily evaluated value.\n For example,\ - \ a variable named 'foo' can be accessed as 'variables.foo'.\n- 'authorizer'\ - \ - A CEL Authorizer. May be used to perform authorization checks for\ - \ the principal (user or service account) of the request.\n See https://pkg.go.dev/k8s.io/apiserver/pkg/cel/library#Authz\n\ - - 'authorizer.requestResource' - A CEL ResourceCheck constructed from\ - \ the 'authorizer' and configured with the\n request resource.\n\nThe\ - \ `apiVersion`, `kind`, `metadata.name` and `metadata.generateName` are\ - \ always accessible from the root of the object. No other metadata properties\ - \ are accessible.\n\nOnly property names of the form `[a-zA-Z_.-/][a-zA-Z0-9_.-/]*`\ - \ are accessible. Required." + - description: "fieldManager is a name associated with the actor or entity that\ + \ is making these changes. The value must be less than or 128 characters\ + \ long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." + in: query + name: fieldManager + schema: type: string - type: object - v1beta1.JSONPatch: - description: JSONPatch defines a JSON Patch. - example: - expression: expression - properties: - expression: - description: "expression will be evaluated by CEL to create a [JSON patch](https://jsonpatch.com/).\ - \ ref: https://github.com/google/cel-spec\n\nexpression must return an\ - \ array of JSONPatch values.\n\nFor example, this CEL expression returns\ - \ a JSON patch to conditionally modify a value:\n\n\t [\n\t JSONPatch{op:\ - \ \"test\", path: \"/spec/example\", value: \"Red\"},\n\t JSONPatch{op:\ - \ \"replace\", path: \"/spec/example\", value: \"Green\"}\n\t ]\n\nTo\ - \ define an object for the patch value, use Object types. For example:\n\ - \n\t [\n\t JSONPatch{\n\t op: \"add\",\n\t path: \"/spec/selector\"\ - ,\n\t value: Object.spec.selector{matchLabels: {\"environment\":\ - \ \"test\"}}\n\t }\n\t ]\n\nTo use strings containing '/' and '~'\ - \ as JSONPatch path keys, use \"jsonpatch.escapeKey\". For example:\n\n\ - \t [\n\t JSONPatch{\n\t op: \"add\",\n\t path: \"/metadata/labels/\"\ - \ + jsonpatch.escapeKey(\"example.com/environment\"),\n\t value:\ - \ \"test\"\n\t },\n\t ]\n\nCEL expressions have access to the types\ - \ needed to create JSON patches and objects:\n\n- 'JSONPatch' - CEL type\ - \ of JSON Patch operations. JSONPatch has the fields 'op', 'from', 'path'\ - \ and 'value'.\n See [JSON patch](https://jsonpatch.com/) for more details.\ - \ The 'value' field may be set to any of: string,\n integer, array, map\ - \ or object. If set, the 'path' and 'from' fields must be set to a\n\ + - description: "fieldValidation instructs the server on how to handle objects\ + \ in the request (POST/PUT/PATCH) containing unknown or duplicate fields.\ + \ Valid values are: - Ignore: This will ignore any unknown fields that are\ + \ silently dropped from the object, and will ignore all but the last duplicate\ + \ field that the decoder encounters. This is the default behavior prior\ + \ to v1.23. - Warn: This will send a warning via the standard warning response\ + \ header for each unknown field that is dropped from the object, and for\ + \ each duplicate field that is encountered. The request will still succeed\ + \ if there are no other errors, and will only persist the last of any duplicate\ + \ fields. This is the default in v1.23+ - Strict: This will fail the request\ + \ with a BadRequest error if any unknown fields would be dropped from the\ + \ object, or if any duplicate fields are present. The error returned from\ + \ the server will contain all unknown and duplicate fields encountered.\ + \ (optional)" + in: query + name: fieldValidation + schema: + type: string + requestBody: + content: + application/json: + schema: + type: object + description: The JSON schema of the Resource to replace. + required: true + responses: + "200": + content: + application/json: + schema: + type: object + description: OK + "401": + content: {} + description: Unauthorized + tags: + - custom_objects + x-codegen-request-body-name: body + x-content-type: application/json + x-accepts: + - application/json + /apis/{group}/{version}/namespaces/{namespace}/{plural}/{name}/status: + get: + description: read status of the specified namespace scoped custom object + operationId: getNamespacedCustomObjectStatus + parameters: + - description: the custom resource's group + in: path + name: group + required: true + schema: + type: string + - description: the custom resource's version + in: path + name: version + required: true + schema: + type: string + - description: The custom resource's namespace + in: path + name: namespace + required: true + schema: + type: string + - description: the custom resource's plural name. For TPRs this would be lowercase + plural kind. + in: path + name: plural + required: true + schema: + type: string + - description: the custom object's name + in: path + name: name + required: true + schema: + type: string + responses: + "200": + content: + application/json: + schema: + type: object + application/yaml: + schema: + type: object + application/vnd.kubernetes.protobuf: + schema: + type: object + description: OK + "401": + content: {} + description: Unauthorized + tags: + - custom_objects + x-accepts: + - application/json + - application/vnd.kubernetes.protobuf + - application/yaml + patch: + description: partially update status of the specified namespace scoped custom + object + operationId: patchNamespacedCustomObjectStatus + parameters: + - description: the custom resource's group + in: path + name: group + required: true + schema: + type: string + - description: the custom resource's version + in: path + name: version + required: true + schema: + type: string + - description: The custom resource's namespace + in: path + name: namespace + required: true + schema: + type: string + - description: the custom resource's plural name. For TPRs this would be lowercase + plural kind. + in: path + name: plural + required: true + schema: + type: string + - description: the custom object's name + in: path + name: name + required: true + schema: + type: string + - description: "When present, indicates that modifications should not be persisted.\ + \ An invalid or unrecognized dryRun directive will result in an error response\ + \ and no further processing of the request. Valid values are: - All: all\ + \ dry run stages will be processed" + in: query + name: dryRun + schema: + type: string + - description: "fieldManager is a name associated with the actor or entity that\ + \ is making these changes. The value must be less than or 128 characters\ + \ long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.\ + \ This field is required for apply requests (application/apply-patch) but\ + \ optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch)." + in: query + name: fieldManager + schema: + type: string + - description: "fieldValidation instructs the server on how to handle objects\ + \ in the request (POST/PUT/PATCH) containing unknown or duplicate fields.\ + \ Valid values are: - Ignore: This will ignore any unknown fields that are\ + \ silently dropped from the object, and will ignore all but the last duplicate\ + \ field that the decoder encounters. This is the default behavior prior\ + \ to v1.23. - Warn: This will send a warning via the standard warning response\ + \ header for each unknown field that is dropped from the object, and for\ + \ each duplicate field that is encountered. The request will still succeed\ + \ if there are no other errors, and will only persist the last of any duplicate\ + \ fields. This is the default in v1.23+ - Strict: This will fail the request\ + \ with a BadRequest error if any unknown fields would be dropped from the\ + \ object, or if any duplicate fields are present. The error returned from\ + \ the server will contain all unknown and duplicate fields encountered.\ + \ (optional)" + in: query + name: fieldValidation + schema: + type: string + - description: Force is going to "force" Apply requests. It means user will + re-acquire conflicting fields owned by other people. Force flag must be + unset for non-apply patch requests. + in: query + name: force + schema: + type: boolean + requestBody: + content: + application/json: + schema: + description: The JSON schema of the Resource to patch. + type: object + required: true + responses: + "200": + content: + application/json: + schema: + type: object + application/yaml: + schema: + type: object + application/vnd.kubernetes.protobuf: + schema: + type: object + description: OK + "401": + content: {} + description: Unauthorized + tags: + - custom_objects + x-codegen-request-body-name: body + x-content-type: application/json + x-accepts: + - application/json + - application/vnd.kubernetes.protobuf + - application/yaml + put: + description: replace status of the specified namespace scoped custom object + operationId: replaceNamespacedCustomObjectStatus + parameters: + - description: the custom resource's group + in: path + name: group + required: true + schema: + type: string + - description: the custom resource's version + in: path + name: version + required: true + schema: + type: string + - description: The custom resource's namespace + in: path + name: namespace + required: true + schema: + type: string + - description: the custom resource's plural name. For TPRs this would be lowercase + plural kind. + in: path + name: plural + required: true + schema: + type: string + - description: the custom object's name + in: path + name: name + required: true + schema: + type: string + - description: "When present, indicates that modifications should not be persisted.\ + \ An invalid or unrecognized dryRun directive will result in an error response\ + \ and no further processing of the request. Valid values are: - All: all\ + \ dry run stages will be processed" + in: query + name: dryRun + schema: + type: string + - description: "fieldManager is a name associated with the actor or entity that\ + \ is making these changes. The value must be less than or 128 characters\ + \ long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." + in: query + name: fieldManager + schema: + type: string + - description: "fieldValidation instructs the server on how to handle objects\ + \ in the request (POST/PUT/PATCH) containing unknown or duplicate fields.\ + \ Valid values are: - Ignore: This will ignore any unknown fields that are\ + \ silently dropped from the object, and will ignore all but the last duplicate\ + \ field that the decoder encounters. This is the default behavior prior\ + \ to v1.23. - Warn: This will send a warning via the standard warning response\ + \ header for each unknown field that is dropped from the object, and for\ + \ each duplicate field that is encountered. The request will still succeed\ + \ if there are no other errors, and will only persist the last of any duplicate\ + \ fields. This is the default in v1.23+ - Strict: This will fail the request\ + \ with a BadRequest error if any unknown fields would be dropped from the\ + \ object, or if any duplicate fields are present. The error returned from\ + \ the server will contain all unknown and duplicate fields encountered.\ + \ (optional)" + in: query + name: fieldValidation + schema: + type: string + requestBody: + content: + application/json: + schema: + type: object + required: true + responses: + "200": + content: + application/json: + schema: + type: object + application/yaml: + schema: + type: object + application/vnd.kubernetes.protobuf: + schema: + type: object + description: OK + "201": + content: + application/json: + schema: + type: object + application/yaml: + schema: + type: object + application/vnd.kubernetes.protobuf: + schema: + type: object + description: Created + "401": + content: {} + description: Unauthorized + tags: + - custom_objects + x-codegen-request-body-name: body + x-content-type: application/json + x-accepts: + - application/json + - application/vnd.kubernetes.protobuf + - application/yaml + /apis/{group}/{version}/namespaces/{namespace}/{plural}/{name}/scale: + get: + description: read scale of the specified namespace scoped custom object + operationId: getNamespacedCustomObjectScale + parameters: + - description: the custom resource's group + in: path + name: group + required: true + schema: + type: string + - description: the custom resource's version + in: path + name: version + required: true + schema: + type: string + - description: The custom resource's namespace + in: path + name: namespace + required: true + schema: + type: string + - description: the custom resource's plural name. For TPRs this would be lowercase + plural kind. + in: path + name: plural + required: true + schema: + type: string + - description: the custom object's name + in: path + name: name + required: true + schema: + type: string + responses: + "200": + content: + application/json: + schema: + type: object + application/yaml: + schema: + type: object + application/vnd.kubernetes.protobuf: + schema: + type: object + description: OK + "401": + content: {} + description: Unauthorized + tags: + - custom_objects + x-accepts: + - application/json + - application/vnd.kubernetes.protobuf + - application/yaml + patch: + description: partially update scale of the specified namespace scoped custom + object + operationId: patchNamespacedCustomObjectScale + parameters: + - description: the custom resource's group + in: path + name: group + required: true + schema: + type: string + - description: the custom resource's version + in: path + name: version + required: true + schema: + type: string + - description: The custom resource's namespace + in: path + name: namespace + required: true + schema: + type: string + - description: the custom resource's plural name. For TPRs this would be lowercase + plural kind. + in: path + name: plural + required: true + schema: + type: string + - description: the custom object's name + in: path + name: name + required: true + schema: + type: string + - description: "When present, indicates that modifications should not be persisted.\ + \ An invalid or unrecognized dryRun directive will result in an error response\ + \ and no further processing of the request. Valid values are: - All: all\ + \ dry run stages will be processed" + in: query + name: dryRun + schema: + type: string + - description: "fieldManager is a name associated with the actor or entity that\ + \ is making these changes. The value must be less than or 128 characters\ + \ long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint.\ + \ This field is required for apply requests (application/apply-patch) but\ + \ optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch)." + in: query + name: fieldManager + schema: + type: string + - description: "fieldValidation instructs the server on how to handle objects\ + \ in the request (POST/PUT/PATCH) containing unknown or duplicate fields.\ + \ Valid values are: - Ignore: This will ignore any unknown fields that are\ + \ silently dropped from the object, and will ignore all but the last duplicate\ + \ field that the decoder encounters. This is the default behavior prior\ + \ to v1.23. - Warn: This will send a warning via the standard warning response\ + \ header for each unknown field that is dropped from the object, and for\ + \ each duplicate field that is encountered. The request will still succeed\ + \ if there are no other errors, and will only persist the last of any duplicate\ + \ fields. This is the default in v1.23+ - Strict: This will fail the request\ + \ with a BadRequest error if any unknown fields would be dropped from the\ + \ object, or if any duplicate fields are present. The error returned from\ + \ the server will contain all unknown and duplicate fields encountered.\ + \ (optional)" + in: query + name: fieldValidation + schema: + type: string + - description: Force is going to "force" Apply requests. It means user will + re-acquire conflicting fields owned by other people. Force flag must be + unset for non-apply patch requests. + in: query + name: force + schema: + type: boolean + requestBody: + content: + application/json: + schema: + description: The JSON schema of the Resource to patch. + type: object + required: true + responses: + "200": + content: + application/json: + schema: + type: object + application/yaml: + schema: + type: object + application/vnd.kubernetes.protobuf: + schema: + type: object + description: OK + "401": + content: {} + description: Unauthorized + tags: + - custom_objects + x-codegen-request-body-name: body + x-content-type: application/json + x-accepts: + - application/json + - application/vnd.kubernetes.protobuf + - application/yaml + put: + description: replace scale of the specified namespace scoped custom object + operationId: replaceNamespacedCustomObjectScale + parameters: + - description: the custom resource's group + in: path + name: group + required: true + schema: + type: string + - description: the custom resource's version + in: path + name: version + required: true + schema: + type: string + - description: The custom resource's namespace + in: path + name: namespace + required: true + schema: + type: string + - description: the custom resource's plural name. For TPRs this would be lowercase + plural kind. + in: path + name: plural + required: true + schema: + type: string + - description: the custom object's name + in: path + name: name + required: true + schema: + type: string + - description: "When present, indicates that modifications should not be persisted.\ + \ An invalid or unrecognized dryRun directive will result in an error response\ + \ and no further processing of the request. Valid values are: - All: all\ + \ dry run stages will be processed" + in: query + name: dryRun + schema: + type: string + - description: "fieldManager is a name associated with the actor or entity that\ + \ is making these changes. The value must be less than or 128 characters\ + \ long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint." + in: query + name: fieldManager + schema: + type: string + - description: "fieldValidation instructs the server on how to handle objects\ + \ in the request (POST/PUT/PATCH) containing unknown or duplicate fields.\ + \ Valid values are: - Ignore: This will ignore any unknown fields that are\ + \ silently dropped from the object, and will ignore all but the last duplicate\ + \ field that the decoder encounters. This is the default behavior prior\ + \ to v1.23. - Warn: This will send a warning via the standard warning response\ + \ header for each unknown field that is dropped from the object, and for\ + \ each duplicate field that is encountered. The request will still succeed\ + \ if there are no other errors, and will only persist the last of any duplicate\ + \ fields. This is the default in v1.23+ - Strict: This will fail the request\ + \ with a BadRequest error if any unknown fields would be dropped from the\ + \ object, or if any duplicate fields are present. The error returned from\ + \ the server will contain all unknown and duplicate fields encountered.\ + \ (optional)" + in: query + name: fieldValidation + schema: + type: string + requestBody: + content: + application/json: + schema: + type: object + required: true + responses: + "200": + content: + application/json: + schema: + type: object + application/yaml: + schema: + type: object + application/vnd.kubernetes.protobuf: + schema: + type: object + description: OK + "201": + content: + application/json: + schema: + type: object + application/yaml: + schema: + type: object + application/vnd.kubernetes.protobuf: + schema: + type: object + description: Created + "401": + content: {} + description: Unauthorized + tags: + - custom_objects + x-codegen-request-body-name: body + x-content-type: application/json + x-accepts: + - application/json + - application/vnd.kubernetes.protobuf + - application/yaml + /.well-known/openid-configuration: + get: + description: "get service account issuer OpenID configuration, also known as\ + \ the 'OIDC discovery doc'" + operationId: getServiceAccountIssuerOpenIDConfiguration + responses: + "200": + content: + application/json: + schema: + type: string + description: OK + "401": + content: {} + description: Unauthorized + tags: + - WellKnown + x-accepts: + - application/json + /openid/v1/jwks: + get: + description: get service account issuer OpenID JSON Web Key Set (contains public + token verification keys) + operationId: getServiceAccountIssuerOpenIDKeyset + responses: + "200": + content: + application/jwk-set+json: + schema: + type: string + description: OK + "401": + content: {} + description: Unauthorized + tags: + - openid + x-accepts: + - application/jwk-set+json +components: + schemas: + v1.ApplyConfiguration: + description: ApplyConfiguration defines the desired configuration values of + an object. + example: + expression: expression + properties: + expression: + description: "expression will be evaluated by CEL to create an apply configuration.\ + \ ref: https://github.com/google/cel-spec\n\nApply configurations are\ + \ declared in CEL using object initialization. For example, this CEL expression\ + \ returns an apply configuration to set a single field:\n\n\tObject{\n\ + \t spec: Object.spec{\n\t serviceAccountName: \"example\"\n\t }\n\ + \t}\n\nApply configurations may not modify atomic structs, maps or arrays\ + \ due to the risk of accidental deletion of values not included in the\ + \ apply configuration.\n\nCEL expressions have access to the object types\ + \ needed to create apply configurations:\n\n- 'Object' - CEL type of the\ + \ resource object. - 'Object.' - CEL type of object field (such\ + \ as 'Object.spec') - 'Object.....`\ + \ - CEL type of nested field (such as 'Object.spec.containers')\n\nCEL\ + \ expressions have access to the contents of the API request, organized\ + \ into CEL variables as well as some other useful variables:\n\n- 'object'\ + \ - The object from the incoming request. The value is null for DELETE\ + \ requests. - 'oldObject' - The existing object. The value is null for\ + \ CREATE requests. - 'request' - Attributes of the API request([ref](/pkg/apis/admission/types.go#AdmissionRequest)).\ + \ - 'params' - Parameter resource referred to by the policy binding being\ + \ evaluated. Only populated if the policy has a ParamKind. - 'namespaceObject'\ + \ - The namespace object that the incoming object belongs to. The value\ + \ is null for cluster-scoped resources. - 'variables' - Map of composited\ + \ variables, from its name to its lazily evaluated value.\n For example,\ + \ a variable named 'foo' can be accessed as 'variables.foo'.\n- 'authorizer'\ + \ - A CEL Authorizer. May be used to perform authorization checks for\ + \ the principal (user or service account) of the request.\n See https://pkg.go.dev/k8s.io/apiserver/pkg/cel/library#Authz\n\ + - 'authorizer.requestResource' - A CEL ResourceCheck constructed from\ + \ the 'authorizer' and configured with the\n request resource.\n\nThe\ + \ `apiVersion`, `kind`, `metadata.name` and `metadata.generateName` are\ + \ always accessible from the root of the object. No other metadata properties\ + \ are accessible.\n\nOnly property names of the form `[a-zA-Z_.-/][a-zA-Z0-9_.-/]*`\ + \ are accessible. Required." + type: string + type: object + v1.AuditAnnotation: + description: AuditAnnotation describes how to produce an audit annotation for + an API request. + example: + valueExpression: valueExpression + key: key + properties: + key: + description: |- + key specifies the audit annotation key. The audit annotation keys of a ValidatingAdmissionPolicy must be unique. The key must be a qualified name ([A-Za-z0-9][-A-Za-z0-9_.]*) no more than 63 bytes in length. + + The key is combined with the resource name of the ValidatingAdmissionPolicy to construct an audit annotation key: "{ValidatingAdmissionPolicy name}/{key}". + + If an admission webhook uses the same resource name as this ValidatingAdmissionPolicy and the same audit annotation key, the annotation key will be identical. In this case, the first annotation written with the key will be included in the audit event and all subsequent annotations with the same key will be discarded. + + Required. + type: string + valueExpression: + description: |- + valueExpression represents the expression which is evaluated by CEL to produce an audit annotation value. The expression must evaluate to either a string or null value. If the expression evaluates to a string, the audit annotation is included with the string value. If the expression evaluates to null or empty string the audit annotation will be omitted. The valueExpression may be no longer than 5kb in length. If the result of the valueExpression is more than 10kb in length, it will be truncated to 10kb. + + If multiple ValidatingAdmissionPolicyBinding resources match an API request, then the valueExpression will be evaluated for each binding. All unique values produced by the valueExpressions will be joined together in a comma-separated list. + + Required. + type: string + required: + - key + - valueExpression + type: object + v1.ExpressionWarning: + description: ExpressionWarning is a warning information that targets a specific + expression. + example: + fieldRef: fieldRef + warning: warning + properties: + fieldRef: + description: "fieldRef is the path to the field that refers to the expression.\ + \ For example, the reference to the expression of the first item of validations\ + \ is \"spec.validations[0].expression\"" + type: string + warning: + description: "warning contains the content of type checking information\ + \ in a human-readable form. Each line of the warning contains the type\ + \ that the expression is checked against, followed by the type check error\ + \ from the compiler." + type: string + required: + - fieldRef + - warning + type: object + v1.JSONPatch: + description: JSONPatch defines a JSON Patch. + example: + expression: expression + properties: + expression: + description: "expression will be evaluated by CEL to create a [JSON patch](https://jsonpatch.com/).\ + \ ref: https://github.com/google/cel-spec\n\nexpression must return an\ + \ array of JSONPatch values.\n\nFor example, this CEL expression returns\ + \ a JSON patch to conditionally modify a value:\n\n\t [\n\t JSONPatch{op:\ + \ \"test\", path: \"/spec/example\", value: \"Red\"},\n\t JSONPatch{op:\ + \ \"replace\", path: \"/spec/example\", value: \"Green\"}\n\t ]\n\nTo\ + \ define an object for the patch value, use Object types. For example:\n\ + \n\t [\n\t JSONPatch{\n\t op: \"add\",\n\t path: \"/spec/selector\"\ + ,\n\t value: Object.spec.selector{matchLabels: {\"environment\":\ + \ \"test\"}}\n\t }\n\t ]\n\nTo use strings containing '/' and '~'\ + \ as JSONPatch path keys, use \"jsonpatch.escapeKey\". For example:\n\n\ + \t [\n\t JSONPatch{\n\t op: \"add\",\n\t path: \"/metadata/labels/\"\ + \ + jsonpatch.escapeKey(\"example.com/environment\"),\n\t value:\ + \ \"test\"\n\t },\n\t ]\n\nCEL expressions have access to the types\ + \ needed to create JSON patches and objects:\n\n- 'JSONPatch' - CEL type\ + \ of JSON Patch operations. JSONPatch has the fields 'op', 'from', 'path'\ + \ and 'value'.\n See [JSON patch](https://jsonpatch.com/) for more details.\ + \ The 'value' field may be set to any of: string,\n integer, array, map\ + \ or object. If set, the 'path' and 'from' fields must be set to a\n\ \ [JSON pointer](https://datatracker.ietf.org/doc/html/rfc6901/) string,\ \ where the 'jsonpatch.escapeKey()' CEL\n function may be used to escape\ \ path keys containing '/' and '~'.\n- 'Object' - CEL type of the resource\ @@ -111002,8 +111255,8 @@ components: \ names of the form `[a-zA-Z_.-/][a-zA-Z0-9_.-/]*` are accessible. Required." type: string type: object - v1beta1.MatchCondition: - description: MatchCondition represents a condition which must be fulfilled for + v1.MatchCondition: + description: MatchCondition represents a condition which must by fulfilled for a request to be sent to a webhook. example: expression: expression @@ -111031,7 +111284,7 @@ components: - expression - name type: object - v1beta1.MatchResources: + v1.MatchResources: description: "MatchResources decides whether to run the admission control policy\ \ on an object based on whether it meets the match criteria. The exclude rules\ \ take precedence over include rules (if a resource matches both, it is excluded)" @@ -111138,7 +111391,7 @@ components: \ take precedence over include rules (if a resource matches both, it is\ \ excluded)" items: - $ref: "#/components/schemas/v1beta1.NamedRuleWithOperations" + $ref: "#/components/schemas/v1.NamedRuleWithOperations" type: array x-kubernetes-list-type: atomic matchPolicy: @@ -111160,12 +111413,12 @@ components: the ValidatingAdmissionPolicy matches. The policy cares about an operation if it matches _any_ Rule. items: - $ref: "#/components/schemas/v1beta1.NamedRuleWithOperations" + $ref: "#/components/schemas/v1.NamedRuleWithOperations" type: array x-kubernetes-list-type: atomic type: object x-kubernetes-map-type: atomic - v1beta1.MutatingAdmissionPolicy: + v1.MutatingAdmissionPolicy: description: MutatingAdmissionPolicy describes the definition of an admission mutation policy that mutates the object coming into admission chain. example: @@ -111354,15 +111607,15 @@ components: metadata: $ref: "#/components/schemas/v1.ObjectMeta" spec: - $ref: "#/components/schemas/v1beta1.MutatingAdmissionPolicySpec" + $ref: "#/components/schemas/v1.MutatingAdmissionPolicySpec" type: object x-kubernetes-group-version-kind: - group: admissionregistration.k8s.io kind: MutatingAdmissionPolicy - version: v1beta1 + version: v1 x-implements: - io.kubernetes.client.common.KubernetesObject - v1beta1.MutatingAdmissionPolicyBinding: + v1.MutatingAdmissionPolicyBinding: description: |- MutatingAdmissionPolicyBinding binds the MutatingAdmissionPolicy with parametrized resources. MutatingAdmissionPolicyBinding and the optional parameter resource together define how cluster administrators configure policies for clusters. @@ -111548,15 +111801,15 @@ components: metadata: $ref: "#/components/schemas/v1.ObjectMeta" spec: - $ref: "#/components/schemas/v1beta1.MutatingAdmissionPolicyBindingSpec" + $ref: "#/components/schemas/v1.MutatingAdmissionPolicyBindingSpec" type: object x-kubernetes-group-version-kind: - group: admissionregistration.k8s.io kind: MutatingAdmissionPolicyBinding - version: v1beta1 + version: v1 x-implements: - io.kubernetes.client.common.KubernetesObject - v1beta1.MutatingAdmissionPolicyBindingList: + v1.MutatingAdmissionPolicyBindingList: description: MutatingAdmissionPolicyBindingList is a list of MutatingAdmissionPolicyBinding. example: metadata: @@ -111906,7 +112159,7 @@ components: items: description: List of PolicyBinding. items: - $ref: "#/components/schemas/v1beta1.MutatingAdmissionPolicyBinding" + $ref: "#/components/schemas/v1.MutatingAdmissionPolicyBinding" type: array kind: description: "Kind is a string value representing the REST resource this\ @@ -111921,12 +112174,12 @@ components: x-kubernetes-group-version-kind: - group: admissionregistration.k8s.io kind: MutatingAdmissionPolicyBindingList - version: v1beta1 + version: v1 x-implements: - io.kubernetes.client.common.KubernetesListObject - v1beta1.MutatingAdmissionPolicyBindingSpec: - description: MutatingAdmissionPolicyBindingSpec is the specification of the - MutatingAdmissionPolicyBinding. + v1.MutatingAdmissionPolicyBindingSpec: + description: MutatingAdmissionPolicyBindingSpec defines the specification of + the MutatingAdmissionPolicyBinding. example: paramRef: name: name @@ -112045,9 +112298,9 @@ components: key: matchLabels properties: matchResources: - $ref: "#/components/schemas/v1beta1.MatchResources" + $ref: "#/components/schemas/v1.MatchResources" paramRef: - $ref: "#/components/schemas/v1beta1.ParamRef" + $ref: "#/components/schemas/v1.ParamRef" policyName: description: "policyName references a MutatingAdmissionPolicy name which\ \ the MutatingAdmissionPolicyBinding binds to. If the referenced resource\ @@ -112055,7 +112308,7 @@ components: \ Required." type: string type: object - v1beta1.MutatingAdmissionPolicyList: + v1.MutatingAdmissionPolicyList: description: MutatingAdmissionPolicyList is a list of MutatingAdmissionPolicy. example: metadata: @@ -112419,7 +112672,7 @@ components: items: description: List of ValidatingAdmissionPolicy. items: - $ref: "#/components/schemas/v1beta1.MutatingAdmissionPolicy" + $ref: "#/components/schemas/v1.MutatingAdmissionPolicy" type: array kind: description: "Kind is a string value representing the REST resource this\ @@ -112434,12 +112687,12 @@ components: x-kubernetes-group-version-kind: - group: admissionregistration.k8s.io kind: MutatingAdmissionPolicyList - version: v1beta1 + version: v1 x-implements: - io.kubernetes.client.common.KubernetesListObject - v1beta1.MutatingAdmissionPolicySpec: - description: MutatingAdmissionPolicySpec is the specification of the desired - behavior of the admission policy. + v1.MutatingAdmissionPolicySpec: + description: MutatingAdmissionPolicySpec defines the desired behavior of the + admission policy. example: reinvocationPolicy: reinvocationPolicy variables: @@ -112587,7 +112840,7 @@ components: - If failurePolicy=Fail, reject the request - If failurePolicy=Ignore, the policy is skipped items: - $ref: "#/components/schemas/v1beta1.MatchCondition" + $ref: "#/components/schemas/v1.MatchCondition" type: array x-kubernetes-patch-strategy: merge x-kubernetes-list-type: map @@ -112595,7 +112848,7 @@ components: - name x-kubernetes-patch-merge-key: name matchConstraints: - $ref: "#/components/schemas/v1beta1.MatchResources" + $ref: "#/components/schemas/v1.MatchResources" mutations: description: "mutations contain operations to perform on matching objects.\ \ mutations may not be empty; a minimum of one mutation is required. mutations\ @@ -112603,11 +112856,11 @@ components: \ The mutations of a policy are invoked for each binding of this policy\ \ and reinvocation of mutations occurs on a per binding basis." items: - $ref: "#/components/schemas/v1beta1.Mutation" + $ref: "#/components/schemas/v1.Mutation" type: array x-kubernetes-list-type: atomic paramKind: - $ref: "#/components/schemas/v1beta1.ParamKind" + $ref: "#/components/schemas/v1.ParamKind" reinvocationPolicy: description: |- reinvocationPolicy indicates whether mutations may be called multiple times per MutatingAdmissionPolicyBinding as part of a single admission evaluation. Allowed values are "Never" and "IfNeeded". @@ -112622,129 +112875,21 @@ components: The expression of a variable can refer to other variables defined earlier in the list but not those after. Thus, variables must be sorted by the order of first appearance and acyclic. items: - $ref: "#/components/schemas/v1beta1.Variable" - type: array - x-kubernetes-list-type: atomic - type: object - v1beta1.Mutation: - description: Mutation specifies the CEL expression which is used to apply the - Mutation. - example: - patchType: patchType - applyConfiguration: - expression: expression - jsonPatch: - expression: expression - properties: - applyConfiguration: - $ref: "#/components/schemas/v1beta1.ApplyConfiguration" - jsonPatch: - $ref: "#/components/schemas/v1beta1.JSONPatch" - patchType: - description: patchType indicates the patch strategy used. Allowed values - are "ApplyConfiguration" and "JSONPatch". Required. - type: string - required: - - patchType - type: object - v1beta1.NamedRuleWithOperations: - description: NamedRuleWithOperations is a tuple of Operations and Resources - with ResourceNames. - example: - resourceNames: - - resourceNames - - resourceNames - operations: - - operations - - operations - apiVersions: - - apiVersions - - apiVersions - scope: scope - resources: - - resources - - resources - apiGroups: - - apiGroups - - apiGroups - properties: - apiGroups: - description: "apiGroups is the API groups the resources belong to. '*' is\ - \ all groups. If '*' is present, the length of the slice must be one.\ - \ Required." - items: - type: string - type: array - x-kubernetes-list-type: atomic - apiVersions: - description: "apiVersions is the API versions the resources belong to. '*'\ - \ is all versions. If '*' is present, the length of the slice must be\ - \ one. Required." - items: - type: string - type: array - x-kubernetes-list-type: atomic - operations: - description: "operations is the operations the admission hook cares about\ - \ - CREATE, UPDATE, DELETE, CONNECT or * for all of those operations and\ - \ any future admission operations that are added. If '*' is present, the\ - \ length of the slice must be one. Required." - items: - type: string - type: array - x-kubernetes-list-type: atomic - resourceNames: - description: resourceNames is an optional white list of names that the rule - applies to. An empty set means that everything is allowed. - items: - type: string - type: array - x-kubernetes-list-type: atomic - resources: - description: |- - resources is a list of resources this rule applies to. - - For example: 'pods' means pods. 'pods/log' means the log subresource of pods. '*' means all resources, but not subresources. 'pods/*' means all subresources of pods. '*/scale' means all scale subresources. '*/*' means all resources and their subresources. - - If wildcard is present, the validation rule will ensure resources do not overlap with each other. - - Depending on the enclosing object, subresources might not be allowed. Required. - items: - type: string + $ref: "#/components/schemas/v1.Variable" type: array x-kubernetes-list-type: atomic - scope: - description: "scope specifies the scope of this rule. Valid values are \"\ - Cluster\", \"Namespaced\", and \"*\" \"Cluster\" means that only cluster-scoped\ - \ resources will match this rule. Namespace API objects are cluster-scoped.\ - \ \"Namespaced\" means that only namespaced resources will match this\ - \ rule. \"*\" means that there are no scope restrictions. Subresources\ - \ match the scope of their parent resource. Default is \"*\"." - type: string - type: object - x-kubernetes-map-type: atomic - v1beta1.ParamKind: - description: ParamKind is a tuple of Group Kind and Version. - example: - apiVersion: apiVersion - kind: kind - properties: - apiVersion: - description: apiVersion is the API group version the resources belong to. - In format of "group/version". Required. - type: string - kind: - description: kind is the API kind the resources belong to. Required. - type: string type: object - x-kubernetes-map-type: atomic - v1beta1.ParamRef: - description: ParamRef describes how to locate the params to be used as input - to expressions of rules applied by a policy binding. + v1.MutatingWebhook: + description: MutatingWebhook describes an admission webhook and the resources + and operations it applies to. example: + admissionReviewVersions: + - admissionReviewVersions + - admissionReviewVersions + matchPolicy: matchPolicy + reinvocationPolicy: reinvocationPolicy name: name - namespace: namespace - selector: + namespaceSelector: matchExpressions: - values: - values @@ -112758,103 +112903,169 @@ components: operator: operator matchLabels: key: matchLabels - parameterNotFoundAction: parameterNotFoundAction + timeoutSeconds: 6 + rules: + - operations: + - operations + - operations + apiVersions: + - apiVersions + - apiVersions + scope: scope + resources: + - resources + - resources + apiGroups: + - apiGroups + - apiGroups + - operations: + - operations + - operations + apiVersions: + - apiVersions + - apiVersions + scope: scope + resources: + - resources + - resources + apiGroups: + - apiGroups + - apiGroups + clientConfig: + caBundle: caBundle + service: + path: path + port: 0 + name: name + namespace: namespace + url: url + matchConditions: + - expression: expression + name: name + - expression: expression + name: name + objectSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + failurePolicy: failurePolicy + sideEffects: sideEffects properties: - name: + admissionReviewVersions: + description: "admissionReviewVersions is an ordered list of preferred `AdmissionReview`\ + \ versions the Webhook expects. API server will try to use first version\ + \ in the list which it supports. If none of the versions specified in\ + \ this list supported by API server, validation will fail for this object.\ + \ If a persisted webhook configuration specifies allowed versions and\ + \ does not include any versions known to the API Server, calls to the\ + \ webhook will fail and be subject to the failure policy." + items: + type: string + type: array + x-kubernetes-list-type: atomic + clientConfig: + $ref: "#/components/schemas/admissionregistration.v1.WebhookClientConfig" + failurePolicy: + description: failurePolicy defines how unrecognized errors from the admission + endpoint are handled - allowed values are Ignore or Fail. Defaults to + Fail. + type: string + matchConditions: description: |- - name is the name of the resource being referenced. - - One of `name` or `selector` must be set, but `name` and `selector` are mutually exclusive properties. If one is set, the other must be unset. + matchConditions is a list of conditions that must be met for a request to be sent to this webhook. Match conditions filter requests that have already been matched by the rules, namespaceSelector, and objectSelector. An empty list of matchConditions matches all requests. There are a maximum of 64 match conditions allowed. - A single parameter used for all admission requests can be configured by setting the `name` field, leaving `selector` blank, and setting namespace if `paramKind` is namespace-scoped. - type: string - namespace: + The exact matching logic is (in order): + 1. If ANY matchCondition evaluates to FALSE, the webhook is skipped. + 2. If ALL matchConditions evaluate to TRUE, the webhook is called. + 3. If any matchCondition evaluates to an error (but none are FALSE): + - If failurePolicy=Fail, reject the request + - If failurePolicy=Ignore, the error is ignored and the webhook is skipped + items: + $ref: "#/components/schemas/v1.MatchCondition" + type: array + x-kubernetes-patch-strategy: merge + x-kubernetes-list-type: map + x-kubernetes-list-map-keys: + - name + x-kubernetes-patch-merge-key: name + matchPolicy: description: |- - namespace is the namespace of the referenced resource. Allows limiting the search for params to a specific namespace. Applies to both `name` and `selector` fields. + matchPolicy defines how the "rules" list is used to match incoming requests. Allowed values are "Exact" or "Equivalent". - A per-namespace parameter may be used by specifying a namespace-scoped `paramKind` in the policy and leaving this field empty. + - Exact: match a request only if it exactly matches a specified rule. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, but "rules" only included `apiGroups:["apps"], apiVersions:["v1"], resources: ["deployments"]`, a request to apps/v1beta1 or extensions/v1beta1 would not be sent to the webhook. - - If `paramKind` is cluster-scoped, this field MUST be unset. Setting this field results in a configuration error. + - Equivalent: match a request if modifies a resource listed in rules, even via another API group or version. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, and "rules" only included `apiGroups:["apps"], apiVersions:["v1"], resources: ["deployments"]`, a request to apps/v1beta1 or extensions/v1beta1 would be converted to apps/v1 and sent to the webhook. - - If `paramKind` is namespace-scoped, the namespace of the object being evaluated for admission will be used when this field is left unset. Take care that if this is left empty the binding must not match any cluster-scoped resources, which will result in an error. + Defaults to "Equivalent" type: string - parameterNotFoundAction: + name: + description: "name is the name of the admission webhook. Name should be\ + \ fully qualified, e.g., imagepolicy.kubernetes.io, where \"imagepolicy\"\ + \ is the name of the webhook, and kubernetes.io is the name of the organization.\ + \ Required." + type: string + namespaceSelector: + $ref: "#/components/schemas/v1.LabelSelector" + objectSelector: + $ref: "#/components/schemas/v1.LabelSelector" + reinvocationPolicy: description: |- - parameterNotFoundAction controls the behavior of the binding when the resource exists, and name or selector is valid, but there are no parameters matched by the binding. If the value is set to `Allow`, then no matched parameters will be treated as successful validation by the binding. If set to `Deny`, then no matched parameters will be subject to the `failurePolicy` of the policy. + reinvocationPolicy indicates whether this webhook should be called multiple times as part of a single admission evaluation. Allowed values are "Never" and "IfNeeded". - Allowed values are `Allow` or `Deny` + Never: the webhook will not be called more than once in a single admission evaluation. - Required - type: string - selector: - $ref: "#/components/schemas/v1.LabelSelector" - type: object - x-kubernetes-map-type: atomic - v1beta1.Variable: - description: Variable is the definition of a variable that is used for composition. - A variable is defined as a named expression. - example: - expression: expression - name: name - properties: - expression: - description: expression is the expression that will be evaluated as the - value of the variable. The CEL expression has access to the same identifiers - as the CEL expressions in Validation. - type: string - name: - description: "name is the name of the variable. The name must be a valid\ - \ CEL identifier and unique among all variables. The variable can be accessed\ - \ in other expressions through `variables` For example, if name is \"\ - foo\", the variable will be available as `variables.foo`" - type: string - required: - - expression - - name - type: object - x-kubernetes-map-type: atomic - v1alpha1.ServerStorageVersion: - description: An API server instance reports the version it can decode and the - version it encodes objects to when persisting objects in the backend. - example: - apiServerID: apiServerID - decodableVersions: - - decodableVersions - - decodableVersions - encodingVersion: encodingVersion - servedVersions: - - servedVersions - - servedVersions - properties: - apiServerID: - description: apiServerID is the ID of the reporting API server. + IfNeeded: the webhook will be called at least one additional time as part of the admission evaluation if the object being admitted is modified by other admission plugins after the initial webhook call. Webhooks that specify this option *must* be idempotent, able to process objects they previously admitted. Note: * the number of additional invocations is not guaranteed to be exactly one. * if additional invocations result in further modifications to the object, webhooks are not guaranteed to be invoked again. * webhooks that use this option may be reordered to minimize the number of additional invocations. * to validate an object after all mutations are guaranteed complete, use a validating admission webhook instead. + + Defaults to "Never". type: string - decodableVersions: - description: decodableVersions are the encoding versions the API server - can handle to decode. The API server can decode objects encoded in these - versions. The encodingVersion must be included in the decodableVersions. + rules: + description: "rules describes what operations on what resources/subresources\ + \ the webhook cares about. The webhook cares about an operation if it\ + \ matches _any_ Rule. However, in order to prevent ValidatingAdmissionWebhooks\ + \ and MutatingAdmissionWebhooks from putting the cluster in a state which\ + \ cannot be recovered from without completely disabling the plugin, ValidatingAdmissionWebhooks\ + \ and MutatingAdmissionWebhooks are never called on admission requests\ + \ for ValidatingWebhookConfiguration and MutatingWebhookConfiguration\ + \ objects." items: - type: string + $ref: "#/components/schemas/v1.RuleWithOperations" type: array - x-kubernetes-list-type: set - encodingVersion: - description: "encodingVersion the API server encodes the object to when\ - \ persisting it in the backend (e.g., etcd)." + x-kubernetes-list-type: atomic + sideEffects: + description: "sideEffects states whether this webhook has side effects.\ + \ Acceptable values are: None, NoneOnDryRun (webhooks created via v1beta1\ + \ may also specify Some or Unknown). Webhooks with side effects MUST implement\ + \ a reconciliation system, since a request may be rejected by a future\ + \ step in the admission chain and the side effects therefore need to be\ + \ undone. Requests with the dryRun attribute will be auto-rejected if\ + \ they match a webhook with sideEffects == Unknown or Some." type: string - servedVersions: - description: servedVersions lists all versions the API server can serve. - DecodableVersions must include all ServedVersions. - items: - type: string - type: array - x-kubernetes-list-type: set + timeoutSeconds: + description: "timeoutSeconds specifies the timeout for this webhook. After\ + \ the timeout passes, the webhook call will be ignored or the API call\ + \ will fail based on the failure policy. The timeout value must be between\ + \ 1 and 30 seconds. Default to 10 seconds." + format: int32 + type: integer required: - - apiServerID - - decodableVersions - - encodingVersion + - admissionReviewVersions + - clientConfig + - name + - sideEffects type: object - v1alpha1.StorageVersion: - description: Storage version of a specific resource. + v1.MutatingWebhookConfiguration: + description: MutatingWebhookConfiguration describes the configuration of and + admission webhook that accept or reject and may change the object. example: metadata: generation: 6 @@ -112903,40 +113114,162 @@ components: name: name namespace: namespace apiVersion: apiVersion + webhooks: + - admissionReviewVersions: + - admissionReviewVersions + - admissionReviewVersions + matchPolicy: matchPolicy + reinvocationPolicy: reinvocationPolicy + name: name + namespaceSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + timeoutSeconds: 6 + rules: + - operations: + - operations + - operations + apiVersions: + - apiVersions + - apiVersions + scope: scope + resources: + - resources + - resources + apiGroups: + - apiGroups + - apiGroups + - operations: + - operations + - operations + apiVersions: + - apiVersions + - apiVersions + scope: scope + resources: + - resources + - resources + apiGroups: + - apiGroups + - apiGroups + clientConfig: + caBundle: caBundle + service: + path: path + port: 0 + name: name + namespace: namespace + url: url + matchConditions: + - expression: expression + name: name + - expression: expression + name: name + objectSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + failurePolicy: failurePolicy + sideEffects: sideEffects + - admissionReviewVersions: + - admissionReviewVersions + - admissionReviewVersions + matchPolicy: matchPolicy + reinvocationPolicy: reinvocationPolicy + name: name + namespaceSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + timeoutSeconds: 6 + rules: + - operations: + - operations + - operations + apiVersions: + - apiVersions + - apiVersions + scope: scope + resources: + - resources + - resources + apiGroups: + - apiGroups + - apiGroups + - operations: + - operations + - operations + apiVersions: + - apiVersions + - apiVersions + scope: scope + resources: + - resources + - resources + apiGroups: + - apiGroups + - apiGroups + clientConfig: + caBundle: caBundle + service: + path: path + port: 0 + name: name + namespace: namespace + url: url + matchConditions: + - expression: expression + name: name + - expression: expression + name: name + objectSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + failurePolicy: failurePolicy + sideEffects: sideEffects kind: kind - spec: "{}" - status: - commonEncodingVersion: commonEncodingVersion - conditions: - - reason: reason - lastTransitionTime: 2000-01-23T04:56:07.000+00:00 - message: message - type: type - observedGeneration: 0 - status: status - - reason: reason - lastTransitionTime: 2000-01-23T04:56:07.000+00:00 - message: message - type: type - observedGeneration: 0 - status: status - storageVersions: - - apiServerID: apiServerID - decodableVersions: - - decodableVersions - - decodableVersions - encodingVersion: encodingVersion - servedVersions: - - servedVersions - - servedVersions - - apiServerID: apiServerID - decodableVersions: - - decodableVersions - - decodableVersions - encodingVersion: encodingVersion - servedVersions: - - servedVersions - - servedVersions properties: apiVersion: description: "APIVersion defines the versioned schema of this representation\ @@ -112950,63 +113283,26 @@ components: type: string metadata: $ref: "#/components/schemas/v1.ObjectMeta" - spec: - description: spec is an empty spec. It is here to comply with Kubernetes - API style. - properties: {} - type: object - status: - $ref: "#/components/schemas/v1alpha1.StorageVersionStatus" - required: - - metadata + webhooks: + description: webhooks is a list of webhooks and the affected resources and + operations. + items: + $ref: "#/components/schemas/v1.MutatingWebhook" + type: array + x-kubernetes-patch-strategy: merge + x-kubernetes-list-type: map + x-kubernetes-list-map-keys: + - name + x-kubernetes-patch-merge-key: name type: object x-kubernetes-group-version-kind: - - group: internal.apiserver.k8s.io - kind: StorageVersion - version: v1alpha1 + - group: admissionregistration.k8s.io + kind: MutatingWebhookConfiguration + version: v1 x-implements: - io.kubernetes.client.common.KubernetesObject - v1alpha1.StorageVersionCondition: - description: Describes the state of the storageVersion at a certain point. - example: - reason: reason - lastTransitionTime: 2000-01-23T04:56:07.000+00:00 - message: message - type: type - observedGeneration: 0 - status: status - properties: - lastTransitionTime: - description: lastTransitionTime is the last time the condition transitioned - from one status to another. - format: date-time - type: string - message: - description: message is a human readable string indicating details about - the transition. - type: string - observedGeneration: - description: "observedGeneration represents the .metadata.generation that\ - \ the condition was set based upon, if field is set." - format: int64 - type: integer - reason: - description: reason for the condition's last transition. - type: string - status: - description: "status of the condition, one of True, False, Unknown." - type: string - type: - description: type of the condition. - type: string - required: - - message - - reason - - status - - type - type: object - v1alpha1.StorageVersionList: - description: A list of StorageVersions. + v1.MutatingWebhookConfigurationList: + description: MutatingWebhookConfigurationList is a list of MutatingWebhookConfiguration. example: metadata: remainingItemCount: 1 @@ -113065,40 +113361,162 @@ components: name: name namespace: namespace apiVersion: apiVersion + webhooks: + - admissionReviewVersions: + - admissionReviewVersions + - admissionReviewVersions + matchPolicy: matchPolicy + reinvocationPolicy: reinvocationPolicy + name: name + namespaceSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + timeoutSeconds: 6 + rules: + - operations: + - operations + - operations + apiVersions: + - apiVersions + - apiVersions + scope: scope + resources: + - resources + - resources + apiGroups: + - apiGroups + - apiGroups + - operations: + - operations + - operations + apiVersions: + - apiVersions + - apiVersions + scope: scope + resources: + - resources + - resources + apiGroups: + - apiGroups + - apiGroups + clientConfig: + caBundle: caBundle + service: + path: path + port: 0 + name: name + namespace: namespace + url: url + matchConditions: + - expression: expression + name: name + - expression: expression + name: name + objectSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + failurePolicy: failurePolicy + sideEffects: sideEffects + - admissionReviewVersions: + - admissionReviewVersions + - admissionReviewVersions + matchPolicy: matchPolicy + reinvocationPolicy: reinvocationPolicy + name: name + namespaceSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + timeoutSeconds: 6 + rules: + - operations: + - operations + - operations + apiVersions: + - apiVersions + - apiVersions + scope: scope + resources: + - resources + - resources + apiGroups: + - apiGroups + - apiGroups + - operations: + - operations + - operations + apiVersions: + - apiVersions + - apiVersions + scope: scope + resources: + - resources + - resources + apiGroups: + - apiGroups + - apiGroups + clientConfig: + caBundle: caBundle + service: + path: path + port: 0 + name: name + namespace: namespace + url: url + matchConditions: + - expression: expression + name: name + - expression: expression + name: name + objectSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + failurePolicy: failurePolicy + sideEffects: sideEffects kind: kind - spec: "{}" - status: - commonEncodingVersion: commonEncodingVersion - conditions: - - reason: reason - lastTransitionTime: 2000-01-23T04:56:07.000+00:00 - message: message - type: type - observedGeneration: 0 - status: status - - reason: reason - lastTransitionTime: 2000-01-23T04:56:07.000+00:00 - message: message - type: type - observedGeneration: 0 - status: status - storageVersions: - - apiServerID: apiServerID - decodableVersions: - - decodableVersions - - decodableVersions - encodingVersion: encodingVersion - servedVersions: - - servedVersions - - servedVersions - - apiServerID: apiServerID - decodableVersions: - - decodableVersions - - decodableVersions - encodingVersion: encodingVersion - servedVersions: - - servedVersions - - servedVersions - metadata: generation: 6 finalizers: @@ -113146,40 +113564,162 @@ components: name: name namespace: namespace apiVersion: apiVersion + webhooks: + - admissionReviewVersions: + - admissionReviewVersions + - admissionReviewVersions + matchPolicy: matchPolicy + reinvocationPolicy: reinvocationPolicy + name: name + namespaceSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + timeoutSeconds: 6 + rules: + - operations: + - operations + - operations + apiVersions: + - apiVersions + - apiVersions + scope: scope + resources: + - resources + - resources + apiGroups: + - apiGroups + - apiGroups + - operations: + - operations + - operations + apiVersions: + - apiVersions + - apiVersions + scope: scope + resources: + - resources + - resources + apiGroups: + - apiGroups + - apiGroups + clientConfig: + caBundle: caBundle + service: + path: path + port: 0 + name: name + namespace: namespace + url: url + matchConditions: + - expression: expression + name: name + - expression: expression + name: name + objectSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + failurePolicy: failurePolicy + sideEffects: sideEffects + - admissionReviewVersions: + - admissionReviewVersions + - admissionReviewVersions + matchPolicy: matchPolicy + reinvocationPolicy: reinvocationPolicy + name: name + namespaceSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + timeoutSeconds: 6 + rules: + - operations: + - operations + - operations + apiVersions: + - apiVersions + - apiVersions + scope: scope + resources: + - resources + - resources + apiGroups: + - apiGroups + - apiGroups + - operations: + - operations + - operations + apiVersions: + - apiVersions + - apiVersions + scope: scope + resources: + - resources + - resources + apiGroups: + - apiGroups + - apiGroups + clientConfig: + caBundle: caBundle + service: + path: path + port: 0 + name: name + namespace: namespace + url: url + matchConditions: + - expression: expression + name: name + - expression: expression + name: name + objectSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + failurePolicy: failurePolicy + sideEffects: sideEffects kind: kind - spec: "{}" - status: - commonEncodingVersion: commonEncodingVersion - conditions: - - reason: reason - lastTransitionTime: 2000-01-23T04:56:07.000+00:00 - message: message - type: type - observedGeneration: 0 - status: status - - reason: reason - lastTransitionTime: 2000-01-23T04:56:07.000+00:00 - message: message - type: type - observedGeneration: 0 - status: status - storageVersions: - - apiServerID: apiServerID - decodableVersions: - - decodableVersions - - decodableVersions - encodingVersion: encodingVersion - servedVersions: - - servedVersions - - servedVersions - - apiServerID: apiServerID - decodableVersions: - - decodableVersions - - decodableVersions - encodingVersion: encodingVersion - servedVersions: - - servedVersions - - servedVersions properties: apiVersion: description: "APIVersion defines the versioned schema of this representation\ @@ -113187,9 +113727,9 @@ components: \ internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources" type: string items: - description: Items holds a list of StorageVersion + description: List of MutatingWebhookConfiguration. items: - $ref: "#/components/schemas/v1alpha1.StorageVersion" + $ref: "#/components/schemas/v1.MutatingWebhookConfiguration" type: array kind: description: "Kind is a string value representing the REST resource this\ @@ -113202,84 +113742,289 @@ components: - items type: object x-kubernetes-group-version-kind: - - group: internal.apiserver.k8s.io - kind: StorageVersionList - version: v1alpha1 + - group: admissionregistration.k8s.io + kind: MutatingWebhookConfigurationList + version: v1 x-implements: - io.kubernetes.client.common.KubernetesListObject - v1alpha1.StorageVersionStatus: - description: API server instances report the versions they can decode and the - version they encode objects to when persisting objects in the backend. + v1.Mutation: + description: Mutation specifies the CEL expression which is used to apply the + Mutation. example: - commonEncodingVersion: commonEncodingVersion - conditions: - - reason: reason - lastTransitionTime: 2000-01-23T04:56:07.000+00:00 - message: message - type: type - observedGeneration: 0 - status: status - - reason: reason - lastTransitionTime: 2000-01-23T04:56:07.000+00:00 - message: message - type: type - observedGeneration: 0 - status: status - storageVersions: - - apiServerID: apiServerID - decodableVersions: - - decodableVersions - - decodableVersions - encodingVersion: encodingVersion - servedVersions: - - servedVersions - - servedVersions - - apiServerID: apiServerID - decodableVersions: - - decodableVersions - - decodableVersions - encodingVersion: encodingVersion - servedVersions: - - servedVersions - - servedVersions + patchType: patchType + applyConfiguration: + expression: expression + jsonPatch: + expression: expression properties: - commonEncodingVersion: - description: "commonEncodingVersion is set to an encoding storage version\ - \ if all API server instances share that same version. If they don't share\ - \ one storage version, this field is left empty. API servers should finish\ - \ updating its storageVersionStatus entry before serving write operations,\ - \ so that this field will be in sync with the reality." + applyConfiguration: + $ref: "#/components/schemas/v1.ApplyConfiguration" + jsonPatch: + $ref: "#/components/schemas/v1.JSONPatch" + patchType: + description: patchType indicates the patch strategy used. Allowed values + are "ApplyConfiguration" and "JSONPatch". Required. type: string - conditions: - description: conditions lists the latest available observations of the storageVersion's - state. + required: + - patchType + type: object + v1.NamedRuleWithOperations: + description: NamedRuleWithOperations is a tuple of Operations and Resources + with ResourceNames. + example: + resourceNames: + - resourceNames + - resourceNames + operations: + - operations + - operations + apiVersions: + - apiVersions + - apiVersions + scope: scope + resources: + - resources + - resources + apiGroups: + - apiGroups + - apiGroups + properties: + apiGroups: + description: "apiGroups is the API groups the resources belong to. '*' is\ + \ all groups. If '*' is present, the length of the slice must be one.\ + \ Required." items: - $ref: "#/components/schemas/v1alpha1.StorageVersionCondition" + type: string type: array - x-kubernetes-list-type: map - x-kubernetes-list-map-keys: - - type - storageVersions: - description: storageVersions lists the reported versions per API server - instance. + x-kubernetes-list-type: atomic + apiVersions: + description: "apiVersions is the API versions the resources belong to. '*'\ + \ is all versions. If '*' is present, the length of the slice must be\ + \ one. Required." items: - $ref: "#/components/schemas/v1alpha1.ServerStorageVersion" + type: string type: array - x-kubernetes-list-type: map - x-kubernetes-list-map-keys: - - apiServerID + x-kubernetes-list-type: atomic + operations: + description: "operations is the operations the admission hook cares about\ + \ - CREATE, UPDATE, DELETE, CONNECT or * for all of those operations and\ + \ any future admission operations that are added. If '*' is present, the\ + \ length of the slice must be one. Required." + items: + type: string + type: array + x-kubernetes-list-type: atomic + resourceNames: + description: resourceNames is an optional white list of names that the rule + applies to. An empty set means that everything is allowed. + items: + type: string + type: array + x-kubernetes-list-type: atomic + resources: + description: |- + resources is a list of resources this rule applies to. + + For example: 'pods' means pods. 'pods/log' means the log subresource of pods. '*' means all resources, but not subresources. 'pods/*' means all subresources of pods. '*/scale' means all scale subresources. '*/*' means all resources and their subresources. + + If wildcard is present, the validation rule will ensure resources do not overlap with each other. + + Depending on the enclosing object, subresources might not be allowed. Required. + items: + type: string + type: array + x-kubernetes-list-type: atomic + scope: + description: "scope specifies the scope of this rule. Valid values are \"\ + Cluster\", \"Namespaced\", and \"*\" \"Cluster\" means that only cluster-scoped\ + \ resources will match this rule. Namespace API objects are cluster-scoped.\ + \ \"Namespaced\" means that only namespaced resources will match this\ + \ rule. \"*\" means that there are no scope restrictions. Subresources\ + \ match the scope of their parent resource. Default is \"*\"." + type: string type: object - v1.ControllerRevision: - description: "ControllerRevision implements an immutable snapshot of state data.\ - \ Clients are responsible for serializing and deserializing the objects that\ - \ contain their internal state. Once a ControllerRevision has been successfully\ - \ created, it can not be updated. The API Server will fail validation of all\ - \ requests that attempt to mutate the Data field. ControllerRevisions may,\ - \ however, be deleted. Note that, due to its use by both the DaemonSet and\ - \ StatefulSet controllers for update and rollback, this object is beta. However,\ - \ it may be subject to name and representation changes in future releases,\ - \ and clients should not depend on its stability. It is primarily for internal\ - \ use by controllers." + x-kubernetes-map-type: atomic + v1.ParamKind: + description: ParamKind is a tuple of Group Kind and Version. + example: + apiVersion: apiVersion + kind: kind + properties: + apiVersion: + description: apiVersion is the API group version the resources belong to. + In format of "group/version". Required. + type: string + kind: + description: kind is the API kind the resources belong to. Required. + type: string + type: object + x-kubernetes-map-type: atomic + v1.ParamRef: + description: ParamRef describes how to locate the params to be used as input + to expressions of rules applied by a policy binding. + example: + name: name + namespace: namespace + selector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + parameterNotFoundAction: parameterNotFoundAction + properties: + name: + description: |- + name is the name of the resource being referenced. + + One of `name` or `selector` must be set, but `name` and `selector` are mutually exclusive properties. If one is set, the other must be unset. + + A single parameter used for all admission requests can be configured by setting the `name` field, leaving `selector` blank, and setting namespace if `paramKind` is namespace-scoped. + type: string + namespace: + description: |- + namespace is the namespace of the referenced resource. Allows limiting the search for params to a specific namespace. Applies to both `name` and `selector` fields. + + A per-namespace parameter may be used by specifying a namespace-scoped `paramKind` in the policy and leaving this field empty. + + - If `paramKind` is cluster-scoped, this field MUST be unset. Setting this field results in a configuration error. + + - If `paramKind` is namespace-scoped, the namespace of the object being evaluated for admission will be used when this field is left unset. Take care that if this is left empty the binding must not match any cluster-scoped resources, which will result in an error. + type: string + parameterNotFoundAction: + description: |- + parameterNotFoundAction controls the behavior of the binding when the resource exists, and name or selector is valid, but there are no parameters matched by the binding. If the value is set to `Allow`, then no matched parameters will be treated as successful validation by the binding. If set to `Deny`, then no matched parameters will be subject to the `failurePolicy` of the policy. + + Allowed values are `Allow` or `Deny` + + Required + type: string + selector: + $ref: "#/components/schemas/v1.LabelSelector" + type: object + x-kubernetes-map-type: atomic + v1.RuleWithOperations: + description: RuleWithOperations is a tuple of Operations and Resources. It is + recommended to make sure that all the tuple expansions are valid. + example: + operations: + - operations + - operations + apiVersions: + - apiVersions + - apiVersions + scope: scope + resources: + - resources + - resources + apiGroups: + - apiGroups + - apiGroups + properties: + apiGroups: + description: "apiGroups is the API groups the resources belong to. '*' is\ + \ all groups. If '*' is present, the length of the slice must be one.\ + \ Required." + items: + type: string + type: array + x-kubernetes-list-type: atomic + apiVersions: + description: "apiVersions is the API versions the resources belong to. '*'\ + \ is all versions. If '*' is present, the length of the slice must be\ + \ one. Required." + items: + type: string + type: array + x-kubernetes-list-type: atomic + operations: + description: "operations is the operations the admission hook cares about\ + \ - CREATE, UPDATE, DELETE, CONNECT or * for all of those operations and\ + \ any future admission operations that are added. If '*' is present, the\ + \ length of the slice must be one. Required." + items: + type: string + type: array + x-kubernetes-list-type: atomic + resources: + description: |- + resources is a list of resources this rule applies to. + + For example: 'pods' means pods. 'pods/log' means the log subresource of pods. '*' means all resources, but not subresources. 'pods/*' means all subresources of pods. '*/scale' means all scale subresources. '*/*' means all resources and their subresources. + + If wildcard is present, the validation rule will ensure resources do not overlap with each other. + + Depending on the enclosing object, subresources might not be allowed. Required. + items: + type: string + type: array + x-kubernetes-list-type: atomic + scope: + description: "scope specifies the scope of this rule. Valid values are \"\ + Cluster\", \"Namespaced\", and \"*\" \"Cluster\" means that only cluster-scoped\ + \ resources will match this rule. Namespace API objects are cluster-scoped.\ + \ \"Namespaced\" means that only namespaced resources will match this\ + \ rule. \"*\" means that there are no scope restrictions. Subresources\ + \ match the scope of their parent resource. Default is \"*\"." + type: string + type: object + admissionregistration.v1.ServiceReference: + description: ServiceReference holds a reference to Service.legacy.k8s.io + example: + path: path + port: 0 + name: name + namespace: namespace + properties: + name: + description: name is the name of the service. Required + type: string + namespace: + description: namespace is the namespace of the service. Required + type: string + path: + description: path is an optional URL path which will be sent in any request + to this service. + type: string + port: + description: "port is the port on the service that hosts the webhook. Default\ + \ to 443 for backward compatibility. `port` should be a valid port number\ + \ (1-65535, inclusive)." + format: int32 + type: integer + required: + - name + - namespace + type: object + v1.TypeChecking: + description: TypeChecking contains results of type checking the expressions + in the ValidatingAdmissionPolicy + example: + expressionWarnings: + - fieldRef: fieldRef + warning: warning + - fieldRef: fieldRef + warning: warning + properties: + expressionWarnings: + description: expressionWarnings contains the type checking warnings for + each expression. + items: + $ref: "#/components/schemas/v1.ExpressionWarning" + type: array + x-kubernetes-list-type: atomic + type: object + v1.ValidatingAdmissionPolicy: + description: ValidatingAdmissionPolicy describes the definition of an admission + validation policy that accepts or rejects an object without changing it. example: metadata: generation: 6 @@ -113328,19 +114073,159 @@ components: name: name namespace: namespace apiVersion: apiVersion - data: "{}" kind: kind - revision: 0 + spec: + variables: + - expression: expression + name: name + - expression: expression + name: name + paramKind: + apiVersion: apiVersion + kind: kind + auditAnnotations: + - valueExpression: valueExpression + key: key + - valueExpression: valueExpression + key: key + matchConditions: + - expression: expression + name: name + - expression: expression + name: name + matchConstraints: + matchPolicy: matchPolicy + resourceRules: + - resourceNames: + - resourceNames + - resourceNames + operations: + - operations + - operations + apiVersions: + - apiVersions + - apiVersions + scope: scope + resources: + - resources + - resources + apiGroups: + - apiGroups + - apiGroups + - resourceNames: + - resourceNames + - resourceNames + operations: + - operations + - operations + apiVersions: + - apiVersions + - apiVersions + scope: scope + resources: + - resources + - resources + apiGroups: + - apiGroups + - apiGroups + excludeResourceRules: + - resourceNames: + - resourceNames + - resourceNames + operations: + - operations + - operations + apiVersions: + - apiVersions + - apiVersions + scope: scope + resources: + - resources + - resources + apiGroups: + - apiGroups + - apiGroups + - resourceNames: + - resourceNames + - resourceNames + operations: + - operations + - operations + apiVersions: + - apiVersions + - apiVersions + scope: scope + resources: + - resources + - resources + apiGroups: + - apiGroups + - apiGroups + namespaceSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + objectSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + validations: + - reason: reason + expression: expression + messageExpression: messageExpression + message: message + - reason: reason + expression: expression + messageExpression: messageExpression + message: message + failurePolicy: failurePolicy + status: + typeChecking: + expressionWarnings: + - fieldRef: fieldRef + warning: warning + - fieldRef: fieldRef + warning: warning + conditions: + - reason: reason + lastTransitionTime: 2000-01-23T04:56:07.000+00:00 + message: message + type: type + observedGeneration: 5 + status: status + - reason: reason + lastTransitionTime: 2000-01-23T04:56:07.000+00:00 + message: message + type: type + observedGeneration: 5 + status: status + observedGeneration: 0 properties: apiVersion: description: "APIVersion defines the versioned schema of this representation\ \ of an object. Servers should convert recognized schemas to the latest\ \ internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources" type: string - data: - description: Data is the serialized representation of the state. - properties: {} - type: object kind: description: "Kind is a string value representing the REST resource this\ \ object represents. Servers may infer this from the endpoint the client\ @@ -113348,23 +114233,218 @@ components: type: string metadata: $ref: "#/components/schemas/v1.ObjectMeta" - revision: - description: Revision indicates the revision of the state represented by - Data. - format: int64 - type: integer + spec: + $ref: "#/components/schemas/v1.ValidatingAdmissionPolicySpec" + status: + $ref: "#/components/schemas/v1.ValidatingAdmissionPolicyStatus" + type: object + x-kubernetes-group-version-kind: + - group: admissionregistration.k8s.io + kind: ValidatingAdmissionPolicy + version: v1 + x-implements: + - io.kubernetes.client.common.KubernetesObject + v1.ValidatingAdmissionPolicyBinding: + description: |- + ValidatingAdmissionPolicyBinding binds the ValidatingAdmissionPolicy with paramerized resources. ValidatingAdmissionPolicyBinding and parameter CRDs together define how cluster administrators configure policies for clusters. + + For a given admission request, each binding will cause its policy to be evaluated N times, where N is 1 for policies/bindings that don't use params, otherwise N is the number of parameters selected by the binding. + + The CEL expressions of a policy must have a computed CEL cost below the maximum CEL budget. Each evaluation of the policy is given an independent CEL cost budget. Adding/removing policies, bindings, or params can not affect whether a given (policy, binding, param) combination is within its own CEL budget. + example: + metadata: + generation: 6 + finalizers: + - finalizers + - finalizers + resourceVersion: resourceVersion + annotations: + key: annotations + generateName: generateName + deletionTimestamp: 2000-01-23T04:56:07.000+00:00 + labels: + key: labels + ownerReferences: + - uid: uid + controller: true + apiVersion: apiVersion + kind: kind + name: name + blockOwnerDeletion: true + - uid: uid + controller: true + apiVersion: apiVersion + kind: kind + name: name + blockOwnerDeletion: true + selfLink: selfLink + deletionGracePeriodSeconds: 0 + uid: uid + managedFields: + - apiVersion: apiVersion + fieldsV1: "{}" + manager: manager + subresource: subresource + time: 2000-01-23T04:56:07.000+00:00 + operation: operation + fieldsType: fieldsType + - apiVersion: apiVersion + fieldsV1: "{}" + manager: manager + subresource: subresource + time: 2000-01-23T04:56:07.000+00:00 + operation: operation + fieldsType: fieldsType + creationTimestamp: 2000-01-23T04:56:07.000+00:00 + name: name + namespace: namespace + apiVersion: apiVersion + kind: kind + spec: + paramRef: + name: name + namespace: namespace + selector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + parameterNotFoundAction: parameterNotFoundAction + policyName: policyName + matchResources: + matchPolicy: matchPolicy + resourceRules: + - resourceNames: + - resourceNames + - resourceNames + operations: + - operations + - operations + apiVersions: + - apiVersions + - apiVersions + scope: scope + resources: + - resources + - resources + apiGroups: + - apiGroups + - apiGroups + - resourceNames: + - resourceNames + - resourceNames + operations: + - operations + - operations + apiVersions: + - apiVersions + - apiVersions + scope: scope + resources: + - resources + - resources + apiGroups: + - apiGroups + - apiGroups + excludeResourceRules: + - resourceNames: + - resourceNames + - resourceNames + operations: + - operations + - operations + apiVersions: + - apiVersions + - apiVersions + scope: scope + resources: + - resources + - resources + apiGroups: + - apiGroups + - apiGroups + - resourceNames: + - resourceNames + - resourceNames + operations: + - operations + - operations + apiVersions: + - apiVersions + - apiVersions + scope: scope + resources: + - resources + - resources + apiGroups: + - apiGroups + - apiGroups + namespaceSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + objectSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + validationActions: + - validationActions + - validationActions + properties: + apiVersion: + description: "APIVersion defines the versioned schema of this representation\ + \ of an object. Servers should convert recognized schemas to the latest\ + \ internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources" + type: string + kind: + description: "Kind is a string value representing the REST resource this\ + \ object represents. Servers may infer this from the endpoint the client\ + \ submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds" + type: string + metadata: + $ref: "#/components/schemas/v1.ObjectMeta" + spec: + $ref: "#/components/schemas/v1.ValidatingAdmissionPolicyBindingSpec" required: - - revision + - spec type: object x-kubernetes-group-version-kind: - - group: apps - kind: ControllerRevision + - group: admissionregistration.k8s.io + kind: ValidatingAdmissionPolicyBinding version: v1 x-implements: - io.kubernetes.client.common.KubernetesObject - v1.ControllerRevisionList: - description: ControllerRevisionList is a resource containing a list of ControllerRevision - objects. + v1.ValidatingAdmissionPolicyBindingList: + description: ValidatingAdmissionPolicyBindingList is a list of ValidatingAdmissionPolicyBinding. example: metadata: remainingItemCount: 1 @@ -113423,9 +114503,126 @@ components: name: name namespace: namespace apiVersion: apiVersion - data: "{}" kind: kind - revision: 0 + spec: + paramRef: + name: name + namespace: namespace + selector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + parameterNotFoundAction: parameterNotFoundAction + policyName: policyName + matchResources: + matchPolicy: matchPolicy + resourceRules: + - resourceNames: + - resourceNames + - resourceNames + operations: + - operations + - operations + apiVersions: + - apiVersions + - apiVersions + scope: scope + resources: + - resources + - resources + apiGroups: + - apiGroups + - apiGroups + - resourceNames: + - resourceNames + - resourceNames + operations: + - operations + - operations + apiVersions: + - apiVersions + - apiVersions + scope: scope + resources: + - resources + - resources + apiGroups: + - apiGroups + - apiGroups + excludeResourceRules: + - resourceNames: + - resourceNames + - resourceNames + operations: + - operations + - operations + apiVersions: + - apiVersions + - apiVersions + scope: scope + resources: + - resources + - resources + apiGroups: + - apiGroups + - apiGroups + - resourceNames: + - resourceNames + - resourceNames + operations: + - operations + - operations + apiVersions: + - apiVersions + - apiVersions + scope: scope + resources: + - resources + - resources + apiGroups: + - apiGroups + - apiGroups + namespaceSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + objectSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + validationActions: + - validationActions + - validationActions - metadata: generation: 6 finalizers: @@ -113473,9 +114670,126 @@ components: name: name namespace: namespace apiVersion: apiVersion - data: "{}" kind: kind - revision: 0 + spec: + paramRef: + name: name + namespace: namespace + selector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + parameterNotFoundAction: parameterNotFoundAction + policyName: policyName + matchResources: + matchPolicy: matchPolicy + resourceRules: + - resourceNames: + - resourceNames + - resourceNames + operations: + - operations + - operations + apiVersions: + - apiVersions + - apiVersions + scope: scope + resources: + - resources + - resources + apiGroups: + - apiGroups + - apiGroups + - resourceNames: + - resourceNames + - resourceNames + operations: + - operations + - operations + apiVersions: + - apiVersions + - apiVersions + scope: scope + resources: + - resources + - resources + apiGroups: + - apiGroups + - apiGroups + excludeResourceRules: + - resourceNames: + - resourceNames + - resourceNames + operations: + - operations + - operations + apiVersions: + - apiVersions + - apiVersions + scope: scope + resources: + - resources + - resources + apiGroups: + - apiGroups + - apiGroups + - resourceNames: + - resourceNames + - resourceNames + operations: + - operations + - operations + apiVersions: + - apiVersions + - apiVersions + scope: scope + resources: + - resources + - resources + apiGroups: + - apiGroups + - apiGroups + namespaceSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + objectSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + validationActions: + - validationActions + - validationActions properties: apiVersion: description: "APIVersion defines the versioned schema of this representation\ @@ -113483,9 +114797,9 @@ components: \ internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources" type: string items: - description: Items is the list of ControllerRevisions + description: List of PolicyBinding. items: - $ref: "#/components/schemas/v1.ControllerRevision" + $ref: "#/components/schemas/v1.ValidatingAdmissionPolicyBinding" type: array kind: description: "Kind is a string value representing the REST resource this\ @@ -113498,100 +114812,6414 @@ components: - items type: object x-kubernetes-group-version-kind: - - group: apps - kind: ControllerRevisionList + - group: admissionregistration.k8s.io + kind: ValidatingAdmissionPolicyBindingList version: v1 x-implements: - io.kubernetes.client.common.KubernetesListObject - v1.DaemonSet: - description: DaemonSet represents the configuration of a daemon set. + v1.ValidatingAdmissionPolicyBindingSpec: + description: ValidatingAdmissionPolicyBindingSpec is the specification of the + ValidatingAdmissionPolicyBinding. example: - metadata: - generation: 6 - finalizers: - - finalizers - - finalizers - resourceVersion: resourceVersion - annotations: - key: annotations - generateName: generateName - deletionTimestamp: 2000-01-23T04:56:07.000+00:00 - labels: - key: labels - ownerReferences: - - uid: uid - controller: true - apiVersion: apiVersion - kind: kind - name: name - blockOwnerDeletion: true - - uid: uid - controller: true - apiVersion: apiVersion - kind: kind - name: name - blockOwnerDeletion: true - selfLink: selfLink - deletionGracePeriodSeconds: 0 - uid: uid - managedFields: - - apiVersion: apiVersion - fieldsV1: "{}" - manager: manager - subresource: subresource - time: 2000-01-23T04:56:07.000+00:00 - operation: operation - fieldsType: fieldsType - - apiVersion: apiVersion - fieldsV1: "{}" - manager: manager - subresource: subresource - time: 2000-01-23T04:56:07.000+00:00 - operation: operation - fieldsType: fieldsType - creationTimestamp: 2000-01-23T04:56:07.000+00:00 + paramRef: name: name namespace: namespace - apiVersion: apiVersion - kind: kind - spec: - template: - metadata: - generation: 6 - finalizers: - - finalizers - - finalizers - resourceVersion: resourceVersion - annotations: - key: annotations - generateName: generateName - deletionTimestamp: 2000-01-23T04:56:07.000+00:00 - labels: - key: labels - ownerReferences: - - uid: uid - controller: true - apiVersion: apiVersion - kind: kind - name: name - blockOwnerDeletion: true - - uid: uid - controller: true - apiVersion: apiVersion - kind: kind - name: name - blockOwnerDeletion: true - selfLink: selfLink - deletionGracePeriodSeconds: 0 - uid: uid - managedFields: - - apiVersion: apiVersion - fieldsV1: "{}" - manager: manager - subresource: subresource - time: 2000-01-23T04:56:07.000+00:00 - operation: operation - fieldsType: fieldsType + selector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + parameterNotFoundAction: parameterNotFoundAction + policyName: policyName + matchResources: + matchPolicy: matchPolicy + resourceRules: + - resourceNames: + - resourceNames + - resourceNames + operations: + - operations + - operations + apiVersions: + - apiVersions + - apiVersions + scope: scope + resources: + - resources + - resources + apiGroups: + - apiGroups + - apiGroups + - resourceNames: + - resourceNames + - resourceNames + operations: + - operations + - operations + apiVersions: + - apiVersions + - apiVersions + scope: scope + resources: + - resources + - resources + apiGroups: + - apiGroups + - apiGroups + excludeResourceRules: + - resourceNames: + - resourceNames + - resourceNames + operations: + - operations + - operations + apiVersions: + - apiVersions + - apiVersions + scope: scope + resources: + - resources + - resources + apiGroups: + - apiGroups + - apiGroups + - resourceNames: + - resourceNames + - resourceNames + operations: + - operations + - operations + apiVersions: + - apiVersions + - apiVersions + scope: scope + resources: + - resources + - resources + apiGroups: + - apiGroups + - apiGroups + namespaceSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + objectSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + validationActions: + - validationActions + - validationActions + properties: + matchResources: + $ref: "#/components/schemas/v1.MatchResources" + paramRef: + $ref: "#/components/schemas/v1.ParamRef" + policyName: + description: "policyName references a ValidatingAdmissionPolicy name which\ + \ the ValidatingAdmissionPolicyBinding binds to. If the referenced resource\ + \ does not exist, this binding is considered invalid and will be ignored\ + \ Required." + type: string + validationActions: + description: |- + validationActions declares how Validations of the referenced ValidatingAdmissionPolicy are enforced. If a validation evaluates to false it is always enforced according to these actions. + + Failures defined by the ValidatingAdmissionPolicy's FailurePolicy are enforced according to these actions only if the FailurePolicy is set to Fail, otherwise the failures are ignored. This includes compilation errors, runtime errors and misconfigurations of the policy. + + validationActions is declared as a set of action values. Order does not matter. validationActions may not contain duplicates of the same action. + + The supported actions values are: + + "Deny" specifies that a validation failure results in a denied request. + + "Warn" specifies that a validation failure is reported to the request client in HTTP Warning headers, with a warning code of 299. Warnings can be sent both for allowed or denied admission responses. + + "Audit" specifies that a validation failure is included in the published audit event for the request. The audit event will contain a `validation.policy.admission.k8s.io/validation_failure` audit annotation with a value containing the details of the validation failures, formatted as a JSON list of objects, each with the following fields: - message: The validation failure message string - policy: The resource name of the ValidatingAdmissionPolicy - binding: The resource name of the ValidatingAdmissionPolicyBinding - expressionIndex: The index of the failed validations in the ValidatingAdmissionPolicy - validationActions: The enforcement actions enacted for the validation failure Example audit annotation: `"validation.policy.admission.k8s.io/validation_failure": "[{\"message\": \"Invalid value\", {\"policy\": \"policy.example.com\", {\"binding\": \"policybinding.example.com\", {\"expressionIndex\": \"1\", {\"validationActions\": [\"Audit\"]}]"` + + Clients should expect to handle additional values by ignoring any values not recognized. + + "Deny" and "Warn" may not be used together since this combination needlessly duplicates the validation failure both in the API response body and the HTTP warning headers. + + Required. + items: + type: string + type: array + x-kubernetes-list-type: set + required: + - policyName + - validationActions + type: object + v1.ValidatingAdmissionPolicyList: + description: ValidatingAdmissionPolicyList is a list of ValidatingAdmissionPolicy. + example: + metadata: + remainingItemCount: 1 + continue: continue + resourceVersion: resourceVersion + shardInfo: + selector: selector + selfLink: selfLink + apiVersion: apiVersion + kind: kind + items: + - metadata: + generation: 6 + finalizers: + - finalizers + - finalizers + resourceVersion: resourceVersion + annotations: + key: annotations + generateName: generateName + deletionTimestamp: 2000-01-23T04:56:07.000+00:00 + labels: + key: labels + ownerReferences: + - uid: uid + controller: true + apiVersion: apiVersion + kind: kind + name: name + blockOwnerDeletion: true + - uid: uid + controller: true + apiVersion: apiVersion + kind: kind + name: name + blockOwnerDeletion: true + selfLink: selfLink + deletionGracePeriodSeconds: 0 + uid: uid + managedFields: + - apiVersion: apiVersion + fieldsV1: "{}" + manager: manager + subresource: subresource + time: 2000-01-23T04:56:07.000+00:00 + operation: operation + fieldsType: fieldsType + - apiVersion: apiVersion + fieldsV1: "{}" + manager: manager + subresource: subresource + time: 2000-01-23T04:56:07.000+00:00 + operation: operation + fieldsType: fieldsType + creationTimestamp: 2000-01-23T04:56:07.000+00:00 + name: name + namespace: namespace + apiVersion: apiVersion + kind: kind + spec: + variables: + - expression: expression + name: name + - expression: expression + name: name + paramKind: + apiVersion: apiVersion + kind: kind + auditAnnotations: + - valueExpression: valueExpression + key: key + - valueExpression: valueExpression + key: key + matchConditions: + - expression: expression + name: name + - expression: expression + name: name + matchConstraints: + matchPolicy: matchPolicy + resourceRules: + - resourceNames: + - resourceNames + - resourceNames + operations: + - operations + - operations + apiVersions: + - apiVersions + - apiVersions + scope: scope + resources: + - resources + - resources + apiGroups: + - apiGroups + - apiGroups + - resourceNames: + - resourceNames + - resourceNames + operations: + - operations + - operations + apiVersions: + - apiVersions + - apiVersions + scope: scope + resources: + - resources + - resources + apiGroups: + - apiGroups + - apiGroups + excludeResourceRules: + - resourceNames: + - resourceNames + - resourceNames + operations: + - operations + - operations + apiVersions: + - apiVersions + - apiVersions + scope: scope + resources: + - resources + - resources + apiGroups: + - apiGroups + - apiGroups + - resourceNames: + - resourceNames + - resourceNames + operations: + - operations + - operations + apiVersions: + - apiVersions + - apiVersions + scope: scope + resources: + - resources + - resources + apiGroups: + - apiGroups + - apiGroups + namespaceSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + objectSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + validations: + - reason: reason + expression: expression + messageExpression: messageExpression + message: message + - reason: reason + expression: expression + messageExpression: messageExpression + message: message + failurePolicy: failurePolicy + status: + typeChecking: + expressionWarnings: + - fieldRef: fieldRef + warning: warning + - fieldRef: fieldRef + warning: warning + conditions: + - reason: reason + lastTransitionTime: 2000-01-23T04:56:07.000+00:00 + message: message + type: type + observedGeneration: 5 + status: status + - reason: reason + lastTransitionTime: 2000-01-23T04:56:07.000+00:00 + message: message + type: type + observedGeneration: 5 + status: status + observedGeneration: 0 + - metadata: + generation: 6 + finalizers: + - finalizers + - finalizers + resourceVersion: resourceVersion + annotations: + key: annotations + generateName: generateName + deletionTimestamp: 2000-01-23T04:56:07.000+00:00 + labels: + key: labels + ownerReferences: + - uid: uid + controller: true + apiVersion: apiVersion + kind: kind + name: name + blockOwnerDeletion: true + - uid: uid + controller: true + apiVersion: apiVersion + kind: kind + name: name + blockOwnerDeletion: true + selfLink: selfLink + deletionGracePeriodSeconds: 0 + uid: uid + managedFields: + - apiVersion: apiVersion + fieldsV1: "{}" + manager: manager + subresource: subresource + time: 2000-01-23T04:56:07.000+00:00 + operation: operation + fieldsType: fieldsType + - apiVersion: apiVersion + fieldsV1: "{}" + manager: manager + subresource: subresource + time: 2000-01-23T04:56:07.000+00:00 + operation: operation + fieldsType: fieldsType + creationTimestamp: 2000-01-23T04:56:07.000+00:00 + name: name + namespace: namespace + apiVersion: apiVersion + kind: kind + spec: + variables: + - expression: expression + name: name + - expression: expression + name: name + paramKind: + apiVersion: apiVersion + kind: kind + auditAnnotations: + - valueExpression: valueExpression + key: key + - valueExpression: valueExpression + key: key + matchConditions: + - expression: expression + name: name + - expression: expression + name: name + matchConstraints: + matchPolicy: matchPolicy + resourceRules: + - resourceNames: + - resourceNames + - resourceNames + operations: + - operations + - operations + apiVersions: + - apiVersions + - apiVersions + scope: scope + resources: + - resources + - resources + apiGroups: + - apiGroups + - apiGroups + - resourceNames: + - resourceNames + - resourceNames + operations: + - operations + - operations + apiVersions: + - apiVersions + - apiVersions + scope: scope + resources: + - resources + - resources + apiGroups: + - apiGroups + - apiGroups + excludeResourceRules: + - resourceNames: + - resourceNames + - resourceNames + operations: + - operations + - operations + apiVersions: + - apiVersions + - apiVersions + scope: scope + resources: + - resources + - resources + apiGroups: + - apiGroups + - apiGroups + - resourceNames: + - resourceNames + - resourceNames + operations: + - operations + - operations + apiVersions: + - apiVersions + - apiVersions + scope: scope + resources: + - resources + - resources + apiGroups: + - apiGroups + - apiGroups + namespaceSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + objectSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + validations: + - reason: reason + expression: expression + messageExpression: messageExpression + message: message + - reason: reason + expression: expression + messageExpression: messageExpression + message: message + failurePolicy: failurePolicy + status: + typeChecking: + expressionWarnings: + - fieldRef: fieldRef + warning: warning + - fieldRef: fieldRef + warning: warning + conditions: + - reason: reason + lastTransitionTime: 2000-01-23T04:56:07.000+00:00 + message: message + type: type + observedGeneration: 5 + status: status + - reason: reason + lastTransitionTime: 2000-01-23T04:56:07.000+00:00 + message: message + type: type + observedGeneration: 5 + status: status + observedGeneration: 0 + properties: + apiVersion: + description: "APIVersion defines the versioned schema of this representation\ + \ of an object. Servers should convert recognized schemas to the latest\ + \ internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources" + type: string + items: + description: List of ValidatingAdmissionPolicy. + items: + $ref: "#/components/schemas/v1.ValidatingAdmissionPolicy" + type: array + kind: + description: "Kind is a string value representing the REST resource this\ + \ object represents. Servers may infer this from the endpoint the client\ + \ submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds" + type: string + metadata: + $ref: "#/components/schemas/v1.ListMeta" + required: + - items + type: object + x-kubernetes-group-version-kind: + - group: admissionregistration.k8s.io + kind: ValidatingAdmissionPolicyList + version: v1 + x-implements: + - io.kubernetes.client.common.KubernetesListObject + v1.ValidatingAdmissionPolicySpec: + description: ValidatingAdmissionPolicySpec is the specification of the desired + behavior of the AdmissionPolicy. + example: + variables: + - expression: expression + name: name + - expression: expression + name: name + paramKind: + apiVersion: apiVersion + kind: kind + auditAnnotations: + - valueExpression: valueExpression + key: key + - valueExpression: valueExpression + key: key + matchConditions: + - expression: expression + name: name + - expression: expression + name: name + matchConstraints: + matchPolicy: matchPolicy + resourceRules: + - resourceNames: + - resourceNames + - resourceNames + operations: + - operations + - operations + apiVersions: + - apiVersions + - apiVersions + scope: scope + resources: + - resources + - resources + apiGroups: + - apiGroups + - apiGroups + - resourceNames: + - resourceNames + - resourceNames + operations: + - operations + - operations + apiVersions: + - apiVersions + - apiVersions + scope: scope + resources: + - resources + - resources + apiGroups: + - apiGroups + - apiGroups + excludeResourceRules: + - resourceNames: + - resourceNames + - resourceNames + operations: + - operations + - operations + apiVersions: + - apiVersions + - apiVersions + scope: scope + resources: + - resources + - resources + apiGroups: + - apiGroups + - apiGroups + - resourceNames: + - resourceNames + - resourceNames + operations: + - operations + - operations + apiVersions: + - apiVersions + - apiVersions + scope: scope + resources: + - resources + - resources + apiGroups: + - apiGroups + - apiGroups + namespaceSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + objectSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + validations: + - reason: reason + expression: expression + messageExpression: messageExpression + message: message + - reason: reason + expression: expression + messageExpression: messageExpression + message: message + failurePolicy: failurePolicy + properties: + auditAnnotations: + description: auditAnnotations contains CEL expressions which are used to + produce audit annotations for the audit event of the API request. validations + and auditAnnotations may not both be empty; a least one of validations + or auditAnnotations is required. + items: + $ref: "#/components/schemas/v1.AuditAnnotation" + type: array + x-kubernetes-list-type: atomic + failurePolicy: + description: |- + failurePolicy defines how to handle failures for the admission policy. Failures can occur from CEL expression parse errors, type check errors, runtime errors and invalid or mis-configured policy definitions or bindings. + + A policy is invalid if spec.paramKind refers to a non-existent Kind. A binding is invalid if spec.paramRef.name refers to a non-existent resource. + + failurePolicy does not define how validations that evaluate to false are handled. + + When failurePolicy is set to Fail, ValidatingAdmissionPolicyBinding validationActions define how failures are enforced. + + Allowed values are Ignore or Fail. Defaults to Fail. + type: string + matchConditions: + description: |- + matchConditions is a list of conditions that must be met for a request to be validated. Match conditions filter requests that have already been matched by the rules, namespaceSelector, and objectSelector. An empty list of matchConditions matches all requests. There are a maximum of 64 match conditions allowed. + + If a parameter object is provided, it can be accessed via the `params` handle in the same manner as validation expressions. + + The exact matching logic is (in order): + 1. If ANY matchCondition evaluates to FALSE, the policy is skipped. + 2. If ALL matchConditions evaluate to TRUE, the policy is evaluated. + 3. If any matchCondition evaluates to an error (but none are FALSE): + - If failurePolicy=Fail, reject the request + - If failurePolicy=Ignore, the policy is skipped + items: + $ref: "#/components/schemas/v1.MatchCondition" + type: array + x-kubernetes-patch-strategy: merge + x-kubernetes-list-type: map + x-kubernetes-list-map-keys: + - name + x-kubernetes-patch-merge-key: name + matchConstraints: + $ref: "#/components/schemas/v1.MatchResources" + paramKind: + $ref: "#/components/schemas/v1.ParamKind" + validations: + description: validations contain CEL expressions which is used to apply + the validation. Validations and AuditAnnotations may not both be empty; + a minimum of one Validations or AuditAnnotations is required. + items: + $ref: "#/components/schemas/v1.Validation" + type: array + x-kubernetes-list-type: atomic + variables: + description: |- + variables contain definitions of variables that can be used in composition of other expressions. Each variable is defined as a named CEL expression. The variables defined here will be available under `variables` in other expressions of the policy except MatchConditions because MatchConditions are evaluated before the rest of the policy. + + The expression of a variable can refer to other variables defined earlier in the list but not those after. Thus, Variables must be sorted by the order of first appearance and acyclic. + items: + $ref: "#/components/schemas/v1.Variable" + type: array + x-kubernetes-patch-strategy: merge + x-kubernetes-list-type: map + x-kubernetes-list-map-keys: + - name + x-kubernetes-patch-merge-key: name + type: object + v1.ValidatingAdmissionPolicyStatus: + description: ValidatingAdmissionPolicyStatus represents the status of an admission + validation policy. + example: + typeChecking: + expressionWarnings: + - fieldRef: fieldRef + warning: warning + - fieldRef: fieldRef + warning: warning + conditions: + - reason: reason + lastTransitionTime: 2000-01-23T04:56:07.000+00:00 + message: message + type: type + observedGeneration: 5 + status: status + - reason: reason + lastTransitionTime: 2000-01-23T04:56:07.000+00:00 + message: message + type: type + observedGeneration: 5 + status: status + observedGeneration: 0 + properties: + conditions: + description: conditions represent the latest available observations of a + policy's current state. + items: + $ref: "#/components/schemas/v1.Condition" + type: array + x-kubernetes-list-type: map + x-kubernetes-list-map-keys: + - type + observedGeneration: + description: observedGeneration is the generation observed by the controller. + format: int64 + type: integer + typeChecking: + $ref: "#/components/schemas/v1.TypeChecking" + type: object + v1.ValidatingWebhook: + description: ValidatingWebhook describes an admission webhook and the resources + and operations it applies to. + example: + admissionReviewVersions: + - admissionReviewVersions + - admissionReviewVersions + matchPolicy: matchPolicy + name: name + namespaceSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + timeoutSeconds: 0 + rules: + - operations: + - operations + - operations + apiVersions: + - apiVersions + - apiVersions + scope: scope + resources: + - resources + - resources + apiGroups: + - apiGroups + - apiGroups + - operations: + - operations + - operations + apiVersions: + - apiVersions + - apiVersions + scope: scope + resources: + - resources + - resources + apiGroups: + - apiGroups + - apiGroups + clientConfig: + caBundle: caBundle + service: + path: path + port: 0 + name: name + namespace: namespace + url: url + matchConditions: + - expression: expression + name: name + - expression: expression + name: name + objectSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + failurePolicy: failurePolicy + sideEffects: sideEffects + properties: + admissionReviewVersions: + description: "admissionReviewVersions is an ordered list of preferred `AdmissionReview`\ + \ versions the Webhook expects. API server will try to use first version\ + \ in the list which it supports. If none of the versions specified in\ + \ this list supported by API server, validation will fail for this object.\ + \ If a persisted webhook configuration specifies allowed versions and\ + \ does not include any versions known to the API Server, calls to the\ + \ webhook will fail and be subject to the failure policy." + items: + type: string + type: array + x-kubernetes-list-type: atomic + clientConfig: + $ref: "#/components/schemas/admissionregistration.v1.WebhookClientConfig" + failurePolicy: + description: failurePolicy defines how unrecognized errors from the admission + endpoint are handled - allowed values are Ignore or Fail. Defaults to + Fail. + type: string + matchConditions: + description: |- + matchConditions is a list of conditions that must be met for a request to be sent to this webhook. Match conditions filter requests that have already been matched by the rules, namespaceSelector, and objectSelector. An empty list of matchConditions matches all requests. There are a maximum of 64 match conditions allowed. + + The exact matching logic is (in order): + 1. If ANY matchCondition evaluates to FALSE, the webhook is skipped. + 2. If ALL matchConditions evaluate to TRUE, the webhook is called. + 3. If any matchCondition evaluates to an error (but none are FALSE): + - If failurePolicy=Fail, reject the request + - If failurePolicy=Ignore, the error is ignored and the webhook is skipped + items: + $ref: "#/components/schemas/v1.MatchCondition" + type: array + x-kubernetes-patch-strategy: merge + x-kubernetes-list-type: map + x-kubernetes-list-map-keys: + - name + x-kubernetes-patch-merge-key: name + matchPolicy: + description: |- + matchPolicy defines how the "rules" list is used to match incoming requests. Allowed values are "Exact" or "Equivalent". + + - Exact: match a request only if it exactly matches a specified rule. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, but "rules" only included `apiGroups:["apps"], apiVersions:["v1"], resources: ["deployments"]`, a request to apps/v1beta1 or extensions/v1beta1 would not be sent to the webhook. + + - Equivalent: match a request if modifies a resource listed in rules, even via another API group or version. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, and "rules" only included `apiGroups:["apps"], apiVersions:["v1"], resources: ["deployments"]`, a request to apps/v1beta1 or extensions/v1beta1 would be converted to apps/v1 and sent to the webhook. + + Defaults to "Equivalent" + type: string + name: + description: "name is the name of the admission webhook. Name should be\ + \ fully qualified, e.g., imagepolicy.kubernetes.io, where \"imagepolicy\"\ + \ is the name of the webhook, and kubernetes.io is the name of the organization.\ + \ Required." + type: string + namespaceSelector: + $ref: "#/components/schemas/v1.LabelSelector" + objectSelector: + $ref: "#/components/schemas/v1.LabelSelector" + rules: + description: "rules describes what operations on what resources/subresources\ + \ the webhook cares about. The webhook cares about an operation if it\ + \ matches _any_ Rule. However, in order to prevent ValidatingAdmissionWebhooks\ + \ and MutatingAdmissionWebhooks from putting the cluster in a state which\ + \ cannot be recovered from without completely disabling the plugin, ValidatingAdmissionWebhooks\ + \ and MutatingAdmissionWebhooks are never called on admission requests\ + \ for ValidatingWebhookConfiguration and MutatingWebhookConfiguration\ + \ objects." + items: + $ref: "#/components/schemas/v1.RuleWithOperations" + type: array + x-kubernetes-list-type: atomic + sideEffects: + description: "sideEffects states whether this webhook has side effects.\ + \ Acceptable values are: None, NoneOnDryRun (webhooks created via v1beta1\ + \ may also specify Some or Unknown). Webhooks with side effects MUST implement\ + \ a reconciliation system, since a request may be rejected by a future\ + \ step in the admission chain and the side effects therefore need to be\ + \ undone. Requests with the dryRun attribute will be auto-rejected if\ + \ they match a webhook with sideEffects == Unknown or Some." + type: string + timeoutSeconds: + description: "timeoutSeconds specifies the timeout for this webhook. After\ + \ the timeout passes, the webhook call will be ignored or the API call\ + \ will fail based on the failure policy. The timeout value must be between\ + \ 1 and 30 seconds. Default to 10 seconds." + format: int32 + type: integer + required: + - admissionReviewVersions + - clientConfig + - name + - sideEffects + type: object + v1.ValidatingWebhookConfiguration: + description: ValidatingWebhookConfiguration describes the configuration of and + admission webhook that accept or reject and object without changing it. + example: + metadata: + generation: 6 + finalizers: + - finalizers + - finalizers + resourceVersion: resourceVersion + annotations: + key: annotations + generateName: generateName + deletionTimestamp: 2000-01-23T04:56:07.000+00:00 + labels: + key: labels + ownerReferences: + - uid: uid + controller: true + apiVersion: apiVersion + kind: kind + name: name + blockOwnerDeletion: true + - uid: uid + controller: true + apiVersion: apiVersion + kind: kind + name: name + blockOwnerDeletion: true + selfLink: selfLink + deletionGracePeriodSeconds: 0 + uid: uid + managedFields: + - apiVersion: apiVersion + fieldsV1: "{}" + manager: manager + subresource: subresource + time: 2000-01-23T04:56:07.000+00:00 + operation: operation + fieldsType: fieldsType + - apiVersion: apiVersion + fieldsV1: "{}" + manager: manager + subresource: subresource + time: 2000-01-23T04:56:07.000+00:00 + operation: operation + fieldsType: fieldsType + creationTimestamp: 2000-01-23T04:56:07.000+00:00 + name: name + namespace: namespace + apiVersion: apiVersion + webhooks: + - admissionReviewVersions: + - admissionReviewVersions + - admissionReviewVersions + matchPolicy: matchPolicy + name: name + namespaceSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + timeoutSeconds: 0 + rules: + - operations: + - operations + - operations + apiVersions: + - apiVersions + - apiVersions + scope: scope + resources: + - resources + - resources + apiGroups: + - apiGroups + - apiGroups + - operations: + - operations + - operations + apiVersions: + - apiVersions + - apiVersions + scope: scope + resources: + - resources + - resources + apiGroups: + - apiGroups + - apiGroups + clientConfig: + caBundle: caBundle + service: + path: path + port: 0 + name: name + namespace: namespace + url: url + matchConditions: + - expression: expression + name: name + - expression: expression + name: name + objectSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + failurePolicy: failurePolicy + sideEffects: sideEffects + - admissionReviewVersions: + - admissionReviewVersions + - admissionReviewVersions + matchPolicy: matchPolicy + name: name + namespaceSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + timeoutSeconds: 0 + rules: + - operations: + - operations + - operations + apiVersions: + - apiVersions + - apiVersions + scope: scope + resources: + - resources + - resources + apiGroups: + - apiGroups + - apiGroups + - operations: + - operations + - operations + apiVersions: + - apiVersions + - apiVersions + scope: scope + resources: + - resources + - resources + apiGroups: + - apiGroups + - apiGroups + clientConfig: + caBundle: caBundle + service: + path: path + port: 0 + name: name + namespace: namespace + url: url + matchConditions: + - expression: expression + name: name + - expression: expression + name: name + objectSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + failurePolicy: failurePolicy + sideEffects: sideEffects + kind: kind + properties: + apiVersion: + description: "APIVersion defines the versioned schema of this representation\ + \ of an object. Servers should convert recognized schemas to the latest\ + \ internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources" + type: string + kind: + description: "Kind is a string value representing the REST resource this\ + \ object represents. Servers may infer this from the endpoint the client\ + \ submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds" + type: string + metadata: + $ref: "#/components/schemas/v1.ObjectMeta" + webhooks: + description: webhooks is a list of webhooks and the affected resources and + operations. + items: + $ref: "#/components/schemas/v1.ValidatingWebhook" + type: array + x-kubernetes-patch-strategy: merge + x-kubernetes-list-type: map + x-kubernetes-list-map-keys: + - name + x-kubernetes-patch-merge-key: name + type: object + x-kubernetes-group-version-kind: + - group: admissionregistration.k8s.io + kind: ValidatingWebhookConfiguration + version: v1 + x-implements: + - io.kubernetes.client.common.KubernetesObject + v1.ValidatingWebhookConfigurationList: + description: ValidatingWebhookConfigurationList is a list of ValidatingWebhookConfiguration. + example: + metadata: + remainingItemCount: 1 + continue: continue + resourceVersion: resourceVersion + shardInfo: + selector: selector + selfLink: selfLink + apiVersion: apiVersion + kind: kind + items: + - metadata: + generation: 6 + finalizers: + - finalizers + - finalizers + resourceVersion: resourceVersion + annotations: + key: annotations + generateName: generateName + deletionTimestamp: 2000-01-23T04:56:07.000+00:00 + labels: + key: labels + ownerReferences: + - uid: uid + controller: true + apiVersion: apiVersion + kind: kind + name: name + blockOwnerDeletion: true + - uid: uid + controller: true + apiVersion: apiVersion + kind: kind + name: name + blockOwnerDeletion: true + selfLink: selfLink + deletionGracePeriodSeconds: 0 + uid: uid + managedFields: + - apiVersion: apiVersion + fieldsV1: "{}" + manager: manager + subresource: subresource + time: 2000-01-23T04:56:07.000+00:00 + operation: operation + fieldsType: fieldsType + - apiVersion: apiVersion + fieldsV1: "{}" + manager: manager + subresource: subresource + time: 2000-01-23T04:56:07.000+00:00 + operation: operation + fieldsType: fieldsType + creationTimestamp: 2000-01-23T04:56:07.000+00:00 + name: name + namespace: namespace + apiVersion: apiVersion + webhooks: + - admissionReviewVersions: + - admissionReviewVersions + - admissionReviewVersions + matchPolicy: matchPolicy + name: name + namespaceSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + timeoutSeconds: 0 + rules: + - operations: + - operations + - operations + apiVersions: + - apiVersions + - apiVersions + scope: scope + resources: + - resources + - resources + apiGroups: + - apiGroups + - apiGroups + - operations: + - operations + - operations + apiVersions: + - apiVersions + - apiVersions + scope: scope + resources: + - resources + - resources + apiGroups: + - apiGroups + - apiGroups + clientConfig: + caBundle: caBundle + service: + path: path + port: 0 + name: name + namespace: namespace + url: url + matchConditions: + - expression: expression + name: name + - expression: expression + name: name + objectSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + failurePolicy: failurePolicy + sideEffects: sideEffects + - admissionReviewVersions: + - admissionReviewVersions + - admissionReviewVersions + matchPolicy: matchPolicy + name: name + namespaceSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + timeoutSeconds: 0 + rules: + - operations: + - operations + - operations + apiVersions: + - apiVersions + - apiVersions + scope: scope + resources: + - resources + - resources + apiGroups: + - apiGroups + - apiGroups + - operations: + - operations + - operations + apiVersions: + - apiVersions + - apiVersions + scope: scope + resources: + - resources + - resources + apiGroups: + - apiGroups + - apiGroups + clientConfig: + caBundle: caBundle + service: + path: path + port: 0 + name: name + namespace: namespace + url: url + matchConditions: + - expression: expression + name: name + - expression: expression + name: name + objectSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + failurePolicy: failurePolicy + sideEffects: sideEffects + kind: kind + - metadata: + generation: 6 + finalizers: + - finalizers + - finalizers + resourceVersion: resourceVersion + annotations: + key: annotations + generateName: generateName + deletionTimestamp: 2000-01-23T04:56:07.000+00:00 + labels: + key: labels + ownerReferences: + - uid: uid + controller: true + apiVersion: apiVersion + kind: kind + name: name + blockOwnerDeletion: true + - uid: uid + controller: true + apiVersion: apiVersion + kind: kind + name: name + blockOwnerDeletion: true + selfLink: selfLink + deletionGracePeriodSeconds: 0 + uid: uid + managedFields: + - apiVersion: apiVersion + fieldsV1: "{}" + manager: manager + subresource: subresource + time: 2000-01-23T04:56:07.000+00:00 + operation: operation + fieldsType: fieldsType + - apiVersion: apiVersion + fieldsV1: "{}" + manager: manager + subresource: subresource + time: 2000-01-23T04:56:07.000+00:00 + operation: operation + fieldsType: fieldsType + creationTimestamp: 2000-01-23T04:56:07.000+00:00 + name: name + namespace: namespace + apiVersion: apiVersion + webhooks: + - admissionReviewVersions: + - admissionReviewVersions + - admissionReviewVersions + matchPolicy: matchPolicy + name: name + namespaceSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + timeoutSeconds: 0 + rules: + - operations: + - operations + - operations + apiVersions: + - apiVersions + - apiVersions + scope: scope + resources: + - resources + - resources + apiGroups: + - apiGroups + - apiGroups + - operations: + - operations + - operations + apiVersions: + - apiVersions + - apiVersions + scope: scope + resources: + - resources + - resources + apiGroups: + - apiGroups + - apiGroups + clientConfig: + caBundle: caBundle + service: + path: path + port: 0 + name: name + namespace: namespace + url: url + matchConditions: + - expression: expression + name: name + - expression: expression + name: name + objectSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + failurePolicy: failurePolicy + sideEffects: sideEffects + - admissionReviewVersions: + - admissionReviewVersions + - admissionReviewVersions + matchPolicy: matchPolicy + name: name + namespaceSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + timeoutSeconds: 0 + rules: + - operations: + - operations + - operations + apiVersions: + - apiVersions + - apiVersions + scope: scope + resources: + - resources + - resources + apiGroups: + - apiGroups + - apiGroups + - operations: + - operations + - operations + apiVersions: + - apiVersions + - apiVersions + scope: scope + resources: + - resources + - resources + apiGroups: + - apiGroups + - apiGroups + clientConfig: + caBundle: caBundle + service: + path: path + port: 0 + name: name + namespace: namespace + url: url + matchConditions: + - expression: expression + name: name + - expression: expression + name: name + objectSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + failurePolicy: failurePolicy + sideEffects: sideEffects + kind: kind + properties: + apiVersion: + description: "APIVersion defines the versioned schema of this representation\ + \ of an object. Servers should convert recognized schemas to the latest\ + \ internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources" + type: string + items: + description: List of ValidatingWebhookConfiguration. + items: + $ref: "#/components/schemas/v1.ValidatingWebhookConfiguration" + type: array + kind: + description: "Kind is a string value representing the REST resource this\ + \ object represents. Servers may infer this from the endpoint the client\ + \ submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds" + type: string + metadata: + $ref: "#/components/schemas/v1.ListMeta" + required: + - items + type: object + x-kubernetes-group-version-kind: + - group: admissionregistration.k8s.io + kind: ValidatingWebhookConfigurationList + version: v1 + x-implements: + - io.kubernetes.client.common.KubernetesListObject + v1.Validation: + description: Validation specifies the CEL expression which is used to apply + the validation. + example: + reason: reason + expression: expression + messageExpression: messageExpression + message: message + properties: + expression: + description: "expression represents the expression which will be evaluated\ + \ by CEL. ref: https://github.com/google/cel-spec CEL expressions have\ + \ access to the contents of the API request/response, organized into CEL\ + \ variables as well as some other useful variables:\n\n- 'object' - The\ + \ object from the incoming request. The value is null for DELETE requests.\ + \ - 'oldObject' - The existing object. The value is null for CREATE requests.\ + \ - 'request' - Attributes of the API request([ref](/pkg/apis/admission/types.go#AdmissionRequest)).\ + \ - 'params' - Parameter resource referred to by the policy binding being\ + \ evaluated. Only populated if the policy has a ParamKind. - 'namespaceObject'\ + \ - The namespace object that the incoming object belongs to. The value\ + \ is null for cluster-scoped resources. - 'variables' - Map of composited\ + \ variables, from its name to its lazily evaluated value.\n For example,\ + \ a variable named 'foo' can be accessed as 'variables.foo'.\n- 'authorizer'\ + \ - A CEL Authorizer. May be used to perform authorization checks for\ + \ the principal (user or service account) of the request.\n See https://pkg.go.dev/k8s.io/apiserver/pkg/cel/library#Authz\n\ + - 'authorizer.requestResource' - A CEL ResourceCheck constructed from\ + \ the 'authorizer' and configured with the\n request resource.\n\nThe\ + \ `apiVersion`, `kind`, `metadata.name` and `metadata.generateName` are\ + \ always accessible from the root of the object. No other metadata properties\ + \ are accessible.\n\nOnly property names of the form `[a-zA-Z_.-/][a-zA-Z0-9_.-/]*`\ + \ are accessible. Accessible property names are escaped according to the\ + \ following rules when accessed in the expression: - '__' escapes to '__underscores__'\ + \ - '.' escapes to '__dot__' - '-' escapes to '__dash__' - '/' escapes\ + \ to '__slash__' - Property names that exactly match a CEL RESERVED keyword\ + \ escape to '__{keyword}__'. The keywords are:\n\t \"true\", \"false\"\ + , \"null\", \"in\", \"as\", \"break\", \"const\", \"continue\", \"else\"\ + , \"for\", \"function\", \"if\",\n\t \"import\", \"let\", \"loop\", \"\ + package\", \"namespace\", \"return\".\nExamples:\n - Expression accessing\ + \ a property named \"namespace\": {\"Expression\": \"object.__namespace__\ + \ > 0\"}\n - Expression accessing a property named \"x-prop\": {\"Expression\"\ + : \"object.x__dash__prop > 0\"}\n - Expression accessing a property named\ + \ \"redact__d\": {\"Expression\": \"object.redact__underscores__d > 0\"\ + }\n\nEquality on arrays with list type of 'set' or 'map' ignores element\ + \ order, i.e. [1, 2] == [2, 1]. Concatenation on arrays with x-kubernetes-list-type\ + \ use the semantics of the list type:\n - 'set': `X + Y` performs a union\ + \ where the array positions of all elements in `X` are preserved and\n\ + \ non-intersecting elements in `Y` are appended, retaining their partial\ + \ order.\n - 'map': `X + Y` performs a merge where the array positions\ + \ of all keys in `X` are preserved but the values\n are overwritten\ + \ by values in `Y` when the key sets of `X` and `Y` intersect. Elements\ + \ in `Y` with\n non-intersecting keys are appended, retaining their\ + \ partial order.\nRequired." + type: string + message: + description: "message represents the message displayed when validation fails.\ + \ The message is required if the Expression contains line breaks. The\ + \ message must not contain line breaks. If unset, the message is \"failed\ + \ rule: {Rule}\". e.g. \"must be a URL with the host matching spec.host\"\ + \ If the Expression contains line breaks. Message is required. The message\ + \ must not contain line breaks. If unset, the message is \"failed Expression:\ + \ {Expression}\"." + type: string + messageExpression: + description: "messageExpression declares a CEL expression that evaluates\ + \ to the validation failure message that is returned when this rule fails.\ + \ Since messageExpression is used as a failure message, it must evaluate\ + \ to a string. If both message and messageExpression are present on a\ + \ validation, then messageExpression will be used if validation fails.\ + \ If messageExpression results in a runtime error, the runtime error is\ + \ logged, and the validation failure message is produced as if the messageExpression\ + \ field were unset. If messageExpression evaluates to an empty string,\ + \ a string with only spaces, or a string that contains line breaks, then\ + \ the validation failure message will also be produced as if the messageExpression\ + \ field were unset, and the fact that messageExpression produced an empty\ + \ string/string with only spaces/string with line breaks will be logged.\ + \ messageExpression has access to all the same variables as the `expression`\ + \ except for 'authorizer' and 'authorizer.requestResource'. Example: \"\ + object.x must be less than max (\"+string(params.max)+\")\"" + type: string + reason: + description: "reason represents a machine-readable description of why this\ + \ validation failed. If this is the first validation in the list to fail,\ + \ this reason, as well as the corresponding HTTP response code, are used\ + \ in the HTTP response to the client. The currently supported reasons\ + \ are: \"Unauthorized\", \"Forbidden\", \"Invalid\", \"RequestEntityTooLarge\"\ + . If not set, StatusReasonInvalid is used in the response to the client." + type: string + required: + - expression + type: object + v1.Variable: + description: Variable is the definition of a variable that is used for composition. + A variable is defined as a named expression. + example: + expression: expression + name: name + properties: + expression: + description: expression is the expression that will be evaluated as the + value of the variable. The CEL expression has access to the same identifiers + as the CEL expressions in Validation. + type: string + name: + description: "name is the name of the variable. The name must be a valid\ + \ CEL identifier and unique among all variables. The variable can be accessed\ + \ in other expressions through `variables` For example, if name is \"\ + foo\", the variable will be available as `variables.foo`" + type: string + required: + - expression + - name + type: object + x-kubernetes-map-type: atomic + admissionregistration.v1.WebhookClientConfig: + description: WebhookClientConfig contains the information to make a TLS connection + with the webhook + example: + caBundle: caBundle + service: + path: path + port: 0 + name: name + namespace: namespace + url: url + properties: + caBundle: + description: "caBundle is a PEM encoded CA bundle which will be used to\ + \ validate the webhook's server certificate. If unspecified, system trust\ + \ roots on the apiserver are used." + format: byte + pattern: "^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$" + type: string + service: + $ref: "#/components/schemas/admissionregistration.v1.ServiceReference" + url: + description: |- + url gives the location of the webhook, in standard URL form (`scheme://host:port/path`). Exactly one of `url` or `service` must be specified. + + The `host` should not refer to a service running in the cluster; use the `service` field instead. The host might be resolved via external DNS in some apiservers (e.g., `kube-apiserver` cannot resolve in-cluster DNS as that would be a layering violation). `host` may also be an IP address. + + Please note that using `localhost` or `127.0.0.1` as a `host` is risky unless you take great care to run this webhook on all hosts which run an apiserver which might need to make calls to this webhook. Such installs are likely to be non-portable, i.e., not easy to turn up in a new cluster. + + The scheme must be "https"; the URL must begin with "https://". + + A path is optional, and if present may be any string permissible in a URL. You may use the path to pass an arbitrary string to the webhook, for example, a cluster identifier. + + Attempting to use a user or basic auth e.g. "user:password@" is not allowed. Fragments ("#...") and query parameters ("?...") are not allowed, either. + type: string + type: object + v1alpha1.ApplyConfiguration: + description: ApplyConfiguration defines the desired configuration values of + an object. + example: + expression: expression + properties: + expression: + description: "expression will be evaluated by CEL to create an apply configuration.\ + \ ref: https://github.com/google/cel-spec\n\nApply configurations are\ + \ declared in CEL using object initialization. For example, this CEL expression\ + \ returns an apply configuration to set a single field:\n\n\tObject{\n\ + \t spec: Object.spec{\n\t serviceAccountName: \"example\"\n\t }\n\ + \t}\n\nApply configurations may not modify atomic structs, maps or arrays\ + \ due to the risk of accidental deletion of values not included in the\ + \ apply configuration.\n\nCEL expressions have access to the object types\ + \ needed to create apply configurations:\n\n- 'Object' - CEL type of the\ + \ resource object. - 'Object.' - CEL type of object field (such\ + \ as 'Object.spec') - 'Object.....`\ + \ - CEL type of nested field (such as 'Object.spec.containers')\n\nCEL\ + \ expressions have access to the contents of the API request, organized\ + \ into CEL variables as well as some other useful variables:\n\n- 'object'\ + \ - The object from the incoming request. The value is null for DELETE\ + \ requests. - 'oldObject' - The existing object. The value is null for\ + \ CREATE requests. - 'request' - Attributes of the API request([ref](/pkg/apis/admission/types.go#AdmissionRequest)).\ + \ - 'params' - Parameter resource referred to by the policy binding being\ + \ evaluated. Only populated if the policy has a ParamKind. - 'namespaceObject'\ + \ - The namespace object that the incoming object belongs to. The value\ + \ is null for cluster-scoped resources. - 'variables' - Map of composited\ + \ variables, from its name to its lazily evaluated value.\n For example,\ + \ a variable named 'foo' can be accessed as 'variables.foo'.\n- 'authorizer'\ + \ - A CEL Authorizer. May be used to perform authorization checks for\ + \ the principal (user or service account) of the request.\n See https://pkg.go.dev/k8s.io/apiserver/pkg/cel/library#Authz\n\ + - 'authorizer.requestResource' - A CEL ResourceCheck constructed from\ + \ the 'authorizer' and configured with the\n request resource.\n\nThe\ + \ `apiVersion`, `kind`, `metadata.name` and `metadata.generateName` are\ + \ always accessible from the root of the object. No other metadata properties\ + \ are accessible.\n\nOnly property names of the form `[a-zA-Z_.-/][a-zA-Z0-9_.-/]*`\ + \ are accessible. Required." + type: string + type: object + v1alpha1.JSONPatch: + description: JSONPatch defines a JSON Patch. + example: + expression: expression + properties: + expression: + description: "expression will be evaluated by CEL to create a [JSON patch](https://jsonpatch.com/).\ + \ ref: https://github.com/google/cel-spec\n\nexpression must return an\ + \ array of JSONPatch values.\n\nFor example, this CEL expression returns\ + \ a JSON patch to conditionally modify a value:\n\n\t [\n\t JSONPatch{op:\ + \ \"test\", path: \"/spec/example\", value: \"Red\"},\n\t JSONPatch{op:\ + \ \"replace\", path: \"/spec/example\", value: \"Green\"}\n\t ]\n\nTo\ + \ define an object for the patch value, use Object types. For example:\n\ + \n\t [\n\t JSONPatch{\n\t op: \"add\",\n\t path: \"/spec/selector\"\ + ,\n\t value: Object.spec.selector{matchLabels: {\"environment\":\ + \ \"test\"}}\n\t }\n\t ]\n\nTo use strings containing '/' and '~'\ + \ as JSONPatch path keys, use \"jsonpatch.escapeKey\". For example:\n\n\ + \t [\n\t JSONPatch{\n\t op: \"add\",\n\t path: \"/metadata/labels/\"\ + \ + jsonpatch.escapeKey(\"example.com/environment\"),\n\t value:\ + \ \"test\"\n\t },\n\t ]\n\nCEL expressions have access to the types\ + \ needed to create JSON patches and objects:\n\n- 'JSONPatch' - CEL type\ + \ of JSON Patch operations. JSONPatch has the fields 'op', 'from', 'path'\ + \ and 'value'.\n See [JSON patch](https://jsonpatch.com/) for more details.\ + \ The 'value' field may be set to any of: string,\n integer, array, map\ + \ or object. If set, the 'path' and 'from' fields must be set to a\n\ + \ [JSON pointer](https://datatracker.ietf.org/doc/html/rfc6901/) string,\ + \ where the 'jsonpatch.escapeKey()' CEL\n function may be used to escape\ + \ path keys containing '/' and '~'.\n- 'Object' - CEL type of the resource\ + \ object. - 'Object.' - CEL type of object field (such as 'Object.spec')\ + \ - 'Object.....` - CEL type of nested\ + \ field (such as 'Object.spec.containers')\n\nCEL expressions have access\ + \ to the contents of the API request, organized into CEL variables as\ + \ well as some other useful variables:\n\n- 'object' - The object from\ + \ the incoming request. The value is null for DELETE requests. - 'oldObject'\ + \ - The existing object. The value is null for CREATE requests. - 'request'\ + \ - Attributes of the API request([ref](/pkg/apis/admission/types.go#AdmissionRequest)).\ + \ - 'params' - Parameter resource referred to by the policy binding being\ + \ evaluated. Only populated if the policy has a ParamKind. - 'namespaceObject'\ + \ - The namespace object that the incoming object belongs to. The value\ + \ is null for cluster-scoped resources. - 'variables' - Map of composited\ + \ variables, from its name to its lazily evaluated value.\n For example,\ + \ a variable named 'foo' can be accessed as 'variables.foo'.\n- 'authorizer'\ + \ - A CEL Authorizer. May be used to perform authorization checks for\ + \ the principal (user or service account) of the request.\n See https://pkg.go.dev/k8s.io/apiserver/pkg/cel/library#Authz\n\ + - 'authorizer.requestResource' - A CEL ResourceCheck constructed from\ + \ the 'authorizer' and configured with the\n request resource.\n\nCEL\ + \ expressions have access to [Kubernetes CEL function libraries](https://kubernetes.io/docs/reference/using-api/cel/#cel-options-language-features-and-libraries)\ + \ as well as:\n\n- 'jsonpatch.escapeKey' - Performs JSONPatch key escaping.\ + \ '~' and '/' are escaped as '~0' and `~1' respectively).\n\nOnly property\ + \ names of the form `[a-zA-Z_.-/][a-zA-Z0-9_.-/]*` are accessible. Required." + type: string + type: object + v1alpha1.MatchCondition: + example: + expression: expression + name: name + properties: + expression: + description: |- + expression represents the expression which will be evaluated by CEL. Must evaluate to bool. CEL expressions have access to the contents of the AdmissionRequest and Authorizer, organized into CEL variables: + + 'object' - The object from the incoming request. The value is null for DELETE requests. 'oldObject' - The existing object. The value is null for CREATE requests. 'request' - Attributes of the admission request(/pkg/apis/admission/types.go#AdmissionRequest). 'authorizer' - A CEL Authorizer. May be used to perform authorization checks for the principal (user or service account) of the request. + See https://pkg.go.dev/k8s.io/apiserver/pkg/cel/library#Authz + 'authorizer.requestResource' - A CEL ResourceCheck constructed from the 'authorizer' and configured with the + request resource. + Documentation on CEL: https://kubernetes.io/docs/reference/using-api/cel/ + + Required. + type: string + name: + description: |- + name is an identifier for this match condition, used for strategic merging of MatchConditions, as well as providing an identifier for logging purposes. A good name should be descriptive of the associated expression. Name must be a qualified name consisting of alphanumeric characters, '-', '_' or '.', and must start and end with an alphanumeric character (e.g. 'MyName', or 'my.name', or '123-abc', regex used for validation is '([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9]') with an optional DNS subdomain prefix and '/' (e.g. 'example.com/MyName') + + Required. + type: string + required: + - expression + - name + type: object + v1alpha1.MatchResources: + description: "MatchResources decides whether to run the admission control policy\ + \ on an object based on whether it meets the match criteria. The exclude rules\ + \ take precedence over include rules (if a resource matches both, it is excluded)" + example: + matchPolicy: matchPolicy + resourceRules: + - resourceNames: + - resourceNames + - resourceNames + operations: + - operations + - operations + apiVersions: + - apiVersions + - apiVersions + scope: scope + resources: + - resources + - resources + apiGroups: + - apiGroups + - apiGroups + - resourceNames: + - resourceNames + - resourceNames + operations: + - operations + - operations + apiVersions: + - apiVersions + - apiVersions + scope: scope + resources: + - resources + - resources + apiGroups: + - apiGroups + - apiGroups + excludeResourceRules: + - resourceNames: + - resourceNames + - resourceNames + operations: + - operations + - operations + apiVersions: + - apiVersions + - apiVersions + scope: scope + resources: + - resources + - resources + apiGroups: + - apiGroups + - apiGroups + - resourceNames: + - resourceNames + - resourceNames + operations: + - operations + - operations + apiVersions: + - apiVersions + - apiVersions + scope: scope + resources: + - resources + - resources + apiGroups: + - apiGroups + - apiGroups + namespaceSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + objectSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + properties: + excludeResourceRules: + description: "excludeResourceRules describes what operations on what resources/subresources\ + \ the policy should not care about. The exclude rules take precedence\ + \ over include rules (if a resource matches both, it is excluded)" + items: + $ref: "#/components/schemas/v1alpha1.NamedRuleWithOperations" + type: array + x-kubernetes-list-type: atomic + matchPolicy: + description: |- + matchPolicy defines how the "MatchResources" list is used to match incoming requests. Allowed values are "Exact" or "Equivalent". + + - Exact: match a request only if it exactly matches a specified rule. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, but "rules" only included `apiGroups:["apps"], apiVersions:["v1"], resources: ["deployments"]`, the admission policy does not consider requests to apps/v1beta1 or extensions/v1beta1 API groups. + + - Equivalent: match a request if modifies a resource listed in rules, even via another API group or version. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, and "rules" only included `apiGroups:["apps"], apiVersions:["v1"], resources: ["deployments"]`, the admission policy **does** consider requests made to apps/v1beta1 or extensions/v1beta1 API groups. The API server translates the request to a matched resource API if necessary. + + Defaults to "Equivalent" + type: string + namespaceSelector: + $ref: "#/components/schemas/v1.LabelSelector" + objectSelector: + $ref: "#/components/schemas/v1.LabelSelector" + resourceRules: + description: resourceRules describes what operations on what resources/subresources + the admission policy matches. The policy cares about an operation if it + matches _any_ Rule. + items: + $ref: "#/components/schemas/v1alpha1.NamedRuleWithOperations" + type: array + x-kubernetes-list-type: atomic + type: object + x-kubernetes-map-type: atomic + v1alpha1.MutatingAdmissionPolicy: + description: MutatingAdmissionPolicy describes the definition of an admission + mutation policy that mutates the object coming into admission chain. + example: + metadata: + generation: 6 + finalizers: + - finalizers + - finalizers + resourceVersion: resourceVersion + annotations: + key: annotations + generateName: generateName + deletionTimestamp: 2000-01-23T04:56:07.000+00:00 + labels: + key: labels + ownerReferences: + - uid: uid + controller: true + apiVersion: apiVersion + kind: kind + name: name + blockOwnerDeletion: true + - uid: uid + controller: true + apiVersion: apiVersion + kind: kind + name: name + blockOwnerDeletion: true + selfLink: selfLink + deletionGracePeriodSeconds: 0 + uid: uid + managedFields: + - apiVersion: apiVersion + fieldsV1: "{}" + manager: manager + subresource: subresource + time: 2000-01-23T04:56:07.000+00:00 + operation: operation + fieldsType: fieldsType + - apiVersion: apiVersion + fieldsV1: "{}" + manager: manager + subresource: subresource + time: 2000-01-23T04:56:07.000+00:00 + operation: operation + fieldsType: fieldsType + creationTimestamp: 2000-01-23T04:56:07.000+00:00 + name: name + namespace: namespace + apiVersion: apiVersion + kind: kind + spec: + reinvocationPolicy: reinvocationPolicy + variables: + - expression: expression + name: name + - expression: expression + name: name + mutations: + - patchType: patchType + applyConfiguration: + expression: expression + jsonPatch: + expression: expression + - patchType: patchType + applyConfiguration: + expression: expression + jsonPatch: + expression: expression + paramKind: + apiVersion: apiVersion + kind: kind + matchConditions: + - expression: expression + name: name + - expression: expression + name: name + matchConstraints: + matchPolicy: matchPolicy + resourceRules: + - resourceNames: + - resourceNames + - resourceNames + operations: + - operations + - operations + apiVersions: + - apiVersions + - apiVersions + scope: scope + resources: + - resources + - resources + apiGroups: + - apiGroups + - apiGroups + - resourceNames: + - resourceNames + - resourceNames + operations: + - operations + - operations + apiVersions: + - apiVersions + - apiVersions + scope: scope + resources: + - resources + - resources + apiGroups: + - apiGroups + - apiGroups + excludeResourceRules: + - resourceNames: + - resourceNames + - resourceNames + operations: + - operations + - operations + apiVersions: + - apiVersions + - apiVersions + scope: scope + resources: + - resources + - resources + apiGroups: + - apiGroups + - apiGroups + - resourceNames: + - resourceNames + - resourceNames + operations: + - operations + - operations + apiVersions: + - apiVersions + - apiVersions + scope: scope + resources: + - resources + - resources + apiGroups: + - apiGroups + - apiGroups + namespaceSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + objectSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + failurePolicy: failurePolicy + properties: + apiVersion: + description: "APIVersion defines the versioned schema of this representation\ + \ of an object. Servers should convert recognized schemas to the latest\ + \ internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources" + type: string + kind: + description: "Kind is a string value representing the REST resource this\ + \ object represents. Servers may infer this from the endpoint the client\ + \ submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds" + type: string + metadata: + $ref: "#/components/schemas/v1.ObjectMeta" + spec: + $ref: "#/components/schemas/v1alpha1.MutatingAdmissionPolicySpec" + type: object + x-kubernetes-group-version-kind: + - group: admissionregistration.k8s.io + kind: MutatingAdmissionPolicy + version: v1alpha1 + x-implements: + - io.kubernetes.client.common.KubernetesObject + v1alpha1.MutatingAdmissionPolicyBinding: + description: |- + MutatingAdmissionPolicyBinding binds the MutatingAdmissionPolicy with parametrized resources. MutatingAdmissionPolicyBinding and the optional parameter resource together define how cluster administrators configure policies for clusters. + + For a given admission request, each binding will cause its policy to be evaluated N times, where N is 1 for policies/bindings that don't use params, otherwise N is the number of parameters selected by the binding. Each evaluation is constrained by a [runtime cost budget](https://kubernetes.io/docs/reference/using-api/cel/#runtime-cost-budget). + + Adding/removing policies, bindings, or params can not affect whether a given (policy, binding, param) combination is within its own CEL budget. + example: + metadata: + generation: 6 + finalizers: + - finalizers + - finalizers + resourceVersion: resourceVersion + annotations: + key: annotations + generateName: generateName + deletionTimestamp: 2000-01-23T04:56:07.000+00:00 + labels: + key: labels + ownerReferences: + - uid: uid + controller: true + apiVersion: apiVersion + kind: kind + name: name + blockOwnerDeletion: true + - uid: uid + controller: true + apiVersion: apiVersion + kind: kind + name: name + blockOwnerDeletion: true + selfLink: selfLink + deletionGracePeriodSeconds: 0 + uid: uid + managedFields: + - apiVersion: apiVersion + fieldsV1: "{}" + manager: manager + subresource: subresource + time: 2000-01-23T04:56:07.000+00:00 + operation: operation + fieldsType: fieldsType + - apiVersion: apiVersion + fieldsV1: "{}" + manager: manager + subresource: subresource + time: 2000-01-23T04:56:07.000+00:00 + operation: operation + fieldsType: fieldsType + creationTimestamp: 2000-01-23T04:56:07.000+00:00 + name: name + namespace: namespace + apiVersion: apiVersion + kind: kind + spec: + paramRef: + name: name + namespace: namespace + selector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + parameterNotFoundAction: parameterNotFoundAction + policyName: policyName + matchResources: + matchPolicy: matchPolicy + resourceRules: + - resourceNames: + - resourceNames + - resourceNames + operations: + - operations + - operations + apiVersions: + - apiVersions + - apiVersions + scope: scope + resources: + - resources + - resources + apiGroups: + - apiGroups + - apiGroups + - resourceNames: + - resourceNames + - resourceNames + operations: + - operations + - operations + apiVersions: + - apiVersions + - apiVersions + scope: scope + resources: + - resources + - resources + apiGroups: + - apiGroups + - apiGroups + excludeResourceRules: + - resourceNames: + - resourceNames + - resourceNames + operations: + - operations + - operations + apiVersions: + - apiVersions + - apiVersions + scope: scope + resources: + - resources + - resources + apiGroups: + - apiGroups + - apiGroups + - resourceNames: + - resourceNames + - resourceNames + operations: + - operations + - operations + apiVersions: + - apiVersions + - apiVersions + scope: scope + resources: + - resources + - resources + apiGroups: + - apiGroups + - apiGroups + namespaceSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + objectSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + properties: + apiVersion: + description: "APIVersion defines the versioned schema of this representation\ + \ of an object. Servers should convert recognized schemas to the latest\ + \ internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources" + type: string + kind: + description: "Kind is a string value representing the REST resource this\ + \ object represents. Servers may infer this from the endpoint the client\ + \ submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds" + type: string + metadata: + $ref: "#/components/schemas/v1.ObjectMeta" + spec: + $ref: "#/components/schemas/v1alpha1.MutatingAdmissionPolicyBindingSpec" + type: object + x-kubernetes-group-version-kind: + - group: admissionregistration.k8s.io + kind: MutatingAdmissionPolicyBinding + version: v1alpha1 + x-implements: + - io.kubernetes.client.common.KubernetesObject + v1alpha1.MutatingAdmissionPolicyBindingList: + description: MutatingAdmissionPolicyBindingList is a list of MutatingAdmissionPolicyBinding. + example: + metadata: + remainingItemCount: 1 + continue: continue + resourceVersion: resourceVersion + shardInfo: + selector: selector + selfLink: selfLink + apiVersion: apiVersion + kind: kind + items: + - metadata: + generation: 6 + finalizers: + - finalizers + - finalizers + resourceVersion: resourceVersion + annotations: + key: annotations + generateName: generateName + deletionTimestamp: 2000-01-23T04:56:07.000+00:00 + labels: + key: labels + ownerReferences: + - uid: uid + controller: true + apiVersion: apiVersion + kind: kind + name: name + blockOwnerDeletion: true + - uid: uid + controller: true + apiVersion: apiVersion + kind: kind + name: name + blockOwnerDeletion: true + selfLink: selfLink + deletionGracePeriodSeconds: 0 + uid: uid + managedFields: + - apiVersion: apiVersion + fieldsV1: "{}" + manager: manager + subresource: subresource + time: 2000-01-23T04:56:07.000+00:00 + operation: operation + fieldsType: fieldsType + - apiVersion: apiVersion + fieldsV1: "{}" + manager: manager + subresource: subresource + time: 2000-01-23T04:56:07.000+00:00 + operation: operation + fieldsType: fieldsType + creationTimestamp: 2000-01-23T04:56:07.000+00:00 + name: name + namespace: namespace + apiVersion: apiVersion + kind: kind + spec: + paramRef: + name: name + namespace: namespace + selector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + parameterNotFoundAction: parameterNotFoundAction + policyName: policyName + matchResources: + matchPolicy: matchPolicy + resourceRules: + - resourceNames: + - resourceNames + - resourceNames + operations: + - operations + - operations + apiVersions: + - apiVersions + - apiVersions + scope: scope + resources: + - resources + - resources + apiGroups: + - apiGroups + - apiGroups + - resourceNames: + - resourceNames + - resourceNames + operations: + - operations + - operations + apiVersions: + - apiVersions + - apiVersions + scope: scope + resources: + - resources + - resources + apiGroups: + - apiGroups + - apiGroups + excludeResourceRules: + - resourceNames: + - resourceNames + - resourceNames + operations: + - operations + - operations + apiVersions: + - apiVersions + - apiVersions + scope: scope + resources: + - resources + - resources + apiGroups: + - apiGroups + - apiGroups + - resourceNames: + - resourceNames + - resourceNames + operations: + - operations + - operations + apiVersions: + - apiVersions + - apiVersions + scope: scope + resources: + - resources + - resources + apiGroups: + - apiGroups + - apiGroups + namespaceSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + objectSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + - metadata: + generation: 6 + finalizers: + - finalizers + - finalizers + resourceVersion: resourceVersion + annotations: + key: annotations + generateName: generateName + deletionTimestamp: 2000-01-23T04:56:07.000+00:00 + labels: + key: labels + ownerReferences: + - uid: uid + controller: true + apiVersion: apiVersion + kind: kind + name: name + blockOwnerDeletion: true + - uid: uid + controller: true + apiVersion: apiVersion + kind: kind + name: name + blockOwnerDeletion: true + selfLink: selfLink + deletionGracePeriodSeconds: 0 + uid: uid + managedFields: + - apiVersion: apiVersion + fieldsV1: "{}" + manager: manager + subresource: subresource + time: 2000-01-23T04:56:07.000+00:00 + operation: operation + fieldsType: fieldsType + - apiVersion: apiVersion + fieldsV1: "{}" + manager: manager + subresource: subresource + time: 2000-01-23T04:56:07.000+00:00 + operation: operation + fieldsType: fieldsType + creationTimestamp: 2000-01-23T04:56:07.000+00:00 + name: name + namespace: namespace + apiVersion: apiVersion + kind: kind + spec: + paramRef: + name: name + namespace: namespace + selector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + parameterNotFoundAction: parameterNotFoundAction + policyName: policyName + matchResources: + matchPolicy: matchPolicy + resourceRules: + - resourceNames: + - resourceNames + - resourceNames + operations: + - operations + - operations + apiVersions: + - apiVersions + - apiVersions + scope: scope + resources: + - resources + - resources + apiGroups: + - apiGroups + - apiGroups + - resourceNames: + - resourceNames + - resourceNames + operations: + - operations + - operations + apiVersions: + - apiVersions + - apiVersions + scope: scope + resources: + - resources + - resources + apiGroups: + - apiGroups + - apiGroups + excludeResourceRules: + - resourceNames: + - resourceNames + - resourceNames + operations: + - operations + - operations + apiVersions: + - apiVersions + - apiVersions + scope: scope + resources: + - resources + - resources + apiGroups: + - apiGroups + - apiGroups + - resourceNames: + - resourceNames + - resourceNames + operations: + - operations + - operations + apiVersions: + - apiVersions + - apiVersions + scope: scope + resources: + - resources + - resources + apiGroups: + - apiGroups + - apiGroups + namespaceSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + objectSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + properties: + apiVersion: + description: "APIVersion defines the versioned schema of this representation\ + \ of an object. Servers should convert recognized schemas to the latest\ + \ internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources" + type: string + items: + description: List of PolicyBinding. + items: + $ref: "#/components/schemas/v1alpha1.MutatingAdmissionPolicyBinding" + type: array + kind: + description: "Kind is a string value representing the REST resource this\ + \ object represents. Servers may infer this from the endpoint the client\ + \ submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds" + type: string + metadata: + $ref: "#/components/schemas/v1.ListMeta" + required: + - items + type: object + x-kubernetes-group-version-kind: + - group: admissionregistration.k8s.io + kind: MutatingAdmissionPolicyBindingList + version: v1alpha1 + x-implements: + - io.kubernetes.client.common.KubernetesListObject + v1alpha1.MutatingAdmissionPolicyBindingSpec: + description: MutatingAdmissionPolicyBindingSpec is the specification of the + MutatingAdmissionPolicyBinding. + example: + paramRef: + name: name + namespace: namespace + selector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + parameterNotFoundAction: parameterNotFoundAction + policyName: policyName + matchResources: + matchPolicy: matchPolicy + resourceRules: + - resourceNames: + - resourceNames + - resourceNames + operations: + - operations + - operations + apiVersions: + - apiVersions + - apiVersions + scope: scope + resources: + - resources + - resources + apiGroups: + - apiGroups + - apiGroups + - resourceNames: + - resourceNames + - resourceNames + operations: + - operations + - operations + apiVersions: + - apiVersions + - apiVersions + scope: scope + resources: + - resources + - resources + apiGroups: + - apiGroups + - apiGroups + excludeResourceRules: + - resourceNames: + - resourceNames + - resourceNames + operations: + - operations + - operations + apiVersions: + - apiVersions + - apiVersions + scope: scope + resources: + - resources + - resources + apiGroups: + - apiGroups + - apiGroups + - resourceNames: + - resourceNames + - resourceNames + operations: + - operations + - operations + apiVersions: + - apiVersions + - apiVersions + scope: scope + resources: + - resources + - resources + apiGroups: + - apiGroups + - apiGroups + namespaceSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + objectSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + properties: + matchResources: + $ref: "#/components/schemas/v1alpha1.MatchResources" + paramRef: + $ref: "#/components/schemas/v1alpha1.ParamRef" + policyName: + description: "policyName references a MutatingAdmissionPolicy name which\ + \ the MutatingAdmissionPolicyBinding binds to. If the referenced resource\ + \ does not exist, this binding is considered invalid and will be ignored\ + \ Required." + type: string + type: object + v1alpha1.MutatingAdmissionPolicyList: + description: MutatingAdmissionPolicyList is a list of MutatingAdmissionPolicy. + example: + metadata: + remainingItemCount: 1 + continue: continue + resourceVersion: resourceVersion + shardInfo: + selector: selector + selfLink: selfLink + apiVersion: apiVersion + kind: kind + items: + - metadata: + generation: 6 + finalizers: + - finalizers + - finalizers + resourceVersion: resourceVersion + annotations: + key: annotations + generateName: generateName + deletionTimestamp: 2000-01-23T04:56:07.000+00:00 + labels: + key: labels + ownerReferences: + - uid: uid + controller: true + apiVersion: apiVersion + kind: kind + name: name + blockOwnerDeletion: true + - uid: uid + controller: true + apiVersion: apiVersion + kind: kind + name: name + blockOwnerDeletion: true + selfLink: selfLink + deletionGracePeriodSeconds: 0 + uid: uid + managedFields: + - apiVersion: apiVersion + fieldsV1: "{}" + manager: manager + subresource: subresource + time: 2000-01-23T04:56:07.000+00:00 + operation: operation + fieldsType: fieldsType + - apiVersion: apiVersion + fieldsV1: "{}" + manager: manager + subresource: subresource + time: 2000-01-23T04:56:07.000+00:00 + operation: operation + fieldsType: fieldsType + creationTimestamp: 2000-01-23T04:56:07.000+00:00 + name: name + namespace: namespace + apiVersion: apiVersion + kind: kind + spec: + reinvocationPolicy: reinvocationPolicy + variables: + - expression: expression + name: name + - expression: expression + name: name + mutations: + - patchType: patchType + applyConfiguration: + expression: expression + jsonPatch: + expression: expression + - patchType: patchType + applyConfiguration: + expression: expression + jsonPatch: + expression: expression + paramKind: + apiVersion: apiVersion + kind: kind + matchConditions: + - expression: expression + name: name + - expression: expression + name: name + matchConstraints: + matchPolicy: matchPolicy + resourceRules: + - resourceNames: + - resourceNames + - resourceNames + operations: + - operations + - operations + apiVersions: + - apiVersions + - apiVersions + scope: scope + resources: + - resources + - resources + apiGroups: + - apiGroups + - apiGroups + - resourceNames: + - resourceNames + - resourceNames + operations: + - operations + - operations + apiVersions: + - apiVersions + - apiVersions + scope: scope + resources: + - resources + - resources + apiGroups: + - apiGroups + - apiGroups + excludeResourceRules: + - resourceNames: + - resourceNames + - resourceNames + operations: + - operations + - operations + apiVersions: + - apiVersions + - apiVersions + scope: scope + resources: + - resources + - resources + apiGroups: + - apiGroups + - apiGroups + - resourceNames: + - resourceNames + - resourceNames + operations: + - operations + - operations + apiVersions: + - apiVersions + - apiVersions + scope: scope + resources: + - resources + - resources + apiGroups: + - apiGroups + - apiGroups + namespaceSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + objectSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + failurePolicy: failurePolicy + - metadata: + generation: 6 + finalizers: + - finalizers + - finalizers + resourceVersion: resourceVersion + annotations: + key: annotations + generateName: generateName + deletionTimestamp: 2000-01-23T04:56:07.000+00:00 + labels: + key: labels + ownerReferences: + - uid: uid + controller: true + apiVersion: apiVersion + kind: kind + name: name + blockOwnerDeletion: true + - uid: uid + controller: true + apiVersion: apiVersion + kind: kind + name: name + blockOwnerDeletion: true + selfLink: selfLink + deletionGracePeriodSeconds: 0 + uid: uid + managedFields: + - apiVersion: apiVersion + fieldsV1: "{}" + manager: manager + subresource: subresource + time: 2000-01-23T04:56:07.000+00:00 + operation: operation + fieldsType: fieldsType + - apiVersion: apiVersion + fieldsV1: "{}" + manager: manager + subresource: subresource + time: 2000-01-23T04:56:07.000+00:00 + operation: operation + fieldsType: fieldsType + creationTimestamp: 2000-01-23T04:56:07.000+00:00 + name: name + namespace: namespace + apiVersion: apiVersion + kind: kind + spec: + reinvocationPolicy: reinvocationPolicy + variables: + - expression: expression + name: name + - expression: expression + name: name + mutations: + - patchType: patchType + applyConfiguration: + expression: expression + jsonPatch: + expression: expression + - patchType: patchType + applyConfiguration: + expression: expression + jsonPatch: + expression: expression + paramKind: + apiVersion: apiVersion + kind: kind + matchConditions: + - expression: expression + name: name + - expression: expression + name: name + matchConstraints: + matchPolicy: matchPolicy + resourceRules: + - resourceNames: + - resourceNames + - resourceNames + operations: + - operations + - operations + apiVersions: + - apiVersions + - apiVersions + scope: scope + resources: + - resources + - resources + apiGroups: + - apiGroups + - apiGroups + - resourceNames: + - resourceNames + - resourceNames + operations: + - operations + - operations + apiVersions: + - apiVersions + - apiVersions + scope: scope + resources: + - resources + - resources + apiGroups: + - apiGroups + - apiGroups + excludeResourceRules: + - resourceNames: + - resourceNames + - resourceNames + operations: + - operations + - operations + apiVersions: + - apiVersions + - apiVersions + scope: scope + resources: + - resources + - resources + apiGroups: + - apiGroups + - apiGroups + - resourceNames: + - resourceNames + - resourceNames + operations: + - operations + - operations + apiVersions: + - apiVersions + - apiVersions + scope: scope + resources: + - resources + - resources + apiGroups: + - apiGroups + - apiGroups + namespaceSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + objectSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + failurePolicy: failurePolicy + properties: + apiVersion: + description: "APIVersion defines the versioned schema of this representation\ + \ of an object. Servers should convert recognized schemas to the latest\ + \ internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources" + type: string + items: + description: List of ValidatingAdmissionPolicy. + items: + $ref: "#/components/schemas/v1alpha1.MutatingAdmissionPolicy" + type: array + kind: + description: "Kind is a string value representing the REST resource this\ + \ object represents. Servers may infer this from the endpoint the client\ + \ submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds" + type: string + metadata: + $ref: "#/components/schemas/v1.ListMeta" + required: + - items + type: object + x-kubernetes-group-version-kind: + - group: admissionregistration.k8s.io + kind: MutatingAdmissionPolicyList + version: v1alpha1 + x-implements: + - io.kubernetes.client.common.KubernetesListObject + v1alpha1.MutatingAdmissionPolicySpec: + description: MutatingAdmissionPolicySpec is the specification of the desired + behavior of the admission policy. + example: + reinvocationPolicy: reinvocationPolicy + variables: + - expression: expression + name: name + - expression: expression + name: name + mutations: + - patchType: patchType + applyConfiguration: + expression: expression + jsonPatch: + expression: expression + - patchType: patchType + applyConfiguration: + expression: expression + jsonPatch: + expression: expression + paramKind: + apiVersion: apiVersion + kind: kind + matchConditions: + - expression: expression + name: name + - expression: expression + name: name + matchConstraints: + matchPolicy: matchPolicy + resourceRules: + - resourceNames: + - resourceNames + - resourceNames + operations: + - operations + - operations + apiVersions: + - apiVersions + - apiVersions + scope: scope + resources: + - resources + - resources + apiGroups: + - apiGroups + - apiGroups + - resourceNames: + - resourceNames + - resourceNames + operations: + - operations + - operations + apiVersions: + - apiVersions + - apiVersions + scope: scope + resources: + - resources + - resources + apiGroups: + - apiGroups + - apiGroups + excludeResourceRules: + - resourceNames: + - resourceNames + - resourceNames + operations: + - operations + - operations + apiVersions: + - apiVersions + - apiVersions + scope: scope + resources: + - resources + - resources + apiGroups: + - apiGroups + - apiGroups + - resourceNames: + - resourceNames + - resourceNames + operations: + - operations + - operations + apiVersions: + - apiVersions + - apiVersions + scope: scope + resources: + - resources + - resources + apiGroups: + - apiGroups + - apiGroups + namespaceSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + objectSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + failurePolicy: failurePolicy + properties: + failurePolicy: + description: |- + failurePolicy defines how to handle failures for the admission policy. Failures can occur from CEL expression parse errors, type check errors, runtime errors and invalid or mis-configured policy definitions or bindings. + + A policy is invalid if paramKind refers to a non-existent Kind. A binding is invalid if paramRef.name refers to a non-existent resource. + + failurePolicy does not define how validations that evaluate to false are handled. + + Allowed values are Ignore or Fail. Defaults to Fail. + type: string + matchConditions: + description: |- + matchConditions is a list of conditions that must be met for a request to be validated. Match conditions filter requests that have already been matched by the matchConstraints. An empty list of matchConditions matches all requests. There are a maximum of 64 match conditions allowed. + + If a parameter object is provided, it can be accessed via the `params` handle in the same manner as validation expressions. + + The exact matching logic is (in order): + 1. If ANY matchCondition evaluates to FALSE, the policy is skipped. + 2. If ALL matchConditions evaluate to TRUE, the policy is evaluated. + 3. If any matchCondition evaluates to an error (but none are FALSE): + - If failurePolicy=Fail, reject the request + - If failurePolicy=Ignore, the policy is skipped + items: + $ref: "#/components/schemas/v1alpha1.MatchCondition" + type: array + x-kubernetes-patch-strategy: merge + x-kubernetes-list-type: map + x-kubernetes-list-map-keys: + - name + x-kubernetes-patch-merge-key: name + matchConstraints: + $ref: "#/components/schemas/v1alpha1.MatchResources" + mutations: + description: "mutations contain operations to perform on matching objects.\ + \ mutations may not be empty; a minimum of one mutation is required. mutations\ + \ are evaluated in order, and are reinvoked according to the reinvocationPolicy.\ + \ The mutations of a policy are invoked for each binding of this policy\ + \ and reinvocation of mutations occurs on a per binding basis." + items: + $ref: "#/components/schemas/v1alpha1.Mutation" + type: array + x-kubernetes-list-type: atomic + paramKind: + $ref: "#/components/schemas/v1alpha1.ParamKind" + reinvocationPolicy: + description: |- + reinvocationPolicy indicates whether mutations may be called multiple times per MutatingAdmissionPolicyBinding as part of a single admission evaluation. Allowed values are "Never" and "IfNeeded". + + Never: These mutations will not be called more than once per binding in a single admission evaluation. + + IfNeeded: These mutations may be invoked more than once per binding for a single admission request and there is no guarantee of order with respect to other admission plugins, admission webhooks, bindings of this policy and admission policies. Mutations are only reinvoked when mutations change the object after this mutation is invoked. Required. + type: string + variables: + description: |- + variables contain definitions of variables that can be used in composition of other expressions. Each variable is defined as a named CEL expression. The variables defined here will be available under `variables` in other expressions of the policy except matchConditions because matchConditions are evaluated before the rest of the policy. + + The expression of a variable can refer to other variables defined earlier in the list but not those after. Thus, variables must be sorted by the order of first appearance and acyclic. + items: + $ref: "#/components/schemas/v1alpha1.Variable" + type: array + x-kubernetes-list-type: atomic + type: object + v1alpha1.Mutation: + description: Mutation specifies the CEL expression which is used to apply the + Mutation. + example: + patchType: patchType + applyConfiguration: + expression: expression + jsonPatch: + expression: expression + properties: + applyConfiguration: + $ref: "#/components/schemas/v1alpha1.ApplyConfiguration" + jsonPatch: + $ref: "#/components/schemas/v1alpha1.JSONPatch" + patchType: + description: patchType indicates the patch strategy used. Allowed values + are "ApplyConfiguration" and "JSONPatch". Required. + type: string + required: + - patchType + type: object + v1alpha1.NamedRuleWithOperations: + description: NamedRuleWithOperations is a tuple of Operations and Resources + with ResourceNames. + example: + resourceNames: + - resourceNames + - resourceNames + operations: + - operations + - operations + apiVersions: + - apiVersions + - apiVersions + scope: scope + resources: + - resources + - resources + apiGroups: + - apiGroups + - apiGroups + properties: + apiGroups: + description: "apiGroups is the API groups the resources belong to. '*' is\ + \ all groups. If '*' is present, the length of the slice must be one.\ + \ Required." + items: + type: string + type: array + x-kubernetes-list-type: atomic + apiVersions: + description: "apiVersions is the API versions the resources belong to. '*'\ + \ is all versions. If '*' is present, the length of the slice must be\ + \ one. Required." + items: + type: string + type: array + x-kubernetes-list-type: atomic + operations: + description: "operations is the operations the admission hook cares about\ + \ - CREATE, UPDATE, DELETE, CONNECT or * for all of those operations and\ + \ any future admission operations that are added. If '*' is present, the\ + \ length of the slice must be one. Required." + items: + type: string + type: array + x-kubernetes-list-type: atomic + resourceNames: + description: resourceNames is an optional white list of names that the rule + applies to. An empty set means that everything is allowed. + items: + type: string + type: array + x-kubernetes-list-type: atomic + resources: + description: |- + resources is a list of resources this rule applies to. + + For example: 'pods' means pods. 'pods/log' means the log subresource of pods. '*' means all resources, but not subresources. 'pods/*' means all subresources of pods. '*/scale' means all scale subresources. '*/*' means all resources and their subresources. + + If wildcard is present, the validation rule will ensure resources do not overlap with each other. + + Depending on the enclosing object, subresources might not be allowed. Required. + items: + type: string + type: array + x-kubernetes-list-type: atomic + scope: + description: "scope specifies the scope of this rule. Valid values are \"\ + Cluster\", \"Namespaced\", and \"*\" \"Cluster\" means that only cluster-scoped\ + \ resources will match this rule. Namespace API objects are cluster-scoped.\ + \ \"Namespaced\" means that only namespaced resources will match this\ + \ rule. \"*\" means that there are no scope restrictions. Subresources\ + \ match the scope of their parent resource. Default is \"*\"." + type: string + type: object + x-kubernetes-map-type: atomic + v1alpha1.ParamKind: + description: ParamKind is a tuple of Group Kind and Version. + example: + apiVersion: apiVersion + kind: kind + properties: + apiVersion: + description: apiVersion is the API group version the resources belong to. + In format of "group/version". Required. + type: string + kind: + description: kind is the API kind the resources belong to. Required. + type: string + type: object + x-kubernetes-map-type: atomic + v1alpha1.ParamRef: + description: ParamRef describes how to locate the params to be used as input + to expressions of rules applied by a policy binding. + example: + name: name + namespace: namespace + selector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + parameterNotFoundAction: parameterNotFoundAction + properties: + name: + description: |- + name is the name of the resource being referenced. + + `name` and `selector` are mutually exclusive properties. If one is set, the other must be unset. + type: string + namespace: + description: |- + namespace is the namespace of the referenced resource. Allows limiting the search for params to a specific namespace. Applies to both `name` and `selector` fields. + + A per-namespace parameter may be used by specifying a namespace-scoped `paramKind` in the policy and leaving this field empty. + + - If `paramKind` is cluster-scoped, this field MUST be unset. Setting this field results in a configuration error. + + - If `paramKind` is namespace-scoped, the namespace of the object being evaluated for admission will be used when this field is left unset. Take care that if this is left empty the binding must not match any cluster-scoped resources, which will result in an error. + type: string + parameterNotFoundAction: + description: |- + parameterNotFoundAction controls the behavior of the binding when the resource exists, and name or selector is valid, but there are no parameters matched by the binding. If the value is set to `Allow`, then no matched parameters will be treated as successful validation by the binding. If set to `Deny`, then no matched parameters will be subject to the `failurePolicy` of the policy. + + Allowed values are `Allow` or `Deny` Default to `Deny` + type: string + selector: + $ref: "#/components/schemas/v1.LabelSelector" + type: object + x-kubernetes-map-type: atomic + v1alpha1.Variable: + description: Variable is the definition of a variable that is used for composition. + example: + expression: expression + name: name + properties: + expression: + description: expression is the expression that will be evaluated as the + value of the variable. The CEL expression has access to the same identifiers + as the CEL expressions in Validation. + type: string + name: + description: "name is the name of the variable. The name must be a valid\ + \ CEL identifier and unique among all variables. The variable can be accessed\ + \ in other expressions through `variables` For example, if name is \"\ + foo\", the variable will be available as `variables.foo`" + type: string + required: + - expression + - name + type: object + v1beta1.ApplyConfiguration: + description: ApplyConfiguration defines the desired configuration values of + an object. + example: + expression: expression + properties: + expression: + description: "expression will be evaluated by CEL to create an apply configuration.\ + \ ref: https://github.com/google/cel-spec\n\nApply configurations are\ + \ declared in CEL using object initialization. For example, this CEL expression\ + \ returns an apply configuration to set a single field:\n\n\tObject{\n\ + \t spec: Object.spec{\n\t serviceAccountName: \"example\"\n\t }\n\ + \t}\n\nApply configurations may not modify atomic structs, maps or arrays\ + \ due to the risk of accidental deletion of values not included in the\ + \ apply configuration.\n\nCEL expressions have access to the object types\ + \ needed to create apply configurations:\n\n- 'Object' - CEL type of the\ + \ resource object. - 'Object.' - CEL type of object field (such\ + \ as 'Object.spec') - 'Object.....`\ + \ - CEL type of nested field (such as 'Object.spec.containers')\n\nCEL\ + \ expressions have access to the contents of the API request, organized\ + \ into CEL variables as well as some other useful variables:\n\n- 'object'\ + \ - The object from the incoming request. The value is null for DELETE\ + \ requests. - 'oldObject' - The existing object. The value is null for\ + \ CREATE requests. - 'request' - Attributes of the API request([ref](/pkg/apis/admission/types.go#AdmissionRequest)).\ + \ - 'params' - Parameter resource referred to by the policy binding being\ + \ evaluated. Only populated if the policy has a ParamKind. - 'namespaceObject'\ + \ - The namespace object that the incoming object belongs to. The value\ + \ is null for cluster-scoped resources. - 'variables' - Map of composited\ + \ variables, from its name to its lazily evaluated value.\n For example,\ + \ a variable named 'foo' can be accessed as 'variables.foo'.\n- 'authorizer'\ + \ - A CEL Authorizer. May be used to perform authorization checks for\ + \ the principal (user or service account) of the request.\n See https://pkg.go.dev/k8s.io/apiserver/pkg/cel/library#Authz\n\ + - 'authorizer.requestResource' - A CEL ResourceCheck constructed from\ + \ the 'authorizer' and configured with the\n request resource.\n\nThe\ + \ `apiVersion`, `kind`, `metadata.name` and `metadata.generateName` are\ + \ always accessible from the root of the object. No other metadata properties\ + \ are accessible.\n\nOnly property names of the form `[a-zA-Z_.-/][a-zA-Z0-9_.-/]*`\ + \ are accessible. Required." + type: string + type: object + v1beta1.JSONPatch: + description: JSONPatch defines a JSON Patch. + example: + expression: expression + properties: + expression: + description: "expression will be evaluated by CEL to create a [JSON patch](https://jsonpatch.com/).\ + \ ref: https://github.com/google/cel-spec\n\nexpression must return an\ + \ array of JSONPatch values.\n\nFor example, this CEL expression returns\ + \ a JSON patch to conditionally modify a value:\n\n\t [\n\t JSONPatch{op:\ + \ \"test\", path: \"/spec/example\", value: \"Red\"},\n\t JSONPatch{op:\ + \ \"replace\", path: \"/spec/example\", value: \"Green\"}\n\t ]\n\nTo\ + \ define an object for the patch value, use Object types. For example:\n\ + \n\t [\n\t JSONPatch{\n\t op: \"add\",\n\t path: \"/spec/selector\"\ + ,\n\t value: Object.spec.selector{matchLabels: {\"environment\":\ + \ \"test\"}}\n\t }\n\t ]\n\nTo use strings containing '/' and '~'\ + \ as JSONPatch path keys, use \"jsonpatch.escapeKey\". For example:\n\n\ + \t [\n\t JSONPatch{\n\t op: \"add\",\n\t path: \"/metadata/labels/\"\ + \ + jsonpatch.escapeKey(\"example.com/environment\"),\n\t value:\ + \ \"test\"\n\t },\n\t ]\n\nCEL expressions have access to the types\ + \ needed to create JSON patches and objects:\n\n- 'JSONPatch' - CEL type\ + \ of JSON Patch operations. JSONPatch has the fields 'op', 'from', 'path'\ + \ and 'value'.\n See [JSON patch](https://jsonpatch.com/) for more details.\ + \ The 'value' field may be set to any of: string,\n integer, array, map\ + \ or object. If set, the 'path' and 'from' fields must be set to a\n\ + \ [JSON pointer](https://datatracker.ietf.org/doc/html/rfc6901/) string,\ + \ where the 'jsonpatch.escapeKey()' CEL\n function may be used to escape\ + \ path keys containing '/' and '~'.\n- 'Object' - CEL type of the resource\ + \ object. - 'Object.' - CEL type of object field (such as 'Object.spec')\ + \ - 'Object.....` - CEL type of nested\ + \ field (such as 'Object.spec.containers')\n\nCEL expressions have access\ + \ to the contents of the API request, organized into CEL variables as\ + \ well as some other useful variables:\n\n- 'object' - The object from\ + \ the incoming request. The value is null for DELETE requests. - 'oldObject'\ + \ - The existing object. The value is null for CREATE requests. - 'request'\ + \ - Attributes of the API request([ref](/pkg/apis/admission/types.go#AdmissionRequest)).\ + \ - 'params' - Parameter resource referred to by the policy binding being\ + \ evaluated. Only populated if the policy has a ParamKind. - 'namespaceObject'\ + \ - The namespace object that the incoming object belongs to. The value\ + \ is null for cluster-scoped resources. - 'variables' - Map of composited\ + \ variables, from its name to its lazily evaluated value.\n For example,\ + \ a variable named 'foo' can be accessed as 'variables.foo'.\n- 'authorizer'\ + \ - A CEL Authorizer. May be used to perform authorization checks for\ + \ the principal (user or service account) of the request.\n See https://pkg.go.dev/k8s.io/apiserver/pkg/cel/library#Authz\n\ + - 'authorizer.requestResource' - A CEL ResourceCheck constructed from\ + \ the 'authorizer' and configured with the\n request resource.\n\nCEL\ + \ expressions have access to [Kubernetes CEL function libraries](https://kubernetes.io/docs/reference/using-api/cel/#cel-options-language-features-and-libraries)\ + \ as well as:\n\n- 'jsonpatch.escapeKey' - Performs JSONPatch key escaping.\ + \ '~' and '/' are escaped as '~0' and `~1' respectively).\n\nOnly property\ + \ names of the form `[a-zA-Z_.-/][a-zA-Z0-9_.-/]*` are accessible. Required." + type: string + type: object + v1beta1.MatchCondition: + description: MatchCondition represents a condition which must be fulfilled for + a request to be sent to a webhook. + example: + expression: expression + name: name + properties: + expression: + description: |- + expression represents the expression which will be evaluated by CEL. Must evaluate to bool. CEL expressions have access to the contents of the AdmissionRequest and Authorizer, organized into CEL variables: + + 'object' - The object from the incoming request. The value is null for DELETE requests. 'oldObject' - The existing object. The value is null for CREATE requests. 'request' - Attributes of the admission request(/pkg/apis/admission/types.go#AdmissionRequest). 'authorizer' - A CEL Authorizer. May be used to perform authorization checks for the principal (user or service account) of the request. + See https://pkg.go.dev/k8s.io/apiserver/pkg/cel/library#Authz + 'authorizer.requestResource' - A CEL ResourceCheck constructed from the 'authorizer' and configured with the + request resource. + Documentation on CEL: https://kubernetes.io/docs/reference/using-api/cel/ + + Required. + type: string + name: + description: |- + name is an identifier for this match condition, used for strategic merging of MatchConditions, as well as providing an identifier for logging purposes. A good name should be descriptive of the associated expression. Name must be a qualified name consisting of alphanumeric characters, '-', '_' or '.', and must start and end with an alphanumeric character (e.g. 'MyName', or 'my.name', or '123-abc', regex used for validation is '([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9]') with an optional DNS subdomain prefix and '/' (e.g. 'example.com/MyName') + + Required. + type: string + required: + - expression + - name + type: object + v1beta1.MatchResources: + description: "MatchResources decides whether to run the admission control policy\ + \ on an object based on whether it meets the match criteria. The exclude rules\ + \ take precedence over include rules (if a resource matches both, it is excluded)" + example: + matchPolicy: matchPolicy + resourceRules: + - resourceNames: + - resourceNames + - resourceNames + operations: + - operations + - operations + apiVersions: + - apiVersions + - apiVersions + scope: scope + resources: + - resources + - resources + apiGroups: + - apiGroups + - apiGroups + - resourceNames: + - resourceNames + - resourceNames + operations: + - operations + - operations + apiVersions: + - apiVersions + - apiVersions + scope: scope + resources: + - resources + - resources + apiGroups: + - apiGroups + - apiGroups + excludeResourceRules: + - resourceNames: + - resourceNames + - resourceNames + operations: + - operations + - operations + apiVersions: + - apiVersions + - apiVersions + scope: scope + resources: + - resources + - resources + apiGroups: + - apiGroups + - apiGroups + - resourceNames: + - resourceNames + - resourceNames + operations: + - operations + - operations + apiVersions: + - apiVersions + - apiVersions + scope: scope + resources: + - resources + - resources + apiGroups: + - apiGroups + - apiGroups + namespaceSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + objectSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + properties: + excludeResourceRules: + description: "excludeResourceRules describes what operations on what resources/subresources\ + \ the ValidatingAdmissionPolicy should not care about. The exclude rules\ + \ take precedence over include rules (if a resource matches both, it is\ + \ excluded)" + items: + $ref: "#/components/schemas/v1beta1.NamedRuleWithOperations" + type: array + x-kubernetes-list-type: atomic + matchPolicy: + description: |- + matchPolicy defines how the "MatchResources" list is used to match incoming requests. Allowed values are "Exact" or "Equivalent". + + - Exact: match a request only if it exactly matches a specified rule. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, but "rules" only included `apiGroups:["apps"], apiVersions:["v1"], resources: ["deployments"]`, a request to apps/v1beta1 or extensions/v1beta1 would not be sent to the ValidatingAdmissionPolicy. + + - Equivalent: match a request if modifies a resource listed in rules, even via another API group or version. For example, if deployments can be modified via apps/v1, apps/v1beta1, and extensions/v1beta1, and "rules" only included `apiGroups:["apps"], apiVersions:["v1"], resources: ["deployments"]`, a request to apps/v1beta1 or extensions/v1beta1 would be converted to apps/v1 and sent to the ValidatingAdmissionPolicy. + + Defaults to "Equivalent" + type: string + namespaceSelector: + $ref: "#/components/schemas/v1.LabelSelector" + objectSelector: + $ref: "#/components/schemas/v1.LabelSelector" + resourceRules: + description: resourceRules describes what operations on what resources/subresources + the ValidatingAdmissionPolicy matches. The policy cares about an operation + if it matches _any_ Rule. + items: + $ref: "#/components/schemas/v1beta1.NamedRuleWithOperations" + type: array + x-kubernetes-list-type: atomic + type: object + x-kubernetes-map-type: atomic + v1beta1.MutatingAdmissionPolicy: + description: MutatingAdmissionPolicy describes the definition of an admission + mutation policy that mutates the object coming into admission chain. + example: + metadata: + generation: 6 + finalizers: + - finalizers + - finalizers + resourceVersion: resourceVersion + annotations: + key: annotations + generateName: generateName + deletionTimestamp: 2000-01-23T04:56:07.000+00:00 + labels: + key: labels + ownerReferences: + - uid: uid + controller: true + apiVersion: apiVersion + kind: kind + name: name + blockOwnerDeletion: true + - uid: uid + controller: true + apiVersion: apiVersion + kind: kind + name: name + blockOwnerDeletion: true + selfLink: selfLink + deletionGracePeriodSeconds: 0 + uid: uid + managedFields: + - apiVersion: apiVersion + fieldsV1: "{}" + manager: manager + subresource: subresource + time: 2000-01-23T04:56:07.000+00:00 + operation: operation + fieldsType: fieldsType + - apiVersion: apiVersion + fieldsV1: "{}" + manager: manager + subresource: subresource + time: 2000-01-23T04:56:07.000+00:00 + operation: operation + fieldsType: fieldsType + creationTimestamp: 2000-01-23T04:56:07.000+00:00 + name: name + namespace: namespace + apiVersion: apiVersion + kind: kind + spec: + reinvocationPolicy: reinvocationPolicy + variables: + - expression: expression + name: name + - expression: expression + name: name + mutations: + - patchType: patchType + applyConfiguration: + expression: expression + jsonPatch: + expression: expression + - patchType: patchType + applyConfiguration: + expression: expression + jsonPatch: + expression: expression + paramKind: + apiVersion: apiVersion + kind: kind + matchConditions: + - expression: expression + name: name + - expression: expression + name: name + matchConstraints: + matchPolicy: matchPolicy + resourceRules: + - resourceNames: + - resourceNames + - resourceNames + operations: + - operations + - operations + apiVersions: + - apiVersions + - apiVersions + scope: scope + resources: + - resources + - resources + apiGroups: + - apiGroups + - apiGroups + - resourceNames: + - resourceNames + - resourceNames + operations: + - operations + - operations + apiVersions: + - apiVersions + - apiVersions + scope: scope + resources: + - resources + - resources + apiGroups: + - apiGroups + - apiGroups + excludeResourceRules: + - resourceNames: + - resourceNames + - resourceNames + operations: + - operations + - operations + apiVersions: + - apiVersions + - apiVersions + scope: scope + resources: + - resources + - resources + apiGroups: + - apiGroups + - apiGroups + - resourceNames: + - resourceNames + - resourceNames + operations: + - operations + - operations + apiVersions: + - apiVersions + - apiVersions + scope: scope + resources: + - resources + - resources + apiGroups: + - apiGroups + - apiGroups + namespaceSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + objectSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + failurePolicy: failurePolicy + properties: + apiVersion: + description: "APIVersion defines the versioned schema of this representation\ + \ of an object. Servers should convert recognized schemas to the latest\ + \ internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources" + type: string + kind: + description: "Kind is a string value representing the REST resource this\ + \ object represents. Servers may infer this from the endpoint the client\ + \ submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds" + type: string + metadata: + $ref: "#/components/schemas/v1.ObjectMeta" + spec: + $ref: "#/components/schemas/v1beta1.MutatingAdmissionPolicySpec" + type: object + x-kubernetes-group-version-kind: + - group: admissionregistration.k8s.io + kind: MutatingAdmissionPolicy + version: v1beta1 + x-implements: + - io.kubernetes.client.common.KubernetesObject + v1beta1.MutatingAdmissionPolicyBinding: + description: |- + MutatingAdmissionPolicyBinding binds the MutatingAdmissionPolicy with parametrized resources. MutatingAdmissionPolicyBinding and the optional parameter resource together define how cluster administrators configure policies for clusters. + + For a given admission request, each binding will cause its policy to be evaluated N times, where N is 1 for policies/bindings that don't use params, otherwise N is the number of parameters selected by the binding. Each evaluation is constrained by a [runtime cost budget](https://kubernetes.io/docs/reference/using-api/cel/#runtime-cost-budget). + + Adding/removing policies, bindings, or params can not affect whether a given (policy, binding, param) combination is within its own CEL budget. + example: + metadata: + generation: 6 + finalizers: + - finalizers + - finalizers + resourceVersion: resourceVersion + annotations: + key: annotations + generateName: generateName + deletionTimestamp: 2000-01-23T04:56:07.000+00:00 + labels: + key: labels + ownerReferences: + - uid: uid + controller: true + apiVersion: apiVersion + kind: kind + name: name + blockOwnerDeletion: true + - uid: uid + controller: true + apiVersion: apiVersion + kind: kind + name: name + blockOwnerDeletion: true + selfLink: selfLink + deletionGracePeriodSeconds: 0 + uid: uid + managedFields: + - apiVersion: apiVersion + fieldsV1: "{}" + manager: manager + subresource: subresource + time: 2000-01-23T04:56:07.000+00:00 + operation: operation + fieldsType: fieldsType + - apiVersion: apiVersion + fieldsV1: "{}" + manager: manager + subresource: subresource + time: 2000-01-23T04:56:07.000+00:00 + operation: operation + fieldsType: fieldsType + creationTimestamp: 2000-01-23T04:56:07.000+00:00 + name: name + namespace: namespace + apiVersion: apiVersion + kind: kind + spec: + paramRef: + name: name + namespace: namespace + selector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + parameterNotFoundAction: parameterNotFoundAction + policyName: policyName + matchResources: + matchPolicy: matchPolicy + resourceRules: + - resourceNames: + - resourceNames + - resourceNames + operations: + - operations + - operations + apiVersions: + - apiVersions + - apiVersions + scope: scope + resources: + - resources + - resources + apiGroups: + - apiGroups + - apiGroups + - resourceNames: + - resourceNames + - resourceNames + operations: + - operations + - operations + apiVersions: + - apiVersions + - apiVersions + scope: scope + resources: + - resources + - resources + apiGroups: + - apiGroups + - apiGroups + excludeResourceRules: + - resourceNames: + - resourceNames + - resourceNames + operations: + - operations + - operations + apiVersions: + - apiVersions + - apiVersions + scope: scope + resources: + - resources + - resources + apiGroups: + - apiGroups + - apiGroups + - resourceNames: + - resourceNames + - resourceNames + operations: + - operations + - operations + apiVersions: + - apiVersions + - apiVersions + scope: scope + resources: + - resources + - resources + apiGroups: + - apiGroups + - apiGroups + namespaceSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + objectSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + properties: + apiVersion: + description: "APIVersion defines the versioned schema of this representation\ + \ of an object. Servers should convert recognized schemas to the latest\ + \ internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources" + type: string + kind: + description: "Kind is a string value representing the REST resource this\ + \ object represents. Servers may infer this from the endpoint the client\ + \ submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds" + type: string + metadata: + $ref: "#/components/schemas/v1.ObjectMeta" + spec: + $ref: "#/components/schemas/v1beta1.MutatingAdmissionPolicyBindingSpec" + type: object + x-kubernetes-group-version-kind: + - group: admissionregistration.k8s.io + kind: MutatingAdmissionPolicyBinding + version: v1beta1 + x-implements: + - io.kubernetes.client.common.KubernetesObject + v1beta1.MutatingAdmissionPolicyBindingList: + description: MutatingAdmissionPolicyBindingList is a list of MutatingAdmissionPolicyBinding. + example: + metadata: + remainingItemCount: 1 + continue: continue + resourceVersion: resourceVersion + shardInfo: + selector: selector + selfLink: selfLink + apiVersion: apiVersion + kind: kind + items: + - metadata: + generation: 6 + finalizers: + - finalizers + - finalizers + resourceVersion: resourceVersion + annotations: + key: annotations + generateName: generateName + deletionTimestamp: 2000-01-23T04:56:07.000+00:00 + labels: + key: labels + ownerReferences: + - uid: uid + controller: true + apiVersion: apiVersion + kind: kind + name: name + blockOwnerDeletion: true + - uid: uid + controller: true + apiVersion: apiVersion + kind: kind + name: name + blockOwnerDeletion: true + selfLink: selfLink + deletionGracePeriodSeconds: 0 + uid: uid + managedFields: + - apiVersion: apiVersion + fieldsV1: "{}" + manager: manager + subresource: subresource + time: 2000-01-23T04:56:07.000+00:00 + operation: operation + fieldsType: fieldsType + - apiVersion: apiVersion + fieldsV1: "{}" + manager: manager + subresource: subresource + time: 2000-01-23T04:56:07.000+00:00 + operation: operation + fieldsType: fieldsType + creationTimestamp: 2000-01-23T04:56:07.000+00:00 + name: name + namespace: namespace + apiVersion: apiVersion + kind: kind + spec: + paramRef: + name: name + namespace: namespace + selector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + parameterNotFoundAction: parameterNotFoundAction + policyName: policyName + matchResources: + matchPolicy: matchPolicy + resourceRules: + - resourceNames: + - resourceNames + - resourceNames + operations: + - operations + - operations + apiVersions: + - apiVersions + - apiVersions + scope: scope + resources: + - resources + - resources + apiGroups: + - apiGroups + - apiGroups + - resourceNames: + - resourceNames + - resourceNames + operations: + - operations + - operations + apiVersions: + - apiVersions + - apiVersions + scope: scope + resources: + - resources + - resources + apiGroups: + - apiGroups + - apiGroups + excludeResourceRules: + - resourceNames: + - resourceNames + - resourceNames + operations: + - operations + - operations + apiVersions: + - apiVersions + - apiVersions + scope: scope + resources: + - resources + - resources + apiGroups: + - apiGroups + - apiGroups + - resourceNames: + - resourceNames + - resourceNames + operations: + - operations + - operations + apiVersions: + - apiVersions + - apiVersions + scope: scope + resources: + - resources + - resources + apiGroups: + - apiGroups + - apiGroups + namespaceSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + objectSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + - metadata: + generation: 6 + finalizers: + - finalizers + - finalizers + resourceVersion: resourceVersion + annotations: + key: annotations + generateName: generateName + deletionTimestamp: 2000-01-23T04:56:07.000+00:00 + labels: + key: labels + ownerReferences: + - uid: uid + controller: true + apiVersion: apiVersion + kind: kind + name: name + blockOwnerDeletion: true + - uid: uid + controller: true + apiVersion: apiVersion + kind: kind + name: name + blockOwnerDeletion: true + selfLink: selfLink + deletionGracePeriodSeconds: 0 + uid: uid + managedFields: + - apiVersion: apiVersion + fieldsV1: "{}" + manager: manager + subresource: subresource + time: 2000-01-23T04:56:07.000+00:00 + operation: operation + fieldsType: fieldsType + - apiVersion: apiVersion + fieldsV1: "{}" + manager: manager + subresource: subresource + time: 2000-01-23T04:56:07.000+00:00 + operation: operation + fieldsType: fieldsType + creationTimestamp: 2000-01-23T04:56:07.000+00:00 + name: name + namespace: namespace + apiVersion: apiVersion + kind: kind + spec: + paramRef: + name: name + namespace: namespace + selector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + parameterNotFoundAction: parameterNotFoundAction + policyName: policyName + matchResources: + matchPolicy: matchPolicy + resourceRules: + - resourceNames: + - resourceNames + - resourceNames + operations: + - operations + - operations + apiVersions: + - apiVersions + - apiVersions + scope: scope + resources: + - resources + - resources + apiGroups: + - apiGroups + - apiGroups + - resourceNames: + - resourceNames + - resourceNames + operations: + - operations + - operations + apiVersions: + - apiVersions + - apiVersions + scope: scope + resources: + - resources + - resources + apiGroups: + - apiGroups + - apiGroups + excludeResourceRules: + - resourceNames: + - resourceNames + - resourceNames + operations: + - operations + - operations + apiVersions: + - apiVersions + - apiVersions + scope: scope + resources: + - resources + - resources + apiGroups: + - apiGroups + - apiGroups + - resourceNames: + - resourceNames + - resourceNames + operations: + - operations + - operations + apiVersions: + - apiVersions + - apiVersions + scope: scope + resources: + - resources + - resources + apiGroups: + - apiGroups + - apiGroups + namespaceSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + objectSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + properties: + apiVersion: + description: "APIVersion defines the versioned schema of this representation\ + \ of an object. Servers should convert recognized schemas to the latest\ + \ internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources" + type: string + items: + description: List of PolicyBinding. + items: + $ref: "#/components/schemas/v1beta1.MutatingAdmissionPolicyBinding" + type: array + kind: + description: "Kind is a string value representing the REST resource this\ + \ object represents. Servers may infer this from the endpoint the client\ + \ submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds" + type: string + metadata: + $ref: "#/components/schemas/v1.ListMeta" + required: + - items + type: object + x-kubernetes-group-version-kind: + - group: admissionregistration.k8s.io + kind: MutatingAdmissionPolicyBindingList + version: v1beta1 + x-implements: + - io.kubernetes.client.common.KubernetesListObject + v1beta1.MutatingAdmissionPolicyBindingSpec: + description: MutatingAdmissionPolicyBindingSpec is the specification of the + MutatingAdmissionPolicyBinding. + example: + paramRef: + name: name + namespace: namespace + selector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + parameterNotFoundAction: parameterNotFoundAction + policyName: policyName + matchResources: + matchPolicy: matchPolicy + resourceRules: + - resourceNames: + - resourceNames + - resourceNames + operations: + - operations + - operations + apiVersions: + - apiVersions + - apiVersions + scope: scope + resources: + - resources + - resources + apiGroups: + - apiGroups + - apiGroups + - resourceNames: + - resourceNames + - resourceNames + operations: + - operations + - operations + apiVersions: + - apiVersions + - apiVersions + scope: scope + resources: + - resources + - resources + apiGroups: + - apiGroups + - apiGroups + excludeResourceRules: + - resourceNames: + - resourceNames + - resourceNames + operations: + - operations + - operations + apiVersions: + - apiVersions + - apiVersions + scope: scope + resources: + - resources + - resources + apiGroups: + - apiGroups + - apiGroups + - resourceNames: + - resourceNames + - resourceNames + operations: + - operations + - operations + apiVersions: + - apiVersions + - apiVersions + scope: scope + resources: + - resources + - resources + apiGroups: + - apiGroups + - apiGroups + namespaceSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + objectSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + properties: + matchResources: + $ref: "#/components/schemas/v1beta1.MatchResources" + paramRef: + $ref: "#/components/schemas/v1beta1.ParamRef" + policyName: + description: "policyName references a MutatingAdmissionPolicy name which\ + \ the MutatingAdmissionPolicyBinding binds to. If the referenced resource\ + \ does not exist, this binding is considered invalid and will be ignored\ + \ Required." + type: string + type: object + v1beta1.MutatingAdmissionPolicyList: + description: MutatingAdmissionPolicyList is a list of MutatingAdmissionPolicy. + example: + metadata: + remainingItemCount: 1 + continue: continue + resourceVersion: resourceVersion + shardInfo: + selector: selector + selfLink: selfLink + apiVersion: apiVersion + kind: kind + items: + - metadata: + generation: 6 + finalizers: + - finalizers + - finalizers + resourceVersion: resourceVersion + annotations: + key: annotations + generateName: generateName + deletionTimestamp: 2000-01-23T04:56:07.000+00:00 + labels: + key: labels + ownerReferences: + - uid: uid + controller: true + apiVersion: apiVersion + kind: kind + name: name + blockOwnerDeletion: true + - uid: uid + controller: true + apiVersion: apiVersion + kind: kind + name: name + blockOwnerDeletion: true + selfLink: selfLink + deletionGracePeriodSeconds: 0 + uid: uid + managedFields: + - apiVersion: apiVersion + fieldsV1: "{}" + manager: manager + subresource: subresource + time: 2000-01-23T04:56:07.000+00:00 + operation: operation + fieldsType: fieldsType + - apiVersion: apiVersion + fieldsV1: "{}" + manager: manager + subresource: subresource + time: 2000-01-23T04:56:07.000+00:00 + operation: operation + fieldsType: fieldsType + creationTimestamp: 2000-01-23T04:56:07.000+00:00 + name: name + namespace: namespace + apiVersion: apiVersion + kind: kind + spec: + reinvocationPolicy: reinvocationPolicy + variables: + - expression: expression + name: name + - expression: expression + name: name + mutations: + - patchType: patchType + applyConfiguration: + expression: expression + jsonPatch: + expression: expression + - patchType: patchType + applyConfiguration: + expression: expression + jsonPatch: + expression: expression + paramKind: + apiVersion: apiVersion + kind: kind + matchConditions: + - expression: expression + name: name + - expression: expression + name: name + matchConstraints: + matchPolicy: matchPolicy + resourceRules: + - resourceNames: + - resourceNames + - resourceNames + operations: + - operations + - operations + apiVersions: + - apiVersions + - apiVersions + scope: scope + resources: + - resources + - resources + apiGroups: + - apiGroups + - apiGroups + - resourceNames: + - resourceNames + - resourceNames + operations: + - operations + - operations + apiVersions: + - apiVersions + - apiVersions + scope: scope + resources: + - resources + - resources + apiGroups: + - apiGroups + - apiGroups + excludeResourceRules: + - resourceNames: + - resourceNames + - resourceNames + operations: + - operations + - operations + apiVersions: + - apiVersions + - apiVersions + scope: scope + resources: + - resources + - resources + apiGroups: + - apiGroups + - apiGroups + - resourceNames: + - resourceNames + - resourceNames + operations: + - operations + - operations + apiVersions: + - apiVersions + - apiVersions + scope: scope + resources: + - resources + - resources + apiGroups: + - apiGroups + - apiGroups + namespaceSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + objectSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + failurePolicy: failurePolicy + - metadata: + generation: 6 + finalizers: + - finalizers + - finalizers + resourceVersion: resourceVersion + annotations: + key: annotations + generateName: generateName + deletionTimestamp: 2000-01-23T04:56:07.000+00:00 + labels: + key: labels + ownerReferences: + - uid: uid + controller: true + apiVersion: apiVersion + kind: kind + name: name + blockOwnerDeletion: true + - uid: uid + controller: true + apiVersion: apiVersion + kind: kind + name: name + blockOwnerDeletion: true + selfLink: selfLink + deletionGracePeriodSeconds: 0 + uid: uid + managedFields: + - apiVersion: apiVersion + fieldsV1: "{}" + manager: manager + subresource: subresource + time: 2000-01-23T04:56:07.000+00:00 + operation: operation + fieldsType: fieldsType + - apiVersion: apiVersion + fieldsV1: "{}" + manager: manager + subresource: subresource + time: 2000-01-23T04:56:07.000+00:00 + operation: operation + fieldsType: fieldsType + creationTimestamp: 2000-01-23T04:56:07.000+00:00 + name: name + namespace: namespace + apiVersion: apiVersion + kind: kind + spec: + reinvocationPolicy: reinvocationPolicy + variables: + - expression: expression + name: name + - expression: expression + name: name + mutations: + - patchType: patchType + applyConfiguration: + expression: expression + jsonPatch: + expression: expression + - patchType: patchType + applyConfiguration: + expression: expression + jsonPatch: + expression: expression + paramKind: + apiVersion: apiVersion + kind: kind + matchConditions: + - expression: expression + name: name + - expression: expression + name: name + matchConstraints: + matchPolicy: matchPolicy + resourceRules: + - resourceNames: + - resourceNames + - resourceNames + operations: + - operations + - operations + apiVersions: + - apiVersions + - apiVersions + scope: scope + resources: + - resources + - resources + apiGroups: + - apiGroups + - apiGroups + - resourceNames: + - resourceNames + - resourceNames + operations: + - operations + - operations + apiVersions: + - apiVersions + - apiVersions + scope: scope + resources: + - resources + - resources + apiGroups: + - apiGroups + - apiGroups + excludeResourceRules: + - resourceNames: + - resourceNames + - resourceNames + operations: + - operations + - operations + apiVersions: + - apiVersions + - apiVersions + scope: scope + resources: + - resources + - resources + apiGroups: + - apiGroups + - apiGroups + - resourceNames: + - resourceNames + - resourceNames + operations: + - operations + - operations + apiVersions: + - apiVersions + - apiVersions + scope: scope + resources: + - resources + - resources + apiGroups: + - apiGroups + - apiGroups + namespaceSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + objectSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + failurePolicy: failurePolicy + properties: + apiVersion: + description: "APIVersion defines the versioned schema of this representation\ + \ of an object. Servers should convert recognized schemas to the latest\ + \ internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources" + type: string + items: + description: List of ValidatingAdmissionPolicy. + items: + $ref: "#/components/schemas/v1beta1.MutatingAdmissionPolicy" + type: array + kind: + description: "Kind is a string value representing the REST resource this\ + \ object represents. Servers may infer this from the endpoint the client\ + \ submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds" + type: string + metadata: + $ref: "#/components/schemas/v1.ListMeta" + required: + - items + type: object + x-kubernetes-group-version-kind: + - group: admissionregistration.k8s.io + kind: MutatingAdmissionPolicyList + version: v1beta1 + x-implements: + - io.kubernetes.client.common.KubernetesListObject + v1beta1.MutatingAdmissionPolicySpec: + description: MutatingAdmissionPolicySpec is the specification of the desired + behavior of the admission policy. + example: + reinvocationPolicy: reinvocationPolicy + variables: + - expression: expression + name: name + - expression: expression + name: name + mutations: + - patchType: patchType + applyConfiguration: + expression: expression + jsonPatch: + expression: expression + - patchType: patchType + applyConfiguration: + expression: expression + jsonPatch: + expression: expression + paramKind: + apiVersion: apiVersion + kind: kind + matchConditions: + - expression: expression + name: name + - expression: expression + name: name + matchConstraints: + matchPolicy: matchPolicy + resourceRules: + - resourceNames: + - resourceNames + - resourceNames + operations: + - operations + - operations + apiVersions: + - apiVersions + - apiVersions + scope: scope + resources: + - resources + - resources + apiGroups: + - apiGroups + - apiGroups + - resourceNames: + - resourceNames + - resourceNames + operations: + - operations + - operations + apiVersions: + - apiVersions + - apiVersions + scope: scope + resources: + - resources + - resources + apiGroups: + - apiGroups + - apiGroups + excludeResourceRules: + - resourceNames: + - resourceNames + - resourceNames + operations: + - operations + - operations + apiVersions: + - apiVersions + - apiVersions + scope: scope + resources: + - resources + - resources + apiGroups: + - apiGroups + - apiGroups + - resourceNames: + - resourceNames + - resourceNames + operations: + - operations + - operations + apiVersions: + - apiVersions + - apiVersions + scope: scope + resources: + - resources + - resources + apiGroups: + - apiGroups + - apiGroups + namespaceSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + objectSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + failurePolicy: failurePolicy + properties: + failurePolicy: + description: |- + failurePolicy defines how to handle failures for the admission policy. Failures can occur from CEL expression parse errors, type check errors, runtime errors and invalid or mis-configured policy definitions or bindings. + + A policy is invalid if paramKind refers to a non-existent Kind. A binding is invalid if paramRef.name refers to a non-existent resource. + + failurePolicy does not define how validations that evaluate to false are handled. + + Allowed values are Ignore or Fail. Defaults to Fail. + type: string + matchConditions: + description: |- + matchConditions is a list of conditions that must be met for a request to be validated. Match conditions filter requests that have already been matched by the matchConstraints. An empty list of matchConditions matches all requests. There are a maximum of 64 match conditions allowed. + + If a parameter object is provided, it can be accessed via the `params` handle in the same manner as validation expressions. + + The exact matching logic is (in order): + 1. If ANY matchCondition evaluates to FALSE, the policy is skipped. + 2. If ALL matchConditions evaluate to TRUE, the policy is evaluated. + 3. If any matchCondition evaluates to an error (but none are FALSE): + - If failurePolicy=Fail, reject the request + - If failurePolicy=Ignore, the policy is skipped + items: + $ref: "#/components/schemas/v1beta1.MatchCondition" + type: array + x-kubernetes-patch-strategy: merge + x-kubernetes-list-type: map + x-kubernetes-list-map-keys: + - name + x-kubernetes-patch-merge-key: name + matchConstraints: + $ref: "#/components/schemas/v1beta1.MatchResources" + mutations: + description: "mutations contain operations to perform on matching objects.\ + \ mutations may not be empty; a minimum of one mutation is required. mutations\ + \ are evaluated in order, and are reinvoked according to the reinvocationPolicy.\ + \ The mutations of a policy are invoked for each binding of this policy\ + \ and reinvocation of mutations occurs on a per binding basis." + items: + $ref: "#/components/schemas/v1beta1.Mutation" + type: array + x-kubernetes-list-type: atomic + paramKind: + $ref: "#/components/schemas/v1beta1.ParamKind" + reinvocationPolicy: + description: |- + reinvocationPolicy indicates whether mutations may be called multiple times per MutatingAdmissionPolicyBinding as part of a single admission evaluation. Allowed values are "Never" and "IfNeeded". + + Never: These mutations will not be called more than once per binding in a single admission evaluation. + + IfNeeded: These mutations may be invoked more than once per binding for a single admission request and there is no guarantee of order with respect to other admission plugins, admission webhooks, bindings of this policy and admission policies. Mutations are only reinvoked when mutations change the object after this mutation is invoked. Required. + type: string + variables: + description: |- + variables contain definitions of variables that can be used in composition of other expressions. Each variable is defined as a named CEL expression. The variables defined here will be available under `variables` in other expressions of the policy except matchConditions because matchConditions are evaluated before the rest of the policy. + + The expression of a variable can refer to other variables defined earlier in the list but not those after. Thus, variables must be sorted by the order of first appearance and acyclic. + items: + $ref: "#/components/schemas/v1beta1.Variable" + type: array + x-kubernetes-list-type: atomic + type: object + v1beta1.Mutation: + description: Mutation specifies the CEL expression which is used to apply the + Mutation. + example: + patchType: patchType + applyConfiguration: + expression: expression + jsonPatch: + expression: expression + properties: + applyConfiguration: + $ref: "#/components/schemas/v1beta1.ApplyConfiguration" + jsonPatch: + $ref: "#/components/schemas/v1beta1.JSONPatch" + patchType: + description: patchType indicates the patch strategy used. Allowed values + are "ApplyConfiguration" and "JSONPatch". Required. + type: string + required: + - patchType + type: object + v1beta1.NamedRuleWithOperations: + description: NamedRuleWithOperations is a tuple of Operations and Resources + with ResourceNames. + example: + resourceNames: + - resourceNames + - resourceNames + operations: + - operations + - operations + apiVersions: + - apiVersions + - apiVersions + scope: scope + resources: + - resources + - resources + apiGroups: + - apiGroups + - apiGroups + properties: + apiGroups: + description: "apiGroups is the API groups the resources belong to. '*' is\ + \ all groups. If '*' is present, the length of the slice must be one.\ + \ Required." + items: + type: string + type: array + x-kubernetes-list-type: atomic + apiVersions: + description: "apiVersions is the API versions the resources belong to. '*'\ + \ is all versions. If '*' is present, the length of the slice must be\ + \ one. Required." + items: + type: string + type: array + x-kubernetes-list-type: atomic + operations: + description: "operations is the operations the admission hook cares about\ + \ - CREATE, UPDATE, DELETE, CONNECT or * for all of those operations and\ + \ any future admission operations that are added. If '*' is present, the\ + \ length of the slice must be one. Required." + items: + type: string + type: array + x-kubernetes-list-type: atomic + resourceNames: + description: resourceNames is an optional white list of names that the rule + applies to. An empty set means that everything is allowed. + items: + type: string + type: array + x-kubernetes-list-type: atomic + resources: + description: |- + resources is a list of resources this rule applies to. + + For example: 'pods' means pods. 'pods/log' means the log subresource of pods. '*' means all resources, but not subresources. 'pods/*' means all subresources of pods. '*/scale' means all scale subresources. '*/*' means all resources and their subresources. + + If wildcard is present, the validation rule will ensure resources do not overlap with each other. + + Depending on the enclosing object, subresources might not be allowed. Required. + items: + type: string + type: array + x-kubernetes-list-type: atomic + scope: + description: "scope specifies the scope of this rule. Valid values are \"\ + Cluster\", \"Namespaced\", and \"*\" \"Cluster\" means that only cluster-scoped\ + \ resources will match this rule. Namespace API objects are cluster-scoped.\ + \ \"Namespaced\" means that only namespaced resources will match this\ + \ rule. \"*\" means that there are no scope restrictions. Subresources\ + \ match the scope of their parent resource. Default is \"*\"." + type: string + type: object + x-kubernetes-map-type: atomic + v1beta1.ParamKind: + description: ParamKind is a tuple of Group Kind and Version. + example: + apiVersion: apiVersion + kind: kind + properties: + apiVersion: + description: apiVersion is the API group version the resources belong to. + In format of "group/version". Required. + type: string + kind: + description: kind is the API kind the resources belong to. Required. + type: string + type: object + x-kubernetes-map-type: atomic + v1beta1.ParamRef: + description: ParamRef describes how to locate the params to be used as input + to expressions of rules applied by a policy binding. + example: + name: name + namespace: namespace + selector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + parameterNotFoundAction: parameterNotFoundAction + properties: + name: + description: |- + name is the name of the resource being referenced. + + One of `name` or `selector` must be set, but `name` and `selector` are mutually exclusive properties. If one is set, the other must be unset. + + A single parameter used for all admission requests can be configured by setting the `name` field, leaving `selector` blank, and setting namespace if `paramKind` is namespace-scoped. + type: string + namespace: + description: |- + namespace is the namespace of the referenced resource. Allows limiting the search for params to a specific namespace. Applies to both `name` and `selector` fields. + + A per-namespace parameter may be used by specifying a namespace-scoped `paramKind` in the policy and leaving this field empty. + + - If `paramKind` is cluster-scoped, this field MUST be unset. Setting this field results in a configuration error. + + - If `paramKind` is namespace-scoped, the namespace of the object being evaluated for admission will be used when this field is left unset. Take care that if this is left empty the binding must not match any cluster-scoped resources, which will result in an error. + type: string + parameterNotFoundAction: + description: |- + parameterNotFoundAction controls the behavior of the binding when the resource exists, and name or selector is valid, but there are no parameters matched by the binding. If the value is set to `Allow`, then no matched parameters will be treated as successful validation by the binding. If set to `Deny`, then no matched parameters will be subject to the `failurePolicy` of the policy. + + Allowed values are `Allow` or `Deny` + + Required + type: string + selector: + $ref: "#/components/schemas/v1.LabelSelector" + type: object + x-kubernetes-map-type: atomic + v1beta1.Variable: + description: Variable is the definition of a variable that is used for composition. + A variable is defined as a named expression. + example: + expression: expression + name: name + properties: + expression: + description: expression is the expression that will be evaluated as the + value of the variable. The CEL expression has access to the same identifiers + as the CEL expressions in Validation. + type: string + name: + description: "name is the name of the variable. The name must be a valid\ + \ CEL identifier and unique among all variables. The variable can be accessed\ + \ in other expressions through `variables` For example, if name is \"\ + foo\", the variable will be available as `variables.foo`" + type: string + required: + - expression + - name + type: object + x-kubernetes-map-type: atomic + v1alpha1.ServerStorageVersion: + description: An API server instance reports the version it can decode and the + version it encodes objects to when persisting objects in the backend. + example: + apiServerID: apiServerID + decodableVersions: + - decodableVersions + - decodableVersions + encodingVersion: encodingVersion + servedVersions: + - servedVersions + - servedVersions + properties: + apiServerID: + description: apiServerID is the ID of the reporting API server. + type: string + decodableVersions: + description: decodableVersions are the encoding versions the API server + can handle to decode. The API server can decode objects encoded in these + versions. The encodingVersion must be included in the decodableVersions. + items: + type: string + type: array + x-kubernetes-list-type: set + encodingVersion: + description: "encodingVersion the API server encodes the object to when\ + \ persisting it in the backend (e.g., etcd)." + type: string + servedVersions: + description: servedVersions lists all versions the API server can serve. + DecodableVersions must include all ServedVersions. + items: + type: string + type: array + x-kubernetes-list-type: set + required: + - apiServerID + - decodableVersions + - encodingVersion + type: object + v1alpha1.StorageVersion: + description: Storage version of a specific resource. + example: + metadata: + generation: 6 + finalizers: + - finalizers + - finalizers + resourceVersion: resourceVersion + annotations: + key: annotations + generateName: generateName + deletionTimestamp: 2000-01-23T04:56:07.000+00:00 + labels: + key: labels + ownerReferences: + - uid: uid + controller: true + apiVersion: apiVersion + kind: kind + name: name + blockOwnerDeletion: true + - uid: uid + controller: true + apiVersion: apiVersion + kind: kind + name: name + blockOwnerDeletion: true + selfLink: selfLink + deletionGracePeriodSeconds: 0 + uid: uid + managedFields: + - apiVersion: apiVersion + fieldsV1: "{}" + manager: manager + subresource: subresource + time: 2000-01-23T04:56:07.000+00:00 + operation: operation + fieldsType: fieldsType + - apiVersion: apiVersion + fieldsV1: "{}" + manager: manager + subresource: subresource + time: 2000-01-23T04:56:07.000+00:00 + operation: operation + fieldsType: fieldsType + creationTimestamp: 2000-01-23T04:56:07.000+00:00 + name: name + namespace: namespace + apiVersion: apiVersion + kind: kind + spec: "{}" + status: + commonEncodingVersion: commonEncodingVersion + conditions: + - reason: reason + lastTransitionTime: 2000-01-23T04:56:07.000+00:00 + message: message + type: type + observedGeneration: 0 + status: status + - reason: reason + lastTransitionTime: 2000-01-23T04:56:07.000+00:00 + message: message + type: type + observedGeneration: 0 + status: status + storageVersions: + - apiServerID: apiServerID + decodableVersions: + - decodableVersions + - decodableVersions + encodingVersion: encodingVersion + servedVersions: + - servedVersions + - servedVersions + - apiServerID: apiServerID + decodableVersions: + - decodableVersions + - decodableVersions + encodingVersion: encodingVersion + servedVersions: + - servedVersions + - servedVersions + properties: + apiVersion: + description: "APIVersion defines the versioned schema of this representation\ + \ of an object. Servers should convert recognized schemas to the latest\ + \ internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources" + type: string + kind: + description: "Kind is a string value representing the REST resource this\ + \ object represents. Servers may infer this from the endpoint the client\ + \ submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds" + type: string + metadata: + $ref: "#/components/schemas/v1.ObjectMeta" + spec: + description: spec is an empty spec. It is here to comply with Kubernetes + API style. + properties: {} + type: object + status: + $ref: "#/components/schemas/v1alpha1.StorageVersionStatus" + required: + - metadata + type: object + x-kubernetes-group-version-kind: + - group: internal.apiserver.k8s.io + kind: StorageVersion + version: v1alpha1 + x-implements: + - io.kubernetes.client.common.KubernetesObject + v1alpha1.StorageVersionCondition: + description: Describes the state of the storageVersion at a certain point. + example: + reason: reason + lastTransitionTime: 2000-01-23T04:56:07.000+00:00 + message: message + type: type + observedGeneration: 0 + status: status + properties: + lastTransitionTime: + description: lastTransitionTime is the last time the condition transitioned + from one status to another. + format: date-time + type: string + message: + description: message is a human readable string indicating details about + the transition. + type: string + observedGeneration: + description: "observedGeneration represents the .metadata.generation that\ + \ the condition was set based upon, if field is set." + format: int64 + type: integer + reason: + description: reason for the condition's last transition. + type: string + status: + description: "status of the condition, one of True, False, Unknown." + type: string + type: + description: type of the condition. + type: string + required: + - message + - reason + - status + - type + type: object + v1alpha1.StorageVersionList: + description: A list of StorageVersions. + example: + metadata: + remainingItemCount: 1 + continue: continue + resourceVersion: resourceVersion + shardInfo: + selector: selector + selfLink: selfLink + apiVersion: apiVersion + kind: kind + items: + - metadata: + generation: 6 + finalizers: + - finalizers + - finalizers + resourceVersion: resourceVersion + annotations: + key: annotations + generateName: generateName + deletionTimestamp: 2000-01-23T04:56:07.000+00:00 + labels: + key: labels + ownerReferences: + - uid: uid + controller: true + apiVersion: apiVersion + kind: kind + name: name + blockOwnerDeletion: true + - uid: uid + controller: true + apiVersion: apiVersion + kind: kind + name: name + blockOwnerDeletion: true + selfLink: selfLink + deletionGracePeriodSeconds: 0 + uid: uid + managedFields: + - apiVersion: apiVersion + fieldsV1: "{}" + manager: manager + subresource: subresource + time: 2000-01-23T04:56:07.000+00:00 + operation: operation + fieldsType: fieldsType + - apiVersion: apiVersion + fieldsV1: "{}" + manager: manager + subresource: subresource + time: 2000-01-23T04:56:07.000+00:00 + operation: operation + fieldsType: fieldsType + creationTimestamp: 2000-01-23T04:56:07.000+00:00 + name: name + namespace: namespace + apiVersion: apiVersion + kind: kind + spec: "{}" + status: + commonEncodingVersion: commonEncodingVersion + conditions: + - reason: reason + lastTransitionTime: 2000-01-23T04:56:07.000+00:00 + message: message + type: type + observedGeneration: 0 + status: status + - reason: reason + lastTransitionTime: 2000-01-23T04:56:07.000+00:00 + message: message + type: type + observedGeneration: 0 + status: status + storageVersions: + - apiServerID: apiServerID + decodableVersions: + - decodableVersions + - decodableVersions + encodingVersion: encodingVersion + servedVersions: + - servedVersions + - servedVersions + - apiServerID: apiServerID + decodableVersions: + - decodableVersions + - decodableVersions + encodingVersion: encodingVersion + servedVersions: + - servedVersions + - servedVersions + - metadata: + generation: 6 + finalizers: + - finalizers + - finalizers + resourceVersion: resourceVersion + annotations: + key: annotations + generateName: generateName + deletionTimestamp: 2000-01-23T04:56:07.000+00:00 + labels: + key: labels + ownerReferences: + - uid: uid + controller: true + apiVersion: apiVersion + kind: kind + name: name + blockOwnerDeletion: true + - uid: uid + controller: true + apiVersion: apiVersion + kind: kind + name: name + blockOwnerDeletion: true + selfLink: selfLink + deletionGracePeriodSeconds: 0 + uid: uid + managedFields: + - apiVersion: apiVersion + fieldsV1: "{}" + manager: manager + subresource: subresource + time: 2000-01-23T04:56:07.000+00:00 + operation: operation + fieldsType: fieldsType + - apiVersion: apiVersion + fieldsV1: "{}" + manager: manager + subresource: subresource + time: 2000-01-23T04:56:07.000+00:00 + operation: operation + fieldsType: fieldsType + creationTimestamp: 2000-01-23T04:56:07.000+00:00 + name: name + namespace: namespace + apiVersion: apiVersion + kind: kind + spec: "{}" + status: + commonEncodingVersion: commonEncodingVersion + conditions: + - reason: reason + lastTransitionTime: 2000-01-23T04:56:07.000+00:00 + message: message + type: type + observedGeneration: 0 + status: status + - reason: reason + lastTransitionTime: 2000-01-23T04:56:07.000+00:00 + message: message + type: type + observedGeneration: 0 + status: status + storageVersions: + - apiServerID: apiServerID + decodableVersions: + - decodableVersions + - decodableVersions + encodingVersion: encodingVersion + servedVersions: + - servedVersions + - servedVersions + - apiServerID: apiServerID + decodableVersions: + - decodableVersions + - decodableVersions + encodingVersion: encodingVersion + servedVersions: + - servedVersions + - servedVersions + properties: + apiVersion: + description: "APIVersion defines the versioned schema of this representation\ + \ of an object. Servers should convert recognized schemas to the latest\ + \ internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources" + type: string + items: + description: Items holds a list of StorageVersion + items: + $ref: "#/components/schemas/v1alpha1.StorageVersion" + type: array + kind: + description: "Kind is a string value representing the REST resource this\ + \ object represents. Servers may infer this from the endpoint the client\ + \ submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds" + type: string + metadata: + $ref: "#/components/schemas/v1.ListMeta" + required: + - items + type: object + x-kubernetes-group-version-kind: + - group: internal.apiserver.k8s.io + kind: StorageVersionList + version: v1alpha1 + x-implements: + - io.kubernetes.client.common.KubernetesListObject + v1alpha1.StorageVersionStatus: + description: API server instances report the versions they can decode and the + version they encode objects to when persisting objects in the backend. + example: + commonEncodingVersion: commonEncodingVersion + conditions: + - reason: reason + lastTransitionTime: 2000-01-23T04:56:07.000+00:00 + message: message + type: type + observedGeneration: 0 + status: status + - reason: reason + lastTransitionTime: 2000-01-23T04:56:07.000+00:00 + message: message + type: type + observedGeneration: 0 + status: status + storageVersions: + - apiServerID: apiServerID + decodableVersions: + - decodableVersions + - decodableVersions + encodingVersion: encodingVersion + servedVersions: + - servedVersions + - servedVersions + - apiServerID: apiServerID + decodableVersions: + - decodableVersions + - decodableVersions + encodingVersion: encodingVersion + servedVersions: + - servedVersions + - servedVersions + properties: + commonEncodingVersion: + description: "commonEncodingVersion is set to an encoding storage version\ + \ if all API server instances share that same version. If they don't share\ + \ one storage version, this field is left empty. API servers should finish\ + \ updating its storageVersionStatus entry before serving write operations,\ + \ so that this field will be in sync with the reality." + type: string + conditions: + description: conditions lists the latest available observations of the storageVersion's + state. + items: + $ref: "#/components/schemas/v1alpha1.StorageVersionCondition" + type: array + x-kubernetes-list-type: map + x-kubernetes-list-map-keys: + - type + storageVersions: + description: storageVersions lists the reported versions per API server + instance. + items: + $ref: "#/components/schemas/v1alpha1.ServerStorageVersion" + type: array + x-kubernetes-list-type: map + x-kubernetes-list-map-keys: + - apiServerID + type: object + v1.ControllerRevision: + description: "ControllerRevision implements an immutable snapshot of state data.\ + \ Clients are responsible for serializing and deserializing the objects that\ + \ contain their internal state. Once a ControllerRevision has been successfully\ + \ created, it can not be updated. The API Server will fail validation of all\ + \ requests that attempt to mutate the Data field. ControllerRevisions may,\ + \ however, be deleted. Note that, due to its use by both the DaemonSet and\ + \ StatefulSet controllers for update and rollback, this object is beta. However,\ + \ it may be subject to name and representation changes in future releases,\ + \ and clients should not depend on its stability. It is primarily for internal\ + \ use by controllers." + example: + metadata: + generation: 6 + finalizers: + - finalizers + - finalizers + resourceVersion: resourceVersion + annotations: + key: annotations + generateName: generateName + deletionTimestamp: 2000-01-23T04:56:07.000+00:00 + labels: + key: labels + ownerReferences: + - uid: uid + controller: true + apiVersion: apiVersion + kind: kind + name: name + blockOwnerDeletion: true + - uid: uid + controller: true + apiVersion: apiVersion + kind: kind + name: name + blockOwnerDeletion: true + selfLink: selfLink + deletionGracePeriodSeconds: 0 + uid: uid + managedFields: + - apiVersion: apiVersion + fieldsV1: "{}" + manager: manager + subresource: subresource + time: 2000-01-23T04:56:07.000+00:00 + operation: operation + fieldsType: fieldsType + - apiVersion: apiVersion + fieldsV1: "{}" + manager: manager + subresource: subresource + time: 2000-01-23T04:56:07.000+00:00 + operation: operation + fieldsType: fieldsType + creationTimestamp: 2000-01-23T04:56:07.000+00:00 + name: name + namespace: namespace + apiVersion: apiVersion + data: "{}" + kind: kind + revision: 0 + properties: + apiVersion: + description: "APIVersion defines the versioned schema of this representation\ + \ of an object. Servers should convert recognized schemas to the latest\ + \ internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources" + type: string + data: + description: Data is the serialized representation of the state. + properties: {} + type: object + kind: + description: "Kind is a string value representing the REST resource this\ + \ object represents. Servers may infer this from the endpoint the client\ + \ submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds" + type: string + metadata: + $ref: "#/components/schemas/v1.ObjectMeta" + revision: + description: Revision indicates the revision of the state represented by + Data. + format: int64 + type: integer + required: + - data + type: object + x-kubernetes-group-version-kind: + - group: apps + kind: ControllerRevision + version: v1 + x-implements: + - io.kubernetes.client.common.KubernetesObject + v1.ControllerRevisionList: + description: ControllerRevisionList is a resource containing a list of ControllerRevision + objects. + example: + metadata: + remainingItemCount: 1 + continue: continue + resourceVersion: resourceVersion + shardInfo: + selector: selector + selfLink: selfLink + apiVersion: apiVersion + kind: kind + items: + - metadata: + generation: 6 + finalizers: + - finalizers + - finalizers + resourceVersion: resourceVersion + annotations: + key: annotations + generateName: generateName + deletionTimestamp: 2000-01-23T04:56:07.000+00:00 + labels: + key: labels + ownerReferences: + - uid: uid + controller: true + apiVersion: apiVersion + kind: kind + name: name + blockOwnerDeletion: true + - uid: uid + controller: true + apiVersion: apiVersion + kind: kind + name: name + blockOwnerDeletion: true + selfLink: selfLink + deletionGracePeriodSeconds: 0 + uid: uid + managedFields: + - apiVersion: apiVersion + fieldsV1: "{}" + manager: manager + subresource: subresource + time: 2000-01-23T04:56:07.000+00:00 + operation: operation + fieldsType: fieldsType + - apiVersion: apiVersion + fieldsV1: "{}" + manager: manager + subresource: subresource + time: 2000-01-23T04:56:07.000+00:00 + operation: operation + fieldsType: fieldsType + creationTimestamp: 2000-01-23T04:56:07.000+00:00 + name: name + namespace: namespace + apiVersion: apiVersion + data: "{}" + kind: kind + revision: 0 + - metadata: + generation: 6 + finalizers: + - finalizers + - finalizers + resourceVersion: resourceVersion + annotations: + key: annotations + generateName: generateName + deletionTimestamp: 2000-01-23T04:56:07.000+00:00 + labels: + key: labels + ownerReferences: + - uid: uid + controller: true + apiVersion: apiVersion + kind: kind + name: name + blockOwnerDeletion: true + - uid: uid + controller: true + apiVersion: apiVersion + kind: kind + name: name + blockOwnerDeletion: true + selfLink: selfLink + deletionGracePeriodSeconds: 0 + uid: uid + managedFields: + - apiVersion: apiVersion + fieldsV1: "{}" + manager: manager + subresource: subresource + time: 2000-01-23T04:56:07.000+00:00 + operation: operation + fieldsType: fieldsType + - apiVersion: apiVersion + fieldsV1: "{}" + manager: manager + subresource: subresource + time: 2000-01-23T04:56:07.000+00:00 + operation: operation + fieldsType: fieldsType + creationTimestamp: 2000-01-23T04:56:07.000+00:00 + name: name + namespace: namespace + apiVersion: apiVersion + data: "{}" + kind: kind + revision: 0 + properties: + apiVersion: + description: "APIVersion defines the versioned schema of this representation\ + \ of an object. Servers should convert recognized schemas to the latest\ + \ internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources" + type: string + items: + description: Items is the list of ControllerRevisions + items: + $ref: "#/components/schemas/v1.ControllerRevision" + type: array + kind: + description: "Kind is a string value representing the REST resource this\ + \ object represents. Servers may infer this from the endpoint the client\ + \ submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds" + type: string + metadata: + $ref: "#/components/schemas/v1.ListMeta" + required: + - items + type: object + x-kubernetes-group-version-kind: + - group: apps + kind: ControllerRevisionList + version: v1 + x-implements: + - io.kubernetes.client.common.KubernetesListObject + v1.DaemonSet: + description: DaemonSet represents the configuration of a daemon set. + example: + metadata: + generation: 6 + finalizers: + - finalizers + - finalizers + resourceVersion: resourceVersion + annotations: + key: annotations + generateName: generateName + deletionTimestamp: 2000-01-23T04:56:07.000+00:00 + labels: + key: labels + ownerReferences: + - uid: uid + controller: true + apiVersion: apiVersion + kind: kind + name: name + blockOwnerDeletion: true + - uid: uid + controller: true + apiVersion: apiVersion + kind: kind + name: name + blockOwnerDeletion: true + selfLink: selfLink + deletionGracePeriodSeconds: 0 + uid: uid + managedFields: + - apiVersion: apiVersion + fieldsV1: "{}" + manager: manager + subresource: subresource + time: 2000-01-23T04:56:07.000+00:00 + operation: operation + fieldsType: fieldsType + - apiVersion: apiVersion + fieldsV1: "{}" + manager: manager + subresource: subresource + time: 2000-01-23T04:56:07.000+00:00 + operation: operation + fieldsType: fieldsType + creationTimestamp: 2000-01-23T04:56:07.000+00:00 + name: name + namespace: namespace + apiVersion: apiVersion + kind: kind + spec: + template: + metadata: + generation: 6 + finalizers: + - finalizers + - finalizers + resourceVersion: resourceVersion + annotations: + key: annotations + generateName: generateName + deletionTimestamp: 2000-01-23T04:56:07.000+00:00 + labels: + key: labels + ownerReferences: + - uid: uid + controller: true + apiVersion: apiVersion + kind: kind + name: name + blockOwnerDeletion: true + - uid: uid + controller: true + apiVersion: apiVersion + kind: kind + name: name + blockOwnerDeletion: true + selfLink: selfLink + deletionGracePeriodSeconds: 0 + uid: uid + managedFields: + - apiVersion: apiVersion + fieldsV1: "{}" + manager: manager + subresource: subresource + time: 2000-01-23T04:56:07.000+00:00 + operation: operation + fieldsType: fieldsType - apiVersion: apiVersion fieldsV1: "{}" manager: manager @@ -113605,7 +121233,7 @@ components: spec: dnsPolicy: dnsPolicy nodeName: nodeName - terminationGracePeriodSeconds: 9 + terminationGracePeriodSeconds: 6 dnsConfig: searches: - searches @@ -113646,17 +121274,17 @@ components: appArmorProfile: localhostProfile: localhostProfile type: type - fsGroup: 1 + fsGroup: 4 fsGroupChangePolicy: fsGroupChangePolicy seLinuxChangePolicy: seLinuxChangePolicy - runAsGroup: 4 + runAsGroup: 5 runAsNonRoot: true sysctls: - name: name value: value - name: name value: value - runAsUser: 5 + runAsUser: 9 seccompProfile: localhostProfile: localhostProfile type: type @@ -113676,12 +121304,12 @@ components: runtimeClassName: runtimeClassName tolerations: - effect: effect - tolerationSeconds: 6 + tolerationSeconds: 8 value: value key: key operator: operator - effect: effect - tolerationSeconds: 6 + tolerationSeconds: 8 value: value key: key operator: operator @@ -113703,7 +121331,7 @@ components: topologySpreadConstraints: - nodeTaintsPolicy: nodeTaintsPolicy whenUnsatisfiable: whenUnsatisfiable - maxSkew: 8 + maxSkew: 9 nodeAffinityPolicy: nodeAffinityPolicy labelSelector: matchExpressions: @@ -113719,14 +121347,14 @@ components: operator: operator matchLabels: key: matchLabels - minDomains: 9 + minDomains: 6 topologyKey: topologyKey matchLabelKeys: - matchLabelKeys - matchLabelKeys - nodeTaintsPolicy: nodeTaintsPolicy whenUnsatisfiable: whenUnsatisfiable - maxSkew: 8 + maxSkew: 9 nodeAffinityPolicy: nodeAffinityPolicy labelSelector: matchExpressions: @@ -113742,7 +121370,7 @@ components: operator: operator matchLabels: key: matchLabels - minDomains: 9 + minDomains: 6 topologyKey: topologyKey matchLabelKeys: - matchLabelKeys @@ -113854,19 +121482,22 @@ components: secret: secretName: secretName defaultMode: 7 + defaultUser: 5 optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key projected: sources: - downwardAPI: items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -113875,7 +121506,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -113884,39 +121516,46 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 configMap: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key podCertificate: certificateChainPath: certificateChainPath userAnnotations: key: userAnnotations keyPath: keyPath - maxExpirationSeconds: 3 + maxExpirationSeconds: 8 keyType: keyType + user: 7 credentialBundlePath: credentialBundlePath signerName: signerName secret: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key serviceAccountToken: path: path audience: audience expirationSeconds: 3 + user: 3 clusterTrustBundle: path: path labelSelector: @@ -113935,10 +121574,11 @@ components: key: matchLabels name: name optional: true + user: 4 signerName: signerName - downwardAPI: items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -113947,7 +121587,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -113956,39 +121597,424 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 configMap: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key podCertificate: certificateChainPath: certificateChainPath userAnnotations: key: userAnnotations keyPath: keyPath - maxExpirationSeconds: 3 + maxExpirationSeconds: 8 keyType: keyType + user: 7 credentialBundlePath: credentialBundlePath signerName: signerName secret: name: name optional: true items: - - mode: 6 + - mode: 2 + path: path + user: 6 + key: key + - mode: 2 path: path + user: 6 key: key + serviceAccountToken: + path: path + audience: audience + expirationSeconds: 3 + user: 3 + clusterTrustBundle: + path: path + labelSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + name: name + optional: true + user: 4 + signerName: signerName + defaultMode: 6 + defaultUser: 0 + cephfs: + path: path + secretRef: + name: name + secretFile: secretFile + readOnly: true + user: user + monitors: + - monitors + - monitors + scaleIO: + system: system + protectionDomain: protectionDomain + sslEnabled: true + storageMode: storageMode + volumeName: volumeName + secretRef: + name: name + readOnly: true + fsType: fsType + storagePool: storagePool + gateway: gateway + emptyDir: + mode: 3 + sizeLimit: sizeLimit + medium: medium + glusterfs: + path: path + endpoints: endpoints + readOnly: true + gcePersistentDisk: + partition: 0 + readOnly: true + pdName: pdName + fsType: fsType + image: + reference: reference + pullPolicy: pullPolicy + photonPersistentDisk: + pdID: pdID + fsType: fsType + azureDisk: + diskName: diskName + kind: kind + readOnly: true + cachingMode: cachingMode + diskURI: diskURI + fsType: fsType + cinder: + secretRef: + name: name + volumeID: volumeID + readOnly: true + fsType: fsType + downwardAPI: + defaultMode: 6 + defaultUser: 5 + items: + - mode: 6 + path: path + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + user: 3 + - mode: 6 + path: path + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + user: 3 + awsElasticBlockStore: + partition: 3 + volumeID: volumeID + readOnly: true + fsType: fsType + flocker: + datasetName: datasetName + datasetUUID: datasetUUID + iscsi: + chapAuthSession: true + iscsiInterface: iscsiInterface + lun: 7 + chapAuthDiscovery: true + iqn: iqn + portals: + - portals + - portals + secretRef: + name: name + initiatorName: initiatorName + readOnly: true + fsType: fsType + targetPortal: targetPortal + rbd: + image: image + pool: pool + secretRef: + name: name + readOnly: true + fsType: fsType + keyring: keyring + user: user + monitors: + - monitors + - monitors + configMap: + defaultMode: 6 + name: name + defaultUser: 1 + optional: true + items: + - mode: 2 + path: path + user: 6 + key: key + - mode: 2 + path: path + user: 6 + key: key + storageos: + volumeNamespace: volumeNamespace + volumeName: volumeName + secretRef: + name: name + readOnly: true + fsType: fsType + csi: + driver: driver + nodePublishSecretRef: + name: name + readOnly: true + fsType: fsType + volumeAttributes: + key: volumeAttributes + name: name + nfs: + path: path + server: server + readOnly: true + persistentVolumeClaim: + claimName: claimName + readOnly: true + gitRepo: + repository: repository + directory: directory + revision: revision + portworxVolume: + volumeID: volumeID + readOnly: true + fsType: fsType + vsphereVolume: + storagePolicyName: storagePolicyName + storagePolicyID: storagePolicyID + volumePath: volumePath + fsType: fsType + fc: + lun: 7 + targetWWNs: + - targetWWNs + - targetWWNs + readOnly: true + wwids: + - wwids + - wwids + fsType: fsType + hostPath: + path: path + type: type + - quobyte: + volume: volume + registry: registry + readOnly: true + user: user + tenant: tenant + group: group + azureFile: + secretName: secretName + readOnly: true + shareName: shareName + flexVolume: + driver: driver + options: + key: options + secretRef: + name: name + readOnly: true + fsType: fsType + ephemeral: + volumeClaimTemplate: + metadata: + generation: 6 + finalizers: + - finalizers + - finalizers + resourceVersion: resourceVersion + annotations: + key: annotations + generateName: generateName + deletionTimestamp: 2000-01-23T04:56:07.000+00:00 + labels: + key: labels + ownerReferences: + - uid: uid + controller: true + apiVersion: apiVersion + kind: kind + name: name + blockOwnerDeletion: true + - uid: uid + controller: true + apiVersion: apiVersion + kind: kind + name: name + blockOwnerDeletion: true + selfLink: selfLink + deletionGracePeriodSeconds: 0 + uid: uid + managedFields: + - apiVersion: apiVersion + fieldsV1: "{}" + manager: manager + subresource: subresource + time: 2000-01-23T04:56:07.000+00:00 + operation: operation + fieldsType: fieldsType + - apiVersion: apiVersion + fieldsV1: "{}" + manager: manager + subresource: subresource + time: 2000-01-23T04:56:07.000+00:00 + operation: operation + fieldsType: fieldsType + creationTimestamp: 2000-01-23T04:56:07.000+00:00 + name: name + namespace: namespace + spec: + storageClassName: storageClassName + dataSourceRef: + apiGroup: apiGroup + kind: kind + name: name + namespace: namespace + volumeName: volumeName + volumeAttributesClassName: volumeAttributesClassName + resources: + requests: + key: null + limits: + key: null + selector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + accessModes: + - accessModes + - accessModes + dataSource: + apiGroup: apiGroup + kind: kind + name: name + volumeMode: volumeMode + secret: + secretName: secretName + defaultMode: 7 + defaultUser: 5 + optional: true + items: + - mode: 2 + path: path + user: 6 + key: key + - mode: 2 + path: path + user: 6 + key: key + projected: + sources: + - downwardAPI: + items: + - mode: 6 + path: path + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + user: 3 - mode: 6 path: path + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + user: 3 + configMap: + name: name + optional: true + items: + - mode: 2 + path: path + user: 6 + key: key + - mode: 2 + path: path + user: 6 + key: key + podCertificate: + certificateChainPath: certificateChainPath + userAnnotations: + key: userAnnotations + keyPath: keyPath + maxExpirationSeconds: 8 + keyType: keyType + user: 7 + credentialBundlePath: credentialBundlePath + signerName: signerName + secret: + name: name + optional: true + items: + - mode: 2 + path: path + user: 6 + key: key + - mode: 2 + path: path + user: 6 key: key serviceAccountToken: path: path audience: audience expirationSeconds: 3 + user: 3 clusterTrustBundle: path: path labelSelector: @@ -114007,368 +122033,11 @@ components: key: matchLabels name: name optional: true + user: 4 signerName: signerName - defaultMode: 6 - cephfs: - path: path - secretRef: - name: name - secretFile: secretFile - readOnly: true - user: user - monitors: - - monitors - - monitors - scaleIO: - system: system - protectionDomain: protectionDomain - sslEnabled: true - storageMode: storageMode - volumeName: volumeName - secretRef: - name: name - readOnly: true - fsType: fsType - storagePool: storagePool - gateway: gateway - emptyDir: - sizeLimit: sizeLimit - medium: medium - glusterfs: - path: path - endpoints: endpoints - readOnly: true - gcePersistentDisk: - partition: 6 - readOnly: true - pdName: pdName - fsType: fsType - image: - reference: reference - pullPolicy: pullPolicy - photonPersistentDisk: - pdID: pdID - fsType: fsType - azureDisk: - diskName: diskName - kind: kind - readOnly: true - cachingMode: cachingMode - diskURI: diskURI - fsType: fsType - cinder: - secretRef: - name: name - volumeID: volumeID - readOnly: true - fsType: fsType - downwardAPI: - defaultMode: 1 - items: - - mode: 2 - path: path - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath - - mode: 2 - path: path - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath - awsElasticBlockStore: - partition: 6 - volumeID: volumeID - readOnly: true - fsType: fsType - flocker: - datasetName: datasetName - datasetUUID: datasetUUID - iscsi: - chapAuthSession: true - iscsiInterface: iscsiInterface - lun: 5 - chapAuthDiscovery: true - iqn: iqn - portals: - - portals - - portals - secretRef: - name: name - initiatorName: initiatorName - readOnly: true - fsType: fsType - targetPortal: targetPortal - rbd: - image: image - pool: pool - secretRef: - name: name - readOnly: true - fsType: fsType - keyring: keyring - user: user - monitors: - - monitors - - monitors - configMap: - defaultMode: 3 - name: name - optional: true - items: - - mode: 6 - path: path - key: key - - mode: 6 - path: path - key: key - storageos: - volumeNamespace: volumeNamespace - volumeName: volumeName - secretRef: - name: name - readOnly: true - fsType: fsType - csi: - driver: driver - nodePublishSecretRef: - name: name - readOnly: true - fsType: fsType - volumeAttributes: - key: volumeAttributes - name: name - nfs: - path: path - server: server - readOnly: true - persistentVolumeClaim: - claimName: claimName - readOnly: true - gitRepo: - repository: repository - directory: directory - revision: revision - portworxVolume: - volumeID: volumeID - readOnly: true - fsType: fsType - vsphereVolume: - storagePolicyName: storagePolicyName - storagePolicyID: storagePolicyID - volumePath: volumePath - fsType: fsType - fc: - lun: 6 - targetWWNs: - - targetWWNs - - targetWWNs - readOnly: true - wwids: - - wwids - - wwids - fsType: fsType - hostPath: - path: path - type: type - - quobyte: - volume: volume - registry: registry - readOnly: true - user: user - tenant: tenant - group: group - azureFile: - secretName: secretName - readOnly: true - shareName: shareName - flexVolume: - driver: driver - options: - key: options - secretRef: - name: name - readOnly: true - fsType: fsType - ephemeral: - volumeClaimTemplate: - metadata: - generation: 6 - finalizers: - - finalizers - - finalizers - resourceVersion: resourceVersion - annotations: - key: annotations - generateName: generateName - deletionTimestamp: 2000-01-23T04:56:07.000+00:00 - labels: - key: labels - ownerReferences: - - uid: uid - controller: true - apiVersion: apiVersion - kind: kind - name: name - blockOwnerDeletion: true - - uid: uid - controller: true - apiVersion: apiVersion - kind: kind - name: name - blockOwnerDeletion: true - selfLink: selfLink - deletionGracePeriodSeconds: 0 - uid: uid - managedFields: - - apiVersion: apiVersion - fieldsV1: "{}" - manager: manager - subresource: subresource - time: 2000-01-23T04:56:07.000+00:00 - operation: operation - fieldsType: fieldsType - - apiVersion: apiVersion - fieldsV1: "{}" - manager: manager - subresource: subresource - time: 2000-01-23T04:56:07.000+00:00 - operation: operation - fieldsType: fieldsType - creationTimestamp: 2000-01-23T04:56:07.000+00:00 - name: name - namespace: namespace - spec: - storageClassName: storageClassName - dataSourceRef: - apiGroup: apiGroup - kind: kind - name: name - namespace: namespace - volumeName: volumeName - volumeAttributesClassName: volumeAttributesClassName - resources: - requests: - key: null - limits: - key: null - selector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - accessModes: - - accessModes - - accessModes - dataSource: - apiGroup: apiGroup - kind: kind - name: name - volumeMode: volumeMode - secret: - secretName: secretName - defaultMode: 7 - optional: true - items: - - mode: 6 - path: path - key: key - - mode: 6 - path: path - key: key - projected: - sources: - downwardAPI: items: - - mode: 2 - path: path - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath - - mode: 2 - path: path - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath - configMap: - name: name - optional: true - items: - - mode: 6 - path: path - key: key - mode: 6 - path: path - key: key - podCertificate: - certificateChainPath: certificateChainPath - userAnnotations: - key: userAnnotations - keyPath: keyPath - maxExpirationSeconds: 3 - keyType: keyType - credentialBundlePath: credentialBundlePath - signerName: signerName - secret: - name: name - optional: true - items: - - mode: 6 - path: path - key: key - - mode: 6 - path: path - key: key - serviceAccountToken: - path: path - audience: audience - expirationSeconds: 3 - clusterTrustBundle: - path: path - labelSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - name: name - optional: true - signerName: signerName - - downwardAPI: - items: - - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -114377,7 +122046,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -114386,39 +122056,46 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 configMap: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key podCertificate: certificateChainPath: certificateChainPath userAnnotations: key: userAnnotations keyPath: keyPath - maxExpirationSeconds: 3 + maxExpirationSeconds: 8 keyType: keyType + user: 7 credentialBundlePath: credentialBundlePath signerName: signerName secret: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key serviceAccountToken: path: path audience: audience expirationSeconds: 3 + user: 3 clusterTrustBundle: path: path labelSelector: @@ -114437,8 +122114,10 @@ components: key: matchLabels name: name optional: true + user: 4 signerName: signerName defaultMode: 6 + defaultUser: 0 cephfs: path: path secretRef: @@ -114462,6 +122141,7 @@ components: storagePool: storagePool gateway: gateway emptyDir: + mode: 3 sizeLimit: sizeLimit medium: medium glusterfs: @@ -114469,7 +122149,7 @@ components: endpoints: endpoints readOnly: true gcePersistentDisk: - partition: 6 + partition: 0 readOnly: true pdName: pdName fsType: fsType @@ -114493,9 +122173,10 @@ components: readOnly: true fsType: fsType downwardAPI: - defaultMode: 1 + defaultMode: 6 + defaultUser: 5 items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -114504,7 +122185,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -114513,8 +122195,9 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 awsElasticBlockStore: - partition: 6 + partition: 3 volumeID: volumeID readOnly: true fsType: fsType @@ -114524,7 +122207,7 @@ components: iscsi: chapAuthSession: true iscsiInterface: iscsiInterface - lun: 5 + lun: 7 chapAuthDiscovery: true iqn: iqn portals: @@ -114549,15 +122232,18 @@ components: - monitors - monitors configMap: - defaultMode: 3 + defaultMode: 6 name: name + defaultUser: 1 optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key storageos: volumeNamespace: volumeNamespace @@ -114596,7 +122282,7 @@ components: volumePath: volumePath fsType: fsType fc: - lun: 6 + lun: 7 targetWWNs: - targetWWNs - targetWWNs @@ -114685,10 +122371,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -114712,6 +122400,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -114719,6 +122410,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -114736,6 +122430,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -114756,6 +122451,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -114780,10 +122476,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -114829,10 +122527,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -114977,10 +122677,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -115004,6 +122706,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -115011,6 +122716,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -115028,6 +122736,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -115048,6 +122757,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -115072,10 +122782,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -115121,10 +122833,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -115204,9 +122918,14 @@ components: tty: true stdinOnce: true serviceAccount: serviceAccount - priority: 7 + priority: 1 restartPolicy: restartPolicy shareProcessNamespace: true + evictionResponders: + - name: name + priority: 7 + - name: name + priority: 7 hostUsers: true resourceClaims: - resourceClaimName: resourceClaimName @@ -115283,10 +123002,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -115310,6 +123031,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -115317,6 +123041,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -115334,6 +123061,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -115354,6 +123082,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -115378,10 +123107,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -115427,10 +123158,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -115574,10 +123307,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -115601,6 +123336,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -115608,6 +123346,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -115625,6 +123366,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -115645,6 +123387,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -115669,10 +123412,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -115718,10 +123463,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -115866,10 +123613,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -115893,6 +123642,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -115900,6 +123652,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -115917,6 +123672,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -115937,6 +123693,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -115961,10 +123718,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -116010,10 +123769,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -116157,10 +123918,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -116184,6 +123947,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -116191,6 +123957,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -116208,6 +123977,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -116228,6 +123998,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -116252,10 +124023,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -116301,10 +124074,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -116857,6 +124632,8 @@ components: $ref: "#/components/schemas/v1.DaemonSetSpec" status: $ref: "#/components/schemas/v1.DaemonSetStatus" + required: + - spec type: object x-kubernetes-group-version-kind: - group: apps @@ -116890,9 +124667,6 @@ components: type: description: Type of DaemonSet condition. type: string - required: - - status - - type type: object v1.DaemonSetList: description: DaemonSetList is a collection of daemon sets. @@ -117006,7 +124780,7 @@ components: spec: dnsPolicy: dnsPolicy nodeName: nodeName - terminationGracePeriodSeconds: 9 + terminationGracePeriodSeconds: 6 dnsConfig: searches: - searches @@ -117047,17 +124821,17 @@ components: appArmorProfile: localhostProfile: localhostProfile type: type - fsGroup: 1 + fsGroup: 4 fsGroupChangePolicy: fsGroupChangePolicy seLinuxChangePolicy: seLinuxChangePolicy - runAsGroup: 4 + runAsGroup: 5 runAsNonRoot: true sysctls: - name: name value: value - name: name value: value - runAsUser: 5 + runAsUser: 9 seccompProfile: localhostProfile: localhostProfile type: type @@ -117077,12 +124851,12 @@ components: runtimeClassName: runtimeClassName tolerations: - effect: effect - tolerationSeconds: 6 + tolerationSeconds: 8 value: value key: key operator: operator - effect: effect - tolerationSeconds: 6 + tolerationSeconds: 8 value: value key: key operator: operator @@ -117104,7 +124878,7 @@ components: topologySpreadConstraints: - nodeTaintsPolicy: nodeTaintsPolicy whenUnsatisfiable: whenUnsatisfiable - maxSkew: 8 + maxSkew: 9 nodeAffinityPolicy: nodeAffinityPolicy labelSelector: matchExpressions: @@ -117120,14 +124894,14 @@ components: operator: operator matchLabels: key: matchLabels - minDomains: 9 + minDomains: 6 topologyKey: topologyKey matchLabelKeys: - matchLabelKeys - matchLabelKeys - nodeTaintsPolicy: nodeTaintsPolicy whenUnsatisfiable: whenUnsatisfiable - maxSkew: 8 + maxSkew: 9 nodeAffinityPolicy: nodeAffinityPolicy labelSelector: matchExpressions: @@ -117143,7 +124917,7 @@ components: operator: operator matchLabels: key: matchLabels - minDomains: 9 + minDomains: 6 topologyKey: topologyKey matchLabelKeys: - matchLabelKeys @@ -117255,19 +125029,22 @@ components: secret: secretName: secretName defaultMode: 7 + defaultUser: 5 optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key projected: sources: - downwardAPI: items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -117276,7 +125053,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -117285,39 +125063,46 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 configMap: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key podCertificate: certificateChainPath: certificateChainPath userAnnotations: key: userAnnotations keyPath: keyPath - maxExpirationSeconds: 3 + maxExpirationSeconds: 8 keyType: keyType + user: 7 credentialBundlePath: credentialBundlePath signerName: signerName secret: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key serviceAccountToken: path: path audience: audience expirationSeconds: 3 + user: 3 clusterTrustBundle: path: path labelSelector: @@ -117336,10 +125121,11 @@ components: key: matchLabels name: name optional: true + user: 4 signerName: signerName - downwardAPI: items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -117348,7 +125134,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -117357,39 +125144,424 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 configMap: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key podCertificate: certificateChainPath: certificateChainPath userAnnotations: key: userAnnotations keyPath: keyPath - maxExpirationSeconds: 3 + maxExpirationSeconds: 8 keyType: keyType + user: 7 credentialBundlePath: credentialBundlePath signerName: signerName secret: name: name optional: true items: - - mode: 6 + - mode: 2 + path: path + user: 6 + key: key + - mode: 2 path: path + user: 6 key: key + serviceAccountToken: + path: path + audience: audience + expirationSeconds: 3 + user: 3 + clusterTrustBundle: + path: path + labelSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + name: name + optional: true + user: 4 + signerName: signerName + defaultMode: 6 + defaultUser: 0 + cephfs: + path: path + secretRef: + name: name + secretFile: secretFile + readOnly: true + user: user + monitors: + - monitors + - monitors + scaleIO: + system: system + protectionDomain: protectionDomain + sslEnabled: true + storageMode: storageMode + volumeName: volumeName + secretRef: + name: name + readOnly: true + fsType: fsType + storagePool: storagePool + gateway: gateway + emptyDir: + mode: 3 + sizeLimit: sizeLimit + medium: medium + glusterfs: + path: path + endpoints: endpoints + readOnly: true + gcePersistentDisk: + partition: 0 + readOnly: true + pdName: pdName + fsType: fsType + image: + reference: reference + pullPolicy: pullPolicy + photonPersistentDisk: + pdID: pdID + fsType: fsType + azureDisk: + diskName: diskName + kind: kind + readOnly: true + cachingMode: cachingMode + diskURI: diskURI + fsType: fsType + cinder: + secretRef: + name: name + volumeID: volumeID + readOnly: true + fsType: fsType + downwardAPI: + defaultMode: 6 + defaultUser: 5 + items: + - mode: 6 + path: path + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + user: 3 + - mode: 6 + path: path + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + user: 3 + awsElasticBlockStore: + partition: 3 + volumeID: volumeID + readOnly: true + fsType: fsType + flocker: + datasetName: datasetName + datasetUUID: datasetUUID + iscsi: + chapAuthSession: true + iscsiInterface: iscsiInterface + lun: 7 + chapAuthDiscovery: true + iqn: iqn + portals: + - portals + - portals + secretRef: + name: name + initiatorName: initiatorName + readOnly: true + fsType: fsType + targetPortal: targetPortal + rbd: + image: image + pool: pool + secretRef: + name: name + readOnly: true + fsType: fsType + keyring: keyring + user: user + monitors: + - monitors + - monitors + configMap: + defaultMode: 6 + name: name + defaultUser: 1 + optional: true + items: + - mode: 2 + path: path + user: 6 + key: key + - mode: 2 + path: path + user: 6 + key: key + storageos: + volumeNamespace: volumeNamespace + volumeName: volumeName + secretRef: + name: name + readOnly: true + fsType: fsType + csi: + driver: driver + nodePublishSecretRef: + name: name + readOnly: true + fsType: fsType + volumeAttributes: + key: volumeAttributes + name: name + nfs: + path: path + server: server + readOnly: true + persistentVolumeClaim: + claimName: claimName + readOnly: true + gitRepo: + repository: repository + directory: directory + revision: revision + portworxVolume: + volumeID: volumeID + readOnly: true + fsType: fsType + vsphereVolume: + storagePolicyName: storagePolicyName + storagePolicyID: storagePolicyID + volumePath: volumePath + fsType: fsType + fc: + lun: 7 + targetWWNs: + - targetWWNs + - targetWWNs + readOnly: true + wwids: + - wwids + - wwids + fsType: fsType + hostPath: + path: path + type: type + - quobyte: + volume: volume + registry: registry + readOnly: true + user: user + tenant: tenant + group: group + azureFile: + secretName: secretName + readOnly: true + shareName: shareName + flexVolume: + driver: driver + options: + key: options + secretRef: + name: name + readOnly: true + fsType: fsType + ephemeral: + volumeClaimTemplate: + metadata: + generation: 6 + finalizers: + - finalizers + - finalizers + resourceVersion: resourceVersion + annotations: + key: annotations + generateName: generateName + deletionTimestamp: 2000-01-23T04:56:07.000+00:00 + labels: + key: labels + ownerReferences: + - uid: uid + controller: true + apiVersion: apiVersion + kind: kind + name: name + blockOwnerDeletion: true + - uid: uid + controller: true + apiVersion: apiVersion + kind: kind + name: name + blockOwnerDeletion: true + selfLink: selfLink + deletionGracePeriodSeconds: 0 + uid: uid + managedFields: + - apiVersion: apiVersion + fieldsV1: "{}" + manager: manager + subresource: subresource + time: 2000-01-23T04:56:07.000+00:00 + operation: operation + fieldsType: fieldsType + - apiVersion: apiVersion + fieldsV1: "{}" + manager: manager + subresource: subresource + time: 2000-01-23T04:56:07.000+00:00 + operation: operation + fieldsType: fieldsType + creationTimestamp: 2000-01-23T04:56:07.000+00:00 + name: name + namespace: namespace + spec: + storageClassName: storageClassName + dataSourceRef: + apiGroup: apiGroup + kind: kind + name: name + namespace: namespace + volumeName: volumeName + volumeAttributesClassName: volumeAttributesClassName + resources: + requests: + key: null + limits: + key: null + selector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + accessModes: + - accessModes + - accessModes + dataSource: + apiGroup: apiGroup + kind: kind + name: name + volumeMode: volumeMode + secret: + secretName: secretName + defaultMode: 7 + defaultUser: 5 + optional: true + items: + - mode: 2 + path: path + user: 6 + key: key + - mode: 2 + path: path + user: 6 + key: key + projected: + sources: + - downwardAPI: + items: + - mode: 6 + path: path + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + user: 3 - mode: 6 path: path + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + user: 3 + configMap: + name: name + optional: true + items: + - mode: 2 + path: path + user: 6 + key: key + - mode: 2 + path: path + user: 6 + key: key + podCertificate: + certificateChainPath: certificateChainPath + userAnnotations: + key: userAnnotations + keyPath: keyPath + maxExpirationSeconds: 8 + keyType: keyType + user: 7 + credentialBundlePath: credentialBundlePath + signerName: signerName + secret: + name: name + optional: true + items: + - mode: 2 + path: path + user: 6 + key: key + - mode: 2 + path: path + user: 6 key: key serviceAccountToken: path: path audience: audience expirationSeconds: 3 + user: 3 clusterTrustBundle: path: path labelSelector: @@ -117408,368 +125580,11 @@ components: key: matchLabels name: name optional: true + user: 4 signerName: signerName - defaultMode: 6 - cephfs: - path: path - secretRef: - name: name - secretFile: secretFile - readOnly: true - user: user - monitors: - - monitors - - monitors - scaleIO: - system: system - protectionDomain: protectionDomain - sslEnabled: true - storageMode: storageMode - volumeName: volumeName - secretRef: - name: name - readOnly: true - fsType: fsType - storagePool: storagePool - gateway: gateway - emptyDir: - sizeLimit: sizeLimit - medium: medium - glusterfs: - path: path - endpoints: endpoints - readOnly: true - gcePersistentDisk: - partition: 6 - readOnly: true - pdName: pdName - fsType: fsType - image: - reference: reference - pullPolicy: pullPolicy - photonPersistentDisk: - pdID: pdID - fsType: fsType - azureDisk: - diskName: diskName - kind: kind - readOnly: true - cachingMode: cachingMode - diskURI: diskURI - fsType: fsType - cinder: - secretRef: - name: name - volumeID: volumeID - readOnly: true - fsType: fsType - downwardAPI: - defaultMode: 1 - items: - - mode: 2 - path: path - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath - - mode: 2 - path: path - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath - awsElasticBlockStore: - partition: 6 - volumeID: volumeID - readOnly: true - fsType: fsType - flocker: - datasetName: datasetName - datasetUUID: datasetUUID - iscsi: - chapAuthSession: true - iscsiInterface: iscsiInterface - lun: 5 - chapAuthDiscovery: true - iqn: iqn - portals: - - portals - - portals - secretRef: - name: name - initiatorName: initiatorName - readOnly: true - fsType: fsType - targetPortal: targetPortal - rbd: - image: image - pool: pool - secretRef: - name: name - readOnly: true - fsType: fsType - keyring: keyring - user: user - monitors: - - monitors - - monitors - configMap: - defaultMode: 3 - name: name - optional: true - items: - - mode: 6 - path: path - key: key - - mode: 6 - path: path - key: key - storageos: - volumeNamespace: volumeNamespace - volumeName: volumeName - secretRef: - name: name - readOnly: true - fsType: fsType - csi: - driver: driver - nodePublishSecretRef: - name: name - readOnly: true - fsType: fsType - volumeAttributes: - key: volumeAttributes - name: name - nfs: - path: path - server: server - readOnly: true - persistentVolumeClaim: - claimName: claimName - readOnly: true - gitRepo: - repository: repository - directory: directory - revision: revision - portworxVolume: - volumeID: volumeID - readOnly: true - fsType: fsType - vsphereVolume: - storagePolicyName: storagePolicyName - storagePolicyID: storagePolicyID - volumePath: volumePath - fsType: fsType - fc: - lun: 6 - targetWWNs: - - targetWWNs - - targetWWNs - readOnly: true - wwids: - - wwids - - wwids - fsType: fsType - hostPath: - path: path - type: type - - quobyte: - volume: volume - registry: registry - readOnly: true - user: user - tenant: tenant - group: group - azureFile: - secretName: secretName - readOnly: true - shareName: shareName - flexVolume: - driver: driver - options: - key: options - secretRef: - name: name - readOnly: true - fsType: fsType - ephemeral: - volumeClaimTemplate: - metadata: - generation: 6 - finalizers: - - finalizers - - finalizers - resourceVersion: resourceVersion - annotations: - key: annotations - generateName: generateName - deletionTimestamp: 2000-01-23T04:56:07.000+00:00 - labels: - key: labels - ownerReferences: - - uid: uid - controller: true - apiVersion: apiVersion - kind: kind - name: name - blockOwnerDeletion: true - - uid: uid - controller: true - apiVersion: apiVersion - kind: kind - name: name - blockOwnerDeletion: true - selfLink: selfLink - deletionGracePeriodSeconds: 0 - uid: uid - managedFields: - - apiVersion: apiVersion - fieldsV1: "{}" - manager: manager - subresource: subresource - time: 2000-01-23T04:56:07.000+00:00 - operation: operation - fieldsType: fieldsType - - apiVersion: apiVersion - fieldsV1: "{}" - manager: manager - subresource: subresource - time: 2000-01-23T04:56:07.000+00:00 - operation: operation - fieldsType: fieldsType - creationTimestamp: 2000-01-23T04:56:07.000+00:00 - name: name - namespace: namespace - spec: - storageClassName: storageClassName - dataSourceRef: - apiGroup: apiGroup - kind: kind - name: name - namespace: namespace - volumeName: volumeName - volumeAttributesClassName: volumeAttributesClassName - resources: - requests: - key: null - limits: - key: null - selector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - accessModes: - - accessModes - - accessModes - dataSource: - apiGroup: apiGroup - kind: kind - name: name - volumeMode: volumeMode - secret: - secretName: secretName - defaultMode: 7 - optional: true - items: - - mode: 6 - path: path - key: key - - mode: 6 - path: path - key: key - projected: - sources: - downwardAPI: items: - - mode: 2 - path: path - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath - - mode: 2 - path: path - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath - configMap: - name: name - optional: true - items: - - mode: 6 - path: path - key: key - - mode: 6 - path: path - key: key - podCertificate: - certificateChainPath: certificateChainPath - userAnnotations: - key: userAnnotations - keyPath: keyPath - maxExpirationSeconds: 3 - keyType: keyType - credentialBundlePath: credentialBundlePath - signerName: signerName - secret: - name: name - optional: true - items: - - mode: 6 - path: path - key: key - mode: 6 - path: path - key: key - serviceAccountToken: - path: path - audience: audience - expirationSeconds: 3 - clusterTrustBundle: - path: path - labelSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - name: name - optional: true - signerName: signerName - - downwardAPI: - items: - - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -117778,7 +125593,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -117787,39 +125603,46 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 configMap: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key podCertificate: certificateChainPath: certificateChainPath userAnnotations: key: userAnnotations keyPath: keyPath - maxExpirationSeconds: 3 + maxExpirationSeconds: 8 keyType: keyType + user: 7 credentialBundlePath: credentialBundlePath signerName: signerName secret: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key serviceAccountToken: path: path audience: audience expirationSeconds: 3 + user: 3 clusterTrustBundle: path: path labelSelector: @@ -117838,8 +125661,10 @@ components: key: matchLabels name: name optional: true + user: 4 signerName: signerName defaultMode: 6 + defaultUser: 0 cephfs: path: path secretRef: @@ -117863,6 +125688,7 @@ components: storagePool: storagePool gateway: gateway emptyDir: + mode: 3 sizeLimit: sizeLimit medium: medium glusterfs: @@ -117870,7 +125696,7 @@ components: endpoints: endpoints readOnly: true gcePersistentDisk: - partition: 6 + partition: 0 readOnly: true pdName: pdName fsType: fsType @@ -117894,9 +125720,10 @@ components: readOnly: true fsType: fsType downwardAPI: - defaultMode: 1 + defaultMode: 6 + defaultUser: 5 items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -117905,7 +125732,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -117914,8 +125742,9 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 awsElasticBlockStore: - partition: 6 + partition: 3 volumeID: volumeID readOnly: true fsType: fsType @@ -117925,7 +125754,7 @@ components: iscsi: chapAuthSession: true iscsiInterface: iscsiInterface - lun: 5 + lun: 7 chapAuthDiscovery: true iqn: iqn portals: @@ -117950,15 +125779,18 @@ components: - monitors - monitors configMap: - defaultMode: 3 + defaultMode: 6 name: name + defaultUser: 1 optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key storageos: volumeNamespace: volumeNamespace @@ -117997,7 +125829,7 @@ components: volumePath: volumePath fsType: fsType fc: - lun: 6 + lun: 7 targetWWNs: - targetWWNs - targetWWNs @@ -118086,10 +125918,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -118113,6 +125947,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -118120,6 +125957,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -118137,6 +125977,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -118157,6 +125998,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -118181,10 +126023,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -118230,10 +126074,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -118378,10 +126224,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -118405,6 +126253,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -118412,6 +126263,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -118429,6 +126283,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -118449,6 +126304,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -118473,10 +126329,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -118522,10 +126380,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -118605,9 +126465,14 @@ components: tty: true stdinOnce: true serviceAccount: serviceAccount - priority: 7 + priority: 1 restartPolicy: restartPolicy shareProcessNamespace: true + evictionResponders: + - name: name + priority: 7 + - name: name + priority: 7 hostUsers: true resourceClaims: - resourceClaimName: resourceClaimName @@ -118684,10 +126549,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -118711,6 +126578,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -118718,6 +126588,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -118735,6 +126608,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -118755,6 +126629,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -118779,10 +126654,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -118828,10 +126705,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -118975,10 +126854,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -119002,6 +126883,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -119009,6 +126893,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -119026,6 +126913,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -119046,6 +126934,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -119070,10 +126959,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -119119,10 +127010,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -119267,10 +127160,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -119294,6 +127189,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -119301,6 +127199,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -119318,6 +127219,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -119338,6 +127240,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -119362,10 +127265,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -119411,10 +127316,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -119558,10 +127465,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -119585,6 +127494,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -119592,6 +127504,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -119609,6 +127524,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -119629,6 +127545,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -119653,10 +127570,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -119702,10 +127621,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -120340,7 +128261,7 @@ components: spec: dnsPolicy: dnsPolicy nodeName: nodeName - terminationGracePeriodSeconds: 9 + terminationGracePeriodSeconds: 6 dnsConfig: searches: - searches @@ -120381,17 +128302,17 @@ components: appArmorProfile: localhostProfile: localhostProfile type: type - fsGroup: 1 + fsGroup: 4 fsGroupChangePolicy: fsGroupChangePolicy seLinuxChangePolicy: seLinuxChangePolicy - runAsGroup: 4 + runAsGroup: 5 runAsNonRoot: true sysctls: - name: name value: value - name: name value: value - runAsUser: 5 + runAsUser: 9 seccompProfile: localhostProfile: localhostProfile type: type @@ -120411,12 +128332,12 @@ components: runtimeClassName: runtimeClassName tolerations: - effect: effect - tolerationSeconds: 6 + tolerationSeconds: 8 value: value key: key operator: operator - effect: effect - tolerationSeconds: 6 + tolerationSeconds: 8 value: value key: key operator: operator @@ -120438,7 +128359,7 @@ components: topologySpreadConstraints: - nodeTaintsPolicy: nodeTaintsPolicy whenUnsatisfiable: whenUnsatisfiable - maxSkew: 8 + maxSkew: 9 nodeAffinityPolicy: nodeAffinityPolicy labelSelector: matchExpressions: @@ -120454,14 +128375,14 @@ components: operator: operator matchLabels: key: matchLabels - minDomains: 9 + minDomains: 6 topologyKey: topologyKey matchLabelKeys: - matchLabelKeys - matchLabelKeys - nodeTaintsPolicy: nodeTaintsPolicy whenUnsatisfiable: whenUnsatisfiable - maxSkew: 8 + maxSkew: 9 nodeAffinityPolicy: nodeAffinityPolicy labelSelector: matchExpressions: @@ -120477,7 +128398,7 @@ components: operator: operator matchLabels: key: matchLabels - minDomains: 9 + minDomains: 6 topologyKey: topologyKey matchLabelKeys: - matchLabelKeys @@ -120589,19 +128510,22 @@ components: secret: secretName: secretName defaultMode: 7 + defaultUser: 5 optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key projected: sources: - downwardAPI: items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -120610,7 +128534,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -120619,39 +128544,46 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 configMap: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key podCertificate: certificateChainPath: certificateChainPath userAnnotations: key: userAnnotations keyPath: keyPath - maxExpirationSeconds: 3 + maxExpirationSeconds: 8 keyType: keyType + user: 7 credentialBundlePath: credentialBundlePath signerName: signerName secret: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key serviceAccountToken: path: path audience: audience expirationSeconds: 3 + user: 3 clusterTrustBundle: path: path labelSelector: @@ -120670,10 +128602,11 @@ components: key: matchLabels name: name optional: true + user: 4 signerName: signerName - downwardAPI: items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -120682,7 +128615,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -120691,39 +128625,46 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 configMap: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key podCertificate: certificateChainPath: certificateChainPath userAnnotations: key: userAnnotations keyPath: keyPath - maxExpirationSeconds: 3 + maxExpirationSeconds: 8 keyType: keyType + user: 7 credentialBundlePath: credentialBundlePath signerName: signerName secret: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key serviceAccountToken: path: path audience: audience expirationSeconds: 3 + user: 3 clusterTrustBundle: path: path labelSelector: @@ -120742,8 +128683,10 @@ components: key: matchLabels name: name optional: true + user: 4 signerName: signerName defaultMode: 6 + defaultUser: 0 cephfs: path: path secretRef: @@ -120767,6 +128710,7 @@ components: storagePool: storagePool gateway: gateway emptyDir: + mode: 3 sizeLimit: sizeLimit medium: medium glusterfs: @@ -120774,7 +128718,7 @@ components: endpoints: endpoints readOnly: true gcePersistentDisk: - partition: 6 + partition: 0 readOnly: true pdName: pdName fsType: fsType @@ -120798,9 +128742,10 @@ components: readOnly: true fsType: fsType downwardAPI: - defaultMode: 1 + defaultMode: 6 + defaultUser: 5 items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -120809,7 +128754,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -120818,8 +128764,9 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 awsElasticBlockStore: - partition: 6 + partition: 3 volumeID: volumeID readOnly: true fsType: fsType @@ -120829,7 +128776,7 @@ components: iscsi: chapAuthSession: true iscsiInterface: iscsiInterface - lun: 5 + lun: 7 chapAuthDiscovery: true iqn: iqn portals: @@ -120854,15 +128801,18 @@ components: - monitors - monitors configMap: - defaultMode: 3 + defaultMode: 6 name: name + defaultUser: 1 optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key storageos: volumeNamespace: volumeNamespace @@ -120901,7 +128851,7 @@ components: volumePath: volumePath fsType: fsType fc: - lun: 6 + lun: 7 targetWWNs: - targetWWNs - targetWWNs @@ -121019,19 +128969,22 @@ components: secret: secretName: secretName defaultMode: 7 + defaultUser: 5 optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key projected: sources: - downwardAPI: items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -121040,7 +128993,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -121049,39 +129003,46 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 configMap: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key podCertificate: certificateChainPath: certificateChainPath userAnnotations: key: userAnnotations keyPath: keyPath - maxExpirationSeconds: 3 + maxExpirationSeconds: 8 keyType: keyType + user: 7 credentialBundlePath: credentialBundlePath signerName: signerName secret: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key serviceAccountToken: path: path audience: audience expirationSeconds: 3 + user: 3 clusterTrustBundle: path: path labelSelector: @@ -121100,10 +129061,11 @@ components: key: matchLabels name: name optional: true + user: 4 signerName: signerName - downwardAPI: items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -121112,7 +129074,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -121121,39 +129084,46 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 configMap: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key podCertificate: certificateChainPath: certificateChainPath userAnnotations: key: userAnnotations keyPath: keyPath - maxExpirationSeconds: 3 + maxExpirationSeconds: 8 keyType: keyType + user: 7 credentialBundlePath: credentialBundlePath signerName: signerName secret: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key serviceAccountToken: path: path audience: audience expirationSeconds: 3 + user: 3 clusterTrustBundle: path: path labelSelector: @@ -121172,8 +129142,10 @@ components: key: matchLabels name: name optional: true + user: 4 signerName: signerName defaultMode: 6 + defaultUser: 0 cephfs: path: path secretRef: @@ -121197,6 +129169,7 @@ components: storagePool: storagePool gateway: gateway emptyDir: + mode: 3 sizeLimit: sizeLimit medium: medium glusterfs: @@ -121204,7 +129177,7 @@ components: endpoints: endpoints readOnly: true gcePersistentDisk: - partition: 6 + partition: 0 readOnly: true pdName: pdName fsType: fsType @@ -121228,9 +129201,10 @@ components: readOnly: true fsType: fsType downwardAPI: - defaultMode: 1 + defaultMode: 6 + defaultUser: 5 items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -121239,7 +129213,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -121248,8 +129223,9 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 awsElasticBlockStore: - partition: 6 + partition: 3 volumeID: volumeID readOnly: true fsType: fsType @@ -121259,7 +129235,7 @@ components: iscsi: chapAuthSession: true iscsiInterface: iscsiInterface - lun: 5 + lun: 7 chapAuthDiscovery: true iqn: iqn portals: @@ -121284,15 +129260,18 @@ components: - monitors - monitors configMap: - defaultMode: 3 + defaultMode: 6 name: name + defaultUser: 1 optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key storageos: volumeNamespace: volumeNamespace @@ -121331,7 +129310,7 @@ components: volumePath: volumePath fsType: fsType fc: - lun: 6 + lun: 7 targetWWNs: - targetWWNs - targetWWNs @@ -121420,10 +129399,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -121447,6 +129428,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -121454,6 +129438,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -121471,6 +129458,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -121491,6 +129479,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -121515,10 +129504,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -121564,10 +129555,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -121712,10 +129705,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -121739,6 +129734,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -121746,6 +129744,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -121763,6 +129764,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -121783,6 +129785,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -121807,10 +129810,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -121856,10 +129861,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -121939,9 +129946,14 @@ components: tty: true stdinOnce: true serviceAccount: serviceAccount - priority: 7 + priority: 1 restartPolicy: restartPolicy shareProcessNamespace: true + evictionResponders: + - name: name + priority: 7 + - name: name + priority: 7 hostUsers: true resourceClaims: - resourceClaimName: resourceClaimName @@ -122018,10 +130030,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -122045,6 +130059,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -122052,6 +130069,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -122069,6 +130089,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -122089,6 +130110,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -122113,10 +130135,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -122162,10 +130186,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -122309,10 +130335,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -122336,6 +130364,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -122343,6 +130374,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -122360,6 +130394,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -122380,6 +130415,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -122404,10 +130440,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -122453,10 +130491,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -122601,10 +130641,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -122628,6 +130670,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -122635,6 +130680,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -122652,6 +130700,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -122672,6 +130721,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -122696,10 +130746,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -122745,10 +130797,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -122892,10 +130946,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -122919,6 +130975,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -122926,6 +130985,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -122943,6 +131005,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -122963,6 +131026,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -122987,10 +131051,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -123036,10 +131102,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -123655,7 +131723,7 @@ components: spec: dnsPolicy: dnsPolicy nodeName: nodeName - terminationGracePeriodSeconds: 9 + terminationGracePeriodSeconds: 6 dnsConfig: searches: - searches @@ -123696,17 +131764,17 @@ components: appArmorProfile: localhostProfile: localhostProfile type: type - fsGroup: 1 + fsGroup: 4 fsGroupChangePolicy: fsGroupChangePolicy seLinuxChangePolicy: seLinuxChangePolicy - runAsGroup: 4 + runAsGroup: 5 runAsNonRoot: true sysctls: - name: name value: value - name: name value: value - runAsUser: 5 + runAsUser: 9 seccompProfile: localhostProfile: localhostProfile type: type @@ -123726,12 +131794,12 @@ components: runtimeClassName: runtimeClassName tolerations: - effect: effect - tolerationSeconds: 6 + tolerationSeconds: 8 value: value key: key operator: operator - effect: effect - tolerationSeconds: 6 + tolerationSeconds: 8 value: value key: key operator: operator @@ -123753,7 +131821,7 @@ components: topologySpreadConstraints: - nodeTaintsPolicy: nodeTaintsPolicy whenUnsatisfiable: whenUnsatisfiable - maxSkew: 8 + maxSkew: 9 nodeAffinityPolicy: nodeAffinityPolicy labelSelector: matchExpressions: @@ -123769,14 +131837,14 @@ components: operator: operator matchLabels: key: matchLabels - minDomains: 9 + minDomains: 6 topologyKey: topologyKey matchLabelKeys: - matchLabelKeys - matchLabelKeys - nodeTaintsPolicy: nodeTaintsPolicy whenUnsatisfiable: whenUnsatisfiable - maxSkew: 8 + maxSkew: 9 nodeAffinityPolicy: nodeAffinityPolicy labelSelector: matchExpressions: @@ -123792,7 +131860,7 @@ components: operator: operator matchLabels: key: matchLabels - minDomains: 9 + minDomains: 6 topologyKey: topologyKey matchLabelKeys: - matchLabelKeys @@ -123904,19 +131972,22 @@ components: secret: secretName: secretName defaultMode: 7 + defaultUser: 5 optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key projected: sources: - downwardAPI: items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -123925,7 +131996,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -123934,39 +132006,46 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 configMap: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key podCertificate: certificateChainPath: certificateChainPath userAnnotations: key: userAnnotations keyPath: keyPath - maxExpirationSeconds: 3 + maxExpirationSeconds: 8 keyType: keyType + user: 7 credentialBundlePath: credentialBundlePath signerName: signerName secret: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key serviceAccountToken: path: path audience: audience expirationSeconds: 3 + user: 3 clusterTrustBundle: path: path labelSelector: @@ -123985,10 +132064,11 @@ components: key: matchLabels name: name optional: true + user: 4 signerName: signerName - downwardAPI: items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -123997,7 +132077,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -124006,39 +132087,46 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 configMap: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key podCertificate: certificateChainPath: certificateChainPath userAnnotations: key: userAnnotations keyPath: keyPath - maxExpirationSeconds: 3 + maxExpirationSeconds: 8 keyType: keyType + user: 7 credentialBundlePath: credentialBundlePath signerName: signerName secret: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key serviceAccountToken: path: path audience: audience expirationSeconds: 3 + user: 3 clusterTrustBundle: path: path labelSelector: @@ -124057,8 +132145,10 @@ components: key: matchLabels name: name optional: true + user: 4 signerName: signerName defaultMode: 6 + defaultUser: 0 cephfs: path: path secretRef: @@ -124082,6 +132172,7 @@ components: storagePool: storagePool gateway: gateway emptyDir: + mode: 3 sizeLimit: sizeLimit medium: medium glusterfs: @@ -124089,7 +132180,7 @@ components: endpoints: endpoints readOnly: true gcePersistentDisk: - partition: 6 + partition: 0 readOnly: true pdName: pdName fsType: fsType @@ -124113,9 +132204,10 @@ components: readOnly: true fsType: fsType downwardAPI: - defaultMode: 1 + defaultMode: 6 + defaultUser: 5 items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -124124,7 +132216,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -124133,8 +132226,9 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 awsElasticBlockStore: - partition: 6 + partition: 3 volumeID: volumeID readOnly: true fsType: fsType @@ -124144,7 +132238,7 @@ components: iscsi: chapAuthSession: true iscsiInterface: iscsiInterface - lun: 5 + lun: 7 chapAuthDiscovery: true iqn: iqn portals: @@ -124169,15 +132263,18 @@ components: - monitors - monitors configMap: - defaultMode: 3 + defaultMode: 6 name: name + defaultUser: 1 optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key storageos: volumeNamespace: volumeNamespace @@ -124216,7 +132313,7 @@ components: volumePath: volumePath fsType: fsType fc: - lun: 6 + lun: 7 targetWWNs: - targetWWNs - targetWWNs @@ -124334,19 +132431,22 @@ components: secret: secretName: secretName defaultMode: 7 + defaultUser: 5 optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key projected: sources: - downwardAPI: items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -124355,7 +132455,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -124364,39 +132465,46 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 configMap: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key podCertificate: certificateChainPath: certificateChainPath userAnnotations: key: userAnnotations keyPath: keyPath - maxExpirationSeconds: 3 + maxExpirationSeconds: 8 keyType: keyType + user: 7 credentialBundlePath: credentialBundlePath signerName: signerName secret: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key serviceAccountToken: path: path audience: audience expirationSeconds: 3 + user: 3 clusterTrustBundle: path: path labelSelector: @@ -124415,10 +132523,11 @@ components: key: matchLabels name: name optional: true + user: 4 signerName: signerName - downwardAPI: items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -124427,7 +132536,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -124436,39 +132546,46 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 configMap: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key podCertificate: certificateChainPath: certificateChainPath userAnnotations: key: userAnnotations keyPath: keyPath - maxExpirationSeconds: 3 + maxExpirationSeconds: 8 keyType: keyType + user: 7 credentialBundlePath: credentialBundlePath signerName: signerName secret: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key serviceAccountToken: path: path audience: audience expirationSeconds: 3 + user: 3 clusterTrustBundle: path: path labelSelector: @@ -124487,8 +132604,10 @@ components: key: matchLabels name: name optional: true + user: 4 signerName: signerName defaultMode: 6 + defaultUser: 0 cephfs: path: path secretRef: @@ -124512,6 +132631,7 @@ components: storagePool: storagePool gateway: gateway emptyDir: + mode: 3 sizeLimit: sizeLimit medium: medium glusterfs: @@ -124519,7 +132639,7 @@ components: endpoints: endpoints readOnly: true gcePersistentDisk: - partition: 6 + partition: 0 readOnly: true pdName: pdName fsType: fsType @@ -124543,9 +132663,10 @@ components: readOnly: true fsType: fsType downwardAPI: - defaultMode: 1 + defaultMode: 6 + defaultUser: 5 items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -124554,7 +132675,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -124563,8 +132685,9 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 awsElasticBlockStore: - partition: 6 + partition: 3 volumeID: volumeID readOnly: true fsType: fsType @@ -124574,7 +132697,7 @@ components: iscsi: chapAuthSession: true iscsiInterface: iscsiInterface - lun: 5 + lun: 7 chapAuthDiscovery: true iqn: iqn portals: @@ -124599,15 +132722,18 @@ components: - monitors - monitors configMap: - defaultMode: 3 + defaultMode: 6 name: name + defaultUser: 1 optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key storageos: volumeNamespace: volumeNamespace @@ -124646,7 +132772,7 @@ components: volumePath: volumePath fsType: fsType fc: - lun: 6 + lun: 7 targetWWNs: - targetWWNs - targetWWNs @@ -124735,10 +132861,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -124762,6 +132890,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -124769,6 +132900,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -124786,6 +132920,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -124806,6 +132941,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -124830,10 +132966,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -124879,10 +133017,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -125027,10 +133167,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -125054,6 +133196,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -125061,6 +133206,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -125078,6 +133226,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -125098,6 +133247,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -125122,10 +133272,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -125171,10 +133323,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -125254,9 +133408,14 @@ components: tty: true stdinOnce: true serviceAccount: serviceAccount - priority: 7 + priority: 1 restartPolicy: restartPolicy shareProcessNamespace: true + evictionResponders: + - name: name + priority: 7 + - name: name + priority: 7 hostUsers: true resourceClaims: - resourceClaimName: resourceClaimName @@ -125333,10 +133492,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -125360,6 +133521,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -125367,6 +133531,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -125384,6 +133551,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -125404,6 +133572,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -125428,10 +133597,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -125477,10 +133648,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -125624,10 +133797,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -125651,6 +133826,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -125658,6 +133836,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -125675,6 +133856,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -125695,6 +133877,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -125719,10 +133902,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -125768,10 +133953,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -125916,10 +134103,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -125943,6 +134132,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -125950,6 +134142,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -125967,6 +134162,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -125987,6 +134183,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -126011,10 +134208,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -126060,10 +134259,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -126207,10 +134408,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -126234,6 +134437,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -126241,6 +134447,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -126258,6 +134467,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -126278,6 +134488,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -126302,10 +134513,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -126351,10 +134564,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -127099,7 +135314,7 @@ components: spec: dnsPolicy: dnsPolicy nodeName: nodeName - terminationGracePeriodSeconds: 9 + terminationGracePeriodSeconds: 6 dnsConfig: searches: - searches @@ -127140,17 +135355,17 @@ components: appArmorProfile: localhostProfile: localhostProfile type: type - fsGroup: 1 + fsGroup: 4 fsGroupChangePolicy: fsGroupChangePolicy seLinuxChangePolicy: seLinuxChangePolicy - runAsGroup: 4 + runAsGroup: 5 runAsNonRoot: true sysctls: - name: name value: value - name: name value: value - runAsUser: 5 + runAsUser: 9 seccompProfile: localhostProfile: localhostProfile type: type @@ -127170,12 +135385,12 @@ components: runtimeClassName: runtimeClassName tolerations: - effect: effect - tolerationSeconds: 6 + tolerationSeconds: 8 value: value key: key operator: operator - effect: effect - tolerationSeconds: 6 + tolerationSeconds: 8 value: value key: key operator: operator @@ -127197,7 +135412,7 @@ components: topologySpreadConstraints: - nodeTaintsPolicy: nodeTaintsPolicy whenUnsatisfiable: whenUnsatisfiable - maxSkew: 8 + maxSkew: 9 nodeAffinityPolicy: nodeAffinityPolicy labelSelector: matchExpressions: @@ -127213,14 +135428,14 @@ components: operator: operator matchLabels: key: matchLabels - minDomains: 9 + minDomains: 6 topologyKey: topologyKey matchLabelKeys: - matchLabelKeys - matchLabelKeys - nodeTaintsPolicy: nodeTaintsPolicy whenUnsatisfiable: whenUnsatisfiable - maxSkew: 8 + maxSkew: 9 nodeAffinityPolicy: nodeAffinityPolicy labelSelector: matchExpressions: @@ -127236,7 +135451,7 @@ components: operator: operator matchLabels: key: matchLabels - minDomains: 9 + minDomains: 6 topologyKey: topologyKey matchLabelKeys: - matchLabelKeys @@ -127348,19 +135563,22 @@ components: secret: secretName: secretName defaultMode: 7 + defaultUser: 5 optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key projected: sources: - downwardAPI: items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -127369,7 +135587,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -127378,39 +135597,46 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 configMap: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key podCertificate: certificateChainPath: certificateChainPath userAnnotations: key: userAnnotations keyPath: keyPath - maxExpirationSeconds: 3 + maxExpirationSeconds: 8 keyType: keyType + user: 7 credentialBundlePath: credentialBundlePath signerName: signerName secret: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key serviceAccountToken: path: path audience: audience expirationSeconds: 3 + user: 3 clusterTrustBundle: path: path labelSelector: @@ -127429,10 +135655,11 @@ components: key: matchLabels name: name optional: true + user: 4 signerName: signerName - downwardAPI: items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -127441,7 +135668,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -127450,39 +135678,46 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 configMap: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key podCertificate: certificateChainPath: certificateChainPath userAnnotations: key: userAnnotations keyPath: keyPath - maxExpirationSeconds: 3 + maxExpirationSeconds: 8 keyType: keyType + user: 7 credentialBundlePath: credentialBundlePath signerName: signerName secret: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key serviceAccountToken: path: path audience: audience expirationSeconds: 3 + user: 3 clusterTrustBundle: path: path labelSelector: @@ -127501,8 +135736,10 @@ components: key: matchLabels name: name optional: true + user: 4 signerName: signerName defaultMode: 6 + defaultUser: 0 cephfs: path: path secretRef: @@ -127526,6 +135763,7 @@ components: storagePool: storagePool gateway: gateway emptyDir: + mode: 3 sizeLimit: sizeLimit medium: medium glusterfs: @@ -127533,7 +135771,7 @@ components: endpoints: endpoints readOnly: true gcePersistentDisk: - partition: 6 + partition: 0 readOnly: true pdName: pdName fsType: fsType @@ -127557,9 +135795,10 @@ components: readOnly: true fsType: fsType downwardAPI: - defaultMode: 1 + defaultMode: 6 + defaultUser: 5 items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -127568,7 +135807,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -127577,8 +135817,9 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 awsElasticBlockStore: - partition: 6 + partition: 3 volumeID: volumeID readOnly: true fsType: fsType @@ -127588,7 +135829,7 @@ components: iscsi: chapAuthSession: true iscsiInterface: iscsiInterface - lun: 5 + lun: 7 chapAuthDiscovery: true iqn: iqn portals: @@ -127613,15 +135854,18 @@ components: - monitors - monitors configMap: - defaultMode: 3 + defaultMode: 6 name: name + defaultUser: 1 optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key storageos: volumeNamespace: volumeNamespace @@ -127660,7 +135904,7 @@ components: volumePath: volumePath fsType: fsType fc: - lun: 6 + lun: 7 targetWWNs: - targetWWNs - targetWWNs @@ -127778,19 +136022,22 @@ components: secret: secretName: secretName defaultMode: 7 + defaultUser: 5 optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key projected: sources: - downwardAPI: items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -127799,7 +136046,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -127808,39 +136056,46 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 configMap: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key podCertificate: certificateChainPath: certificateChainPath userAnnotations: key: userAnnotations keyPath: keyPath - maxExpirationSeconds: 3 + maxExpirationSeconds: 8 keyType: keyType + user: 7 credentialBundlePath: credentialBundlePath signerName: signerName secret: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key serviceAccountToken: path: path audience: audience expirationSeconds: 3 + user: 3 clusterTrustBundle: path: path labelSelector: @@ -127859,10 +136114,11 @@ components: key: matchLabels name: name optional: true + user: 4 signerName: signerName - downwardAPI: items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -127871,7 +136127,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -127880,39 +136137,46 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 configMap: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key podCertificate: certificateChainPath: certificateChainPath userAnnotations: key: userAnnotations keyPath: keyPath - maxExpirationSeconds: 3 + maxExpirationSeconds: 8 keyType: keyType + user: 7 credentialBundlePath: credentialBundlePath signerName: signerName secret: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key serviceAccountToken: path: path audience: audience expirationSeconds: 3 + user: 3 clusterTrustBundle: path: path labelSelector: @@ -127931,8 +136195,10 @@ components: key: matchLabels name: name optional: true + user: 4 signerName: signerName defaultMode: 6 + defaultUser: 0 cephfs: path: path secretRef: @@ -127956,6 +136222,7 @@ components: storagePool: storagePool gateway: gateway emptyDir: + mode: 3 sizeLimit: sizeLimit medium: medium glusterfs: @@ -127963,7 +136230,7 @@ components: endpoints: endpoints readOnly: true gcePersistentDisk: - partition: 6 + partition: 0 readOnly: true pdName: pdName fsType: fsType @@ -127987,9 +136254,10 @@ components: readOnly: true fsType: fsType downwardAPI: - defaultMode: 1 + defaultMode: 6 + defaultUser: 5 items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -127998,7 +136266,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -128007,8 +136276,9 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 awsElasticBlockStore: - partition: 6 + partition: 3 volumeID: volumeID readOnly: true fsType: fsType @@ -128018,7 +136288,7 @@ components: iscsi: chapAuthSession: true iscsiInterface: iscsiInterface - lun: 5 + lun: 7 chapAuthDiscovery: true iqn: iqn portals: @@ -128043,15 +136313,18 @@ components: - monitors - monitors configMap: - defaultMode: 3 + defaultMode: 6 name: name + defaultUser: 1 optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key storageos: volumeNamespace: volumeNamespace @@ -128090,7 +136363,7 @@ components: volumePath: volumePath fsType: fsType fc: - lun: 6 + lun: 7 targetWWNs: - targetWWNs - targetWWNs @@ -128179,10 +136452,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -128206,6 +136481,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -128213,6 +136491,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -128230,6 +136511,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -128250,6 +136532,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -128274,10 +136557,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -128323,10 +136608,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -128471,10 +136758,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -128498,6 +136787,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -128505,6 +136797,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -128522,6 +136817,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -128542,6 +136838,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -128566,10 +136863,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -128615,10 +136914,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -128698,9 +136999,14 @@ components: tty: true stdinOnce: true serviceAccount: serviceAccount - priority: 7 + priority: 1 restartPolicy: restartPolicy shareProcessNamespace: true + evictionResponders: + - name: name + priority: 7 + - name: name + priority: 7 hostUsers: true resourceClaims: - resourceClaimName: resourceClaimName @@ -128777,10 +137083,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -128804,6 +137112,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -128811,6 +137122,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -128828,6 +137142,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -128848,6 +137163,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -128872,10 +137188,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -128921,10 +137239,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -129068,10 +137388,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -129095,6 +137417,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -129102,6 +137427,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -129119,6 +137447,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -129139,6 +137468,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -129163,10 +137493,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -129212,10 +137544,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -129360,10 +137694,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -129387,6 +137723,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -129394,6 +137733,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -129411,6 +137753,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -129431,6 +137774,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -129455,10 +137799,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -129504,10 +137850,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -129651,10 +137999,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -129678,6 +138028,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -129685,6 +138038,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -129702,6 +138058,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -129722,6 +138079,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -129746,10 +138104,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -129795,10 +138155,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -130355,6 +138717,8 @@ components: $ref: "#/components/schemas/v1.DeploymentSpec" status: $ref: "#/components/schemas/v1.DeploymentStatus" + required: + - spec type: object x-kubernetes-group-version-kind: - group: apps @@ -130393,9 +138757,6 @@ components: type: description: Type of deployment condition. type: string - required: - - status - - type type: object v1.DeploymentList: description: DeploymentList is a list of Deployments. @@ -130509,7 +138870,7 @@ components: spec: dnsPolicy: dnsPolicy nodeName: nodeName - terminationGracePeriodSeconds: 9 + terminationGracePeriodSeconds: 6 dnsConfig: searches: - searches @@ -130550,17 +138911,17 @@ components: appArmorProfile: localhostProfile: localhostProfile type: type - fsGroup: 1 + fsGroup: 4 fsGroupChangePolicy: fsGroupChangePolicy seLinuxChangePolicy: seLinuxChangePolicy - runAsGroup: 4 + runAsGroup: 5 runAsNonRoot: true sysctls: - name: name value: value - name: name value: value - runAsUser: 5 + runAsUser: 9 seccompProfile: localhostProfile: localhostProfile type: type @@ -130580,12 +138941,12 @@ components: runtimeClassName: runtimeClassName tolerations: - effect: effect - tolerationSeconds: 6 + tolerationSeconds: 8 value: value key: key operator: operator - effect: effect - tolerationSeconds: 6 + tolerationSeconds: 8 value: value key: key operator: operator @@ -130607,7 +138968,7 @@ components: topologySpreadConstraints: - nodeTaintsPolicy: nodeTaintsPolicy whenUnsatisfiable: whenUnsatisfiable - maxSkew: 8 + maxSkew: 9 nodeAffinityPolicy: nodeAffinityPolicy labelSelector: matchExpressions: @@ -130623,14 +138984,14 @@ components: operator: operator matchLabels: key: matchLabels - minDomains: 9 + minDomains: 6 topologyKey: topologyKey matchLabelKeys: - matchLabelKeys - matchLabelKeys - nodeTaintsPolicy: nodeTaintsPolicy whenUnsatisfiable: whenUnsatisfiable - maxSkew: 8 + maxSkew: 9 nodeAffinityPolicy: nodeAffinityPolicy labelSelector: matchExpressions: @@ -130646,7 +139007,7 @@ components: operator: operator matchLabels: key: matchLabels - minDomains: 9 + minDomains: 6 topologyKey: topologyKey matchLabelKeys: - matchLabelKeys @@ -130758,19 +139119,22 @@ components: secret: secretName: secretName defaultMode: 7 + defaultUser: 5 optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key projected: sources: - downwardAPI: items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -130779,7 +139143,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -130788,39 +139153,46 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 configMap: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key podCertificate: certificateChainPath: certificateChainPath userAnnotations: key: userAnnotations keyPath: keyPath - maxExpirationSeconds: 3 + maxExpirationSeconds: 8 keyType: keyType + user: 7 credentialBundlePath: credentialBundlePath signerName: signerName secret: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key serviceAccountToken: path: path audience: audience expirationSeconds: 3 + user: 3 clusterTrustBundle: path: path labelSelector: @@ -130839,10 +139211,11 @@ components: key: matchLabels name: name optional: true + user: 4 signerName: signerName - downwardAPI: items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -130851,7 +139224,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -130860,39 +139234,46 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 configMap: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key podCertificate: certificateChainPath: certificateChainPath userAnnotations: key: userAnnotations keyPath: keyPath - maxExpirationSeconds: 3 + maxExpirationSeconds: 8 keyType: keyType + user: 7 credentialBundlePath: credentialBundlePath signerName: signerName secret: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key serviceAccountToken: path: path audience: audience expirationSeconds: 3 + user: 3 clusterTrustBundle: path: path labelSelector: @@ -130911,8 +139292,10 @@ components: key: matchLabels name: name optional: true + user: 4 signerName: signerName defaultMode: 6 + defaultUser: 0 cephfs: path: path secretRef: @@ -130936,6 +139319,7 @@ components: storagePool: storagePool gateway: gateway emptyDir: + mode: 3 sizeLimit: sizeLimit medium: medium glusterfs: @@ -130943,7 +139327,7 @@ components: endpoints: endpoints readOnly: true gcePersistentDisk: - partition: 6 + partition: 0 readOnly: true pdName: pdName fsType: fsType @@ -130967,9 +139351,10 @@ components: readOnly: true fsType: fsType downwardAPI: - defaultMode: 1 + defaultMode: 6 + defaultUser: 5 items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -130978,7 +139363,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -130987,8 +139373,9 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 awsElasticBlockStore: - partition: 6 + partition: 3 volumeID: volumeID readOnly: true fsType: fsType @@ -130998,7 +139385,7 @@ components: iscsi: chapAuthSession: true iscsiInterface: iscsiInterface - lun: 5 + lun: 7 chapAuthDiscovery: true iqn: iqn portals: @@ -131023,15 +139410,18 @@ components: - monitors - monitors configMap: - defaultMode: 3 + defaultMode: 6 name: name + defaultUser: 1 optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key storageos: volumeNamespace: volumeNamespace @@ -131070,7 +139460,7 @@ components: volumePath: volumePath fsType: fsType fc: - lun: 6 + lun: 7 targetWWNs: - targetWWNs - targetWWNs @@ -131188,19 +139578,22 @@ components: secret: secretName: secretName defaultMode: 7 + defaultUser: 5 optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key projected: sources: - downwardAPI: items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -131209,7 +139602,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -131218,39 +139612,46 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 configMap: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key podCertificate: certificateChainPath: certificateChainPath userAnnotations: key: userAnnotations keyPath: keyPath - maxExpirationSeconds: 3 + maxExpirationSeconds: 8 keyType: keyType + user: 7 credentialBundlePath: credentialBundlePath signerName: signerName secret: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key serviceAccountToken: path: path audience: audience expirationSeconds: 3 + user: 3 clusterTrustBundle: path: path labelSelector: @@ -131269,10 +139670,11 @@ components: key: matchLabels name: name optional: true + user: 4 signerName: signerName - downwardAPI: items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -131281,7 +139683,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -131290,39 +139693,46 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 configMap: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key podCertificate: certificateChainPath: certificateChainPath userAnnotations: key: userAnnotations keyPath: keyPath - maxExpirationSeconds: 3 + maxExpirationSeconds: 8 keyType: keyType + user: 7 credentialBundlePath: credentialBundlePath signerName: signerName secret: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key serviceAccountToken: path: path audience: audience expirationSeconds: 3 + user: 3 clusterTrustBundle: path: path labelSelector: @@ -131341,8 +139751,10 @@ components: key: matchLabels name: name optional: true + user: 4 signerName: signerName defaultMode: 6 + defaultUser: 0 cephfs: path: path secretRef: @@ -131366,6 +139778,7 @@ components: storagePool: storagePool gateway: gateway emptyDir: + mode: 3 sizeLimit: sizeLimit medium: medium glusterfs: @@ -131373,7 +139786,7 @@ components: endpoints: endpoints readOnly: true gcePersistentDisk: - partition: 6 + partition: 0 readOnly: true pdName: pdName fsType: fsType @@ -131397,9 +139810,10 @@ components: readOnly: true fsType: fsType downwardAPI: - defaultMode: 1 + defaultMode: 6 + defaultUser: 5 items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -131408,7 +139822,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -131417,8 +139832,9 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 awsElasticBlockStore: - partition: 6 + partition: 3 volumeID: volumeID readOnly: true fsType: fsType @@ -131428,7 +139844,7 @@ components: iscsi: chapAuthSession: true iscsiInterface: iscsiInterface - lun: 5 + lun: 7 chapAuthDiscovery: true iqn: iqn portals: @@ -131453,15 +139869,18 @@ components: - monitors - monitors configMap: - defaultMode: 3 + defaultMode: 6 name: name + defaultUser: 1 optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key storageos: volumeNamespace: volumeNamespace @@ -131500,7 +139919,7 @@ components: volumePath: volumePath fsType: fsType fc: - lun: 6 + lun: 7 targetWWNs: - targetWWNs - targetWWNs @@ -131589,10 +140008,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -131616,6 +140037,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -131623,6 +140047,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -131640,6 +140067,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -131660,6 +140088,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -131684,10 +140113,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -131733,10 +140164,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -131881,10 +140314,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -131908,6 +140343,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -131915,6 +140353,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -131932,6 +140373,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -131952,6 +140394,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -131976,10 +140419,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -132025,10 +140470,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -132108,9 +140555,14 @@ components: tty: true stdinOnce: true serviceAccount: serviceAccount - priority: 7 + priority: 1 restartPolicy: restartPolicy shareProcessNamespace: true + evictionResponders: + - name: name + priority: 7 + - name: name + priority: 7 hostUsers: true resourceClaims: - resourceClaimName: resourceClaimName @@ -132187,10 +140639,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -132214,6 +140668,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -132221,6 +140678,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -132238,6 +140698,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -132258,6 +140719,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -132282,10 +140744,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -132331,10 +140795,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -132478,10 +140944,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -132505,6 +140973,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -132512,6 +140983,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -132529,6 +141003,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -132549,6 +141024,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -132573,10 +141049,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -132622,10 +141100,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -132770,10 +141250,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -132797,6 +141279,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -132804,6 +141289,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -132821,6 +141309,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -132841,6 +141330,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -132865,10 +141355,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -132914,10 +141406,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -133061,10 +141555,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -133088,6 +141584,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -133095,6 +141594,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -133112,6 +141614,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -133132,6 +141635,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -133156,10 +141660,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -133205,10 +141711,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -133847,7 +142355,7 @@ components: spec: dnsPolicy: dnsPolicy nodeName: nodeName - terminationGracePeriodSeconds: 9 + terminationGracePeriodSeconds: 6 dnsConfig: searches: - searches @@ -133888,17 +142396,17 @@ components: appArmorProfile: localhostProfile: localhostProfile type: type - fsGroup: 1 + fsGroup: 4 fsGroupChangePolicy: fsGroupChangePolicy seLinuxChangePolicy: seLinuxChangePolicy - runAsGroup: 4 + runAsGroup: 5 runAsNonRoot: true sysctls: - name: name value: value - name: name value: value - runAsUser: 5 + runAsUser: 9 seccompProfile: localhostProfile: localhostProfile type: type @@ -133918,12 +142426,12 @@ components: runtimeClassName: runtimeClassName tolerations: - effect: effect - tolerationSeconds: 6 + tolerationSeconds: 8 value: value key: key operator: operator - effect: effect - tolerationSeconds: 6 + tolerationSeconds: 8 value: value key: key operator: operator @@ -133945,7 +142453,7 @@ components: topologySpreadConstraints: - nodeTaintsPolicy: nodeTaintsPolicy whenUnsatisfiable: whenUnsatisfiable - maxSkew: 8 + maxSkew: 9 nodeAffinityPolicy: nodeAffinityPolicy labelSelector: matchExpressions: @@ -133961,14 +142469,14 @@ components: operator: operator matchLabels: key: matchLabels - minDomains: 9 + minDomains: 6 topologyKey: topologyKey matchLabelKeys: - matchLabelKeys - matchLabelKeys - nodeTaintsPolicy: nodeTaintsPolicy whenUnsatisfiable: whenUnsatisfiable - maxSkew: 8 + maxSkew: 9 nodeAffinityPolicy: nodeAffinityPolicy labelSelector: matchExpressions: @@ -133984,7 +142492,7 @@ components: operator: operator matchLabels: key: matchLabels - minDomains: 9 + minDomains: 6 topologyKey: topologyKey matchLabelKeys: - matchLabelKeys @@ -134096,19 +142604,22 @@ components: secret: secretName: secretName defaultMode: 7 + defaultUser: 5 optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key projected: sources: - downwardAPI: items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -134117,7 +142628,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -134126,39 +142638,46 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 configMap: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key podCertificate: certificateChainPath: certificateChainPath userAnnotations: key: userAnnotations keyPath: keyPath - maxExpirationSeconds: 3 + maxExpirationSeconds: 8 keyType: keyType + user: 7 credentialBundlePath: credentialBundlePath signerName: signerName secret: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key serviceAccountToken: path: path audience: audience expirationSeconds: 3 + user: 3 clusterTrustBundle: path: path labelSelector: @@ -134177,10 +142696,11 @@ components: key: matchLabels name: name optional: true + user: 4 signerName: signerName - downwardAPI: items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -134189,7 +142709,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -134198,39 +142719,46 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 configMap: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key podCertificate: certificateChainPath: certificateChainPath userAnnotations: key: userAnnotations keyPath: keyPath - maxExpirationSeconds: 3 + maxExpirationSeconds: 8 keyType: keyType + user: 7 credentialBundlePath: credentialBundlePath signerName: signerName secret: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key serviceAccountToken: path: path audience: audience expirationSeconds: 3 + user: 3 clusterTrustBundle: path: path labelSelector: @@ -134249,8 +142777,10 @@ components: key: matchLabels name: name optional: true + user: 4 signerName: signerName defaultMode: 6 + defaultUser: 0 cephfs: path: path secretRef: @@ -134274,6 +142804,7 @@ components: storagePool: storagePool gateway: gateway emptyDir: + mode: 3 sizeLimit: sizeLimit medium: medium glusterfs: @@ -134281,7 +142812,7 @@ components: endpoints: endpoints readOnly: true gcePersistentDisk: - partition: 6 + partition: 0 readOnly: true pdName: pdName fsType: fsType @@ -134305,9 +142836,10 @@ components: readOnly: true fsType: fsType downwardAPI: - defaultMode: 1 + defaultMode: 6 + defaultUser: 5 items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -134316,7 +142848,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -134325,8 +142858,9 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 awsElasticBlockStore: - partition: 6 + partition: 3 volumeID: volumeID readOnly: true fsType: fsType @@ -134336,7 +142870,7 @@ components: iscsi: chapAuthSession: true iscsiInterface: iscsiInterface - lun: 5 + lun: 7 chapAuthDiscovery: true iqn: iqn portals: @@ -134361,15 +142895,18 @@ components: - monitors - monitors configMap: - defaultMode: 3 + defaultMode: 6 name: name + defaultUser: 1 optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key storageos: volumeNamespace: volumeNamespace @@ -134408,7 +142945,7 @@ components: volumePath: volumePath fsType: fsType fc: - lun: 6 + lun: 7 targetWWNs: - targetWWNs - targetWWNs @@ -134526,19 +143063,22 @@ components: secret: secretName: secretName defaultMode: 7 + defaultUser: 5 optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key projected: sources: - downwardAPI: items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -134547,7 +143087,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -134556,39 +143097,46 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 configMap: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key podCertificate: certificateChainPath: certificateChainPath userAnnotations: key: userAnnotations keyPath: keyPath - maxExpirationSeconds: 3 + maxExpirationSeconds: 8 keyType: keyType + user: 7 credentialBundlePath: credentialBundlePath signerName: signerName secret: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key serviceAccountToken: path: path audience: audience expirationSeconds: 3 + user: 3 clusterTrustBundle: path: path labelSelector: @@ -134607,10 +143155,11 @@ components: key: matchLabels name: name optional: true + user: 4 signerName: signerName - downwardAPI: items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -134619,7 +143168,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -134628,39 +143178,46 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 configMap: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key podCertificate: certificateChainPath: certificateChainPath userAnnotations: key: userAnnotations keyPath: keyPath - maxExpirationSeconds: 3 + maxExpirationSeconds: 8 keyType: keyType + user: 7 credentialBundlePath: credentialBundlePath signerName: signerName secret: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key serviceAccountToken: path: path audience: audience expirationSeconds: 3 + user: 3 clusterTrustBundle: path: path labelSelector: @@ -134679,8 +143236,10 @@ components: key: matchLabels name: name optional: true + user: 4 signerName: signerName defaultMode: 6 + defaultUser: 0 cephfs: path: path secretRef: @@ -134704,6 +143263,7 @@ components: storagePool: storagePool gateway: gateway emptyDir: + mode: 3 sizeLimit: sizeLimit medium: medium glusterfs: @@ -134711,7 +143271,7 @@ components: endpoints: endpoints readOnly: true gcePersistentDisk: - partition: 6 + partition: 0 readOnly: true pdName: pdName fsType: fsType @@ -134735,9 +143295,10 @@ components: readOnly: true fsType: fsType downwardAPI: - defaultMode: 1 + defaultMode: 6 + defaultUser: 5 items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -134746,7 +143307,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -134755,8 +143317,9 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 awsElasticBlockStore: - partition: 6 + partition: 3 volumeID: volumeID readOnly: true fsType: fsType @@ -134766,7 +143329,7 @@ components: iscsi: chapAuthSession: true iscsiInterface: iscsiInterface - lun: 5 + lun: 7 chapAuthDiscovery: true iqn: iqn portals: @@ -134791,15 +143354,18 @@ components: - monitors - monitors configMap: - defaultMode: 3 + defaultMode: 6 name: name + defaultUser: 1 optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key storageos: volumeNamespace: volumeNamespace @@ -134838,7 +143404,7 @@ components: volumePath: volumePath fsType: fsType fc: - lun: 6 + lun: 7 targetWWNs: - targetWWNs - targetWWNs @@ -134927,10 +143493,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -134954,6 +143522,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -134961,6 +143532,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -134978,6 +143552,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -134998,6 +143573,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -135022,10 +143598,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -135071,10 +143649,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -135219,10 +143799,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -135246,6 +143828,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -135253,6 +143838,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -135270,6 +143858,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -135290,6 +143879,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -135314,10 +143904,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -135363,10 +143955,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -135446,9 +144040,14 @@ components: tty: true stdinOnce: true serviceAccount: serviceAccount - priority: 7 + priority: 1 restartPolicy: restartPolicy shareProcessNamespace: true + evictionResponders: + - name: name + priority: 7 + - name: name + priority: 7 hostUsers: true resourceClaims: - resourceClaimName: resourceClaimName @@ -135525,10 +144124,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -135552,6 +144153,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -135559,6 +144163,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -135576,6 +144183,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -135596,6 +144204,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -135620,10 +144229,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -135669,10 +144280,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -135816,10 +144429,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -135843,6 +144458,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -135850,6 +144468,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -135867,6 +144488,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -135887,6 +144509,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -135911,10 +144534,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -135960,10 +144585,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -136108,10 +144735,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -136135,6 +144764,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -136142,6 +144774,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -136159,6 +144794,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -136179,6 +144815,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -136203,10 +144840,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -136252,10 +144891,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -136399,10 +145040,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -136426,6 +145069,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -136433,6 +145079,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -136450,6 +145099,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -136470,6 +145120,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -136494,10 +145145,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -136543,10 +145196,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -137167,7 +145822,7 @@ components: spec: dnsPolicy: dnsPolicy nodeName: nodeName - terminationGracePeriodSeconds: 9 + terminationGracePeriodSeconds: 6 dnsConfig: searches: - searches @@ -137208,17 +145863,17 @@ components: appArmorProfile: localhostProfile: localhostProfile type: type - fsGroup: 1 + fsGroup: 4 fsGroupChangePolicy: fsGroupChangePolicy seLinuxChangePolicy: seLinuxChangePolicy - runAsGroup: 4 + runAsGroup: 5 runAsNonRoot: true sysctls: - name: name value: value - name: name value: value - runAsUser: 5 + runAsUser: 9 seccompProfile: localhostProfile: localhostProfile type: type @@ -137238,12 +145893,12 @@ components: runtimeClassName: runtimeClassName tolerations: - effect: effect - tolerationSeconds: 6 + tolerationSeconds: 8 value: value key: key operator: operator - effect: effect - tolerationSeconds: 6 + tolerationSeconds: 8 value: value key: key operator: operator @@ -137265,7 +145920,7 @@ components: topologySpreadConstraints: - nodeTaintsPolicy: nodeTaintsPolicy whenUnsatisfiable: whenUnsatisfiable - maxSkew: 8 + maxSkew: 9 nodeAffinityPolicy: nodeAffinityPolicy labelSelector: matchExpressions: @@ -137281,14 +145936,14 @@ components: operator: operator matchLabels: key: matchLabels - minDomains: 9 + minDomains: 6 topologyKey: topologyKey matchLabelKeys: - matchLabelKeys - matchLabelKeys - nodeTaintsPolicy: nodeTaintsPolicy whenUnsatisfiable: whenUnsatisfiable - maxSkew: 8 + maxSkew: 9 nodeAffinityPolicy: nodeAffinityPolicy labelSelector: matchExpressions: @@ -137304,7 +145959,7 @@ components: operator: operator matchLabels: key: matchLabels - minDomains: 9 + minDomains: 6 topologyKey: topologyKey matchLabelKeys: - matchLabelKeys @@ -137416,19 +146071,22 @@ components: secret: secretName: secretName defaultMode: 7 + defaultUser: 5 optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key projected: sources: - downwardAPI: items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -137437,7 +146095,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -137446,39 +146105,46 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 configMap: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key podCertificate: certificateChainPath: certificateChainPath userAnnotations: key: userAnnotations keyPath: keyPath - maxExpirationSeconds: 3 + maxExpirationSeconds: 8 keyType: keyType + user: 7 credentialBundlePath: credentialBundlePath signerName: signerName secret: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key serviceAccountToken: path: path audience: audience expirationSeconds: 3 + user: 3 clusterTrustBundle: path: path labelSelector: @@ -137497,10 +146163,11 @@ components: key: matchLabels name: name optional: true + user: 4 signerName: signerName - downwardAPI: items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -137509,7 +146176,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -137518,39 +146186,46 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 configMap: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key podCertificate: certificateChainPath: certificateChainPath userAnnotations: key: userAnnotations keyPath: keyPath - maxExpirationSeconds: 3 + maxExpirationSeconds: 8 keyType: keyType + user: 7 credentialBundlePath: credentialBundlePath signerName: signerName secret: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key serviceAccountToken: path: path audience: audience expirationSeconds: 3 + user: 3 clusterTrustBundle: path: path labelSelector: @@ -137569,8 +146244,10 @@ components: key: matchLabels name: name optional: true + user: 4 signerName: signerName defaultMode: 6 + defaultUser: 0 cephfs: path: path secretRef: @@ -137594,6 +146271,7 @@ components: storagePool: storagePool gateway: gateway emptyDir: + mode: 3 sizeLimit: sizeLimit medium: medium glusterfs: @@ -137601,7 +146279,7 @@ components: endpoints: endpoints readOnly: true gcePersistentDisk: - partition: 6 + partition: 0 readOnly: true pdName: pdName fsType: fsType @@ -137625,9 +146303,10 @@ components: readOnly: true fsType: fsType downwardAPI: - defaultMode: 1 + defaultMode: 6 + defaultUser: 5 items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -137636,7 +146315,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -137645,8 +146325,9 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 awsElasticBlockStore: - partition: 6 + partition: 3 volumeID: volumeID readOnly: true fsType: fsType @@ -137656,7 +146337,7 @@ components: iscsi: chapAuthSession: true iscsiInterface: iscsiInterface - lun: 5 + lun: 7 chapAuthDiscovery: true iqn: iqn portals: @@ -137681,15 +146362,18 @@ components: - monitors - monitors configMap: - defaultMode: 3 + defaultMode: 6 name: name + defaultUser: 1 optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key storageos: volumeNamespace: volumeNamespace @@ -137728,7 +146412,7 @@ components: volumePath: volumePath fsType: fsType fc: - lun: 6 + lun: 7 targetWWNs: - targetWWNs - targetWWNs @@ -137846,19 +146530,22 @@ components: secret: secretName: secretName defaultMode: 7 + defaultUser: 5 optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key projected: sources: - downwardAPI: items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -137867,7 +146554,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -137876,39 +146564,46 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 configMap: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key podCertificate: certificateChainPath: certificateChainPath userAnnotations: key: userAnnotations keyPath: keyPath - maxExpirationSeconds: 3 + maxExpirationSeconds: 8 keyType: keyType + user: 7 credentialBundlePath: credentialBundlePath signerName: signerName secret: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key serviceAccountToken: path: path audience: audience expirationSeconds: 3 + user: 3 clusterTrustBundle: path: path labelSelector: @@ -137927,10 +146622,11 @@ components: key: matchLabels name: name optional: true + user: 4 signerName: signerName - downwardAPI: items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -137939,7 +146635,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -137948,39 +146645,46 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 configMap: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key podCertificate: certificateChainPath: certificateChainPath userAnnotations: key: userAnnotations keyPath: keyPath - maxExpirationSeconds: 3 + maxExpirationSeconds: 8 keyType: keyType + user: 7 credentialBundlePath: credentialBundlePath signerName: signerName secret: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key serviceAccountToken: path: path audience: audience expirationSeconds: 3 + user: 3 clusterTrustBundle: path: path labelSelector: @@ -137999,8 +146703,10 @@ components: key: matchLabels name: name optional: true + user: 4 signerName: signerName defaultMode: 6 + defaultUser: 0 cephfs: path: path secretRef: @@ -138024,6 +146730,7 @@ components: storagePool: storagePool gateway: gateway emptyDir: + mode: 3 sizeLimit: sizeLimit medium: medium glusterfs: @@ -138031,7 +146738,7 @@ components: endpoints: endpoints readOnly: true gcePersistentDisk: - partition: 6 + partition: 0 readOnly: true pdName: pdName fsType: fsType @@ -138055,9 +146762,10 @@ components: readOnly: true fsType: fsType downwardAPI: - defaultMode: 1 + defaultMode: 6 + defaultUser: 5 items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -138066,7 +146774,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -138075,8 +146784,9 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 awsElasticBlockStore: - partition: 6 + partition: 3 volumeID: volumeID readOnly: true fsType: fsType @@ -138086,7 +146796,7 @@ components: iscsi: chapAuthSession: true iscsiInterface: iscsiInterface - lun: 5 + lun: 7 chapAuthDiscovery: true iqn: iqn portals: @@ -138111,15 +146821,18 @@ components: - monitors - monitors configMap: - defaultMode: 3 + defaultMode: 6 name: name + defaultUser: 1 optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key storageos: volumeNamespace: volumeNamespace @@ -138158,7 +146871,7 @@ components: volumePath: volumePath fsType: fsType fc: - lun: 6 + lun: 7 targetWWNs: - targetWWNs - targetWWNs @@ -138247,10 +146960,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -138274,6 +146989,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -138281,6 +146999,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -138298,6 +147019,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -138318,6 +147040,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -138342,10 +147065,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -138391,10 +147116,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -138539,10 +147266,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -138566,6 +147295,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -138573,6 +147305,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -138590,6 +147325,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -138610,6 +147346,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -138634,10 +147371,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -138683,10 +147422,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -138766,9 +147507,14 @@ components: tty: true stdinOnce: true serviceAccount: serviceAccount - priority: 7 + priority: 1 restartPolicy: restartPolicy shareProcessNamespace: true + evictionResponders: + - name: name + priority: 7 + - name: name + priority: 7 hostUsers: true resourceClaims: - resourceClaimName: resourceClaimName @@ -138845,10 +147591,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -138872,6 +147620,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -138879,6 +147630,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -138896,6 +147650,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -138916,6 +147671,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -138940,10 +147696,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -138989,10 +147747,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -139136,10 +147896,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -139163,6 +147925,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -139170,6 +147935,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -139187,6 +147955,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -139207,6 +147976,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -139231,10 +148001,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -139280,10 +148052,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -139428,10 +148202,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -139455,6 +148231,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -139462,6 +148241,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -139479,6 +148261,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -139499,6 +148282,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -139523,10 +148307,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -139572,10 +148358,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -139719,10 +148507,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -139746,6 +148536,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -139753,6 +148546,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -139770,6 +148566,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -139790,6 +148587,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -139814,10 +148612,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -139863,10 +148663,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -140624,7 +149426,7 @@ components: spec: dnsPolicy: dnsPolicy nodeName: nodeName - terminationGracePeriodSeconds: 9 + terminationGracePeriodSeconds: 6 dnsConfig: searches: - searches @@ -140665,17 +149467,17 @@ components: appArmorProfile: localhostProfile: localhostProfile type: type - fsGroup: 1 + fsGroup: 4 fsGroupChangePolicy: fsGroupChangePolicy seLinuxChangePolicy: seLinuxChangePolicy - runAsGroup: 4 + runAsGroup: 5 runAsNonRoot: true sysctls: - name: name value: value - name: name value: value - runAsUser: 5 + runAsUser: 9 seccompProfile: localhostProfile: localhostProfile type: type @@ -140695,12 +149497,12 @@ components: runtimeClassName: runtimeClassName tolerations: - effect: effect - tolerationSeconds: 6 + tolerationSeconds: 8 value: value key: key operator: operator - effect: effect - tolerationSeconds: 6 + tolerationSeconds: 8 value: value key: key operator: operator @@ -140722,7 +149524,7 @@ components: topologySpreadConstraints: - nodeTaintsPolicy: nodeTaintsPolicy whenUnsatisfiable: whenUnsatisfiable - maxSkew: 8 + maxSkew: 9 nodeAffinityPolicy: nodeAffinityPolicy labelSelector: matchExpressions: @@ -140738,14 +149540,14 @@ components: operator: operator matchLabels: key: matchLabels - minDomains: 9 + minDomains: 6 topologyKey: topologyKey matchLabelKeys: - matchLabelKeys - matchLabelKeys - nodeTaintsPolicy: nodeTaintsPolicy whenUnsatisfiable: whenUnsatisfiable - maxSkew: 8 + maxSkew: 9 nodeAffinityPolicy: nodeAffinityPolicy labelSelector: matchExpressions: @@ -140761,7 +149563,7 @@ components: operator: operator matchLabels: key: matchLabels - minDomains: 9 + minDomains: 6 topologyKey: topologyKey matchLabelKeys: - matchLabelKeys @@ -140873,19 +149675,22 @@ components: secret: secretName: secretName defaultMode: 7 + defaultUser: 5 optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key projected: sources: - downwardAPI: items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -140894,7 +149699,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -140903,39 +149709,46 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 configMap: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key podCertificate: certificateChainPath: certificateChainPath userAnnotations: key: userAnnotations keyPath: keyPath - maxExpirationSeconds: 3 + maxExpirationSeconds: 8 keyType: keyType + user: 7 credentialBundlePath: credentialBundlePath signerName: signerName secret: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key serviceAccountToken: path: path audience: audience expirationSeconds: 3 + user: 3 clusterTrustBundle: path: path labelSelector: @@ -140954,10 +149767,11 @@ components: key: matchLabels name: name optional: true + user: 4 signerName: signerName - downwardAPI: items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -140966,7 +149780,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -140975,39 +149790,46 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 configMap: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key podCertificate: certificateChainPath: certificateChainPath userAnnotations: key: userAnnotations keyPath: keyPath - maxExpirationSeconds: 3 + maxExpirationSeconds: 8 keyType: keyType + user: 7 credentialBundlePath: credentialBundlePath signerName: signerName secret: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key serviceAccountToken: path: path audience: audience expirationSeconds: 3 + user: 3 clusterTrustBundle: path: path labelSelector: @@ -141026,8 +149848,10 @@ components: key: matchLabels name: name optional: true + user: 4 signerName: signerName defaultMode: 6 + defaultUser: 0 cephfs: path: path secretRef: @@ -141051,6 +149875,7 @@ components: storagePool: storagePool gateway: gateway emptyDir: + mode: 3 sizeLimit: sizeLimit medium: medium glusterfs: @@ -141058,7 +149883,7 @@ components: endpoints: endpoints readOnly: true gcePersistentDisk: - partition: 6 + partition: 0 readOnly: true pdName: pdName fsType: fsType @@ -141082,9 +149907,10 @@ components: readOnly: true fsType: fsType downwardAPI: - defaultMode: 1 + defaultMode: 6 + defaultUser: 5 items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -141093,7 +149919,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -141102,8 +149929,9 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 awsElasticBlockStore: - partition: 6 + partition: 3 volumeID: volumeID readOnly: true fsType: fsType @@ -141113,7 +149941,7 @@ components: iscsi: chapAuthSession: true iscsiInterface: iscsiInterface - lun: 5 + lun: 7 chapAuthDiscovery: true iqn: iqn portals: @@ -141138,15 +149966,18 @@ components: - monitors - monitors configMap: - defaultMode: 3 + defaultMode: 6 name: name + defaultUser: 1 optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key storageos: volumeNamespace: volumeNamespace @@ -141185,7 +150016,7 @@ components: volumePath: volumePath fsType: fsType fc: - lun: 6 + lun: 7 targetWWNs: - targetWWNs - targetWWNs @@ -141303,19 +150134,22 @@ components: secret: secretName: secretName defaultMode: 7 + defaultUser: 5 optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key projected: sources: - downwardAPI: items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -141324,7 +150158,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -141333,39 +150168,46 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 configMap: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key podCertificate: certificateChainPath: certificateChainPath userAnnotations: key: userAnnotations keyPath: keyPath - maxExpirationSeconds: 3 + maxExpirationSeconds: 8 keyType: keyType + user: 7 credentialBundlePath: credentialBundlePath signerName: signerName secret: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key serviceAccountToken: path: path audience: audience expirationSeconds: 3 + user: 3 clusterTrustBundle: path: path labelSelector: @@ -141384,10 +150226,11 @@ components: key: matchLabels name: name optional: true + user: 4 signerName: signerName - downwardAPI: items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -141396,7 +150239,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -141405,39 +150249,46 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 configMap: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key podCertificate: certificateChainPath: certificateChainPath userAnnotations: key: userAnnotations keyPath: keyPath - maxExpirationSeconds: 3 + maxExpirationSeconds: 8 keyType: keyType + user: 7 credentialBundlePath: credentialBundlePath signerName: signerName secret: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key serviceAccountToken: path: path audience: audience expirationSeconds: 3 + user: 3 clusterTrustBundle: path: path labelSelector: @@ -141456,8 +150307,10 @@ components: key: matchLabels name: name optional: true + user: 4 signerName: signerName defaultMode: 6 + defaultUser: 0 cephfs: path: path secretRef: @@ -141481,6 +150334,7 @@ components: storagePool: storagePool gateway: gateway emptyDir: + mode: 3 sizeLimit: sizeLimit medium: medium glusterfs: @@ -141488,7 +150342,7 @@ components: endpoints: endpoints readOnly: true gcePersistentDisk: - partition: 6 + partition: 0 readOnly: true pdName: pdName fsType: fsType @@ -141512,9 +150366,10 @@ components: readOnly: true fsType: fsType downwardAPI: - defaultMode: 1 + defaultMode: 6 + defaultUser: 5 items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -141523,7 +150378,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -141532,8 +150388,9 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 awsElasticBlockStore: - partition: 6 + partition: 3 volumeID: volumeID readOnly: true fsType: fsType @@ -141543,7 +150400,7 @@ components: iscsi: chapAuthSession: true iscsiInterface: iscsiInterface - lun: 5 + lun: 7 chapAuthDiscovery: true iqn: iqn portals: @@ -141568,15 +150425,18 @@ components: - monitors - monitors configMap: - defaultMode: 3 + defaultMode: 6 name: name + defaultUser: 1 optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key storageos: volumeNamespace: volumeNamespace @@ -141615,7 +150475,7 @@ components: volumePath: volumePath fsType: fsType fc: - lun: 6 + lun: 7 targetWWNs: - targetWWNs - targetWWNs @@ -141704,10 +150564,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -141731,6 +150593,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -141738,6 +150603,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -141755,6 +150623,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -141775,6 +150644,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -141799,10 +150669,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -141848,10 +150720,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -141996,10 +150870,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -142023,6 +150899,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -142030,6 +150909,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -142047,6 +150929,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -142067,6 +150950,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -142091,10 +150975,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -142140,10 +151026,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -142223,9 +151111,14 @@ components: tty: true stdinOnce: true serviceAccount: serviceAccount - priority: 7 + priority: 1 restartPolicy: restartPolicy shareProcessNamespace: true + evictionResponders: + - name: name + priority: 7 + - name: name + priority: 7 hostUsers: true resourceClaims: - resourceClaimName: resourceClaimName @@ -142302,10 +151195,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -142329,6 +151224,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -142336,6 +151234,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -142353,6 +151254,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -142373,6 +151275,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -142397,10 +151300,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -142446,10 +151351,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -142593,10 +151500,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -142620,6 +151529,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -142627,6 +151539,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -142644,6 +151559,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -142664,6 +151580,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -142688,10 +151605,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -142737,10 +151656,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -142885,10 +151806,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -142912,6 +151835,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -142919,6 +151845,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -142936,6 +151865,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -142956,6 +151886,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -142980,10 +151911,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -143029,10 +151962,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -143176,10 +152111,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -143203,6 +152140,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -143210,6 +152150,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -143227,6 +152170,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -143247,6 +152191,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -143271,10 +152216,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -143320,10 +152267,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -143868,6 +152817,8 @@ components: $ref: "#/components/schemas/v1.ReplicaSetSpec" status: $ref: "#/components/schemas/v1.ReplicaSetStatus" + required: + - spec type: object x-kubernetes-group-version-kind: - group: apps @@ -143902,9 +152853,6 @@ components: type: description: Type of replica set condition. type: string - required: - - status - - type type: object v1.ReplicaSetList: description: ReplicaSetList is a collection of ReplicaSets. @@ -144018,7 +152966,7 @@ components: spec: dnsPolicy: dnsPolicy nodeName: nodeName - terminationGracePeriodSeconds: 9 + terminationGracePeriodSeconds: 6 dnsConfig: searches: - searches @@ -144059,17 +153007,17 @@ components: appArmorProfile: localhostProfile: localhostProfile type: type - fsGroup: 1 + fsGroup: 4 fsGroupChangePolicy: fsGroupChangePolicy seLinuxChangePolicy: seLinuxChangePolicy - runAsGroup: 4 + runAsGroup: 5 runAsNonRoot: true sysctls: - name: name value: value - name: name value: value - runAsUser: 5 + runAsUser: 9 seccompProfile: localhostProfile: localhostProfile type: type @@ -144089,12 +153037,12 @@ components: runtimeClassName: runtimeClassName tolerations: - effect: effect - tolerationSeconds: 6 + tolerationSeconds: 8 value: value key: key operator: operator - effect: effect - tolerationSeconds: 6 + tolerationSeconds: 8 value: value key: key operator: operator @@ -144116,7 +153064,7 @@ components: topologySpreadConstraints: - nodeTaintsPolicy: nodeTaintsPolicy whenUnsatisfiable: whenUnsatisfiable - maxSkew: 8 + maxSkew: 9 nodeAffinityPolicy: nodeAffinityPolicy labelSelector: matchExpressions: @@ -144132,14 +153080,14 @@ components: operator: operator matchLabels: key: matchLabels - minDomains: 9 + minDomains: 6 topologyKey: topologyKey matchLabelKeys: - matchLabelKeys - matchLabelKeys - nodeTaintsPolicy: nodeTaintsPolicy whenUnsatisfiable: whenUnsatisfiable - maxSkew: 8 + maxSkew: 9 nodeAffinityPolicy: nodeAffinityPolicy labelSelector: matchExpressions: @@ -144155,7 +153103,7 @@ components: operator: operator matchLabels: key: matchLabels - minDomains: 9 + minDomains: 6 topologyKey: topologyKey matchLabelKeys: - matchLabelKeys @@ -144267,19 +153215,22 @@ components: secret: secretName: secretName defaultMode: 7 + defaultUser: 5 optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key projected: sources: - downwardAPI: items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -144288,7 +153239,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -144297,39 +153249,46 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 configMap: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key podCertificate: certificateChainPath: certificateChainPath userAnnotations: key: userAnnotations keyPath: keyPath - maxExpirationSeconds: 3 + maxExpirationSeconds: 8 keyType: keyType + user: 7 credentialBundlePath: credentialBundlePath signerName: signerName secret: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key serviceAccountToken: path: path audience: audience expirationSeconds: 3 + user: 3 clusterTrustBundle: path: path labelSelector: @@ -144348,10 +153307,11 @@ components: key: matchLabels name: name optional: true + user: 4 signerName: signerName - downwardAPI: items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -144360,7 +153320,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -144369,39 +153330,46 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 configMap: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key podCertificate: certificateChainPath: certificateChainPath userAnnotations: key: userAnnotations keyPath: keyPath - maxExpirationSeconds: 3 + maxExpirationSeconds: 8 keyType: keyType + user: 7 credentialBundlePath: credentialBundlePath signerName: signerName secret: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key serviceAccountToken: path: path audience: audience expirationSeconds: 3 + user: 3 clusterTrustBundle: path: path labelSelector: @@ -144420,8 +153388,10 @@ components: key: matchLabels name: name optional: true + user: 4 signerName: signerName defaultMode: 6 + defaultUser: 0 cephfs: path: path secretRef: @@ -144445,6 +153415,7 @@ components: storagePool: storagePool gateway: gateway emptyDir: + mode: 3 sizeLimit: sizeLimit medium: medium glusterfs: @@ -144452,7 +153423,7 @@ components: endpoints: endpoints readOnly: true gcePersistentDisk: - partition: 6 + partition: 0 readOnly: true pdName: pdName fsType: fsType @@ -144476,9 +153447,10 @@ components: readOnly: true fsType: fsType downwardAPI: - defaultMode: 1 + defaultMode: 6 + defaultUser: 5 items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -144487,7 +153459,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -144496,8 +153469,9 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 awsElasticBlockStore: - partition: 6 + partition: 3 volumeID: volumeID readOnly: true fsType: fsType @@ -144507,7 +153481,7 @@ components: iscsi: chapAuthSession: true iscsiInterface: iscsiInterface - lun: 5 + lun: 7 chapAuthDiscovery: true iqn: iqn portals: @@ -144532,15 +153506,18 @@ components: - monitors - monitors configMap: - defaultMode: 3 + defaultMode: 6 name: name + defaultUser: 1 optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key storageos: volumeNamespace: volumeNamespace @@ -144579,7 +153556,7 @@ components: volumePath: volumePath fsType: fsType fc: - lun: 6 + lun: 7 targetWWNs: - targetWWNs - targetWWNs @@ -144697,19 +153674,22 @@ components: secret: secretName: secretName defaultMode: 7 + defaultUser: 5 optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key projected: sources: - downwardAPI: items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -144718,7 +153698,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -144727,39 +153708,46 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 configMap: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key podCertificate: certificateChainPath: certificateChainPath userAnnotations: key: userAnnotations keyPath: keyPath - maxExpirationSeconds: 3 + maxExpirationSeconds: 8 keyType: keyType + user: 7 credentialBundlePath: credentialBundlePath signerName: signerName secret: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key serviceAccountToken: path: path audience: audience expirationSeconds: 3 + user: 3 clusterTrustBundle: path: path labelSelector: @@ -144778,10 +153766,11 @@ components: key: matchLabels name: name optional: true + user: 4 signerName: signerName - downwardAPI: items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -144790,7 +153779,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -144799,39 +153789,46 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 configMap: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key podCertificate: certificateChainPath: certificateChainPath userAnnotations: key: userAnnotations keyPath: keyPath - maxExpirationSeconds: 3 + maxExpirationSeconds: 8 keyType: keyType + user: 7 credentialBundlePath: credentialBundlePath signerName: signerName secret: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key serviceAccountToken: path: path audience: audience expirationSeconds: 3 + user: 3 clusterTrustBundle: path: path labelSelector: @@ -144850,8 +153847,10 @@ components: key: matchLabels name: name optional: true + user: 4 signerName: signerName defaultMode: 6 + defaultUser: 0 cephfs: path: path secretRef: @@ -144875,6 +153874,7 @@ components: storagePool: storagePool gateway: gateway emptyDir: + mode: 3 sizeLimit: sizeLimit medium: medium glusterfs: @@ -144882,7 +153882,7 @@ components: endpoints: endpoints readOnly: true gcePersistentDisk: - partition: 6 + partition: 0 readOnly: true pdName: pdName fsType: fsType @@ -144906,9 +153906,10 @@ components: readOnly: true fsType: fsType downwardAPI: - defaultMode: 1 + defaultMode: 6 + defaultUser: 5 items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -144917,7 +153918,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -144926,8 +153928,9 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 awsElasticBlockStore: - partition: 6 + partition: 3 volumeID: volumeID readOnly: true fsType: fsType @@ -144937,7 +153940,7 @@ components: iscsi: chapAuthSession: true iscsiInterface: iscsiInterface - lun: 5 + lun: 7 chapAuthDiscovery: true iqn: iqn portals: @@ -144962,15 +153965,18 @@ components: - monitors - monitors configMap: - defaultMode: 3 + defaultMode: 6 name: name + defaultUser: 1 optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key storageos: volumeNamespace: volumeNamespace @@ -145009,7 +154015,7 @@ components: volumePath: volumePath fsType: fsType fc: - lun: 6 + lun: 7 targetWWNs: - targetWWNs - targetWWNs @@ -145098,10 +154104,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -145125,6 +154133,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -145132,6 +154143,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -145149,6 +154163,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -145169,6 +154184,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -145193,10 +154209,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -145242,10 +154260,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -145390,10 +154410,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -145417,6 +154439,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -145424,6 +154449,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -145441,6 +154469,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -145461,6 +154490,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -145485,10 +154515,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -145534,10 +154566,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -145617,9 +154651,14 @@ components: tty: true stdinOnce: true serviceAccount: serviceAccount - priority: 7 + priority: 1 restartPolicy: restartPolicy shareProcessNamespace: true + evictionResponders: + - name: name + priority: 7 + - name: name + priority: 7 hostUsers: true resourceClaims: - resourceClaimName: resourceClaimName @@ -145696,10 +154735,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -145723,6 +154764,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -145730,6 +154774,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -145747,6 +154794,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -145767,6 +154815,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -145791,10 +154840,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -145840,10 +154891,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -145987,10 +155040,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -146014,6 +155069,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -146021,6 +155079,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -146038,6 +155099,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -146058,6 +155120,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -146082,10 +155145,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -146131,10 +155196,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -146279,10 +155346,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -146306,6 +155375,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -146313,6 +155385,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -146330,6 +155405,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -146350,6 +155426,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -146374,10 +155451,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -146423,10 +155502,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -146570,10 +155651,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -146597,6 +155680,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -146604,6 +155690,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -146621,6 +155710,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -146641,6 +155731,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -146665,10 +155756,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -146714,10 +155807,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -147344,7 +156439,7 @@ components: spec: dnsPolicy: dnsPolicy nodeName: nodeName - terminationGracePeriodSeconds: 9 + terminationGracePeriodSeconds: 6 dnsConfig: searches: - searches @@ -147385,17 +156480,17 @@ components: appArmorProfile: localhostProfile: localhostProfile type: type - fsGroup: 1 + fsGroup: 4 fsGroupChangePolicy: fsGroupChangePolicy seLinuxChangePolicy: seLinuxChangePolicy - runAsGroup: 4 + runAsGroup: 5 runAsNonRoot: true sysctls: - name: name value: value - name: name value: value - runAsUser: 5 + runAsUser: 9 seccompProfile: localhostProfile: localhostProfile type: type @@ -147415,12 +156510,12 @@ components: runtimeClassName: runtimeClassName tolerations: - effect: effect - tolerationSeconds: 6 + tolerationSeconds: 8 value: value key: key operator: operator - effect: effect - tolerationSeconds: 6 + tolerationSeconds: 8 value: value key: key operator: operator @@ -147442,7 +156537,7 @@ components: topologySpreadConstraints: - nodeTaintsPolicy: nodeTaintsPolicy whenUnsatisfiable: whenUnsatisfiable - maxSkew: 8 + maxSkew: 9 nodeAffinityPolicy: nodeAffinityPolicy labelSelector: matchExpressions: @@ -147458,14 +156553,14 @@ components: operator: operator matchLabels: key: matchLabels - minDomains: 9 + minDomains: 6 topologyKey: topologyKey matchLabelKeys: - matchLabelKeys - matchLabelKeys - nodeTaintsPolicy: nodeTaintsPolicy whenUnsatisfiable: whenUnsatisfiable - maxSkew: 8 + maxSkew: 9 nodeAffinityPolicy: nodeAffinityPolicy labelSelector: matchExpressions: @@ -147481,7 +156576,7 @@ components: operator: operator matchLabels: key: matchLabels - minDomains: 9 + minDomains: 6 topologyKey: topologyKey matchLabelKeys: - matchLabelKeys @@ -147593,19 +156688,22 @@ components: secret: secretName: secretName defaultMode: 7 + defaultUser: 5 optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key projected: sources: - downwardAPI: items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -147614,7 +156712,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -147623,39 +156722,46 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 configMap: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key podCertificate: certificateChainPath: certificateChainPath userAnnotations: key: userAnnotations keyPath: keyPath - maxExpirationSeconds: 3 + maxExpirationSeconds: 8 keyType: keyType + user: 7 credentialBundlePath: credentialBundlePath signerName: signerName secret: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key serviceAccountToken: path: path audience: audience expirationSeconds: 3 + user: 3 clusterTrustBundle: path: path labelSelector: @@ -147674,10 +156780,11 @@ components: key: matchLabels name: name optional: true + user: 4 signerName: signerName - downwardAPI: items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -147686,7 +156793,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -147695,39 +156803,46 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 configMap: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key podCertificate: certificateChainPath: certificateChainPath userAnnotations: key: userAnnotations keyPath: keyPath - maxExpirationSeconds: 3 + maxExpirationSeconds: 8 keyType: keyType + user: 7 credentialBundlePath: credentialBundlePath signerName: signerName secret: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key serviceAccountToken: path: path audience: audience expirationSeconds: 3 + user: 3 clusterTrustBundle: path: path labelSelector: @@ -147746,8 +156861,10 @@ components: key: matchLabels name: name optional: true + user: 4 signerName: signerName defaultMode: 6 + defaultUser: 0 cephfs: path: path secretRef: @@ -147771,6 +156888,7 @@ components: storagePool: storagePool gateway: gateway emptyDir: + mode: 3 sizeLimit: sizeLimit medium: medium glusterfs: @@ -147778,7 +156896,7 @@ components: endpoints: endpoints readOnly: true gcePersistentDisk: - partition: 6 + partition: 0 readOnly: true pdName: pdName fsType: fsType @@ -147802,9 +156920,10 @@ components: readOnly: true fsType: fsType downwardAPI: - defaultMode: 1 + defaultMode: 6 + defaultUser: 5 items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -147813,7 +156932,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -147822,8 +156942,9 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 awsElasticBlockStore: - partition: 6 + partition: 3 volumeID: volumeID readOnly: true fsType: fsType @@ -147833,7 +156954,7 @@ components: iscsi: chapAuthSession: true iscsiInterface: iscsiInterface - lun: 5 + lun: 7 chapAuthDiscovery: true iqn: iqn portals: @@ -147858,15 +156979,18 @@ components: - monitors - monitors configMap: - defaultMode: 3 + defaultMode: 6 name: name + defaultUser: 1 optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key storageos: volumeNamespace: volumeNamespace @@ -147905,7 +157029,7 @@ components: volumePath: volumePath fsType: fsType fc: - lun: 6 + lun: 7 targetWWNs: - targetWWNs - targetWWNs @@ -148023,19 +157147,22 @@ components: secret: secretName: secretName defaultMode: 7 + defaultUser: 5 optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key projected: sources: - downwardAPI: items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -148044,7 +157171,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -148053,39 +157181,46 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 configMap: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key podCertificate: certificateChainPath: certificateChainPath userAnnotations: key: userAnnotations keyPath: keyPath - maxExpirationSeconds: 3 + maxExpirationSeconds: 8 keyType: keyType + user: 7 credentialBundlePath: credentialBundlePath signerName: signerName secret: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key serviceAccountToken: path: path audience: audience expirationSeconds: 3 + user: 3 clusterTrustBundle: path: path labelSelector: @@ -148104,10 +157239,11 @@ components: key: matchLabels name: name optional: true + user: 4 signerName: signerName - downwardAPI: items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -148116,7 +157252,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -148125,39 +157262,46 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 configMap: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key podCertificate: certificateChainPath: certificateChainPath userAnnotations: key: userAnnotations keyPath: keyPath - maxExpirationSeconds: 3 + maxExpirationSeconds: 8 keyType: keyType + user: 7 credentialBundlePath: credentialBundlePath signerName: signerName secret: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key serviceAccountToken: path: path audience: audience expirationSeconds: 3 + user: 3 clusterTrustBundle: path: path labelSelector: @@ -148176,8 +157320,10 @@ components: key: matchLabels name: name optional: true + user: 4 signerName: signerName defaultMode: 6 + defaultUser: 0 cephfs: path: path secretRef: @@ -148201,6 +157347,7 @@ components: storagePool: storagePool gateway: gateway emptyDir: + mode: 3 sizeLimit: sizeLimit medium: medium glusterfs: @@ -148208,7 +157355,7 @@ components: endpoints: endpoints readOnly: true gcePersistentDisk: - partition: 6 + partition: 0 readOnly: true pdName: pdName fsType: fsType @@ -148232,9 +157379,10 @@ components: readOnly: true fsType: fsType downwardAPI: - defaultMode: 1 + defaultMode: 6 + defaultUser: 5 items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -148243,7 +157391,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -148252,8 +157401,9 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 awsElasticBlockStore: - partition: 6 + partition: 3 volumeID: volumeID readOnly: true fsType: fsType @@ -148263,7 +157413,7 @@ components: iscsi: chapAuthSession: true iscsiInterface: iscsiInterface - lun: 5 + lun: 7 chapAuthDiscovery: true iqn: iqn portals: @@ -148288,15 +157438,18 @@ components: - monitors - monitors configMap: - defaultMode: 3 + defaultMode: 6 name: name + defaultUser: 1 optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key storageos: volumeNamespace: volumeNamespace @@ -148335,7 +157488,7 @@ components: volumePath: volumePath fsType: fsType fc: - lun: 6 + lun: 7 targetWWNs: - targetWWNs - targetWWNs @@ -148424,10 +157577,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -148451,6 +157606,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -148458,6 +157616,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -148475,6 +157636,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -148495,6 +157657,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -148519,10 +157682,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -148568,10 +157733,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -148716,10 +157883,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -148743,6 +157912,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -148750,6 +157922,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -148767,6 +157942,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -148787,6 +157963,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -148811,10 +157988,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -148860,10 +158039,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -148943,9 +158124,14 @@ components: tty: true stdinOnce: true serviceAccount: serviceAccount - priority: 7 + priority: 1 restartPolicy: restartPolicy shareProcessNamespace: true + evictionResponders: + - name: name + priority: 7 + - name: name + priority: 7 hostUsers: true resourceClaims: - resourceClaimName: resourceClaimName @@ -149022,10 +158208,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -149049,6 +158237,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -149056,6 +158247,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -149073,6 +158267,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -149093,6 +158288,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -149117,10 +158313,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -149166,10 +158364,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -149313,10 +158513,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -149340,6 +158542,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -149347,6 +158552,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -149364,6 +158572,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -149384,6 +158593,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -149408,10 +158618,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -149457,10 +158669,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -149605,10 +158819,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -149632,6 +158848,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -149639,6 +158858,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -149656,6 +158878,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -149676,6 +158899,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -149700,10 +158924,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -149749,10 +158975,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -149896,10 +159124,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -149923,6 +159153,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -149930,6 +159163,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -149947,6 +159183,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -149967,6 +159204,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -149991,10 +159229,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -150040,10 +159280,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -150651,7 +159893,7 @@ components: spec: dnsPolicy: dnsPolicy nodeName: nodeName - terminationGracePeriodSeconds: 9 + terminationGracePeriodSeconds: 6 dnsConfig: searches: - searches @@ -150692,17 +159934,17 @@ components: appArmorProfile: localhostProfile: localhostProfile type: type - fsGroup: 1 + fsGroup: 4 fsGroupChangePolicy: fsGroupChangePolicy seLinuxChangePolicy: seLinuxChangePolicy - runAsGroup: 4 + runAsGroup: 5 runAsNonRoot: true sysctls: - name: name value: value - name: name value: value - runAsUser: 5 + runAsUser: 9 seccompProfile: localhostProfile: localhostProfile type: type @@ -150722,12 +159964,12 @@ components: runtimeClassName: runtimeClassName tolerations: - effect: effect - tolerationSeconds: 6 + tolerationSeconds: 8 value: value key: key operator: operator - effect: effect - tolerationSeconds: 6 + tolerationSeconds: 8 value: value key: key operator: operator @@ -150749,7 +159991,7 @@ components: topologySpreadConstraints: - nodeTaintsPolicy: nodeTaintsPolicy whenUnsatisfiable: whenUnsatisfiable - maxSkew: 8 + maxSkew: 9 nodeAffinityPolicy: nodeAffinityPolicy labelSelector: matchExpressions: @@ -150765,14 +160007,14 @@ components: operator: operator matchLabels: key: matchLabels - minDomains: 9 + minDomains: 6 topologyKey: topologyKey matchLabelKeys: - matchLabelKeys - matchLabelKeys - nodeTaintsPolicy: nodeTaintsPolicy whenUnsatisfiable: whenUnsatisfiable - maxSkew: 8 + maxSkew: 9 nodeAffinityPolicy: nodeAffinityPolicy labelSelector: matchExpressions: @@ -150788,7 +160030,7 @@ components: operator: operator matchLabels: key: matchLabels - minDomains: 9 + minDomains: 6 topologyKey: topologyKey matchLabelKeys: - matchLabelKeys @@ -150900,19 +160142,22 @@ components: secret: secretName: secretName defaultMode: 7 + defaultUser: 5 optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key projected: sources: - downwardAPI: items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -150921,7 +160166,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -150930,39 +160176,46 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 configMap: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key podCertificate: certificateChainPath: certificateChainPath userAnnotations: key: userAnnotations keyPath: keyPath - maxExpirationSeconds: 3 + maxExpirationSeconds: 8 keyType: keyType + user: 7 credentialBundlePath: credentialBundlePath signerName: signerName secret: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key serviceAccountToken: path: path audience: audience expirationSeconds: 3 + user: 3 clusterTrustBundle: path: path labelSelector: @@ -150981,10 +160234,11 @@ components: key: matchLabels name: name optional: true + user: 4 signerName: signerName - downwardAPI: items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -150993,7 +160247,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -151002,39 +160257,46 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 configMap: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key podCertificate: certificateChainPath: certificateChainPath userAnnotations: key: userAnnotations keyPath: keyPath - maxExpirationSeconds: 3 + maxExpirationSeconds: 8 keyType: keyType + user: 7 credentialBundlePath: credentialBundlePath signerName: signerName secret: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key serviceAccountToken: path: path audience: audience expirationSeconds: 3 + user: 3 clusterTrustBundle: path: path labelSelector: @@ -151053,8 +160315,10 @@ components: key: matchLabels name: name optional: true + user: 4 signerName: signerName defaultMode: 6 + defaultUser: 0 cephfs: path: path secretRef: @@ -151078,6 +160342,7 @@ components: storagePool: storagePool gateway: gateway emptyDir: + mode: 3 sizeLimit: sizeLimit medium: medium glusterfs: @@ -151085,7 +160350,7 @@ components: endpoints: endpoints readOnly: true gcePersistentDisk: - partition: 6 + partition: 0 readOnly: true pdName: pdName fsType: fsType @@ -151109,9 +160374,10 @@ components: readOnly: true fsType: fsType downwardAPI: - defaultMode: 1 + defaultMode: 6 + defaultUser: 5 items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -151120,7 +160386,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -151129,8 +160396,9 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 awsElasticBlockStore: - partition: 6 + partition: 3 volumeID: volumeID readOnly: true fsType: fsType @@ -151140,7 +160408,7 @@ components: iscsi: chapAuthSession: true iscsiInterface: iscsiInterface - lun: 5 + lun: 7 chapAuthDiscovery: true iqn: iqn portals: @@ -151165,15 +160433,18 @@ components: - monitors - monitors configMap: - defaultMode: 3 + defaultMode: 6 name: name + defaultUser: 1 optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key storageos: volumeNamespace: volumeNamespace @@ -151212,7 +160483,7 @@ components: volumePath: volumePath fsType: fsType fc: - lun: 6 + lun: 7 targetWWNs: - targetWWNs - targetWWNs @@ -151330,19 +160601,22 @@ components: secret: secretName: secretName defaultMode: 7 + defaultUser: 5 optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key projected: sources: - downwardAPI: items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -151351,7 +160625,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -151360,39 +160635,46 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 configMap: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key podCertificate: certificateChainPath: certificateChainPath userAnnotations: key: userAnnotations keyPath: keyPath - maxExpirationSeconds: 3 + maxExpirationSeconds: 8 keyType: keyType + user: 7 credentialBundlePath: credentialBundlePath signerName: signerName secret: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key serviceAccountToken: path: path audience: audience expirationSeconds: 3 + user: 3 clusterTrustBundle: path: path labelSelector: @@ -151411,10 +160693,11 @@ components: key: matchLabels name: name optional: true + user: 4 signerName: signerName - downwardAPI: items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -151423,7 +160706,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -151432,39 +160716,46 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 configMap: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key podCertificate: certificateChainPath: certificateChainPath userAnnotations: key: userAnnotations keyPath: keyPath - maxExpirationSeconds: 3 + maxExpirationSeconds: 8 keyType: keyType + user: 7 credentialBundlePath: credentialBundlePath signerName: signerName secret: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key serviceAccountToken: path: path audience: audience expirationSeconds: 3 + user: 3 clusterTrustBundle: path: path labelSelector: @@ -151483,8 +160774,10 @@ components: key: matchLabels name: name optional: true + user: 4 signerName: signerName defaultMode: 6 + defaultUser: 0 cephfs: path: path secretRef: @@ -151508,6 +160801,7 @@ components: storagePool: storagePool gateway: gateway emptyDir: + mode: 3 sizeLimit: sizeLimit medium: medium glusterfs: @@ -151515,7 +160809,7 @@ components: endpoints: endpoints readOnly: true gcePersistentDisk: - partition: 6 + partition: 0 readOnly: true pdName: pdName fsType: fsType @@ -151539,9 +160833,10 @@ components: readOnly: true fsType: fsType downwardAPI: - defaultMode: 1 + defaultMode: 6 + defaultUser: 5 items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -151550,7 +160845,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -151559,8 +160855,9 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 awsElasticBlockStore: - partition: 6 + partition: 3 volumeID: volumeID readOnly: true fsType: fsType @@ -151570,7 +160867,7 @@ components: iscsi: chapAuthSession: true iscsiInterface: iscsiInterface - lun: 5 + lun: 7 chapAuthDiscovery: true iqn: iqn portals: @@ -151595,15 +160892,18 @@ components: - monitors - monitors configMap: - defaultMode: 3 + defaultMode: 6 name: name + defaultUser: 1 optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key storageos: volumeNamespace: volumeNamespace @@ -151642,7 +160942,7 @@ components: volumePath: volumePath fsType: fsType fc: - lun: 6 + lun: 7 targetWWNs: - targetWWNs - targetWWNs @@ -151731,10 +161031,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -151758,6 +161060,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -151765,6 +161070,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -151782,6 +161090,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -151802,6 +161111,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -151826,10 +161136,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -151875,10 +161187,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -152023,10 +161337,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -152050,6 +161366,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -152057,6 +161376,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -152074,6 +161396,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -152094,6 +161417,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -152118,10 +161442,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -152167,10 +161493,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -152250,9 +161578,14 @@ components: tty: true stdinOnce: true serviceAccount: serviceAccount - priority: 7 + priority: 1 restartPolicy: restartPolicy shareProcessNamespace: true + evictionResponders: + - name: name + priority: 7 + - name: name + priority: 7 hostUsers: true resourceClaims: - resourceClaimName: resourceClaimName @@ -152329,10 +161662,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -152356,6 +161691,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -152363,6 +161701,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -152380,6 +161721,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -152400,6 +161742,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -152424,10 +161767,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -152473,10 +161818,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -152620,10 +161967,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -152647,6 +161996,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -152654,6 +162006,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -152671,6 +162026,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -152691,6 +162047,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -152715,10 +162072,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -152764,10 +162123,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -152912,10 +162273,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -152939,6 +162302,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -152946,6 +162312,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -152963,6 +162332,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -152983,6 +162353,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -153007,10 +162378,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -153056,10 +162429,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -153203,10 +162578,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -153230,6 +162607,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -153237,6 +162617,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -153254,6 +162637,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -153274,6 +162658,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -153298,10 +162683,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -153347,10 +162734,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -154120,7 +163509,7 @@ components: spec: dnsPolicy: dnsPolicy nodeName: nodeName - terminationGracePeriodSeconds: 9 + terminationGracePeriodSeconds: 6 dnsConfig: searches: - searches @@ -154161,17 +163550,17 @@ components: appArmorProfile: localhostProfile: localhostProfile type: type - fsGroup: 1 + fsGroup: 4 fsGroupChangePolicy: fsGroupChangePolicy seLinuxChangePolicy: seLinuxChangePolicy - runAsGroup: 4 + runAsGroup: 5 runAsNonRoot: true sysctls: - name: name value: value - name: name value: value - runAsUser: 5 + runAsUser: 9 seccompProfile: localhostProfile: localhostProfile type: type @@ -154191,12 +163580,12 @@ components: runtimeClassName: runtimeClassName tolerations: - effect: effect - tolerationSeconds: 6 + tolerationSeconds: 8 value: value key: key operator: operator - effect: effect - tolerationSeconds: 6 + tolerationSeconds: 8 value: value key: key operator: operator @@ -154218,7 +163607,7 @@ components: topologySpreadConstraints: - nodeTaintsPolicy: nodeTaintsPolicy whenUnsatisfiable: whenUnsatisfiable - maxSkew: 8 + maxSkew: 9 nodeAffinityPolicy: nodeAffinityPolicy labelSelector: matchExpressions: @@ -154234,14 +163623,14 @@ components: operator: operator matchLabels: key: matchLabels - minDomains: 9 + minDomains: 6 topologyKey: topologyKey matchLabelKeys: - matchLabelKeys - matchLabelKeys - nodeTaintsPolicy: nodeTaintsPolicy whenUnsatisfiable: whenUnsatisfiable - maxSkew: 8 + maxSkew: 9 nodeAffinityPolicy: nodeAffinityPolicy labelSelector: matchExpressions: @@ -154257,7 +163646,7 @@ components: operator: operator matchLabels: key: matchLabels - minDomains: 9 + minDomains: 6 topologyKey: topologyKey matchLabelKeys: - matchLabelKeys @@ -154369,19 +163758,22 @@ components: secret: secretName: secretName defaultMode: 7 + defaultUser: 5 optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key projected: sources: - downwardAPI: items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -154390,7 +163782,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -154399,39 +163792,46 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 configMap: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key podCertificate: certificateChainPath: certificateChainPath userAnnotations: key: userAnnotations keyPath: keyPath - maxExpirationSeconds: 3 + maxExpirationSeconds: 8 keyType: keyType + user: 7 credentialBundlePath: credentialBundlePath signerName: signerName secret: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key serviceAccountToken: path: path audience: audience expirationSeconds: 3 + user: 3 clusterTrustBundle: path: path labelSelector: @@ -154450,10 +163850,11 @@ components: key: matchLabels name: name optional: true + user: 4 signerName: signerName - downwardAPI: items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -154462,7 +163863,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -154471,39 +163873,46 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 configMap: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key podCertificate: certificateChainPath: certificateChainPath userAnnotations: key: userAnnotations keyPath: keyPath - maxExpirationSeconds: 3 + maxExpirationSeconds: 8 keyType: keyType + user: 7 credentialBundlePath: credentialBundlePath signerName: signerName secret: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key serviceAccountToken: path: path audience: audience expirationSeconds: 3 + user: 3 clusterTrustBundle: path: path labelSelector: @@ -154522,8 +163931,10 @@ components: key: matchLabels name: name optional: true + user: 4 signerName: signerName defaultMode: 6 + defaultUser: 0 cephfs: path: path secretRef: @@ -154547,6 +163958,7 @@ components: storagePool: storagePool gateway: gateway emptyDir: + mode: 3 sizeLimit: sizeLimit medium: medium glusterfs: @@ -154554,7 +163966,7 @@ components: endpoints: endpoints readOnly: true gcePersistentDisk: - partition: 6 + partition: 0 readOnly: true pdName: pdName fsType: fsType @@ -154578,9 +163990,10 @@ components: readOnly: true fsType: fsType downwardAPI: - defaultMode: 1 + defaultMode: 6 + defaultUser: 5 items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -154589,7 +164002,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -154598,8 +164012,9 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 awsElasticBlockStore: - partition: 6 + partition: 3 volumeID: volumeID readOnly: true fsType: fsType @@ -154609,7 +164024,7 @@ components: iscsi: chapAuthSession: true iscsiInterface: iscsiInterface - lun: 5 + lun: 7 chapAuthDiscovery: true iqn: iqn portals: @@ -154634,15 +164049,18 @@ components: - monitors - monitors configMap: - defaultMode: 3 + defaultMode: 6 name: name + defaultUser: 1 optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key storageos: volumeNamespace: volumeNamespace @@ -154681,7 +164099,7 @@ components: volumePath: volumePath fsType: fsType fc: - lun: 6 + lun: 7 targetWWNs: - targetWWNs - targetWWNs @@ -154799,19 +164217,22 @@ components: secret: secretName: secretName defaultMode: 7 + defaultUser: 5 optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key projected: sources: - downwardAPI: items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -154820,7 +164241,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -154829,39 +164251,46 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 configMap: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key podCertificate: certificateChainPath: certificateChainPath userAnnotations: key: userAnnotations keyPath: keyPath - maxExpirationSeconds: 3 + maxExpirationSeconds: 8 keyType: keyType + user: 7 credentialBundlePath: credentialBundlePath signerName: signerName secret: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key serviceAccountToken: path: path audience: audience expirationSeconds: 3 + user: 3 clusterTrustBundle: path: path labelSelector: @@ -154880,10 +164309,11 @@ components: key: matchLabels name: name optional: true + user: 4 signerName: signerName - downwardAPI: items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -154892,7 +164322,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -154901,39 +164332,46 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 configMap: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key podCertificate: certificateChainPath: certificateChainPath userAnnotations: key: userAnnotations keyPath: keyPath - maxExpirationSeconds: 3 + maxExpirationSeconds: 8 keyType: keyType + user: 7 credentialBundlePath: credentialBundlePath signerName: signerName secret: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key serviceAccountToken: path: path audience: audience expirationSeconds: 3 + user: 3 clusterTrustBundle: path: path labelSelector: @@ -154952,8 +164390,10 @@ components: key: matchLabels name: name optional: true + user: 4 signerName: signerName defaultMode: 6 + defaultUser: 0 cephfs: path: path secretRef: @@ -154977,6 +164417,7 @@ components: storagePool: storagePool gateway: gateway emptyDir: + mode: 3 sizeLimit: sizeLimit medium: medium glusterfs: @@ -154984,7 +164425,7 @@ components: endpoints: endpoints readOnly: true gcePersistentDisk: - partition: 6 + partition: 0 readOnly: true pdName: pdName fsType: fsType @@ -155008,9 +164449,10 @@ components: readOnly: true fsType: fsType downwardAPI: - defaultMode: 1 + defaultMode: 6 + defaultUser: 5 items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -155019,7 +164461,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -155028,8 +164471,9 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 awsElasticBlockStore: - partition: 6 + partition: 3 volumeID: volumeID readOnly: true fsType: fsType @@ -155039,7 +164483,7 @@ components: iscsi: chapAuthSession: true iscsiInterface: iscsiInterface - lun: 5 + lun: 7 chapAuthDiscovery: true iqn: iqn portals: @@ -155064,15 +164508,18 @@ components: - monitors - monitors configMap: - defaultMode: 3 + defaultMode: 6 name: name + defaultUser: 1 optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key storageos: volumeNamespace: volumeNamespace @@ -155111,7 +164558,7 @@ components: volumePath: volumePath fsType: fsType fc: - lun: 6 + lun: 7 targetWWNs: - targetWWNs - targetWWNs @@ -155200,10 +164647,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -155227,6 +164676,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -155234,6 +164686,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -155251,6 +164706,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -155271,6 +164727,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -155295,10 +164752,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -155344,10 +164803,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -155492,10 +164953,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -155519,6 +164982,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -155526,6 +164992,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -155543,6 +165012,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -155563,6 +165033,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -155587,10 +165058,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -155636,10 +165109,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -155719,9 +165194,14 @@ components: tty: true stdinOnce: true serviceAccount: serviceAccount - priority: 7 + priority: 1 restartPolicy: restartPolicy shareProcessNamespace: true + evictionResponders: + - name: name + priority: 7 + - name: name + priority: 7 hostUsers: true resourceClaims: - resourceClaimName: resourceClaimName @@ -155798,10 +165278,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -155825,6 +165307,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -155832,6 +165317,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -155849,6 +165337,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -155869,6 +165358,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -155893,10 +165383,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -155942,10 +165434,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -156089,10 +165583,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -156116,6 +165612,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -156123,6 +165622,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -156140,6 +165642,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -156160,6 +165663,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -156184,10 +165688,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -156233,10 +165739,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -156381,10 +165889,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -156408,6 +165918,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -156415,6 +165928,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -156432,6 +165948,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -156452,6 +165969,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -156476,10 +165994,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -156525,10 +166045,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -156672,10 +166194,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -156699,6 +166223,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -156706,6 +166233,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -156723,6 +166253,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -156743,6 +166274,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -156767,10 +166299,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -156816,10 +166350,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -157432,6 +166968,15 @@ components: allocatedResources: key: null currentVolumeAttributesClassName: currentVolumeAttributesClassName + healthStatus: + healthConditions: + - reason: reason + message: message + status: status + - reason: reason + message: message + status: status + lastTransitionTime: 2000-01-23T04:56:07.000+00:00 allocatedResourceStatuses: key: allocatedResourceStatuses accessModes: @@ -157544,6 +167089,15 @@ components: allocatedResources: key: null currentVolumeAttributesClassName: currentVolumeAttributesClassName + healthStatus: + healthConditions: + - reason: reason + message: message + status: status + - reason: reason + message: message + status: status + lastTransitionTime: 2000-01-23T04:56:07.000+00:00 allocatedResourceStatuses: key: allocatedResourceStatuses accessModes: @@ -157605,6 +167159,8 @@ components: $ref: "#/components/schemas/v1.StatefulSetSpec" status: $ref: "#/components/schemas/v1.StatefulSetStatus" + required: + - spec type: object x-kubernetes-group-version-kind: - group: apps @@ -157638,9 +167194,6 @@ components: type: description: Type of statefulset condition. type: string - required: - - status - - type type: object v1.StatefulSetList: description: StatefulSetList is a collection of StatefulSets. @@ -157754,7 +167307,7 @@ components: spec: dnsPolicy: dnsPolicy nodeName: nodeName - terminationGracePeriodSeconds: 9 + terminationGracePeriodSeconds: 6 dnsConfig: searches: - searches @@ -157795,17 +167348,17 @@ components: appArmorProfile: localhostProfile: localhostProfile type: type - fsGroup: 1 + fsGroup: 4 fsGroupChangePolicy: fsGroupChangePolicy seLinuxChangePolicy: seLinuxChangePolicy - runAsGroup: 4 + runAsGroup: 5 runAsNonRoot: true sysctls: - name: name value: value - name: name value: value - runAsUser: 5 + runAsUser: 9 seccompProfile: localhostProfile: localhostProfile type: type @@ -157825,12 +167378,12 @@ components: runtimeClassName: runtimeClassName tolerations: - effect: effect - tolerationSeconds: 6 + tolerationSeconds: 8 value: value key: key operator: operator - effect: effect - tolerationSeconds: 6 + tolerationSeconds: 8 value: value key: key operator: operator @@ -157852,7 +167405,7 @@ components: topologySpreadConstraints: - nodeTaintsPolicy: nodeTaintsPolicy whenUnsatisfiable: whenUnsatisfiable - maxSkew: 8 + maxSkew: 9 nodeAffinityPolicy: nodeAffinityPolicy labelSelector: matchExpressions: @@ -157868,14 +167421,14 @@ components: operator: operator matchLabels: key: matchLabels - minDomains: 9 + minDomains: 6 topologyKey: topologyKey matchLabelKeys: - matchLabelKeys - matchLabelKeys - nodeTaintsPolicy: nodeTaintsPolicy whenUnsatisfiable: whenUnsatisfiable - maxSkew: 8 + maxSkew: 9 nodeAffinityPolicy: nodeAffinityPolicy labelSelector: matchExpressions: @@ -157891,7 +167444,7 @@ components: operator: operator matchLabels: key: matchLabels - minDomains: 9 + minDomains: 6 topologyKey: topologyKey matchLabelKeys: - matchLabelKeys @@ -158003,19 +167556,22 @@ components: secret: secretName: secretName defaultMode: 7 + defaultUser: 5 optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key projected: sources: - downwardAPI: items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -158024,7 +167580,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -158033,39 +167590,46 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 configMap: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key podCertificate: certificateChainPath: certificateChainPath userAnnotations: key: userAnnotations keyPath: keyPath - maxExpirationSeconds: 3 + maxExpirationSeconds: 8 keyType: keyType + user: 7 credentialBundlePath: credentialBundlePath signerName: signerName secret: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key serviceAccountToken: path: path audience: audience expirationSeconds: 3 + user: 3 clusterTrustBundle: path: path labelSelector: @@ -158084,10 +167648,11 @@ components: key: matchLabels name: name optional: true + user: 4 signerName: signerName - downwardAPI: items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -158096,7 +167661,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -158105,39 +167671,46 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 configMap: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key podCertificate: certificateChainPath: certificateChainPath userAnnotations: key: userAnnotations keyPath: keyPath - maxExpirationSeconds: 3 + maxExpirationSeconds: 8 keyType: keyType + user: 7 credentialBundlePath: credentialBundlePath signerName: signerName secret: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key serviceAccountToken: path: path audience: audience expirationSeconds: 3 + user: 3 clusterTrustBundle: path: path labelSelector: @@ -158156,8 +167729,10 @@ components: key: matchLabels name: name optional: true + user: 4 signerName: signerName defaultMode: 6 + defaultUser: 0 cephfs: path: path secretRef: @@ -158181,6 +167756,7 @@ components: storagePool: storagePool gateway: gateway emptyDir: + mode: 3 sizeLimit: sizeLimit medium: medium glusterfs: @@ -158188,7 +167764,7 @@ components: endpoints: endpoints readOnly: true gcePersistentDisk: - partition: 6 + partition: 0 readOnly: true pdName: pdName fsType: fsType @@ -158212,9 +167788,10 @@ components: readOnly: true fsType: fsType downwardAPI: - defaultMode: 1 + defaultMode: 6 + defaultUser: 5 items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -158223,7 +167800,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -158232,8 +167810,9 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 awsElasticBlockStore: - partition: 6 + partition: 3 volumeID: volumeID readOnly: true fsType: fsType @@ -158243,7 +167822,7 @@ components: iscsi: chapAuthSession: true iscsiInterface: iscsiInterface - lun: 5 + lun: 7 chapAuthDiscovery: true iqn: iqn portals: @@ -158268,15 +167847,18 @@ components: - monitors - monitors configMap: - defaultMode: 3 + defaultMode: 6 name: name + defaultUser: 1 optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key storageos: volumeNamespace: volumeNamespace @@ -158315,7 +167897,7 @@ components: volumePath: volumePath fsType: fsType fc: - lun: 6 + lun: 7 targetWWNs: - targetWWNs - targetWWNs @@ -158433,19 +168015,22 @@ components: secret: secretName: secretName defaultMode: 7 + defaultUser: 5 optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key projected: sources: - downwardAPI: items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -158454,7 +168039,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -158463,39 +168049,46 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 configMap: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key podCertificate: certificateChainPath: certificateChainPath userAnnotations: key: userAnnotations keyPath: keyPath - maxExpirationSeconds: 3 + maxExpirationSeconds: 8 keyType: keyType + user: 7 credentialBundlePath: credentialBundlePath signerName: signerName secret: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key serviceAccountToken: path: path audience: audience expirationSeconds: 3 + user: 3 clusterTrustBundle: path: path labelSelector: @@ -158514,10 +168107,11 @@ components: key: matchLabels name: name optional: true + user: 4 signerName: signerName - downwardAPI: items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -158526,7 +168120,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -158535,39 +168130,46 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 configMap: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key podCertificate: certificateChainPath: certificateChainPath userAnnotations: key: userAnnotations keyPath: keyPath - maxExpirationSeconds: 3 + maxExpirationSeconds: 8 keyType: keyType + user: 7 credentialBundlePath: credentialBundlePath signerName: signerName secret: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key serviceAccountToken: path: path audience: audience expirationSeconds: 3 + user: 3 clusterTrustBundle: path: path labelSelector: @@ -158586,8 +168188,10 @@ components: key: matchLabels name: name optional: true + user: 4 signerName: signerName defaultMode: 6 + defaultUser: 0 cephfs: path: path secretRef: @@ -158611,6 +168215,7 @@ components: storagePool: storagePool gateway: gateway emptyDir: + mode: 3 sizeLimit: sizeLimit medium: medium glusterfs: @@ -158618,7 +168223,7 @@ components: endpoints: endpoints readOnly: true gcePersistentDisk: - partition: 6 + partition: 0 readOnly: true pdName: pdName fsType: fsType @@ -158642,9 +168247,10 @@ components: readOnly: true fsType: fsType downwardAPI: - defaultMode: 1 + defaultMode: 6 + defaultUser: 5 items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -158653,7 +168259,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -158662,8 +168269,9 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 awsElasticBlockStore: - partition: 6 + partition: 3 volumeID: volumeID readOnly: true fsType: fsType @@ -158673,7 +168281,7 @@ components: iscsi: chapAuthSession: true iscsiInterface: iscsiInterface - lun: 5 + lun: 7 chapAuthDiscovery: true iqn: iqn portals: @@ -158698,15 +168306,18 @@ components: - monitors - monitors configMap: - defaultMode: 3 + defaultMode: 6 name: name + defaultUser: 1 optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key storageos: volumeNamespace: volumeNamespace @@ -158745,7 +168356,7 @@ components: volumePath: volumePath fsType: fsType fc: - lun: 6 + lun: 7 targetWWNs: - targetWWNs - targetWWNs @@ -158834,10 +168445,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -158861,6 +168474,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -158868,6 +168484,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -158885,6 +168504,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -158905,6 +168525,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -158929,10 +168550,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -158978,10 +168601,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -159126,10 +168751,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -159153,6 +168780,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -159160,6 +168790,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -159177,6 +168810,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -159197,6 +168831,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -159221,10 +168856,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -159270,10 +168907,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -159353,9 +168992,14 @@ components: tty: true stdinOnce: true serviceAccount: serviceAccount - priority: 7 + priority: 1 restartPolicy: restartPolicy shareProcessNamespace: true + evictionResponders: + - name: name + priority: 7 + - name: name + priority: 7 hostUsers: true resourceClaims: - resourceClaimName: resourceClaimName @@ -159432,10 +169076,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -159459,6 +169105,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -159466,6 +169115,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -159483,6 +169135,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -159503,6 +169156,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -159527,10 +169181,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -159576,10 +169232,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -159723,10 +169381,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -159750,6 +169410,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -159757,6 +169420,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -159774,6 +169440,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -159794,6 +169461,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -159818,10 +169486,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -159867,10 +169537,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -160015,10 +169687,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -160042,6 +169716,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -160049,6 +169726,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -160066,6 +169746,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -160086,6 +169767,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -160110,10 +169792,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -160159,10 +169843,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -160306,10 +169992,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -160333,6 +170021,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -160340,6 +170031,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -160357,6 +170051,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -160377,6 +170072,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -160401,10 +170097,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -160450,10 +170148,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -161066,6 +170766,15 @@ components: allocatedResources: key: null currentVolumeAttributesClassName: currentVolumeAttributesClassName + healthStatus: + healthConditions: + - reason: reason + message: message + status: status + - reason: reason + message: message + status: status + lastTransitionTime: 2000-01-23T04:56:07.000+00:00 allocatedResourceStatuses: key: allocatedResourceStatuses accessModes: @@ -161178,6 +170887,15 @@ components: allocatedResources: key: null currentVolumeAttributesClassName: currentVolumeAttributesClassName + healthStatus: + healthConditions: + - reason: reason + message: message + status: status + - reason: reason + message: message + status: status + lastTransitionTime: 2000-01-23T04:56:07.000+00:00 allocatedResourceStatuses: key: allocatedResourceStatuses accessModes: @@ -161321,7 +171039,7 @@ components: spec: dnsPolicy: dnsPolicy nodeName: nodeName - terminationGracePeriodSeconds: 9 + terminationGracePeriodSeconds: 6 dnsConfig: searches: - searches @@ -161362,17 +171080,17 @@ components: appArmorProfile: localhostProfile: localhostProfile type: type - fsGroup: 1 + fsGroup: 4 fsGroupChangePolicy: fsGroupChangePolicy seLinuxChangePolicy: seLinuxChangePolicy - runAsGroup: 4 + runAsGroup: 5 runAsNonRoot: true sysctls: - name: name value: value - name: name value: value - runAsUser: 5 + runAsUser: 9 seccompProfile: localhostProfile: localhostProfile type: type @@ -161392,12 +171110,12 @@ components: runtimeClassName: runtimeClassName tolerations: - effect: effect - tolerationSeconds: 6 + tolerationSeconds: 8 value: value key: key operator: operator - effect: effect - tolerationSeconds: 6 + tolerationSeconds: 8 value: value key: key operator: operator @@ -161419,7 +171137,7 @@ components: topologySpreadConstraints: - nodeTaintsPolicy: nodeTaintsPolicy whenUnsatisfiable: whenUnsatisfiable - maxSkew: 8 + maxSkew: 9 nodeAffinityPolicy: nodeAffinityPolicy labelSelector: matchExpressions: @@ -161435,14 +171153,14 @@ components: operator: operator matchLabels: key: matchLabels - minDomains: 9 + minDomains: 6 topologyKey: topologyKey matchLabelKeys: - matchLabelKeys - matchLabelKeys - nodeTaintsPolicy: nodeTaintsPolicy whenUnsatisfiable: whenUnsatisfiable - maxSkew: 8 + maxSkew: 9 nodeAffinityPolicy: nodeAffinityPolicy labelSelector: matchExpressions: @@ -161458,7 +171176,7 @@ components: operator: operator matchLabels: key: matchLabels - minDomains: 9 + minDomains: 6 topologyKey: topologyKey matchLabelKeys: - matchLabelKeys @@ -161570,19 +171288,22 @@ components: secret: secretName: secretName defaultMode: 7 + defaultUser: 5 optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key projected: sources: - downwardAPI: items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -161591,7 +171312,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -161600,39 +171322,46 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 configMap: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key podCertificate: certificateChainPath: certificateChainPath userAnnotations: key: userAnnotations keyPath: keyPath - maxExpirationSeconds: 3 + maxExpirationSeconds: 8 keyType: keyType + user: 7 credentialBundlePath: credentialBundlePath signerName: signerName secret: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key serviceAccountToken: path: path audience: audience expirationSeconds: 3 + user: 3 clusterTrustBundle: path: path labelSelector: @@ -161651,10 +171380,11 @@ components: key: matchLabels name: name optional: true + user: 4 signerName: signerName - downwardAPI: items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -161663,7 +171393,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -161672,39 +171403,46 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 configMap: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key podCertificate: certificateChainPath: certificateChainPath userAnnotations: key: userAnnotations keyPath: keyPath - maxExpirationSeconds: 3 + maxExpirationSeconds: 8 keyType: keyType + user: 7 credentialBundlePath: credentialBundlePath signerName: signerName secret: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key serviceAccountToken: path: path audience: audience expirationSeconds: 3 + user: 3 clusterTrustBundle: path: path labelSelector: @@ -161723,8 +171461,10 @@ components: key: matchLabels name: name optional: true + user: 4 signerName: signerName defaultMode: 6 + defaultUser: 0 cephfs: path: path secretRef: @@ -161748,6 +171488,7 @@ components: storagePool: storagePool gateway: gateway emptyDir: + mode: 3 sizeLimit: sizeLimit medium: medium glusterfs: @@ -161755,7 +171496,7 @@ components: endpoints: endpoints readOnly: true gcePersistentDisk: - partition: 6 + partition: 0 readOnly: true pdName: pdName fsType: fsType @@ -161779,9 +171520,10 @@ components: readOnly: true fsType: fsType downwardAPI: - defaultMode: 1 + defaultMode: 6 + defaultUser: 5 items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -161790,7 +171532,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -161799,8 +171542,9 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 awsElasticBlockStore: - partition: 6 + partition: 3 volumeID: volumeID readOnly: true fsType: fsType @@ -161810,7 +171554,7 @@ components: iscsi: chapAuthSession: true iscsiInterface: iscsiInterface - lun: 5 + lun: 7 chapAuthDiscovery: true iqn: iqn portals: @@ -161835,15 +171579,18 @@ components: - monitors - monitors configMap: - defaultMode: 3 + defaultMode: 6 name: name + defaultUser: 1 optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key storageos: volumeNamespace: volumeNamespace @@ -161882,7 +171629,7 @@ components: volumePath: volumePath fsType: fsType fc: - lun: 6 + lun: 7 targetWWNs: - targetWWNs - targetWWNs @@ -162000,19 +171747,22 @@ components: secret: secretName: secretName defaultMode: 7 + defaultUser: 5 optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key projected: sources: - downwardAPI: items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -162021,7 +171771,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -162030,39 +171781,46 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 configMap: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key podCertificate: certificateChainPath: certificateChainPath userAnnotations: key: userAnnotations keyPath: keyPath - maxExpirationSeconds: 3 + maxExpirationSeconds: 8 keyType: keyType + user: 7 credentialBundlePath: credentialBundlePath signerName: signerName secret: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key serviceAccountToken: path: path audience: audience expirationSeconds: 3 + user: 3 clusterTrustBundle: path: path labelSelector: @@ -162081,10 +171839,11 @@ components: key: matchLabels name: name optional: true + user: 4 signerName: signerName - downwardAPI: items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -162093,7 +171852,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -162102,39 +171862,46 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 configMap: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key podCertificate: certificateChainPath: certificateChainPath userAnnotations: key: userAnnotations keyPath: keyPath - maxExpirationSeconds: 3 + maxExpirationSeconds: 8 keyType: keyType + user: 7 credentialBundlePath: credentialBundlePath signerName: signerName secret: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key serviceAccountToken: path: path audience: audience expirationSeconds: 3 + user: 3 clusterTrustBundle: path: path labelSelector: @@ -162153,8 +171920,10 @@ components: key: matchLabels name: name optional: true + user: 4 signerName: signerName defaultMode: 6 + defaultUser: 0 cephfs: path: path secretRef: @@ -162178,6 +171947,7 @@ components: storagePool: storagePool gateway: gateway emptyDir: + mode: 3 sizeLimit: sizeLimit medium: medium glusterfs: @@ -162185,7 +171955,7 @@ components: endpoints: endpoints readOnly: true gcePersistentDisk: - partition: 6 + partition: 0 readOnly: true pdName: pdName fsType: fsType @@ -162209,9 +171979,10 @@ components: readOnly: true fsType: fsType downwardAPI: - defaultMode: 1 + defaultMode: 6 + defaultUser: 5 items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -162220,7 +171991,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -162229,8 +172001,9 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 awsElasticBlockStore: - partition: 6 + partition: 3 volumeID: volumeID readOnly: true fsType: fsType @@ -162240,7 +172013,7 @@ components: iscsi: chapAuthSession: true iscsiInterface: iscsiInterface - lun: 5 + lun: 7 chapAuthDiscovery: true iqn: iqn portals: @@ -162265,15 +172038,18 @@ components: - monitors - monitors configMap: - defaultMode: 3 + defaultMode: 6 name: name + defaultUser: 1 optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key storageos: volumeNamespace: volumeNamespace @@ -162312,7 +172088,7 @@ components: volumePath: volumePath fsType: fsType fc: - lun: 6 + lun: 7 targetWWNs: - targetWWNs - targetWWNs @@ -162401,10 +172177,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -162428,6 +172206,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -162435,6 +172216,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -162452,6 +172236,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -162472,6 +172257,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -162496,10 +172282,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -162545,10 +172333,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -162693,10 +172483,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -162720,6 +172512,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -162727,6 +172522,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -162744,6 +172542,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -162764,6 +172563,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -162788,10 +172588,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -162837,10 +172639,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -162920,9 +172724,14 @@ components: tty: true stdinOnce: true serviceAccount: serviceAccount - priority: 7 + priority: 1 restartPolicy: restartPolicy shareProcessNamespace: true + evictionResponders: + - name: name + priority: 7 + - name: name + priority: 7 hostUsers: true resourceClaims: - resourceClaimName: resourceClaimName @@ -162999,10 +172808,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -163026,6 +172837,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -163033,6 +172847,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -163050,6 +172867,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -163070,6 +172888,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -163094,10 +172913,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -163143,10 +172964,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -163290,10 +173113,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -163317,6 +173142,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -163324,6 +173152,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -163341,6 +173172,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -163361,6 +173193,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -163385,10 +173218,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -163434,10 +173269,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -163582,10 +173419,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -163609,6 +173448,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -163616,6 +173458,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -163633,6 +173478,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -163653,6 +173499,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -163677,10 +173524,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -163726,10 +173575,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -163873,10 +173724,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -163900,6 +173753,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -163907,6 +173763,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -163924,6 +173783,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -163944,6 +173804,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -163968,10 +173829,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -164017,10 +173880,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -164633,6 +174498,15 @@ components: allocatedResources: key: null currentVolumeAttributesClassName: currentVolumeAttributesClassName + healthStatus: + healthConditions: + - reason: reason + message: message + status: status + - reason: reason + message: message + status: status + lastTransitionTime: 2000-01-23T04:56:07.000+00:00 allocatedResourceStatuses: key: allocatedResourceStatuses accessModes: @@ -164745,6 +174619,15 @@ components: allocatedResources: key: null currentVolumeAttributesClassName: currentVolumeAttributesClassName + healthStatus: + healthConditions: + - reason: reason + message: message + status: status + - reason: reason + message: message + status: status + lastTransitionTime: 2000-01-23T04:56:07.000+00:00 allocatedResourceStatuses: key: allocatedResourceStatuses accessModes: @@ -164905,7 +174788,7 @@ components: spec: dnsPolicy: dnsPolicy nodeName: nodeName - terminationGracePeriodSeconds: 9 + terminationGracePeriodSeconds: 6 dnsConfig: searches: - searches @@ -164946,17 +174829,17 @@ components: appArmorProfile: localhostProfile: localhostProfile type: type - fsGroup: 1 + fsGroup: 4 fsGroupChangePolicy: fsGroupChangePolicy seLinuxChangePolicy: seLinuxChangePolicy - runAsGroup: 4 + runAsGroup: 5 runAsNonRoot: true sysctls: - name: name value: value - name: name value: value - runAsUser: 5 + runAsUser: 9 seccompProfile: localhostProfile: localhostProfile type: type @@ -164976,12 +174859,12 @@ components: runtimeClassName: runtimeClassName tolerations: - effect: effect - tolerationSeconds: 6 + tolerationSeconds: 8 value: value key: key operator: operator - effect: effect - tolerationSeconds: 6 + tolerationSeconds: 8 value: value key: key operator: operator @@ -165003,7 +174886,7 @@ components: topologySpreadConstraints: - nodeTaintsPolicy: nodeTaintsPolicy whenUnsatisfiable: whenUnsatisfiable - maxSkew: 8 + maxSkew: 9 nodeAffinityPolicy: nodeAffinityPolicy labelSelector: matchExpressions: @@ -165019,14 +174902,14 @@ components: operator: operator matchLabels: key: matchLabels - minDomains: 9 + minDomains: 6 topologyKey: topologyKey matchLabelKeys: - matchLabelKeys - matchLabelKeys - nodeTaintsPolicy: nodeTaintsPolicy whenUnsatisfiable: whenUnsatisfiable - maxSkew: 8 + maxSkew: 9 nodeAffinityPolicy: nodeAffinityPolicy labelSelector: matchExpressions: @@ -165042,7 +174925,7 @@ components: operator: operator matchLabels: key: matchLabels - minDomains: 9 + minDomains: 6 topologyKey: topologyKey matchLabelKeys: - matchLabelKeys @@ -165154,19 +175037,22 @@ components: secret: secretName: secretName defaultMode: 7 + defaultUser: 5 optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key projected: sources: - downwardAPI: items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -165175,7 +175061,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -165184,39 +175071,46 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 configMap: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key podCertificate: certificateChainPath: certificateChainPath userAnnotations: key: userAnnotations keyPath: keyPath - maxExpirationSeconds: 3 + maxExpirationSeconds: 8 keyType: keyType + user: 7 credentialBundlePath: credentialBundlePath signerName: signerName secret: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key serviceAccountToken: path: path audience: audience expirationSeconds: 3 + user: 3 clusterTrustBundle: path: path labelSelector: @@ -165235,10 +175129,11 @@ components: key: matchLabels name: name optional: true + user: 4 signerName: signerName - downwardAPI: items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -165247,7 +175142,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -165256,39 +175152,46 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 configMap: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key podCertificate: certificateChainPath: certificateChainPath userAnnotations: key: userAnnotations keyPath: keyPath - maxExpirationSeconds: 3 + maxExpirationSeconds: 8 keyType: keyType + user: 7 credentialBundlePath: credentialBundlePath signerName: signerName secret: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key serviceAccountToken: path: path audience: audience expirationSeconds: 3 + user: 3 clusterTrustBundle: path: path labelSelector: @@ -165307,8 +175210,10 @@ components: key: matchLabels name: name optional: true + user: 4 signerName: signerName defaultMode: 6 + defaultUser: 0 cephfs: path: path secretRef: @@ -165332,6 +175237,7 @@ components: storagePool: storagePool gateway: gateway emptyDir: + mode: 3 sizeLimit: sizeLimit medium: medium glusterfs: @@ -165339,7 +175245,7 @@ components: endpoints: endpoints readOnly: true gcePersistentDisk: - partition: 6 + partition: 0 readOnly: true pdName: pdName fsType: fsType @@ -165363,9 +175269,10 @@ components: readOnly: true fsType: fsType downwardAPI: - defaultMode: 1 + defaultMode: 6 + defaultUser: 5 items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -165374,7 +175281,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -165383,8 +175291,9 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 awsElasticBlockStore: - partition: 6 + partition: 3 volumeID: volumeID readOnly: true fsType: fsType @@ -165394,7 +175303,7 @@ components: iscsi: chapAuthSession: true iscsiInterface: iscsiInterface - lun: 5 + lun: 7 chapAuthDiscovery: true iqn: iqn portals: @@ -165419,15 +175328,18 @@ components: - monitors - monitors configMap: - defaultMode: 3 + defaultMode: 6 name: name + defaultUser: 1 optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key storageos: volumeNamespace: volumeNamespace @@ -165466,7 +175378,7 @@ components: volumePath: volumePath fsType: fsType fc: - lun: 6 + lun: 7 targetWWNs: - targetWWNs - targetWWNs @@ -165584,19 +175496,22 @@ components: secret: secretName: secretName defaultMode: 7 + defaultUser: 5 optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key projected: sources: - downwardAPI: items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -165605,7 +175520,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -165614,39 +175530,46 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 configMap: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key podCertificate: certificateChainPath: certificateChainPath userAnnotations: key: userAnnotations keyPath: keyPath - maxExpirationSeconds: 3 + maxExpirationSeconds: 8 keyType: keyType + user: 7 credentialBundlePath: credentialBundlePath signerName: signerName secret: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key serviceAccountToken: path: path audience: audience expirationSeconds: 3 + user: 3 clusterTrustBundle: path: path labelSelector: @@ -165665,10 +175588,11 @@ components: key: matchLabels name: name optional: true + user: 4 signerName: signerName - downwardAPI: items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -165677,7 +175601,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -165686,39 +175611,46 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 configMap: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key podCertificate: certificateChainPath: certificateChainPath userAnnotations: key: userAnnotations keyPath: keyPath - maxExpirationSeconds: 3 + maxExpirationSeconds: 8 keyType: keyType + user: 7 credentialBundlePath: credentialBundlePath signerName: signerName secret: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key serviceAccountToken: path: path audience: audience expirationSeconds: 3 + user: 3 clusterTrustBundle: path: path labelSelector: @@ -165737,8 +175669,10 @@ components: key: matchLabels name: name optional: true + user: 4 signerName: signerName defaultMode: 6 + defaultUser: 0 cephfs: path: path secretRef: @@ -165762,6 +175696,7 @@ components: storagePool: storagePool gateway: gateway emptyDir: + mode: 3 sizeLimit: sizeLimit medium: medium glusterfs: @@ -165769,7 +175704,7 @@ components: endpoints: endpoints readOnly: true gcePersistentDisk: - partition: 6 + partition: 0 readOnly: true pdName: pdName fsType: fsType @@ -165793,9 +175728,10 @@ components: readOnly: true fsType: fsType downwardAPI: - defaultMode: 1 + defaultMode: 6 + defaultUser: 5 items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -165804,7 +175740,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -165813,8 +175750,9 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 awsElasticBlockStore: - partition: 6 + partition: 3 volumeID: volumeID readOnly: true fsType: fsType @@ -165824,7 +175762,7 @@ components: iscsi: chapAuthSession: true iscsiInterface: iscsiInterface - lun: 5 + lun: 7 chapAuthDiscovery: true iqn: iqn portals: @@ -165849,15 +175787,18 @@ components: - monitors - monitors configMap: - defaultMode: 3 + defaultMode: 6 name: name + defaultUser: 1 optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key storageos: volumeNamespace: volumeNamespace @@ -165896,7 +175837,7 @@ components: volumePath: volumePath fsType: fsType fc: - lun: 6 + lun: 7 targetWWNs: - targetWWNs - targetWWNs @@ -165985,10 +175926,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -166012,6 +175955,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -166019,6 +175965,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -166036,6 +175985,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -166056,6 +176006,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -166080,10 +176031,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -166129,10 +176082,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -166277,10 +176232,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -166304,6 +176261,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -166311,6 +176271,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -166328,6 +176291,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -166348,6 +176312,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -166372,10 +176337,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -166421,10 +176388,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -166504,9 +176473,14 @@ components: tty: true stdinOnce: true serviceAccount: serviceAccount - priority: 7 + priority: 1 restartPolicy: restartPolicy shareProcessNamespace: true + evictionResponders: + - name: name + priority: 7 + - name: name + priority: 7 hostUsers: true resourceClaims: - resourceClaimName: resourceClaimName @@ -166583,10 +176557,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -166610,6 +176586,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -166617,6 +176596,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -166634,6 +176616,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -166654,6 +176637,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -166678,10 +176662,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -166727,10 +176713,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -166874,10 +176862,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -166901,6 +176891,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -166908,6 +176901,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -166925,6 +176921,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -166945,6 +176942,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -166969,10 +176967,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -167018,10 +177018,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -167166,10 +177168,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -167193,6 +177197,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -167200,6 +177207,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -167217,6 +177227,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -167237,6 +177248,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -167261,10 +177273,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -167310,10 +177324,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -167457,10 +177473,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -167484,6 +177502,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -167491,6 +177512,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -167508,6 +177532,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -167528,6 +177553,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -167552,10 +177578,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -167601,10 +177629,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -168217,6 +178247,15 @@ components: allocatedResources: key: null currentVolumeAttributesClassName: currentVolumeAttributesClassName + healthStatus: + healthConditions: + - reason: reason + message: message + status: status + - reason: reason + message: message + status: status + lastTransitionTime: 2000-01-23T04:56:07.000+00:00 allocatedResourceStatuses: key: allocatedResourceStatuses accessModes: @@ -168329,6 +178368,15 @@ components: allocatedResources: key: null currentVolumeAttributesClassName: currentVolumeAttributesClassName + healthStatus: + healthConditions: + - reason: reason + message: message + status: status + - reason: reason + message: message + status: status + lastTransitionTime: 2000-01-23T04:56:07.000+00:00 allocatedResourceStatuses: key: allocatedResourceStatuses accessModes: @@ -168529,7 +178577,8 @@ components: description: apiVersion is API version of the referent. type: string kind: - description: kind of the referent. Valid kinds are 'Pod' and 'Secret'. + description: "kind of the referent. Valid kinds are 'Pod', 'Secret', 'Node',\ + \ 'ValidatingWebhookConfiguration', and 'MutatingWebhookConfiguration'." type: string name: description: name of the referent. @@ -168702,6 +178751,10 @@ components: kind: kind name: name expirationSeconds: 0 + attestations: + key: + - attestations + - attestations audiences: - audiences - audiences @@ -168742,10 +178795,25 @@ components: kind: kind name: name expirationSeconds: 0 + attestations: + key: + - attestations + - attestations audiences: - audiences - audiences properties: + attestations: + additionalProperties: + items: + type: string + type: array + description: "attestations is a map of well-known keys to string-slice values.\ + \ The values for each key have a specific semantic meaning, which is documented\ + \ on the key definition. Requesters of tokens may ask the Kubernetes API\ + \ Server to attest to certain claims. The API Server may perform authorization\ + \ checks depending on the key of this map." + type: object audiences: description: "audiences are the intendend audiences of the token. A recipient\ \ of a token must identify themself with an identifier in the list of\ @@ -170511,7 +180579,7 @@ components: container: container current: averageValue: averageValue - averageUtilization: 7 + averageUtilization: 9 value: value name: name properties: @@ -170591,7 +180659,7 @@ components: example: current: averageValue: averageValue - averageUtilization: 7 + averageUtilization: 9 value: value metric: name: name @@ -170651,7 +180719,7 @@ components: Scaling Policy Rules are applied after calculating DesiredReplicas from metrics for the HPA. They can limit the scaling velocity by specifying scaling policies. They can prevent flapping by specifying the stabilization window, so that the number of replicas is not set instantly, instead, the safest value from the stabilization window is chosen. - The tolerance is applied to the metric values and prevents scaling too eagerly for small metric variations. (Note that setting a tolerance requires the beta HPAConfigurableTolerance feature gate to be enabled.) + The tolerance is applied to the metric values and prevents scaling too eagerly for small metric variations. example: selectPolicy: selectPolicy stabilizationWindowSeconds: 1 @@ -170983,26 +181051,28 @@ components: kind: kind name: name status: - desiredReplicas: 3 - currentReplicas: 9 + desiredReplicas: 2 + currentReplicas: 3 conditions: - reason: reason lastTransitionTime: 2000-01-23T04:56:07.000+00:00 message: message type: type + observedGeneration: 7 status: status - reason: reason lastTransitionTime: 2000-01-23T04:56:07.000+00:00 message: message type: type + observedGeneration: 7 status: status lastScaleTime: 2000-01-23T04:56:07.000+00:00 - observedGeneration: 2 + observedGeneration: 4 currentMetrics: - external: current: averageValue: averageValue - averageUtilization: 7 + averageUtilization: 9 value: value metric: name: name @@ -171023,20 +181093,20 @@ components: resource: current: averageValue: averageValue - averageUtilization: 7 + averageUtilization: 9 value: value name: name containerResource: container: container current: averageValue: averageValue - averageUtilization: 7 + averageUtilization: 9 value: value name: name pods: current: averageValue: averageValue - averageUtilization: 7 + averageUtilization: 9 value: value metric: name: name @@ -171062,7 +181132,7 @@ components: name: name current: averageValue: averageValue - averageUtilization: 7 + averageUtilization: 9 value: value metric: name: name @@ -171083,7 +181153,7 @@ components: - external: current: averageValue: averageValue - averageUtilization: 7 + averageUtilization: 9 value: value metric: name: name @@ -171104,20 +181174,20 @@ components: resource: current: averageValue: averageValue - averageUtilization: 7 + averageUtilization: 9 value: value name: name containerResource: container: container current: averageValue: averageValue - averageUtilization: 7 + averageUtilization: 9 value: value name: name pods: current: averageValue: averageValue - averageUtilization: 7 + averageUtilization: 9 value: value metric: name: name @@ -171143,7 +181213,7 @@ components: name: name current: averageValue: averageValue - averageUtilization: 7 + averageUtilization: 9 value: value metric: name: name @@ -171228,6 +181298,7 @@ components: lastTransitionTime: 2000-01-23T04:56:07.000+00:00 message: message type: type + observedGeneration: 7 status: status properties: lastTransitionTime: @@ -171239,6 +181310,14 @@ components: description: message is a human-readable explanation containing details about the transition type: string + observedGeneration: + description: "observedGeneration represents the .metadata.generation that\ + \ the condition was set based upon. For instance, if .metadata.generation\ + \ is currently 12, but the .status.conditions[x].observedGeneration is\ + \ 9, the condition is out of date with respect to the current state of\ + \ the instance." + format: int64 + type: integer reason: description: reason is the reason for the condition's last transition. type: string @@ -171518,26 +181597,28 @@ components: kind: kind name: name status: - desiredReplicas: 3 - currentReplicas: 9 + desiredReplicas: 2 + currentReplicas: 3 conditions: - reason: reason lastTransitionTime: 2000-01-23T04:56:07.000+00:00 message: message type: type + observedGeneration: 7 status: status - reason: reason lastTransitionTime: 2000-01-23T04:56:07.000+00:00 message: message type: type + observedGeneration: 7 status: status lastScaleTime: 2000-01-23T04:56:07.000+00:00 - observedGeneration: 2 + observedGeneration: 4 currentMetrics: - external: current: averageValue: averageValue - averageUtilization: 7 + averageUtilization: 9 value: value metric: name: name @@ -171558,20 +181639,20 @@ components: resource: current: averageValue: averageValue - averageUtilization: 7 + averageUtilization: 9 value: value name: name containerResource: container: container current: averageValue: averageValue - averageUtilization: 7 + averageUtilization: 9 value: value name: name pods: current: averageValue: averageValue - averageUtilization: 7 + averageUtilization: 9 value: value metric: name: name @@ -171597,7 +181678,7 @@ components: name: name current: averageValue: averageValue - averageUtilization: 7 + averageUtilization: 9 value: value metric: name: name @@ -171618,7 +181699,7 @@ components: - external: current: averageValue: averageValue - averageUtilization: 7 + averageUtilization: 9 value: value metric: name: name @@ -171639,20 +181720,20 @@ components: resource: current: averageValue: averageValue - averageUtilization: 7 + averageUtilization: 9 value: value name: name containerResource: container: container current: averageValue: averageValue - averageUtilization: 7 + averageUtilization: 9 value: value name: name pods: current: averageValue: averageValue - averageUtilization: 7 + averageUtilization: 9 value: value metric: name: name @@ -171678,7 +181759,7 @@ components: name: name current: averageValue: averageValue - averageUtilization: 7 + averageUtilization: 9 value: value metric: name: name @@ -171948,26 +182029,28 @@ components: kind: kind name: name status: - desiredReplicas: 3 - currentReplicas: 9 + desiredReplicas: 2 + currentReplicas: 3 conditions: - reason: reason lastTransitionTime: 2000-01-23T04:56:07.000+00:00 message: message type: type + observedGeneration: 7 status: status - reason: reason lastTransitionTime: 2000-01-23T04:56:07.000+00:00 message: message type: type + observedGeneration: 7 status: status lastScaleTime: 2000-01-23T04:56:07.000+00:00 - observedGeneration: 2 + observedGeneration: 4 currentMetrics: - external: current: averageValue: averageValue - averageUtilization: 7 + averageUtilization: 9 value: value metric: name: name @@ -171988,20 +182071,20 @@ components: resource: current: averageValue: averageValue - averageUtilization: 7 + averageUtilization: 9 value: value name: name containerResource: container: container current: averageValue: averageValue - averageUtilization: 7 + averageUtilization: 9 value: value name: name pods: current: averageValue: averageValue - averageUtilization: 7 + averageUtilization: 9 value: value metric: name: name @@ -172027,7 +182110,7 @@ components: name: name current: averageValue: averageValue - averageUtilization: 7 + averageUtilization: 9 value: value metric: name: name @@ -172048,7 +182131,7 @@ components: - external: current: averageValue: averageValue - averageUtilization: 7 + averageUtilization: 9 value: value metric: name: name @@ -172069,20 +182152,20 @@ components: resource: current: averageValue: averageValue - averageUtilization: 7 + averageUtilization: 9 value: value name: name containerResource: container: container current: averageValue: averageValue - averageUtilization: 7 + averageUtilization: 9 value: value name: name pods: current: averageValue: averageValue - averageUtilization: 7 + averageUtilization: 9 value: value metric: name: name @@ -172108,7 +182191,7 @@ components: name: name current: averageValue: averageValue - averageUtilization: 7 + averageUtilization: 9 value: value metric: name: name @@ -172398,26 +182481,28 @@ components: description: HorizontalPodAutoscalerStatus describes the current status of a horizontal pod autoscaler. example: - desiredReplicas: 3 - currentReplicas: 9 + desiredReplicas: 2 + currentReplicas: 3 conditions: - reason: reason lastTransitionTime: 2000-01-23T04:56:07.000+00:00 message: message type: type + observedGeneration: 7 status: status - reason: reason lastTransitionTime: 2000-01-23T04:56:07.000+00:00 message: message type: type + observedGeneration: 7 status: status lastScaleTime: 2000-01-23T04:56:07.000+00:00 - observedGeneration: 2 + observedGeneration: 4 currentMetrics: - external: current: averageValue: averageValue - averageUtilization: 7 + averageUtilization: 9 value: value metric: name: name @@ -172438,20 +182523,20 @@ components: resource: current: averageValue: averageValue - averageUtilization: 7 + averageUtilization: 9 value: value name: name containerResource: container: container current: averageValue: averageValue - averageUtilization: 7 + averageUtilization: 9 value: value name: name pods: current: averageValue: averageValue - averageUtilization: 7 + averageUtilization: 9 value: value metric: name: name @@ -172477,7 +182562,7 @@ components: name: name current: averageValue: averageValue - averageUtilization: 7 + averageUtilization: 9 value: value metric: name: name @@ -172498,7 +182583,7 @@ components: - external: current: averageValue: averageValue - averageUtilization: 7 + averageUtilization: 9 value: value metric: name: name @@ -172519,20 +182604,20 @@ components: resource: current: averageValue: averageValue - averageUtilization: 7 + averageUtilization: 9 value: value name: name containerResource: container: container current: averageValue: averageValue - averageUtilization: 7 + averageUtilization: 9 value: value name: name pods: current: averageValue: averageValue - averageUtilization: 7 + averageUtilization: 9 value: value metric: name: name @@ -172558,7 +182643,7 @@ components: name: name current: averageValue: averageValue - averageUtilization: 7 + averageUtilization: 9 value: value metric: name: name @@ -172763,7 +182848,7 @@ components: external: current: averageValue: averageValue - averageUtilization: 7 + averageUtilization: 9 value: value metric: name: name @@ -172784,20 +182869,20 @@ components: resource: current: averageValue: averageValue - averageUtilization: 7 + averageUtilization: 9 value: value name: name containerResource: container: container current: averageValue: averageValue - averageUtilization: 7 + averageUtilization: 9 value: value name: name pods: current: averageValue: averageValue - averageUtilization: 7 + averageUtilization: 9 value: value metric: name: name @@ -172823,7 +182908,7 @@ components: name: name current: averageValue: averageValue - averageUtilization: 7 + averageUtilization: 9 value: value metric: name: name @@ -172963,12 +183048,12 @@ components: description: MetricValueStatus holds the current value for a metric example: averageValue: averageValue - averageUtilization: 7 + averageUtilization: 9 value: value properties: averageUtilization: - description: "currentAverageUtilization is the current value of the average\ - \ of the resource metric across all relevant pods, represented as a percentage\ + description: "averageUtilization is the current value of the average of\ + \ the resource metric across all relevant pods, represented as a percentage\ \ of the requested value of the resource for the pods." format: int32 type: integer @@ -173100,7 +183185,7 @@ components: name: name current: averageValue: averageValue - averageUtilization: 7 + averageUtilization: 9 value: value metric: name: name @@ -173172,7 +183257,7 @@ components: example: current: averageValue: averageValue - averageUtilization: 7 + averageUtilization: 9 value: value metric: name: name @@ -173233,7 +183318,7 @@ components: example: current: averageValue: averageValue - averageUtilization: 7 + averageUtilization: 9 value: value name: name properties: @@ -173399,7 +183484,7 @@ components: spec: dnsPolicy: dnsPolicy nodeName: nodeName - terminationGracePeriodSeconds: 9 + terminationGracePeriodSeconds: 6 dnsConfig: searches: - searches @@ -173440,17 +183525,17 @@ components: appArmorProfile: localhostProfile: localhostProfile type: type - fsGroup: 1 + fsGroup: 4 fsGroupChangePolicy: fsGroupChangePolicy seLinuxChangePolicy: seLinuxChangePolicy - runAsGroup: 4 + runAsGroup: 5 runAsNonRoot: true sysctls: - name: name value: value - name: name value: value - runAsUser: 5 + runAsUser: 9 seccompProfile: localhostProfile: localhostProfile type: type @@ -173470,12 +183555,12 @@ components: runtimeClassName: runtimeClassName tolerations: - effect: effect - tolerationSeconds: 6 + tolerationSeconds: 8 value: value key: key operator: operator - effect: effect - tolerationSeconds: 6 + tolerationSeconds: 8 value: value key: key operator: operator @@ -173497,7 +183582,7 @@ components: topologySpreadConstraints: - nodeTaintsPolicy: nodeTaintsPolicy whenUnsatisfiable: whenUnsatisfiable - maxSkew: 8 + maxSkew: 9 nodeAffinityPolicy: nodeAffinityPolicy labelSelector: matchExpressions: @@ -173513,14 +183598,14 @@ components: operator: operator matchLabels: key: matchLabels - minDomains: 9 + minDomains: 6 topologyKey: topologyKey matchLabelKeys: - matchLabelKeys - matchLabelKeys - nodeTaintsPolicy: nodeTaintsPolicy whenUnsatisfiable: whenUnsatisfiable - maxSkew: 8 + maxSkew: 9 nodeAffinityPolicy: nodeAffinityPolicy labelSelector: matchExpressions: @@ -173536,7 +183621,7 @@ components: operator: operator matchLabels: key: matchLabels - minDomains: 9 + minDomains: 6 topologyKey: topologyKey matchLabelKeys: - matchLabelKeys @@ -173648,19 +183733,22 @@ components: secret: secretName: secretName defaultMode: 7 + defaultUser: 5 optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key projected: sources: - downwardAPI: items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -173669,7 +183757,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -173678,39 +183767,46 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 configMap: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key podCertificate: certificateChainPath: certificateChainPath userAnnotations: key: userAnnotations keyPath: keyPath - maxExpirationSeconds: 3 + maxExpirationSeconds: 8 keyType: keyType + user: 7 credentialBundlePath: credentialBundlePath signerName: signerName secret: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key serviceAccountToken: path: path audience: audience expirationSeconds: 3 + user: 3 clusterTrustBundle: path: path labelSelector: @@ -173729,10 +183825,11 @@ components: key: matchLabels name: name optional: true + user: 4 signerName: signerName - downwardAPI: items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -173741,7 +183838,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -173750,39 +183848,46 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 configMap: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key podCertificate: certificateChainPath: certificateChainPath userAnnotations: key: userAnnotations keyPath: keyPath - maxExpirationSeconds: 3 + maxExpirationSeconds: 8 keyType: keyType + user: 7 credentialBundlePath: credentialBundlePath signerName: signerName secret: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key serviceAccountToken: path: path audience: audience expirationSeconds: 3 + user: 3 clusterTrustBundle: path: path labelSelector: @@ -173801,8 +183906,10 @@ components: key: matchLabels name: name optional: true + user: 4 signerName: signerName defaultMode: 6 + defaultUser: 0 cephfs: path: path secretRef: @@ -173826,6 +183933,7 @@ components: storagePool: storagePool gateway: gateway emptyDir: + mode: 3 sizeLimit: sizeLimit medium: medium glusterfs: @@ -173833,7 +183941,7 @@ components: endpoints: endpoints readOnly: true gcePersistentDisk: - partition: 6 + partition: 0 readOnly: true pdName: pdName fsType: fsType @@ -173857,9 +183965,10 @@ components: readOnly: true fsType: fsType downwardAPI: - defaultMode: 1 + defaultMode: 6 + defaultUser: 5 items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -173868,7 +183977,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -173877,8 +183987,9 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 awsElasticBlockStore: - partition: 6 + partition: 3 volumeID: volumeID readOnly: true fsType: fsType @@ -173888,7 +183999,7 @@ components: iscsi: chapAuthSession: true iscsiInterface: iscsiInterface - lun: 5 + lun: 7 chapAuthDiscovery: true iqn: iqn portals: @@ -173913,15 +184024,18 @@ components: - monitors - monitors configMap: - defaultMode: 3 + defaultMode: 6 name: name + defaultUser: 1 optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key storageos: volumeNamespace: volumeNamespace @@ -173960,7 +184074,7 @@ components: volumePath: volumePath fsType: fsType fc: - lun: 6 + lun: 7 targetWWNs: - targetWWNs - targetWWNs @@ -174078,19 +184192,22 @@ components: secret: secretName: secretName defaultMode: 7 + defaultUser: 5 optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key projected: sources: - downwardAPI: items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -174099,7 +184216,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -174108,39 +184226,46 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 configMap: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key podCertificate: certificateChainPath: certificateChainPath userAnnotations: key: userAnnotations keyPath: keyPath - maxExpirationSeconds: 3 + maxExpirationSeconds: 8 keyType: keyType + user: 7 credentialBundlePath: credentialBundlePath signerName: signerName secret: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key serviceAccountToken: path: path audience: audience expirationSeconds: 3 + user: 3 clusterTrustBundle: path: path labelSelector: @@ -174159,10 +184284,11 @@ components: key: matchLabels name: name optional: true + user: 4 signerName: signerName - downwardAPI: items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -174171,7 +184297,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -174180,39 +184307,46 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 configMap: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key podCertificate: certificateChainPath: certificateChainPath userAnnotations: key: userAnnotations keyPath: keyPath - maxExpirationSeconds: 3 + maxExpirationSeconds: 8 keyType: keyType + user: 7 credentialBundlePath: credentialBundlePath signerName: signerName secret: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key serviceAccountToken: path: path audience: audience expirationSeconds: 3 + user: 3 clusterTrustBundle: path: path labelSelector: @@ -174231,8 +184365,10 @@ components: key: matchLabels name: name optional: true + user: 4 signerName: signerName defaultMode: 6 + defaultUser: 0 cephfs: path: path secretRef: @@ -174256,6 +184392,7 @@ components: storagePool: storagePool gateway: gateway emptyDir: + mode: 3 sizeLimit: sizeLimit medium: medium glusterfs: @@ -174263,7 +184400,7 @@ components: endpoints: endpoints readOnly: true gcePersistentDisk: - partition: 6 + partition: 0 readOnly: true pdName: pdName fsType: fsType @@ -174287,9 +184424,10 @@ components: readOnly: true fsType: fsType downwardAPI: - defaultMode: 1 + defaultMode: 6 + defaultUser: 5 items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -174298,7 +184436,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -174307,8 +184446,9 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 awsElasticBlockStore: - partition: 6 + partition: 3 volumeID: volumeID readOnly: true fsType: fsType @@ -174318,7 +184458,7 @@ components: iscsi: chapAuthSession: true iscsiInterface: iscsiInterface - lun: 5 + lun: 7 chapAuthDiscovery: true iqn: iqn portals: @@ -174343,15 +184483,18 @@ components: - monitors - monitors configMap: - defaultMode: 3 + defaultMode: 6 name: name + defaultUser: 1 optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key storageos: volumeNamespace: volumeNamespace @@ -174390,7 +184533,7 @@ components: volumePath: volumePath fsType: fsType fc: - lun: 6 + lun: 7 targetWWNs: - targetWWNs - targetWWNs @@ -174479,10 +184622,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -174506,6 +184651,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -174513,6 +184661,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -174530,6 +184681,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -174550,6 +184702,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -174574,10 +184727,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -174623,10 +184778,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -174771,10 +184928,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -174798,6 +184957,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -174805,6 +184967,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -174822,6 +184987,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -174842,6 +185008,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -174866,10 +185033,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -174915,10 +185084,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -174998,9 +185169,14 @@ components: tty: true stdinOnce: true serviceAccount: serviceAccount - priority: 7 + priority: 1 restartPolicy: restartPolicy shareProcessNamespace: true + evictionResponders: + - name: name + priority: 7 + - name: name + priority: 7 hostUsers: true resourceClaims: - resourceClaimName: resourceClaimName @@ -175077,10 +185253,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -175104,6 +185282,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -175111,6 +185292,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -175128,6 +185312,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -175148,6 +185333,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -175172,10 +185358,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -175221,10 +185409,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -175368,10 +185558,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -175395,6 +185587,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -175402,6 +185597,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -175419,6 +185617,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -175439,6 +185638,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -175463,10 +185663,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -175512,10 +185714,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -175660,10 +185864,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -175687,6 +185893,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -175694,6 +185903,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -175711,6 +185923,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -175731,6 +185944,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -175755,10 +185969,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -175804,10 +186020,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -175951,10 +186169,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -175978,6 +186198,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -175985,6 +186208,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -176002,6 +186228,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -176022,6 +186249,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -176046,10 +186274,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -176095,10 +186325,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -176624,9 +186856,28 @@ components: status: status - type: type status: status - ttlSecondsAfterFinished: 2 + ttlSecondsAfterFinished: 4 podReplacementPolicy: podReplacementPolicy managedBy: managedBy + scheduling: + resourceClaims: + - resourceClaimName: resourceClaimName + name: name + resourceClaimTemplateName: resourceClaimTemplateName + - resourceClaimName: resourceClaimName + name: name + resourceClaimTemplateName: resourceClaimTemplateName + schedulingConstraints: + topology: + - key: key + - key: key + disruptionMode: + all: "{}" + single: "{}" + schedulingPolicy: + gang: + minCount: 3 + basic: "{}" selector: matchExpressions: - values: @@ -176645,15 +186896,15 @@ components: activeDeadlineSeconds: 6 successPolicy: rules: - - succeededCount: 3 + - succeededCount: 2 succeededIndexes: succeededIndexes - - succeededCount: 3 + - succeededCount: 2 succeededIndexes: succeededIndexes - startingDeadlineSeconds: 4 + startingDeadlineSeconds: 7 concurrencyPolicy: concurrencyPolicy timeZone: timeZone failedJobsHistoryLimit: 0 - successfulJobsHistoryLimit: 7 + successfulJobsHistoryLimit: 1 status: lastScheduleTime: 2000-01-23T04:56:07.000+00:00 active: @@ -176861,7 +187112,7 @@ components: spec: dnsPolicy: dnsPolicy nodeName: nodeName - terminationGracePeriodSeconds: 9 + terminationGracePeriodSeconds: 6 dnsConfig: searches: - searches @@ -176902,17 +187153,17 @@ components: appArmorProfile: localhostProfile: localhostProfile type: type - fsGroup: 1 + fsGroup: 4 fsGroupChangePolicy: fsGroupChangePolicy seLinuxChangePolicy: seLinuxChangePolicy - runAsGroup: 4 + runAsGroup: 5 runAsNonRoot: true sysctls: - name: name value: value - name: name value: value - runAsUser: 5 + runAsUser: 9 seccompProfile: localhostProfile: localhostProfile type: type @@ -176932,12 +187183,12 @@ components: runtimeClassName: runtimeClassName tolerations: - effect: effect - tolerationSeconds: 6 + tolerationSeconds: 8 value: value key: key operator: operator - effect: effect - tolerationSeconds: 6 + tolerationSeconds: 8 value: value key: key operator: operator @@ -176959,7 +187210,7 @@ components: topologySpreadConstraints: - nodeTaintsPolicy: nodeTaintsPolicy whenUnsatisfiable: whenUnsatisfiable - maxSkew: 8 + maxSkew: 9 nodeAffinityPolicy: nodeAffinityPolicy labelSelector: matchExpressions: @@ -176975,14 +187226,14 @@ components: operator: operator matchLabels: key: matchLabels - minDomains: 9 + minDomains: 6 topologyKey: topologyKey matchLabelKeys: - matchLabelKeys - matchLabelKeys - nodeTaintsPolicy: nodeTaintsPolicy whenUnsatisfiable: whenUnsatisfiable - maxSkew: 8 + maxSkew: 9 nodeAffinityPolicy: nodeAffinityPolicy labelSelector: matchExpressions: @@ -176998,7 +187249,7 @@ components: operator: operator matchLabels: key: matchLabels - minDomains: 9 + minDomains: 6 topologyKey: topologyKey matchLabelKeys: - matchLabelKeys @@ -177110,19 +187361,22 @@ components: secret: secretName: secretName defaultMode: 7 + defaultUser: 5 optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key projected: sources: - downwardAPI: items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -177131,7 +187385,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -177140,39 +187395,46 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 configMap: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key podCertificate: certificateChainPath: certificateChainPath userAnnotations: key: userAnnotations keyPath: keyPath - maxExpirationSeconds: 3 + maxExpirationSeconds: 8 keyType: keyType + user: 7 credentialBundlePath: credentialBundlePath signerName: signerName secret: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key serviceAccountToken: path: path audience: audience expirationSeconds: 3 + user: 3 clusterTrustBundle: path: path labelSelector: @@ -177191,10 +187453,11 @@ components: key: matchLabels name: name optional: true + user: 4 signerName: signerName - downwardAPI: items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -177203,7 +187466,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -177212,39 +187476,46 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 configMap: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key podCertificate: certificateChainPath: certificateChainPath userAnnotations: key: userAnnotations keyPath: keyPath - maxExpirationSeconds: 3 + maxExpirationSeconds: 8 keyType: keyType + user: 7 credentialBundlePath: credentialBundlePath signerName: signerName secret: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key serviceAccountToken: path: path audience: audience expirationSeconds: 3 + user: 3 clusterTrustBundle: path: path labelSelector: @@ -177263,8 +187534,10 @@ components: key: matchLabels name: name optional: true + user: 4 signerName: signerName defaultMode: 6 + defaultUser: 0 cephfs: path: path secretRef: @@ -177288,6 +187561,7 @@ components: storagePool: storagePool gateway: gateway emptyDir: + mode: 3 sizeLimit: sizeLimit medium: medium glusterfs: @@ -177295,7 +187569,7 @@ components: endpoints: endpoints readOnly: true gcePersistentDisk: - partition: 6 + partition: 0 readOnly: true pdName: pdName fsType: fsType @@ -177319,9 +187593,10 @@ components: readOnly: true fsType: fsType downwardAPI: - defaultMode: 1 + defaultMode: 6 + defaultUser: 5 items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -177330,7 +187605,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -177339,8 +187615,9 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 awsElasticBlockStore: - partition: 6 + partition: 3 volumeID: volumeID readOnly: true fsType: fsType @@ -177350,7 +187627,7 @@ components: iscsi: chapAuthSession: true iscsiInterface: iscsiInterface - lun: 5 + lun: 7 chapAuthDiscovery: true iqn: iqn portals: @@ -177375,15 +187652,18 @@ components: - monitors - monitors configMap: - defaultMode: 3 + defaultMode: 6 name: name + defaultUser: 1 optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key storageos: volumeNamespace: volumeNamespace @@ -177422,7 +187702,7 @@ components: volumePath: volumePath fsType: fsType fc: - lun: 6 + lun: 7 targetWWNs: - targetWWNs - targetWWNs @@ -177540,19 +187820,22 @@ components: secret: secretName: secretName defaultMode: 7 + defaultUser: 5 optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key projected: sources: - downwardAPI: items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -177561,7 +187844,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -177570,39 +187854,46 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 configMap: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key podCertificate: certificateChainPath: certificateChainPath userAnnotations: key: userAnnotations keyPath: keyPath - maxExpirationSeconds: 3 + maxExpirationSeconds: 8 keyType: keyType + user: 7 credentialBundlePath: credentialBundlePath signerName: signerName secret: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key serviceAccountToken: path: path audience: audience expirationSeconds: 3 + user: 3 clusterTrustBundle: path: path labelSelector: @@ -177621,10 +187912,11 @@ components: key: matchLabels name: name optional: true + user: 4 signerName: signerName - downwardAPI: items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -177633,7 +187925,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -177642,39 +187935,46 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 configMap: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key podCertificate: certificateChainPath: certificateChainPath userAnnotations: key: userAnnotations keyPath: keyPath - maxExpirationSeconds: 3 + maxExpirationSeconds: 8 keyType: keyType + user: 7 credentialBundlePath: credentialBundlePath signerName: signerName secret: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key serviceAccountToken: path: path audience: audience expirationSeconds: 3 + user: 3 clusterTrustBundle: path: path labelSelector: @@ -177693,8 +187993,10 @@ components: key: matchLabels name: name optional: true + user: 4 signerName: signerName defaultMode: 6 + defaultUser: 0 cephfs: path: path secretRef: @@ -177718,6 +188020,7 @@ components: storagePool: storagePool gateway: gateway emptyDir: + mode: 3 sizeLimit: sizeLimit medium: medium glusterfs: @@ -177725,7 +188028,7 @@ components: endpoints: endpoints readOnly: true gcePersistentDisk: - partition: 6 + partition: 0 readOnly: true pdName: pdName fsType: fsType @@ -177749,9 +188052,10 @@ components: readOnly: true fsType: fsType downwardAPI: - defaultMode: 1 + defaultMode: 6 + defaultUser: 5 items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -177760,7 +188064,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -177769,8 +188074,9 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 awsElasticBlockStore: - partition: 6 + partition: 3 volumeID: volumeID readOnly: true fsType: fsType @@ -177780,7 +188086,7 @@ components: iscsi: chapAuthSession: true iscsiInterface: iscsiInterface - lun: 5 + lun: 7 chapAuthDiscovery: true iqn: iqn portals: @@ -177805,15 +188111,18 @@ components: - monitors - monitors configMap: - defaultMode: 3 + defaultMode: 6 name: name + defaultUser: 1 optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key storageos: volumeNamespace: volumeNamespace @@ -177852,7 +188161,7 @@ components: volumePath: volumePath fsType: fsType fc: - lun: 6 + lun: 7 targetWWNs: - targetWWNs - targetWWNs @@ -177941,10 +188250,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -177968,6 +188279,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -177975,6 +188289,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -177992,6 +188309,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -178012,6 +188330,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -178036,10 +188355,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -178085,10 +188406,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -178233,10 +188556,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -178260,6 +188585,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -178267,6 +188595,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -178284,6 +188615,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -178304,6 +188636,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -178328,10 +188661,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -178377,10 +188712,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -178460,9 +188797,14 @@ components: tty: true stdinOnce: true serviceAccount: serviceAccount - priority: 7 + priority: 1 restartPolicy: restartPolicy shareProcessNamespace: true + evictionResponders: + - name: name + priority: 7 + - name: name + priority: 7 hostUsers: true resourceClaims: - resourceClaimName: resourceClaimName @@ -178539,10 +188881,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -178566,6 +188910,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -178573,6 +188920,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -178590,6 +188940,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -178610,6 +188961,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -178634,10 +188986,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -178683,10 +189037,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -178830,10 +189186,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -178857,6 +189215,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -178864,6 +189225,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -178881,6 +189245,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -178901,6 +189266,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -178925,10 +189291,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -178974,10 +189342,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -179122,10 +189492,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -179149,6 +189521,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -179156,6 +189531,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -179173,6 +189551,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -179193,6 +189572,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -179217,10 +189597,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -179266,10 +189648,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -179413,10 +189797,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -179440,6 +189826,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -179447,6 +189836,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -179464,6 +189856,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -179484,6 +189877,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -179508,10 +189902,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -179557,10 +189953,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -180086,9 +190484,28 @@ components: status: status - type: type status: status - ttlSecondsAfterFinished: 2 + ttlSecondsAfterFinished: 4 podReplacementPolicy: podReplacementPolicy managedBy: managedBy + scheduling: + resourceClaims: + - resourceClaimName: resourceClaimName + name: name + resourceClaimTemplateName: resourceClaimTemplateName + - resourceClaimName: resourceClaimName + name: name + resourceClaimTemplateName: resourceClaimTemplateName + schedulingConstraints: + topology: + - key: key + - key: key + disruptionMode: + all: "{}" + single: "{}" + schedulingPolicy: + gang: + minCount: 3 + basic: "{}" selector: matchExpressions: - values: @@ -180107,15 +190524,15 @@ components: activeDeadlineSeconds: 6 successPolicy: rules: - - succeededCount: 3 + - succeededCount: 2 succeededIndexes: succeededIndexes - - succeededCount: 3 + - succeededCount: 2 succeededIndexes: succeededIndexes - startingDeadlineSeconds: 4 + startingDeadlineSeconds: 7 concurrencyPolicy: concurrencyPolicy timeZone: timeZone failedJobsHistoryLimit: 0 - successfulJobsHistoryLimit: 7 + successfulJobsHistoryLimit: 1 status: lastScheduleTime: 2000-01-23T04:56:07.000+00:00 active: @@ -180284,7 +190701,7 @@ components: spec: dnsPolicy: dnsPolicy nodeName: nodeName - terminationGracePeriodSeconds: 9 + terminationGracePeriodSeconds: 6 dnsConfig: searches: - searches @@ -180325,17 +190742,17 @@ components: appArmorProfile: localhostProfile: localhostProfile type: type - fsGroup: 1 + fsGroup: 4 fsGroupChangePolicy: fsGroupChangePolicy seLinuxChangePolicy: seLinuxChangePolicy - runAsGroup: 4 + runAsGroup: 5 runAsNonRoot: true sysctls: - name: name value: value - name: name value: value - runAsUser: 5 + runAsUser: 9 seccompProfile: localhostProfile: localhostProfile type: type @@ -180355,12 +190772,12 @@ components: runtimeClassName: runtimeClassName tolerations: - effect: effect - tolerationSeconds: 6 + tolerationSeconds: 8 value: value key: key operator: operator - effect: effect - tolerationSeconds: 6 + tolerationSeconds: 8 value: value key: key operator: operator @@ -180382,7 +190799,7 @@ components: topologySpreadConstraints: - nodeTaintsPolicy: nodeTaintsPolicy whenUnsatisfiable: whenUnsatisfiable - maxSkew: 8 + maxSkew: 9 nodeAffinityPolicy: nodeAffinityPolicy labelSelector: matchExpressions: @@ -180398,14 +190815,14 @@ components: operator: operator matchLabels: key: matchLabels - minDomains: 9 + minDomains: 6 topologyKey: topologyKey matchLabelKeys: - matchLabelKeys - matchLabelKeys - nodeTaintsPolicy: nodeTaintsPolicy whenUnsatisfiable: whenUnsatisfiable - maxSkew: 8 + maxSkew: 9 nodeAffinityPolicy: nodeAffinityPolicy labelSelector: matchExpressions: @@ -180421,7 +190838,7 @@ components: operator: operator matchLabels: key: matchLabels - minDomains: 9 + minDomains: 6 topologyKey: topologyKey matchLabelKeys: - matchLabelKeys @@ -180533,19 +190950,22 @@ components: secret: secretName: secretName defaultMode: 7 + defaultUser: 5 optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key projected: sources: - downwardAPI: items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -180554,7 +190974,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -180563,39 +190984,46 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 configMap: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key podCertificate: certificateChainPath: certificateChainPath userAnnotations: key: userAnnotations keyPath: keyPath - maxExpirationSeconds: 3 + maxExpirationSeconds: 8 keyType: keyType + user: 7 credentialBundlePath: credentialBundlePath signerName: signerName secret: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key serviceAccountToken: path: path audience: audience expirationSeconds: 3 + user: 3 clusterTrustBundle: path: path labelSelector: @@ -180614,10 +191042,11 @@ components: key: matchLabels name: name optional: true + user: 4 signerName: signerName - downwardAPI: items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -180626,7 +191055,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -180635,39 +191065,46 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 configMap: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key podCertificate: certificateChainPath: certificateChainPath userAnnotations: key: userAnnotations keyPath: keyPath - maxExpirationSeconds: 3 + maxExpirationSeconds: 8 keyType: keyType + user: 7 credentialBundlePath: credentialBundlePath signerName: signerName secret: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key serviceAccountToken: path: path audience: audience expirationSeconds: 3 + user: 3 clusterTrustBundle: path: path labelSelector: @@ -180686,8 +191123,10 @@ components: key: matchLabels name: name optional: true + user: 4 signerName: signerName defaultMode: 6 + defaultUser: 0 cephfs: path: path secretRef: @@ -180711,6 +191150,7 @@ components: storagePool: storagePool gateway: gateway emptyDir: + mode: 3 sizeLimit: sizeLimit medium: medium glusterfs: @@ -180718,7 +191158,7 @@ components: endpoints: endpoints readOnly: true gcePersistentDisk: - partition: 6 + partition: 0 readOnly: true pdName: pdName fsType: fsType @@ -180742,9 +191182,10 @@ components: readOnly: true fsType: fsType downwardAPI: - defaultMode: 1 + defaultMode: 6 + defaultUser: 5 items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -180753,7 +191194,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -180762,8 +191204,9 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 awsElasticBlockStore: - partition: 6 + partition: 3 volumeID: volumeID readOnly: true fsType: fsType @@ -180773,7 +191216,7 @@ components: iscsi: chapAuthSession: true iscsiInterface: iscsiInterface - lun: 5 + lun: 7 chapAuthDiscovery: true iqn: iqn portals: @@ -180798,15 +191241,18 @@ components: - monitors - monitors configMap: - defaultMode: 3 + defaultMode: 6 name: name + defaultUser: 1 optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key storageos: volumeNamespace: volumeNamespace @@ -180845,7 +191291,7 @@ components: volumePath: volumePath fsType: fsType fc: - lun: 6 + lun: 7 targetWWNs: - targetWWNs - targetWWNs @@ -180963,19 +191409,22 @@ components: secret: secretName: secretName defaultMode: 7 + defaultUser: 5 optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key projected: sources: - downwardAPI: items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -180984,7 +191433,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -180993,39 +191443,46 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 configMap: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key podCertificate: certificateChainPath: certificateChainPath userAnnotations: key: userAnnotations keyPath: keyPath - maxExpirationSeconds: 3 + maxExpirationSeconds: 8 keyType: keyType + user: 7 credentialBundlePath: credentialBundlePath signerName: signerName secret: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key serviceAccountToken: path: path audience: audience expirationSeconds: 3 + user: 3 clusterTrustBundle: path: path labelSelector: @@ -181044,10 +191501,11 @@ components: key: matchLabels name: name optional: true + user: 4 signerName: signerName - downwardAPI: items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -181056,7 +191514,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -181065,39 +191524,46 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 configMap: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key podCertificate: certificateChainPath: certificateChainPath userAnnotations: key: userAnnotations keyPath: keyPath - maxExpirationSeconds: 3 + maxExpirationSeconds: 8 keyType: keyType + user: 7 credentialBundlePath: credentialBundlePath signerName: signerName secret: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key serviceAccountToken: path: path audience: audience expirationSeconds: 3 + user: 3 clusterTrustBundle: path: path labelSelector: @@ -181116,8 +191582,10 @@ components: key: matchLabels name: name optional: true + user: 4 signerName: signerName defaultMode: 6 + defaultUser: 0 cephfs: path: path secretRef: @@ -181141,6 +191609,7 @@ components: storagePool: storagePool gateway: gateway emptyDir: + mode: 3 sizeLimit: sizeLimit medium: medium glusterfs: @@ -181148,7 +191617,7 @@ components: endpoints: endpoints readOnly: true gcePersistentDisk: - partition: 6 + partition: 0 readOnly: true pdName: pdName fsType: fsType @@ -181172,9 +191641,10 @@ components: readOnly: true fsType: fsType downwardAPI: - defaultMode: 1 + defaultMode: 6 + defaultUser: 5 items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -181183,7 +191653,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -181192,8 +191663,9 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 awsElasticBlockStore: - partition: 6 + partition: 3 volumeID: volumeID readOnly: true fsType: fsType @@ -181203,7 +191675,7 @@ components: iscsi: chapAuthSession: true iscsiInterface: iscsiInterface - lun: 5 + lun: 7 chapAuthDiscovery: true iqn: iqn portals: @@ -181228,15 +191700,18 @@ components: - monitors - monitors configMap: - defaultMode: 3 + defaultMode: 6 name: name + defaultUser: 1 optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key storageos: volumeNamespace: volumeNamespace @@ -181275,7 +191750,7 @@ components: volumePath: volumePath fsType: fsType fc: - lun: 6 + lun: 7 targetWWNs: - targetWWNs - targetWWNs @@ -181364,10 +191839,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -181391,6 +191868,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -181398,6 +191878,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -181415,6 +191898,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -181435,6 +191919,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -181459,10 +191944,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -181508,10 +191995,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -181656,10 +192145,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -181683,6 +192174,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -181690,6 +192184,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -181707,6 +192204,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -181727,6 +192225,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -181751,10 +192250,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -181800,10 +192301,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -181883,9 +192386,14 @@ components: tty: true stdinOnce: true serviceAccount: serviceAccount - priority: 7 + priority: 1 restartPolicy: restartPolicy shareProcessNamespace: true + evictionResponders: + - name: name + priority: 7 + - name: name + priority: 7 hostUsers: true resourceClaims: - resourceClaimName: resourceClaimName @@ -181962,10 +192470,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -181989,6 +192499,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -181996,6 +192509,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -182013,6 +192529,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -182033,6 +192550,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -182057,10 +192575,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -182106,10 +192626,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -182253,10 +192775,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -182280,6 +192804,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -182287,6 +192814,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -182304,6 +192834,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -182324,6 +192855,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -182348,10 +192880,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -182397,10 +192931,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -182545,10 +193081,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -182572,6 +193110,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -182579,6 +193120,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -182596,6 +193140,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -182616,6 +193161,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -182640,10 +193186,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -182689,10 +193237,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -182836,10 +193386,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -182863,6 +193415,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -182870,6 +193425,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -182887,6 +193445,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -182907,6 +193466,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -182931,10 +193491,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -182980,10 +193542,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -183509,9 +194073,28 @@ components: status: status - type: type status: status - ttlSecondsAfterFinished: 2 + ttlSecondsAfterFinished: 4 podReplacementPolicy: podReplacementPolicy managedBy: managedBy + scheduling: + resourceClaims: + - resourceClaimName: resourceClaimName + name: name + resourceClaimTemplateName: resourceClaimTemplateName + - resourceClaimName: resourceClaimName + name: name + resourceClaimTemplateName: resourceClaimTemplateName + schedulingConstraints: + topology: + - key: key + - key: key + disruptionMode: + all: "{}" + single: "{}" + schedulingPolicy: + gang: + minCount: 3 + basic: "{}" selector: matchExpressions: - values: @@ -183530,15 +194113,15 @@ components: activeDeadlineSeconds: 6 successPolicy: rules: - - succeededCount: 3 + - succeededCount: 2 succeededIndexes: succeededIndexes - - succeededCount: 3 + - succeededCount: 2 succeededIndexes: succeededIndexes - startingDeadlineSeconds: 4 + startingDeadlineSeconds: 7 concurrencyPolicy: concurrencyPolicy timeZone: timeZone failedJobsHistoryLimit: 0 - successfulJobsHistoryLimit: 7 + successfulJobsHistoryLimit: 1 status: lastScheduleTime: 2000-01-23T04:56:07.000+00:00 active: @@ -183689,7 +194272,7 @@ components: spec: dnsPolicy: dnsPolicy nodeName: nodeName - terminationGracePeriodSeconds: 9 + terminationGracePeriodSeconds: 6 dnsConfig: searches: - searches @@ -183730,17 +194313,17 @@ components: appArmorProfile: localhostProfile: localhostProfile type: type - fsGroup: 1 + fsGroup: 4 fsGroupChangePolicy: fsGroupChangePolicy seLinuxChangePolicy: seLinuxChangePolicy - runAsGroup: 4 + runAsGroup: 5 runAsNonRoot: true sysctls: - name: name value: value - name: name value: value - runAsUser: 5 + runAsUser: 9 seccompProfile: localhostProfile: localhostProfile type: type @@ -183760,12 +194343,12 @@ components: runtimeClassName: runtimeClassName tolerations: - effect: effect - tolerationSeconds: 6 + tolerationSeconds: 8 value: value key: key operator: operator - effect: effect - tolerationSeconds: 6 + tolerationSeconds: 8 value: value key: key operator: operator @@ -183787,7 +194370,7 @@ components: topologySpreadConstraints: - nodeTaintsPolicy: nodeTaintsPolicy whenUnsatisfiable: whenUnsatisfiable - maxSkew: 8 + maxSkew: 9 nodeAffinityPolicy: nodeAffinityPolicy labelSelector: matchExpressions: @@ -183803,14 +194386,14 @@ components: operator: operator matchLabels: key: matchLabels - minDomains: 9 + minDomains: 6 topologyKey: topologyKey matchLabelKeys: - matchLabelKeys - matchLabelKeys - nodeTaintsPolicy: nodeTaintsPolicy whenUnsatisfiable: whenUnsatisfiable - maxSkew: 8 + maxSkew: 9 nodeAffinityPolicy: nodeAffinityPolicy labelSelector: matchExpressions: @@ -183826,7 +194409,7 @@ components: operator: operator matchLabels: key: matchLabels - minDomains: 9 + minDomains: 6 topologyKey: topologyKey matchLabelKeys: - matchLabelKeys @@ -183938,19 +194521,22 @@ components: secret: secretName: secretName defaultMode: 7 + defaultUser: 5 optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key projected: sources: - downwardAPI: items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -183959,7 +194545,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -183968,39 +194555,46 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 configMap: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key podCertificate: certificateChainPath: certificateChainPath userAnnotations: key: userAnnotations keyPath: keyPath - maxExpirationSeconds: 3 + maxExpirationSeconds: 8 keyType: keyType + user: 7 credentialBundlePath: credentialBundlePath signerName: signerName secret: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key serviceAccountToken: path: path audience: audience expirationSeconds: 3 + user: 3 clusterTrustBundle: path: path labelSelector: @@ -184019,10 +194613,11 @@ components: key: matchLabels name: name optional: true + user: 4 signerName: signerName - downwardAPI: items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -184031,7 +194626,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -184040,39 +194636,46 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 configMap: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key podCertificate: certificateChainPath: certificateChainPath userAnnotations: key: userAnnotations keyPath: keyPath - maxExpirationSeconds: 3 + maxExpirationSeconds: 8 keyType: keyType + user: 7 credentialBundlePath: credentialBundlePath signerName: signerName secret: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key serviceAccountToken: path: path audience: audience expirationSeconds: 3 + user: 3 clusterTrustBundle: path: path labelSelector: @@ -184091,8 +194694,10 @@ components: key: matchLabels name: name optional: true + user: 4 signerName: signerName defaultMode: 6 + defaultUser: 0 cephfs: path: path secretRef: @@ -184116,6 +194721,7 @@ components: storagePool: storagePool gateway: gateway emptyDir: + mode: 3 sizeLimit: sizeLimit medium: medium glusterfs: @@ -184123,7 +194729,7 @@ components: endpoints: endpoints readOnly: true gcePersistentDisk: - partition: 6 + partition: 0 readOnly: true pdName: pdName fsType: fsType @@ -184147,9 +194753,10 @@ components: readOnly: true fsType: fsType downwardAPI: - defaultMode: 1 + defaultMode: 6 + defaultUser: 5 items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -184158,7 +194765,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -184167,8 +194775,9 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 awsElasticBlockStore: - partition: 6 + partition: 3 volumeID: volumeID readOnly: true fsType: fsType @@ -184178,7 +194787,7 @@ components: iscsi: chapAuthSession: true iscsiInterface: iscsiInterface - lun: 5 + lun: 7 chapAuthDiscovery: true iqn: iqn portals: @@ -184203,15 +194812,18 @@ components: - monitors - monitors configMap: - defaultMode: 3 + defaultMode: 6 name: name + defaultUser: 1 optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key storageos: volumeNamespace: volumeNamespace @@ -184250,7 +194862,7 @@ components: volumePath: volumePath fsType: fsType fc: - lun: 6 + lun: 7 targetWWNs: - targetWWNs - targetWWNs @@ -184368,19 +194980,22 @@ components: secret: secretName: secretName defaultMode: 7 + defaultUser: 5 optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key projected: sources: - downwardAPI: items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -184389,7 +195004,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -184398,39 +195014,46 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 configMap: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key podCertificate: certificateChainPath: certificateChainPath userAnnotations: key: userAnnotations keyPath: keyPath - maxExpirationSeconds: 3 + maxExpirationSeconds: 8 keyType: keyType + user: 7 credentialBundlePath: credentialBundlePath signerName: signerName secret: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key serviceAccountToken: path: path audience: audience expirationSeconds: 3 + user: 3 clusterTrustBundle: path: path labelSelector: @@ -184449,10 +195072,11 @@ components: key: matchLabels name: name optional: true + user: 4 signerName: signerName - downwardAPI: items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -184461,7 +195085,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -184470,39 +195095,46 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 configMap: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key podCertificate: certificateChainPath: certificateChainPath userAnnotations: key: userAnnotations keyPath: keyPath - maxExpirationSeconds: 3 + maxExpirationSeconds: 8 keyType: keyType + user: 7 credentialBundlePath: credentialBundlePath signerName: signerName secret: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key serviceAccountToken: path: path audience: audience expirationSeconds: 3 + user: 3 clusterTrustBundle: path: path labelSelector: @@ -184521,8 +195153,10 @@ components: key: matchLabels name: name optional: true + user: 4 signerName: signerName defaultMode: 6 + defaultUser: 0 cephfs: path: path secretRef: @@ -184546,6 +195180,7 @@ components: storagePool: storagePool gateway: gateway emptyDir: + mode: 3 sizeLimit: sizeLimit medium: medium glusterfs: @@ -184553,7 +195188,7 @@ components: endpoints: endpoints readOnly: true gcePersistentDisk: - partition: 6 + partition: 0 readOnly: true pdName: pdName fsType: fsType @@ -184577,9 +195212,10 @@ components: readOnly: true fsType: fsType downwardAPI: - defaultMode: 1 + defaultMode: 6 + defaultUser: 5 items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -184588,7 +195224,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -184597,8 +195234,9 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 awsElasticBlockStore: - partition: 6 + partition: 3 volumeID: volumeID readOnly: true fsType: fsType @@ -184608,7 +195246,7 @@ components: iscsi: chapAuthSession: true iscsiInterface: iscsiInterface - lun: 5 + lun: 7 chapAuthDiscovery: true iqn: iqn portals: @@ -184633,15 +195271,18 @@ components: - monitors - monitors configMap: - defaultMode: 3 + defaultMode: 6 name: name + defaultUser: 1 optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key storageos: volumeNamespace: volumeNamespace @@ -184680,7 +195321,7 @@ components: volumePath: volumePath fsType: fsType fc: - lun: 6 + lun: 7 targetWWNs: - targetWWNs - targetWWNs @@ -184769,10 +195410,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -184796,6 +195439,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -184803,6 +195449,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -184820,6 +195469,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -184840,6 +195490,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -184864,10 +195515,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -184913,10 +195566,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -185061,10 +195716,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -185088,6 +195745,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -185095,6 +195755,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -185112,6 +195775,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -185132,6 +195796,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -185156,10 +195821,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -185205,10 +195872,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -185288,9 +195957,14 @@ components: tty: true stdinOnce: true serviceAccount: serviceAccount - priority: 7 + priority: 1 restartPolicy: restartPolicy shareProcessNamespace: true + evictionResponders: + - name: name + priority: 7 + - name: name + priority: 7 hostUsers: true resourceClaims: - resourceClaimName: resourceClaimName @@ -185367,10 +196041,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -185394,6 +196070,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -185401,6 +196080,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -185418,6 +196100,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -185438,6 +196121,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -185462,10 +196146,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -185511,10 +196197,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -185658,10 +196346,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -185685,6 +196375,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -185692,6 +196385,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -185709,6 +196405,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -185729,6 +196426,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -185753,10 +196451,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -185802,10 +196502,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -185950,10 +196652,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -185977,6 +196681,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -185984,6 +196691,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -186001,6 +196711,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -186021,6 +196732,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -186045,10 +196757,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -186094,10 +196808,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -186241,10 +196957,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -186268,6 +196986,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -186275,6 +196996,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -186292,6 +197016,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -186312,6 +197037,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -186336,10 +197062,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -186385,10 +197113,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -186914,9 +197644,28 @@ components: status: status - type: type status: status - ttlSecondsAfterFinished: 2 + ttlSecondsAfterFinished: 4 podReplacementPolicy: podReplacementPolicy managedBy: managedBy + scheduling: + resourceClaims: + - resourceClaimName: resourceClaimName + name: name + resourceClaimTemplateName: resourceClaimTemplateName + - resourceClaimName: resourceClaimName + name: name + resourceClaimTemplateName: resourceClaimTemplateName + schedulingConstraints: + topology: + - key: key + - key: key + disruptionMode: + all: "{}" + single: "{}" + schedulingPolicy: + gang: + minCount: 3 + basic: "{}" selector: matchExpressions: - values: @@ -186935,15 +197684,15 @@ components: activeDeadlineSeconds: 6 successPolicy: rules: - - succeededCount: 3 + - succeededCount: 2 succeededIndexes: succeededIndexes - - succeededCount: 3 + - succeededCount: 2 succeededIndexes: succeededIndexes - startingDeadlineSeconds: 4 + startingDeadlineSeconds: 7 concurrencyPolicy: concurrencyPolicy timeZone: timeZone failedJobsHistoryLimit: 0 - successfulJobsHistoryLimit: 7 + successfulJobsHistoryLimit: 1 properties: concurrencyPolicy: description: |- @@ -187133,7 +197882,7 @@ components: spec: dnsPolicy: dnsPolicy nodeName: nodeName - terminationGracePeriodSeconds: 9 + terminationGracePeriodSeconds: 6 dnsConfig: searches: - searches @@ -187174,17 +197923,17 @@ components: appArmorProfile: localhostProfile: localhostProfile type: type - fsGroup: 1 + fsGroup: 4 fsGroupChangePolicy: fsGroupChangePolicy seLinuxChangePolicy: seLinuxChangePolicy - runAsGroup: 4 + runAsGroup: 5 runAsNonRoot: true sysctls: - name: name value: value - name: name value: value - runAsUser: 5 + runAsUser: 9 seccompProfile: localhostProfile: localhostProfile type: type @@ -187204,12 +197953,12 @@ components: runtimeClassName: runtimeClassName tolerations: - effect: effect - tolerationSeconds: 6 + tolerationSeconds: 8 value: value key: key operator: operator - effect: effect - tolerationSeconds: 6 + tolerationSeconds: 8 value: value key: key operator: operator @@ -187231,7 +197980,7 @@ components: topologySpreadConstraints: - nodeTaintsPolicy: nodeTaintsPolicy whenUnsatisfiable: whenUnsatisfiable - maxSkew: 8 + maxSkew: 9 nodeAffinityPolicy: nodeAffinityPolicy labelSelector: matchExpressions: @@ -187247,14 +197996,14 @@ components: operator: operator matchLabels: key: matchLabels - minDomains: 9 + minDomains: 6 topologyKey: topologyKey matchLabelKeys: - matchLabelKeys - matchLabelKeys - nodeTaintsPolicy: nodeTaintsPolicy whenUnsatisfiable: whenUnsatisfiable - maxSkew: 8 + maxSkew: 9 nodeAffinityPolicy: nodeAffinityPolicy labelSelector: matchExpressions: @@ -187270,7 +198019,7 @@ components: operator: operator matchLabels: key: matchLabels - minDomains: 9 + minDomains: 6 topologyKey: topologyKey matchLabelKeys: - matchLabelKeys @@ -187382,19 +198131,22 @@ components: secret: secretName: secretName defaultMode: 7 + defaultUser: 5 optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key projected: sources: - downwardAPI: items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -187403,7 +198155,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -187412,39 +198165,46 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 configMap: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key podCertificate: certificateChainPath: certificateChainPath userAnnotations: key: userAnnotations keyPath: keyPath - maxExpirationSeconds: 3 + maxExpirationSeconds: 8 keyType: keyType + user: 7 credentialBundlePath: credentialBundlePath signerName: signerName secret: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key serviceAccountToken: path: path audience: audience expirationSeconds: 3 + user: 3 clusterTrustBundle: path: path labelSelector: @@ -187463,10 +198223,11 @@ components: key: matchLabels name: name optional: true + user: 4 signerName: signerName - downwardAPI: items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -187475,7 +198236,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -187484,39 +198246,46 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 configMap: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key podCertificate: certificateChainPath: certificateChainPath userAnnotations: key: userAnnotations keyPath: keyPath - maxExpirationSeconds: 3 + maxExpirationSeconds: 8 keyType: keyType + user: 7 credentialBundlePath: credentialBundlePath signerName: signerName secret: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key serviceAccountToken: path: path audience: audience expirationSeconds: 3 + user: 3 clusterTrustBundle: path: path labelSelector: @@ -187535,8 +198304,10 @@ components: key: matchLabels name: name optional: true + user: 4 signerName: signerName defaultMode: 6 + defaultUser: 0 cephfs: path: path secretRef: @@ -187560,6 +198331,7 @@ components: storagePool: storagePool gateway: gateway emptyDir: + mode: 3 sizeLimit: sizeLimit medium: medium glusterfs: @@ -187567,7 +198339,7 @@ components: endpoints: endpoints readOnly: true gcePersistentDisk: - partition: 6 + partition: 0 readOnly: true pdName: pdName fsType: fsType @@ -187591,9 +198363,10 @@ components: readOnly: true fsType: fsType downwardAPI: - defaultMode: 1 + defaultMode: 6 + defaultUser: 5 items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -187602,7 +198375,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -187611,8 +198385,9 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 awsElasticBlockStore: - partition: 6 + partition: 3 volumeID: volumeID readOnly: true fsType: fsType @@ -187622,7 +198397,7 @@ components: iscsi: chapAuthSession: true iscsiInterface: iscsiInterface - lun: 5 + lun: 7 chapAuthDiscovery: true iqn: iqn portals: @@ -187647,15 +198422,18 @@ components: - monitors - monitors configMap: - defaultMode: 3 + defaultMode: 6 name: name + defaultUser: 1 optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key storageos: volumeNamespace: volumeNamespace @@ -187694,7 +198472,7 @@ components: volumePath: volumePath fsType: fsType fc: - lun: 6 + lun: 7 targetWWNs: - targetWWNs - targetWWNs @@ -187812,19 +198590,22 @@ components: secret: secretName: secretName defaultMode: 7 + defaultUser: 5 optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key projected: sources: - downwardAPI: items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -187833,7 +198614,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -187842,39 +198624,46 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 configMap: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key podCertificate: certificateChainPath: certificateChainPath userAnnotations: key: userAnnotations keyPath: keyPath - maxExpirationSeconds: 3 + maxExpirationSeconds: 8 keyType: keyType + user: 7 credentialBundlePath: credentialBundlePath signerName: signerName secret: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key serviceAccountToken: path: path audience: audience expirationSeconds: 3 + user: 3 clusterTrustBundle: path: path labelSelector: @@ -187893,10 +198682,11 @@ components: key: matchLabels name: name optional: true + user: 4 signerName: signerName - downwardAPI: items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -187905,7 +198695,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -187914,39 +198705,46 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 configMap: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key podCertificate: certificateChainPath: certificateChainPath userAnnotations: key: userAnnotations keyPath: keyPath - maxExpirationSeconds: 3 + maxExpirationSeconds: 8 keyType: keyType + user: 7 credentialBundlePath: credentialBundlePath signerName: signerName secret: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key serviceAccountToken: path: path audience: audience expirationSeconds: 3 + user: 3 clusterTrustBundle: path: path labelSelector: @@ -187965,8 +198763,10 @@ components: key: matchLabels name: name optional: true + user: 4 signerName: signerName defaultMode: 6 + defaultUser: 0 cephfs: path: path secretRef: @@ -187990,6 +198790,7 @@ components: storagePool: storagePool gateway: gateway emptyDir: + mode: 3 sizeLimit: sizeLimit medium: medium glusterfs: @@ -187997,7 +198798,7 @@ components: endpoints: endpoints readOnly: true gcePersistentDisk: - partition: 6 + partition: 0 readOnly: true pdName: pdName fsType: fsType @@ -188021,9 +198822,10 @@ components: readOnly: true fsType: fsType downwardAPI: - defaultMode: 1 + defaultMode: 6 + defaultUser: 5 items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -188032,7 +198834,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -188041,8 +198844,9 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 awsElasticBlockStore: - partition: 6 + partition: 3 volumeID: volumeID readOnly: true fsType: fsType @@ -188052,7 +198856,7 @@ components: iscsi: chapAuthSession: true iscsiInterface: iscsiInterface - lun: 5 + lun: 7 chapAuthDiscovery: true iqn: iqn portals: @@ -188077,15 +198881,18 @@ components: - monitors - monitors configMap: - defaultMode: 3 + defaultMode: 6 name: name + defaultUser: 1 optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key storageos: volumeNamespace: volumeNamespace @@ -188124,7 +198931,7 @@ components: volumePath: volumePath fsType: fsType fc: - lun: 6 + lun: 7 targetWWNs: - targetWWNs - targetWWNs @@ -188213,10 +199020,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -188240,6 +199049,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -188247,6 +199059,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -188264,6 +199079,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -188284,6 +199100,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -188308,10 +199125,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -188357,10 +199176,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -188505,10 +199326,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -188532,6 +199355,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -188539,6 +199365,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -188556,6 +199385,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -188576,6 +199406,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -188600,10 +199431,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -188649,10 +199482,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -188732,9 +199567,14 @@ components: tty: true stdinOnce: true serviceAccount: serviceAccount - priority: 7 + priority: 1 restartPolicy: restartPolicy shareProcessNamespace: true + evictionResponders: + - name: name + priority: 7 + - name: name + priority: 7 hostUsers: true resourceClaims: - resourceClaimName: resourceClaimName @@ -188811,10 +199651,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -188838,6 +199680,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -188845,6 +199690,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -188862,6 +199710,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -188882,6 +199731,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -188906,10 +199756,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -188955,10 +199807,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -189102,10 +199956,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -189129,6 +199985,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -189136,6 +199995,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -189153,6 +200015,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -189173,6 +200036,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -189197,10 +200061,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -189246,10 +200112,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -189394,10 +200262,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -189421,6 +200291,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -189428,6 +200301,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -189445,6 +200321,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -189465,6 +200342,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -189489,10 +200367,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -189538,10 +200418,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -189685,10 +200567,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -189712,6 +200596,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -189719,6 +200606,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -189736,6 +200626,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -189756,6 +200647,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -189780,10 +200672,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -189829,10 +200723,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -190358,9 +201254,28 @@ components: status: status - type: type status: status - ttlSecondsAfterFinished: 2 + ttlSecondsAfterFinished: 4 podReplacementPolicy: podReplacementPolicy managedBy: managedBy + scheduling: + resourceClaims: + - resourceClaimName: resourceClaimName + name: name + resourceClaimTemplateName: resourceClaimTemplateName + - resourceClaimName: resourceClaimName + name: name + resourceClaimTemplateName: resourceClaimTemplateName + schedulingConstraints: + topology: + - key: key + - key: key + disruptionMode: + all: "{}" + single: "{}" + schedulingPolicy: + gang: + minCount: 3 + basic: "{}" selector: matchExpressions: - values: @@ -190379,9 +201294,9 @@ components: activeDeadlineSeconds: 6 successPolicy: rules: - - succeededCount: 3 + - succeededCount: 2 succeededIndexes: succeededIndexes - - succeededCount: 3 + - succeededCount: 2 succeededIndexes: succeededIndexes status: completionTime: 2000-01-23T04:56:07.000+00:00 @@ -190584,7 +201499,7 @@ components: spec: dnsPolicy: dnsPolicy nodeName: nodeName - terminationGracePeriodSeconds: 9 + terminationGracePeriodSeconds: 6 dnsConfig: searches: - searches @@ -190625,17 +201540,17 @@ components: appArmorProfile: localhostProfile: localhostProfile type: type - fsGroup: 1 + fsGroup: 4 fsGroupChangePolicy: fsGroupChangePolicy seLinuxChangePolicy: seLinuxChangePolicy - runAsGroup: 4 + runAsGroup: 5 runAsNonRoot: true sysctls: - name: name value: value - name: name value: value - runAsUser: 5 + runAsUser: 9 seccompProfile: localhostProfile: localhostProfile type: type @@ -190655,12 +201570,12 @@ components: runtimeClassName: runtimeClassName tolerations: - effect: effect - tolerationSeconds: 6 + tolerationSeconds: 8 value: value key: key operator: operator - effect: effect - tolerationSeconds: 6 + tolerationSeconds: 8 value: value key: key operator: operator @@ -190682,7 +201597,7 @@ components: topologySpreadConstraints: - nodeTaintsPolicy: nodeTaintsPolicy whenUnsatisfiable: whenUnsatisfiable - maxSkew: 8 + maxSkew: 9 nodeAffinityPolicy: nodeAffinityPolicy labelSelector: matchExpressions: @@ -190698,14 +201613,14 @@ components: operator: operator matchLabels: key: matchLabels - minDomains: 9 + minDomains: 6 topologyKey: topologyKey matchLabelKeys: - matchLabelKeys - matchLabelKeys - nodeTaintsPolicy: nodeTaintsPolicy whenUnsatisfiable: whenUnsatisfiable - maxSkew: 8 + maxSkew: 9 nodeAffinityPolicy: nodeAffinityPolicy labelSelector: matchExpressions: @@ -190721,7 +201636,7 @@ components: operator: operator matchLabels: key: matchLabels - minDomains: 9 + minDomains: 6 topologyKey: topologyKey matchLabelKeys: - matchLabelKeys @@ -190833,19 +201748,22 @@ components: secret: secretName: secretName defaultMode: 7 + defaultUser: 5 optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key projected: sources: - downwardAPI: items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -190854,7 +201772,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -190863,39 +201782,46 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 configMap: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key podCertificate: certificateChainPath: certificateChainPath userAnnotations: key: userAnnotations keyPath: keyPath - maxExpirationSeconds: 3 + maxExpirationSeconds: 8 keyType: keyType + user: 7 credentialBundlePath: credentialBundlePath signerName: signerName secret: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key serviceAccountToken: path: path audience: audience expirationSeconds: 3 + user: 3 clusterTrustBundle: path: path labelSelector: @@ -190914,10 +201840,11 @@ components: key: matchLabels name: name optional: true + user: 4 signerName: signerName - downwardAPI: items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -190926,7 +201853,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -190935,39 +201863,46 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 configMap: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key podCertificate: certificateChainPath: certificateChainPath userAnnotations: key: userAnnotations keyPath: keyPath - maxExpirationSeconds: 3 + maxExpirationSeconds: 8 keyType: keyType + user: 7 credentialBundlePath: credentialBundlePath signerName: signerName secret: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key serviceAccountToken: path: path audience: audience expirationSeconds: 3 + user: 3 clusterTrustBundle: path: path labelSelector: @@ -190986,8 +201921,10 @@ components: key: matchLabels name: name optional: true + user: 4 signerName: signerName defaultMode: 6 + defaultUser: 0 cephfs: path: path secretRef: @@ -191011,6 +201948,7 @@ components: storagePool: storagePool gateway: gateway emptyDir: + mode: 3 sizeLimit: sizeLimit medium: medium glusterfs: @@ -191018,7 +201956,7 @@ components: endpoints: endpoints readOnly: true gcePersistentDisk: - partition: 6 + partition: 0 readOnly: true pdName: pdName fsType: fsType @@ -191042,9 +201980,10 @@ components: readOnly: true fsType: fsType downwardAPI: - defaultMode: 1 + defaultMode: 6 + defaultUser: 5 items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -191053,7 +201992,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -191062,8 +202002,9 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 awsElasticBlockStore: - partition: 6 + partition: 3 volumeID: volumeID readOnly: true fsType: fsType @@ -191073,7 +202014,7 @@ components: iscsi: chapAuthSession: true iscsiInterface: iscsiInterface - lun: 5 + lun: 7 chapAuthDiscovery: true iqn: iqn portals: @@ -191098,15 +202039,18 @@ components: - monitors - monitors configMap: - defaultMode: 3 + defaultMode: 6 name: name + defaultUser: 1 optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key storageos: volumeNamespace: volumeNamespace @@ -191145,7 +202089,7 @@ components: volumePath: volumePath fsType: fsType fc: - lun: 6 + lun: 7 targetWWNs: - targetWWNs - targetWWNs @@ -191263,19 +202207,22 @@ components: secret: secretName: secretName defaultMode: 7 + defaultUser: 5 optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key projected: sources: - downwardAPI: items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -191284,7 +202231,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -191293,39 +202241,46 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 configMap: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key podCertificate: certificateChainPath: certificateChainPath userAnnotations: key: userAnnotations keyPath: keyPath - maxExpirationSeconds: 3 + maxExpirationSeconds: 8 keyType: keyType + user: 7 credentialBundlePath: credentialBundlePath signerName: signerName secret: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key serviceAccountToken: path: path audience: audience expirationSeconds: 3 + user: 3 clusterTrustBundle: path: path labelSelector: @@ -191344,10 +202299,11 @@ components: key: matchLabels name: name optional: true + user: 4 signerName: signerName - downwardAPI: items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -191356,7 +202312,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -191365,39 +202322,46 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 configMap: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key podCertificate: certificateChainPath: certificateChainPath userAnnotations: key: userAnnotations keyPath: keyPath - maxExpirationSeconds: 3 + maxExpirationSeconds: 8 keyType: keyType + user: 7 credentialBundlePath: credentialBundlePath signerName: signerName secret: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key serviceAccountToken: path: path audience: audience expirationSeconds: 3 + user: 3 clusterTrustBundle: path: path labelSelector: @@ -191416,8 +202380,10 @@ components: key: matchLabels name: name optional: true + user: 4 signerName: signerName defaultMode: 6 + defaultUser: 0 cephfs: path: path secretRef: @@ -191441,6 +202407,7 @@ components: storagePool: storagePool gateway: gateway emptyDir: + mode: 3 sizeLimit: sizeLimit medium: medium glusterfs: @@ -191448,7 +202415,7 @@ components: endpoints: endpoints readOnly: true gcePersistentDisk: - partition: 6 + partition: 0 readOnly: true pdName: pdName fsType: fsType @@ -191472,9 +202439,10 @@ components: readOnly: true fsType: fsType downwardAPI: - defaultMode: 1 + defaultMode: 6 + defaultUser: 5 items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -191483,7 +202451,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -191492,8 +202461,9 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 awsElasticBlockStore: - partition: 6 + partition: 3 volumeID: volumeID readOnly: true fsType: fsType @@ -191503,7 +202473,7 @@ components: iscsi: chapAuthSession: true iscsiInterface: iscsiInterface - lun: 5 + lun: 7 chapAuthDiscovery: true iqn: iqn portals: @@ -191528,15 +202498,18 @@ components: - monitors - monitors configMap: - defaultMode: 3 + defaultMode: 6 name: name + defaultUser: 1 optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key storageos: volumeNamespace: volumeNamespace @@ -191575,7 +202548,7 @@ components: volumePath: volumePath fsType: fsType fc: - lun: 6 + lun: 7 targetWWNs: - targetWWNs - targetWWNs @@ -191664,10 +202637,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -191691,6 +202666,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -191698,6 +202676,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -191715,6 +202696,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -191735,6 +202717,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -191759,10 +202742,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -191808,10 +202793,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -191956,10 +202943,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -191983,6 +202972,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -191990,6 +202982,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -192007,6 +203002,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -192027,6 +203023,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -192051,10 +203048,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -192100,10 +203099,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -192183,9 +203184,14 @@ components: tty: true stdinOnce: true serviceAccount: serviceAccount - priority: 7 + priority: 1 restartPolicy: restartPolicy shareProcessNamespace: true + evictionResponders: + - name: name + priority: 7 + - name: name + priority: 7 hostUsers: true resourceClaims: - resourceClaimName: resourceClaimName @@ -192262,10 +203268,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -192289,6 +203297,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -192296,6 +203307,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -192313,6 +203327,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -192333,6 +203348,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -192357,10 +203373,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -192406,10 +203424,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -192553,10 +203573,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -192580,6 +203602,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -192587,6 +203612,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -192604,6 +203632,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -192624,6 +203653,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -192648,10 +203678,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -192697,10 +203729,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -192845,10 +203879,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -192872,6 +203908,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -192879,6 +203918,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -192896,6 +203938,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -192916,6 +203959,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -192940,10 +203984,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -192989,10 +204035,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -193136,10 +204184,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -193163,6 +204213,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -193170,6 +204223,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -193187,6 +204243,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -193207,6 +204264,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -193231,10 +204289,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -193280,10 +204340,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -193809,9 +204871,28 @@ components: status: status - type: type status: status - ttlSecondsAfterFinished: 2 + ttlSecondsAfterFinished: 4 podReplacementPolicy: podReplacementPolicy managedBy: managedBy + scheduling: + resourceClaims: + - resourceClaimName: resourceClaimName + name: name + resourceClaimTemplateName: resourceClaimTemplateName + - resourceClaimName: resourceClaimName + name: name + resourceClaimTemplateName: resourceClaimTemplateName + schedulingConstraints: + topology: + - key: key + - key: key + disruptionMode: + all: "{}" + single: "{}" + schedulingPolicy: + gang: + minCount: 3 + basic: "{}" selector: matchExpressions: - values: @@ -193830,9 +204911,9 @@ components: activeDeadlineSeconds: 6 successPolicy: rules: - - succeededCount: 3 + - succeededCount: 2 succeededIndexes: succeededIndexes - - succeededCount: 3 + - succeededCount: 2 succeededIndexes: succeededIndexes status: completionTime: 2000-01-23T04:56:07.000+00:00 @@ -193964,7 +205045,7 @@ components: spec: dnsPolicy: dnsPolicy nodeName: nodeName - terminationGracePeriodSeconds: 9 + terminationGracePeriodSeconds: 6 dnsConfig: searches: - searches @@ -194005,17 +205086,17 @@ components: appArmorProfile: localhostProfile: localhostProfile type: type - fsGroup: 1 + fsGroup: 4 fsGroupChangePolicy: fsGroupChangePolicy seLinuxChangePolicy: seLinuxChangePolicy - runAsGroup: 4 + runAsGroup: 5 runAsNonRoot: true sysctls: - name: name value: value - name: name value: value - runAsUser: 5 + runAsUser: 9 seccompProfile: localhostProfile: localhostProfile type: type @@ -194035,12 +205116,12 @@ components: runtimeClassName: runtimeClassName tolerations: - effect: effect - tolerationSeconds: 6 + tolerationSeconds: 8 value: value key: key operator: operator - effect: effect - tolerationSeconds: 6 + tolerationSeconds: 8 value: value key: key operator: operator @@ -194062,7 +205143,7 @@ components: topologySpreadConstraints: - nodeTaintsPolicy: nodeTaintsPolicy whenUnsatisfiable: whenUnsatisfiable - maxSkew: 8 + maxSkew: 9 nodeAffinityPolicy: nodeAffinityPolicy labelSelector: matchExpressions: @@ -194078,14 +205159,14 @@ components: operator: operator matchLabels: key: matchLabels - minDomains: 9 + minDomains: 6 topologyKey: topologyKey matchLabelKeys: - matchLabelKeys - matchLabelKeys - nodeTaintsPolicy: nodeTaintsPolicy whenUnsatisfiable: whenUnsatisfiable - maxSkew: 8 + maxSkew: 9 nodeAffinityPolicy: nodeAffinityPolicy labelSelector: matchExpressions: @@ -194101,7 +205182,7 @@ components: operator: operator matchLabels: key: matchLabels - minDomains: 9 + minDomains: 6 topologyKey: topologyKey matchLabelKeys: - matchLabelKeys @@ -194213,19 +205294,22 @@ components: secret: secretName: secretName defaultMode: 7 + defaultUser: 5 optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key projected: sources: - downwardAPI: items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -194234,7 +205318,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -194243,39 +205328,46 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 configMap: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key podCertificate: certificateChainPath: certificateChainPath userAnnotations: key: userAnnotations keyPath: keyPath - maxExpirationSeconds: 3 + maxExpirationSeconds: 8 keyType: keyType + user: 7 credentialBundlePath: credentialBundlePath signerName: signerName secret: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key serviceAccountToken: path: path audience: audience expirationSeconds: 3 + user: 3 clusterTrustBundle: path: path labelSelector: @@ -194294,10 +205386,11 @@ components: key: matchLabels name: name optional: true + user: 4 signerName: signerName - downwardAPI: items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -194306,7 +205399,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -194315,39 +205409,46 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 configMap: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key podCertificate: certificateChainPath: certificateChainPath userAnnotations: key: userAnnotations keyPath: keyPath - maxExpirationSeconds: 3 + maxExpirationSeconds: 8 keyType: keyType + user: 7 credentialBundlePath: credentialBundlePath signerName: signerName secret: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key serviceAccountToken: path: path audience: audience expirationSeconds: 3 + user: 3 clusterTrustBundle: path: path labelSelector: @@ -194366,8 +205467,10 @@ components: key: matchLabels name: name optional: true + user: 4 signerName: signerName defaultMode: 6 + defaultUser: 0 cephfs: path: path secretRef: @@ -194391,6 +205494,7 @@ components: storagePool: storagePool gateway: gateway emptyDir: + mode: 3 sizeLimit: sizeLimit medium: medium glusterfs: @@ -194398,7 +205502,7 @@ components: endpoints: endpoints readOnly: true gcePersistentDisk: - partition: 6 + partition: 0 readOnly: true pdName: pdName fsType: fsType @@ -194422,9 +205526,10 @@ components: readOnly: true fsType: fsType downwardAPI: - defaultMode: 1 + defaultMode: 6 + defaultUser: 5 items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -194433,7 +205538,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -194442,8 +205548,9 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 awsElasticBlockStore: - partition: 6 + partition: 3 volumeID: volumeID readOnly: true fsType: fsType @@ -194453,7 +205560,7 @@ components: iscsi: chapAuthSession: true iscsiInterface: iscsiInterface - lun: 5 + lun: 7 chapAuthDiscovery: true iqn: iqn portals: @@ -194478,15 +205585,18 @@ components: - monitors - monitors configMap: - defaultMode: 3 + defaultMode: 6 name: name + defaultUser: 1 optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key storageos: volumeNamespace: volumeNamespace @@ -194525,7 +205635,7 @@ components: volumePath: volumePath fsType: fsType fc: - lun: 6 + lun: 7 targetWWNs: - targetWWNs - targetWWNs @@ -194643,19 +205753,22 @@ components: secret: secretName: secretName defaultMode: 7 + defaultUser: 5 optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key projected: sources: - downwardAPI: items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -194664,7 +205777,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -194673,39 +205787,46 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 configMap: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key podCertificate: certificateChainPath: certificateChainPath userAnnotations: key: userAnnotations keyPath: keyPath - maxExpirationSeconds: 3 + maxExpirationSeconds: 8 keyType: keyType + user: 7 credentialBundlePath: credentialBundlePath signerName: signerName secret: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key serviceAccountToken: path: path audience: audience expirationSeconds: 3 + user: 3 clusterTrustBundle: path: path labelSelector: @@ -194724,10 +205845,11 @@ components: key: matchLabels name: name optional: true + user: 4 signerName: signerName - downwardAPI: items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -194736,7 +205858,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -194745,39 +205868,46 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 configMap: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key podCertificate: certificateChainPath: certificateChainPath userAnnotations: key: userAnnotations keyPath: keyPath - maxExpirationSeconds: 3 + maxExpirationSeconds: 8 keyType: keyType + user: 7 credentialBundlePath: credentialBundlePath signerName: signerName secret: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key serviceAccountToken: path: path audience: audience expirationSeconds: 3 + user: 3 clusterTrustBundle: path: path labelSelector: @@ -194796,8 +205926,10 @@ components: key: matchLabels name: name optional: true + user: 4 signerName: signerName defaultMode: 6 + defaultUser: 0 cephfs: path: path secretRef: @@ -194821,6 +205953,7 @@ components: storagePool: storagePool gateway: gateway emptyDir: + mode: 3 sizeLimit: sizeLimit medium: medium glusterfs: @@ -194828,7 +205961,7 @@ components: endpoints: endpoints readOnly: true gcePersistentDisk: - partition: 6 + partition: 0 readOnly: true pdName: pdName fsType: fsType @@ -194852,9 +205985,10 @@ components: readOnly: true fsType: fsType downwardAPI: - defaultMode: 1 + defaultMode: 6 + defaultUser: 5 items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -194863,7 +205997,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -194872,8 +206007,9 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 awsElasticBlockStore: - partition: 6 + partition: 3 volumeID: volumeID readOnly: true fsType: fsType @@ -194883,7 +206019,7 @@ components: iscsi: chapAuthSession: true iscsiInterface: iscsiInterface - lun: 5 + lun: 7 chapAuthDiscovery: true iqn: iqn portals: @@ -194908,15 +206044,18 @@ components: - monitors - monitors configMap: - defaultMode: 3 + defaultMode: 6 name: name + defaultUser: 1 optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key storageos: volumeNamespace: volumeNamespace @@ -194955,7 +206094,7 @@ components: volumePath: volumePath fsType: fsType fc: - lun: 6 + lun: 7 targetWWNs: - targetWWNs - targetWWNs @@ -195044,10 +206183,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -195071,6 +206212,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -195078,6 +206222,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -195095,6 +206242,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -195115,6 +206263,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -195139,10 +206288,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -195188,10 +206339,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -195336,10 +206489,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -195363,6 +206518,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -195370,6 +206528,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -195387,6 +206548,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -195407,6 +206569,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -195431,10 +206594,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -195480,10 +206645,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -195563,9 +206730,14 @@ components: tty: true stdinOnce: true serviceAccount: serviceAccount - priority: 7 + priority: 1 restartPolicy: restartPolicy shareProcessNamespace: true + evictionResponders: + - name: name + priority: 7 + - name: name + priority: 7 hostUsers: true resourceClaims: - resourceClaimName: resourceClaimName @@ -195642,10 +206814,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -195669,6 +206843,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -195676,6 +206853,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -195693,6 +206873,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -195713,6 +206894,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -195737,10 +206919,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -195786,10 +206970,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -195933,10 +207119,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -195960,6 +207148,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -195967,6 +207158,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -195984,6 +207178,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -196004,6 +207199,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -196028,10 +207224,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -196077,10 +207275,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -196225,10 +207425,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -196252,6 +207454,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -196259,6 +207464,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -196276,6 +207484,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -196296,6 +207505,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -196320,10 +207530,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -196369,10 +207581,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -196516,10 +207730,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -196543,6 +207759,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -196550,6 +207769,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -196567,6 +207789,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -196587,6 +207810,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -196611,10 +207835,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -196660,10 +207886,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -197189,9 +208417,28 @@ components: status: status - type: type status: status - ttlSecondsAfterFinished: 2 + ttlSecondsAfterFinished: 4 podReplacementPolicy: podReplacementPolicy managedBy: managedBy + scheduling: + resourceClaims: + - resourceClaimName: resourceClaimName + name: name + resourceClaimTemplateName: resourceClaimTemplateName + - resourceClaimName: resourceClaimName + name: name + resourceClaimTemplateName: resourceClaimTemplateName + schedulingConstraints: + topology: + - key: key + - key: key + disruptionMode: + all: "{}" + single: "{}" + schedulingPolicy: + gang: + minCount: 3 + basic: "{}" selector: matchExpressions: - values: @@ -197210,9 +208457,9 @@ components: activeDeadlineSeconds: 6 successPolicy: rules: - - succeededCount: 3 + - succeededCount: 2 succeededIndexes: succeededIndexes - - succeededCount: 3 + - succeededCount: 2 succeededIndexes: succeededIndexes status: completionTime: 2000-01-23T04:56:07.000+00:00 @@ -197271,6 +208518,53 @@ components: version: v1 x-implements: - io.kubernetes.client.common.KubernetesListObject + v1.JobSchedulingConfiguration: + description: JobSchedulingConfiguration composes the reusable workload-aware + scheduling building blocks. + example: + resourceClaims: + - resourceClaimName: resourceClaimName + name: name + resourceClaimTemplateName: resourceClaimTemplateName + - resourceClaimName: resourceClaimName + name: name + resourceClaimTemplateName: resourceClaimTemplateName + schedulingConstraints: + topology: + - key: key + - key: key + disruptionMode: + all: "{}" + single: "{}" + schedulingPolicy: + gang: + minCount: 3 + basic: "{}" + properties: + disruptionMode: + $ref: "#/components/schemas/v1alpha3.WorkloadPodGroupDisruptionMode" + resourceClaims: + description: "ResourceClaims defines which ResourceClaims may be shared\ + \ among Pods in the Job. Pods consume the devices allocated to a PodGroup's\ + \ claim by defining a claim in its own Spec.ResourceClaims that matches\ + \ the PodGroup's claim exactly. The claim must have the same name and\ + \ refer to the same ResourceClaim or ResourceClaimTemplate. At most 4\ + \ claims may be set, matching the limit on the resulting PodGroup. This\ + \ list is immutable after creation: entries may neither be added, removed,\ + \ nor modified." + items: + $ref: "#/components/schemas/v1alpha3.WorkloadPodGroupResourceClaim" + type: array + x-kubernetes-patch-strategy: merge + x-kubernetes-list-type: map + x-kubernetes-list-map-keys: + - name + x-kubernetes-patch-merge-key: name + schedulingConstraints: + $ref: "#/components/schemas/v1alpha3.WorkloadPodGroupSchedulingConstraints" + schedulingPolicy: + $ref: "#/components/schemas/v1alpha3.WorkloadPodGroupSchedulingPolicy" + type: object v1.JobSpec: description: JobSpec describes how the job execution will look like. example: @@ -197325,7 +208619,7 @@ components: spec: dnsPolicy: dnsPolicy nodeName: nodeName - terminationGracePeriodSeconds: 9 + terminationGracePeriodSeconds: 6 dnsConfig: searches: - searches @@ -197366,17 +208660,17 @@ components: appArmorProfile: localhostProfile: localhostProfile type: type - fsGroup: 1 + fsGroup: 4 fsGroupChangePolicy: fsGroupChangePolicy seLinuxChangePolicy: seLinuxChangePolicy - runAsGroup: 4 + runAsGroup: 5 runAsNonRoot: true sysctls: - name: name value: value - name: name value: value - runAsUser: 5 + runAsUser: 9 seccompProfile: localhostProfile: localhostProfile type: type @@ -197396,12 +208690,12 @@ components: runtimeClassName: runtimeClassName tolerations: - effect: effect - tolerationSeconds: 6 + tolerationSeconds: 8 value: value key: key operator: operator - effect: effect - tolerationSeconds: 6 + tolerationSeconds: 8 value: value key: key operator: operator @@ -197423,7 +208717,7 @@ components: topologySpreadConstraints: - nodeTaintsPolicy: nodeTaintsPolicy whenUnsatisfiable: whenUnsatisfiable - maxSkew: 8 + maxSkew: 9 nodeAffinityPolicy: nodeAffinityPolicy labelSelector: matchExpressions: @@ -197439,14 +208733,14 @@ components: operator: operator matchLabels: key: matchLabels - minDomains: 9 + minDomains: 6 topologyKey: topologyKey matchLabelKeys: - matchLabelKeys - matchLabelKeys - nodeTaintsPolicy: nodeTaintsPolicy whenUnsatisfiable: whenUnsatisfiable - maxSkew: 8 + maxSkew: 9 nodeAffinityPolicy: nodeAffinityPolicy labelSelector: matchExpressions: @@ -197462,7 +208756,7 @@ components: operator: operator matchLabels: key: matchLabels - minDomains: 9 + minDomains: 6 topologyKey: topologyKey matchLabelKeys: - matchLabelKeys @@ -197574,19 +208868,22 @@ components: secret: secretName: secretName defaultMode: 7 + defaultUser: 5 optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key projected: sources: - downwardAPI: items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -197595,7 +208892,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -197604,39 +208902,46 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 configMap: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key podCertificate: certificateChainPath: certificateChainPath userAnnotations: key: userAnnotations keyPath: keyPath - maxExpirationSeconds: 3 + maxExpirationSeconds: 8 keyType: keyType + user: 7 credentialBundlePath: credentialBundlePath signerName: signerName secret: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key serviceAccountToken: path: path audience: audience expirationSeconds: 3 + user: 3 clusterTrustBundle: path: path labelSelector: @@ -197655,10 +208960,11 @@ components: key: matchLabels name: name optional: true + user: 4 signerName: signerName - downwardAPI: items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -197667,7 +208973,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -197676,39 +208983,46 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 configMap: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key podCertificate: certificateChainPath: certificateChainPath userAnnotations: key: userAnnotations keyPath: keyPath - maxExpirationSeconds: 3 + maxExpirationSeconds: 8 keyType: keyType + user: 7 credentialBundlePath: credentialBundlePath signerName: signerName secret: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key serviceAccountToken: path: path audience: audience expirationSeconds: 3 + user: 3 clusterTrustBundle: path: path labelSelector: @@ -197727,8 +209041,10 @@ components: key: matchLabels name: name optional: true + user: 4 signerName: signerName defaultMode: 6 + defaultUser: 0 cephfs: path: path secretRef: @@ -197752,6 +209068,7 @@ components: storagePool: storagePool gateway: gateway emptyDir: + mode: 3 sizeLimit: sizeLimit medium: medium glusterfs: @@ -197759,7 +209076,7 @@ components: endpoints: endpoints readOnly: true gcePersistentDisk: - partition: 6 + partition: 0 readOnly: true pdName: pdName fsType: fsType @@ -197783,9 +209100,10 @@ components: readOnly: true fsType: fsType downwardAPI: - defaultMode: 1 + defaultMode: 6 + defaultUser: 5 items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -197794,7 +209112,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -197803,8 +209122,9 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 awsElasticBlockStore: - partition: 6 + partition: 3 volumeID: volumeID readOnly: true fsType: fsType @@ -197814,7 +209134,7 @@ components: iscsi: chapAuthSession: true iscsiInterface: iscsiInterface - lun: 5 + lun: 7 chapAuthDiscovery: true iqn: iqn portals: @@ -197839,15 +209159,18 @@ components: - monitors - monitors configMap: - defaultMode: 3 + defaultMode: 6 name: name + defaultUser: 1 optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key storageos: volumeNamespace: volumeNamespace @@ -197886,7 +209209,7 @@ components: volumePath: volumePath fsType: fsType fc: - lun: 6 + lun: 7 targetWWNs: - targetWWNs - targetWWNs @@ -198004,19 +209327,22 @@ components: secret: secretName: secretName defaultMode: 7 + defaultUser: 5 optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key projected: sources: - downwardAPI: items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -198025,7 +209351,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -198034,39 +209361,46 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 configMap: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key podCertificate: certificateChainPath: certificateChainPath userAnnotations: key: userAnnotations keyPath: keyPath - maxExpirationSeconds: 3 + maxExpirationSeconds: 8 keyType: keyType + user: 7 credentialBundlePath: credentialBundlePath signerName: signerName secret: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key serviceAccountToken: path: path audience: audience expirationSeconds: 3 + user: 3 clusterTrustBundle: path: path labelSelector: @@ -198085,10 +209419,11 @@ components: key: matchLabels name: name optional: true + user: 4 signerName: signerName - downwardAPI: items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -198097,7 +209432,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -198106,39 +209442,46 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 configMap: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key podCertificate: certificateChainPath: certificateChainPath userAnnotations: key: userAnnotations keyPath: keyPath - maxExpirationSeconds: 3 + maxExpirationSeconds: 8 keyType: keyType + user: 7 credentialBundlePath: credentialBundlePath signerName: signerName secret: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key serviceAccountToken: path: path audience: audience expirationSeconds: 3 + user: 3 clusterTrustBundle: path: path labelSelector: @@ -198157,8 +209500,10 @@ components: key: matchLabels name: name optional: true + user: 4 signerName: signerName defaultMode: 6 + defaultUser: 0 cephfs: path: path secretRef: @@ -198182,6 +209527,7 @@ components: storagePool: storagePool gateway: gateway emptyDir: + mode: 3 sizeLimit: sizeLimit medium: medium glusterfs: @@ -198189,7 +209535,7 @@ components: endpoints: endpoints readOnly: true gcePersistentDisk: - partition: 6 + partition: 0 readOnly: true pdName: pdName fsType: fsType @@ -198213,9 +209559,10 @@ components: readOnly: true fsType: fsType downwardAPI: - defaultMode: 1 + defaultMode: 6 + defaultUser: 5 items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -198224,7 +209571,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -198233,8 +209581,9 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 awsElasticBlockStore: - partition: 6 + partition: 3 volumeID: volumeID readOnly: true fsType: fsType @@ -198244,7 +209593,7 @@ components: iscsi: chapAuthSession: true iscsiInterface: iscsiInterface - lun: 5 + lun: 7 chapAuthDiscovery: true iqn: iqn portals: @@ -198269,15 +209618,18 @@ components: - monitors - monitors configMap: - defaultMode: 3 + defaultMode: 6 name: name + defaultUser: 1 optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key storageos: volumeNamespace: volumeNamespace @@ -198316,7 +209668,7 @@ components: volumePath: volumePath fsType: fsType fc: - lun: 6 + lun: 7 targetWWNs: - targetWWNs - targetWWNs @@ -198405,10 +209757,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -198432,6 +209786,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -198439,6 +209796,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -198456,6 +209816,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -198476,6 +209837,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -198500,10 +209862,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -198549,10 +209913,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -198697,10 +210063,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -198724,6 +210092,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -198731,6 +210102,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -198748,6 +210122,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -198768,6 +210143,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -198792,10 +210168,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -198841,10 +210219,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -198924,9 +210304,14 @@ components: tty: true stdinOnce: true serviceAccount: serviceAccount - priority: 7 + priority: 1 restartPolicy: restartPolicy shareProcessNamespace: true + evictionResponders: + - name: name + priority: 7 + - name: name + priority: 7 hostUsers: true resourceClaims: - resourceClaimName: resourceClaimName @@ -199003,10 +210388,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -199030,6 +210417,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -199037,6 +210427,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -199054,6 +210447,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -199074,6 +210468,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -199098,10 +210493,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -199147,10 +210544,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -199294,10 +210693,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -199321,6 +210722,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -199328,6 +210732,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -199345,6 +210752,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -199365,6 +210773,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -199389,10 +210798,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -199438,10 +210849,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -199586,10 +210999,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -199613,6 +211028,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -199620,6 +211038,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -199637,6 +211058,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -199657,6 +211079,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -199681,10 +211104,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -199730,10 +211155,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -199877,10 +211304,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -199904,6 +211333,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -199911,6 +211343,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -199928,6 +211363,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -199948,6 +211384,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -199972,10 +211409,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -200021,10 +211460,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -200550,9 +211991,28 @@ components: status: status - type: type status: status - ttlSecondsAfterFinished: 2 + ttlSecondsAfterFinished: 4 podReplacementPolicy: podReplacementPolicy managedBy: managedBy + scheduling: + resourceClaims: + - resourceClaimName: resourceClaimName + name: name + resourceClaimTemplateName: resourceClaimTemplateName + - resourceClaimName: resourceClaimName + name: name + resourceClaimTemplateName: resourceClaimTemplateName + schedulingConstraints: + topology: + - key: key + - key: key + disruptionMode: + all: "{}" + single: "{}" + schedulingPolicy: + gang: + minCount: 3 + basic: "{}" selector: matchExpressions: - values: @@ -200571,9 +212031,9 @@ components: activeDeadlineSeconds: 6 successPolicy: rules: - - succeededCount: 3 + - succeededCount: 2 succeededIndexes: succeededIndexes - - succeededCount: 3 + - succeededCount: 2 succeededIndexes: succeededIndexes properties: activeDeadlineSeconds: @@ -200668,6 +212128,8 @@ components: When using podFailurePolicy, Failed is the the only allowed value. TerminatingOrFailed and Failed are allowed values when podFailurePolicy is not in use. type: string + scheduling: + $ref: "#/components/schemas/v1.JobSchedulingConfiguration" selector: $ref: "#/components/schemas/v1.LabelSelector" successPolicy: @@ -200801,10 +212263,8 @@ components: format: int32 type: integer terminating: - description: |- - The number of pods which are terminating (in phase Pending or Running and have a deletionTimestamp). - - This field is beta-level. The job controller populates the field when the feature gate JobPodReplacementPolicy is enabled (enabled by default). + description: The number of pods which are terminating (in phase Pending + or Running and have a deletionTimestamp). format: int32 type: integer uncountedTerminatedPods: @@ -200912,7 +212372,7 @@ components: spec: dnsPolicy: dnsPolicy nodeName: nodeName - terminationGracePeriodSeconds: 9 + terminationGracePeriodSeconds: 6 dnsConfig: searches: - searches @@ -200953,17 +212413,17 @@ components: appArmorProfile: localhostProfile: localhostProfile type: type - fsGroup: 1 + fsGroup: 4 fsGroupChangePolicy: fsGroupChangePolicy seLinuxChangePolicy: seLinuxChangePolicy - runAsGroup: 4 + runAsGroup: 5 runAsNonRoot: true sysctls: - name: name value: value - name: name value: value - runAsUser: 5 + runAsUser: 9 seccompProfile: localhostProfile: localhostProfile type: type @@ -200983,12 +212443,12 @@ components: runtimeClassName: runtimeClassName tolerations: - effect: effect - tolerationSeconds: 6 + tolerationSeconds: 8 value: value key: key operator: operator - effect: effect - tolerationSeconds: 6 + tolerationSeconds: 8 value: value key: key operator: operator @@ -201010,7 +212470,7 @@ components: topologySpreadConstraints: - nodeTaintsPolicy: nodeTaintsPolicy whenUnsatisfiable: whenUnsatisfiable - maxSkew: 8 + maxSkew: 9 nodeAffinityPolicy: nodeAffinityPolicy labelSelector: matchExpressions: @@ -201026,14 +212486,14 @@ components: operator: operator matchLabels: key: matchLabels - minDomains: 9 + minDomains: 6 topologyKey: topologyKey matchLabelKeys: - matchLabelKeys - matchLabelKeys - nodeTaintsPolicy: nodeTaintsPolicy whenUnsatisfiable: whenUnsatisfiable - maxSkew: 8 + maxSkew: 9 nodeAffinityPolicy: nodeAffinityPolicy labelSelector: matchExpressions: @@ -201049,7 +212509,7 @@ components: operator: operator matchLabels: key: matchLabels - minDomains: 9 + minDomains: 6 topologyKey: topologyKey matchLabelKeys: - matchLabelKeys @@ -201161,19 +212621,22 @@ components: secret: secretName: secretName defaultMode: 7 + defaultUser: 5 optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key projected: sources: - downwardAPI: items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -201182,7 +212645,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -201191,39 +212655,46 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 configMap: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key podCertificate: certificateChainPath: certificateChainPath userAnnotations: key: userAnnotations keyPath: keyPath - maxExpirationSeconds: 3 + maxExpirationSeconds: 8 keyType: keyType + user: 7 credentialBundlePath: credentialBundlePath signerName: signerName secret: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key serviceAccountToken: path: path audience: audience expirationSeconds: 3 + user: 3 clusterTrustBundle: path: path labelSelector: @@ -201242,10 +212713,11 @@ components: key: matchLabels name: name optional: true + user: 4 signerName: signerName - downwardAPI: items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -201254,7 +212726,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -201263,39 +212736,46 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 configMap: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key podCertificate: certificateChainPath: certificateChainPath userAnnotations: key: userAnnotations keyPath: keyPath - maxExpirationSeconds: 3 + maxExpirationSeconds: 8 keyType: keyType + user: 7 credentialBundlePath: credentialBundlePath signerName: signerName secret: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key serviceAccountToken: path: path audience: audience expirationSeconds: 3 + user: 3 clusterTrustBundle: path: path labelSelector: @@ -201314,8 +212794,10 @@ components: key: matchLabels name: name optional: true + user: 4 signerName: signerName defaultMode: 6 + defaultUser: 0 cephfs: path: path secretRef: @@ -201339,6 +212821,7 @@ components: storagePool: storagePool gateway: gateway emptyDir: + mode: 3 sizeLimit: sizeLimit medium: medium glusterfs: @@ -201346,7 +212829,7 @@ components: endpoints: endpoints readOnly: true gcePersistentDisk: - partition: 6 + partition: 0 readOnly: true pdName: pdName fsType: fsType @@ -201370,9 +212853,10 @@ components: readOnly: true fsType: fsType downwardAPI: - defaultMode: 1 + defaultMode: 6 + defaultUser: 5 items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -201381,7 +212865,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -201390,8 +212875,9 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 awsElasticBlockStore: - partition: 6 + partition: 3 volumeID: volumeID readOnly: true fsType: fsType @@ -201401,7 +212887,7 @@ components: iscsi: chapAuthSession: true iscsiInterface: iscsiInterface - lun: 5 + lun: 7 chapAuthDiscovery: true iqn: iqn portals: @@ -201426,15 +212912,18 @@ components: - monitors - monitors configMap: - defaultMode: 3 + defaultMode: 6 name: name + defaultUser: 1 optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key storageos: volumeNamespace: volumeNamespace @@ -201473,7 +212962,7 @@ components: volumePath: volumePath fsType: fsType fc: - lun: 6 + lun: 7 targetWWNs: - targetWWNs - targetWWNs @@ -201591,19 +213080,22 @@ components: secret: secretName: secretName defaultMode: 7 + defaultUser: 5 optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key projected: sources: - downwardAPI: items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -201612,7 +213104,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -201621,39 +213114,46 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 configMap: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key podCertificate: certificateChainPath: certificateChainPath userAnnotations: key: userAnnotations keyPath: keyPath - maxExpirationSeconds: 3 + maxExpirationSeconds: 8 keyType: keyType + user: 7 credentialBundlePath: credentialBundlePath signerName: signerName secret: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key serviceAccountToken: path: path audience: audience expirationSeconds: 3 + user: 3 clusterTrustBundle: path: path labelSelector: @@ -201672,10 +213172,11 @@ components: key: matchLabels name: name optional: true + user: 4 signerName: signerName - downwardAPI: items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -201684,7 +213185,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -201693,39 +213195,46 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 configMap: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key podCertificate: certificateChainPath: certificateChainPath userAnnotations: key: userAnnotations keyPath: keyPath - maxExpirationSeconds: 3 + maxExpirationSeconds: 8 keyType: keyType + user: 7 credentialBundlePath: credentialBundlePath signerName: signerName secret: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key serviceAccountToken: path: path audience: audience expirationSeconds: 3 + user: 3 clusterTrustBundle: path: path labelSelector: @@ -201744,8 +213253,10 @@ components: key: matchLabels name: name optional: true + user: 4 signerName: signerName defaultMode: 6 + defaultUser: 0 cephfs: path: path secretRef: @@ -201769,6 +213280,7 @@ components: storagePool: storagePool gateway: gateway emptyDir: + mode: 3 sizeLimit: sizeLimit medium: medium glusterfs: @@ -201776,7 +213288,7 @@ components: endpoints: endpoints readOnly: true gcePersistentDisk: - partition: 6 + partition: 0 readOnly: true pdName: pdName fsType: fsType @@ -201800,9 +213312,10 @@ components: readOnly: true fsType: fsType downwardAPI: - defaultMode: 1 + defaultMode: 6 + defaultUser: 5 items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -201811,7 +213324,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -201820,8 +213334,9 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 awsElasticBlockStore: - partition: 6 + partition: 3 volumeID: volumeID readOnly: true fsType: fsType @@ -201831,7 +213346,7 @@ components: iscsi: chapAuthSession: true iscsiInterface: iscsiInterface - lun: 5 + lun: 7 chapAuthDiscovery: true iqn: iqn portals: @@ -201856,15 +213371,18 @@ components: - monitors - monitors configMap: - defaultMode: 3 + defaultMode: 6 name: name + defaultUser: 1 optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key storageos: volumeNamespace: volumeNamespace @@ -201903,7 +213421,7 @@ components: volumePath: volumePath fsType: fsType fc: - lun: 6 + lun: 7 targetWWNs: - targetWWNs - targetWWNs @@ -201992,10 +213510,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -202019,6 +213539,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -202026,6 +213549,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -202043,6 +213569,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -202063,6 +213590,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -202087,10 +213615,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -202136,10 +213666,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -202284,10 +213816,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -202311,6 +213845,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -202318,6 +213855,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -202335,6 +213875,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -202355,6 +213896,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -202379,10 +213921,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -202428,10 +213972,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -202511,9 +214057,14 @@ components: tty: true stdinOnce: true serviceAccount: serviceAccount - priority: 7 + priority: 1 restartPolicy: restartPolicy shareProcessNamespace: true + evictionResponders: + - name: name + priority: 7 + - name: name + priority: 7 hostUsers: true resourceClaims: - resourceClaimName: resourceClaimName @@ -202590,10 +214141,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -202617,6 +214170,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -202624,6 +214180,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -202641,6 +214200,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -202661,6 +214221,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -202685,10 +214246,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -202734,10 +214297,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -202881,10 +214446,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -202908,6 +214475,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -202915,6 +214485,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -202932,6 +214505,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -202952,6 +214526,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -202976,10 +214551,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -203025,10 +214602,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -203173,10 +214752,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -203200,6 +214781,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -203207,6 +214791,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -203224,6 +214811,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -203244,6 +214832,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -203268,10 +214857,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -203317,10 +214908,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -203464,10 +215057,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -203491,6 +215086,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -203498,6 +215096,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -203515,6 +215116,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -203535,6 +215137,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -203559,10 +215162,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -203608,10 +215213,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -204137,9 +215744,28 @@ components: status: status - type: type status: status - ttlSecondsAfterFinished: 2 + ttlSecondsAfterFinished: 4 podReplacementPolicy: podReplacementPolicy managedBy: managedBy + scheduling: + resourceClaims: + - resourceClaimName: resourceClaimName + name: name + resourceClaimTemplateName: resourceClaimTemplateName + - resourceClaimName: resourceClaimName + name: name + resourceClaimTemplateName: resourceClaimTemplateName + schedulingConstraints: + topology: + - key: key + - key: key + disruptionMode: + all: "{}" + single: "{}" + schedulingPolicy: + gang: + minCount: 3 + basic: "{}" selector: matchExpressions: - values: @@ -204158,9 +215784,9 @@ components: activeDeadlineSeconds: 6 successPolicy: rules: - - succeededCount: 3 + - succeededCount: 2 succeededIndexes: succeededIndexes - - succeededCount: 3 + - succeededCount: 2 succeededIndexes: succeededIndexes properties: metadata: @@ -204328,9 +215954,9 @@ components: based on the success of some indexes. example: rules: - - succeededCount: 3 + - succeededCount: 2 succeededIndexes: succeededIndexes - - succeededCount: 3 + - succeededCount: 2 succeededIndexes: succeededIndexes properties: rules: @@ -204353,7 +215979,7 @@ components: Each rule must have at least one of the "succeededIndexes" or "succeededCount" specified. example: - succeededCount: 3 + succeededCount: 2 succeededIndexes: succeededIndexes properties: succeededCount: @@ -204942,13 +216568,13 @@ components: x-kubernetes-list-map-keys: - type type: object - v1alpha1.ClusterTrustBundle: + v1.ClusterTrustBundle: description: |- ClusterTrustBundle is a cluster-scoped container for X.509 trust anchors (root certificates). ClusterTrustBundle objects are considered to be readable by any authenticated user in the cluster, because they can be mounted by pods using the `clusterTrustBundle` projection. All service accounts have read access to ClusterTrustBundles by default. Users who only have namespace-level access to a cluster can read ClusterTrustBundles by impersonating a serviceaccount that they have access to. - It can be optionally associated with a particular assigner, in which case it contains one valid set of trust anchors for that signer. Signers may have multiple associated ClusterTrustBundles; each is an independent set of trust anchors for that signer. Admission control is used to enforce that only users with permissions on the signer can create or modify the corresponding bundle. + It can be optionally associated with a particular signer, in which case it contains one valid set of trust anchors for that signer. Signers may have multiple associated ClusterTrustBundles; each is an independent set of trust anchors for that signer. Admission control is used to enforce that only users with permissions on the signer can create or modify the corresponding bundle. example: metadata: generation: 6 @@ -205015,17 +216641,17 @@ components: metadata: $ref: "#/components/schemas/v1.ObjectMeta" spec: - $ref: "#/components/schemas/v1alpha1.ClusterTrustBundleSpec" + $ref: "#/components/schemas/v1.ClusterTrustBundleSpec" required: - spec type: object x-kubernetes-group-version-kind: - group: certificates.k8s.io kind: ClusterTrustBundle - version: v1alpha1 + version: v1 x-implements: - io.kubernetes.client.common.KubernetesObject - v1alpha1.ClusterTrustBundleList: + v1.ClusterTrustBundleList: description: ClusterTrustBundleList is a collection of ClusterTrustBundle objects example: metadata: @@ -205138,8 +216764,344 @@ components: apiVersion: apiVersion kind: kind spec: - trustBundle: trustBundle + trustBundle: trustBundle + signerName: signerName + properties: + apiVersion: + description: "APIVersion defines the versioned schema of this representation\ + \ of an object. Servers should convert recognized schemas to the latest\ + \ internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources" + type: string + items: + description: items is a collection of ClusterTrustBundle objects + items: + $ref: "#/components/schemas/v1.ClusterTrustBundle" + type: array + kind: + description: "Kind is a string value representing the REST resource this\ + \ object represents. Servers may infer this from the endpoint the client\ + \ submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds" + type: string + metadata: + $ref: "#/components/schemas/v1.ListMeta" + required: + - items + type: object + x-kubernetes-group-version-kind: + - group: certificates.k8s.io + kind: ClusterTrustBundleList + version: v1 + x-implements: + - io.kubernetes.client.common.KubernetesListObject + v1.ClusterTrustBundleSpec: + description: ClusterTrustBundleSpec contains the signer and trust anchors. + example: + trustBundle: trustBundle + signerName: signerName + properties: + signerName: + description: |- + signerName indicates the associated signer, if any. + + In order to create or update a ClusterTrustBundle that sets signerName, you must have the following cluster-scoped permission: group=certificates.k8s.io resource=signers resourceName= verb=attest. + + If signerName is not empty, then the ClusterTrustBundle object must be named with the signer name as a prefix (translating slashes to colons). For example, for the signer name `example.com/foo`, valid ClusterTrustBundle object names include `example.com:foo:abc` and `example.com:foo:v1`. + + If signerName is empty, then the ClusterTrustBundle object's name must not have such a prefix. + + List/watch requests for ClusterTrustBundles can filter on this field using a `spec.signerName=NAME` field selector. + type: string + trustBundle: + description: |- + trustBundle contains the individual X.509 trust anchors for this bundle, as PEM bundle of PEM-wrapped, DER-formatted X.509 certificates. + + The data must consist only of PEM certificate blocks that parse as valid X.509 certificates. Each certificate must include a basic constraints extension with the CA bit set. The API server will reject objects that contain duplicate certificates, or that use PEM block headers. + + Users of ClusterTrustBundles, including Kubelet, are free to reorder and deduplicate certificate blocks in this file according to their own logic, as well as to drop PEM block headers and inter-block data. + type: string + required: + - trustBundle + type: object + v1.PodCertificateRequest: + description: |- + PodCertificateRequest encodes a pod requesting a certificate from a given signer. + + Kubelets use this API to implement podCertificate projected volumes + example: + metadata: + generation: 6 + finalizers: + - finalizers + - finalizers + resourceVersion: resourceVersion + annotations: + key: annotations + generateName: generateName + deletionTimestamp: 2000-01-23T04:56:07.000+00:00 + labels: + key: labels + ownerReferences: + - uid: uid + controller: true + apiVersion: apiVersion + kind: kind + name: name + blockOwnerDeletion: true + - uid: uid + controller: true + apiVersion: apiVersion + kind: kind + name: name + blockOwnerDeletion: true + selfLink: selfLink + deletionGracePeriodSeconds: 0 + uid: uid + managedFields: + - apiVersion: apiVersion + fieldsV1: "{}" + manager: manager + subresource: subresource + time: 2000-01-23T04:56:07.000+00:00 + operation: operation + fieldsType: fieldsType + - apiVersion: apiVersion + fieldsV1: "{}" + manager: manager + subresource: subresource + time: 2000-01-23T04:56:07.000+00:00 + operation: operation + fieldsType: fieldsType + creationTimestamp: 2000-01-23T04:56:07.000+00:00 + name: name + namespace: namespace + apiVersion: apiVersion + kind: kind + spec: + nodeName: nodeName + stubPKCS10Request: stubPKCS10Request + podUID: podUID + serviceAccountName: serviceAccountName + maxExpirationSeconds: 0 + nodeUID: nodeUID + podName: podName + unverifiedUserAnnotations: + key: unverifiedUserAnnotations + serviceAccountUID: serviceAccountUID + signerName: signerName + status: + notAfter: 2000-01-23T04:56:07.000+00:00 + certificateChain: certificateChain + beginRefreshAt: 2000-01-23T04:56:07.000+00:00 + conditions: + - reason: reason + lastTransitionTime: 2000-01-23T04:56:07.000+00:00 + message: message + type: type + observedGeneration: 5 + status: status + - reason: reason + lastTransitionTime: 2000-01-23T04:56:07.000+00:00 + message: message + type: type + observedGeneration: 5 + status: status + notBefore: 2000-01-23T04:56:07.000+00:00 + properties: + apiVersion: + description: "APIVersion defines the versioned schema of this representation\ + \ of an object. Servers should convert recognized schemas to the latest\ + \ internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources" + type: string + kind: + description: "Kind is a string value representing the REST resource this\ + \ object represents. Servers may infer this from the endpoint the client\ + \ submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds" + type: string + metadata: + $ref: "#/components/schemas/v1.ObjectMeta" + spec: + $ref: "#/components/schemas/v1.PodCertificateRequestSpec" + status: + $ref: "#/components/schemas/v1.PodCertificateRequestStatus" + required: + - spec + type: object + x-kubernetes-group-version-kind: + - group: certificates.k8s.io + kind: PodCertificateRequest + version: v1 + x-implements: + - io.kubernetes.client.common.KubernetesObject + v1.PodCertificateRequestList: + description: PodCertificateRequestList is a collection of PodCertificateRequest + objects + example: + metadata: + remainingItemCount: 1 + continue: continue + resourceVersion: resourceVersion + shardInfo: + selector: selector + selfLink: selfLink + apiVersion: apiVersion + kind: kind + items: + - metadata: + generation: 6 + finalizers: + - finalizers + - finalizers + resourceVersion: resourceVersion + annotations: + key: annotations + generateName: generateName + deletionTimestamp: 2000-01-23T04:56:07.000+00:00 + labels: + key: labels + ownerReferences: + - uid: uid + controller: true + apiVersion: apiVersion + kind: kind + name: name + blockOwnerDeletion: true + - uid: uid + controller: true + apiVersion: apiVersion + kind: kind + name: name + blockOwnerDeletion: true + selfLink: selfLink + deletionGracePeriodSeconds: 0 + uid: uid + managedFields: + - apiVersion: apiVersion + fieldsV1: "{}" + manager: manager + subresource: subresource + time: 2000-01-23T04:56:07.000+00:00 + operation: operation + fieldsType: fieldsType + - apiVersion: apiVersion + fieldsV1: "{}" + manager: manager + subresource: subresource + time: 2000-01-23T04:56:07.000+00:00 + operation: operation + fieldsType: fieldsType + creationTimestamp: 2000-01-23T04:56:07.000+00:00 + name: name + namespace: namespace + apiVersion: apiVersion + kind: kind + spec: + nodeName: nodeName + stubPKCS10Request: stubPKCS10Request + podUID: podUID + serviceAccountName: serviceAccountName + maxExpirationSeconds: 0 + nodeUID: nodeUID + podName: podName + unverifiedUserAnnotations: + key: unverifiedUserAnnotations + serviceAccountUID: serviceAccountUID + signerName: signerName + status: + notAfter: 2000-01-23T04:56:07.000+00:00 + certificateChain: certificateChain + beginRefreshAt: 2000-01-23T04:56:07.000+00:00 + conditions: + - reason: reason + lastTransitionTime: 2000-01-23T04:56:07.000+00:00 + message: message + type: type + observedGeneration: 5 + status: status + - reason: reason + lastTransitionTime: 2000-01-23T04:56:07.000+00:00 + message: message + type: type + observedGeneration: 5 + status: status + notBefore: 2000-01-23T04:56:07.000+00:00 + - metadata: + generation: 6 + finalizers: + - finalizers + - finalizers + resourceVersion: resourceVersion + annotations: + key: annotations + generateName: generateName + deletionTimestamp: 2000-01-23T04:56:07.000+00:00 + labels: + key: labels + ownerReferences: + - uid: uid + controller: true + apiVersion: apiVersion + kind: kind + name: name + blockOwnerDeletion: true + - uid: uid + controller: true + apiVersion: apiVersion + kind: kind + name: name + blockOwnerDeletion: true + selfLink: selfLink + deletionGracePeriodSeconds: 0 + uid: uid + managedFields: + - apiVersion: apiVersion + fieldsV1: "{}" + manager: manager + subresource: subresource + time: 2000-01-23T04:56:07.000+00:00 + operation: operation + fieldsType: fieldsType + - apiVersion: apiVersion + fieldsV1: "{}" + manager: manager + subresource: subresource + time: 2000-01-23T04:56:07.000+00:00 + operation: operation + fieldsType: fieldsType + creationTimestamp: 2000-01-23T04:56:07.000+00:00 + name: name + namespace: namespace + apiVersion: apiVersion + kind: kind + spec: + nodeName: nodeName + stubPKCS10Request: stubPKCS10Request + podUID: podUID + serviceAccountName: serviceAccountName + maxExpirationSeconds: 0 + nodeUID: nodeUID + podName: podName + unverifiedUserAnnotations: + key: unverifiedUserAnnotations + serviceAccountUID: serviceAccountUID signerName: signerName + status: + notAfter: 2000-01-23T04:56:07.000+00:00 + certificateChain: certificateChain + beginRefreshAt: 2000-01-23T04:56:07.000+00:00 + conditions: + - reason: reason + lastTransitionTime: 2000-01-23T04:56:07.000+00:00 + message: message + type: type + observedGeneration: 5 + status: status + - reason: reason + lastTransitionTime: 2000-01-23T04:56:07.000+00:00 + message: message + type: type + observedGeneration: 5 + status: status + notBefore: 2000-01-23T04:56:07.000+00:00 properties: apiVersion: description: "APIVersion defines the versioned schema of this representation\ @@ -205147,9 +217109,9 @@ components: \ internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources" type: string items: - description: items is a collection of ClusterTrustBundle objects + description: items is a collection of PodCertificateRequest objects items: - $ref: "#/components/schemas/v1alpha1.ClusterTrustBundle" + $ref: "#/components/schemas/v1.PodCertificateRequest" type: array kind: description: "Kind is a string value representing the REST resource this\ @@ -205163,38 +217125,168 @@ components: type: object x-kubernetes-group-version-kind: - group: certificates.k8s.io - kind: ClusterTrustBundleList - version: v1alpha1 + kind: PodCertificateRequestList + version: v1 x-implements: - io.kubernetes.client.common.KubernetesListObject - v1alpha1.ClusterTrustBundleSpec: - description: ClusterTrustBundleSpec contains the signer and trust anchors. + v1.PodCertificateRequestSpec: + description: PodCertificateRequestSpec describes the certificate request. All + fields are immutable after creation. example: - trustBundle: trustBundle + nodeName: nodeName + stubPKCS10Request: stubPKCS10Request + podUID: podUID + serviceAccountName: serviceAccountName + maxExpirationSeconds: 0 + nodeUID: nodeUID + podName: podName + unverifiedUserAnnotations: + key: unverifiedUserAnnotations + serviceAccountUID: serviceAccountUID signerName: signerName properties: + maxExpirationSeconds: + description: |- + maxExpirationSeconds is the maximum lifetime permitted for the certificate. + + If omitted, kube-apiserver will set it to 86400(24 hours). kube-apiserver will reject values shorter than 3600 (1 hour). The maximum allowable value is 7862400 (91 days). + + The signer implementation is then free to issue a certificate with any lifetime *shorter* than MaxExpirationSeconds, but no shorter than 3600 seconds (1 hour). This constraint is enforced by kube-apiserver. `kubernetes.io` signers will never issue certificates with a lifetime longer than 24 hours. + format: int32 + type: integer + nodeName: + description: nodeName is the name of the node the pod is assigned to. + type: string + nodeUID: + description: nodeUID is the UID of the node the pod is assigned to. + type: string + podName: + description: podName is the name of the pod into which the certificate will + be mounted. + type: string + podUID: + description: podUID is the UID of the pod into which the certificate will + be mounted. + type: string + serviceAccountName: + description: serviceAccountName is the name of the service account the pod + is running as. + type: string + serviceAccountUID: + description: serviceAccountUID is the UID of the service account the pod + is running as. + type: string signerName: description: |- - signerName indicates the associated signer, if any. + signerName indicates the requested signer. - In order to create or update a ClusterTrustBundle that sets signerName, you must have the following cluster-scoped permission: group=certificates.k8s.io resource=signers resourceName= verb=attest. + All signer names beginning with `kubernetes.io` are reserved for use by the Kubernetes project. There is currently one well-known signer documented by the Kubernetes project, `kubernetes.io/kube-apiserver-client-pod`, which will issue client certificates understood by kube-apiserver. It is currently unimplemented. + type: string + stubPKCS10Request: + description: |- + A PKCS#10 certificate signing request (DER-serialized) generated by Kubelet using the subject private key. - If signerName is not empty, then the ClusterTrustBundle object must be named with the signer name as a prefix (translating slashes to colons). For example, for the signer name `example.com/foo`, valid ClusterTrustBundle object names include `example.com:foo:abc` and `example.com:foo:v1`. + Most signer implementations will ignore the contents of the CSR except to extract the subject public key. The API server automatically verifies the CSR signature during admission, so the signer does not need to repeat the verification. CSRs generated by kubelet are completely empty. - If signerName is empty, then the ClusterTrustBundle object's name must not have such a prefix. + The subject public key must be one of RSA3072, RSA4096, ECDSAP256, ECDSAP384, ECDSAP521, or ED25519. Note that this list may be expanded in the future. - List/watch requests for ClusterTrustBundles can filter on this field using a `spec.signerName=NAME` field selector. + Signer implementations do not need to support all key types supported by kube-apiserver and kubelet. If a signer does not support the key type used for a given PodCertificateRequest, it must deny the request by setting a status.conditions entry with a type of "Denied" and a reason of "UnsupportedKeyType". It may also suggest a key type that it does support in the message field. + format: byte + pattern: "^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$" type: string - trustBundle: + unverifiedUserAnnotations: + additionalProperties: + type: string description: |- - trustBundle contains the individual X.509 trust anchors for this bundle, as PEM bundle of PEM-wrapped, DER-formatted X.509 certificates. + unverifiedUserAnnotations allow pod authors to pass additional information to the signer implementation. Kubernetes does not restrict or validate this metadata in any way. - The data must consist only of PEM certificate blocks that parse as valid X.509 certificates. Each certificate must include a basic constraints extension with the CA bit set. The API server will reject objects that contain duplicate certificates, or that use PEM block headers. + Entries are subject to the same validation as object metadata annotations, with the addition that all keys must be domain-prefixed. No restrictions are placed on values, except an overall size limitation on the entire field. - Users of ClusterTrustBundles, including Kubelet, are free to reorder and deduplicate certificate blocks in this file according to their own logic, as well as to drop PEM block headers and inter-block data. - type: string + Signers should document the keys and values they support. Signers should deny requests that contain keys they do not recognize. + type: object required: - - trustBundle + - nodeName + - nodeUID + - podName + - podUID + - serviceAccountName + - serviceAccountUID + - signerName + - stubPKCS10Request + type: object + v1.PodCertificateRequestStatus: + description: "PodCertificateRequestStatus describes the status of the request,\ + \ and holds the certificate data if the request is issued." + example: + notAfter: 2000-01-23T04:56:07.000+00:00 + certificateChain: certificateChain + beginRefreshAt: 2000-01-23T04:56:07.000+00:00 + conditions: + - reason: reason + lastTransitionTime: 2000-01-23T04:56:07.000+00:00 + message: message + type: type + observedGeneration: 5 + status: status + - reason: reason + lastTransitionTime: 2000-01-23T04:56:07.000+00:00 + message: message + type: type + observedGeneration: 5 + status: status + notBefore: 2000-01-23T04:56:07.000+00:00 + properties: + beginRefreshAt: + description: |- + beginRefreshAt is the time at which the kubelet should begin trying to refresh the certificate. This field is set via the /status subresource, and must be set at the same time as certificateChain. Once populated, this field is immutable. + + This field is only a hint. Kubelet may start refreshing before or after this time if necessary. + format: date-time + type: string + certificateChain: + description: |- + certificateChain is populated with an issued certificate by the signer. This field is set via the /status subresource. Once populated, this field is immutable. + + If the certificate signing request is denied, a condition of type "Denied" is added and this field remains empty. If the signer cannot issue the certificate, a condition of type "Failed" is added and this field remains empty. + + Validation requirements: + 1. certificateChain must consist of one or more PEM-formatted certificates. + 2. Each entry must be a valid PEM-wrapped, DER-encoded ASN.1 Certificate as + described in section 4 of RFC5280. + + If more than one block is present, and the definition of the requested spec.signerName does not indicate otherwise, the first block is the issued certificate, and subsequent blocks should be treated as intermediate certificates and presented in TLS handshakes. When projecting the chain into a pod volume, kubelet will drop any data in-between the PEM blocks, as well as any PEM block headers. + type: string + conditions: + description: |- + conditions applied to the request. + + The types "Issued", "Denied", and "Failed" have special handling. At most one of these conditions may be present, and they must have status "True". + + If the request is denied with `Reason=UnsupportedKeyType`, the signer may suggest a key type that will work in the message field. + items: + $ref: "#/components/schemas/v1.Condition" + type: array + x-kubernetes-patch-strategy: merge + x-kubernetes-list-type: map + x-kubernetes-list-map-keys: + - type + x-kubernetes-patch-merge-key: type + notAfter: + description: "notAfter is the time at which the certificate expires. The\ + \ value must be the same as the notAfter value in the leaf certificate\ + \ in certificateChain. This field is set via the /status subresource.\ + \ Once populated, it is immutable. The signer must set this field at\ + \ the same time it sets certificateChain." + format: date-time + type: string + notBefore: + description: "notBefore is the time at which the certificate becomes valid.\ + \ The value must be the same as the notBefore value in the leaf certificate\ + \ in certificateChain. This field is set via the /status subresource.\ + \ Once populated, it is immutable. The signer must set this field at\ + \ the same time it sets certificateChain." + format: date-time + type: string type: object v1beta1.ClusterTrustBundle: description: |- @@ -205202,7 +217294,7 @@ components: ClusterTrustBundle objects are considered to be readable by any authenticated user in the cluster, because they can be mounted by pods using the `clusterTrustBundle` projection. All service accounts have read access to ClusterTrustBundles by default. Users who only have namespace-level access to a cluster can read ClusterTrustBundles by impersonating a serviceaccount that they have access to. - It can be optionally associated with a particular assigner, in which case it contains one valid set of trust anchors for that signer. Signers may have multiple associated ClusterTrustBundles; each is an independent set of trust anchors for that signer. Admission control is used to enforce that only users with permissions on the signer can create or modify the corresponding bundle. + It can be optionally associated with a particular signer, in which case it contains one valid set of trust anchors for that signer. Signers may have multiple associated ClusterTrustBundles; each is an independent set of trust anchors for that signer. Admission control is used to enforce that only users with permissions on the signer can create or modify the corresponding bundle. example: metadata: generation: 6 @@ -206219,7 +218311,7 @@ components: format: int32 type: integer preferredHolder: - description: PreferredHolder signals to a lease holder that the lease has + description: preferredHolder signals to a lease holder that the lease has a more optimal holder and should be given up. This field can only be set if Strategy is also set. type: string @@ -206229,7 +218321,7 @@ components: format: date-time type: string strategy: - description: "Strategy indicates the strategy for picking the leader for\ + description: "strategy indicates the strategy for picking the leader for\ \ coordinated leader election. If the field is not specified, there is\ \ no active coordination for this lease. (Alpha) Using this field requires\ \ the CoordinatedLeaderElection feature gate to be enabled." @@ -206480,27 +218572,27 @@ components: strategy: strategy properties: binaryVersion: - description: BinaryVersion is the binary version. It must be in a semver + description: binaryVersion is the binary version. It must be in a semver format without leading `v`. This field is required. type: string emulationVersion: - description: EmulationVersion is the emulation version. It must be in a + description: emulationVersion is the emulation version. It must be in a semver format without leading `v`. EmulationVersion must be less than or equal to BinaryVersion. This field is required when strategy is "OldestEmulationVersion" type: string leaseName: - description: LeaseName is the name of the lease for which this candidate + description: leaseName is the name of the lease for which this candidate is contending. This field is immutable. type: string pingTime: - description: "PingTime is the last time that the server has requested the\ + description: "pingTime is the last time that the server has requested the\ \ LeaseCandidate to renew. It is only done during leader election to check\ \ if any LeaseCandidates have become ineligible. When PingTime is updated,\ \ the LeaseCandidate will respond by updating RenewTime." format: date-time type: string renewTime: - description: "RenewTime is the time that the LeaseCandidate was last updated.\ + description: "renewTime is the time that the LeaseCandidate was last updated.\ \ Any time a Lease needs to do leader election, the PingTime field is\ \ updated to signal to the LeaseCandidate that they should update the\ \ RenewTime. Old LeaseCandidate objects are also garbage collected if\ @@ -206509,7 +218601,7 @@ components: format: date-time type: string strategy: - description: "Strategy is the strategy that coordinated leader election\ + description: "strategy is the strategy that coordinated leader election\ \ will use for picking the leader. If multiple candidates for the same\ \ Lease return different strategies, the strategy provided by the candidate\ \ with the latest BinaryVersion will be used. If there is still conflict,\ @@ -206766,29 +218858,29 @@ components: strategy: strategy properties: binaryVersion: - description: BinaryVersion is the binary version. It must be in a semver + description: binaryVersion is the binary version. It must be in a semver format without leading `v`. This field is required. type: string emulationVersion: - description: EmulationVersion is the emulation version. It must be in a + description: emulationVersion is the emulation version. It must be in a semver format without leading `v`. EmulationVersion must be less than or equal to BinaryVersion. This field is required when strategy is "OldestEmulationVersion" type: string leaseName: - description: LeaseName is the name of the lease for which this candidate + description: leaseName is the name of the lease for which this candidate is contending. The limits on this field are the same as on Lease.name. Multiple lease candidates may reference the same Lease.name. This field is immutable. type: string pingTime: - description: "PingTime is the last time that the server has requested the\ + description: "pingTime is the last time that the server has requested the\ \ LeaseCandidate to renew. It is only done during leader election to check\ \ if any LeaseCandidates have become ineligible. When PingTime is updated,\ \ the LeaseCandidate will respond by updating RenewTime." format: date-time type: string renewTime: - description: "RenewTime is the time that the LeaseCandidate was last updated.\ + description: "renewTime is the time that the LeaseCandidate was last updated.\ \ Any time a Lease needs to do leader election, the PingTime field is\ \ updated to signal to the LeaseCandidate that they should update the\ \ RenewTime. Old LeaseCandidate objects are also garbage collected if\ @@ -206797,7 +218889,7 @@ components: format: date-time type: string strategy: - description: "Strategy is the strategy that coordinated leader election\ + description: "strategy is the strategy that coordinated leader election\ \ will use for picking the leader. If multiple candidates for the same\ \ Lease return different strategies, the strategy provided by the candidate\ \ with the latest BinaryVersion will be used. If there is still conflict,\ @@ -206815,7 +218907,7 @@ components: An AWS EBS disk must exist before mounting to a container. The disk must also be in the same AWS zone as the kubelet. An AWS EBS disk can only be mounted as read/write once. AWS EBS volumes support ownership management and SELinux relabeling. example: - partition: 6 + partition: 3 volumeID: volumeID readOnly: true fsType: fsType @@ -207789,6 +219881,7 @@ components: key: matchLabels name: name optional: true + user: 4 signerName: signerName properties: labelSelector: @@ -207811,6 +219904,13 @@ components: Mutually-exclusive with name. The contents of all selected ClusterTrustBundles will be unified and deduplicated. type: string + user: + description: "user is Optional: The owner UID of the created file. If specified,\ + \ the item-level user field takes precedence over defaultUser. (Alpha)\ + \ This field requires the AtomicWriteVolumeUserFields feature gate to\ + \ be enabled." + format: int64 + type: integer required: - path type: object @@ -208159,7 +220259,9 @@ components: \ byte sequences that are not in the UTF-8 range. The keys stored in BinaryData\ \ must not overlap with the ones in the Data field, this is enforced during\ \ validation process. Using this field will require 1.10+ apiserver and\ - \ kubelet." + \ kubelet. Note: BinaryData keys are not currently propagated to container\ + \ env vars via ConfigMapKeyRef or ConfigMapRef env sources; only Data\ + \ keys are used." type: object data: additionalProperties: @@ -208194,7 +220296,7 @@ components: description: |- ConfigMapEnvSource selects a ConfigMap to populate the environment variables with. - The contents of the target ConfigMap's Data field will represent the key-value pairs as environment variables. + The contents of the target ConfigMap's Data field will represent the key-value pairs as environment variables. Keys in the BinaryData field are not currently propagated to container env vars. example: name: name optional: true @@ -208217,7 +220319,8 @@ components: key: key properties: key: - description: The key to select. + description: The key to select from the ConfigMap's Data field. Keys in + the BinaryData field are not currently propagated to container env vars. type: string name: description: "Name of the referent. This field is effectively required,\ @@ -208424,11 +220527,13 @@ components: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key properties: items: @@ -208460,15 +220565,18 @@ components: The contents of the target ConfigMap's Data field will be presented in a volume as files using the keys in the Data field as the file names, unless the items element is populated with specific mappings of keys to paths. ConfigMap volumes support ownership management and SELinux relabeling. example: - defaultMode: 3 + defaultMode: 6 name: name + defaultUser: 1 optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key properties: defaultMode: @@ -208481,6 +220589,13 @@ components: \ like fsGroup, and the result can be other mode bits set." format: int32 type: integer + defaultUser: + description: "defaultUser is Optional: The owner UID of the created files\ + \ by default. The defaultUser field is only used as a fallback when the\ + \ item-level user field is unset. (Alpha) This field requires the AtomicWriteVolumeUserFields\ + \ feature gate to be enabled." + format: int64 + type: integer items: description: "items if unspecified, each key-value pair in the Data field\ \ of the referenced ConfigMap will be projected into the volume as a file\ @@ -208573,10 +220688,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -208600,6 +220717,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -208607,6 +220727,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -208624,6 +220747,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -208644,6 +220768,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -208668,10 +220793,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -208717,10 +220844,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -209149,11 +221278,11 @@ components: message: message terminated: reason: reason - exitCode: 7 + exitCode: 4 startedAt: 2000-01-23T04:56:07.000+00:00 containerID: containerID message: message - signal: 6 + signal: 0 finishedAt: 2000-01-23T04:56:07.000+00:00 properties: running: @@ -209177,11 +221306,11 @@ components: description: ContainerStateTerminated is a terminated state of a container. example: reason: reason - exitCode: 7 + exitCode: 4 startedAt: 2000-01-23T04:56:07.000+00:00 containerID: containerID message: message - signal: 6 + signal: 0 finishedAt: 2000-01-23T04:56:07.000+00:00 properties: containerID: @@ -209248,7 +221377,7 @@ components: message: message image: image imageID: imageID - restartCount: 0 + restartCount: 6 resources: claims: - request: request @@ -209268,11 +221397,11 @@ components: message: message terminated: reason: reason - exitCode: 7 + exitCode: 4 startedAt: 2000-01-23T04:56:07.000+00:00 containerID: containerID message: message - signal: 6 + signal: 0 finishedAt: 2000-01-23T04:56:07.000+00:00 volumeMounts: - mountPath: mountPath @@ -209301,21 +221430,21 @@ components: message: message terminated: reason: reason - exitCode: 7 + exitCode: 4 startedAt: 2000-01-23T04:56:07.000+00:00 containerID: containerID message: message - signal: 6 + signal: 0 finishedAt: 2000-01-23T04:56:07.000+00:00 containerID: containerID stopSignal: stopSignal user: linux: - uid: 7 + uid: 4 gid: 4 supplementalGroups: - - 8 - - 8 + - 1 + - 1 properties: allocatedResources: additionalProperties: @@ -209410,11 +221539,11 @@ components: description: ContainerUser represents user identity information example: linux: - uid: 7 + uid: 4 gid: 4 supplementalGroups: - - 8 - - 8 + - 1 + - 1 properties: linux: $ref: "#/components/schemas/v1.LinuxContainerUser" @@ -209437,7 +221566,7 @@ components: mode. example: items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -209446,7 +221575,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -209455,6 +221585,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 properties: items: description: Items is a list of DownwardAPIVolume file @@ -209467,7 +221598,7 @@ components: description: DownwardAPIVolumeFile represents information to create the file containing the pod field example: - mode: 2 + mode: 6 path: path resourceFieldRef: divisor: divisor @@ -209476,6 +221607,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 properties: fieldRef: $ref: "#/components/schemas/v1.ObjectFieldSelector" @@ -209495,6 +221627,13 @@ components: type: string resourceFieldRef: $ref: "#/components/schemas/v1.ResourceFieldSelector" + user: + description: "user is Optional: The owner UID of the created file. If specified,\ + \ the item-level user field takes precedence over defaultUser. (Alpha)\ + \ This field requires the AtomicWriteVolumeUserFields feature gate to\ + \ be enabled." + format: int64 + type: integer required: - path type: object @@ -209502,9 +221641,10 @@ components: description: DownwardAPIVolumeSource represents a volume containing downward API info. Downward API volumes support ownership management and SELinux relabeling. example: - defaultMode: 1 + defaultMode: 6 + defaultUser: 5 items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -209513,7 +221653,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -209522,6 +221663,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 properties: defaultMode: description: "Optional: mode bits to use on created files by default. Must\ @@ -209534,6 +221676,13 @@ components: \ result can be other mode bits set." format: int32 type: integer + defaultUser: + description: "defaultUser is Optional: The owner UID of the created files\ + \ by default. The defaultUser field is only used as a fallback when the\ + \ item-level user field is unset. (Alpha) This field requires the AtomicWriteVolumeUserFields\ + \ feature gate to be enabled." + format: int64 + type: integer items: description: Items is a list of downward API volume file items: @@ -209545,6 +221694,7 @@ components: description: Represents an empty directory for a pod. Empty directory volumes support ownership management and SELinux relabeling. example: + mode: 3 sizeLimit: sizeLimit medium: medium properties: @@ -209553,6 +221703,16 @@ components: \ this directory. The default is \"\" which means to use the node's default\ \ medium. Must be an empty string (default) or Memory. More info: https://kubernetes.io/docs/concepts/storage/volumes#emptydir" type: string + mode: + description: "mode specifies the permission bits for the emptyDir directory,\ + \ in numeric notation (e.g., 0755, 01777). Must be a value between 0000\ + \ and 01777. If not specified, defaults to 0777. This might be in conflict\ + \ with other options that affect the file mode, like fsGroup. If fsGroup\ + \ is specified, the fsGroup permissions will override the mode specified\ + \ here. This field has no effect on Windows. This field is alpha and requires\ + \ EmptyDirVolumeMode featuregate to be enabled." + format: int32 + type: integer sizeLimit: description: "Quantity is a fixed-point representation of a number. It provides\ \ convenient marshaling/unmarshaling in JSON and YAML, in addition to\ @@ -210488,10 +222648,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -210515,6 +222677,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -210522,6 +222687,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -210539,6 +222707,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -210559,6 +222728,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -210583,10 +222753,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -210632,10 +222804,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -211368,6 +223542,35 @@ components: description: Node name on which the event is generated. type: string type: object + v1.EvictionResponder: + description: EvictionResponder allows you to specify the responder reacting + to an Eviction. Responders should observe and communicate through the Eviction + Resource API to help with the graceful eviction of a target (e.g. termination + of a pod). + example: + name: name + priority: 7 + properties: + name: + description: |- + name allows you to identify the responder responding to the Eviction. + + It must be a valid domain-prefixed key (such as "acme.io/foo"). Domain names *.k8s.io and *.kubernetes.io are reserved. This field must be unique for each responder. This field is required. + type: string + priority: + description: |- + priority for this responder. Higher priorities are selected first by the evictionrequest-controller. If there are responders with the same priority, the responder whose domain name comes first in the alphabetical higher domain order, will be picked. This means that the top domain labels are compared alphabetically first, followed by the lower domain labels. The key is compared last. + + The responder that is the managing controller of the pod should set the value of this field to 10000 to allow both for preemption or fallback registration by other responders. + + The minimum value is 0 and the maximum value is 100000. The interval 0-999 is reserved for responders with *.k8s.io suffix. This field is required. + format: int32 + type: integer + required: + - name + - priority + type: object + x-kubernetes-map-type: atomic v1.ExecAction: description: ExecAction describes a "run in container" action. example: @@ -211392,7 +223595,7 @@ components: be mounted as read/write once. Fibre Channel volumes support ownership management and SELinux relabeling. example: - lun: 6 + lun: 7 targetWWNs: - targetWWNs - targetWWNs @@ -211557,7 +223760,7 @@ components: A GCE PD must exist before mounting to a container. The disk must also be in the same GCE project and zone as the kubelet. A GCE PD can only be mounted as read/write once or read-only many times. GCE PDs support ownership management and SELinux relabeling. example: - partition: 6 + partition: 0 readOnly: true pdName: pdName fsType: fsType @@ -211590,9 +223793,16 @@ components: v1.GRPCAction: description: GRPCAction specifies an action involving a GRPC service. example: + mode: mode port: 2 service: service properties: + mode: + description: "mode specifies the connection mode for the gRPC health probe.\ + \ Set to \"TLS\" to use TLS without certificate verification. Set to \"\ + Plaintext\" to use a plaintext (insecure) connection explicitly. If not\ + \ specified, the probe uses a plaintext (insecure) connection." + type: string port: description: Port number of the gRPC service. Number must be in the range 1 to 65535. @@ -211687,6 +223897,7 @@ components: description: HTTPGetAction describes an action based on HTTP Get requests. example: path: path + protocol: protocol scheme: scheme port: port host: host @@ -211717,6 +223928,10 @@ components: \ JSON field that can accept a name or number." format: int-or-string type: string + protocol: + description: Protocol selects the wire protocol for the probe connection. + Nil defaults to HTTP/1.1. + type: string scheme: description: Scheme to use for connecting to the host. Defaults to HTTP. type: string @@ -211870,7 +224085,7 @@ components: example: chapAuthSession: true iscsiInterface: iscsiInterface - lun: 5 + lun: 7 chapAuthDiscovery: true iqn: iqn portals: @@ -211980,8 +224195,9 @@ components: v1.KeyToPath: description: Maps a string key to a path within a volume. example: - mode: 6 + mode: 2 path: path + user: 6 key: key properties: key: @@ -212002,6 +224218,13 @@ components: not be an absolute path. May not contain the path element '..'. May not start with the string '..'. type: string + user: + description: "user is Optional: The owner UID of the created file. If specified,\ + \ the item-level user field takes precedence over defaultUser. (Alpha)\ + \ This field requires the AtomicWriteVolumeUserFields feature gate to\ + \ be enabled." + format: int64 + type: integer required: - key - path @@ -212025,6 +224248,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -212045,6 +224269,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -212082,6 +224307,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -212475,11 +224701,11 @@ components: description: LinuxContainerUser represents user identity information in Linux containers example: - uid: 7 + uid: 4 gid: 4 supplementalGroups: - - 8 - - 8 + - 1 + - 1 properties: gid: description: GID is the primary gid initially attached to the first process @@ -213051,6 +225277,10 @@ components: apiVersion: apiVersion kind: kind spec: + podPreemptionPolicy: + disableResizePreemption: + - disableResizePreemption + - disableResizePreemption podCIDRs: - podCIDRs - podCIDRs @@ -213121,6 +225351,7 @@ components: - volumesInUse nodeInfo: machineID: machineID + runningInUserNamespace: true swap: capacity: 1 bootID: bootID @@ -213324,13 +225555,165 @@ components: requiredDuringSchedulingIgnoredDuringExecution: $ref: "#/components/schemas/v1.NodeSelector" type: object + v1.NodeAllocatableMappedResources: + description: NodeAllocatableMappedResources describes mapped node allocatable + resource allocations. + example: + quantity: quantity + name: name + properties: + name: + description: "Name is the name of the resource (e.g., cpu, memory)." + type: string + quantity: + description: "Quantity is a fixed-point representation of a number. It provides\ + \ convenient marshaling/unmarshaling in JSON and YAML, in addition to\ + \ String() and AsInt64() accessors.\n\nThe serialization format is:\n\n\ + ``` ::= \n\n\t(Note that \ + \ may be empty, from the \"\" case in .)\n\n \ + \ ::= 0 | 1 | ... | 9 ::= | \ + \ ::= | . | . | .\ + \ ::= \"+\" | \"-\" ::= |\ + \ ::= | \ + \ | ::= Ki | Mi | Gi | Ti | Pi | Ei\n\n\t\ + (International System of units; See: http://physics.nist.gov/cuu/Units/binary.html)\n\ + \n ::= m | \"\" | k | M | G | T | P | E\n\n\t(Note that\ + \ 1024 = 1Ki but 1000 = 1k; I didn't choose the capitalization.)\n\n\ + \ ::= \"e\" | \"E\" ```\n\nNo matter which\ + \ of the three exponent forms is used, no quantity may represent a number\ + \ greater than 2^63-1 in magnitude, nor may it have more than 3 decimal\ + \ places. Numbers larger or more precise will be capped or rounded up.\ + \ (E.g.: 0.1m will rounded up to 1m.) This may be extended in the future\ + \ if we require larger or smaller quantities.\n\nWhen a Quantity is parsed\ + \ from a string, it will remember the type of suffix it had, and will\ + \ use the same type again when it is serialized.\n\nBefore serializing,\ + \ Quantity will be put in \"canonical form\". This means that Exponent/suffix\ + \ will be adjusted up or down (with a corresponding increase or decrease\ + \ in Mantissa) such that:\n\n- No precision is lost - No fractional digits\ + \ will be emitted - The exponent (or suffix) is as large as possible.\n\ + \nThe sign will be omitted unless the number is negative.\n\nExamples:\n\ + \n- 1.5 will be serialized as \"1500m\" - 1.5Gi will be serialized as\ + \ \"1536Mi\"\n\nNote that the quantity will NEVER be internally represented\ + \ by a floating point number. That is the whole point of this exercise.\n\ + \nNon-canonical values will still parse as long as they are well formed,\ + \ but will be re-emitted in their canonical form. (So always use canonical\ + \ form, or don't diff.)\n\nThis format is intended to make it difficult\ + \ to use these numbers without writing some sort of special handling code\ + \ in the hopes that that will cause implementors to also use a fixed point\ + \ implementation." + format: quantity + type: string + required: + - name + - quantity + type: object + v1.NodeAllocatableOverheadResources: + description: NodeAllocatableOverheadResources describes auxiliary overhead resource + allocations. + example: + name: name + perPod: perPod + perContainer: perContainer + properties: + name: + description: "Name is the name of the resource (e.g., cpu, memory)." + type: string + perContainer: + description: "Quantity is a fixed-point representation of a number. It provides\ + \ convenient marshaling/unmarshaling in JSON and YAML, in addition to\ + \ String() and AsInt64() accessors.\n\nThe serialization format is:\n\n\ + ``` ::= \n\n\t(Note that \ + \ may be empty, from the \"\" case in .)\n\n \ + \ ::= 0 | 1 | ... | 9 ::= | \ + \ ::= | . | . | .\ + \ ::= \"+\" | \"-\" ::= |\ + \ ::= | \ + \ | ::= Ki | Mi | Gi | Ti | Pi | Ei\n\n\t\ + (International System of units; See: http://physics.nist.gov/cuu/Units/binary.html)\n\ + \n ::= m | \"\" | k | M | G | T | P | E\n\n\t(Note that\ + \ 1024 = 1Ki but 1000 = 1k; I didn't choose the capitalization.)\n\n\ + \ ::= \"e\" | \"E\" ```\n\nNo matter which\ + \ of the three exponent forms is used, no quantity may represent a number\ + \ greater than 2^63-1 in magnitude, nor may it have more than 3 decimal\ + \ places. Numbers larger or more precise will be capped or rounded up.\ + \ (E.g.: 0.1m will rounded up to 1m.) This may be extended in the future\ + \ if we require larger or smaller quantities.\n\nWhen a Quantity is parsed\ + \ from a string, it will remember the type of suffix it had, and will\ + \ use the same type again when it is serialized.\n\nBefore serializing,\ + \ Quantity will be put in \"canonical form\". This means that Exponent/suffix\ + \ will be adjusted up or down (with a corresponding increase or decrease\ + \ in Mantissa) such that:\n\n- No precision is lost - No fractional digits\ + \ will be emitted - The exponent (or suffix) is as large as possible.\n\ + \nThe sign will be omitted unless the number is negative.\n\nExamples:\n\ + \n- 1.5 will be serialized as \"1500m\" - 1.5Gi will be serialized as\ + \ \"1536Mi\"\n\nNote that the quantity will NEVER be internally represented\ + \ by a floating point number. That is the whole point of this exercise.\n\ + \nNon-canonical values will still parse as long as they are well formed,\ + \ but will be re-emitted in their canonical form. (So always use canonical\ + \ form, or don't diff.)\n\nThis format is intended to make it difficult\ + \ to use these numbers without writing some sort of special handling code\ + \ in the hopes that that will cause implementors to also use a fixed point\ + \ implementation." + format: quantity + type: string + perPod: + description: "Quantity is a fixed-point representation of a number. It provides\ + \ convenient marshaling/unmarshaling in JSON and YAML, in addition to\ + \ String() and AsInt64() accessors.\n\nThe serialization format is:\n\n\ + ``` ::= \n\n\t(Note that \ + \ may be empty, from the \"\" case in .)\n\n \ + \ ::= 0 | 1 | ... | 9 ::= | \ + \ ::= | . | . | .\ + \ ::= \"+\" | \"-\" ::= |\ + \ ::= | \ + \ | ::= Ki | Mi | Gi | Ti | Pi | Ei\n\n\t\ + (International System of units; See: http://physics.nist.gov/cuu/Units/binary.html)\n\ + \n ::= m | \"\" | k | M | G | T | P | E\n\n\t(Note that\ + \ 1024 = 1Ki but 1000 = 1k; I didn't choose the capitalization.)\n\n\ + \ ::= \"e\" | \"E\" ```\n\nNo matter which\ + \ of the three exponent forms is used, no quantity may represent a number\ + \ greater than 2^63-1 in magnitude, nor may it have more than 3 decimal\ + \ places. Numbers larger or more precise will be capped or rounded up.\ + \ (E.g.: 0.1m will rounded up to 1m.) This may be extended in the future\ + \ if we require larger or smaller quantities.\n\nWhen a Quantity is parsed\ + \ from a string, it will remember the type of suffix it had, and will\ + \ use the same type again when it is serialized.\n\nBefore serializing,\ + \ Quantity will be put in \"canonical form\". This means that Exponent/suffix\ + \ will be adjusted up or down (with a corresponding increase or decrease\ + \ in Mantissa) such that:\n\n- No precision is lost - No fractional digits\ + \ will be emitted - The exponent (or suffix) is as large as possible.\n\ + \nThe sign will be omitted unless the number is negative.\n\nExamples:\n\ + \n- 1.5 will be serialized as \"1500m\" - 1.5Gi will be serialized as\ + \ \"1536Mi\"\n\nNote that the quantity will NEVER be internally represented\ + \ by a floating point number. That is the whole point of this exercise.\n\ + \nNon-canonical values will still parse as long as they are well formed,\ + \ but will be re-emitted in their canonical form. (So always use canonical\ + \ form, or don't diff.)\n\nThis format is intended to make it difficult\ + \ to use these numbers without writing some sort of special handling code\ + \ in the hopes that that will cause implementors to also use a fixed point\ + \ implementation." + format: quantity + type: string + required: + - name + type: object v1.NodeAllocatableResourceClaimStatus: description: NodeAllocatableResourceClaimStatus describes the status of node allocatable resources allocated via DRA. example: + mapping: + - quantity: quantity + name: name + - quantity: quantity + name: name resourceClaimName: resourceClaimName - resources: - key: null + overhead: + - name: name + perPod: perPod + perContainer: perContainer + - name: name + perPod: perPod + perContainer: perContainer containers: - containers - containers @@ -213342,19 +225725,36 @@ components: type: string type: array x-kubernetes-list-type: set + mapping: + description: "Mapping contains allocations through devices mapped in the\ + \ device spec's `nodeAllocatableResources[...].mapping` field. This is\ + \ used by kubelet for pod level and container-level cgroup enforcement." + items: + $ref: "#/components/schemas/v1.NodeAllocatableMappedResources" + type: array + x-kubernetes-patch-strategy: merge + x-kubernetes-list-type: map + x-kubernetes-list-map-keys: + - name + x-kubernetes-patch-merge-key: name + overhead: + description: "Overhead contains allocations through devices mapped in the\ + \ device spec's `nodeAllocatableResources[...].overhead` field. This is\ + \ used by kubelet for pod level and container-level cgroup enforcement." + items: + $ref: "#/components/schemas/v1.NodeAllocatableOverheadResources" + type: array + x-kubernetes-patch-strategy: merge + x-kubernetes-list-type: map + x-kubernetes-list-map-keys: + - name + x-kubernetes-patch-merge-key: name resourceClaimName: description: ResourceClaimName is the resource claim referenced by the pod that resulted in this node allocatable resource allocation. type: string - resources: - additionalProperties: - $ref: "#/components/schemas/resource.Quantity" - description: Resources is a map of the node-allocatable resource name to - the aggregate quantity allocated to the claim. - type: object required: - resourceClaimName - - resources type: object v1.NodeCondition: description: NodeCondition contains condition information for a node. @@ -213541,6 +225941,10 @@ components: apiVersion: apiVersion kind: kind spec: + podPreemptionPolicy: + disableResizePreemption: + - disableResizePreemption + - disableResizePreemption podCIDRs: - podCIDRs - podCIDRs @@ -213611,6 +226015,7 @@ components: - volumesInUse nodeInfo: machineID: machineID + runningInUserNamespace: true swap: capacity: 1 bootID: bootID @@ -213707,6 +226112,10 @@ components: apiVersion: apiVersion kind: kind spec: + podPreemptionPolicy: + disableResizePreemption: + - disableResizePreemption + - disableResizePreemption podCIDRs: - podCIDRs - podCIDRs @@ -213777,6 +226186,7 @@ components: - volumesInUse nodeInfo: machineID: machineID + runningInUserNamespace: true swap: capacity: 1 bootID: bootID @@ -213851,6 +226261,26 @@ components: version: v1 x-implements: - io.kubernetes.client.common.KubernetesListObject + v1.NodePodPreemptionPolicy: + description: NodePodPreemptionPolicy defines the node-level policies governing + preemption for pods on this node. + example: + disableResizePreemption: + - disableResizePreemption + - disableResizePreemption + properties: + disableResizePreemption: + description: "DisableResizePreemption lists the owners (e.g., autoscalers,\ + \ operators, administrators) that have requested to disable scheduler\ + \ and Kubelet preemption for in-place pod resize on this node. If this\ + \ list is non-empty, resize-induced preemption is disabled on this node.\ + \ This is an alpha field and requires enabling the InPlacePodVerticalScalingSchedulerPreemption\ + \ feature gate." + items: + type: string + type: array + x-kubernetes-list-type: set + type: object v1.NodeRuntimeHandler: description: NodeRuntimeHandler is a set of runtime handler information. example: @@ -214018,6 +226448,10 @@ components: v1.NodeSpec: description: NodeSpec describes the attributes that a node is created with. example: + podPreemptionPolicy: + disableResizePreemption: + - disableResizePreemption + - disableResizePreemption podCIDRs: - podCIDRs - podCIDRs @@ -214061,6 +226495,8 @@ components: type: array x-kubernetes-patch-strategy: merge x-kubernetes-list-type: set + podPreemptionPolicy: + $ref: "#/components/schemas/v1.NodePodPreemptionPolicy" providerID: description: "ID of the node assigned by the cloud provider in the format:\ \ ://" @@ -214125,6 +226561,7 @@ components: - volumesInUse nodeInfo: machineID: machineID + runningInUserNamespace: true swap: capacity: 1 bootID: bootID @@ -214273,6 +226710,7 @@ components: description: NodeSystemInfo is a set of ids/uuids to uniquely identify the node. example: machineID: machineID + runningInUserNamespace: true swap: capacity: 1 bootID: bootID @@ -214316,6 +226754,9 @@ components: description: OS Image reported by the node from /etc/os-release (e.g. Debian GNU/Linux 7 (wheezy)). type: string + runningInUserNamespace: + description: Whether the node is running in a user namespace. + type: boolean swap: $ref: "#/components/schemas/v1.NodeSwapStatus" systemUUID: @@ -214519,7 +226960,7 @@ components: readOnly: true endpointsNamespace: endpointsNamespace gcePersistentDisk: - partition: 6 + partition: 0 readOnly: true pdName: pdName fsType: fsType @@ -214541,7 +226982,7 @@ components: readOnly: true fsType: fsType awsElasticBlockStore: - partition: 6 + partition: 3 volumeID: volumeID readOnly: true fsType: fsType @@ -214676,7 +227117,7 @@ components: volumePath: volumePath fsType: fsType fc: - lun: 6 + lun: 7 targetWWNs: - targetWWNs - targetWWNs @@ -214810,6 +227251,15 @@ components: allocatedResources: key: null currentVolumeAttributesClassName: currentVolumeAttributesClassName + healthStatus: + healthConditions: + - reason: reason + message: message + status: status + - reason: reason + message: message + status: status + lastTransitionTime: 2000-01-23T04:56:07.000+00:00 allocatedResourceStatuses: key: allocatedResourceStatuses accessModes: @@ -215000,118 +227450,136 @@ components: allocatedResources: key: null currentVolumeAttributesClassName: currentVolumeAttributesClassName - allocatedResourceStatuses: - key: allocatedResourceStatuses - accessModes: - - accessModes - - accessModes - conditions: - - reason: reason - lastTransitionTime: 2000-01-23T04:56:07.000+00:00 - message: message - type: type - lastProbeTime: 2000-01-23T04:56:07.000+00:00 - status: status - - reason: reason + healthStatus: + healthConditions: + - reason: reason + message: message + status: status + - reason: reason + message: message + status: status + lastTransitionTime: 2000-01-23T04:56:07.000+00:00 + allocatedResourceStatuses: + key: allocatedResourceStatuses + accessModes: + - accessModes + - accessModes + conditions: + - reason: reason + lastTransitionTime: 2000-01-23T04:56:07.000+00:00 + message: message + type: type + lastProbeTime: 2000-01-23T04:56:07.000+00:00 + status: status + - reason: reason + lastTransitionTime: 2000-01-23T04:56:07.000+00:00 + message: message + type: type + lastProbeTime: 2000-01-23T04:56:07.000+00:00 + status: status + modifyVolumeStatus: + targetVolumeAttributesClassName: targetVolumeAttributesClassName + status: status + capacity: + key: null + - metadata: + generation: 6 + finalizers: + - finalizers + - finalizers + resourceVersion: resourceVersion + annotations: + key: annotations + generateName: generateName + deletionTimestamp: 2000-01-23T04:56:07.000+00:00 + labels: + key: labels + ownerReferences: + - uid: uid + controller: true + apiVersion: apiVersion + kind: kind + name: name + blockOwnerDeletion: true + - uid: uid + controller: true + apiVersion: apiVersion + kind: kind + name: name + blockOwnerDeletion: true + selfLink: selfLink + deletionGracePeriodSeconds: 0 + uid: uid + managedFields: + - apiVersion: apiVersion + fieldsV1: "{}" + manager: manager + subresource: subresource + time: 2000-01-23T04:56:07.000+00:00 + operation: operation + fieldsType: fieldsType + - apiVersion: apiVersion + fieldsV1: "{}" + manager: manager + subresource: subresource + time: 2000-01-23T04:56:07.000+00:00 + operation: operation + fieldsType: fieldsType + creationTimestamp: 2000-01-23T04:56:07.000+00:00 + name: name + namespace: namespace + apiVersion: apiVersion + kind: kind + spec: + storageClassName: storageClassName + dataSourceRef: + apiGroup: apiGroup + kind: kind + name: name + namespace: namespace + volumeName: volumeName + volumeAttributesClassName: volumeAttributesClassName + resources: + requests: + key: null + limits: + key: null + selector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + accessModes: + - accessModes + - accessModes + dataSource: + apiGroup: apiGroup + kind: kind + name: name + volumeMode: volumeMode + status: + phase: phase + allocatedResources: + key: null + currentVolumeAttributesClassName: currentVolumeAttributesClassName + healthStatus: + healthConditions: + - reason: reason + message: message + status: status + - reason: reason + message: message + status: status lastTransitionTime: 2000-01-23T04:56:07.000+00:00 - message: message - type: type - lastProbeTime: 2000-01-23T04:56:07.000+00:00 - status: status - modifyVolumeStatus: - targetVolumeAttributesClassName: targetVolumeAttributesClassName - status: status - capacity: - key: null - - metadata: - generation: 6 - finalizers: - - finalizers - - finalizers - resourceVersion: resourceVersion - annotations: - key: annotations - generateName: generateName - deletionTimestamp: 2000-01-23T04:56:07.000+00:00 - labels: - key: labels - ownerReferences: - - uid: uid - controller: true - apiVersion: apiVersion - kind: kind - name: name - blockOwnerDeletion: true - - uid: uid - controller: true - apiVersion: apiVersion - kind: kind - name: name - blockOwnerDeletion: true - selfLink: selfLink - deletionGracePeriodSeconds: 0 - uid: uid - managedFields: - - apiVersion: apiVersion - fieldsV1: "{}" - manager: manager - subresource: subresource - time: 2000-01-23T04:56:07.000+00:00 - operation: operation - fieldsType: fieldsType - - apiVersion: apiVersion - fieldsV1: "{}" - manager: manager - subresource: subresource - time: 2000-01-23T04:56:07.000+00:00 - operation: operation - fieldsType: fieldsType - creationTimestamp: 2000-01-23T04:56:07.000+00:00 - name: name - namespace: namespace - apiVersion: apiVersion - kind: kind - spec: - storageClassName: storageClassName - dataSourceRef: - apiGroup: apiGroup - kind: kind - name: name - namespace: namespace - volumeName: volumeName - volumeAttributesClassName: volumeAttributesClassName - resources: - requests: - key: null - limits: - key: null - selector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - accessModes: - - accessModes - - accessModes - dataSource: - apiGroup: apiGroup - kind: kind - name: name - volumeMode: volumeMode - status: - phase: phase - allocatedResources: - key: null - currentVolumeAttributesClassName: currentVolumeAttributesClassName allocatedResourceStatuses: key: allocatedResourceStatuses accessModes: @@ -215251,6 +227719,15 @@ components: allocatedResources: key: null currentVolumeAttributesClassName: currentVolumeAttributesClassName + healthStatus: + healthConditions: + - reason: reason + message: message + status: status + - reason: reason + message: message + status: status + lastTransitionTime: 2000-01-23T04:56:07.000+00:00 allocatedResourceStatuses: key: allocatedResourceStatuses accessModes: @@ -215362,6 +227839,8 @@ components: \ VolumeAttributesClass the PVC is using. When unset, there is no VolumeAttributeClass\ \ applied to this PersistentVolumeClaim" type: string + healthStatus: + $ref: "#/components/schemas/v1.VolumeHealthStatus" modifyVolumeStatus: $ref: "#/components/schemas/v1.ModifyVolumeStatus" phase: @@ -215615,7 +228094,7 @@ components: readOnly: true endpointsNamespace: endpointsNamespace gcePersistentDisk: - partition: 6 + partition: 0 readOnly: true pdName: pdName fsType: fsType @@ -215637,7 +228116,7 @@ components: readOnly: true fsType: fsType awsElasticBlockStore: - partition: 6 + partition: 3 volumeID: volumeID readOnly: true fsType: fsType @@ -215772,7 +228251,7 @@ components: volumePath: volumePath fsType: fsType fc: - lun: 6 + lun: 7 targetWWNs: - targetWWNs - targetWWNs @@ -215909,7 +228388,7 @@ components: readOnly: true endpointsNamespace: endpointsNamespace gcePersistentDisk: - partition: 6 + partition: 0 readOnly: true pdName: pdName fsType: fsType @@ -215931,7 +228410,7 @@ components: readOnly: true fsType: fsType awsElasticBlockStore: - partition: 6 + partition: 3 volumeID: volumeID readOnly: true fsType: fsType @@ -216066,7 +228545,7 @@ components: volumePath: volumePath fsType: fsType fc: - lun: 6 + lun: 7 targetWWNs: - targetWWNs - targetWWNs @@ -216184,7 +228663,7 @@ components: readOnly: true endpointsNamespace: endpointsNamespace gcePersistentDisk: - partition: 6 + partition: 0 readOnly: true pdName: pdName fsType: fsType @@ -216206,7 +228685,7 @@ components: readOnly: true fsType: fsType awsElasticBlockStore: - partition: 6 + partition: 3 volumeID: volumeID readOnly: true fsType: fsType @@ -216341,7 +228820,7 @@ components: volumePath: volumePath fsType: fsType fc: - lun: 6 + lun: 7 targetWWNs: - targetWWNs - targetWWNs @@ -216551,7 +229030,7 @@ components: spec: dnsPolicy: dnsPolicy nodeName: nodeName - terminationGracePeriodSeconds: 9 + terminationGracePeriodSeconds: 6 dnsConfig: searches: - searches @@ -216592,17 +229071,17 @@ components: appArmorProfile: localhostProfile: localhostProfile type: type - fsGroup: 1 + fsGroup: 4 fsGroupChangePolicy: fsGroupChangePolicy seLinuxChangePolicy: seLinuxChangePolicy - runAsGroup: 4 + runAsGroup: 5 runAsNonRoot: true sysctls: - name: name value: value - name: name value: value - runAsUser: 5 + runAsUser: 9 seccompProfile: localhostProfile: localhostProfile type: type @@ -216622,12 +229101,12 @@ components: runtimeClassName: runtimeClassName tolerations: - effect: effect - tolerationSeconds: 6 + tolerationSeconds: 8 value: value key: key operator: operator - effect: effect - tolerationSeconds: 6 + tolerationSeconds: 8 value: value key: key operator: operator @@ -216649,7 +229128,7 @@ components: topologySpreadConstraints: - nodeTaintsPolicy: nodeTaintsPolicy whenUnsatisfiable: whenUnsatisfiable - maxSkew: 8 + maxSkew: 9 nodeAffinityPolicy: nodeAffinityPolicy labelSelector: matchExpressions: @@ -216665,14 +229144,14 @@ components: operator: operator matchLabels: key: matchLabels - minDomains: 9 + minDomains: 6 topologyKey: topologyKey matchLabelKeys: - matchLabelKeys - matchLabelKeys - nodeTaintsPolicy: nodeTaintsPolicy whenUnsatisfiable: whenUnsatisfiable - maxSkew: 8 + maxSkew: 9 nodeAffinityPolicy: nodeAffinityPolicy labelSelector: matchExpressions: @@ -216688,7 +229167,7 @@ components: operator: operator matchLabels: key: matchLabels - minDomains: 9 + minDomains: 6 topologyKey: topologyKey matchLabelKeys: - matchLabelKeys @@ -216800,19 +229279,22 @@ components: secret: secretName: secretName defaultMode: 7 + defaultUser: 5 optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key projected: sources: - downwardAPI: items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -216821,7 +229303,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -216830,39 +229313,46 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 configMap: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key podCertificate: certificateChainPath: certificateChainPath userAnnotations: key: userAnnotations keyPath: keyPath - maxExpirationSeconds: 3 + maxExpirationSeconds: 8 keyType: keyType + user: 7 credentialBundlePath: credentialBundlePath signerName: signerName secret: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key serviceAccountToken: path: path audience: audience expirationSeconds: 3 + user: 3 clusterTrustBundle: path: path labelSelector: @@ -216881,10 +229371,11 @@ components: key: matchLabels name: name optional: true + user: 4 signerName: signerName - downwardAPI: items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -216893,7 +229384,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -216902,39 +229394,46 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 configMap: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key podCertificate: certificateChainPath: certificateChainPath userAnnotations: key: userAnnotations keyPath: keyPath - maxExpirationSeconds: 3 + maxExpirationSeconds: 8 keyType: keyType + user: 7 credentialBundlePath: credentialBundlePath signerName: signerName secret: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key serviceAccountToken: path: path audience: audience expirationSeconds: 3 + user: 3 clusterTrustBundle: path: path labelSelector: @@ -216953,8 +229452,10 @@ components: key: matchLabels name: name optional: true + user: 4 signerName: signerName defaultMode: 6 + defaultUser: 0 cephfs: path: path secretRef: @@ -216978,6 +229479,7 @@ components: storagePool: storagePool gateway: gateway emptyDir: + mode: 3 sizeLimit: sizeLimit medium: medium glusterfs: @@ -216985,7 +229487,7 @@ components: endpoints: endpoints readOnly: true gcePersistentDisk: - partition: 6 + partition: 0 readOnly: true pdName: pdName fsType: fsType @@ -217009,9 +229511,10 @@ components: readOnly: true fsType: fsType downwardAPI: - defaultMode: 1 + defaultMode: 6 + defaultUser: 5 items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -217020,7 +229523,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -217029,8 +229533,9 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 awsElasticBlockStore: - partition: 6 + partition: 3 volumeID: volumeID readOnly: true fsType: fsType @@ -217040,7 +229545,7 @@ components: iscsi: chapAuthSession: true iscsiInterface: iscsiInterface - lun: 5 + lun: 7 chapAuthDiscovery: true iqn: iqn portals: @@ -217065,15 +229570,18 @@ components: - monitors - monitors configMap: - defaultMode: 3 + defaultMode: 6 name: name + defaultUser: 1 optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key storageos: volumeNamespace: volumeNamespace @@ -217112,7 +229620,7 @@ components: volumePath: volumePath fsType: fsType fc: - lun: 6 + lun: 7 targetWWNs: - targetWWNs - targetWWNs @@ -217230,19 +229738,22 @@ components: secret: secretName: secretName defaultMode: 7 + defaultUser: 5 optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key projected: sources: - downwardAPI: items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -217251,7 +229762,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -217260,39 +229772,46 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 configMap: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key podCertificate: certificateChainPath: certificateChainPath userAnnotations: key: userAnnotations keyPath: keyPath - maxExpirationSeconds: 3 + maxExpirationSeconds: 8 keyType: keyType + user: 7 credentialBundlePath: credentialBundlePath signerName: signerName secret: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key serviceAccountToken: path: path audience: audience expirationSeconds: 3 + user: 3 clusterTrustBundle: path: path labelSelector: @@ -217311,10 +229830,11 @@ components: key: matchLabels name: name optional: true + user: 4 signerName: signerName - downwardAPI: items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -217323,7 +229843,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -217332,39 +229853,46 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 configMap: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key podCertificate: certificateChainPath: certificateChainPath userAnnotations: key: userAnnotations keyPath: keyPath - maxExpirationSeconds: 3 + maxExpirationSeconds: 8 keyType: keyType + user: 7 credentialBundlePath: credentialBundlePath signerName: signerName secret: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key serviceAccountToken: path: path audience: audience expirationSeconds: 3 + user: 3 clusterTrustBundle: path: path labelSelector: @@ -217383,8 +229911,10 @@ components: key: matchLabels name: name optional: true + user: 4 signerName: signerName defaultMode: 6 + defaultUser: 0 cephfs: path: path secretRef: @@ -217408,6 +229938,7 @@ components: storagePool: storagePool gateway: gateway emptyDir: + mode: 3 sizeLimit: sizeLimit medium: medium glusterfs: @@ -217415,7 +229946,7 @@ components: endpoints: endpoints readOnly: true gcePersistentDisk: - partition: 6 + partition: 0 readOnly: true pdName: pdName fsType: fsType @@ -217439,9 +229970,10 @@ components: readOnly: true fsType: fsType downwardAPI: - defaultMode: 1 + defaultMode: 6 + defaultUser: 5 items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -217450,7 +229982,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -217459,8 +229992,9 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 awsElasticBlockStore: - partition: 6 + partition: 3 volumeID: volumeID readOnly: true fsType: fsType @@ -217470,7 +230004,7 @@ components: iscsi: chapAuthSession: true iscsiInterface: iscsiInterface - lun: 5 + lun: 7 chapAuthDiscovery: true iqn: iqn portals: @@ -217495,15 +230029,18 @@ components: - monitors - monitors configMap: - defaultMode: 3 + defaultMode: 6 name: name + defaultUser: 1 optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key storageos: volumeNamespace: volumeNamespace @@ -217542,7 +230079,7 @@ components: volumePath: volumePath fsType: fsType fc: - lun: 6 + lun: 7 targetWWNs: - targetWWNs - targetWWNs @@ -217631,10 +230168,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -217658,6 +230197,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -217665,6 +230207,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -217682,6 +230227,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -217702,6 +230248,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -217726,10 +230273,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -217775,10 +230324,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -217923,10 +230474,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -217950,6 +230503,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -217957,6 +230513,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -217974,6 +230533,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -217994,6 +230554,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -218018,10 +230579,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -218067,10 +230630,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -218150,9 +230715,14 @@ components: tty: true stdinOnce: true serviceAccount: serviceAccount - priority: 7 + priority: 1 restartPolicy: restartPolicy shareProcessNamespace: true + evictionResponders: + - name: name + priority: 7 + - name: name + priority: 7 hostUsers: true resourceClaims: - resourceClaimName: resourceClaimName @@ -218229,10 +230799,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -218256,6 +230828,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -218263,6 +230838,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -218280,6 +230858,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -218300,6 +230879,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -218324,10 +230904,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -218373,10 +230955,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -218520,10 +231104,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -218547,6 +231133,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -218554,6 +231143,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -218571,6 +231163,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -218591,6 +231184,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -218615,10 +231209,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -218664,10 +231260,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -218812,10 +231410,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -218839,6 +231439,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -218846,6 +231449,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -218863,6 +231469,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -218883,6 +231490,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -218907,10 +231515,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -218956,10 +231566,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -219103,10 +231715,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -219130,6 +231744,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -219137,6 +231754,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -219154,6 +231774,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -219174,6 +231795,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -219198,10 +231820,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -219247,10 +231871,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -219772,7 +232398,7 @@ components: message: message image: image imageID: imageID - restartCount: 0 + restartCount: 6 resources: claims: - request: request @@ -219792,11 +232418,11 @@ components: message: message terminated: reason: reason - exitCode: 7 + exitCode: 4 startedAt: 2000-01-23T04:56:07.000+00:00 containerID: containerID message: message - signal: 6 + signal: 0 finishedAt: 2000-01-23T04:56:07.000+00:00 volumeMounts: - mountPath: mountPath @@ -219825,21 +232451,21 @@ components: message: message terminated: reason: reason - exitCode: 7 + exitCode: 4 startedAt: 2000-01-23T04:56:07.000+00:00 containerID: containerID message: message - signal: 6 + signal: 0 finishedAt: 2000-01-23T04:56:07.000+00:00 containerID: containerID stopSignal: stopSignal user: linux: - uid: 7 + uid: 4 gid: 4 supplementalGroups: - - 8 - - 8 + - 1 + - 1 - allocatedResourcesStatus: - name: name resources: @@ -219859,7 +232485,7 @@ components: message: message image: image imageID: imageID - restartCount: 0 + restartCount: 6 resources: claims: - request: request @@ -219879,11 +232505,11 @@ components: message: message terminated: reason: reason - exitCode: 7 + exitCode: 4 startedAt: 2000-01-23T04:56:07.000+00:00 containerID: containerID message: message - signal: 6 + signal: 0 finishedAt: 2000-01-23T04:56:07.000+00:00 volumeMounts: - mountPath: mountPath @@ -219912,32 +232538,52 @@ components: message: message terminated: reason: reason - exitCode: 7 + exitCode: 4 startedAt: 2000-01-23T04:56:07.000+00:00 containerID: containerID message: message - signal: 6 + signal: 0 finishedAt: 2000-01-23T04:56:07.000+00:00 containerID: containerID stopSignal: stopSignal user: linux: - uid: 7 + uid: 4 gid: 4 supplementalGroups: - - 8 - - 8 + - 1 + - 1 hostIP: hostIP nodeAllocatableResourceClaimStatuses: - - resourceClaimName: resourceClaimName - resources: - key: null + - mapping: + - quantity: quantity + name: name + - quantity: quantity + name: name + resourceClaimName: resourceClaimName + overhead: + - name: name + perPod: perPod + perContainer: perContainer + - name: name + perPod: perPod + perContainer: perContainer containers: - containers - containers - - resourceClaimName: resourceClaimName - resources: - key: null + - mapping: + - quantity: quantity + name: name + - quantity: quantity + name: name + resourceClaimName: resourceClaimName + overhead: + - name: name + perPod: perPod + perContainer: perContainer + - name: name + perPod: perPod + perContainer: perContainer containers: - containers - containers @@ -219961,6 +232607,25 @@ components: limits: key: null nominatedNodeName: nominatedNodeName + volumeHealth: + - healthConditions: + - reason: reason + message: message + status: status + - reason: reason + message: message + status: status + name: name + lastTransitionTime: 2000-01-23T04:56:07.000+00:00 + - healthConditions: + - reason: reason + message: message + status: status + - reason: reason + message: message + status: status + name: name + lastTransitionTime: 2000-01-23T04:56:07.000+00:00 message: message podIPs: - ip: ip @@ -219988,7 +232653,7 @@ components: message: message image: image imageID: imageID - restartCount: 0 + restartCount: 6 resources: claims: - request: request @@ -220008,11 +232673,11 @@ components: message: message terminated: reason: reason - exitCode: 7 + exitCode: 4 startedAt: 2000-01-23T04:56:07.000+00:00 containerID: containerID message: message - signal: 6 + signal: 0 finishedAt: 2000-01-23T04:56:07.000+00:00 volumeMounts: - mountPath: mountPath @@ -220041,21 +232706,21 @@ components: message: message terminated: reason: reason - exitCode: 7 + exitCode: 4 startedAt: 2000-01-23T04:56:07.000+00:00 containerID: containerID message: message - signal: 6 + signal: 0 finishedAt: 2000-01-23T04:56:07.000+00:00 containerID: containerID stopSignal: stopSignal user: linux: - uid: 7 + uid: 4 gid: 4 supplementalGroups: - - 8 - - 8 + - 1 + - 1 - allocatedResourcesStatus: - name: name resources: @@ -220075,7 +232740,7 @@ components: message: message image: image imageID: imageID - restartCount: 0 + restartCount: 6 resources: claims: - request: request @@ -220095,11 +232760,11 @@ components: message: message terminated: reason: reason - exitCode: 7 + exitCode: 4 startedAt: 2000-01-23T04:56:07.000+00:00 containerID: containerID message: message - signal: 6 + signal: 0 finishedAt: 2000-01-23T04:56:07.000+00:00 volumeMounts: - mountPath: mountPath @@ -220128,21 +232793,21 @@ components: message: message terminated: reason: reason - exitCode: 7 + exitCode: 4 startedAt: 2000-01-23T04:56:07.000+00:00 containerID: containerID message: message - signal: 6 + signal: 0 finishedAt: 2000-01-23T04:56:07.000+00:00 containerID: containerID stopSignal: stopSignal user: linux: - uid: 7 + uid: 4 gid: 4 supplementalGroups: - - 8 - - 8 + - 1 + - 1 hostIPs: - ip: ip - ip: ip @@ -220154,14 +232819,14 @@ components: lastTransitionTime: 2000-01-23T04:56:07.000+00:00 message: message type: type - observedGeneration: 0 + observedGeneration: 3 lastProbeTime: 2000-01-23T04:56:07.000+00:00 status: status - reason: reason lastTransitionTime: 2000-01-23T04:56:07.000+00:00 message: message type: type - observedGeneration: 0 + observedGeneration: 3 lastProbeTime: 2000-01-23T04:56:07.000+00:00 status: status initContainerStatuses: @@ -220184,7 +232849,7 @@ components: message: message image: image imageID: imageID - restartCount: 0 + restartCount: 6 resources: claims: - request: request @@ -220204,11 +232869,11 @@ components: message: message terminated: reason: reason - exitCode: 7 + exitCode: 4 startedAt: 2000-01-23T04:56:07.000+00:00 containerID: containerID message: message - signal: 6 + signal: 0 finishedAt: 2000-01-23T04:56:07.000+00:00 volumeMounts: - mountPath: mountPath @@ -220237,21 +232902,21 @@ components: message: message terminated: reason: reason - exitCode: 7 + exitCode: 4 startedAt: 2000-01-23T04:56:07.000+00:00 containerID: containerID message: message - signal: 6 + signal: 0 finishedAt: 2000-01-23T04:56:07.000+00:00 containerID: containerID stopSignal: stopSignal user: linux: - uid: 7 + uid: 4 gid: 4 supplementalGroups: - - 8 - - 8 + - 1 + - 1 - allocatedResourcesStatus: - name: name resources: @@ -220271,7 +232936,7 @@ components: message: message image: image imageID: imageID - restartCount: 0 + restartCount: 6 resources: claims: - request: request @@ -220291,11 +232956,11 @@ components: message: message terminated: reason: reason - exitCode: 7 + exitCode: 4 startedAt: 2000-01-23T04:56:07.000+00:00 containerID: containerID message: message - signal: 6 + signal: 0 finishedAt: 2000-01-23T04:56:07.000+00:00 volumeMounts: - mountPath: mountPath @@ -220324,22 +232989,22 @@ components: message: message terminated: reason: reason - exitCode: 7 + exitCode: 4 startedAt: 2000-01-23T04:56:07.000+00:00 containerID: containerID message: message - signal: 6 + signal: 0 finishedAt: 2000-01-23T04:56:07.000+00:00 containerID: containerID stopSignal: stopSignal user: linux: - uid: 7 + uid: 4 gid: 4 supplementalGroups: - - 8 - - 8 - observedGeneration: 3 + - 1 + - 1 + observedGeneration: 7 properties: apiVersion: description: "APIVersion defines the versioned schema of this representation\ @@ -220849,8 +233514,9 @@ components: userAnnotations: key: userAnnotations keyPath: keyPath - maxExpirationSeconds: 3 + maxExpirationSeconds: 8 keyType: keyType + user: 7 credentialBundlePath: credentialBundlePath signerName: signerName properties: @@ -220896,6 +233562,13 @@ components: signerName: description: Kubelet's generated CSRs will be addressed to this signer. type: string + user: + description: "user is Optional: The owner UID of the created file. If specified,\ + \ the item-level user field takes precedence over defaultUser. (Alpha)\ + \ This field requires the AtomicWriteVolumeUserFields feature gate to\ + \ be enabled." + format: int64 + type: integer userAnnotations: additionalProperties: type: string @@ -220920,7 +233593,7 @@ components: lastTransitionTime: 2000-01-23T04:56:07.000+00:00 message: message type: type - observedGeneration: 0 + observedGeneration: 3 lastProbeTime: 2000-01-23T04:56:07.000+00:00 status: status properties: @@ -221114,7 +233787,7 @@ components: spec: dnsPolicy: dnsPolicy nodeName: nodeName - terminationGracePeriodSeconds: 9 + terminationGracePeriodSeconds: 6 dnsConfig: searches: - searches @@ -221155,17 +233828,17 @@ components: appArmorProfile: localhostProfile: localhostProfile type: type - fsGroup: 1 + fsGroup: 4 fsGroupChangePolicy: fsGroupChangePolicy seLinuxChangePolicy: seLinuxChangePolicy - runAsGroup: 4 + runAsGroup: 5 runAsNonRoot: true sysctls: - name: name value: value - name: name value: value - runAsUser: 5 + runAsUser: 9 seccompProfile: localhostProfile: localhostProfile type: type @@ -221185,12 +233858,12 @@ components: runtimeClassName: runtimeClassName tolerations: - effect: effect - tolerationSeconds: 6 + tolerationSeconds: 8 value: value key: key operator: operator - effect: effect - tolerationSeconds: 6 + tolerationSeconds: 8 value: value key: key operator: operator @@ -221212,7 +233885,7 @@ components: topologySpreadConstraints: - nodeTaintsPolicy: nodeTaintsPolicy whenUnsatisfiable: whenUnsatisfiable - maxSkew: 8 + maxSkew: 9 nodeAffinityPolicy: nodeAffinityPolicy labelSelector: matchExpressions: @@ -221228,14 +233901,14 @@ components: operator: operator matchLabels: key: matchLabels - minDomains: 9 + minDomains: 6 topologyKey: topologyKey matchLabelKeys: - matchLabelKeys - matchLabelKeys - nodeTaintsPolicy: nodeTaintsPolicy whenUnsatisfiable: whenUnsatisfiable - maxSkew: 8 + maxSkew: 9 nodeAffinityPolicy: nodeAffinityPolicy labelSelector: matchExpressions: @@ -221251,7 +233924,7 @@ components: operator: operator matchLabels: key: matchLabels - minDomains: 9 + minDomains: 6 topologyKey: topologyKey matchLabelKeys: - matchLabelKeys @@ -221363,19 +234036,22 @@ components: secret: secretName: secretName defaultMode: 7 + defaultUser: 5 optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key projected: sources: - downwardAPI: items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -221384,7 +234060,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -221393,39 +234070,46 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 configMap: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key podCertificate: certificateChainPath: certificateChainPath userAnnotations: key: userAnnotations keyPath: keyPath - maxExpirationSeconds: 3 + maxExpirationSeconds: 8 keyType: keyType + user: 7 credentialBundlePath: credentialBundlePath signerName: signerName secret: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key serviceAccountToken: path: path audience: audience expirationSeconds: 3 + user: 3 clusterTrustBundle: path: path labelSelector: @@ -221444,10 +234128,11 @@ components: key: matchLabels name: name optional: true + user: 4 signerName: signerName - downwardAPI: items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -221456,7 +234141,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -221465,39 +234151,46 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 configMap: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key podCertificate: certificateChainPath: certificateChainPath userAnnotations: key: userAnnotations keyPath: keyPath - maxExpirationSeconds: 3 + maxExpirationSeconds: 8 keyType: keyType + user: 7 credentialBundlePath: credentialBundlePath signerName: signerName secret: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key serviceAccountToken: path: path audience: audience expirationSeconds: 3 + user: 3 clusterTrustBundle: path: path labelSelector: @@ -221516,8 +234209,10 @@ components: key: matchLabels name: name optional: true + user: 4 signerName: signerName defaultMode: 6 + defaultUser: 0 cephfs: path: path secretRef: @@ -221541,6 +234236,7 @@ components: storagePool: storagePool gateway: gateway emptyDir: + mode: 3 sizeLimit: sizeLimit medium: medium glusterfs: @@ -221548,7 +234244,7 @@ components: endpoints: endpoints readOnly: true gcePersistentDisk: - partition: 6 + partition: 0 readOnly: true pdName: pdName fsType: fsType @@ -221572,9 +234268,10 @@ components: readOnly: true fsType: fsType downwardAPI: - defaultMode: 1 + defaultMode: 6 + defaultUser: 5 items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -221583,7 +234280,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -221592,8 +234290,9 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 awsElasticBlockStore: - partition: 6 + partition: 3 volumeID: volumeID readOnly: true fsType: fsType @@ -221603,7 +234302,7 @@ components: iscsi: chapAuthSession: true iscsiInterface: iscsiInterface - lun: 5 + lun: 7 chapAuthDiscovery: true iqn: iqn portals: @@ -221628,15 +234327,18 @@ components: - monitors - monitors configMap: - defaultMode: 3 + defaultMode: 6 name: name + defaultUser: 1 optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key storageos: volumeNamespace: volumeNamespace @@ -221675,7 +234377,7 @@ components: volumePath: volumePath fsType: fsType fc: - lun: 6 + lun: 7 targetWWNs: - targetWWNs - targetWWNs @@ -221793,19 +234495,22 @@ components: secret: secretName: secretName defaultMode: 7 + defaultUser: 5 optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key projected: sources: - downwardAPI: items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -221814,7 +234519,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -221823,39 +234529,46 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 configMap: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key podCertificate: certificateChainPath: certificateChainPath userAnnotations: key: userAnnotations keyPath: keyPath - maxExpirationSeconds: 3 + maxExpirationSeconds: 8 keyType: keyType + user: 7 credentialBundlePath: credentialBundlePath signerName: signerName secret: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key serviceAccountToken: path: path audience: audience expirationSeconds: 3 + user: 3 clusterTrustBundle: path: path labelSelector: @@ -221874,10 +234587,11 @@ components: key: matchLabels name: name optional: true + user: 4 signerName: signerName - downwardAPI: items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -221886,7 +234600,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -221895,39 +234610,46 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 configMap: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key podCertificate: certificateChainPath: certificateChainPath userAnnotations: key: userAnnotations keyPath: keyPath - maxExpirationSeconds: 3 + maxExpirationSeconds: 8 keyType: keyType + user: 7 credentialBundlePath: credentialBundlePath signerName: signerName secret: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key serviceAccountToken: path: path audience: audience expirationSeconds: 3 + user: 3 clusterTrustBundle: path: path labelSelector: @@ -221946,8 +234668,10 @@ components: key: matchLabels name: name optional: true + user: 4 signerName: signerName defaultMode: 6 + defaultUser: 0 cephfs: path: path secretRef: @@ -221971,6 +234695,7 @@ components: storagePool: storagePool gateway: gateway emptyDir: + mode: 3 sizeLimit: sizeLimit medium: medium glusterfs: @@ -221978,7 +234703,7 @@ components: endpoints: endpoints readOnly: true gcePersistentDisk: - partition: 6 + partition: 0 readOnly: true pdName: pdName fsType: fsType @@ -222002,9 +234727,10 @@ components: readOnly: true fsType: fsType downwardAPI: - defaultMode: 1 + defaultMode: 6 + defaultUser: 5 items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -222013,7 +234739,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -222022,8 +234749,9 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 awsElasticBlockStore: - partition: 6 + partition: 3 volumeID: volumeID readOnly: true fsType: fsType @@ -222033,7 +234761,7 @@ components: iscsi: chapAuthSession: true iscsiInterface: iscsiInterface - lun: 5 + lun: 7 chapAuthDiscovery: true iqn: iqn portals: @@ -222058,15 +234786,18 @@ components: - monitors - monitors configMap: - defaultMode: 3 + defaultMode: 6 name: name + defaultUser: 1 optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key storageos: volumeNamespace: volumeNamespace @@ -222105,7 +234836,7 @@ components: volumePath: volumePath fsType: fsType fc: - lun: 6 + lun: 7 targetWWNs: - targetWWNs - targetWWNs @@ -222194,10 +234925,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -222221,6 +234954,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -222228,6 +234964,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -222245,6 +234984,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -222265,6 +235005,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -222289,10 +235030,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -222338,10 +235081,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -222486,10 +235231,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -222513,6 +235260,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -222520,6 +235270,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -222537,6 +235290,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -222557,6 +235311,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -222581,10 +235336,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -222630,10 +235387,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -222713,9 +235472,14 @@ components: tty: true stdinOnce: true serviceAccount: serviceAccount - priority: 7 + priority: 1 restartPolicy: restartPolicy shareProcessNamespace: true + evictionResponders: + - name: name + priority: 7 + - name: name + priority: 7 hostUsers: true resourceClaims: - resourceClaimName: resourceClaimName @@ -222792,10 +235556,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -222819,6 +235585,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -222826,6 +235595,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -222843,6 +235615,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -222863,6 +235636,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -222887,10 +235661,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -222936,10 +235712,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -223083,10 +235861,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -223110,6 +235890,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -223117,6 +235900,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -223134,6 +235920,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -223154,6 +235941,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -223178,10 +235966,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -223227,10 +236017,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -223375,10 +236167,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -223402,6 +236196,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -223409,6 +236206,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -223426,6 +236226,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -223446,6 +236247,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -223470,10 +236272,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -223519,10 +236323,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -223666,10 +236472,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -223693,6 +236501,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -223700,6 +236511,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -223717,6 +236531,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -223737,6 +236552,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -223761,10 +236577,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -223810,10 +236628,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -224335,7 +237155,7 @@ components: message: message image: image imageID: imageID - restartCount: 0 + restartCount: 6 resources: claims: - request: request @@ -224355,11 +237175,11 @@ components: message: message terminated: reason: reason - exitCode: 7 + exitCode: 4 startedAt: 2000-01-23T04:56:07.000+00:00 containerID: containerID message: message - signal: 6 + signal: 0 finishedAt: 2000-01-23T04:56:07.000+00:00 volumeMounts: - mountPath: mountPath @@ -224388,21 +237208,21 @@ components: message: message terminated: reason: reason - exitCode: 7 + exitCode: 4 startedAt: 2000-01-23T04:56:07.000+00:00 containerID: containerID message: message - signal: 6 + signal: 0 finishedAt: 2000-01-23T04:56:07.000+00:00 containerID: containerID stopSignal: stopSignal user: linux: - uid: 7 + uid: 4 gid: 4 supplementalGroups: - - 8 - - 8 + - 1 + - 1 - allocatedResourcesStatus: - name: name resources: @@ -224422,7 +237242,7 @@ components: message: message image: image imageID: imageID - restartCount: 0 + restartCount: 6 resources: claims: - request: request @@ -224442,11 +237262,11 @@ components: message: message terminated: reason: reason - exitCode: 7 + exitCode: 4 startedAt: 2000-01-23T04:56:07.000+00:00 containerID: containerID message: message - signal: 6 + signal: 0 finishedAt: 2000-01-23T04:56:07.000+00:00 volumeMounts: - mountPath: mountPath @@ -224475,32 +237295,52 @@ components: message: message terminated: reason: reason - exitCode: 7 + exitCode: 4 startedAt: 2000-01-23T04:56:07.000+00:00 containerID: containerID message: message - signal: 6 + signal: 0 finishedAt: 2000-01-23T04:56:07.000+00:00 containerID: containerID stopSignal: stopSignal user: linux: - uid: 7 + uid: 4 gid: 4 supplementalGroups: - - 8 - - 8 + - 1 + - 1 hostIP: hostIP nodeAllocatableResourceClaimStatuses: - - resourceClaimName: resourceClaimName - resources: - key: null + - mapping: + - quantity: quantity + name: name + - quantity: quantity + name: name + resourceClaimName: resourceClaimName + overhead: + - name: name + perPod: perPod + perContainer: perContainer + - name: name + perPod: perPod + perContainer: perContainer containers: - containers - containers - - resourceClaimName: resourceClaimName - resources: - key: null + - mapping: + - quantity: quantity + name: name + - quantity: quantity + name: name + resourceClaimName: resourceClaimName + overhead: + - name: name + perPod: perPod + perContainer: perContainer + - name: name + perPod: perPod + perContainer: perContainer containers: - containers - containers @@ -224524,6 +237364,25 @@ components: limits: key: null nominatedNodeName: nominatedNodeName + volumeHealth: + - healthConditions: + - reason: reason + message: message + status: status + - reason: reason + message: message + status: status + name: name + lastTransitionTime: 2000-01-23T04:56:07.000+00:00 + - healthConditions: + - reason: reason + message: message + status: status + - reason: reason + message: message + status: status + name: name + lastTransitionTime: 2000-01-23T04:56:07.000+00:00 message: message podIPs: - ip: ip @@ -224551,7 +237410,7 @@ components: message: message image: image imageID: imageID - restartCount: 0 + restartCount: 6 resources: claims: - request: request @@ -224571,11 +237430,11 @@ components: message: message terminated: reason: reason - exitCode: 7 + exitCode: 4 startedAt: 2000-01-23T04:56:07.000+00:00 containerID: containerID message: message - signal: 6 + signal: 0 finishedAt: 2000-01-23T04:56:07.000+00:00 volumeMounts: - mountPath: mountPath @@ -224604,21 +237463,21 @@ components: message: message terminated: reason: reason - exitCode: 7 + exitCode: 4 startedAt: 2000-01-23T04:56:07.000+00:00 containerID: containerID message: message - signal: 6 + signal: 0 finishedAt: 2000-01-23T04:56:07.000+00:00 containerID: containerID stopSignal: stopSignal user: linux: - uid: 7 + uid: 4 gid: 4 supplementalGroups: - - 8 - - 8 + - 1 + - 1 - allocatedResourcesStatus: - name: name resources: @@ -224638,7 +237497,7 @@ components: message: message image: image imageID: imageID - restartCount: 0 + restartCount: 6 resources: claims: - request: request @@ -224658,11 +237517,11 @@ components: message: message terminated: reason: reason - exitCode: 7 + exitCode: 4 startedAt: 2000-01-23T04:56:07.000+00:00 containerID: containerID message: message - signal: 6 + signal: 0 finishedAt: 2000-01-23T04:56:07.000+00:00 volumeMounts: - mountPath: mountPath @@ -224691,21 +237550,21 @@ components: message: message terminated: reason: reason - exitCode: 7 + exitCode: 4 startedAt: 2000-01-23T04:56:07.000+00:00 containerID: containerID message: message - signal: 6 + signal: 0 finishedAt: 2000-01-23T04:56:07.000+00:00 containerID: containerID stopSignal: stopSignal user: linux: - uid: 7 + uid: 4 gid: 4 supplementalGroups: - - 8 - - 8 + - 1 + - 1 hostIPs: - ip: ip - ip: ip @@ -224717,14 +237576,14 @@ components: lastTransitionTime: 2000-01-23T04:56:07.000+00:00 message: message type: type - observedGeneration: 0 + observedGeneration: 3 lastProbeTime: 2000-01-23T04:56:07.000+00:00 status: status - reason: reason lastTransitionTime: 2000-01-23T04:56:07.000+00:00 message: message type: type - observedGeneration: 0 + observedGeneration: 3 lastProbeTime: 2000-01-23T04:56:07.000+00:00 status: status initContainerStatuses: @@ -224747,7 +237606,7 @@ components: message: message image: image imageID: imageID - restartCount: 0 + restartCount: 6 resources: claims: - request: request @@ -224767,11 +237626,11 @@ components: message: message terminated: reason: reason - exitCode: 7 + exitCode: 4 startedAt: 2000-01-23T04:56:07.000+00:00 containerID: containerID message: message - signal: 6 + signal: 0 finishedAt: 2000-01-23T04:56:07.000+00:00 volumeMounts: - mountPath: mountPath @@ -224800,21 +237659,21 @@ components: message: message terminated: reason: reason - exitCode: 7 + exitCode: 4 startedAt: 2000-01-23T04:56:07.000+00:00 containerID: containerID message: message - signal: 6 + signal: 0 finishedAt: 2000-01-23T04:56:07.000+00:00 containerID: containerID stopSignal: stopSignal user: linux: - uid: 7 + uid: 4 gid: 4 supplementalGroups: - - 8 - - 8 + - 1 + - 1 - allocatedResourcesStatus: - name: name resources: @@ -224834,7 +237693,7 @@ components: message: message image: image imageID: imageID - restartCount: 0 + restartCount: 6 resources: claims: - request: request @@ -224854,11 +237713,11 @@ components: message: message terminated: reason: reason - exitCode: 7 + exitCode: 4 startedAt: 2000-01-23T04:56:07.000+00:00 containerID: containerID message: message - signal: 6 + signal: 0 finishedAt: 2000-01-23T04:56:07.000+00:00 volumeMounts: - mountPath: mountPath @@ -224887,22 +237746,22 @@ components: message: message terminated: reason: reason - exitCode: 7 + exitCode: 4 startedAt: 2000-01-23T04:56:07.000+00:00 containerID: containerID message: message - signal: 6 + signal: 0 finishedAt: 2000-01-23T04:56:07.000+00:00 containerID: containerID stopSignal: stopSignal user: linux: - uid: 7 + uid: 4 gid: 4 supplementalGroups: - - 8 - - 8 - observedGeneration: 3 + - 1 + - 1 + observedGeneration: 7 - metadata: generation: 6 finalizers: @@ -224954,7 +237813,7 @@ components: spec: dnsPolicy: dnsPolicy nodeName: nodeName - terminationGracePeriodSeconds: 9 + terminationGracePeriodSeconds: 6 dnsConfig: searches: - searches @@ -224995,17 +237854,17 @@ components: appArmorProfile: localhostProfile: localhostProfile type: type - fsGroup: 1 + fsGroup: 4 fsGroupChangePolicy: fsGroupChangePolicy seLinuxChangePolicy: seLinuxChangePolicy - runAsGroup: 4 + runAsGroup: 5 runAsNonRoot: true sysctls: - name: name value: value - name: name value: value - runAsUser: 5 + runAsUser: 9 seccompProfile: localhostProfile: localhostProfile type: type @@ -225025,12 +237884,12 @@ components: runtimeClassName: runtimeClassName tolerations: - effect: effect - tolerationSeconds: 6 + tolerationSeconds: 8 value: value key: key operator: operator - effect: effect - tolerationSeconds: 6 + tolerationSeconds: 8 value: value key: key operator: operator @@ -225052,7 +237911,7 @@ components: topologySpreadConstraints: - nodeTaintsPolicy: nodeTaintsPolicy whenUnsatisfiable: whenUnsatisfiable - maxSkew: 8 + maxSkew: 9 nodeAffinityPolicy: nodeAffinityPolicy labelSelector: matchExpressions: @@ -225068,14 +237927,14 @@ components: operator: operator matchLabels: key: matchLabels - minDomains: 9 + minDomains: 6 topologyKey: topologyKey matchLabelKeys: - matchLabelKeys - matchLabelKeys - nodeTaintsPolicy: nodeTaintsPolicy whenUnsatisfiable: whenUnsatisfiable - maxSkew: 8 + maxSkew: 9 nodeAffinityPolicy: nodeAffinityPolicy labelSelector: matchExpressions: @@ -225091,7 +237950,7 @@ components: operator: operator matchLabels: key: matchLabels - minDomains: 9 + minDomains: 6 topologyKey: topologyKey matchLabelKeys: - matchLabelKeys @@ -225203,19 +238062,22 @@ components: secret: secretName: secretName defaultMode: 7 + defaultUser: 5 optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key projected: sources: - downwardAPI: items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -225224,7 +238086,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -225233,39 +238096,46 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 configMap: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key podCertificate: certificateChainPath: certificateChainPath userAnnotations: key: userAnnotations keyPath: keyPath - maxExpirationSeconds: 3 + maxExpirationSeconds: 8 keyType: keyType + user: 7 credentialBundlePath: credentialBundlePath signerName: signerName secret: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key serviceAccountToken: path: path audience: audience expirationSeconds: 3 + user: 3 clusterTrustBundle: path: path labelSelector: @@ -225284,10 +238154,11 @@ components: key: matchLabels name: name optional: true + user: 4 signerName: signerName - downwardAPI: items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -225296,7 +238167,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -225305,39 +238177,46 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 configMap: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key podCertificate: certificateChainPath: certificateChainPath userAnnotations: key: userAnnotations keyPath: keyPath - maxExpirationSeconds: 3 + maxExpirationSeconds: 8 keyType: keyType + user: 7 credentialBundlePath: credentialBundlePath signerName: signerName secret: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key serviceAccountToken: path: path audience: audience expirationSeconds: 3 + user: 3 clusterTrustBundle: path: path labelSelector: @@ -225356,8 +238235,10 @@ components: key: matchLabels name: name optional: true + user: 4 signerName: signerName defaultMode: 6 + defaultUser: 0 cephfs: path: path secretRef: @@ -225381,6 +238262,7 @@ components: storagePool: storagePool gateway: gateway emptyDir: + mode: 3 sizeLimit: sizeLimit medium: medium glusterfs: @@ -225388,7 +238270,7 @@ components: endpoints: endpoints readOnly: true gcePersistentDisk: - partition: 6 + partition: 0 readOnly: true pdName: pdName fsType: fsType @@ -225412,9 +238294,10 @@ components: readOnly: true fsType: fsType downwardAPI: - defaultMode: 1 + defaultMode: 6 + defaultUser: 5 items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -225423,7 +238306,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -225432,8 +238316,9 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 awsElasticBlockStore: - partition: 6 + partition: 3 volumeID: volumeID readOnly: true fsType: fsType @@ -225443,7 +238328,7 @@ components: iscsi: chapAuthSession: true iscsiInterface: iscsiInterface - lun: 5 + lun: 7 chapAuthDiscovery: true iqn: iqn portals: @@ -225468,15 +238353,18 @@ components: - monitors - monitors configMap: - defaultMode: 3 + defaultMode: 6 name: name + defaultUser: 1 optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key storageos: volumeNamespace: volumeNamespace @@ -225515,7 +238403,7 @@ components: volumePath: volumePath fsType: fsType fc: - lun: 6 + lun: 7 targetWWNs: - targetWWNs - targetWWNs @@ -225633,19 +238521,22 @@ components: secret: secretName: secretName defaultMode: 7 + defaultUser: 5 optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key projected: sources: - downwardAPI: items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -225654,7 +238545,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -225663,39 +238555,46 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 configMap: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key podCertificate: certificateChainPath: certificateChainPath userAnnotations: key: userAnnotations keyPath: keyPath - maxExpirationSeconds: 3 + maxExpirationSeconds: 8 keyType: keyType + user: 7 credentialBundlePath: credentialBundlePath signerName: signerName secret: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key serviceAccountToken: path: path audience: audience expirationSeconds: 3 + user: 3 clusterTrustBundle: path: path labelSelector: @@ -225714,10 +238613,11 @@ components: key: matchLabels name: name optional: true + user: 4 signerName: signerName - downwardAPI: items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -225726,7 +238626,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -225735,39 +238636,46 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 configMap: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key podCertificate: certificateChainPath: certificateChainPath userAnnotations: key: userAnnotations keyPath: keyPath - maxExpirationSeconds: 3 + maxExpirationSeconds: 8 keyType: keyType + user: 7 credentialBundlePath: credentialBundlePath signerName: signerName secret: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key serviceAccountToken: path: path audience: audience expirationSeconds: 3 + user: 3 clusterTrustBundle: path: path labelSelector: @@ -225786,8 +238694,10 @@ components: key: matchLabels name: name optional: true + user: 4 signerName: signerName defaultMode: 6 + defaultUser: 0 cephfs: path: path secretRef: @@ -225811,6 +238721,7 @@ components: storagePool: storagePool gateway: gateway emptyDir: + mode: 3 sizeLimit: sizeLimit medium: medium glusterfs: @@ -225818,7 +238729,7 @@ components: endpoints: endpoints readOnly: true gcePersistentDisk: - partition: 6 + partition: 0 readOnly: true pdName: pdName fsType: fsType @@ -225842,9 +238753,10 @@ components: readOnly: true fsType: fsType downwardAPI: - defaultMode: 1 + defaultMode: 6 + defaultUser: 5 items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -225853,7 +238765,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -225862,8 +238775,9 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 awsElasticBlockStore: - partition: 6 + partition: 3 volumeID: volumeID readOnly: true fsType: fsType @@ -225873,7 +238787,7 @@ components: iscsi: chapAuthSession: true iscsiInterface: iscsiInterface - lun: 5 + lun: 7 chapAuthDiscovery: true iqn: iqn portals: @@ -225898,15 +238812,18 @@ components: - monitors - monitors configMap: - defaultMode: 3 + defaultMode: 6 name: name + defaultUser: 1 optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key storageos: volumeNamespace: volumeNamespace @@ -225945,7 +238862,7 @@ components: volumePath: volumePath fsType: fsType fc: - lun: 6 + lun: 7 targetWWNs: - targetWWNs - targetWWNs @@ -226034,10 +238951,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -226061,6 +238980,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -226068,6 +238990,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -226085,6 +239010,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -226105,6 +239031,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -226129,10 +239056,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -226178,10 +239107,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -226326,10 +239257,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -226353,6 +239286,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -226360,6 +239296,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -226377,6 +239316,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -226397,6 +239337,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -226421,10 +239362,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -226470,10 +239413,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -226553,9 +239498,14 @@ components: tty: true stdinOnce: true serviceAccount: serviceAccount - priority: 7 + priority: 1 restartPolicy: restartPolicy shareProcessNamespace: true + evictionResponders: + - name: name + priority: 7 + - name: name + priority: 7 hostUsers: true resourceClaims: - resourceClaimName: resourceClaimName @@ -226632,10 +239582,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -226659,6 +239611,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -226666,6 +239621,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -226683,6 +239641,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -226703,6 +239662,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -226727,10 +239687,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -226776,10 +239738,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -226923,10 +239887,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -226950,6 +239916,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -226957,6 +239926,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -226974,6 +239946,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -226994,6 +239967,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -227018,10 +239992,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -227067,10 +240043,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -227215,10 +240193,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -227242,6 +240222,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -227249,6 +240232,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -227266,6 +240252,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -227286,6 +240273,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -227310,10 +240298,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -227359,10 +240349,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -227506,10 +240498,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -227533,6 +240527,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -227540,6 +240537,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -227557,6 +240557,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -227577,6 +240578,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -227601,10 +240603,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -227650,10 +240654,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -228175,7 +241181,7 @@ components: message: message image: image imageID: imageID - restartCount: 0 + restartCount: 6 resources: claims: - request: request @@ -228195,11 +241201,11 @@ components: message: message terminated: reason: reason - exitCode: 7 + exitCode: 4 startedAt: 2000-01-23T04:56:07.000+00:00 containerID: containerID message: message - signal: 6 + signal: 0 finishedAt: 2000-01-23T04:56:07.000+00:00 volumeMounts: - mountPath: mountPath @@ -228228,21 +241234,21 @@ components: message: message terminated: reason: reason - exitCode: 7 + exitCode: 4 startedAt: 2000-01-23T04:56:07.000+00:00 containerID: containerID message: message - signal: 6 + signal: 0 finishedAt: 2000-01-23T04:56:07.000+00:00 containerID: containerID stopSignal: stopSignal user: linux: - uid: 7 + uid: 4 gid: 4 supplementalGroups: - - 8 - - 8 + - 1 + - 1 - allocatedResourcesStatus: - name: name resources: @@ -228262,7 +241268,7 @@ components: message: message image: image imageID: imageID - restartCount: 0 + restartCount: 6 resources: claims: - request: request @@ -228282,11 +241288,11 @@ components: message: message terminated: reason: reason - exitCode: 7 + exitCode: 4 startedAt: 2000-01-23T04:56:07.000+00:00 containerID: containerID message: message - signal: 6 + signal: 0 finishedAt: 2000-01-23T04:56:07.000+00:00 volumeMounts: - mountPath: mountPath @@ -228315,32 +241321,52 @@ components: message: message terminated: reason: reason - exitCode: 7 + exitCode: 4 startedAt: 2000-01-23T04:56:07.000+00:00 containerID: containerID message: message - signal: 6 + signal: 0 finishedAt: 2000-01-23T04:56:07.000+00:00 containerID: containerID stopSignal: stopSignal user: linux: - uid: 7 + uid: 4 gid: 4 supplementalGroups: - - 8 - - 8 + - 1 + - 1 hostIP: hostIP nodeAllocatableResourceClaimStatuses: - - resourceClaimName: resourceClaimName - resources: - key: null + - mapping: + - quantity: quantity + name: name + - quantity: quantity + name: name + resourceClaimName: resourceClaimName + overhead: + - name: name + perPod: perPod + perContainer: perContainer + - name: name + perPod: perPod + perContainer: perContainer containers: - containers - containers - - resourceClaimName: resourceClaimName - resources: - key: null + - mapping: + - quantity: quantity + name: name + - quantity: quantity + name: name + resourceClaimName: resourceClaimName + overhead: + - name: name + perPod: perPod + perContainer: perContainer + - name: name + perPod: perPod + perContainer: perContainer containers: - containers - containers @@ -228364,6 +241390,25 @@ components: limits: key: null nominatedNodeName: nominatedNodeName + volumeHealth: + - healthConditions: + - reason: reason + message: message + status: status + - reason: reason + message: message + status: status + name: name + lastTransitionTime: 2000-01-23T04:56:07.000+00:00 + - healthConditions: + - reason: reason + message: message + status: status + - reason: reason + message: message + status: status + name: name + lastTransitionTime: 2000-01-23T04:56:07.000+00:00 message: message podIPs: - ip: ip @@ -228391,7 +241436,7 @@ components: message: message image: image imageID: imageID - restartCount: 0 + restartCount: 6 resources: claims: - request: request @@ -228411,11 +241456,11 @@ components: message: message terminated: reason: reason - exitCode: 7 + exitCode: 4 startedAt: 2000-01-23T04:56:07.000+00:00 containerID: containerID message: message - signal: 6 + signal: 0 finishedAt: 2000-01-23T04:56:07.000+00:00 volumeMounts: - mountPath: mountPath @@ -228444,21 +241489,21 @@ components: message: message terminated: reason: reason - exitCode: 7 + exitCode: 4 startedAt: 2000-01-23T04:56:07.000+00:00 containerID: containerID message: message - signal: 6 + signal: 0 finishedAt: 2000-01-23T04:56:07.000+00:00 containerID: containerID stopSignal: stopSignal user: linux: - uid: 7 + uid: 4 gid: 4 supplementalGroups: - - 8 - - 8 + - 1 + - 1 - allocatedResourcesStatus: - name: name resources: @@ -228478,7 +241523,7 @@ components: message: message image: image imageID: imageID - restartCount: 0 + restartCount: 6 resources: claims: - request: request @@ -228498,11 +241543,11 @@ components: message: message terminated: reason: reason - exitCode: 7 + exitCode: 4 startedAt: 2000-01-23T04:56:07.000+00:00 containerID: containerID message: message - signal: 6 + signal: 0 finishedAt: 2000-01-23T04:56:07.000+00:00 volumeMounts: - mountPath: mountPath @@ -228531,21 +241576,21 @@ components: message: message terminated: reason: reason - exitCode: 7 + exitCode: 4 startedAt: 2000-01-23T04:56:07.000+00:00 containerID: containerID message: message - signal: 6 + signal: 0 finishedAt: 2000-01-23T04:56:07.000+00:00 containerID: containerID stopSignal: stopSignal user: linux: - uid: 7 + uid: 4 gid: 4 supplementalGroups: - - 8 - - 8 + - 1 + - 1 hostIPs: - ip: ip - ip: ip @@ -228557,14 +241602,14 @@ components: lastTransitionTime: 2000-01-23T04:56:07.000+00:00 message: message type: type - observedGeneration: 0 + observedGeneration: 3 lastProbeTime: 2000-01-23T04:56:07.000+00:00 status: status - reason: reason lastTransitionTime: 2000-01-23T04:56:07.000+00:00 message: message type: type - observedGeneration: 0 + observedGeneration: 3 lastProbeTime: 2000-01-23T04:56:07.000+00:00 status: status initContainerStatuses: @@ -228587,7 +241632,7 @@ components: message: message image: image imageID: imageID - restartCount: 0 + restartCount: 6 resources: claims: - request: request @@ -228607,11 +241652,11 @@ components: message: message terminated: reason: reason - exitCode: 7 + exitCode: 4 startedAt: 2000-01-23T04:56:07.000+00:00 containerID: containerID message: message - signal: 6 + signal: 0 finishedAt: 2000-01-23T04:56:07.000+00:00 volumeMounts: - mountPath: mountPath @@ -228640,21 +241685,21 @@ components: message: message terminated: reason: reason - exitCode: 7 + exitCode: 4 startedAt: 2000-01-23T04:56:07.000+00:00 containerID: containerID message: message - signal: 6 + signal: 0 finishedAt: 2000-01-23T04:56:07.000+00:00 containerID: containerID stopSignal: stopSignal user: linux: - uid: 7 + uid: 4 gid: 4 supplementalGroups: - - 8 - - 8 + - 1 + - 1 - allocatedResourcesStatus: - name: name resources: @@ -228674,7 +241719,7 @@ components: message: message image: image imageID: imageID - restartCount: 0 + restartCount: 6 resources: claims: - request: request @@ -228694,11 +241739,11 @@ components: message: message terminated: reason: reason - exitCode: 7 + exitCode: 4 startedAt: 2000-01-23T04:56:07.000+00:00 containerID: containerID message: message - signal: 6 + signal: 0 finishedAt: 2000-01-23T04:56:07.000+00:00 volumeMounts: - mountPath: mountPath @@ -228727,22 +241772,22 @@ components: message: message terminated: reason: reason - exitCode: 7 + exitCode: 4 startedAt: 2000-01-23T04:56:07.000+00:00 containerID: containerID message: message - signal: 6 + signal: 0 finishedAt: 2000-01-23T04:56:07.000+00:00 containerID: containerID stopSignal: stopSignal user: linux: - uid: 7 + uid: 4 gid: 4 supplementalGroups: - - 8 - - 8 - observedGeneration: 3 + - 1 + - 1 + observedGeneration: 7 properties: apiVersion: description: "APIVersion defines the versioned schema of this representation\ @@ -228899,17 +241944,17 @@ components: appArmorProfile: localhostProfile: localhostProfile type: type - fsGroup: 1 + fsGroup: 4 fsGroupChangePolicy: fsGroupChangePolicy seLinuxChangePolicy: seLinuxChangePolicy - runAsGroup: 4 + runAsGroup: 5 runAsNonRoot: true sysctls: - name: name value: value - name: name value: value - runAsUser: 5 + runAsUser: 9 seccompProfile: localhostProfile: localhostProfile type: type @@ -228973,9 +242018,9 @@ components: "Recursive" means relabeling of all files on all Pod volumes by the container runtime. This may be slow for large volumes, but allows mixing privileged and unprivileged Pods sharing the same volume on the same node. - "MountOption" mounts all eligible Pod volumes with `-o context` mount option. This requires all Pods that share the same volume to use the same SELinux label. It is not possible to share the same volume among privileged and unprivileged Pods. Eligible volumes are in-tree FibreChannel and iSCSI volumes, and all CSI volumes whose CSI driver announces SELinux support by setting spec.seLinuxMount: true in their CSIDriver instance. Other volumes are always re-labelled recursively. "MountOption" value is allowed only when SELinuxMount feature gate is enabled. + "MountOption" mounts all eligible Pod volumes with `-o context` mount option. This requires all Pods that share the same volume to use the same SELinux label. It is not possible to share the same volume among privileged and unprivileged Pods. Eligible volumes are in-tree FibreChannel and iSCSI volumes, and all CSI volumes whose CSI driver announces SELinux support by setting spec.seLinuxMount: true in their CSIDriver instance. Other volumes are always re-labelled recursively. - If not specified and SELinuxMount feature gate is enabled, "MountOption" is used. If not specified and SELinuxMount feature gate is disabled, "MountOption" is used for ReadWriteOncePod volumes and "Recursive" for all other volumes. + If not specified, "MountOption" is used. This field affects only Pods that have SELinux label set, either in PodSecurityContext or in SecurityContext of all containers. @@ -229023,7 +242068,7 @@ components: example: dnsPolicy: dnsPolicy nodeName: nodeName - terminationGracePeriodSeconds: 9 + terminationGracePeriodSeconds: 6 dnsConfig: searches: - searches @@ -229064,17 +242109,17 @@ components: appArmorProfile: localhostProfile: localhostProfile type: type - fsGroup: 1 + fsGroup: 4 fsGroupChangePolicy: fsGroupChangePolicy seLinuxChangePolicy: seLinuxChangePolicy - runAsGroup: 4 + runAsGroup: 5 runAsNonRoot: true sysctls: - name: name value: value - name: name value: value - runAsUser: 5 + runAsUser: 9 seccompProfile: localhostProfile: localhostProfile type: type @@ -229094,12 +242139,12 @@ components: runtimeClassName: runtimeClassName tolerations: - effect: effect - tolerationSeconds: 6 + tolerationSeconds: 8 value: value key: key operator: operator - effect: effect - tolerationSeconds: 6 + tolerationSeconds: 8 value: value key: key operator: operator @@ -229121,7 +242166,7 @@ components: topologySpreadConstraints: - nodeTaintsPolicy: nodeTaintsPolicy whenUnsatisfiable: whenUnsatisfiable - maxSkew: 8 + maxSkew: 9 nodeAffinityPolicy: nodeAffinityPolicy labelSelector: matchExpressions: @@ -229137,14 +242182,14 @@ components: operator: operator matchLabels: key: matchLabels - minDomains: 9 + minDomains: 6 topologyKey: topologyKey matchLabelKeys: - matchLabelKeys - matchLabelKeys - nodeTaintsPolicy: nodeTaintsPolicy whenUnsatisfiable: whenUnsatisfiable - maxSkew: 8 + maxSkew: 9 nodeAffinityPolicy: nodeAffinityPolicy labelSelector: matchExpressions: @@ -229160,7 +242205,7 @@ components: operator: operator matchLabels: key: matchLabels - minDomains: 9 + minDomains: 6 topologyKey: topologyKey matchLabelKeys: - matchLabelKeys @@ -229272,19 +242317,22 @@ components: secret: secretName: secretName defaultMode: 7 + defaultUser: 5 optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key projected: sources: - downwardAPI: items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -229293,7 +242341,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -229302,39 +242351,46 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 configMap: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key podCertificate: certificateChainPath: certificateChainPath userAnnotations: key: userAnnotations keyPath: keyPath - maxExpirationSeconds: 3 + maxExpirationSeconds: 8 keyType: keyType + user: 7 credentialBundlePath: credentialBundlePath signerName: signerName secret: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key serviceAccountToken: path: path audience: audience expirationSeconds: 3 + user: 3 clusterTrustBundle: path: path labelSelector: @@ -229353,10 +242409,11 @@ components: key: matchLabels name: name optional: true + user: 4 signerName: signerName - downwardAPI: items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -229365,7 +242422,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -229374,39 +242432,46 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 configMap: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key podCertificate: certificateChainPath: certificateChainPath userAnnotations: key: userAnnotations keyPath: keyPath - maxExpirationSeconds: 3 + maxExpirationSeconds: 8 keyType: keyType + user: 7 credentialBundlePath: credentialBundlePath signerName: signerName secret: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key serviceAccountToken: path: path audience: audience expirationSeconds: 3 + user: 3 clusterTrustBundle: path: path labelSelector: @@ -229425,8 +242490,10 @@ components: key: matchLabels name: name optional: true + user: 4 signerName: signerName defaultMode: 6 + defaultUser: 0 cephfs: path: path secretRef: @@ -229450,6 +242517,7 @@ components: storagePool: storagePool gateway: gateway emptyDir: + mode: 3 sizeLimit: sizeLimit medium: medium glusterfs: @@ -229457,7 +242525,7 @@ components: endpoints: endpoints readOnly: true gcePersistentDisk: - partition: 6 + partition: 0 readOnly: true pdName: pdName fsType: fsType @@ -229481,9 +242549,10 @@ components: readOnly: true fsType: fsType downwardAPI: - defaultMode: 1 + defaultMode: 6 + defaultUser: 5 items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -229492,7 +242561,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -229501,8 +242571,9 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 awsElasticBlockStore: - partition: 6 + partition: 3 volumeID: volumeID readOnly: true fsType: fsType @@ -229512,7 +242583,7 @@ components: iscsi: chapAuthSession: true iscsiInterface: iscsiInterface - lun: 5 + lun: 7 chapAuthDiscovery: true iqn: iqn portals: @@ -229537,15 +242608,18 @@ components: - monitors - monitors configMap: - defaultMode: 3 + defaultMode: 6 name: name + defaultUser: 1 optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key storageos: volumeNamespace: volumeNamespace @@ -229584,7 +242658,7 @@ components: volumePath: volumePath fsType: fsType fc: - lun: 6 + lun: 7 targetWWNs: - targetWWNs - targetWWNs @@ -229702,19 +242776,22 @@ components: secret: secretName: secretName defaultMode: 7 + defaultUser: 5 optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key projected: sources: - downwardAPI: items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -229723,7 +242800,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -229732,39 +242810,46 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 configMap: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key podCertificate: certificateChainPath: certificateChainPath userAnnotations: key: userAnnotations keyPath: keyPath - maxExpirationSeconds: 3 + maxExpirationSeconds: 8 keyType: keyType + user: 7 credentialBundlePath: credentialBundlePath signerName: signerName secret: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key serviceAccountToken: path: path audience: audience expirationSeconds: 3 + user: 3 clusterTrustBundle: path: path labelSelector: @@ -229783,10 +242868,11 @@ components: key: matchLabels name: name optional: true + user: 4 signerName: signerName - downwardAPI: items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -229795,7 +242881,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -229804,39 +242891,46 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 configMap: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key podCertificate: certificateChainPath: certificateChainPath userAnnotations: key: userAnnotations keyPath: keyPath - maxExpirationSeconds: 3 + maxExpirationSeconds: 8 keyType: keyType + user: 7 credentialBundlePath: credentialBundlePath signerName: signerName secret: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key serviceAccountToken: path: path audience: audience expirationSeconds: 3 + user: 3 clusterTrustBundle: path: path labelSelector: @@ -229855,8 +242949,10 @@ components: key: matchLabels name: name optional: true + user: 4 signerName: signerName defaultMode: 6 + defaultUser: 0 cephfs: path: path secretRef: @@ -229880,6 +242976,7 @@ components: storagePool: storagePool gateway: gateway emptyDir: + mode: 3 sizeLimit: sizeLimit medium: medium glusterfs: @@ -229887,7 +242984,7 @@ components: endpoints: endpoints readOnly: true gcePersistentDisk: - partition: 6 + partition: 0 readOnly: true pdName: pdName fsType: fsType @@ -229911,9 +243008,10 @@ components: readOnly: true fsType: fsType downwardAPI: - defaultMode: 1 + defaultMode: 6 + defaultUser: 5 items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -229922,7 +243020,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -229931,8 +243030,9 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 awsElasticBlockStore: - partition: 6 + partition: 3 volumeID: volumeID readOnly: true fsType: fsType @@ -229942,7 +243042,7 @@ components: iscsi: chapAuthSession: true iscsiInterface: iscsiInterface - lun: 5 + lun: 7 chapAuthDiscovery: true iqn: iqn portals: @@ -229967,15 +243067,18 @@ components: - monitors - monitors configMap: - defaultMode: 3 + defaultMode: 6 name: name + defaultUser: 1 optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key storageos: volumeNamespace: volumeNamespace @@ -230014,7 +243117,7 @@ components: volumePath: volumePath fsType: fsType fc: - lun: 6 + lun: 7 targetWWNs: - targetWWNs - targetWWNs @@ -230103,10 +243206,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -230130,6 +243235,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -230137,6 +243245,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -230154,6 +243265,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -230174,6 +243286,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -230198,10 +243311,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -230247,10 +243362,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -230395,10 +243512,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -230422,6 +243541,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -230429,6 +243551,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -230446,6 +243571,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -230466,6 +243592,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -230490,10 +243617,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -230539,10 +243668,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -230622,9 +243753,14 @@ components: tty: true stdinOnce: true serviceAccount: serviceAccount - priority: 7 + priority: 1 restartPolicy: restartPolicy shareProcessNamespace: true + evictionResponders: + - name: name + priority: 7 + - name: name + priority: 7 hostUsers: true resourceClaims: - resourceClaimName: resourceClaimName @@ -230701,10 +243837,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -230728,6 +243866,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -230735,6 +243876,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -230752,6 +243896,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -230772,6 +243917,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -230796,10 +243942,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -230845,10 +243993,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -230992,10 +244142,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -231019,6 +244171,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -231026,6 +244181,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -231043,6 +244201,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -231063,6 +244222,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -231087,10 +244247,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -231136,10 +244298,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -231284,10 +244448,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -231311,6 +244477,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -231318,6 +244487,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -231335,6 +244507,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -231355,6 +244528,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -231379,10 +244553,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -231428,10 +244604,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -231575,10 +244753,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -231602,6 +244782,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -231609,6 +244792,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -231626,6 +244812,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -231646,6 +244833,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -231670,10 +244858,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -231719,10 +244909,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -232269,6 +245461,21 @@ components: x-kubernetes-list-map-keys: - name x-kubernetes-patch-merge-key: name + evictionResponders: + description: |- + evictionResponders reference responders that react to Evictions based on EvictionRequests. Responders should observe and communicate through the Eviction Resource API to help with the graceful termination of a pod. The responders are selected sequentially, according to their specified priority. + + Responders should periodically report on an eviction progress by updating the .status.responders[].heartbeatTime field of the Eviction object. If this field is not updated within the heartbeat deadline defined by the Eviction API (currently 20 minutes), the eviction is passed over to the next responder with a lower priority. If there is no other responder, the last default imperative-eviction.k8s.io/evictor responder with a priority of 100 will evict the pod using the imperative Eviction API (pods//eviction subresource). + + The maximum length of the responders list is 10. Responders are not supported when the pod is part of a PodGroup (.spec.schedulingGroup is set). This field can only be set on creation and is immutable afterwards. + items: + $ref: "#/components/schemas/v1.EvictionResponder" + type: array + x-kubernetes-patch-strategy: merge + x-kubernetes-list-type: map + x-kubernetes-list-map-keys: + - name + x-kubernetes-patch-merge-key: name hostAliases: description: HostAliases is an optional list of hosts and IPs that will be injected into the pod's hosts file if specified. @@ -232312,7 +245519,7 @@ components: description: |- HostnameOverride specifies an explicit override for the pod's hostname as perceived by the pod. This field only specifies the pod's hostname and does not affect its DNS records. When this field is set to a non-empty string: - It takes precedence over the values set in `hostname` and `subdomain`. - The Pod's hostname will be set to this value. - `setHostnameAsFQDN` must be nil or set to false. - `hostNetwork` must be set to false. - This field must be a valid DNS subdomain as defined in RFC 1123 and contain at most 64 characters. Requires the HostnameOverride feature gate to be enabled. + This field must be a valid DNS subdomain as defined in RFC 1123 and contain at most 64 characters. type: string imagePullSecrets: description: "ImagePullSecrets is an optional list of references to secrets\ @@ -232381,8 +245588,10 @@ components: type: object preemptionPolicy: description: "PreemptionPolicy is the Policy for preempting pods with lower\ - \ priority. One of Never, PreemptLowerPriority. Defaults to PreemptLowerPriority\ - \ if unset." + \ priority. One of Never, PreemptLowerPriority. When Priority Admission\ + \ Controller is enabled, it prevents users from setting this field. The\ + \ admission controller populates this field from PriorityClassName. Defaults\ + \ to PreemptLowerPriority if unset." type: string priority: description: "The priority value. Various system components use this field\ @@ -232566,7 +245775,7 @@ components: message: message image: image imageID: imageID - restartCount: 0 + restartCount: 6 resources: claims: - request: request @@ -232586,11 +245795,11 @@ components: message: message terminated: reason: reason - exitCode: 7 + exitCode: 4 startedAt: 2000-01-23T04:56:07.000+00:00 containerID: containerID message: message - signal: 6 + signal: 0 finishedAt: 2000-01-23T04:56:07.000+00:00 volumeMounts: - mountPath: mountPath @@ -232619,21 +245828,21 @@ components: message: message terminated: reason: reason - exitCode: 7 + exitCode: 4 startedAt: 2000-01-23T04:56:07.000+00:00 containerID: containerID message: message - signal: 6 + signal: 0 finishedAt: 2000-01-23T04:56:07.000+00:00 containerID: containerID stopSignal: stopSignal user: linux: - uid: 7 + uid: 4 gid: 4 supplementalGroups: - - 8 - - 8 + - 1 + - 1 - allocatedResourcesStatus: - name: name resources: @@ -232653,7 +245862,7 @@ components: message: message image: image imageID: imageID - restartCount: 0 + restartCount: 6 resources: claims: - request: request @@ -232673,11 +245882,11 @@ components: message: message terminated: reason: reason - exitCode: 7 + exitCode: 4 startedAt: 2000-01-23T04:56:07.000+00:00 containerID: containerID message: message - signal: 6 + signal: 0 finishedAt: 2000-01-23T04:56:07.000+00:00 volumeMounts: - mountPath: mountPath @@ -232706,32 +245915,52 @@ components: message: message terminated: reason: reason - exitCode: 7 + exitCode: 4 startedAt: 2000-01-23T04:56:07.000+00:00 containerID: containerID message: message - signal: 6 + signal: 0 finishedAt: 2000-01-23T04:56:07.000+00:00 containerID: containerID stopSignal: stopSignal user: linux: - uid: 7 + uid: 4 gid: 4 supplementalGroups: - - 8 - - 8 + - 1 + - 1 hostIP: hostIP nodeAllocatableResourceClaimStatuses: - - resourceClaimName: resourceClaimName - resources: - key: null + - mapping: + - quantity: quantity + name: name + - quantity: quantity + name: name + resourceClaimName: resourceClaimName + overhead: + - name: name + perPod: perPod + perContainer: perContainer + - name: name + perPod: perPod + perContainer: perContainer containers: - containers - containers - - resourceClaimName: resourceClaimName - resources: - key: null + - mapping: + - quantity: quantity + name: name + - quantity: quantity + name: name + resourceClaimName: resourceClaimName + overhead: + - name: name + perPod: perPod + perContainer: perContainer + - name: name + perPod: perPod + perContainer: perContainer containers: - containers - containers @@ -232755,6 +245984,25 @@ components: limits: key: null nominatedNodeName: nominatedNodeName + volumeHealth: + - healthConditions: + - reason: reason + message: message + status: status + - reason: reason + message: message + status: status + name: name + lastTransitionTime: 2000-01-23T04:56:07.000+00:00 + - healthConditions: + - reason: reason + message: message + status: status + - reason: reason + message: message + status: status + name: name + lastTransitionTime: 2000-01-23T04:56:07.000+00:00 message: message podIPs: - ip: ip @@ -232782,7 +246030,7 @@ components: message: message image: image imageID: imageID - restartCount: 0 + restartCount: 6 resources: claims: - request: request @@ -232802,11 +246050,11 @@ components: message: message terminated: reason: reason - exitCode: 7 + exitCode: 4 startedAt: 2000-01-23T04:56:07.000+00:00 containerID: containerID message: message - signal: 6 + signal: 0 finishedAt: 2000-01-23T04:56:07.000+00:00 volumeMounts: - mountPath: mountPath @@ -232835,21 +246083,21 @@ components: message: message terminated: reason: reason - exitCode: 7 + exitCode: 4 startedAt: 2000-01-23T04:56:07.000+00:00 containerID: containerID message: message - signal: 6 + signal: 0 finishedAt: 2000-01-23T04:56:07.000+00:00 containerID: containerID stopSignal: stopSignal user: linux: - uid: 7 + uid: 4 gid: 4 supplementalGroups: - - 8 - - 8 + - 1 + - 1 - allocatedResourcesStatus: - name: name resources: @@ -232869,7 +246117,7 @@ components: message: message image: image imageID: imageID - restartCount: 0 + restartCount: 6 resources: claims: - request: request @@ -232889,11 +246137,11 @@ components: message: message terminated: reason: reason - exitCode: 7 + exitCode: 4 startedAt: 2000-01-23T04:56:07.000+00:00 containerID: containerID message: message - signal: 6 + signal: 0 finishedAt: 2000-01-23T04:56:07.000+00:00 volumeMounts: - mountPath: mountPath @@ -232922,21 +246170,21 @@ components: message: message terminated: reason: reason - exitCode: 7 + exitCode: 4 startedAt: 2000-01-23T04:56:07.000+00:00 containerID: containerID message: message - signal: 6 + signal: 0 finishedAt: 2000-01-23T04:56:07.000+00:00 containerID: containerID stopSignal: stopSignal user: linux: - uid: 7 + uid: 4 gid: 4 supplementalGroups: - - 8 - - 8 + - 1 + - 1 hostIPs: - ip: ip - ip: ip @@ -232948,14 +246196,14 @@ components: lastTransitionTime: 2000-01-23T04:56:07.000+00:00 message: message type: type - observedGeneration: 0 + observedGeneration: 3 lastProbeTime: 2000-01-23T04:56:07.000+00:00 status: status - reason: reason lastTransitionTime: 2000-01-23T04:56:07.000+00:00 message: message type: type - observedGeneration: 0 + observedGeneration: 3 lastProbeTime: 2000-01-23T04:56:07.000+00:00 status: status initContainerStatuses: @@ -232978,7 +246226,7 @@ components: message: message image: image imageID: imageID - restartCount: 0 + restartCount: 6 resources: claims: - request: request @@ -232998,11 +246246,11 @@ components: message: message terminated: reason: reason - exitCode: 7 + exitCode: 4 startedAt: 2000-01-23T04:56:07.000+00:00 containerID: containerID message: message - signal: 6 + signal: 0 finishedAt: 2000-01-23T04:56:07.000+00:00 volumeMounts: - mountPath: mountPath @@ -233031,21 +246279,21 @@ components: message: message terminated: reason: reason - exitCode: 7 + exitCode: 4 startedAt: 2000-01-23T04:56:07.000+00:00 containerID: containerID message: message - signal: 6 + signal: 0 finishedAt: 2000-01-23T04:56:07.000+00:00 containerID: containerID stopSignal: stopSignal user: linux: - uid: 7 + uid: 4 gid: 4 supplementalGroups: - - 8 - - 8 + - 1 + - 1 - allocatedResourcesStatus: - name: name resources: @@ -233065,7 +246313,7 @@ components: message: message image: image imageID: imageID - restartCount: 0 + restartCount: 6 resources: claims: - request: request @@ -233085,11 +246333,11 @@ components: message: message terminated: reason: reason - exitCode: 7 + exitCode: 4 startedAt: 2000-01-23T04:56:07.000+00:00 containerID: containerID message: message - signal: 6 + signal: 0 finishedAt: 2000-01-23T04:56:07.000+00:00 volumeMounts: - mountPath: mountPath @@ -233118,22 +246366,22 @@ components: message: message terminated: reason: reason - exitCode: 7 + exitCode: 4 startedAt: 2000-01-23T04:56:07.000+00:00 containerID: containerID message: message - signal: 6 + signal: 0 finishedAt: 2000-01-23T04:56:07.000+00:00 containerID: containerID stopSignal: stopSignal user: linux: - uid: 7 + uid: 4 gid: 4 supplementalGroups: - - 8 - - 8 - observedGeneration: 3 + - 1 + - 1 + observedGeneration: 7 properties: allocatedResources: additionalProperties: @@ -233221,7 +246469,11 @@ components: items: $ref: "#/components/schemas/v1.NodeAllocatableResourceClaimStatus" type: array - x-kubernetes-list-type: atomic + x-kubernetes-patch-strategy: merge + x-kubernetes-list-type: map + x-kubernetes-list-map-keys: + - resourceClaimName + x-kubernetes-patch-merge-key: resourceClaimName nominatedNodeName: description: "nominatedNodeName is set only when this pod preempts other\ \ pods on the node, but it cannot be scheduled right away as preemption\ @@ -233300,6 +246552,15 @@ components: for the pod. format: date-time type: string + volumeHealth: + description: volumeHealth contains node-reported health for each volume + the pod is using. Populated by the kubelet on the pod's node. + items: + $ref: "#/components/schemas/v1.PodVolumeHealth" + type: array + x-kubernetes-list-type: map + x-kubernetes-list-map-keys: + - name type: object v1.PodTemplate: description: PodTemplate describes a template for creating copies of a predefined @@ -233355,7 +246616,7 @@ components: spec: dnsPolicy: dnsPolicy nodeName: nodeName - terminationGracePeriodSeconds: 9 + terminationGracePeriodSeconds: 6 dnsConfig: searches: - searches @@ -233396,17 +246657,17 @@ components: appArmorProfile: localhostProfile: localhostProfile type: type - fsGroup: 1 + fsGroup: 4 fsGroupChangePolicy: fsGroupChangePolicy seLinuxChangePolicy: seLinuxChangePolicy - runAsGroup: 4 + runAsGroup: 5 runAsNonRoot: true sysctls: - name: name value: value - name: name value: value - runAsUser: 5 + runAsUser: 9 seccompProfile: localhostProfile: localhostProfile type: type @@ -233426,12 +246687,12 @@ components: runtimeClassName: runtimeClassName tolerations: - effect: effect - tolerationSeconds: 6 + tolerationSeconds: 8 value: value key: key operator: operator - effect: effect - tolerationSeconds: 6 + tolerationSeconds: 8 value: value key: key operator: operator @@ -233453,7 +246714,7 @@ components: topologySpreadConstraints: - nodeTaintsPolicy: nodeTaintsPolicy whenUnsatisfiable: whenUnsatisfiable - maxSkew: 8 + maxSkew: 9 nodeAffinityPolicy: nodeAffinityPolicy labelSelector: matchExpressions: @@ -233469,14 +246730,14 @@ components: operator: operator matchLabels: key: matchLabels - minDomains: 9 + minDomains: 6 topologyKey: topologyKey matchLabelKeys: - matchLabelKeys - matchLabelKeys - nodeTaintsPolicy: nodeTaintsPolicy whenUnsatisfiable: whenUnsatisfiable - maxSkew: 8 + maxSkew: 9 nodeAffinityPolicy: nodeAffinityPolicy labelSelector: matchExpressions: @@ -233492,7 +246753,7 @@ components: operator: operator matchLabels: key: matchLabels - minDomains: 9 + minDomains: 6 topologyKey: topologyKey matchLabelKeys: - matchLabelKeys @@ -233604,19 +246865,22 @@ components: secret: secretName: secretName defaultMode: 7 + defaultUser: 5 optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key projected: sources: - downwardAPI: items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -233625,7 +246889,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -233634,39 +246899,46 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 configMap: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key podCertificate: certificateChainPath: certificateChainPath userAnnotations: key: userAnnotations keyPath: keyPath - maxExpirationSeconds: 3 + maxExpirationSeconds: 8 keyType: keyType + user: 7 credentialBundlePath: credentialBundlePath signerName: signerName secret: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key serviceAccountToken: path: path audience: audience expirationSeconds: 3 + user: 3 clusterTrustBundle: path: path labelSelector: @@ -233685,10 +246957,11 @@ components: key: matchLabels name: name optional: true + user: 4 signerName: signerName - downwardAPI: items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -233697,7 +246970,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -233706,39 +246980,46 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 configMap: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key podCertificate: certificateChainPath: certificateChainPath userAnnotations: key: userAnnotations keyPath: keyPath - maxExpirationSeconds: 3 + maxExpirationSeconds: 8 keyType: keyType + user: 7 credentialBundlePath: credentialBundlePath signerName: signerName secret: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key serviceAccountToken: path: path audience: audience expirationSeconds: 3 + user: 3 clusterTrustBundle: path: path labelSelector: @@ -233757,8 +247038,10 @@ components: key: matchLabels name: name optional: true + user: 4 signerName: signerName defaultMode: 6 + defaultUser: 0 cephfs: path: path secretRef: @@ -233782,6 +247065,7 @@ components: storagePool: storagePool gateway: gateway emptyDir: + mode: 3 sizeLimit: sizeLimit medium: medium glusterfs: @@ -233789,7 +247073,7 @@ components: endpoints: endpoints readOnly: true gcePersistentDisk: - partition: 6 + partition: 0 readOnly: true pdName: pdName fsType: fsType @@ -233813,9 +247097,10 @@ components: readOnly: true fsType: fsType downwardAPI: - defaultMode: 1 + defaultMode: 6 + defaultUser: 5 items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -233824,7 +247109,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -233833,8 +247119,9 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 awsElasticBlockStore: - partition: 6 + partition: 3 volumeID: volumeID readOnly: true fsType: fsType @@ -233844,7 +247131,7 @@ components: iscsi: chapAuthSession: true iscsiInterface: iscsiInterface - lun: 5 + lun: 7 chapAuthDiscovery: true iqn: iqn portals: @@ -233869,15 +247156,18 @@ components: - monitors - monitors configMap: - defaultMode: 3 + defaultMode: 6 name: name + defaultUser: 1 optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key storageos: volumeNamespace: volumeNamespace @@ -233916,7 +247206,7 @@ components: volumePath: volumePath fsType: fsType fc: - lun: 6 + lun: 7 targetWWNs: - targetWWNs - targetWWNs @@ -234034,19 +247324,22 @@ components: secret: secretName: secretName defaultMode: 7 + defaultUser: 5 optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key projected: sources: - downwardAPI: items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -234055,7 +247348,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -234064,39 +247358,46 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 configMap: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key podCertificate: certificateChainPath: certificateChainPath userAnnotations: key: userAnnotations keyPath: keyPath - maxExpirationSeconds: 3 + maxExpirationSeconds: 8 keyType: keyType + user: 7 credentialBundlePath: credentialBundlePath signerName: signerName secret: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key serviceAccountToken: path: path audience: audience expirationSeconds: 3 + user: 3 clusterTrustBundle: path: path labelSelector: @@ -234115,10 +247416,11 @@ components: key: matchLabels name: name optional: true + user: 4 signerName: signerName - downwardAPI: items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -234127,7 +247429,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -234136,39 +247439,46 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 configMap: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key podCertificate: certificateChainPath: certificateChainPath userAnnotations: key: userAnnotations keyPath: keyPath - maxExpirationSeconds: 3 + maxExpirationSeconds: 8 keyType: keyType + user: 7 credentialBundlePath: credentialBundlePath signerName: signerName secret: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key serviceAccountToken: path: path audience: audience expirationSeconds: 3 + user: 3 clusterTrustBundle: path: path labelSelector: @@ -234187,8 +247497,10 @@ components: key: matchLabels name: name optional: true + user: 4 signerName: signerName defaultMode: 6 + defaultUser: 0 cephfs: path: path secretRef: @@ -234212,6 +247524,7 @@ components: storagePool: storagePool gateway: gateway emptyDir: + mode: 3 sizeLimit: sizeLimit medium: medium glusterfs: @@ -234219,7 +247532,7 @@ components: endpoints: endpoints readOnly: true gcePersistentDisk: - partition: 6 + partition: 0 readOnly: true pdName: pdName fsType: fsType @@ -234243,9 +247556,10 @@ components: readOnly: true fsType: fsType downwardAPI: - defaultMode: 1 + defaultMode: 6 + defaultUser: 5 items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -234254,7 +247568,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -234263,8 +247578,9 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 awsElasticBlockStore: - partition: 6 + partition: 3 volumeID: volumeID readOnly: true fsType: fsType @@ -234274,7 +247590,7 @@ components: iscsi: chapAuthSession: true iscsiInterface: iscsiInterface - lun: 5 + lun: 7 chapAuthDiscovery: true iqn: iqn portals: @@ -234299,15 +247615,18 @@ components: - monitors - monitors configMap: - defaultMode: 3 + defaultMode: 6 name: name + defaultUser: 1 optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key storageos: volumeNamespace: volumeNamespace @@ -234346,7 +247665,7 @@ components: volumePath: volumePath fsType: fsType fc: - lun: 6 + lun: 7 targetWWNs: - targetWWNs - targetWWNs @@ -234435,10 +247754,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -234462,6 +247783,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -234469,6 +247793,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -234486,6 +247813,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -234506,6 +247834,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -234530,10 +247859,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -234579,10 +247910,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -234727,10 +248060,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -234754,6 +248089,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -234761,6 +248099,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -234778,6 +248119,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -234798,6 +248140,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -234822,10 +248165,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -234871,10 +248216,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -234954,9 +248301,14 @@ components: tty: true stdinOnce: true serviceAccount: serviceAccount - priority: 7 + priority: 1 restartPolicy: restartPolicy shareProcessNamespace: true + evictionResponders: + - name: name + priority: 7 + - name: name + priority: 7 hostUsers: true resourceClaims: - resourceClaimName: resourceClaimName @@ -235033,10 +248385,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -235060,6 +248414,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -235067,6 +248424,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -235084,6 +248444,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -235104,6 +248465,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -235128,10 +248490,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -235177,10 +248541,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -235324,10 +248690,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -235351,6 +248719,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -235358,6 +248729,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -235375,6 +248749,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -235395,6 +248770,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -235419,10 +248795,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -235468,10 +248846,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -235616,10 +248996,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -235643,6 +249025,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -235650,6 +249035,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -235667,6 +249055,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -235687,6 +249076,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -235711,10 +249101,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -235760,10 +249152,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -235907,10 +249301,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -235934,6 +249330,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -235941,6 +249340,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -235958,6 +249360,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -235978,6 +249381,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -236002,10 +249406,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -236051,10 +249457,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -236681,7 +250089,7 @@ components: spec: dnsPolicy: dnsPolicy nodeName: nodeName - terminationGracePeriodSeconds: 9 + terminationGracePeriodSeconds: 6 dnsConfig: searches: - searches @@ -236722,17 +250130,17 @@ components: appArmorProfile: localhostProfile: localhostProfile type: type - fsGroup: 1 + fsGroup: 4 fsGroupChangePolicy: fsGroupChangePolicy seLinuxChangePolicy: seLinuxChangePolicy - runAsGroup: 4 + runAsGroup: 5 runAsNonRoot: true sysctls: - name: name value: value - name: name value: value - runAsUser: 5 + runAsUser: 9 seccompProfile: localhostProfile: localhostProfile type: type @@ -236752,12 +250160,12 @@ components: runtimeClassName: runtimeClassName tolerations: - effect: effect - tolerationSeconds: 6 + tolerationSeconds: 8 value: value key: key operator: operator - effect: effect - tolerationSeconds: 6 + tolerationSeconds: 8 value: value key: key operator: operator @@ -236779,7 +250187,7 @@ components: topologySpreadConstraints: - nodeTaintsPolicy: nodeTaintsPolicy whenUnsatisfiable: whenUnsatisfiable - maxSkew: 8 + maxSkew: 9 nodeAffinityPolicy: nodeAffinityPolicy labelSelector: matchExpressions: @@ -236795,14 +250203,14 @@ components: operator: operator matchLabels: key: matchLabels - minDomains: 9 + minDomains: 6 topologyKey: topologyKey matchLabelKeys: - matchLabelKeys - matchLabelKeys - nodeTaintsPolicy: nodeTaintsPolicy whenUnsatisfiable: whenUnsatisfiable - maxSkew: 8 + maxSkew: 9 nodeAffinityPolicy: nodeAffinityPolicy labelSelector: matchExpressions: @@ -236818,7 +250226,7 @@ components: operator: operator matchLabels: key: matchLabels - minDomains: 9 + minDomains: 6 topologyKey: topologyKey matchLabelKeys: - matchLabelKeys @@ -236930,19 +250338,22 @@ components: secret: secretName: secretName defaultMode: 7 + defaultUser: 5 optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key projected: sources: - downwardAPI: items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -236951,7 +250362,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -236960,39 +250372,46 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 configMap: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key podCertificate: certificateChainPath: certificateChainPath userAnnotations: key: userAnnotations keyPath: keyPath - maxExpirationSeconds: 3 + maxExpirationSeconds: 8 keyType: keyType + user: 7 credentialBundlePath: credentialBundlePath signerName: signerName secret: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key serviceAccountToken: path: path audience: audience expirationSeconds: 3 + user: 3 clusterTrustBundle: path: path labelSelector: @@ -237011,10 +250430,11 @@ components: key: matchLabels name: name optional: true + user: 4 signerName: signerName - downwardAPI: items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -237023,7 +250443,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -237032,39 +250453,46 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 configMap: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key podCertificate: certificateChainPath: certificateChainPath userAnnotations: key: userAnnotations keyPath: keyPath - maxExpirationSeconds: 3 + maxExpirationSeconds: 8 keyType: keyType + user: 7 credentialBundlePath: credentialBundlePath signerName: signerName secret: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key serviceAccountToken: path: path audience: audience expirationSeconds: 3 + user: 3 clusterTrustBundle: path: path labelSelector: @@ -237083,8 +250511,10 @@ components: key: matchLabels name: name optional: true + user: 4 signerName: signerName defaultMode: 6 + defaultUser: 0 cephfs: path: path secretRef: @@ -237108,6 +250538,7 @@ components: storagePool: storagePool gateway: gateway emptyDir: + mode: 3 sizeLimit: sizeLimit medium: medium glusterfs: @@ -237115,7 +250546,7 @@ components: endpoints: endpoints readOnly: true gcePersistentDisk: - partition: 6 + partition: 0 readOnly: true pdName: pdName fsType: fsType @@ -237139,9 +250570,10 @@ components: readOnly: true fsType: fsType downwardAPI: - defaultMode: 1 + defaultMode: 6 + defaultUser: 5 items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -237150,7 +250582,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -237159,8 +250592,9 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 awsElasticBlockStore: - partition: 6 + partition: 3 volumeID: volumeID readOnly: true fsType: fsType @@ -237170,7 +250604,7 @@ components: iscsi: chapAuthSession: true iscsiInterface: iscsiInterface - lun: 5 + lun: 7 chapAuthDiscovery: true iqn: iqn portals: @@ -237195,15 +250629,18 @@ components: - monitors - monitors configMap: - defaultMode: 3 + defaultMode: 6 name: name + defaultUser: 1 optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key storageos: volumeNamespace: volumeNamespace @@ -237242,7 +250679,7 @@ components: volumePath: volumePath fsType: fsType fc: - lun: 6 + lun: 7 targetWWNs: - targetWWNs - targetWWNs @@ -237360,19 +250797,22 @@ components: secret: secretName: secretName defaultMode: 7 + defaultUser: 5 optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key projected: sources: - downwardAPI: items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -237381,7 +250821,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -237390,39 +250831,46 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 configMap: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key podCertificate: certificateChainPath: certificateChainPath userAnnotations: key: userAnnotations keyPath: keyPath - maxExpirationSeconds: 3 + maxExpirationSeconds: 8 keyType: keyType + user: 7 credentialBundlePath: credentialBundlePath signerName: signerName secret: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key serviceAccountToken: path: path audience: audience expirationSeconds: 3 + user: 3 clusterTrustBundle: path: path labelSelector: @@ -237441,10 +250889,11 @@ components: key: matchLabels name: name optional: true + user: 4 signerName: signerName - downwardAPI: items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -237453,7 +250902,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -237462,39 +250912,46 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 configMap: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key podCertificate: certificateChainPath: certificateChainPath userAnnotations: key: userAnnotations keyPath: keyPath - maxExpirationSeconds: 3 + maxExpirationSeconds: 8 keyType: keyType + user: 7 credentialBundlePath: credentialBundlePath signerName: signerName secret: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key serviceAccountToken: path: path audience: audience expirationSeconds: 3 + user: 3 clusterTrustBundle: path: path labelSelector: @@ -237513,8 +250970,10 @@ components: key: matchLabels name: name optional: true + user: 4 signerName: signerName defaultMode: 6 + defaultUser: 0 cephfs: path: path secretRef: @@ -237538,6 +250997,7 @@ components: storagePool: storagePool gateway: gateway emptyDir: + mode: 3 sizeLimit: sizeLimit medium: medium glusterfs: @@ -237545,7 +251005,7 @@ components: endpoints: endpoints readOnly: true gcePersistentDisk: - partition: 6 + partition: 0 readOnly: true pdName: pdName fsType: fsType @@ -237569,9 +251029,10 @@ components: readOnly: true fsType: fsType downwardAPI: - defaultMode: 1 + defaultMode: 6 + defaultUser: 5 items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -237580,7 +251041,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -237589,8 +251051,9 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 awsElasticBlockStore: - partition: 6 + partition: 3 volumeID: volumeID readOnly: true fsType: fsType @@ -237600,7 +251063,7 @@ components: iscsi: chapAuthSession: true iscsiInterface: iscsiInterface - lun: 5 + lun: 7 chapAuthDiscovery: true iqn: iqn portals: @@ -237625,15 +251088,18 @@ components: - monitors - monitors configMap: - defaultMode: 3 + defaultMode: 6 name: name + defaultUser: 1 optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key storageos: volumeNamespace: volumeNamespace @@ -237672,7 +251138,7 @@ components: volumePath: volumePath fsType: fsType fc: - lun: 6 + lun: 7 targetWWNs: - targetWWNs - targetWWNs @@ -237761,10 +251227,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -237788,6 +251256,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -237795,6 +251266,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -237812,6 +251286,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -237832,6 +251307,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -237856,10 +251332,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -237905,10 +251383,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -238053,10 +251533,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -238080,6 +251562,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -238087,6 +251572,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -238104,6 +251592,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -238124,6 +251613,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -238148,10 +251638,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -238197,10 +251689,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -238280,9 +251774,14 @@ components: tty: true stdinOnce: true serviceAccount: serviceAccount - priority: 7 + priority: 1 restartPolicy: restartPolicy shareProcessNamespace: true + evictionResponders: + - name: name + priority: 7 + - name: name + priority: 7 hostUsers: true resourceClaims: - resourceClaimName: resourceClaimName @@ -238359,10 +251858,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -238386,6 +251887,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -238393,6 +251897,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -238410,6 +251917,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -238430,6 +251938,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -238454,10 +251963,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -238503,10 +252014,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -238650,10 +252163,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -238677,6 +252192,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -238684,6 +252202,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -238701,6 +252222,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -238721,6 +252243,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -238745,10 +252268,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -238794,10 +252319,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -238942,10 +252469,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -238969,6 +252498,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -238976,6 +252508,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -238993,6 +252528,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -239013,6 +252549,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -239037,10 +252574,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -239086,10 +252625,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -239233,10 +252774,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -239260,6 +252803,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -239267,6 +252813,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -239284,6 +252833,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -239304,6 +252854,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -239328,10 +252879,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -239377,10 +252930,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -239972,7 +253527,7 @@ components: spec: dnsPolicy: dnsPolicy nodeName: nodeName - terminationGracePeriodSeconds: 9 + terminationGracePeriodSeconds: 6 dnsConfig: searches: - searches @@ -240013,17 +253568,17 @@ components: appArmorProfile: localhostProfile: localhostProfile type: type - fsGroup: 1 + fsGroup: 4 fsGroupChangePolicy: fsGroupChangePolicy seLinuxChangePolicy: seLinuxChangePolicy - runAsGroup: 4 + runAsGroup: 5 runAsNonRoot: true sysctls: - name: name value: value - name: name value: value - runAsUser: 5 + runAsUser: 9 seccompProfile: localhostProfile: localhostProfile type: type @@ -240043,12 +253598,12 @@ components: runtimeClassName: runtimeClassName tolerations: - effect: effect - tolerationSeconds: 6 + tolerationSeconds: 8 value: value key: key operator: operator - effect: effect - tolerationSeconds: 6 + tolerationSeconds: 8 value: value key: key operator: operator @@ -240070,7 +253625,7 @@ components: topologySpreadConstraints: - nodeTaintsPolicy: nodeTaintsPolicy whenUnsatisfiable: whenUnsatisfiable - maxSkew: 8 + maxSkew: 9 nodeAffinityPolicy: nodeAffinityPolicy labelSelector: matchExpressions: @@ -240086,14 +253641,14 @@ components: operator: operator matchLabels: key: matchLabels - minDomains: 9 + minDomains: 6 topologyKey: topologyKey matchLabelKeys: - matchLabelKeys - matchLabelKeys - nodeTaintsPolicy: nodeTaintsPolicy whenUnsatisfiable: whenUnsatisfiable - maxSkew: 8 + maxSkew: 9 nodeAffinityPolicy: nodeAffinityPolicy labelSelector: matchExpressions: @@ -240109,7 +253664,7 @@ components: operator: operator matchLabels: key: matchLabels - minDomains: 9 + minDomains: 6 topologyKey: topologyKey matchLabelKeys: - matchLabelKeys @@ -240221,19 +253776,22 @@ components: secret: secretName: secretName defaultMode: 7 + defaultUser: 5 optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key projected: sources: - downwardAPI: items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -240242,7 +253800,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -240251,39 +253810,46 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 configMap: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key podCertificate: certificateChainPath: certificateChainPath userAnnotations: key: userAnnotations keyPath: keyPath - maxExpirationSeconds: 3 + maxExpirationSeconds: 8 keyType: keyType + user: 7 credentialBundlePath: credentialBundlePath signerName: signerName secret: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key serviceAccountToken: path: path audience: audience expirationSeconds: 3 + user: 3 clusterTrustBundle: path: path labelSelector: @@ -240302,10 +253868,11 @@ components: key: matchLabels name: name optional: true + user: 4 signerName: signerName - downwardAPI: items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -240314,7 +253881,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -240323,39 +253891,46 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 configMap: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key podCertificate: certificateChainPath: certificateChainPath userAnnotations: key: userAnnotations keyPath: keyPath - maxExpirationSeconds: 3 + maxExpirationSeconds: 8 keyType: keyType + user: 7 credentialBundlePath: credentialBundlePath signerName: signerName secret: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key serviceAccountToken: path: path audience: audience expirationSeconds: 3 + user: 3 clusterTrustBundle: path: path labelSelector: @@ -240374,8 +253949,10 @@ components: key: matchLabels name: name optional: true + user: 4 signerName: signerName defaultMode: 6 + defaultUser: 0 cephfs: path: path secretRef: @@ -240399,6 +253976,7 @@ components: storagePool: storagePool gateway: gateway emptyDir: + mode: 3 sizeLimit: sizeLimit medium: medium glusterfs: @@ -240406,7 +253984,7 @@ components: endpoints: endpoints readOnly: true gcePersistentDisk: - partition: 6 + partition: 0 readOnly: true pdName: pdName fsType: fsType @@ -240430,9 +254008,10 @@ components: readOnly: true fsType: fsType downwardAPI: - defaultMode: 1 + defaultMode: 6 + defaultUser: 5 items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -240441,7 +254020,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -240450,8 +254030,9 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 awsElasticBlockStore: - partition: 6 + partition: 3 volumeID: volumeID readOnly: true fsType: fsType @@ -240461,7 +254042,7 @@ components: iscsi: chapAuthSession: true iscsiInterface: iscsiInterface - lun: 5 + lun: 7 chapAuthDiscovery: true iqn: iqn portals: @@ -240486,15 +254067,18 @@ components: - monitors - monitors configMap: - defaultMode: 3 + defaultMode: 6 name: name + defaultUser: 1 optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key storageos: volumeNamespace: volumeNamespace @@ -240533,7 +254117,7 @@ components: volumePath: volumePath fsType: fsType fc: - lun: 6 + lun: 7 targetWWNs: - targetWWNs - targetWWNs @@ -240651,19 +254235,22 @@ components: secret: secretName: secretName defaultMode: 7 + defaultUser: 5 optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key projected: sources: - downwardAPI: items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -240672,7 +254259,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -240681,39 +254269,46 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 configMap: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key podCertificate: certificateChainPath: certificateChainPath userAnnotations: key: userAnnotations keyPath: keyPath - maxExpirationSeconds: 3 + maxExpirationSeconds: 8 keyType: keyType + user: 7 credentialBundlePath: credentialBundlePath signerName: signerName secret: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key serviceAccountToken: path: path audience: audience expirationSeconds: 3 + user: 3 clusterTrustBundle: path: path labelSelector: @@ -240732,10 +254327,11 @@ components: key: matchLabels name: name optional: true + user: 4 signerName: signerName - downwardAPI: items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -240744,7 +254340,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -240753,39 +254350,46 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 configMap: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key podCertificate: certificateChainPath: certificateChainPath userAnnotations: key: userAnnotations keyPath: keyPath - maxExpirationSeconds: 3 + maxExpirationSeconds: 8 keyType: keyType + user: 7 credentialBundlePath: credentialBundlePath signerName: signerName secret: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key serviceAccountToken: path: path audience: audience expirationSeconds: 3 + user: 3 clusterTrustBundle: path: path labelSelector: @@ -240804,8 +254408,10 @@ components: key: matchLabels name: name optional: true + user: 4 signerName: signerName defaultMode: 6 + defaultUser: 0 cephfs: path: path secretRef: @@ -240829,6 +254435,7 @@ components: storagePool: storagePool gateway: gateway emptyDir: + mode: 3 sizeLimit: sizeLimit medium: medium glusterfs: @@ -240836,7 +254443,7 @@ components: endpoints: endpoints readOnly: true gcePersistentDisk: - partition: 6 + partition: 0 readOnly: true pdName: pdName fsType: fsType @@ -240860,9 +254467,10 @@ components: readOnly: true fsType: fsType downwardAPI: - defaultMode: 1 + defaultMode: 6 + defaultUser: 5 items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -240871,7 +254479,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -240880,8 +254489,9 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 awsElasticBlockStore: - partition: 6 + partition: 3 volumeID: volumeID readOnly: true fsType: fsType @@ -240891,7 +254501,7 @@ components: iscsi: chapAuthSession: true iscsiInterface: iscsiInterface - lun: 5 + lun: 7 chapAuthDiscovery: true iqn: iqn portals: @@ -240916,15 +254526,18 @@ components: - monitors - monitors configMap: - defaultMode: 3 + defaultMode: 6 name: name + defaultUser: 1 optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key storageos: volumeNamespace: volumeNamespace @@ -240963,7 +254576,7 @@ components: volumePath: volumePath fsType: fsType fc: - lun: 6 + lun: 7 targetWWNs: - targetWWNs - targetWWNs @@ -241052,10 +254665,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -241079,6 +254694,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -241086,6 +254704,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -241103,6 +254724,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -241123,6 +254745,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -241147,10 +254770,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -241196,10 +254821,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -241344,10 +254971,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -241371,6 +255000,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -241378,6 +255010,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -241395,6 +255030,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -241415,6 +255051,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -241439,10 +255076,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -241488,10 +255127,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -241571,9 +255212,14 @@ components: tty: true stdinOnce: true serviceAccount: serviceAccount - priority: 7 + priority: 1 restartPolicy: restartPolicy shareProcessNamespace: true + evictionResponders: + - name: name + priority: 7 + - name: name + priority: 7 hostUsers: true resourceClaims: - resourceClaimName: resourceClaimName @@ -241650,10 +255296,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -241677,6 +255325,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -241684,6 +255335,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -241701,6 +255355,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -241721,6 +255376,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -241745,10 +255401,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -241794,10 +255452,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -241941,10 +255601,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -241968,6 +255630,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -241975,6 +255640,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -241992,6 +255660,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -242012,6 +255681,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -242036,10 +255706,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -242085,10 +255757,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -242233,10 +255907,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -242260,6 +255936,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -242267,6 +255946,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -242284,6 +255966,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -242304,6 +255987,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -242328,10 +256012,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -242377,10 +256063,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -242524,10 +256212,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -242551,6 +256241,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -242558,6 +256251,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -242575,6 +256271,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -242595,6 +256292,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -242619,10 +256317,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -242668,10 +256368,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -243293,7 +256995,7 @@ components: spec: dnsPolicy: dnsPolicy nodeName: nodeName - terminationGracePeriodSeconds: 9 + terminationGracePeriodSeconds: 6 dnsConfig: searches: - searches @@ -243334,17 +257036,17 @@ components: appArmorProfile: localhostProfile: localhostProfile type: type - fsGroup: 1 + fsGroup: 4 fsGroupChangePolicy: fsGroupChangePolicy seLinuxChangePolicy: seLinuxChangePolicy - runAsGroup: 4 + runAsGroup: 5 runAsNonRoot: true sysctls: - name: name value: value - name: name value: value - runAsUser: 5 + runAsUser: 9 seccompProfile: localhostProfile: localhostProfile type: type @@ -243364,12 +257066,12 @@ components: runtimeClassName: runtimeClassName tolerations: - effect: effect - tolerationSeconds: 6 + tolerationSeconds: 8 value: value key: key operator: operator - effect: effect - tolerationSeconds: 6 + tolerationSeconds: 8 value: value key: key operator: operator @@ -243391,7 +257093,7 @@ components: topologySpreadConstraints: - nodeTaintsPolicy: nodeTaintsPolicy whenUnsatisfiable: whenUnsatisfiable - maxSkew: 8 + maxSkew: 9 nodeAffinityPolicy: nodeAffinityPolicy labelSelector: matchExpressions: @@ -243407,14 +257109,14 @@ components: operator: operator matchLabels: key: matchLabels - minDomains: 9 + minDomains: 6 topologyKey: topologyKey matchLabelKeys: - matchLabelKeys - matchLabelKeys - nodeTaintsPolicy: nodeTaintsPolicy whenUnsatisfiable: whenUnsatisfiable - maxSkew: 8 + maxSkew: 9 nodeAffinityPolicy: nodeAffinityPolicy labelSelector: matchExpressions: @@ -243430,7 +257132,7 @@ components: operator: operator matchLabels: key: matchLabels - minDomains: 9 + minDomains: 6 topologyKey: topologyKey matchLabelKeys: - matchLabelKeys @@ -243542,19 +257244,22 @@ components: secret: secretName: secretName defaultMode: 7 + defaultUser: 5 optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key projected: sources: - downwardAPI: items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -243563,7 +257268,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -243572,39 +257278,46 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 configMap: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key podCertificate: certificateChainPath: certificateChainPath userAnnotations: key: userAnnotations keyPath: keyPath - maxExpirationSeconds: 3 + maxExpirationSeconds: 8 keyType: keyType + user: 7 credentialBundlePath: credentialBundlePath signerName: signerName secret: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key serviceAccountToken: path: path audience: audience expirationSeconds: 3 + user: 3 clusterTrustBundle: path: path labelSelector: @@ -243623,10 +257336,11 @@ components: key: matchLabels name: name optional: true + user: 4 signerName: signerName - downwardAPI: items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -243635,7 +257349,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -243644,39 +257359,46 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 configMap: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key podCertificate: certificateChainPath: certificateChainPath userAnnotations: key: userAnnotations keyPath: keyPath - maxExpirationSeconds: 3 + maxExpirationSeconds: 8 keyType: keyType + user: 7 credentialBundlePath: credentialBundlePath signerName: signerName secret: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key serviceAccountToken: path: path audience: audience expirationSeconds: 3 + user: 3 clusterTrustBundle: path: path labelSelector: @@ -243695,8 +257417,10 @@ components: key: matchLabels name: name optional: true + user: 4 signerName: signerName defaultMode: 6 + defaultUser: 0 cephfs: path: path secretRef: @@ -243720,6 +257444,7 @@ components: storagePool: storagePool gateway: gateway emptyDir: + mode: 3 sizeLimit: sizeLimit medium: medium glusterfs: @@ -243727,7 +257452,7 @@ components: endpoints: endpoints readOnly: true gcePersistentDisk: - partition: 6 + partition: 0 readOnly: true pdName: pdName fsType: fsType @@ -243751,9 +257476,10 @@ components: readOnly: true fsType: fsType downwardAPI: - defaultMode: 1 + defaultMode: 6 + defaultUser: 5 items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -243762,7 +257488,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -243771,8 +257498,9 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 awsElasticBlockStore: - partition: 6 + partition: 3 volumeID: volumeID readOnly: true fsType: fsType @@ -243782,7 +257510,7 @@ components: iscsi: chapAuthSession: true iscsiInterface: iscsiInterface - lun: 5 + lun: 7 chapAuthDiscovery: true iqn: iqn portals: @@ -243807,15 +257535,18 @@ components: - monitors - monitors configMap: - defaultMode: 3 + defaultMode: 6 name: name + defaultUser: 1 optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key storageos: volumeNamespace: volumeNamespace @@ -243854,7 +257585,7 @@ components: volumePath: volumePath fsType: fsType fc: - lun: 6 + lun: 7 targetWWNs: - targetWWNs - targetWWNs @@ -243972,19 +257703,22 @@ components: secret: secretName: secretName defaultMode: 7 + defaultUser: 5 optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key projected: sources: - downwardAPI: items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -243993,7 +257727,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -244002,39 +257737,46 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 configMap: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key podCertificate: certificateChainPath: certificateChainPath userAnnotations: key: userAnnotations keyPath: keyPath - maxExpirationSeconds: 3 + maxExpirationSeconds: 8 keyType: keyType + user: 7 credentialBundlePath: credentialBundlePath signerName: signerName secret: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key serviceAccountToken: path: path audience: audience expirationSeconds: 3 + user: 3 clusterTrustBundle: path: path labelSelector: @@ -244053,10 +257795,11 @@ components: key: matchLabels name: name optional: true + user: 4 signerName: signerName - downwardAPI: items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -244065,7 +257808,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -244074,39 +257818,46 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 configMap: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key podCertificate: certificateChainPath: certificateChainPath userAnnotations: key: userAnnotations keyPath: keyPath - maxExpirationSeconds: 3 + maxExpirationSeconds: 8 keyType: keyType + user: 7 credentialBundlePath: credentialBundlePath signerName: signerName secret: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key serviceAccountToken: path: path audience: audience expirationSeconds: 3 + user: 3 clusterTrustBundle: path: path labelSelector: @@ -244125,8 +257876,10 @@ components: key: matchLabels name: name optional: true + user: 4 signerName: signerName defaultMode: 6 + defaultUser: 0 cephfs: path: path secretRef: @@ -244150,6 +257903,7 @@ components: storagePool: storagePool gateway: gateway emptyDir: + mode: 3 sizeLimit: sizeLimit medium: medium glusterfs: @@ -244157,7 +257911,7 @@ components: endpoints: endpoints readOnly: true gcePersistentDisk: - partition: 6 + partition: 0 readOnly: true pdName: pdName fsType: fsType @@ -244181,9 +257935,10 @@ components: readOnly: true fsType: fsType downwardAPI: - defaultMode: 1 + defaultMode: 6 + defaultUser: 5 items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -244192,7 +257947,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -244201,8 +257957,9 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 awsElasticBlockStore: - partition: 6 + partition: 3 volumeID: volumeID readOnly: true fsType: fsType @@ -244212,7 +257969,7 @@ components: iscsi: chapAuthSession: true iscsiInterface: iscsiInterface - lun: 5 + lun: 7 chapAuthDiscovery: true iqn: iqn portals: @@ -244237,15 +257994,18 @@ components: - monitors - monitors configMap: - defaultMode: 3 + defaultMode: 6 name: name + defaultUser: 1 optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key storageos: volumeNamespace: volumeNamespace @@ -244284,7 +258044,7 @@ components: volumePath: volumePath fsType: fsType fc: - lun: 6 + lun: 7 targetWWNs: - targetWWNs - targetWWNs @@ -244373,10 +258133,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -244400,6 +258162,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -244407,6 +258172,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -244424,6 +258192,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -244444,6 +258213,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -244468,10 +258238,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -244517,10 +258289,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -244665,10 +258439,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -244692,6 +258468,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -244699,6 +258478,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -244716,6 +258498,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -244736,6 +258519,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -244760,10 +258544,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -244809,10 +258595,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -244892,9 +258680,14 @@ components: tty: true stdinOnce: true serviceAccount: serviceAccount - priority: 7 + priority: 1 restartPolicy: restartPolicy shareProcessNamespace: true + evictionResponders: + - name: name + priority: 7 + - name: name + priority: 7 hostUsers: true resourceClaims: - resourceClaimName: resourceClaimName @@ -244971,10 +258764,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -244998,6 +258793,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -245005,6 +258803,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -245022,6 +258823,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -245042,6 +258844,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -245066,10 +258869,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -245115,10 +258920,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -245262,10 +259069,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -245289,6 +259098,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -245296,6 +259108,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -245313,6 +259128,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -245333,6 +259149,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -245357,10 +259174,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -245406,10 +259225,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -245554,10 +259375,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -245581,6 +259404,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -245588,6 +259414,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -245605,6 +259434,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -245625,6 +259455,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -245649,10 +259480,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -245698,10 +259531,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -245845,10 +259680,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -245872,6 +259709,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -245879,6 +259719,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -245896,6 +259739,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -245916,6 +259760,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -245940,10 +259785,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -245989,10 +259836,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -246492,6 +260341,44 @@ components: spec: $ref: "#/components/schemas/v1.PodSpec" type: object + v1.PodVolumeHealth: + description: "PodVolumeHealth contains health information for a volume used\ + \ by a pod, reported by the CSI node plugin via the kubelet." + example: + healthConditions: + - reason: reason + message: message + status: status + - reason: reason + message: message + status: status + name: name + lastTransitionTime: 2000-01-23T04:56:07.000+00:00 + properties: + healthConditions: + description: conditions is the set of adverse conditions reported by the + CSI node plugin for this volume on this node. At most 16 conditions may + be reported. + items: + $ref: "#/components/schemas/v1.VolumeHealthCondition" + type: array + x-kubernetes-patch-strategy: merge + x-kubernetes-list-type: map + x-kubernetes-list-map-keys: + - status + - reason + x-kubernetes-patch-merge-key: status + lastTransitionTime: + description: lastTransitionTime is when the current set of conditions first + appeared. + format: date-time + type: string + name: + description: name matches an entry in pod.spec.volumes. + type: string + required: + - name + type: object v1.PortStatus: description: PortStatus represents the error condition of a service port example: @@ -246600,10 +260487,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -246668,7 +260557,7 @@ components: sources: - downwardAPI: items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -246677,7 +260566,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -246686,39 +260576,46 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 configMap: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key podCertificate: certificateChainPath: certificateChainPath userAnnotations: key: userAnnotations keyPath: keyPath - maxExpirationSeconds: 3 + maxExpirationSeconds: 8 keyType: keyType + user: 7 credentialBundlePath: credentialBundlePath signerName: signerName secret: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key serviceAccountToken: path: path audience: audience expirationSeconds: 3 + user: 3 clusterTrustBundle: path: path labelSelector: @@ -246737,10 +260634,11 @@ components: key: matchLabels name: name optional: true + user: 4 signerName: signerName - downwardAPI: items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -246749,7 +260647,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -246758,39 +260657,46 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 configMap: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key podCertificate: certificateChainPath: certificateChainPath userAnnotations: key: userAnnotations keyPath: keyPath - maxExpirationSeconds: 3 + maxExpirationSeconds: 8 keyType: keyType + user: 7 credentialBundlePath: credentialBundlePath signerName: signerName secret: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key serviceAccountToken: path: path audience: audience expirationSeconds: 3 + user: 3 clusterTrustBundle: path: path labelSelector: @@ -246809,8 +260715,10 @@ components: key: matchLabels name: name optional: true + user: 4 signerName: signerName defaultMode: 6 + defaultUser: 0 properties: defaultMode: description: "defaultMode are the mode bits used to set permissions on created\ @@ -246822,6 +260730,13 @@ components: \ result can be other mode bits set." format: int32 type: integer + defaultUser: + description: "defaultUser is Optional: The owner UID of the created files\ + \ by default. The defaultUser field is only used as a fallback when the\ + \ item-level user field is unset. (Alpha) This field requires the AtomicWriteVolumeUserFields\ + \ feature gate to be enabled." + format: int64 + type: integer sources: description: sources is the list of volume projections. Each entry in this list handles one source. @@ -247076,7 +260991,7 @@ components: spec: dnsPolicy: dnsPolicy nodeName: nodeName - terminationGracePeriodSeconds: 9 + terminationGracePeriodSeconds: 6 dnsConfig: searches: - searches @@ -247117,17 +261032,17 @@ components: appArmorProfile: localhostProfile: localhostProfile type: type - fsGroup: 1 + fsGroup: 4 fsGroupChangePolicy: fsGroupChangePolicy seLinuxChangePolicy: seLinuxChangePolicy - runAsGroup: 4 + runAsGroup: 5 runAsNonRoot: true sysctls: - name: name value: value - name: name value: value - runAsUser: 5 + runAsUser: 9 seccompProfile: localhostProfile: localhostProfile type: type @@ -247147,12 +261062,12 @@ components: runtimeClassName: runtimeClassName tolerations: - effect: effect - tolerationSeconds: 6 + tolerationSeconds: 8 value: value key: key operator: operator - effect: effect - tolerationSeconds: 6 + tolerationSeconds: 8 value: value key: key operator: operator @@ -247174,7 +261089,7 @@ components: topologySpreadConstraints: - nodeTaintsPolicy: nodeTaintsPolicy whenUnsatisfiable: whenUnsatisfiable - maxSkew: 8 + maxSkew: 9 nodeAffinityPolicy: nodeAffinityPolicy labelSelector: matchExpressions: @@ -247190,14 +261105,14 @@ components: operator: operator matchLabels: key: matchLabels - minDomains: 9 + minDomains: 6 topologyKey: topologyKey matchLabelKeys: - matchLabelKeys - matchLabelKeys - nodeTaintsPolicy: nodeTaintsPolicy whenUnsatisfiable: whenUnsatisfiable - maxSkew: 8 + maxSkew: 9 nodeAffinityPolicy: nodeAffinityPolicy labelSelector: matchExpressions: @@ -247213,7 +261128,7 @@ components: operator: operator matchLabels: key: matchLabels - minDomains: 9 + minDomains: 6 topologyKey: topologyKey matchLabelKeys: - matchLabelKeys @@ -247325,19 +261240,22 @@ components: secret: secretName: secretName defaultMode: 7 + defaultUser: 5 optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key projected: sources: - downwardAPI: items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -247346,7 +261264,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -247355,39 +261274,46 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 configMap: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key podCertificate: certificateChainPath: certificateChainPath userAnnotations: key: userAnnotations keyPath: keyPath - maxExpirationSeconds: 3 + maxExpirationSeconds: 8 keyType: keyType + user: 7 credentialBundlePath: credentialBundlePath signerName: signerName secret: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key serviceAccountToken: path: path audience: audience expirationSeconds: 3 + user: 3 clusterTrustBundle: path: path labelSelector: @@ -247406,10 +261332,11 @@ components: key: matchLabels name: name optional: true + user: 4 signerName: signerName - downwardAPI: items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -247418,7 +261345,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -247427,39 +261355,46 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 configMap: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key podCertificate: certificateChainPath: certificateChainPath userAnnotations: key: userAnnotations keyPath: keyPath - maxExpirationSeconds: 3 + maxExpirationSeconds: 8 keyType: keyType + user: 7 credentialBundlePath: credentialBundlePath signerName: signerName secret: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key serviceAccountToken: path: path audience: audience expirationSeconds: 3 + user: 3 clusterTrustBundle: path: path labelSelector: @@ -247478,8 +261413,10 @@ components: key: matchLabels name: name optional: true + user: 4 signerName: signerName defaultMode: 6 + defaultUser: 0 cephfs: path: path secretRef: @@ -247503,6 +261440,7 @@ components: storagePool: storagePool gateway: gateway emptyDir: + mode: 3 sizeLimit: sizeLimit medium: medium glusterfs: @@ -247510,7 +261448,7 @@ components: endpoints: endpoints readOnly: true gcePersistentDisk: - partition: 6 + partition: 0 readOnly: true pdName: pdName fsType: fsType @@ -247534,9 +261472,10 @@ components: readOnly: true fsType: fsType downwardAPI: - defaultMode: 1 + defaultMode: 6 + defaultUser: 5 items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -247545,7 +261484,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -247554,8 +261494,9 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 awsElasticBlockStore: - partition: 6 + partition: 3 volumeID: volumeID readOnly: true fsType: fsType @@ -247565,7 +261506,7 @@ components: iscsi: chapAuthSession: true iscsiInterface: iscsiInterface - lun: 5 + lun: 7 chapAuthDiscovery: true iqn: iqn portals: @@ -247590,15 +261531,18 @@ components: - monitors - monitors configMap: - defaultMode: 3 + defaultMode: 6 name: name + defaultUser: 1 optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key storageos: volumeNamespace: volumeNamespace @@ -247637,7 +261581,7 @@ components: volumePath: volumePath fsType: fsType fc: - lun: 6 + lun: 7 targetWWNs: - targetWWNs - targetWWNs @@ -247755,19 +261699,22 @@ components: secret: secretName: secretName defaultMode: 7 + defaultUser: 5 optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key projected: sources: - downwardAPI: items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -247776,7 +261723,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -247785,39 +261733,46 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 configMap: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key podCertificate: certificateChainPath: certificateChainPath userAnnotations: key: userAnnotations keyPath: keyPath - maxExpirationSeconds: 3 + maxExpirationSeconds: 8 keyType: keyType + user: 7 credentialBundlePath: credentialBundlePath signerName: signerName secret: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key serviceAccountToken: path: path audience: audience expirationSeconds: 3 + user: 3 clusterTrustBundle: path: path labelSelector: @@ -247836,10 +261791,11 @@ components: key: matchLabels name: name optional: true + user: 4 signerName: signerName - downwardAPI: items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -247848,7 +261804,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -247857,39 +261814,46 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 configMap: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key podCertificate: certificateChainPath: certificateChainPath userAnnotations: key: userAnnotations keyPath: keyPath - maxExpirationSeconds: 3 + maxExpirationSeconds: 8 keyType: keyType + user: 7 credentialBundlePath: credentialBundlePath signerName: signerName secret: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key serviceAccountToken: path: path audience: audience expirationSeconds: 3 + user: 3 clusterTrustBundle: path: path labelSelector: @@ -247908,8 +261872,10 @@ components: key: matchLabels name: name optional: true + user: 4 signerName: signerName defaultMode: 6 + defaultUser: 0 cephfs: path: path secretRef: @@ -247933,6 +261899,7 @@ components: storagePool: storagePool gateway: gateway emptyDir: + mode: 3 sizeLimit: sizeLimit medium: medium glusterfs: @@ -247940,7 +261907,7 @@ components: endpoints: endpoints readOnly: true gcePersistentDisk: - partition: 6 + partition: 0 readOnly: true pdName: pdName fsType: fsType @@ -247964,9 +261931,10 @@ components: readOnly: true fsType: fsType downwardAPI: - defaultMode: 1 + defaultMode: 6 + defaultUser: 5 items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -247975,7 +261943,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -247984,8 +261953,9 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 awsElasticBlockStore: - partition: 6 + partition: 3 volumeID: volumeID readOnly: true fsType: fsType @@ -247995,7 +261965,7 @@ components: iscsi: chapAuthSession: true iscsiInterface: iscsiInterface - lun: 5 + lun: 7 chapAuthDiscovery: true iqn: iqn portals: @@ -248020,15 +261990,18 @@ components: - monitors - monitors configMap: - defaultMode: 3 + defaultMode: 6 name: name + defaultUser: 1 optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key storageos: volumeNamespace: volumeNamespace @@ -248067,7 +262040,7 @@ components: volumePath: volumePath fsType: fsType fc: - lun: 6 + lun: 7 targetWWNs: - targetWWNs - targetWWNs @@ -248156,10 +262129,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -248183,6 +262158,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -248190,6 +262168,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -248207,6 +262188,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -248227,6 +262209,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -248251,10 +262234,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -248300,10 +262285,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -248448,10 +262435,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -248475,6 +262464,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -248482,6 +262474,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -248499,6 +262494,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -248519,6 +262515,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -248543,10 +262540,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -248592,10 +262591,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -248675,9 +262676,14 @@ components: tty: true stdinOnce: true serviceAccount: serviceAccount - priority: 7 + priority: 1 restartPolicy: restartPolicy shareProcessNamespace: true + evictionResponders: + - name: name + priority: 7 + - name: name + priority: 7 hostUsers: true resourceClaims: - resourceClaimName: resourceClaimName @@ -248754,10 +262760,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -248781,6 +262789,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -248788,6 +262799,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -248805,6 +262819,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -248825,6 +262840,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -248849,10 +262865,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -248898,10 +262916,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -249045,10 +263065,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -249072,6 +263094,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -249079,6 +263104,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -249096,6 +263124,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -249116,6 +263145,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -249140,10 +263170,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -249189,10 +263221,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -249337,10 +263371,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -249364,6 +263400,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -249371,6 +263410,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -249388,6 +263430,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -249408,6 +263451,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -249432,10 +263476,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -249481,10 +263527,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -249628,10 +263676,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -249655,6 +263705,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -249662,6 +263715,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -249679,6 +263735,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -249699,6 +263756,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -249723,10 +263781,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -249772,10 +263832,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -250457,7 +264519,7 @@ components: spec: dnsPolicy: dnsPolicy nodeName: nodeName - terminationGracePeriodSeconds: 9 + terminationGracePeriodSeconds: 6 dnsConfig: searches: - searches @@ -250498,17 +264560,17 @@ components: appArmorProfile: localhostProfile: localhostProfile type: type - fsGroup: 1 + fsGroup: 4 fsGroupChangePolicy: fsGroupChangePolicy seLinuxChangePolicy: seLinuxChangePolicy - runAsGroup: 4 + runAsGroup: 5 runAsNonRoot: true sysctls: - name: name value: value - name: name value: value - runAsUser: 5 + runAsUser: 9 seccompProfile: localhostProfile: localhostProfile type: type @@ -250528,12 +264590,12 @@ components: runtimeClassName: runtimeClassName tolerations: - effect: effect - tolerationSeconds: 6 + tolerationSeconds: 8 value: value key: key operator: operator - effect: effect - tolerationSeconds: 6 + tolerationSeconds: 8 value: value key: key operator: operator @@ -250555,7 +264617,7 @@ components: topologySpreadConstraints: - nodeTaintsPolicy: nodeTaintsPolicy whenUnsatisfiable: whenUnsatisfiable - maxSkew: 8 + maxSkew: 9 nodeAffinityPolicy: nodeAffinityPolicy labelSelector: matchExpressions: @@ -250571,14 +264633,14 @@ components: operator: operator matchLabels: key: matchLabels - minDomains: 9 + minDomains: 6 topologyKey: topologyKey matchLabelKeys: - matchLabelKeys - matchLabelKeys - nodeTaintsPolicy: nodeTaintsPolicy whenUnsatisfiable: whenUnsatisfiable - maxSkew: 8 + maxSkew: 9 nodeAffinityPolicy: nodeAffinityPolicy labelSelector: matchExpressions: @@ -250594,7 +264656,7 @@ components: operator: operator matchLabels: key: matchLabels - minDomains: 9 + minDomains: 6 topologyKey: topologyKey matchLabelKeys: - matchLabelKeys @@ -250706,19 +264768,22 @@ components: secret: secretName: secretName defaultMode: 7 + defaultUser: 5 optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key projected: sources: - downwardAPI: items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -250727,7 +264792,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -250736,39 +264802,46 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 configMap: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key podCertificate: certificateChainPath: certificateChainPath userAnnotations: key: userAnnotations keyPath: keyPath - maxExpirationSeconds: 3 + maxExpirationSeconds: 8 keyType: keyType + user: 7 credentialBundlePath: credentialBundlePath signerName: signerName secret: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key serviceAccountToken: path: path audience: audience expirationSeconds: 3 + user: 3 clusterTrustBundle: path: path labelSelector: @@ -250787,10 +264860,11 @@ components: key: matchLabels name: name optional: true + user: 4 signerName: signerName - downwardAPI: items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -250799,7 +264873,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -250808,39 +264883,46 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 configMap: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key podCertificate: certificateChainPath: certificateChainPath userAnnotations: key: userAnnotations keyPath: keyPath - maxExpirationSeconds: 3 + maxExpirationSeconds: 8 keyType: keyType + user: 7 credentialBundlePath: credentialBundlePath signerName: signerName secret: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key serviceAccountToken: path: path audience: audience expirationSeconds: 3 + user: 3 clusterTrustBundle: path: path labelSelector: @@ -250859,8 +264941,10 @@ components: key: matchLabels name: name optional: true + user: 4 signerName: signerName defaultMode: 6 + defaultUser: 0 cephfs: path: path secretRef: @@ -250884,6 +264968,7 @@ components: storagePool: storagePool gateway: gateway emptyDir: + mode: 3 sizeLimit: sizeLimit medium: medium glusterfs: @@ -250891,7 +264976,7 @@ components: endpoints: endpoints readOnly: true gcePersistentDisk: - partition: 6 + partition: 0 readOnly: true pdName: pdName fsType: fsType @@ -250915,9 +265000,10 @@ components: readOnly: true fsType: fsType downwardAPI: - defaultMode: 1 + defaultMode: 6 + defaultUser: 5 items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -250926,7 +265012,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -250935,8 +265022,9 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 awsElasticBlockStore: - partition: 6 + partition: 3 volumeID: volumeID readOnly: true fsType: fsType @@ -250946,7 +265034,7 @@ components: iscsi: chapAuthSession: true iscsiInterface: iscsiInterface - lun: 5 + lun: 7 chapAuthDiscovery: true iqn: iqn portals: @@ -250971,15 +265059,18 @@ components: - monitors - monitors configMap: - defaultMode: 3 + defaultMode: 6 name: name + defaultUser: 1 optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key storageos: volumeNamespace: volumeNamespace @@ -251018,7 +265109,7 @@ components: volumePath: volumePath fsType: fsType fc: - lun: 6 + lun: 7 targetWWNs: - targetWWNs - targetWWNs @@ -251136,19 +265227,22 @@ components: secret: secretName: secretName defaultMode: 7 + defaultUser: 5 optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key projected: sources: - downwardAPI: items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -251157,7 +265251,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -251166,39 +265261,46 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 configMap: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key podCertificate: certificateChainPath: certificateChainPath userAnnotations: key: userAnnotations keyPath: keyPath - maxExpirationSeconds: 3 + maxExpirationSeconds: 8 keyType: keyType + user: 7 credentialBundlePath: credentialBundlePath signerName: signerName secret: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key serviceAccountToken: path: path audience: audience expirationSeconds: 3 + user: 3 clusterTrustBundle: path: path labelSelector: @@ -251217,10 +265319,11 @@ components: key: matchLabels name: name optional: true + user: 4 signerName: signerName - downwardAPI: items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -251229,7 +265332,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -251238,39 +265342,46 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 configMap: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key podCertificate: certificateChainPath: certificateChainPath userAnnotations: key: userAnnotations keyPath: keyPath - maxExpirationSeconds: 3 + maxExpirationSeconds: 8 keyType: keyType + user: 7 credentialBundlePath: credentialBundlePath signerName: signerName secret: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key serviceAccountToken: path: path audience: audience expirationSeconds: 3 + user: 3 clusterTrustBundle: path: path labelSelector: @@ -251289,8 +265400,10 @@ components: key: matchLabels name: name optional: true + user: 4 signerName: signerName defaultMode: 6 + defaultUser: 0 cephfs: path: path secretRef: @@ -251314,6 +265427,7 @@ components: storagePool: storagePool gateway: gateway emptyDir: + mode: 3 sizeLimit: sizeLimit medium: medium glusterfs: @@ -251321,7 +265435,7 @@ components: endpoints: endpoints readOnly: true gcePersistentDisk: - partition: 6 + partition: 0 readOnly: true pdName: pdName fsType: fsType @@ -251345,9 +265459,10 @@ components: readOnly: true fsType: fsType downwardAPI: - defaultMode: 1 + defaultMode: 6 + defaultUser: 5 items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -251356,7 +265471,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -251365,8 +265481,9 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 awsElasticBlockStore: - partition: 6 + partition: 3 volumeID: volumeID readOnly: true fsType: fsType @@ -251376,7 +265493,7 @@ components: iscsi: chapAuthSession: true iscsiInterface: iscsiInterface - lun: 5 + lun: 7 chapAuthDiscovery: true iqn: iqn portals: @@ -251401,15 +265518,18 @@ components: - monitors - monitors configMap: - defaultMode: 3 + defaultMode: 6 name: name + defaultUser: 1 optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key storageos: volumeNamespace: volumeNamespace @@ -251448,7 +265568,7 @@ components: volumePath: volumePath fsType: fsType fc: - lun: 6 + lun: 7 targetWWNs: - targetWWNs - targetWWNs @@ -251537,10 +265657,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -251564,6 +265686,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -251571,6 +265696,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -251588,6 +265716,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -251608,6 +265737,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -251632,10 +265762,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -251681,10 +265813,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -251829,10 +265963,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -251856,6 +265992,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -251863,6 +266002,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -251880,6 +266022,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -251900,6 +266043,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -251924,10 +266068,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -251973,10 +266119,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -252056,9 +266204,14 @@ components: tty: true stdinOnce: true serviceAccount: serviceAccount - priority: 7 + priority: 1 restartPolicy: restartPolicy shareProcessNamespace: true + evictionResponders: + - name: name + priority: 7 + - name: name + priority: 7 hostUsers: true resourceClaims: - resourceClaimName: resourceClaimName @@ -252135,10 +266288,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -252162,6 +266317,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -252169,6 +266327,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -252186,6 +266347,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -252206,6 +266368,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -252230,10 +266393,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -252279,10 +266444,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -252426,10 +266593,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -252453,6 +266622,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -252460,6 +266632,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -252477,6 +266652,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -252497,6 +266673,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -252521,10 +266698,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -252570,10 +266749,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -252718,10 +266899,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -252745,6 +266928,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -252752,6 +266938,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -252769,6 +266958,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -252789,6 +266979,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -252813,10 +267004,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -252862,10 +267055,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -253009,10 +267204,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -253036,6 +267233,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -253043,6 +267243,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -253060,6 +267263,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -253080,6 +267284,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -253104,10 +267309,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -253153,10 +267360,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -253770,7 +267979,7 @@ components: spec: dnsPolicy: dnsPolicy nodeName: nodeName - terminationGracePeriodSeconds: 9 + terminationGracePeriodSeconds: 6 dnsConfig: searches: - searches @@ -253811,17 +268020,17 @@ components: appArmorProfile: localhostProfile: localhostProfile type: type - fsGroup: 1 + fsGroup: 4 fsGroupChangePolicy: fsGroupChangePolicy seLinuxChangePolicy: seLinuxChangePolicy - runAsGroup: 4 + runAsGroup: 5 runAsNonRoot: true sysctls: - name: name value: value - name: name value: value - runAsUser: 5 + runAsUser: 9 seccompProfile: localhostProfile: localhostProfile type: type @@ -253841,12 +268050,12 @@ components: runtimeClassName: runtimeClassName tolerations: - effect: effect - tolerationSeconds: 6 + tolerationSeconds: 8 value: value key: key operator: operator - effect: effect - tolerationSeconds: 6 + tolerationSeconds: 8 value: value key: key operator: operator @@ -253868,7 +268077,7 @@ components: topologySpreadConstraints: - nodeTaintsPolicy: nodeTaintsPolicy whenUnsatisfiable: whenUnsatisfiable - maxSkew: 8 + maxSkew: 9 nodeAffinityPolicy: nodeAffinityPolicy labelSelector: matchExpressions: @@ -253884,14 +268093,14 @@ components: operator: operator matchLabels: key: matchLabels - minDomains: 9 + minDomains: 6 topologyKey: topologyKey matchLabelKeys: - matchLabelKeys - matchLabelKeys - nodeTaintsPolicy: nodeTaintsPolicy whenUnsatisfiable: whenUnsatisfiable - maxSkew: 8 + maxSkew: 9 nodeAffinityPolicy: nodeAffinityPolicy labelSelector: matchExpressions: @@ -253907,7 +268116,7 @@ components: operator: operator matchLabels: key: matchLabels - minDomains: 9 + minDomains: 6 topologyKey: topologyKey matchLabelKeys: - matchLabelKeys @@ -254019,19 +268228,22 @@ components: secret: secretName: secretName defaultMode: 7 + defaultUser: 5 optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key projected: sources: - downwardAPI: items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -254040,7 +268252,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -254049,39 +268262,46 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 configMap: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key podCertificate: certificateChainPath: certificateChainPath userAnnotations: key: userAnnotations keyPath: keyPath - maxExpirationSeconds: 3 + maxExpirationSeconds: 8 keyType: keyType + user: 7 credentialBundlePath: credentialBundlePath signerName: signerName secret: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key serviceAccountToken: path: path audience: audience expirationSeconds: 3 + user: 3 clusterTrustBundle: path: path labelSelector: @@ -254100,10 +268320,11 @@ components: key: matchLabels name: name optional: true + user: 4 signerName: signerName - downwardAPI: items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -254112,7 +268333,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -254121,39 +268343,46 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 configMap: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key podCertificate: certificateChainPath: certificateChainPath userAnnotations: key: userAnnotations keyPath: keyPath - maxExpirationSeconds: 3 + maxExpirationSeconds: 8 keyType: keyType + user: 7 credentialBundlePath: credentialBundlePath signerName: signerName secret: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key serviceAccountToken: path: path audience: audience expirationSeconds: 3 + user: 3 clusterTrustBundle: path: path labelSelector: @@ -254172,8 +268401,10 @@ components: key: matchLabels name: name optional: true + user: 4 signerName: signerName defaultMode: 6 + defaultUser: 0 cephfs: path: path secretRef: @@ -254197,6 +268428,7 @@ components: storagePool: storagePool gateway: gateway emptyDir: + mode: 3 sizeLimit: sizeLimit medium: medium glusterfs: @@ -254204,7 +268436,7 @@ components: endpoints: endpoints readOnly: true gcePersistentDisk: - partition: 6 + partition: 0 readOnly: true pdName: pdName fsType: fsType @@ -254228,9 +268460,10 @@ components: readOnly: true fsType: fsType downwardAPI: - defaultMode: 1 + defaultMode: 6 + defaultUser: 5 items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -254239,7 +268472,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -254248,8 +268482,9 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 awsElasticBlockStore: - partition: 6 + partition: 3 volumeID: volumeID readOnly: true fsType: fsType @@ -254259,7 +268494,7 @@ components: iscsi: chapAuthSession: true iscsiInterface: iscsiInterface - lun: 5 + lun: 7 chapAuthDiscovery: true iqn: iqn portals: @@ -254284,15 +268519,18 @@ components: - monitors - monitors configMap: - defaultMode: 3 + defaultMode: 6 name: name + defaultUser: 1 optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key storageos: volumeNamespace: volumeNamespace @@ -254331,7 +268569,7 @@ components: volumePath: volumePath fsType: fsType fc: - lun: 6 + lun: 7 targetWWNs: - targetWWNs - targetWWNs @@ -254449,19 +268687,22 @@ components: secret: secretName: secretName defaultMode: 7 + defaultUser: 5 optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key projected: sources: - downwardAPI: items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -254470,7 +268711,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -254479,39 +268721,46 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 configMap: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key podCertificate: certificateChainPath: certificateChainPath userAnnotations: key: userAnnotations keyPath: keyPath - maxExpirationSeconds: 3 + maxExpirationSeconds: 8 keyType: keyType + user: 7 credentialBundlePath: credentialBundlePath signerName: signerName secret: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key serviceAccountToken: path: path audience: audience expirationSeconds: 3 + user: 3 clusterTrustBundle: path: path labelSelector: @@ -254530,10 +268779,11 @@ components: key: matchLabels name: name optional: true + user: 4 signerName: signerName - downwardAPI: items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -254542,7 +268792,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -254551,39 +268802,46 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 configMap: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key podCertificate: certificateChainPath: certificateChainPath userAnnotations: key: userAnnotations keyPath: keyPath - maxExpirationSeconds: 3 + maxExpirationSeconds: 8 keyType: keyType + user: 7 credentialBundlePath: credentialBundlePath signerName: signerName secret: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key serviceAccountToken: path: path audience: audience expirationSeconds: 3 + user: 3 clusterTrustBundle: path: path labelSelector: @@ -254602,8 +268860,10 @@ components: key: matchLabels name: name optional: true + user: 4 signerName: signerName defaultMode: 6 + defaultUser: 0 cephfs: path: path secretRef: @@ -254627,6 +268887,7 @@ components: storagePool: storagePool gateway: gateway emptyDir: + mode: 3 sizeLimit: sizeLimit medium: medium glusterfs: @@ -254634,7 +268895,7 @@ components: endpoints: endpoints readOnly: true gcePersistentDisk: - partition: 6 + partition: 0 readOnly: true pdName: pdName fsType: fsType @@ -254658,9 +268919,10 @@ components: readOnly: true fsType: fsType downwardAPI: - defaultMode: 1 + defaultMode: 6 + defaultUser: 5 items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -254669,7 +268931,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -254678,8 +268941,9 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 awsElasticBlockStore: - partition: 6 + partition: 3 volumeID: volumeID readOnly: true fsType: fsType @@ -254689,7 +268953,7 @@ components: iscsi: chapAuthSession: true iscsiInterface: iscsiInterface - lun: 5 + lun: 7 chapAuthDiscovery: true iqn: iqn portals: @@ -254714,15 +268978,18 @@ components: - monitors - monitors configMap: - defaultMode: 3 + defaultMode: 6 name: name + defaultUser: 1 optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key storageos: volumeNamespace: volumeNamespace @@ -254761,7 +269028,7 @@ components: volumePath: volumePath fsType: fsType fc: - lun: 6 + lun: 7 targetWWNs: - targetWWNs - targetWWNs @@ -254850,10 +269117,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -254877,6 +269146,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -254884,6 +269156,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -254901,6 +269176,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -254921,6 +269197,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -254945,10 +269222,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -254994,10 +269273,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -255142,10 +269423,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -255169,6 +269452,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -255176,6 +269462,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -255193,6 +269482,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -255213,6 +269503,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -255237,10 +269528,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -255286,10 +269579,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -255369,9 +269664,14 @@ components: tty: true stdinOnce: true serviceAccount: serviceAccount - priority: 7 + priority: 1 restartPolicy: restartPolicy shareProcessNamespace: true + evictionResponders: + - name: name + priority: 7 + - name: name + priority: 7 hostUsers: true resourceClaims: - resourceClaimName: resourceClaimName @@ -255448,10 +269748,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -255475,6 +269777,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -255482,6 +269787,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -255499,6 +269807,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -255519,6 +269828,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -255543,10 +269853,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -255592,10 +269904,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -255739,10 +270053,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -255766,6 +270082,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -255773,6 +270092,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -255790,6 +270112,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -255810,6 +270133,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -255834,10 +270158,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -255883,10 +270209,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -256031,10 +270359,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -256058,6 +270388,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -256065,6 +270398,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -256082,6 +270418,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -256102,6 +270439,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -256126,10 +270464,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -256175,10 +270515,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -256322,10 +270664,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -256349,6 +270693,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -256356,6 +270703,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -256373,6 +270723,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -256393,6 +270744,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -256417,10 +270769,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -256466,10 +270820,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -257065,7 +271421,7 @@ components: spec: dnsPolicy: dnsPolicy nodeName: nodeName - terminationGracePeriodSeconds: 9 + terminationGracePeriodSeconds: 6 dnsConfig: searches: - searches @@ -257106,17 +271462,17 @@ components: appArmorProfile: localhostProfile: localhostProfile type: type - fsGroup: 1 + fsGroup: 4 fsGroupChangePolicy: fsGroupChangePolicy seLinuxChangePolicy: seLinuxChangePolicy - runAsGroup: 4 + runAsGroup: 5 runAsNonRoot: true sysctls: - name: name value: value - name: name value: value - runAsUser: 5 + runAsUser: 9 seccompProfile: localhostProfile: localhostProfile type: type @@ -257136,12 +271492,12 @@ components: runtimeClassName: runtimeClassName tolerations: - effect: effect - tolerationSeconds: 6 + tolerationSeconds: 8 value: value key: key operator: operator - effect: effect - tolerationSeconds: 6 + tolerationSeconds: 8 value: value key: key operator: operator @@ -257163,7 +271519,7 @@ components: topologySpreadConstraints: - nodeTaintsPolicy: nodeTaintsPolicy whenUnsatisfiable: whenUnsatisfiable - maxSkew: 8 + maxSkew: 9 nodeAffinityPolicy: nodeAffinityPolicy labelSelector: matchExpressions: @@ -257179,14 +271535,14 @@ components: operator: operator matchLabels: key: matchLabels - minDomains: 9 + minDomains: 6 topologyKey: topologyKey matchLabelKeys: - matchLabelKeys - matchLabelKeys - nodeTaintsPolicy: nodeTaintsPolicy whenUnsatisfiable: whenUnsatisfiable - maxSkew: 8 + maxSkew: 9 nodeAffinityPolicy: nodeAffinityPolicy labelSelector: matchExpressions: @@ -257194,20 +271550,479 @@ components: - values - values key: key - operator: operator - - values: - - values - - values + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + minDomains: 6 + topologyKey: topologyKey + matchLabelKeys: + - matchLabelKeys + - matchLabelKeys + volumes: + - quobyte: + volume: volume + registry: registry + readOnly: true + user: user + tenant: tenant + group: group + azureFile: + secretName: secretName + readOnly: true + shareName: shareName + flexVolume: + driver: driver + options: + key: options + secretRef: + name: name + readOnly: true + fsType: fsType + ephemeral: + volumeClaimTemplate: + metadata: + generation: 6 + finalizers: + - finalizers + - finalizers + resourceVersion: resourceVersion + annotations: + key: annotations + generateName: generateName + deletionTimestamp: 2000-01-23T04:56:07.000+00:00 + labels: + key: labels + ownerReferences: + - uid: uid + controller: true + apiVersion: apiVersion + kind: kind + name: name + blockOwnerDeletion: true + - uid: uid + controller: true + apiVersion: apiVersion + kind: kind + name: name + blockOwnerDeletion: true + selfLink: selfLink + deletionGracePeriodSeconds: 0 + uid: uid + managedFields: + - apiVersion: apiVersion + fieldsV1: "{}" + manager: manager + subresource: subresource + time: 2000-01-23T04:56:07.000+00:00 + operation: operation + fieldsType: fieldsType + - apiVersion: apiVersion + fieldsV1: "{}" + manager: manager + subresource: subresource + time: 2000-01-23T04:56:07.000+00:00 + operation: operation + fieldsType: fieldsType + creationTimestamp: 2000-01-23T04:56:07.000+00:00 + name: name + namespace: namespace + spec: + storageClassName: storageClassName + dataSourceRef: + apiGroup: apiGroup + kind: kind + name: name + namespace: namespace + volumeName: volumeName + volumeAttributesClassName: volumeAttributesClassName + resources: + requests: + key: null + limits: + key: null + selector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + accessModes: + - accessModes + - accessModes + dataSource: + apiGroup: apiGroup + kind: kind + name: name + volumeMode: volumeMode + secret: + secretName: secretName + defaultMode: 7 + defaultUser: 5 + optional: true + items: + - mode: 2 + path: path + user: 6 + key: key + - mode: 2 + path: path + user: 6 + key: key + projected: + sources: + - downwardAPI: + items: + - mode: 6 + path: path + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + user: 3 + - mode: 6 + path: path + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + user: 3 + configMap: + name: name + optional: true + items: + - mode: 2 + path: path + user: 6 + key: key + - mode: 2 + path: path + user: 6 + key: key + podCertificate: + certificateChainPath: certificateChainPath + userAnnotations: + key: userAnnotations + keyPath: keyPath + maxExpirationSeconds: 8 + keyType: keyType + user: 7 + credentialBundlePath: credentialBundlePath + signerName: signerName + secret: + name: name + optional: true + items: + - mode: 2 + path: path + user: 6 + key: key + - mode: 2 + path: path + user: 6 + key: key + serviceAccountToken: + path: path + audience: audience + expirationSeconds: 3 + user: 3 + clusterTrustBundle: + path: path + labelSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + name: name + optional: true + user: 4 + signerName: signerName + - downwardAPI: + items: + - mode: 6 + path: path + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + user: 3 + - mode: 6 + path: path + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + user: 3 + configMap: + name: name + optional: true + items: + - mode: 2 + path: path + user: 6 + key: key + - mode: 2 + path: path + user: 6 + key: key + podCertificate: + certificateChainPath: certificateChainPath + userAnnotations: + key: userAnnotations + keyPath: keyPath + maxExpirationSeconds: 8 + keyType: keyType + user: 7 + credentialBundlePath: credentialBundlePath + signerName: signerName + secret: + name: name + optional: true + items: + - mode: 2 + path: path + user: 6 + key: key + - mode: 2 + path: path + user: 6 + key: key + serviceAccountToken: + path: path + audience: audience + expirationSeconds: 3 + user: 3 + clusterTrustBundle: + path: path + labelSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + name: name + optional: true + user: 4 + signerName: signerName + defaultMode: 6 + defaultUser: 0 + cephfs: + path: path + secretRef: + name: name + secretFile: secretFile + readOnly: true + user: user + monitors: + - monitors + - monitors + scaleIO: + system: system + protectionDomain: protectionDomain + sslEnabled: true + storageMode: storageMode + volumeName: volumeName + secretRef: + name: name + readOnly: true + fsType: fsType + storagePool: storagePool + gateway: gateway + emptyDir: + mode: 3 + sizeLimit: sizeLimit + medium: medium + glusterfs: + path: path + endpoints: endpoints + readOnly: true + gcePersistentDisk: + partition: 0 + readOnly: true + pdName: pdName + fsType: fsType + image: + reference: reference + pullPolicy: pullPolicy + photonPersistentDisk: + pdID: pdID + fsType: fsType + azureDisk: + diskName: diskName + kind: kind + readOnly: true + cachingMode: cachingMode + diskURI: diskURI + fsType: fsType + cinder: + secretRef: + name: name + volumeID: volumeID + readOnly: true + fsType: fsType + downwardAPI: + defaultMode: 6 + defaultUser: 5 + items: + - mode: 6 + path: path + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + user: 3 + - mode: 6 + path: path + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + user: 3 + awsElasticBlockStore: + partition: 3 + volumeID: volumeID + readOnly: true + fsType: fsType + flocker: + datasetName: datasetName + datasetUUID: datasetUUID + iscsi: + chapAuthSession: true + iscsiInterface: iscsiInterface + lun: 7 + chapAuthDiscovery: true + iqn: iqn + portals: + - portals + - portals + secretRef: + name: name + initiatorName: initiatorName + readOnly: true + fsType: fsType + targetPortal: targetPortal + rbd: + image: image + pool: pool + secretRef: + name: name + readOnly: true + fsType: fsType + keyring: keyring + user: user + monitors: + - monitors + - monitors + configMap: + defaultMode: 6 + name: name + defaultUser: 1 + optional: true + items: + - mode: 2 + path: path + user: 6 + key: key + - mode: 2 + path: path + user: 6 key: key - operator: operator - matchLabels: - key: matchLabels - minDomains: 9 - topologyKey: topologyKey - matchLabelKeys: - - matchLabelKeys - - matchLabelKeys - volumes: + storageos: + volumeNamespace: volumeNamespace + volumeName: volumeName + secretRef: + name: name + readOnly: true + fsType: fsType + csi: + driver: driver + nodePublishSecretRef: + name: name + readOnly: true + fsType: fsType + volumeAttributes: + key: volumeAttributes + name: name + nfs: + path: path + server: server + readOnly: true + persistentVolumeClaim: + claimName: claimName + readOnly: true + gitRepo: + repository: repository + directory: directory + revision: revision + portworxVolume: + volumeID: volumeID + readOnly: true + fsType: fsType + vsphereVolume: + storagePolicyName: storagePolicyName + storagePolicyID: storagePolicyID + volumePath: volumePath + fsType: fsType + fc: + lun: 7 + targetWWNs: + - targetWWNs + - targetWWNs + readOnly: true + wwids: + - wwids + - wwids + fsType: fsType + hostPath: + path: path + type: type - quobyte: volume: volume registry: registry @@ -257314,19 +272129,22 @@ components: secret: secretName: secretName defaultMode: 7 + defaultUser: 5 optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key projected: sources: - downwardAPI: items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -257335,7 +272153,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -257344,39 +272163,46 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 configMap: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key podCertificate: certificateChainPath: certificateChainPath userAnnotations: key: userAnnotations keyPath: keyPath - maxExpirationSeconds: 3 + maxExpirationSeconds: 8 keyType: keyType + user: 7 credentialBundlePath: credentialBundlePath signerName: signerName secret: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key serviceAccountToken: path: path audience: audience expirationSeconds: 3 + user: 3 clusterTrustBundle: path: path labelSelector: @@ -257395,10 +272221,11 @@ components: key: matchLabels name: name optional: true + user: 4 signerName: signerName - downwardAPI: items: - - mode: 2 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -257407,7 +272234,8 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 + user: 3 + - mode: 6 path: path resourceFieldRef: divisor: divisor @@ -257416,669 +272244,1497 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + user: 3 configMap: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key podCertificate: certificateChainPath: certificateChainPath userAnnotations: key: userAnnotations keyPath: keyPath - maxExpirationSeconds: 3 + maxExpirationSeconds: 8 keyType: keyType + user: 7 credentialBundlePath: credentialBundlePath signerName: signerName secret: name: name optional: true items: - - mode: 6 + - mode: 2 path: path + user: 6 key: key - - mode: 6 + - mode: 2 path: path + user: 6 key: key serviceAccountToken: path: path - audience: audience - expirationSeconds: 3 - clusterTrustBundle: + audience: audience + expirationSeconds: 3 + user: 3 + clusterTrustBundle: + path: path + labelSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + name: name + optional: true + user: 4 + signerName: signerName + defaultMode: 6 + defaultUser: 0 + cephfs: + path: path + secretRef: + name: name + secretFile: secretFile + readOnly: true + user: user + monitors: + - monitors + - monitors + scaleIO: + system: system + protectionDomain: protectionDomain + sslEnabled: true + storageMode: storageMode + volumeName: volumeName + secretRef: + name: name + readOnly: true + fsType: fsType + storagePool: storagePool + gateway: gateway + emptyDir: + mode: 3 + sizeLimit: sizeLimit + medium: medium + glusterfs: + path: path + endpoints: endpoints + readOnly: true + gcePersistentDisk: + partition: 0 + readOnly: true + pdName: pdName + fsType: fsType + image: + reference: reference + pullPolicy: pullPolicy + photonPersistentDisk: + pdID: pdID + fsType: fsType + azureDisk: + diskName: diskName + kind: kind + readOnly: true + cachingMode: cachingMode + diskURI: diskURI + fsType: fsType + cinder: + secretRef: + name: name + volumeID: volumeID + readOnly: true + fsType: fsType + downwardAPI: + defaultMode: 6 + defaultUser: 5 + items: + - mode: 6 + path: path + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + user: 3 + - mode: 6 + path: path + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + user: 3 + awsElasticBlockStore: + partition: 3 + volumeID: volumeID + readOnly: true + fsType: fsType + flocker: + datasetName: datasetName + datasetUUID: datasetUUID + iscsi: + chapAuthSession: true + iscsiInterface: iscsiInterface + lun: 7 + chapAuthDiscovery: true + iqn: iqn + portals: + - portals + - portals + secretRef: + name: name + initiatorName: initiatorName + readOnly: true + fsType: fsType + targetPortal: targetPortal + rbd: + image: image + pool: pool + secretRef: + name: name + readOnly: true + fsType: fsType + keyring: keyring + user: user + monitors: + - monitors + - monitors + configMap: + defaultMode: 6 + name: name + defaultUser: 1 + optional: true + items: + - mode: 2 + path: path + user: 6 + key: key + - mode: 2 + path: path + user: 6 + key: key + storageos: + volumeNamespace: volumeNamespace + volumeName: volumeName + secretRef: + name: name + readOnly: true + fsType: fsType + csi: + driver: driver + nodePublishSecretRef: + name: name + readOnly: true + fsType: fsType + volumeAttributes: + key: volumeAttributes + name: name + nfs: + path: path + server: server + readOnly: true + persistentVolumeClaim: + claimName: claimName + readOnly: true + gitRepo: + repository: repository + directory: directory + revision: revision + portworxVolume: + volumeID: volumeID + readOnly: true + fsType: fsType + vsphereVolume: + storagePolicyName: storagePolicyName + storagePolicyID: storagePolicyID + volumePath: volumePath + fsType: fsType + fc: + lun: 7 + targetWWNs: + - targetWWNs + - targetWWNs + readOnly: true + wwids: + - wwids + - wwids + fsType: fsType + hostPath: + path: path + type: type + resources: + claims: + - request: request + name: name + - request: request + name: name + requests: + key: null + limits: + key: null + ephemeralContainers: + - volumeDevices: + - devicePath: devicePath + name: name + - devicePath: devicePath + name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + stdin: true + terminationMessagePolicy: terminationMessagePolicy + securityContext: + privileged: true + runAsUser: 6 + capabilities: + add: + - add + - add + drop: + - drop + - drop + seLinuxOptions: + role: role + level: level + type: type + user: user + appArmorProfile: + localhostProfile: localhostProfile + type: type + seccompProfile: + localhostProfile: localhostProfile + type: type + windowsOptions: + gmsaCredentialSpec: gmsaCredentialSpec + runAsUserName: runAsUserName + hostProcess: true + gmsaCredentialSpecName: gmsaCredentialSpecName + procMount: procMount + allowPrivilegeEscalation: true + runAsGroup: 1 + runAsNonRoot: true + readOnlyRootFilesystem: true + startupProbe: + terminationGracePeriodSeconds: 2 + failureThreshold: 5 + periodSeconds: 9 + tcpSocket: + port: port + host: host + timeoutSeconds: 4 + successThreshold: 3 + initialDelaySeconds: 7 + exec: + command: + - command + - command + grpc: + mode: mode + port: 2 + service: service + httpGet: + path: path + protocol: protocol + scheme: scheme + port: port + host: host + httpHeaders: + - name: name + value: value + - name: name + value: value + ports: + - protocol: protocol + hostIP: hostIP + name: name + containerPort: 7 + hostPort: 1 + - protocol: protocol + hostIP: hostIP + name: name + containerPort: 7 + hostPort: 1 + volumeMounts: + - mountPath: mountPath + mountPropagation: mountPropagation + name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions + readOnly: true + subPath: subPath + recursiveReadOnly: recursiveReadOnly + subPathExpr: subPathExpr + - mountPath: mountPath + mountPropagation: mountPropagation + name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions + readOnly: true + subPath: subPath + recursiveReadOnly: recursiveReadOnly + subPathExpr: subPathExpr + lifecycle: + postStart: + sleep: + seconds: 5 + tcpSocket: + port: port + host: host + exec: + command: + - command + - command + httpGet: + path: path + protocol: protocol + scheme: scheme + port: port + host: host + httpHeaders: + - name: name + value: value + - name: name + value: value + preStop: + sleep: + seconds: 5 + tcpSocket: + port: port + host: host + exec: + command: + - command + - command + httpGet: + path: path + protocol: protocol + scheme: scheme + port: port + host: host + httpHeaders: + - name: name + value: value + - name: name + value: value + stopSignal: stopSignal + readinessProbe: + terminationGracePeriodSeconds: 2 + failureThreshold: 5 + periodSeconds: 9 + tcpSocket: + port: port + host: host + timeoutSeconds: 4 + successThreshold: 3 + initialDelaySeconds: 7 + exec: + command: + - command + - command + grpc: + mode: mode + port: 2 + service: service + httpGet: + path: path + protocol: protocol + scheme: scheme + port: port + host: host + httpHeaders: + - name: name + value: value + - name: name + value: value + resizePolicy: + - resourceName: resourceName + restartPolicy: restartPolicy + - resourceName: resourceName + restartPolicy: restartPolicy + envFrom: + - configMapRef: + name: name + optional: true + prefix: prefix + secretRef: + name: name + optional: true + - configMapRef: + name: name + optional: true + prefix: prefix + secretRef: + name: name + optional: true + image: image + imagePullPolicy: imagePullPolicy + livenessProbe: + terminationGracePeriodSeconds: 2 + failureThreshold: 5 + periodSeconds: 9 + tcpSocket: + port: port + host: host + timeoutSeconds: 4 + successThreshold: 3 + initialDelaySeconds: 7 + exec: + command: + - command + - command + grpc: + mode: mode + port: 2 + service: service + httpGet: + path: path + protocol: protocol + scheme: scheme + port: port + host: host + httpHeaders: + - name: name + value: value + - name: name + value: value + targetContainerName: targetContainerName + terminationMessagePath: terminationMessagePath + workingDir: workingDir + resources: + claims: + - request: request + name: name + - request: request + name: name + requests: + key: null + limits: + key: null + env: + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + restartPolicy: restartPolicy + command: + - command + - command + args: + - args + - args + name: name + tty: true + stdinOnce: true + - volumeDevices: + - devicePath: devicePath + name: name + - devicePath: devicePath + name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + stdin: true + terminationMessagePolicy: terminationMessagePolicy + securityContext: + privileged: true + runAsUser: 6 + capabilities: + add: + - add + - add + drop: + - drop + - drop + seLinuxOptions: + role: role + level: level + type: type + user: user + appArmorProfile: + localhostProfile: localhostProfile + type: type + seccompProfile: + localhostProfile: localhostProfile + type: type + windowsOptions: + gmsaCredentialSpec: gmsaCredentialSpec + runAsUserName: runAsUserName + hostProcess: true + gmsaCredentialSpecName: gmsaCredentialSpecName + procMount: procMount + allowPrivilegeEscalation: true + runAsGroup: 1 + runAsNonRoot: true + readOnlyRootFilesystem: true + startupProbe: + terminationGracePeriodSeconds: 2 + failureThreshold: 5 + periodSeconds: 9 + tcpSocket: + port: port + host: host + timeoutSeconds: 4 + successThreshold: 3 + initialDelaySeconds: 7 + exec: + command: + - command + - command + grpc: + mode: mode + port: 2 + service: service + httpGet: + path: path + protocol: protocol + scheme: scheme + port: port + host: host + httpHeaders: + - name: name + value: value + - name: name + value: value + ports: + - protocol: protocol + hostIP: hostIP + name: name + containerPort: 7 + hostPort: 1 + - protocol: protocol + hostIP: hostIP + name: name + containerPort: 7 + hostPort: 1 + volumeMounts: + - mountPath: mountPath + mountPropagation: mountPropagation + name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions + readOnly: true + subPath: subPath + recursiveReadOnly: recursiveReadOnly + subPathExpr: subPathExpr + - mountPath: mountPath + mountPropagation: mountPropagation + name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions + readOnly: true + subPath: subPath + recursiveReadOnly: recursiveReadOnly + subPathExpr: subPathExpr + lifecycle: + postStart: + sleep: + seconds: 5 + tcpSocket: + port: port + host: host + exec: + command: + - command + - command + httpGet: + path: path + protocol: protocol + scheme: scheme + port: port + host: host + httpHeaders: + - name: name + value: value + - name: name + value: value + preStop: + sleep: + seconds: 5 + tcpSocket: + port: port + host: host + exec: + command: + - command + - command + httpGet: + path: path + protocol: protocol + scheme: scheme + port: port + host: host + httpHeaders: + - name: name + value: value + - name: name + value: value + stopSignal: stopSignal + readinessProbe: + terminationGracePeriodSeconds: 2 + failureThreshold: 5 + periodSeconds: 9 + tcpSocket: + port: port + host: host + timeoutSeconds: 4 + successThreshold: 3 + initialDelaySeconds: 7 + exec: + command: + - command + - command + grpc: + mode: mode + port: 2 + service: service + httpGet: + path: path + protocol: protocol + scheme: scheme + port: port + host: host + httpHeaders: + - name: name + value: value + - name: name + value: value + resizePolicy: + - resourceName: resourceName + restartPolicy: restartPolicy + - resourceName: resourceName + restartPolicy: restartPolicy + envFrom: + - configMapRef: + name: name + optional: true + prefix: prefix + secretRef: + name: name + optional: true + - configMapRef: + name: name + optional: true + prefix: prefix + secretRef: + name: name + optional: true + image: image + imagePullPolicy: imagePullPolicy + livenessProbe: + terminationGracePeriodSeconds: 2 + failureThreshold: 5 + periodSeconds: 9 + tcpSocket: + port: port + host: host + timeoutSeconds: 4 + successThreshold: 3 + initialDelaySeconds: 7 + exec: + command: + - command + - command + grpc: + mode: mode + port: 2 + service: service + httpGet: + path: path + protocol: protocol + scheme: scheme + port: port + host: host + httpHeaders: + - name: name + value: value + - name: name + value: value + targetContainerName: targetContainerName + terminationMessagePath: terminationMessagePath + workingDir: workingDir + resources: + claims: + - request: request + name: name + - request: request + name: name + requests: + key: null + limits: + key: null + env: + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + restartPolicy: restartPolicy + command: + - command + - command + args: + - args + - args + name: name + tty: true + stdinOnce: true + serviceAccount: serviceAccount + priority: 1 + restartPolicy: restartPolicy + shareProcessNamespace: true + evictionResponders: + - name: name + priority: 7 + - name: name + priority: 7 + hostUsers: true + resourceClaims: + - resourceClaimName: resourceClaimName + name: name + resourceClaimTemplateName: resourceClaimTemplateName + - resourceClaimName: resourceClaimName + name: name + resourceClaimTemplateName: resourceClaimTemplateName + subdomain: subdomain + containers: + - volumeDevices: + - devicePath: devicePath + name: name + - devicePath: devicePath + name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + stdin: true + terminationMessagePolicy: terminationMessagePolicy + securityContext: + privileged: true + runAsUser: 6 + capabilities: + add: + - add + - add + drop: + - drop + - drop + seLinuxOptions: + role: role + level: level + type: type + user: user + appArmorProfile: + localhostProfile: localhostProfile + type: type + seccompProfile: + localhostProfile: localhostProfile + type: type + windowsOptions: + gmsaCredentialSpec: gmsaCredentialSpec + runAsUserName: runAsUserName + hostProcess: true + gmsaCredentialSpecName: gmsaCredentialSpecName + procMount: procMount + allowPrivilegeEscalation: true + runAsGroup: 1 + runAsNonRoot: true + readOnlyRootFilesystem: true + startupProbe: + terminationGracePeriodSeconds: 2 + failureThreshold: 5 + periodSeconds: 9 + tcpSocket: + port: port + host: host + timeoutSeconds: 4 + successThreshold: 3 + initialDelaySeconds: 7 + exec: + command: + - command + - command + grpc: + mode: mode + port: 2 + service: service + httpGet: + path: path + protocol: protocol + scheme: scheme + port: port + host: host + httpHeaders: + - name: name + value: value + - name: name + value: value + ports: + - protocol: protocol + hostIP: hostIP + name: name + containerPort: 7 + hostPort: 1 + - protocol: protocol + hostIP: hostIP + name: name + containerPort: 7 + hostPort: 1 + volumeMounts: + - mountPath: mountPath + mountPropagation: mountPropagation + name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions + readOnly: true + subPath: subPath + recursiveReadOnly: recursiveReadOnly + subPathExpr: subPathExpr + - mountPath: mountPath + mountPropagation: mountPropagation + name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions + readOnly: true + subPath: subPath + recursiveReadOnly: recursiveReadOnly + subPathExpr: subPathExpr + lifecycle: + postStart: + sleep: + seconds: 5 + tcpSocket: + port: port + host: host + exec: + command: + - command + - command + httpGet: + path: path + protocol: protocol + scheme: scheme + port: port + host: host + httpHeaders: + - name: name + value: value + - name: name + value: value + preStop: + sleep: + seconds: 5 + tcpSocket: + port: port + host: host + exec: + command: + - command + - command + httpGet: path: path - labelSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - name: name - optional: true - signerName: signerName - defaultMode: 6 - cephfs: - path: path - secretRef: + protocol: protocol + scheme: scheme + port: port + host: host + httpHeaders: + - name: name + value: value + - name: name + value: value + stopSignal: stopSignal + readinessProbe: + terminationGracePeriodSeconds: 2 + failureThreshold: 5 + periodSeconds: 9 + tcpSocket: + port: port + host: host + timeoutSeconds: 4 + successThreshold: 3 + initialDelaySeconds: 7 + exec: + command: + - command + - command + grpc: + mode: mode + port: 2 + service: service + httpGet: + path: path + protocol: protocol + scheme: scheme + port: port + host: host + httpHeaders: + - name: name + value: value + - name: name + value: value + resizePolicy: + - resourceName: resourceName + restartPolicy: restartPolicy + - resourceName: resourceName + restartPolicy: restartPolicy + envFrom: + - configMapRef: name: name - secretFile: secretFile - readOnly: true - user: user - monitors: - - monitors - - monitors - scaleIO: - system: system - protectionDomain: protectionDomain - sslEnabled: true - storageMode: storageMode - volumeName: volumeName + optional: true + prefix: prefix secretRef: name: name - readOnly: true - fsType: fsType - storagePool: storagePool - gateway: gateway - emptyDir: - sizeLimit: sizeLimit - medium: medium - glusterfs: - path: path - endpoints: endpoints - readOnly: true - gcePersistentDisk: - partition: 6 - readOnly: true - pdName: pdName - fsType: fsType - image: - reference: reference - pullPolicy: pullPolicy - photonPersistentDisk: - pdID: pdID - fsType: fsType - azureDisk: - diskName: diskName - kind: kind - readOnly: true - cachingMode: cachingMode - diskURI: diskURI - fsType: fsType - cinder: + optional: true + - configMapRef: + name: name + optional: true + prefix: prefix secretRef: name: name - volumeID: volumeID - readOnly: true - fsType: fsType - downwardAPI: - defaultMode: 1 - items: - - mode: 2 + optional: true + image: image + imagePullPolicy: imagePullPolicy + livenessProbe: + terminationGracePeriodSeconds: 2 + failureThreshold: 5 + periodSeconds: 9 + tcpSocket: + port: port + host: host + timeoutSeconds: 4 + successThreshold: 3 + initialDelaySeconds: 7 + exec: + command: + - command + - command + grpc: + mode: mode + port: 2 + service: service + httpGet: path: path + protocol: protocol + scheme: scheme + port: port + host: host + httpHeaders: + - name: name + value: value + - name: name + value: value + terminationMessagePath: terminationMessagePath + workingDir: workingDir + resources: + claims: + - request: request + name: name + - request: request + name: name + requests: + key: null + limits: + key: null + env: + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key resourceFieldRef: divisor: divisor resource: resource containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 - path: path + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key resourceFieldRef: divisor: divisor resource: resource containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key fieldRef: apiVersion: apiVersion fieldPath: fieldPath - awsElasticBlockStore: - partition: 6 - volumeID: volumeID - readOnly: true - fsType: fsType - flocker: - datasetName: datasetName - datasetUUID: datasetUUID - iscsi: - chapAuthSession: true - iscsiInterface: iscsiInterface - lun: 5 - chapAuthDiscovery: true - iqn: iqn - portals: - - portals - - portals - secretRef: - name: name - initiatorName: initiatorName - readOnly: true - fsType: fsType - targetPortal: targetPortal - rbd: - image: image - pool: pool - secretRef: - name: name - readOnly: true - fsType: fsType - keyring: keyring - user: user - monitors: - - monitors - - monitors - configMap: - defaultMode: 3 + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + restartPolicy: restartPolicy + command: + - command + - command + args: + - args + - args + name: name + tty: true + stdinOnce: true + - volumeDevices: + - devicePath: devicePath name: name - optional: true - items: - - mode: 6 - path: path - key: key - - mode: 6 + - devicePath: devicePath + name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + stdin: true + terminationMessagePolicy: terminationMessagePolicy + securityContext: + privileged: true + runAsUser: 6 + capabilities: + add: + - add + - add + drop: + - drop + - drop + seLinuxOptions: + role: role + level: level + type: type + user: user + appArmorProfile: + localhostProfile: localhostProfile + type: type + seccompProfile: + localhostProfile: localhostProfile + type: type + windowsOptions: + gmsaCredentialSpec: gmsaCredentialSpec + runAsUserName: runAsUserName + hostProcess: true + gmsaCredentialSpecName: gmsaCredentialSpecName + procMount: procMount + allowPrivilegeEscalation: true + runAsGroup: 1 + runAsNonRoot: true + readOnlyRootFilesystem: true + startupProbe: + terminationGracePeriodSeconds: 2 + failureThreshold: 5 + periodSeconds: 9 + tcpSocket: + port: port + host: host + timeoutSeconds: 4 + successThreshold: 3 + initialDelaySeconds: 7 + exec: + command: + - command + - command + grpc: + mode: mode + port: 2 + service: service + httpGet: path: path - key: key - storageos: - volumeNamespace: volumeNamespace - volumeName: volumeName - secretRef: - name: name - readOnly: true - fsType: fsType - csi: - driver: driver - nodePublishSecretRef: - name: name - readOnly: true - fsType: fsType - volumeAttributes: - key: volumeAttributes - name: name - nfs: - path: path - server: server - readOnly: true - persistentVolumeClaim: - claimName: claimName - readOnly: true - gitRepo: - repository: repository - directory: directory - revision: revision - portworxVolume: - volumeID: volumeID - readOnly: true - fsType: fsType - vsphereVolume: - storagePolicyName: storagePolicyName - storagePolicyID: storagePolicyID - volumePath: volumePath - fsType: fsType - fc: - lun: 6 - targetWWNs: - - targetWWNs - - targetWWNs - readOnly: true - wwids: - - wwids - - wwids - fsType: fsType - hostPath: - path: path - type: type - - quobyte: - volume: volume - registry: registry - readOnly: true - user: user - tenant: tenant - group: group - azureFile: - secretName: secretName + protocol: protocol + scheme: scheme + port: port + host: host + httpHeaders: + - name: name + value: value + - name: name + value: value + ports: + - protocol: protocol + hostIP: hostIP + name: name + containerPort: 7 + hostPort: 1 + - protocol: protocol + hostIP: hostIP + name: name + containerPort: 7 + hostPort: 1 + volumeMounts: + - mountPath: mountPath + mountPropagation: mountPropagation + name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true - shareName: shareName - flexVolume: - driver: driver - options: - key: options - secretRef: - name: name + subPath: subPath + recursiveReadOnly: recursiveReadOnly + subPathExpr: subPathExpr + - mountPath: mountPath + mountPropagation: mountPropagation + name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true - fsType: fsType - ephemeral: - volumeClaimTemplate: - metadata: - generation: 6 - finalizers: - - finalizers - - finalizers - resourceVersion: resourceVersion - annotations: - key: annotations - generateName: generateName - deletionTimestamp: 2000-01-23T04:56:07.000+00:00 - labels: - key: labels - ownerReferences: - - uid: uid - controller: true - apiVersion: apiVersion - kind: kind - name: name - blockOwnerDeletion: true - - uid: uid - controller: true - apiVersion: apiVersion - kind: kind - name: name - blockOwnerDeletion: true - selfLink: selfLink - deletionGracePeriodSeconds: 0 - uid: uid - managedFields: - - apiVersion: apiVersion - fieldsV1: "{}" - manager: manager - subresource: subresource - time: 2000-01-23T04:56:07.000+00:00 - operation: operation - fieldsType: fieldsType - - apiVersion: apiVersion - fieldsV1: "{}" - manager: manager - subresource: subresource - time: 2000-01-23T04:56:07.000+00:00 - operation: operation - fieldsType: fieldsType - creationTimestamp: 2000-01-23T04:56:07.000+00:00 - name: name - namespace: namespace - spec: - storageClassName: storageClassName - dataSourceRef: - apiGroup: apiGroup - kind: kind - name: name - namespace: namespace - volumeName: volumeName - volumeAttributesClassName: volumeAttributesClassName - resources: - requests: - key: null - limits: - key: null - selector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - accessModes: - - accessModes - - accessModes - dataSource: - apiGroup: apiGroup - kind: kind - name: name - volumeMode: volumeMode - secret: - secretName: secretName - defaultMode: 7 - optional: true - items: - - mode: 6 - path: path - key: key - - mode: 6 - path: path - key: key - projected: - sources: - - downwardAPI: - items: - - mode: 2 - path: path - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath - - mode: 2 - path: path - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath - configMap: - name: name - optional: true - items: - - mode: 6 - path: path - key: key - - mode: 6 - path: path - key: key - podCertificate: - certificateChainPath: certificateChainPath - userAnnotations: - key: userAnnotations - keyPath: keyPath - maxExpirationSeconds: 3 - keyType: keyType - credentialBundlePath: credentialBundlePath - signerName: signerName - secret: - name: name - optional: true - items: - - mode: 6 - path: path - key: key - - mode: 6 - path: path - key: key - serviceAccountToken: - path: path - audience: audience - expirationSeconds: 3 - clusterTrustBundle: - path: path - labelSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - name: name - optional: true - signerName: signerName - - downwardAPI: - items: - - mode: 2 - path: path - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath - - mode: 2 - path: path - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath - configMap: - name: name - optional: true - items: - - mode: 6 - path: path - key: key - - mode: 6 - path: path - key: key - podCertificate: - certificateChainPath: certificateChainPath - userAnnotations: - key: userAnnotations - keyPath: keyPath - maxExpirationSeconds: 3 - keyType: keyType - credentialBundlePath: credentialBundlePath - signerName: signerName - secret: - name: name - optional: true - items: - - mode: 6 - path: path - key: key - - mode: 6 - path: path - key: key - serviceAccountToken: + subPath: subPath + recursiveReadOnly: recursiveReadOnly + subPathExpr: subPathExpr + lifecycle: + postStart: + sleep: + seconds: 5 + tcpSocket: + port: port + host: host + exec: + command: + - command + - command + httpGet: path: path - audience: audience - expirationSeconds: 3 - clusterTrustBundle: + protocol: protocol + scheme: scheme + port: port + host: host + httpHeaders: + - name: name + value: value + - name: name + value: value + preStop: + sleep: + seconds: 5 + tcpSocket: + port: port + host: host + exec: + command: + - command + - command + httpGet: path: path - labelSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - name: name - optional: true - signerName: signerName - defaultMode: 6 - cephfs: - path: path - secretRef: + protocol: protocol + scheme: scheme + port: port + host: host + httpHeaders: + - name: name + value: value + - name: name + value: value + stopSignal: stopSignal + readinessProbe: + terminationGracePeriodSeconds: 2 + failureThreshold: 5 + periodSeconds: 9 + tcpSocket: + port: port + host: host + timeoutSeconds: 4 + successThreshold: 3 + initialDelaySeconds: 7 + exec: + command: + - command + - command + grpc: + mode: mode + port: 2 + service: service + httpGet: + path: path + protocol: protocol + scheme: scheme + port: port + host: host + httpHeaders: + - name: name + value: value + - name: name + value: value + resizePolicy: + - resourceName: resourceName + restartPolicy: restartPolicy + - resourceName: resourceName + restartPolicy: restartPolicy + envFrom: + - configMapRef: name: name - secretFile: secretFile - readOnly: true - user: user - monitors: - - monitors - - monitors - scaleIO: - system: system - protectionDomain: protectionDomain - sslEnabled: true - storageMode: storageMode - volumeName: volumeName + optional: true + prefix: prefix secretRef: name: name - readOnly: true - fsType: fsType - storagePool: storagePool - gateway: gateway - emptyDir: - sizeLimit: sizeLimit - medium: medium - glusterfs: - path: path - endpoints: endpoints - readOnly: true - gcePersistentDisk: - partition: 6 - readOnly: true - pdName: pdName - fsType: fsType - image: - reference: reference - pullPolicy: pullPolicy - photonPersistentDisk: - pdID: pdID - fsType: fsType - azureDisk: - diskName: diskName - kind: kind - readOnly: true - cachingMode: cachingMode - diskURI: diskURI - fsType: fsType - cinder: + optional: true + - configMapRef: + name: name + optional: true + prefix: prefix secretRef: name: name - volumeID: volumeID - readOnly: true - fsType: fsType - downwardAPI: - defaultMode: 1 - items: - - mode: 2 + optional: true + image: image + imagePullPolicy: imagePullPolicy + livenessProbe: + terminationGracePeriodSeconds: 2 + failureThreshold: 5 + periodSeconds: 9 + tcpSocket: + port: port + host: host + timeoutSeconds: 4 + successThreshold: 3 + initialDelaySeconds: 7 + exec: + command: + - command + - command + grpc: + mode: mode + port: 2 + service: service + httpGet: path: path + protocol: protocol + scheme: scheme + port: port + host: host + httpHeaders: + - name: name + value: value + - name: name + value: value + terminationMessagePath: terminationMessagePath + workingDir: workingDir + resources: + claims: + - request: request + name: name + - request: request + name: name + requests: + key: null + limits: + key: null + env: + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key resourceFieldRef: divisor: divisor resource: resource containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 2 - path: path + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key resourceFieldRef: divisor: divisor resource: resource containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key fieldRef: apiVersion: apiVersion fieldPath: fieldPath - awsElasticBlockStore: - partition: 6 - volumeID: volumeID - readOnly: true - fsType: fsType - flocker: - datasetName: datasetName - datasetUUID: datasetUUID - iscsi: - chapAuthSession: true - iscsiInterface: iscsiInterface - lun: 5 - chapAuthDiscovery: true - iqn: iqn - portals: - - portals - - portals - secretRef: - name: name - initiatorName: initiatorName - readOnly: true - fsType: fsType - targetPortal: targetPortal - rbd: - image: image - pool: pool - secretRef: - name: name - readOnly: true - fsType: fsType - keyring: keyring - user: user - monitors: - - monitors - - monitors - configMap: - defaultMode: 3 - name: name - optional: true - items: - - mode: 6 - path: path - key: key - - mode: 6 - path: path - key: key - storageos: - volumeNamespace: volumeNamespace - volumeName: volumeName - secretRef: - name: name - readOnly: true - fsType: fsType - csi: - driver: driver - nodePublishSecretRef: - name: name - readOnly: true - fsType: fsType - volumeAttributes: - key: volumeAttributes - name: name - nfs: - path: path - server: server - readOnly: true - persistentVolumeClaim: - claimName: claimName - readOnly: true - gitRepo: - repository: repository - directory: directory - revision: revision - portworxVolume: - volumeID: volumeID - readOnly: true - fsType: fsType - vsphereVolume: - storagePolicyName: storagePolicyName - storagePolicyID: storagePolicyID - volumePath: volumePath - fsType: fsType - fc: - lun: 6 - targetWWNs: - - targetWWNs - - targetWWNs - readOnly: true - wwids: - - wwids - - wwids - fsType: fsType - hostPath: - path: path - type: type - resources: - claims: - - request: request - name: name - - request: request - name: name - requests: - key: null - limits: - key: null - ephemeralContainers: + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + restartPolicy: restartPolicy + command: + - command + - command + args: + - args + - args + name: name + tty: true + stdinOnce: true + initContainers: - volumeDevices: - devicePath: devicePath name: name @@ -258145,10 +273801,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -258172,6 +273830,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -258179,6 +273840,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -258196,6 +273860,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -258216,6 +273881,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -258240,10 +273906,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -258289,10 +273957,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -258301,7 +273971,6 @@ components: value: value - name: name value: value - targetContainerName: targetContainerName terminationMessagePath: terminationMessagePath workingDir: workingDir resources: @@ -258437,10 +274106,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -258464,6 +274135,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -258471,6 +274145,9 @@ components: - mountPath: mountPath mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions readOnly: true subPath: subPath recursiveReadOnly: recursiveReadOnly @@ -258488,6 +274165,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -258508,6 +274186,7 @@ components: - command httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -258532,10 +274211,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -258581,10 +274262,12 @@ components: - command - command grpc: + mode: mode port: 2 service: service httpGet: path: path + protocol: protocol scheme: scheme port: port host: host @@ -258593,7 +274276,6 @@ components: value: value - name: name value: value - targetContainerName: targetContainerName terminationMessagePath: terminationMessagePath workingDir: workingDir resources: @@ -258661,2167 +274343,4195 @@ components: - args - args name: name - tty: true - stdinOnce: true - serviceAccount: serviceAccount - priority: 7 - restartPolicy: restartPolicy - shareProcessNamespace: true - hostUsers: true - resourceClaims: - - resourceClaimName: resourceClaimName + tty: true + stdinOnce: true + affinity: + nodeAffinity: + requiredDuringSchedulingIgnoredDuringExecution: + nodeSelectorTerms: + - matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchFields: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + - matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchFields: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + preferredDuringSchedulingIgnoredDuringExecution: + - preference: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchFields: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + weight: 6 + - preference: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchFields: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + weight: 6 + podAffinity: + requiredDuringSchedulingIgnoredDuringExecution: + - labelSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + namespaceSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + topologyKey: topologyKey + matchLabelKeys: + - matchLabelKeys + - matchLabelKeys + mismatchLabelKeys: + - mismatchLabelKeys + - mismatchLabelKeys + namespaces: + - namespaces + - namespaces + - labelSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + namespaceSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + topologyKey: topologyKey + matchLabelKeys: + - matchLabelKeys + - matchLabelKeys + mismatchLabelKeys: + - mismatchLabelKeys + - mismatchLabelKeys + namespaces: + - namespaces + - namespaces + preferredDuringSchedulingIgnoredDuringExecution: + - podAffinityTerm: + labelSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + namespaceSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + topologyKey: topologyKey + matchLabelKeys: + - matchLabelKeys + - matchLabelKeys + mismatchLabelKeys: + - mismatchLabelKeys + - mismatchLabelKeys + namespaces: + - namespaces + - namespaces + weight: 1 + - podAffinityTerm: + labelSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + namespaceSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + topologyKey: topologyKey + matchLabelKeys: + - matchLabelKeys + - matchLabelKeys + mismatchLabelKeys: + - mismatchLabelKeys + - mismatchLabelKeys + namespaces: + - namespaces + - namespaces + weight: 1 + podAntiAffinity: + requiredDuringSchedulingIgnoredDuringExecution: + - labelSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + namespaceSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + topologyKey: topologyKey + matchLabelKeys: + - matchLabelKeys + - matchLabelKeys + mismatchLabelKeys: + - mismatchLabelKeys + - mismatchLabelKeys + namespaces: + - namespaces + - namespaces + - labelSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + namespaceSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + topologyKey: topologyKey + matchLabelKeys: + - matchLabelKeys + - matchLabelKeys + mismatchLabelKeys: + - mismatchLabelKeys + - mismatchLabelKeys + namespaces: + - namespaces + - namespaces + preferredDuringSchedulingIgnoredDuringExecution: + - podAffinityTerm: + labelSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + namespaceSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + topologyKey: topologyKey + matchLabelKeys: + - matchLabelKeys + - matchLabelKeys + mismatchLabelKeys: + - mismatchLabelKeys + - mismatchLabelKeys + namespaces: + - namespaces + - namespaces + weight: 1 + - podAffinityTerm: + labelSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + namespaceSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + topologyKey: topologyKey + matchLabelKeys: + - matchLabelKeys + - matchLabelKeys + mismatchLabelKeys: + - mismatchLabelKeys + - mismatchLabelKeys + namespaces: + - namespaces + - namespaces + weight: 1 + hostPID: true + replicas: 6 + selector: + key: selector + minReadySeconds: 0 + properties: + minReadySeconds: + description: "Minimum number of seconds for which a newly created pod should\ + \ be ready without any of its container crashing, for it to be considered\ + \ available. Defaults to 0 (pod will be considered available as soon as\ + \ it is ready)" + format: int32 + type: integer + replicas: + description: "Replicas is the number of desired replicas. This is a pointer\ + \ to distinguish between explicit zero and unspecified. Defaults to 1.\ + \ More info: https://kubernetes.io/docs/concepts/workloads/controllers/replicationcontroller#what-is-a-replicationcontroller" + format: int32 + type: integer + selector: + additionalProperties: + type: string + description: "Selector is a label query over pods that should match the\ + \ Replicas count. If Selector is empty, it is defaulted to the labels\ + \ present on the Pod template. Label keys and values that must match in\ + \ order to be controlled by this replication controller, if empty defaulted\ + \ to labels on Pod template. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#label-selectors" + type: object + x-kubernetes-map-type: atomic + template: + $ref: "#/components/schemas/v1.PodTemplateSpec" + type: object + v1.ReplicationControllerStatus: + description: ReplicationControllerStatus represents the current status of a + replication controller. + example: + fullyLabeledReplicas: 5 + replicas: 7 + readyReplicas: 2 + conditions: + - reason: reason + lastTransitionTime: 2000-01-23T04:56:07.000+00:00 + message: message + type: type + status: status + - reason: reason + lastTransitionTime: 2000-01-23T04:56:07.000+00:00 + message: message + type: type + status: status + availableReplicas: 1 + observedGeneration: 5 + properties: + availableReplicas: + description: The number of available replicas (ready for at least minReadySeconds) + for this replication controller. + format: int32 + type: integer + conditions: + description: Represents the latest available observations of a replication + controller's current state. + items: + $ref: "#/components/schemas/v1.ReplicationControllerCondition" + type: array + x-kubernetes-patch-strategy: merge + x-kubernetes-list-type: map + x-kubernetes-list-map-keys: + - type + x-kubernetes-patch-merge-key: type + fullyLabeledReplicas: + description: The number of pods that have labels matching the labels of + the pod template of the replication controller. + format: int32 + type: integer + observedGeneration: + description: ObservedGeneration reflects the generation of the most recently + observed replication controller. + format: int64 + type: integer + readyReplicas: + description: The number of ready replicas for this replication controller. + format: int32 + type: integer + replicas: + description: "Replicas is the most recently observed number of replicas.\ + \ More info: https://kubernetes.io/docs/concepts/workloads/controllers/replicationcontroller#what-is-a-replicationcontroller" + format: int32 + type: integer + required: + - replicas + type: object + core.v1.ResourceClaim: + description: ResourceClaim references one entry in PodSpec.ResourceClaims. + example: + request: request + name: name + properties: + name: + description: Name must match the name of one entry in pod.spec.resourceClaims + of the Pod where this field is used. It makes that resource available + inside a container. + type: string + request: + description: "Request is the name chosen for a request in the referenced\ + \ claim. If empty, everything from the claim is made available, otherwise\ + \ only the result of this request." + type: string + required: + - name + type: object + v1.ResourceFieldSelector: + description: "ResourceFieldSelector represents container resources (cpu, memory)\ + \ and their output format" + example: + divisor: divisor + resource: resource + containerName: containerName + properties: + containerName: + description: "Container name: required for volumes, optional for env vars" + type: string + divisor: + description: "Quantity is a fixed-point representation of a number. It provides\ + \ convenient marshaling/unmarshaling in JSON and YAML, in addition to\ + \ String() and AsInt64() accessors.\n\nThe serialization format is:\n\n\ + ``` ::= \n\n\t(Note that \ + \ may be empty, from the \"\" case in .)\n\n \ + \ ::= 0 | 1 | ... | 9 ::= | \ + \ ::= | . | . | .\ + \ ::= \"+\" | \"-\" ::= |\ + \ ::= | \ + \ | ::= Ki | Mi | Gi | Ti | Pi | Ei\n\n\t\ + (International System of units; See: http://physics.nist.gov/cuu/Units/binary.html)\n\ + \n ::= m | \"\" | k | M | G | T | P | E\n\n\t(Note that\ + \ 1024 = 1Ki but 1000 = 1k; I didn't choose the capitalization.)\n\n\ + \ ::= \"e\" | \"E\" ```\n\nNo matter which\ + \ of the three exponent forms is used, no quantity may represent a number\ + \ greater than 2^63-1 in magnitude, nor may it have more than 3 decimal\ + \ places. Numbers larger or more precise will be capped or rounded up.\ + \ (E.g.: 0.1m will rounded up to 1m.) This may be extended in the future\ + \ if we require larger or smaller quantities.\n\nWhen a Quantity is parsed\ + \ from a string, it will remember the type of suffix it had, and will\ + \ use the same type again when it is serialized.\n\nBefore serializing,\ + \ Quantity will be put in \"canonical form\". This means that Exponent/suffix\ + \ will be adjusted up or down (with a corresponding increase or decrease\ + \ in Mantissa) such that:\n\n- No precision is lost - No fractional digits\ + \ will be emitted - The exponent (or suffix) is as large as possible.\n\ + \nThe sign will be omitted unless the number is negative.\n\nExamples:\n\ + \n- 1.5 will be serialized as \"1500m\" - 1.5Gi will be serialized as\ + \ \"1536Mi\"\n\nNote that the quantity will NEVER be internally represented\ + \ by a floating point number. That is the whole point of this exercise.\n\ + \nNon-canonical values will still parse as long as they are well formed,\ + \ but will be re-emitted in their canonical form. (So always use canonical\ + \ form, or don't diff.)\n\nThis format is intended to make it difficult\ + \ to use these numbers without writing some sort of special handling code\ + \ in the hopes that that will cause implementors to also use a fixed point\ + \ implementation." + format: quantity + type: string + resource: + description: "Required: resource to select" + type: string + required: + - resource + type: object + x-kubernetes-map-type: atomic + v1.ResourceHealth: + description: ResourceHealth represents the health of a resource. It has the + latest device health information. This is a part of KEP https://kep.k8s.io/4680. + example: + resourceID: resourceID + health: health + message: message + properties: + health: + description: |- + Health of the resource. can be one of: + - Healthy: operates as normal + - Unhealthy: reported unhealthy. We consider this a temporary health issue + since we do not have a mechanism today to distinguish + temporary and permanent issues. + - Unknown: The status cannot be determined. + For example, Device Plugin got unregistered and hasn't been re-registered since. + + In future we may want to introduce the PermanentlyUnhealthy Status. + type: string + message: + description: "Message provides human-readable context for Health (e.g. \"\ + ECC error count exceeded threshold\"). This field is populated by the\ + \ kubelet when ResourceHealthStatusMessage is enabled if the DRA plugin\ + \ returns a message, and is null otherwise." + type: string + resourceID: + description: ResourceID is the unique identifier of the resource. See the + ResourceID type for more information. + type: string + required: + - resourceID + type: object + v1.ResourceQuota: + description: ResourceQuota sets aggregate quota restrictions enforced per namespace + example: + metadata: + generation: 6 + finalizers: + - finalizers + - finalizers + resourceVersion: resourceVersion + annotations: + key: annotations + generateName: generateName + deletionTimestamp: 2000-01-23T04:56:07.000+00:00 + labels: + key: labels + ownerReferences: + - uid: uid + controller: true + apiVersion: apiVersion + kind: kind + name: name + blockOwnerDeletion: true + - uid: uid + controller: true + apiVersion: apiVersion + kind: kind + name: name + blockOwnerDeletion: true + selfLink: selfLink + deletionGracePeriodSeconds: 0 + uid: uid + managedFields: + - apiVersion: apiVersion + fieldsV1: "{}" + manager: manager + subresource: subresource + time: 2000-01-23T04:56:07.000+00:00 + operation: operation + fieldsType: fieldsType + - apiVersion: apiVersion + fieldsV1: "{}" + manager: manager + subresource: subresource + time: 2000-01-23T04:56:07.000+00:00 + operation: operation + fieldsType: fieldsType + creationTimestamp: 2000-01-23T04:56:07.000+00:00 + name: name + namespace: namespace + apiVersion: apiVersion + kind: kind + spec: + scopeSelector: + matchExpressions: + - scopeName: scopeName + values: + - values + - values + operator: operator + - scopeName: scopeName + values: + - values + - values + operator: operator + hard: + key: null + scopes: + - scopes + - scopes + status: + hard: + key: null + used: + key: null + properties: + apiVersion: + description: "APIVersion defines the versioned schema of this representation\ + \ of an object. Servers should convert recognized schemas to the latest\ + \ internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources" + type: string + kind: + description: "Kind is a string value representing the REST resource this\ + \ object represents. Servers may infer this from the endpoint the client\ + \ submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds" + type: string + metadata: + $ref: "#/components/schemas/v1.ObjectMeta" + spec: + $ref: "#/components/schemas/v1.ResourceQuotaSpec" + status: + $ref: "#/components/schemas/v1.ResourceQuotaStatus" + type: object + x-kubernetes-group-version-kind: + - group: "" + kind: ResourceQuota + version: v1 + x-implements: + - io.kubernetes.client.common.KubernetesObject + v1.ResourceQuotaList: + description: ResourceQuotaList is a list of ResourceQuota items. + example: + metadata: + remainingItemCount: 1 + continue: continue + resourceVersion: resourceVersion + shardInfo: + selector: selector + selfLink: selfLink + apiVersion: apiVersion + kind: kind + items: + - metadata: + generation: 6 + finalizers: + - finalizers + - finalizers + resourceVersion: resourceVersion + annotations: + key: annotations + generateName: generateName + deletionTimestamp: 2000-01-23T04:56:07.000+00:00 + labels: + key: labels + ownerReferences: + - uid: uid + controller: true + apiVersion: apiVersion + kind: kind + name: name + blockOwnerDeletion: true + - uid: uid + controller: true + apiVersion: apiVersion + kind: kind + name: name + blockOwnerDeletion: true + selfLink: selfLink + deletionGracePeriodSeconds: 0 + uid: uid + managedFields: + - apiVersion: apiVersion + fieldsV1: "{}" + manager: manager + subresource: subresource + time: 2000-01-23T04:56:07.000+00:00 + operation: operation + fieldsType: fieldsType + - apiVersion: apiVersion + fieldsV1: "{}" + manager: manager + subresource: subresource + time: 2000-01-23T04:56:07.000+00:00 + operation: operation + fieldsType: fieldsType + creationTimestamp: 2000-01-23T04:56:07.000+00:00 + name: name + namespace: namespace + apiVersion: apiVersion + kind: kind + spec: + scopeSelector: + matchExpressions: + - scopeName: scopeName + values: + - values + - values + operator: operator + - scopeName: scopeName + values: + - values + - values + operator: operator + hard: + key: null + scopes: + - scopes + - scopes + status: + hard: + key: null + used: + key: null + - metadata: + generation: 6 + finalizers: + - finalizers + - finalizers + resourceVersion: resourceVersion + annotations: + key: annotations + generateName: generateName + deletionTimestamp: 2000-01-23T04:56:07.000+00:00 + labels: + key: labels + ownerReferences: + - uid: uid + controller: true + apiVersion: apiVersion + kind: kind + name: name + blockOwnerDeletion: true + - uid: uid + controller: true + apiVersion: apiVersion + kind: kind + name: name + blockOwnerDeletion: true + selfLink: selfLink + deletionGracePeriodSeconds: 0 + uid: uid + managedFields: + - apiVersion: apiVersion + fieldsV1: "{}" + manager: manager + subresource: subresource + time: 2000-01-23T04:56:07.000+00:00 + operation: operation + fieldsType: fieldsType + - apiVersion: apiVersion + fieldsV1: "{}" + manager: manager + subresource: subresource + time: 2000-01-23T04:56:07.000+00:00 + operation: operation + fieldsType: fieldsType + creationTimestamp: 2000-01-23T04:56:07.000+00:00 + name: name + namespace: namespace + apiVersion: apiVersion + kind: kind + spec: + scopeSelector: + matchExpressions: + - scopeName: scopeName + values: + - values + - values + operator: operator + - scopeName: scopeName + values: + - values + - values + operator: operator + hard: + key: null + scopes: + - scopes + - scopes + status: + hard: + key: null + used: + key: null + properties: + apiVersion: + description: "APIVersion defines the versioned schema of this representation\ + \ of an object. Servers should convert recognized schemas to the latest\ + \ internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources" + type: string + items: + description: "Items is a list of ResourceQuota objects. More info: https://kubernetes.io/docs/concepts/policy/resource-quotas/" + items: + $ref: "#/components/schemas/v1.ResourceQuota" + type: array + kind: + description: "Kind is a string value representing the REST resource this\ + \ object represents. Servers may infer this from the endpoint the client\ + \ submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds" + type: string + metadata: + $ref: "#/components/schemas/v1.ListMeta" + required: + - items + type: object + x-kubernetes-group-version-kind: + - group: "" + kind: ResourceQuotaList + version: v1 + x-implements: + - io.kubernetes.client.common.KubernetesListObject + v1.ResourceQuotaSpec: + description: ResourceQuotaSpec defines the desired hard limits to enforce for + Quota. + example: + scopeSelector: + matchExpressions: + - scopeName: scopeName + values: + - values + - values + operator: operator + - scopeName: scopeName + values: + - values + - values + operator: operator + hard: + key: null + scopes: + - scopes + - scopes + properties: + hard: + additionalProperties: + $ref: "#/components/schemas/resource.Quantity" + description: "hard is the set of desired hard limits for each named resource.\ + \ More info: https://kubernetes.io/docs/concepts/policy/resource-quotas/" + type: object + scopeSelector: + $ref: "#/components/schemas/v1.ScopeSelector" + scopes: + description: "A collection of filters that must match each object tracked\ + \ by a quota. If not specified, the quota matches all objects." + items: + type: string + type: array + x-kubernetes-list-type: atomic + type: object + v1.ResourceQuotaStatus: + description: ResourceQuotaStatus defines the enforced hard limits and observed + use. + example: + hard: + key: null + used: + key: null + properties: + hard: + additionalProperties: + $ref: "#/components/schemas/resource.Quantity" + description: "Hard is the set of enforced hard limits for each named resource.\ + \ More info: https://kubernetes.io/docs/concepts/policy/resource-quotas/" + type: object + used: + additionalProperties: + $ref: "#/components/schemas/resource.Quantity" + description: Used is the current observed total usage of the resource in + the namespace. + type: object + type: object + v1.ResourceRequirements: + description: ResourceRequirements describes the compute resource requirements. + example: + claims: + - request: request + name: name + - request: request + name: name + requests: + key: null + limits: + key: null + properties: + claims: + description: |- + Claims lists the names of resources, defined in spec.resourceClaims, that are used by this container. + + This field depends on the DynamicResourceAllocation feature gate. + + This field is immutable. It can only be set for containers. + items: + $ref: "#/components/schemas/core.v1.ResourceClaim" + type: array + x-kubernetes-list-type: map + x-kubernetes-list-map-keys: + - name + limits: + additionalProperties: + $ref: "#/components/schemas/resource.Quantity" + description: "Limits describes the maximum amount of compute resources allowed.\ + \ More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/" + type: object + requests: + additionalProperties: + $ref: "#/components/schemas/resource.Quantity" + description: "Requests describes the minimum amount of compute resources\ + \ required. If Requests is omitted for a container, it defaults to Limits\ + \ if that is explicitly specified, otherwise to an implementation-defined\ + \ value. Requests cannot exceed Limits. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/" + type: object + type: object + v1.ResourceStatus: + description: ResourceStatus represents the status of a single resource allocated + to a Pod. + example: + name: name + resources: + - resourceID: resourceID + health: health + message: message + - resourceID: resourceID + health: health + message: message + properties: + name: + description: "Name of the resource. Must be unique within the pod and in\ + \ case of non-DRA resource, match one of the resources from the pod spec.\ + \ For DRA resources, the value must be \"claim:/\"\ + \ when container.resources.claims[*].request is set or \"claim:\"\ + \ when container.resources.claims[*].request is empty. For DRA-backed\ + \ extended resources, \"claim:/\" is used when the\ + \ claim name and request name are recorded in pod.status.extendedResourceClaimStatus.\ + \ When this status is reported about a container, the \"claim_name\" and\ + \ \"request\" must match one of the claims of this container." + type: string + resources: + description: "List of unique resources health. Each element in the list\ + \ contains an unique resource ID and its health. At a minimum, for the\ + \ lifetime of a Pod, resource ID must uniquely identify the resource allocated\ + \ to the Pod on the Node. If other Pod on the same Node reports the status\ + \ with the same resource ID, it must be the same resource they share.\ + \ See ResourceID type definition for a specific format it has in various\ + \ use cases." + items: + $ref: "#/components/schemas/v1.ResourceHealth" + type: array + x-kubernetes-list-type: map + x-kubernetes-list-map-keys: + - resourceID + required: + - name + type: object + v1.SELinuxOptions: + description: SELinuxOptions are the labels to be applied to the container + example: + role: role + level: level + type: type + user: user + properties: + level: + description: Level is SELinux level label that applies to the container. + type: string + role: + description: Role is a SELinux role label that applies to the container. + type: string + type: + description: Type is a SELinux type label that applies to the container. + type: string + user: + description: User is a SELinux user label that applies to the container. + type: string + type: object + v1.ScaleIOPersistentVolumeSource: + description: ScaleIOPersistentVolumeSource represents a persistent ScaleIO volume + example: + system: system + protectionDomain: protectionDomain + sslEnabled: true + storageMode: storageMode + volumeName: volumeName + secretRef: + name: name + namespace: namespace + readOnly: true + fsType: fsType + storagePool: storagePool + gateway: gateway + properties: + fsType: + description: "fsType is the filesystem type to mount. Must be a filesystem\ + \ type supported by the host operating system. Ex. \"ext4\", \"xfs\",\ + \ \"ntfs\". Default is \"xfs\"" + type: string + gateway: + description: gateway is the host address of the ScaleIO API Gateway. + type: string + protectionDomain: + description: protectionDomain is the name of the ScaleIO Protection Domain + for the configured storage. + type: string + readOnly: + description: readOnly defaults to false (read/write). ReadOnly here will + force the ReadOnly setting in VolumeMounts. + type: boolean + secretRef: + $ref: "#/components/schemas/v1.SecretReference" + sslEnabled: + description: "sslEnabled is the flag to enable/disable SSL communication\ + \ with Gateway, default false" + type: boolean + storageMode: + description: storageMode indicates whether the storage for a volume should + be ThickProvisioned or ThinProvisioned. Default is ThinProvisioned. + type: string + storagePool: + description: storagePool is the ScaleIO Storage Pool associated with the + protection domain. + type: string + system: + description: system is the name of the storage system as configured in ScaleIO. + type: string + volumeName: + description: volumeName is the name of a volume already created in the ScaleIO + system that is associated with this volume source. + type: string + required: + - gateway + - secretRef + - system + type: object + v1.ScaleIOVolumeSource: + description: ScaleIOVolumeSource represents a persistent ScaleIO volume + example: + system: system + protectionDomain: protectionDomain + sslEnabled: true + storageMode: storageMode + volumeName: volumeName + secretRef: + name: name + readOnly: true + fsType: fsType + storagePool: storagePool + gateway: gateway + properties: + fsType: + description: "fsType is the filesystem type to mount. Must be a filesystem\ + \ type supported by the host operating system. Ex. \"ext4\", \"xfs\",\ + \ \"ntfs\". Default is \"xfs\"." + type: string + gateway: + description: gateway is the host address of the ScaleIO API Gateway. + type: string + protectionDomain: + description: protectionDomain is the name of the ScaleIO Protection Domain + for the configured storage. + type: string + readOnly: + description: readOnly Defaults to false (read/write). ReadOnly here will + force the ReadOnly setting in VolumeMounts. + type: boolean + secretRef: + $ref: "#/components/schemas/v1.LocalObjectReference" + sslEnabled: + description: "sslEnabled Flag enable/disable SSL communication with Gateway,\ + \ default false" + type: boolean + storageMode: + description: storageMode indicates whether the storage for a volume should + be ThickProvisioned or ThinProvisioned. Default is ThinProvisioned. + type: string + storagePool: + description: storagePool is the ScaleIO Storage Pool associated with the + protection domain. + type: string + system: + description: system is the name of the storage system as configured in ScaleIO. + type: string + volumeName: + description: volumeName is the name of a volume already created in the ScaleIO + system that is associated with this volume source. + type: string + required: + - gateway + - secretRef + - system + type: object + v1.ScopeSelector: + description: A scope selector represents the AND of the selectors represented + by the scoped-resource selector requirements. + example: + matchExpressions: + - scopeName: scopeName + values: + - values + - values + operator: operator + - scopeName: scopeName + values: + - values + - values + operator: operator + properties: + matchExpressions: + description: A list of scope selector requirements by scope of the resources. + items: + $ref: "#/components/schemas/v1.ScopedResourceSelectorRequirement" + type: array + x-kubernetes-list-type: atomic + type: object + x-kubernetes-map-type: atomic + v1.ScopedResourceSelectorRequirement: + description: "A scoped-resource selector requirement is a selector that contains\ + \ values, a scope name, and an operator that relates the scope name and values." + example: + scopeName: scopeName + values: + - values + - values + operator: operator + properties: + operator: + description: "Represents a scope's relationship to a set of values. Valid\ + \ operators are In, NotIn, Exists, DoesNotExist." + type: string + scopeName: + description: The name of the scope that the selector applies to. + type: string + values: + description: "An array of string values. If the operator is In or NotIn,\ + \ the values array must be non-empty. If the operator is Exists or DoesNotExist,\ + \ the values array must be empty. This array is replaced during a strategic\ + \ merge patch." + items: + type: string + type: array + x-kubernetes-list-type: atomic + required: + - operator + - scopeName + type: object + v1.SeccompProfile: + description: SeccompProfile defines a pod/container's seccomp profile settings. + Only one profile source may be set. + example: + localhostProfile: localhostProfile + type: type + properties: + localhostProfile: + description: "localhostProfile indicates a profile defined in a file on\ + \ the node should be used. The profile must be preconfigured on the node\ + \ to work. Must be a descending path, relative to the kubelet's configured\ + \ seccomp profile location. Must be set if type is \"Localhost\". Must\ + \ NOT be set for any other type." + type: string + type: + description: |- + type indicates which kind of seccomp profile will be applied. Valid options are: + + Localhost - a profile defined in a file on the node should be used. RuntimeDefault - the container runtime default profile should be used. Unconfined - no profile should be applied. + type: string + required: + - type + type: object + x-kubernetes-unions: + - discriminator: type + fields-to-discriminateBy: + localhostProfile: LocalhostProfile + v1.Secret: + description: Secret holds secret data of a certain type. The total bytes of + the values in the Data field must be less than MaxSecretSize bytes. + example: + immutable: true + metadata: + generation: 6 + finalizers: + - finalizers + - finalizers + resourceVersion: resourceVersion + annotations: + key: annotations + generateName: generateName + deletionTimestamp: 2000-01-23T04:56:07.000+00:00 + labels: + key: labels + ownerReferences: + - uid: uid + controller: true + apiVersion: apiVersion + kind: kind + name: name + blockOwnerDeletion: true + - uid: uid + controller: true + apiVersion: apiVersion + kind: kind + name: name + blockOwnerDeletion: true + selfLink: selfLink + deletionGracePeriodSeconds: 0 + uid: uid + managedFields: + - apiVersion: apiVersion + fieldsV1: "{}" + manager: manager + subresource: subresource + time: 2000-01-23T04:56:07.000+00:00 + operation: operation + fieldsType: fieldsType + - apiVersion: apiVersion + fieldsV1: "{}" + manager: manager + subresource: subresource + time: 2000-01-23T04:56:07.000+00:00 + operation: operation + fieldsType: fieldsType + creationTimestamp: 2000-01-23T04:56:07.000+00:00 + name: name + namespace: namespace + apiVersion: apiVersion + data: + key: data + kind: kind + type: type + stringData: + key: stringData + properties: + apiVersion: + description: "APIVersion defines the versioned schema of this representation\ + \ of an object. Servers should convert recognized schemas to the latest\ + \ internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources" + type: string + data: + additionalProperties: + format: byte + pattern: "^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$" + type: string + description: "Data contains the secret data. Each key must consist of alphanumeric\ + \ characters, '-', '_' or '.'. The serialized form of the secret data\ + \ is a base64 encoded string, representing the arbitrary (possibly non-string)\ + \ data value here. Described in https://tools.ietf.org/html/rfc4648#section-4" + type: object + immutable: + description: "Immutable, if set to true, ensures that data stored in the\ + \ Secret cannot be updated (only object metadata can be modified). If\ + \ not set to true, the field can be modified at any time. Defaulted to\ + \ nil." + type: boolean + kind: + description: "Kind is a string value representing the REST resource this\ + \ object represents. Servers may infer this from the endpoint the client\ + \ submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds" + type: string + metadata: + $ref: "#/components/schemas/v1.ObjectMeta" + stringData: + additionalProperties: + type: string + description: "stringData allows specifying non-binary secret data in string\ + \ form. It is provided as a write-only input field for convenience. All\ + \ keys and values are merged into the data field on write, overwriting\ + \ any existing values. The stringData field is never output when reading\ + \ from the API." + type: object + type: + description: "Used to facilitate programmatic handling of secret data. More\ + \ info: https://kubernetes.io/docs/concepts/configuration/secret/#secret-types" + type: string + type: object + x-kubernetes-group-version-kind: + - group: "" + kind: Secret + version: v1 + x-implements: + - io.kubernetes.client.common.KubernetesObject + v1.SecretEnvSource: + description: |- + SecretEnvSource selects a Secret to populate the environment variables with. + + The contents of the target Secret's Data field will represent the key-value pairs as environment variables. + example: + name: name + optional: true + properties: + name: + description: "Name of the referent. This field is effectively required,\ + \ but due to backwards compatibility is allowed to be empty. Instances\ + \ of this type with an empty value here are almost certainly wrong. More\ + \ info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names" + type: string + optional: + description: Specify whether the Secret must be defined + type: boolean + type: object + v1.SecretKeySelector: + description: SecretKeySelector selects a key of a Secret. + example: + name: name + optional: true + key: key + properties: + key: + description: The key of the secret to select from. Must be a valid secret + key. + type: string + name: + description: "Name of the referent. This field is effectively required,\ + \ but due to backwards compatibility is allowed to be empty. Instances\ + \ of this type with an empty value here are almost certainly wrong. More\ + \ info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names" + type: string + optional: + description: Specify whether the Secret or its key must be defined + type: boolean + required: + - key + type: object + x-kubernetes-map-type: atomic + v1.SecretList: + description: SecretList is a list of Secret. + example: + metadata: + remainingItemCount: 1 + continue: continue + resourceVersion: resourceVersion + shardInfo: + selector: selector + selfLink: selfLink + apiVersion: apiVersion + kind: kind + items: + - immutable: true + metadata: + generation: 6 + finalizers: + - finalizers + - finalizers + resourceVersion: resourceVersion + annotations: + key: annotations + generateName: generateName + deletionTimestamp: 2000-01-23T04:56:07.000+00:00 + labels: + key: labels + ownerReferences: + - uid: uid + controller: true + apiVersion: apiVersion + kind: kind + name: name + blockOwnerDeletion: true + - uid: uid + controller: true + apiVersion: apiVersion + kind: kind name: name - resourceClaimTemplateName: resourceClaimTemplateName - - resourceClaimName: resourceClaimName + blockOwnerDeletion: true + selfLink: selfLink + deletionGracePeriodSeconds: 0 + uid: uid + managedFields: + - apiVersion: apiVersion + fieldsV1: "{}" + manager: manager + subresource: subresource + time: 2000-01-23T04:56:07.000+00:00 + operation: operation + fieldsType: fieldsType + - apiVersion: apiVersion + fieldsV1: "{}" + manager: manager + subresource: subresource + time: 2000-01-23T04:56:07.000+00:00 + operation: operation + fieldsType: fieldsType + creationTimestamp: 2000-01-23T04:56:07.000+00:00 + name: name + namespace: namespace + apiVersion: apiVersion + data: + key: data + kind: kind + type: type + stringData: + key: stringData + - immutable: true + metadata: + generation: 6 + finalizers: + - finalizers + - finalizers + resourceVersion: resourceVersion + annotations: + key: annotations + generateName: generateName + deletionTimestamp: 2000-01-23T04:56:07.000+00:00 + labels: + key: labels + ownerReferences: + - uid: uid + controller: true + apiVersion: apiVersion + kind: kind name: name - resourceClaimTemplateName: resourceClaimTemplateName - subdomain: subdomain - containers: - - volumeDevices: - - devicePath: devicePath - name: name - - devicePath: devicePath - name: name - restartPolicyRules: - - action: action - exitCodes: - values: - - 1 - - 1 - operator: operator - - action: action - exitCodes: - values: - - 1 - - 1 - operator: operator - stdin: true - terminationMessagePolicy: terminationMessagePolicy - securityContext: - privileged: true - runAsUser: 6 - capabilities: - add: - - add - - add - drop: - - drop - - drop - seLinuxOptions: - role: role - level: level - type: type - user: user - appArmorProfile: - localhostProfile: localhostProfile - type: type - seccompProfile: - localhostProfile: localhostProfile - type: type - windowsOptions: - gmsaCredentialSpec: gmsaCredentialSpec - runAsUserName: runAsUserName - hostProcess: true - gmsaCredentialSpecName: gmsaCredentialSpecName - procMount: procMount - allowPrivilegeEscalation: true - runAsGroup: 1 - runAsNonRoot: true - readOnlyRootFilesystem: true - startupProbe: - terminationGracePeriodSeconds: 2 - failureThreshold: 5 - periodSeconds: 9 - tcpSocket: - port: port - host: host - timeoutSeconds: 4 - successThreshold: 3 - initialDelaySeconds: 7 - exec: - command: - - command - - command - grpc: - port: 2 - service: service - httpGet: - path: path - scheme: scheme - port: port - host: host - httpHeaders: - - name: name - value: value - - name: name - value: value - ports: - - protocol: protocol - hostIP: hostIP - name: name - containerPort: 7 - hostPort: 1 - - protocol: protocol - hostIP: hostIP - name: name - containerPort: 7 - hostPort: 1 - volumeMounts: - - mountPath: mountPath - mountPropagation: mountPropagation - name: name - readOnly: true - subPath: subPath - recursiveReadOnly: recursiveReadOnly - subPathExpr: subPathExpr - - mountPath: mountPath - mountPropagation: mountPropagation - name: name - readOnly: true - subPath: subPath - recursiveReadOnly: recursiveReadOnly - subPathExpr: subPathExpr - lifecycle: - postStart: - sleep: - seconds: 5 - tcpSocket: - port: port - host: host - exec: - command: - - command - - command - httpGet: - path: path - scheme: scheme - port: port - host: host - httpHeaders: - - name: name - value: value - - name: name - value: value - preStop: - sleep: - seconds: 5 - tcpSocket: - port: port - host: host - exec: - command: - - command - - command - httpGet: - path: path - scheme: scheme - port: port - host: host - httpHeaders: - - name: name - value: value - - name: name - value: value - stopSignal: stopSignal - readinessProbe: - terminationGracePeriodSeconds: 2 - failureThreshold: 5 - periodSeconds: 9 - tcpSocket: - port: port - host: host - timeoutSeconds: 4 - successThreshold: 3 - initialDelaySeconds: 7 - exec: - command: - - command - - command - grpc: - port: 2 - service: service - httpGet: - path: path - scheme: scheme - port: port - host: host - httpHeaders: - - name: name - value: value - - name: name - value: value - resizePolicy: - - resourceName: resourceName - restartPolicy: restartPolicy - - resourceName: resourceName - restartPolicy: restartPolicy - envFrom: - - configMapRef: - name: name - optional: true - prefix: prefix - secretRef: - name: name - optional: true - - configMapRef: - name: name - optional: true - prefix: prefix - secretRef: - name: name - optional: true - image: image - imagePullPolicy: imagePullPolicy - livenessProbe: - terminationGracePeriodSeconds: 2 - failureThreshold: 5 - periodSeconds: 9 - tcpSocket: - port: port - host: host - timeoutSeconds: 4 - successThreshold: 3 - initialDelaySeconds: 7 - exec: - command: - - command - - command - grpc: - port: 2 - service: service - httpGet: - path: path - scheme: scheme - port: port - host: host - httpHeaders: - - name: name - value: value - - name: name - value: value - terminationMessagePath: terminationMessagePath - workingDir: workingDir - resources: - claims: - - request: request - name: name - - request: request - name: name - requests: - key: null - limits: - key: null - env: - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath - fileKeyRef: - path: path - volumeName: volumeName - optional: true - key: key - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath - fileKeyRef: - path: path - volumeName: volumeName - optional: true - key: key - restartPolicy: restartPolicy - command: - - command - - command - args: - - args - - args + blockOwnerDeletion: true + - uid: uid + controller: true + apiVersion: apiVersion + kind: kind name: name - tty: true - stdinOnce: true - - volumeDevices: - - devicePath: devicePath - name: name - - devicePath: devicePath - name: name - restartPolicyRules: - - action: action - exitCodes: - values: - - 1 - - 1 - operator: operator - - action: action - exitCodes: - values: - - 1 - - 1 - operator: operator - stdin: true - terminationMessagePolicy: terminationMessagePolicy - securityContext: - privileged: true - runAsUser: 6 - capabilities: - add: - - add - - add - drop: - - drop - - drop - seLinuxOptions: - role: role - level: level - type: type - user: user - appArmorProfile: - localhostProfile: localhostProfile - type: type - seccompProfile: - localhostProfile: localhostProfile - type: type - windowsOptions: - gmsaCredentialSpec: gmsaCredentialSpec - runAsUserName: runAsUserName - hostProcess: true - gmsaCredentialSpecName: gmsaCredentialSpecName - procMount: procMount - allowPrivilegeEscalation: true - runAsGroup: 1 - runAsNonRoot: true - readOnlyRootFilesystem: true - startupProbe: - terminationGracePeriodSeconds: 2 - failureThreshold: 5 - periodSeconds: 9 - tcpSocket: - port: port - host: host - timeoutSeconds: 4 - successThreshold: 3 - initialDelaySeconds: 7 - exec: - command: - - command - - command - grpc: - port: 2 - service: service - httpGet: - path: path - scheme: scheme - port: port - host: host - httpHeaders: - - name: name - value: value - - name: name - value: value + blockOwnerDeletion: true + selfLink: selfLink + deletionGracePeriodSeconds: 0 + uid: uid + managedFields: + - apiVersion: apiVersion + fieldsV1: "{}" + manager: manager + subresource: subresource + time: 2000-01-23T04:56:07.000+00:00 + operation: operation + fieldsType: fieldsType + - apiVersion: apiVersion + fieldsV1: "{}" + manager: manager + subresource: subresource + time: 2000-01-23T04:56:07.000+00:00 + operation: operation + fieldsType: fieldsType + creationTimestamp: 2000-01-23T04:56:07.000+00:00 + name: name + namespace: namespace + apiVersion: apiVersion + data: + key: data + kind: kind + type: type + stringData: + key: stringData + properties: + apiVersion: + description: "APIVersion defines the versioned schema of this representation\ + \ of an object. Servers should convert recognized schemas to the latest\ + \ internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources" + type: string + items: + description: "Items is a list of secret objects. More info: https://kubernetes.io/docs/concepts/configuration/secret" + items: + $ref: "#/components/schemas/v1.Secret" + type: array + kind: + description: "Kind is a string value representing the REST resource this\ + \ object represents. Servers may infer this from the endpoint the client\ + \ submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds" + type: string + metadata: + $ref: "#/components/schemas/v1.ListMeta" + required: + - items + type: object + x-kubernetes-group-version-kind: + - group: "" + kind: SecretList + version: v1 + x-implements: + - io.kubernetes.client.common.KubernetesListObject + v1.SecretProjection: + description: |- + Adapts a secret into a projected volume. + + The contents of the target Secret's Data field will be presented in a projected volume as files using the keys in the Data field as the file names. Note that this is identical to a secret volume source without the default mode. + example: + name: name + optional: true + items: + - mode: 2 + path: path + user: 6 + key: key + - mode: 2 + path: path + user: 6 + key: key + properties: + items: + description: "items if unspecified, each key-value pair in the Data field\ + \ of the referenced Secret will be projected into the volume as a file\ + \ whose name is the key and content is the value. If specified, the listed\ + \ keys will be projected into the specified paths, and unlisted keys will\ + \ not be present. If a key is specified which is not present in the Secret,\ + \ the volume setup will error unless it is marked optional. Paths must\ + \ be relative and may not contain the '..' path or start with '..'." + items: + $ref: "#/components/schemas/v1.KeyToPath" + type: array + x-kubernetes-list-type: atomic + name: + description: "Name of the referent. This field is effectively required,\ + \ but due to backwards compatibility is allowed to be empty. Instances\ + \ of this type with an empty value here are almost certainly wrong. More\ + \ info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names" + type: string + optional: + description: optional field specify whether the Secret or its key must be + defined + type: boolean + type: object + v1.SecretReference: + description: SecretReference represents a Secret Reference. It has enough information + to retrieve secret in any namespace + example: + name: name + namespace: namespace + properties: + name: + description: name is unique within a namespace to reference a secret resource. + type: string + namespace: + description: namespace defines the space within which the secret name must + be unique. + type: string + type: object + x-kubernetes-map-type: atomic + v1.SecretVolumeSource: + description: |- + Adapts a Secret into a volume. + + The contents of the target Secret's Data field will be presented in a volume as files using the keys in the Data field as the file names. Secret volumes support ownership management and SELinux relabeling. + example: + secretName: secretName + defaultMode: 7 + defaultUser: 5 + optional: true + items: + - mode: 2 + path: path + user: 6 + key: key + - mode: 2 + path: path + user: 6 + key: key + properties: + defaultMode: + description: "defaultMode is Optional: mode bits used to set permissions\ + \ on created files by default. Must be an octal value between 0000 and\ + \ 0777 or a decimal value between 0 and 511. YAML accepts both octal and\ + \ decimal values, JSON requires decimal values for mode bits. Defaults\ + \ to 0644. Directories within the path are not affected by this setting.\ + \ This might be in conflict with other options that affect the file mode,\ + \ like fsGroup, and the result can be other mode bits set." + format: int32 + type: integer + defaultUser: + description: "defaultUser is Optional: The owner UID of the created files\ + \ by default. The defaultUser field is only used as a fallback when the\ + \ item-level user field is unset. (Alpha) This field requires the AtomicWriteVolumeUserFields\ + \ feature gate to be enabled." + format: int64 + type: integer + items: + description: "items If unspecified, each key-value pair in the Data field\ + \ of the referenced Secret will be projected into the volume as a file\ + \ whose name is the key and content is the value. If specified, the listed\ + \ keys will be projected into the specified paths, and unlisted keys will\ + \ not be present. If a key is specified which is not present in the Secret,\ + \ the volume setup will error unless it is marked optional. Paths must\ + \ be relative and may not contain the '..' path or start with '..'." + items: + $ref: "#/components/schemas/v1.KeyToPath" + type: array + x-kubernetes-list-type: atomic + optional: + description: optional field specify whether the Secret or its keys must + be defined + type: boolean + secretName: + description: "secretName is the name of the secret in the pod's namespace\ + \ to use. More info: https://kubernetes.io/docs/concepts/storage/volumes#secret" + type: string + type: object + v1.SecurityContext: + description: "SecurityContext holds security configuration that will be applied\ + \ to a container. Some fields are present in both SecurityContext and PodSecurityContext.\ + \ When both are set, the values in SecurityContext take precedence." + example: + privileged: true + runAsUser: 6 + capabilities: + add: + - add + - add + drop: + - drop + - drop + seLinuxOptions: + role: role + level: level + type: type + user: user + appArmorProfile: + localhostProfile: localhostProfile + type: type + seccompProfile: + localhostProfile: localhostProfile + type: type + windowsOptions: + gmsaCredentialSpec: gmsaCredentialSpec + runAsUserName: runAsUserName + hostProcess: true + gmsaCredentialSpecName: gmsaCredentialSpecName + procMount: procMount + allowPrivilegeEscalation: true + runAsGroup: 1 + runAsNonRoot: true + readOnlyRootFilesystem: true + properties: + allowPrivilegeEscalation: + description: "AllowPrivilegeEscalation controls whether a process can gain\ + \ more privileges than its parent process. This bool directly controls\ + \ if the no_new_privs flag will be set on the container process. AllowPrivilegeEscalation\ + \ is true always when the container is: 1) run as Privileged 2) has CAP_SYS_ADMIN\ + \ Note that this field cannot be set when spec.os.name is windows." + type: boolean + appArmorProfile: + $ref: "#/components/schemas/v1.AppArmorProfile" + capabilities: + $ref: "#/components/schemas/v1.Capabilities" + privileged: + description: Run container in privileged mode. Processes in privileged containers + are essentially equivalent to root on the host. Defaults to false. Note + that this field cannot be set when spec.os.name is windows. + type: boolean + procMount: + description: procMount denotes the type of proc mount to use for the containers. + The default value is Default which uses the container runtime defaults + for readonly paths and masked paths. Note that this field cannot be set + when spec.os.name is windows. + type: string + readOnlyRootFilesystem: + description: Whether this container has a read-only root filesystem. Default + is false. Note that this field cannot be set when spec.os.name is windows. + type: boolean + runAsGroup: + description: "The GID to run the entrypoint of the container process. Uses\ + \ runtime default if unset. May also be set in PodSecurityContext. If\ + \ set in both SecurityContext and PodSecurityContext, the value specified\ + \ in SecurityContext takes precedence. Note that this field cannot be\ + \ set when spec.os.name is windows." + format: int64 + type: integer + runAsNonRoot: + description: "Indicates that the container must run as a non-root user.\ + \ If true, the Kubelet will validate the image at runtime to ensure that\ + \ it does not run as UID 0 (root) and fail to start the container if it\ + \ does. If unset or false, no such validation will be performed. May also\ + \ be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext,\ + \ the value specified in SecurityContext takes precedence." + type: boolean + runAsUser: + description: "The UID to run the entrypoint of the container process. Defaults\ + \ to user specified in image metadata if unspecified. May also be set\ + \ in PodSecurityContext. If set in both SecurityContext and PodSecurityContext,\ + \ the value specified in SecurityContext takes precedence. Note that this\ + \ field cannot be set when spec.os.name is windows." + format: int64 + type: integer + seLinuxOptions: + $ref: "#/components/schemas/v1.SELinuxOptions" + seccompProfile: + $ref: "#/components/schemas/v1.SeccompProfile" + windowsOptions: + $ref: "#/components/schemas/v1.WindowsSecurityContextOptions" + type: object + v1.Service: + description: "Service is a named abstraction of software service (for example,\ + \ mysql) consisting of local port (for example 3306) that the proxy listens\ + \ on, and the selector that determines which pods will answer requests sent\ + \ through the proxy." + example: + metadata: + generation: 6 + finalizers: + - finalizers + - finalizers + resourceVersion: resourceVersion + annotations: + key: annotations + generateName: generateName + deletionTimestamp: 2000-01-23T04:56:07.000+00:00 + labels: + key: labels + ownerReferences: + - uid: uid + controller: true + apiVersion: apiVersion + kind: kind + name: name + blockOwnerDeletion: true + - uid: uid + controller: true + apiVersion: apiVersion + kind: kind + name: name + blockOwnerDeletion: true + selfLink: selfLink + deletionGracePeriodSeconds: 0 + uid: uid + managedFields: + - apiVersion: apiVersion + fieldsV1: "{}" + manager: manager + subresource: subresource + time: 2000-01-23T04:56:07.000+00:00 + operation: operation + fieldsType: fieldsType + - apiVersion: apiVersion + fieldsV1: "{}" + manager: manager + subresource: subresource + time: 2000-01-23T04:56:07.000+00:00 + operation: operation + fieldsType: fieldsType + creationTimestamp: 2000-01-23T04:56:07.000+00:00 + name: name + namespace: namespace + apiVersion: apiVersion + kind: kind + spec: + clusterIPs: + - clusterIPs + - clusterIPs + healthCheckNodePort: 0 + ipFamilyPolicy: ipFamilyPolicy + externalIPs: + - externalIPs + - externalIPs + sessionAffinity: sessionAffinity + trafficDistribution: trafficDistribution + allocateLoadBalancerNodePorts: true + ports: + - protocol: protocol + port: 1 + appProtocol: appProtocol + name: name + nodePort: 6 + targetPort: targetPort + - protocol: protocol + port: 1 + appProtocol: appProtocol + name: name + nodePort: 6 + targetPort: targetPort + type: type + loadBalancerClass: loadBalancerClass + sessionAffinityConfig: + clientIP: + timeoutSeconds: 5 + ipFamilies: + - ipFamilies + - ipFamilies + loadBalancerIP: loadBalancerIP + externalName: externalName + loadBalancerSourceRanges: + - loadBalancerSourceRanges + - loadBalancerSourceRanges + externalTrafficPolicy: externalTrafficPolicy + selector: + key: selector + publishNotReadyAddresses: true + internalTrafficPolicy: internalTrafficPolicy + clusterIP: clusterIP + status: + loadBalancer: + ingress: + - ipMode: ipMode + hostname: hostname + ip: ip ports: - protocol: protocol - hostIP: hostIP - name: name - containerPort: 7 - hostPort: 1 + port: 2 + error: error - protocol: protocol - hostIP: hostIP - name: name - containerPort: 7 - hostPort: 1 - volumeMounts: - - mountPath: mountPath - mountPropagation: mountPropagation - name: name - readOnly: true - subPath: subPath - recursiveReadOnly: recursiveReadOnly - subPathExpr: subPathExpr - - mountPath: mountPath - mountPropagation: mountPropagation - name: name - readOnly: true - subPath: subPath - recursiveReadOnly: recursiveReadOnly - subPathExpr: subPathExpr - lifecycle: - postStart: - sleep: - seconds: 5 - tcpSocket: - port: port - host: host - exec: - command: - - command - - command - httpGet: - path: path - scheme: scheme - port: port - host: host - httpHeaders: - - name: name - value: value - - name: name - value: value - preStop: - sleep: - seconds: 5 - tcpSocket: - port: port - host: host - exec: - command: - - command - - command - httpGet: - path: path - scheme: scheme - port: port - host: host - httpHeaders: - - name: name - value: value - - name: name - value: value - stopSignal: stopSignal - readinessProbe: - terminationGracePeriodSeconds: 2 - failureThreshold: 5 - periodSeconds: 9 - tcpSocket: - port: port - host: host - timeoutSeconds: 4 - successThreshold: 3 - initialDelaySeconds: 7 - exec: - command: - - command - - command - grpc: - port: 2 - service: service - httpGet: - path: path - scheme: scheme - port: port - host: host - httpHeaders: - - name: name - value: value - - name: name - value: value - resizePolicy: - - resourceName: resourceName - restartPolicy: restartPolicy - - resourceName: resourceName - restartPolicy: restartPolicy - envFrom: - - configMapRef: - name: name - optional: true - prefix: prefix - secretRef: - name: name - optional: true - - configMapRef: - name: name - optional: true - prefix: prefix - secretRef: - name: name - optional: true - image: image - imagePullPolicy: imagePullPolicy - livenessProbe: - terminationGracePeriodSeconds: 2 - failureThreshold: 5 - periodSeconds: 9 - tcpSocket: - port: port - host: host - timeoutSeconds: 4 - successThreshold: 3 - initialDelaySeconds: 7 - exec: - command: - - command - - command - grpc: - port: 2 - service: service - httpGet: - path: path - scheme: scheme - port: port - host: host - httpHeaders: - - name: name - value: value - - name: name - value: value - terminationMessagePath: terminationMessagePath - workingDir: workingDir - resources: - claims: - - request: request - name: name - - request: request - name: name - requests: - key: null - limits: - key: null - env: - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath - fileKeyRef: - path: path - volumeName: volumeName - optional: true - key: key - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath - fileKeyRef: - path: path - volumeName: volumeName - optional: true - key: key - restartPolicy: restartPolicy - command: - - command - - command - args: - - args - - args - name: name - tty: true - stdinOnce: true - initContainers: - - volumeDevices: - - devicePath: devicePath - name: name - - devicePath: devicePath - name: name - restartPolicyRules: - - action: action - exitCodes: - values: - - 1 - - 1 - operator: operator - - action: action - exitCodes: - values: - - 1 - - 1 - operator: operator - stdin: true - terminationMessagePolicy: terminationMessagePolicy - securityContext: - privileged: true - runAsUser: 6 - capabilities: - add: - - add - - add - drop: - - drop - - drop - seLinuxOptions: - role: role - level: level - type: type - user: user - appArmorProfile: - localhostProfile: localhostProfile - type: type - seccompProfile: - localhostProfile: localhostProfile - type: type - windowsOptions: - gmsaCredentialSpec: gmsaCredentialSpec - runAsUserName: runAsUserName - hostProcess: true - gmsaCredentialSpecName: gmsaCredentialSpecName - procMount: procMount - allowPrivilegeEscalation: true - runAsGroup: 1 - runAsNonRoot: true - readOnlyRootFilesystem: true - startupProbe: - terminationGracePeriodSeconds: 2 - failureThreshold: 5 - periodSeconds: 9 - tcpSocket: - port: port - host: host - timeoutSeconds: 4 - successThreshold: 3 - initialDelaySeconds: 7 - exec: - command: - - command - - command - grpc: - port: 2 - service: service - httpGet: - path: path - scheme: scheme - port: port - host: host - httpHeaders: - - name: name - value: value - - name: name - value: value + port: 2 + error: error + - ipMode: ipMode + hostname: hostname + ip: ip ports: - protocol: protocol - hostIP: hostIP - name: name - containerPort: 7 - hostPort: 1 + port: 2 + error: error - protocol: protocol - hostIP: hostIP - name: name - containerPort: 7 - hostPort: 1 - volumeMounts: - - mountPath: mountPath - mountPropagation: mountPropagation - name: name - readOnly: true - subPath: subPath - recursiveReadOnly: recursiveReadOnly - subPathExpr: subPathExpr - - mountPath: mountPath - mountPropagation: mountPropagation - name: name - readOnly: true - subPath: subPath - recursiveReadOnly: recursiveReadOnly - subPathExpr: subPathExpr - lifecycle: - postStart: - sleep: - seconds: 5 - tcpSocket: - port: port - host: host - exec: - command: - - command - - command - httpGet: - path: path - scheme: scheme - port: port - host: host - httpHeaders: - - name: name - value: value - - name: name - value: value - preStop: - sleep: - seconds: 5 - tcpSocket: - port: port - host: host - exec: - command: - - command - - command - httpGet: - path: path - scheme: scheme - port: port - host: host - httpHeaders: - - name: name - value: value - - name: name - value: value - stopSignal: stopSignal - readinessProbe: - terminationGracePeriodSeconds: 2 - failureThreshold: 5 - periodSeconds: 9 - tcpSocket: - port: port - host: host - timeoutSeconds: 4 - successThreshold: 3 - initialDelaySeconds: 7 - exec: - command: - - command - - command - grpc: + port: 2 + error: error + conditions: + - reason: reason + lastTransitionTime: 2000-01-23T04:56:07.000+00:00 + message: message + type: type + observedGeneration: 5 + status: status + - reason: reason + lastTransitionTime: 2000-01-23T04:56:07.000+00:00 + message: message + type: type + observedGeneration: 5 + status: status + properties: + apiVersion: + description: "APIVersion defines the versioned schema of this representation\ + \ of an object. Servers should convert recognized schemas to the latest\ + \ internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources" + type: string + kind: + description: "Kind is a string value representing the REST resource this\ + \ object represents. Servers may infer this from the endpoint the client\ + \ submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds" + type: string + metadata: + $ref: "#/components/schemas/v1.ObjectMeta" + spec: + $ref: "#/components/schemas/v1.ServiceSpec" + status: + $ref: "#/components/schemas/v1.ServiceStatus" + type: object + x-kubernetes-group-version-kind: + - group: "" + kind: Service + version: v1 + x-implements: + - io.kubernetes.client.common.KubernetesObject + v1.ServiceAccount: + description: "ServiceAccount binds together: * a name, understood by users,\ + \ and perhaps by peripheral systems, for an identity * a principal that can\ + \ be authenticated and authorized * a set of secrets" + example: + metadata: + generation: 6 + finalizers: + - finalizers + - finalizers + resourceVersion: resourceVersion + annotations: + key: annotations + generateName: generateName + deletionTimestamp: 2000-01-23T04:56:07.000+00:00 + labels: + key: labels + ownerReferences: + - uid: uid + controller: true + apiVersion: apiVersion + kind: kind + name: name + blockOwnerDeletion: true + - uid: uid + controller: true + apiVersion: apiVersion + kind: kind + name: name + blockOwnerDeletion: true + selfLink: selfLink + deletionGracePeriodSeconds: 0 + uid: uid + managedFields: + - apiVersion: apiVersion + fieldsV1: "{}" + manager: manager + subresource: subresource + time: 2000-01-23T04:56:07.000+00:00 + operation: operation + fieldsType: fieldsType + - apiVersion: apiVersion + fieldsV1: "{}" + manager: manager + subresource: subresource + time: 2000-01-23T04:56:07.000+00:00 + operation: operation + fieldsType: fieldsType + creationTimestamp: 2000-01-23T04:56:07.000+00:00 + name: name + namespace: namespace + apiVersion: apiVersion + automountServiceAccountToken: true + kind: kind + imagePullSecrets: + - name: name + - name: name + secrets: + - uid: uid + apiVersion: apiVersion + kind: kind + resourceVersion: resourceVersion + fieldPath: fieldPath + name: name + namespace: namespace + - uid: uid + apiVersion: apiVersion + kind: kind + resourceVersion: resourceVersion + fieldPath: fieldPath + name: name + namespace: namespace + properties: + apiVersion: + description: "APIVersion defines the versioned schema of this representation\ + \ of an object. Servers should convert recognized schemas to the latest\ + \ internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources" + type: string + automountServiceAccountToken: + description: AutomountServiceAccountToken indicates whether pods running + as this service account should have an API token automatically mounted. + Can be overridden at the pod level. + type: boolean + imagePullSecrets: + description: "ImagePullSecrets is a list of references to secrets in the\ + \ same namespace to use for pulling any images in pods that reference\ + \ this ServiceAccount. ImagePullSecrets are distinct from Secrets because\ + \ Secrets can be mounted in the pod, but ImagePullSecrets are only accessed\ + \ by the kubelet. More info: https://kubernetes.io/docs/concepts/containers/images/#specifying-imagepullsecrets-on-a-pod" + items: + $ref: "#/components/schemas/v1.LocalObjectReference" + type: array + x-kubernetes-list-type: atomic + kind: + description: "Kind is a string value representing the REST resource this\ + \ object represents. Servers may infer this from the endpoint the client\ + \ submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds" + type: string + metadata: + $ref: "#/components/schemas/v1.ObjectMeta" + secrets: + description: "Secrets is a list of the secrets in the same namespace that\ + \ pods running using this ServiceAccount are allowed to use. Pods are\ + \ only limited to this list if this service account has a \"kubernetes.io/enforce-mountable-secrets\"\ + \ annotation set to \"true\". The \"kubernetes.io/enforce-mountable-secrets\"\ + \ annotation is deprecated since v1.32. Prefer separate namespaces to\ + \ isolate access to mounted secrets. This field should not be used to\ + \ find auto-generated service account token secrets for use outside of\ + \ pods. Instead, tokens can be requested directly using the TokenRequest\ + \ API, or service account token secrets can be manually created. More\ + \ info: https://kubernetes.io/docs/concepts/configuration/secret" + items: + $ref: "#/components/schemas/v1.ObjectReference" + type: array + x-kubernetes-patch-strategy: merge + x-kubernetes-list-type: map + x-kubernetes-list-map-keys: + - name + x-kubernetes-patch-merge-key: name + type: object + x-kubernetes-group-version-kind: + - group: "" + kind: ServiceAccount + version: v1 + x-implements: + - io.kubernetes.client.common.KubernetesObject + v1.ServiceAccountList: + description: ServiceAccountList is a list of ServiceAccount objects + example: + metadata: + remainingItemCount: 1 + continue: continue + resourceVersion: resourceVersion + shardInfo: + selector: selector + selfLink: selfLink + apiVersion: apiVersion + kind: kind + items: + - metadata: + generation: 6 + finalizers: + - finalizers + - finalizers + resourceVersion: resourceVersion + annotations: + key: annotations + generateName: generateName + deletionTimestamp: 2000-01-23T04:56:07.000+00:00 + labels: + key: labels + ownerReferences: + - uid: uid + controller: true + apiVersion: apiVersion + kind: kind + name: name + blockOwnerDeletion: true + - uid: uid + controller: true + apiVersion: apiVersion + kind: kind + name: name + blockOwnerDeletion: true + selfLink: selfLink + deletionGracePeriodSeconds: 0 + uid: uid + managedFields: + - apiVersion: apiVersion + fieldsV1: "{}" + manager: manager + subresource: subresource + time: 2000-01-23T04:56:07.000+00:00 + operation: operation + fieldsType: fieldsType + - apiVersion: apiVersion + fieldsV1: "{}" + manager: manager + subresource: subresource + time: 2000-01-23T04:56:07.000+00:00 + operation: operation + fieldsType: fieldsType + creationTimestamp: 2000-01-23T04:56:07.000+00:00 + name: name + namespace: namespace + apiVersion: apiVersion + automountServiceAccountToken: true + kind: kind + imagePullSecrets: + - name: name + - name: name + secrets: + - uid: uid + apiVersion: apiVersion + kind: kind + resourceVersion: resourceVersion + fieldPath: fieldPath + name: name + namespace: namespace + - uid: uid + apiVersion: apiVersion + kind: kind + resourceVersion: resourceVersion + fieldPath: fieldPath + name: name + namespace: namespace + - metadata: + generation: 6 + finalizers: + - finalizers + - finalizers + resourceVersion: resourceVersion + annotations: + key: annotations + generateName: generateName + deletionTimestamp: 2000-01-23T04:56:07.000+00:00 + labels: + key: labels + ownerReferences: + - uid: uid + controller: true + apiVersion: apiVersion + kind: kind + name: name + blockOwnerDeletion: true + - uid: uid + controller: true + apiVersion: apiVersion + kind: kind + name: name + blockOwnerDeletion: true + selfLink: selfLink + deletionGracePeriodSeconds: 0 + uid: uid + managedFields: + - apiVersion: apiVersion + fieldsV1: "{}" + manager: manager + subresource: subresource + time: 2000-01-23T04:56:07.000+00:00 + operation: operation + fieldsType: fieldsType + - apiVersion: apiVersion + fieldsV1: "{}" + manager: manager + subresource: subresource + time: 2000-01-23T04:56:07.000+00:00 + operation: operation + fieldsType: fieldsType + creationTimestamp: 2000-01-23T04:56:07.000+00:00 + name: name + namespace: namespace + apiVersion: apiVersion + automountServiceAccountToken: true + kind: kind + imagePullSecrets: + - name: name + - name: name + secrets: + - uid: uid + apiVersion: apiVersion + kind: kind + resourceVersion: resourceVersion + fieldPath: fieldPath + name: name + namespace: namespace + - uid: uid + apiVersion: apiVersion + kind: kind + resourceVersion: resourceVersion + fieldPath: fieldPath + name: name + namespace: namespace + properties: + apiVersion: + description: "APIVersion defines the versioned schema of this representation\ + \ of an object. Servers should convert recognized schemas to the latest\ + \ internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources" + type: string + items: + description: "List of ServiceAccounts. More info: https://kubernetes.io/docs/tasks/configure-pod-container/configure-service-account/" + items: + $ref: "#/components/schemas/v1.ServiceAccount" + type: array + kind: + description: "Kind is a string value representing the REST resource this\ + \ object represents. Servers may infer this from the endpoint the client\ + \ submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds" + type: string + metadata: + $ref: "#/components/schemas/v1.ListMeta" + required: + - items + type: object + x-kubernetes-group-version-kind: + - group: "" + kind: ServiceAccountList + version: v1 + x-implements: + - io.kubernetes.client.common.KubernetesListObject + v1.ServiceAccountTokenProjection: + description: ServiceAccountTokenProjection represents a projected service account + token volume. This projection can be used to insert a service account token + into the pods runtime filesystem for use against APIs (Kubernetes API Server + or otherwise). + example: + path: path + audience: audience + expirationSeconds: 3 + user: 3 + properties: + audience: + description: "audience is the intended audience of the token. A recipient\ + \ of a token must identify itself with an identifier specified in the\ + \ audience of the token, and otherwise should reject the token. The audience\ + \ defaults to the identifier of the apiserver." + type: string + expirationSeconds: + description: "expirationSeconds is the requested duration of validity of\ + \ the service account token. As the token approaches expiration, the kubelet\ + \ volume plugin will proactively rotate the service account token. The\ + \ kubelet will start trying to rotate the token if the token is older\ + \ than 80 percent of its time to live or if the token is older than 24\ + \ hours.Defaults to 1 hour and must be at least 10 minutes." + format: int64 + type: integer + path: + description: path is the path relative to the mount point of the file to + project the token into. + type: string + user: + description: "user is Optional: The owner UID of the created file. If specified,\ + \ the item-level user field takes precedence over defaultUser. (Alpha)\ + \ This field requires the AtomicWriteVolumeUserFields feature gate to\ + \ be enabled." + format: int64 + type: integer + required: + - path + type: object + v1.ServiceList: + description: ServiceList holds a list of services. + example: + metadata: + remainingItemCount: 1 + continue: continue + resourceVersion: resourceVersion + shardInfo: + selector: selector + selfLink: selfLink + apiVersion: apiVersion + kind: kind + items: + - metadata: + generation: 6 + finalizers: + - finalizers + - finalizers + resourceVersion: resourceVersion + annotations: + key: annotations + generateName: generateName + deletionTimestamp: 2000-01-23T04:56:07.000+00:00 + labels: + key: labels + ownerReferences: + - uid: uid + controller: true + apiVersion: apiVersion + kind: kind + name: name + blockOwnerDeletion: true + - uid: uid + controller: true + apiVersion: apiVersion + kind: kind + name: name + blockOwnerDeletion: true + selfLink: selfLink + deletionGracePeriodSeconds: 0 + uid: uid + managedFields: + - apiVersion: apiVersion + fieldsV1: "{}" + manager: manager + subresource: subresource + time: 2000-01-23T04:56:07.000+00:00 + operation: operation + fieldsType: fieldsType + - apiVersion: apiVersion + fieldsV1: "{}" + manager: manager + subresource: subresource + time: 2000-01-23T04:56:07.000+00:00 + operation: operation + fieldsType: fieldsType + creationTimestamp: 2000-01-23T04:56:07.000+00:00 + name: name + namespace: namespace + apiVersion: apiVersion + kind: kind + spec: + clusterIPs: + - clusterIPs + - clusterIPs + healthCheckNodePort: 0 + ipFamilyPolicy: ipFamilyPolicy + externalIPs: + - externalIPs + - externalIPs + sessionAffinity: sessionAffinity + trafficDistribution: trafficDistribution + allocateLoadBalancerNodePorts: true + ports: + - protocol: protocol + port: 1 + appProtocol: appProtocol + name: name + nodePort: 6 + targetPort: targetPort + - protocol: protocol + port: 1 + appProtocol: appProtocol + name: name + nodePort: 6 + targetPort: targetPort + type: type + loadBalancerClass: loadBalancerClass + sessionAffinityConfig: + clientIP: + timeoutSeconds: 5 + ipFamilies: + - ipFamilies + - ipFamilies + loadBalancerIP: loadBalancerIP + externalName: externalName + loadBalancerSourceRanges: + - loadBalancerSourceRanges + - loadBalancerSourceRanges + externalTrafficPolicy: externalTrafficPolicy + selector: + key: selector + publishNotReadyAddresses: true + internalTrafficPolicy: internalTrafficPolicy + clusterIP: clusterIP + status: + loadBalancer: + ingress: + - ipMode: ipMode + hostname: hostname + ip: ip + ports: + - protocol: protocol port: 2 - service: service - httpGet: - path: path - scheme: scheme - port: port - host: host - httpHeaders: - - name: name - value: value - - name: name - value: value - resizePolicy: - - resourceName: resourceName - restartPolicy: restartPolicy - - resourceName: resourceName - restartPolicy: restartPolicy - envFrom: - - configMapRef: - name: name - optional: true - prefix: prefix - secretRef: - name: name - optional: true - - configMapRef: - name: name - optional: true - prefix: prefix - secretRef: - name: name - optional: true - image: image - imagePullPolicy: imagePullPolicy - livenessProbe: - terminationGracePeriodSeconds: 2 - failureThreshold: 5 - periodSeconds: 9 - tcpSocket: - port: port - host: host - timeoutSeconds: 4 - successThreshold: 3 - initialDelaySeconds: 7 - exec: - command: - - command - - command - grpc: + error: error + - protocol: protocol port: 2 - service: service - httpGet: - path: path - scheme: scheme - port: port - host: host - httpHeaders: - - name: name - value: value - - name: name - value: value - terminationMessagePath: terminationMessagePath - workingDir: workingDir - resources: - claims: - - request: request - name: name - - request: request - name: name - requests: - key: null - limits: - key: null - env: - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath - fileKeyRef: - path: path - volumeName: volumeName - optional: true - key: key - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath - fileKeyRef: - path: path - volumeName: volumeName - optional: true - key: key - restartPolicy: restartPolicy - command: - - command - - command - args: - - args - - args + error: error + - ipMode: ipMode + hostname: hostname + ip: ip + ports: + - protocol: protocol + port: 2 + error: error + - protocol: protocol + port: 2 + error: error + conditions: + - reason: reason + lastTransitionTime: 2000-01-23T04:56:07.000+00:00 + message: message + type: type + observedGeneration: 5 + status: status + - reason: reason + lastTransitionTime: 2000-01-23T04:56:07.000+00:00 + message: message + type: type + observedGeneration: 5 + status: status + - metadata: + generation: 6 + finalizers: + - finalizers + - finalizers + resourceVersion: resourceVersion + annotations: + key: annotations + generateName: generateName + deletionTimestamp: 2000-01-23T04:56:07.000+00:00 + labels: + key: labels + ownerReferences: + - uid: uid + controller: true + apiVersion: apiVersion + kind: kind name: name - tty: true - stdinOnce: true - - volumeDevices: - - devicePath: devicePath - name: name - - devicePath: devicePath - name: name - restartPolicyRules: - - action: action - exitCodes: - values: - - 1 - - 1 - operator: operator - - action: action - exitCodes: - values: - - 1 - - 1 - operator: operator - stdin: true - terminationMessagePolicy: terminationMessagePolicy - securityContext: - privileged: true - runAsUser: 6 - capabilities: - add: - - add - - add - drop: - - drop - - drop - seLinuxOptions: - role: role - level: level - type: type - user: user - appArmorProfile: - localhostProfile: localhostProfile - type: type - seccompProfile: - localhostProfile: localhostProfile - type: type - windowsOptions: - gmsaCredentialSpec: gmsaCredentialSpec - runAsUserName: runAsUserName - hostProcess: true - gmsaCredentialSpecName: gmsaCredentialSpecName - procMount: procMount - allowPrivilegeEscalation: true - runAsGroup: 1 - runAsNonRoot: true - readOnlyRootFilesystem: true - startupProbe: - terminationGracePeriodSeconds: 2 - failureThreshold: 5 - periodSeconds: 9 - tcpSocket: - port: port - host: host - timeoutSeconds: 4 - successThreshold: 3 - initialDelaySeconds: 7 - exec: - command: - - command - - command - grpc: + blockOwnerDeletion: true + - uid: uid + controller: true + apiVersion: apiVersion + kind: kind + name: name + blockOwnerDeletion: true + selfLink: selfLink + deletionGracePeriodSeconds: 0 + uid: uid + managedFields: + - apiVersion: apiVersion + fieldsV1: "{}" + manager: manager + subresource: subresource + time: 2000-01-23T04:56:07.000+00:00 + operation: operation + fieldsType: fieldsType + - apiVersion: apiVersion + fieldsV1: "{}" + manager: manager + subresource: subresource + time: 2000-01-23T04:56:07.000+00:00 + operation: operation + fieldsType: fieldsType + creationTimestamp: 2000-01-23T04:56:07.000+00:00 + name: name + namespace: namespace + apiVersion: apiVersion + kind: kind + spec: + clusterIPs: + - clusterIPs + - clusterIPs + healthCheckNodePort: 0 + ipFamilyPolicy: ipFamilyPolicy + externalIPs: + - externalIPs + - externalIPs + sessionAffinity: sessionAffinity + trafficDistribution: trafficDistribution + allocateLoadBalancerNodePorts: true + ports: + - protocol: protocol + port: 1 + appProtocol: appProtocol + name: name + nodePort: 6 + targetPort: targetPort + - protocol: protocol + port: 1 + appProtocol: appProtocol + name: name + nodePort: 6 + targetPort: targetPort + type: type + loadBalancerClass: loadBalancerClass + sessionAffinityConfig: + clientIP: + timeoutSeconds: 5 + ipFamilies: + - ipFamilies + - ipFamilies + loadBalancerIP: loadBalancerIP + externalName: externalName + loadBalancerSourceRanges: + - loadBalancerSourceRanges + - loadBalancerSourceRanges + externalTrafficPolicy: externalTrafficPolicy + selector: + key: selector + publishNotReadyAddresses: true + internalTrafficPolicy: internalTrafficPolicy + clusterIP: clusterIP + status: + loadBalancer: + ingress: + - ipMode: ipMode + hostname: hostname + ip: ip + ports: + - protocol: protocol port: 2 - service: service - httpGet: - path: path - scheme: scheme - port: port - host: host - httpHeaders: - - name: name - value: value - - name: name - value: value - ports: - - protocol: protocol - hostIP: hostIP - name: name - containerPort: 7 - hostPort: 1 - - protocol: protocol - hostIP: hostIP + error: error + - protocol: protocol + port: 2 + error: error + - ipMode: ipMode + hostname: hostname + ip: ip + ports: + - protocol: protocol + port: 2 + error: error + - protocol: protocol + port: 2 + error: error + conditions: + - reason: reason + lastTransitionTime: 2000-01-23T04:56:07.000+00:00 + message: message + type: type + observedGeneration: 5 + status: status + - reason: reason + lastTransitionTime: 2000-01-23T04:56:07.000+00:00 + message: message + type: type + observedGeneration: 5 + status: status + properties: + apiVersion: + description: "APIVersion defines the versioned schema of this representation\ + \ of an object. Servers should convert recognized schemas to the latest\ + \ internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources" + type: string + items: + description: List of services + items: + $ref: "#/components/schemas/v1.Service" + type: array + kind: + description: "Kind is a string value representing the REST resource this\ + \ object represents. Servers may infer this from the endpoint the client\ + \ submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds" + type: string + metadata: + $ref: "#/components/schemas/v1.ListMeta" + required: + - items + type: object + x-kubernetes-group-version-kind: + - group: "" + kind: ServiceList + version: v1 + x-implements: + - io.kubernetes.client.common.KubernetesListObject + v1.ServicePort: + description: ServicePort contains information on service's port. + example: + protocol: protocol + port: 1 + appProtocol: appProtocol + name: name + nodePort: 6 + targetPort: targetPort + properties: + appProtocol: + description: |- + The application protocol for this port. This is used as a hint for implementations to offer richer behavior for protocols that they understand. This field follows standard Kubernetes label syntax. Valid values are either: + + * Un-prefixed protocol names - reserved for IANA standard service names (as per RFC-6335 and https://www.iana.org/assignments/service-names). + + * Kubernetes-defined prefixed names: + * 'kubernetes.io/h2c' - HTTP/2 prior knowledge over cleartext as described in https://www.rfc-editor.org/rfc/rfc9113.html#name-starting-http-2-with-prior- + * 'kubernetes.io/ws' - WebSocket over cleartext as described in https://www.rfc-editor.org/rfc/rfc6455 + * 'kubernetes.io/wss' - WebSocket over TLS as described in https://www.rfc-editor.org/rfc/rfc6455 + + * Other protocols should use implementation-defined prefixed names such as mycompany.com/my-custom-protocol. + type: string + name: + description: "The name of this port within the service. This must be a DNS_LABEL.\ + \ All ports within a ServiceSpec must have unique names. When considering\ + \ the endpoints for a Service, this must match the 'name' field in the\ + \ EndpointPort. Optional if only one ServicePort is defined on this service." + type: string + nodePort: + description: "The port on each node on which this service is exposed when\ + \ type is NodePort or LoadBalancer. Usually assigned by the system. If\ + \ a value is specified, in-range, and not in use it will be used, otherwise\ + \ the operation will fail. If not specified, a port will be allocated\ + \ if this Service requires one. If this field is specified when creating\ + \ a Service which does not need it, creation will fail. This field will\ + \ be wiped when updating a Service to no longer need it (e.g. changing\ + \ type from NodePort to ClusterIP). More info: https://kubernetes.io/docs/concepts/services-networking/service/#type-nodeport" + format: int32 + type: integer + port: + description: The port that will be exposed by this service. + format: int32 + type: integer + protocol: + description: "The IP protocol for this port. Supports \"TCP\", \"UDP\",\ + \ and \"SCTP\". Default is TCP." + type: string + targetPort: + description: "IntOrString is a type that can hold an int32 or a string.\ + \ When used in JSON or YAML marshalling and unmarshalling, it produces\ + \ or consumes the inner type. This allows you to have, for example, a\ + \ JSON field that can accept a name or number." + format: int-or-string + type: string + required: + - port + type: object + v1.ServiceSpec: + description: ServiceSpec describes the attributes that a user creates on a service. + example: + clusterIPs: + - clusterIPs + - clusterIPs + healthCheckNodePort: 0 + ipFamilyPolicy: ipFamilyPolicy + externalIPs: + - externalIPs + - externalIPs + sessionAffinity: sessionAffinity + trafficDistribution: trafficDistribution + allocateLoadBalancerNodePorts: true + ports: + - protocol: protocol + port: 1 + appProtocol: appProtocol + name: name + nodePort: 6 + targetPort: targetPort + - protocol: protocol + port: 1 + appProtocol: appProtocol + name: name + nodePort: 6 + targetPort: targetPort + type: type + loadBalancerClass: loadBalancerClass + sessionAffinityConfig: + clientIP: + timeoutSeconds: 5 + ipFamilies: + - ipFamilies + - ipFamilies + loadBalancerIP: loadBalancerIP + externalName: externalName + loadBalancerSourceRanges: + - loadBalancerSourceRanges + - loadBalancerSourceRanges + externalTrafficPolicy: externalTrafficPolicy + selector: + key: selector + publishNotReadyAddresses: true + internalTrafficPolicy: internalTrafficPolicy + clusterIP: clusterIP + properties: + allocateLoadBalancerNodePorts: + description: "allocateLoadBalancerNodePorts defines if NodePorts will be\ + \ automatically allocated for services with type LoadBalancer. Default\ + \ is \"true\". It may be set to \"false\" if the cluster load-balancer\ + \ does not rely on NodePorts. If the caller requests specific NodePorts\ + \ (by specifying a value), those requests will be respected, regardless\ + \ of this field. This field may only be set for services with type LoadBalancer\ + \ and will be cleared if the type is changed to any other type." + type: boolean + clusterIP: + description: "clusterIP is the IP address of the service and is usually\ + \ assigned randomly. If an address is specified manually, is in-range\ + \ (as per system configuration), and is not in use, it will be allocated\ + \ to the service; otherwise creation of the service will fail. This field\ + \ may not be changed through updates unless the type field is also being\ + \ changed to ExternalName (which requires this field to be blank) or the\ + \ type field is being changed from ExternalName (in which case this field\ + \ may optionally be specified, as describe above). Valid values are \"\ + None\", empty string (\"\"), or a valid IP address. Setting this to \"\ + None\" makes a \"headless service\" (no virtual IP), which is useful when\ + \ direct endpoint connections are preferred and proxying is not required.\ + \ Only applies to types ClusterIP, NodePort, and LoadBalancer. If this\ + \ field is specified when creating a Service of type ExternalName, creation\ + \ will fail. This field will be wiped when updating a Service to type\ + \ ExternalName. More info: https://kubernetes.io/docs/concepts/services-networking/service/#virtual-ips-and-service-proxies" + type: string + clusterIPs: + description: |- + ClusterIPs is a list of IP addresses assigned to this service, and are usually assigned randomly. If an address is specified manually, is in-range (as per system configuration), and is not in use, it will be allocated to the service; otherwise creation of the service will fail. This field may not be changed through updates unless the type field is also being changed to ExternalName (which requires this field to be empty) or the type field is being changed from ExternalName (in which case this field may optionally be specified, as describe above). Valid values are "None", empty string (""), or a valid IP address. Setting this to "None" makes a "headless service" (no virtual IP), which is useful when direct endpoint connections are preferred and proxying is not required. Only applies to types ClusterIP, NodePort, and LoadBalancer. If this field is specified when creating a Service of type ExternalName, creation will fail. This field will be wiped when updating a Service to type ExternalName. If this field is not specified, it will be initialized from the clusterIP field. If this field is specified, clients must ensure that clusterIPs[0] and clusterIP have the same value. + + This field may hold a maximum of two entries (dual-stack IPs, in either order). These IPs must correspond to the values of the ipFamilies field. Both clusterIPs and ipFamilies are governed by the ipFamilyPolicy field. More info: https://kubernetes.io/docs/concepts/services-networking/service/#virtual-ips-and-service-proxies + items: + type: string + type: array + x-kubernetes-list-type: atomic + externalIPs: + description: externalIPs is a list of IP addresses for which nodes in the + cluster will also accept traffic for this service. These IPs are not + managed by Kubernetes. The user is responsible for ensuring that traffic + arrives at a node with this IP. A common example is external load-balancers + that are not part of the Kubernetes system. + items: + type: string + type: array + x-kubernetes-list-type: atomic + externalName: + description: externalName is the external reference that discovery mechanisms + will return as an alias for this service (e.g. a DNS CNAME record). No + proxying will be involved. Must be a lowercase RFC-1123 hostname (https://tools.ietf.org/html/rfc1123) + and requires `type` to be "ExternalName". + type: string + externalTrafficPolicy: + description: "externalTrafficPolicy describes how nodes distribute service\ + \ traffic they receive on one of the Service's \"externally-facing\" addresses\ + \ (NodePorts, ExternalIPs, and LoadBalancer IPs). If set to \"Local\"\ + , the proxy will configure the service in a way that assumes that external\ + \ load balancers will take care of balancing the service traffic between\ + \ nodes, and so each node will deliver traffic only to the node-local\ + \ endpoints of the service, without masquerading the client source IP.\ + \ (Traffic mistakenly sent to a node with no endpoints will be dropped.)\ + \ The default value, \"Cluster\", uses the standard behavior of routing\ + \ to all endpoints evenly (possibly modified by topology and other features).\ + \ Note that traffic sent to an External IP or LoadBalancer IP from within\ + \ the cluster will always get \"Cluster\" semantics, but clients sending\ + \ to a NodePort from within the cluster may need to take traffic policy\ + \ into account when picking a node." + type: string + healthCheckNodePort: + description: "healthCheckNodePort specifies the healthcheck nodePort for\ + \ the service. This only applies when type is set to LoadBalancer and\ + \ externalTrafficPolicy is set to Local. If a value is specified, is in-range,\ + \ and is not in use, it will be used. If not specified, a value will\ + \ be automatically allocated. External systems (e.g. load-balancers)\ + \ can use this port to determine if a given node holds endpoints for this\ + \ service or not. If this field is specified when creating a Service\ + \ which does not need it, creation will fail. This field will be wiped\ + \ when updating a Service to no longer need it (e.g. changing type). This\ + \ field cannot be updated once set." + format: int32 + type: integer + internalTrafficPolicy: + description: "InternalTrafficPolicy describes how nodes distribute service\ + \ traffic they receive on the ClusterIP. If set to \"Local\", the proxy\ + \ will assume that pods only want to talk to endpoints of the service\ + \ on the same node as the pod, dropping the traffic if there are no local\ + \ endpoints. The default value, \"Cluster\", uses the standard behavior\ + \ of routing to all endpoints evenly (possibly modified by topology and\ + \ other features)." + type: string + ipFamilies: + description: |- + IPFamilies is a list of IP families (e.g. IPv4, IPv6) assigned to this service. This field is usually assigned automatically based on cluster configuration and the ipFamilyPolicy field. If this field is specified manually, the requested family is available in the cluster, and ipFamilyPolicy allows it, it will be used; otherwise creation of the service will fail. This field is conditionally mutable: it allows for adding or removing a secondary IP family, but it does not allow changing the primary IP family of the Service. Valid values are "IPv4" and "IPv6". This field only applies to Services of types ClusterIP, NodePort, and LoadBalancer, and does apply to "headless" services. This field will be wiped when updating a Service to type ExternalName. + + This field may hold a maximum of two entries (dual-stack families, in either order). These families must correspond to the values of the clusterIPs field, if specified. Both clusterIPs and ipFamilies are governed by the ipFamilyPolicy field. + items: + type: string + type: array + x-kubernetes-list-type: atomic + ipFamilyPolicy: + description: "IPFamilyPolicy represents the dual-stack-ness requested or\ + \ required by this Service. If there is no value provided, then this field\ + \ will be set to SingleStack. Services can be \"SingleStack\" (a single\ + \ IP family), \"PreferDualStack\" (two IP families on dual-stack configured\ + \ clusters or a single IP family on single-stack clusters), or \"RequireDualStack\"\ + \ (two IP families on dual-stack configured clusters, otherwise fail).\ + \ The ipFamilies and clusterIPs fields depend on the value of this field.\ + \ This field will be wiped when updating a service to type ExternalName." + type: string + loadBalancerClass: + description: "loadBalancerClass is the class of the load balancer implementation\ + \ this Service belongs to. If specified, the value of this field must\ + \ be a label-style identifier, with an optional prefix, e.g. \"internal-vip\"\ + \ or \"example.com/internal-vip\". Unprefixed names are reserved for end-users.\ + \ This field can only be set when the Service type is 'LoadBalancer'.\ + \ If not set, the default load balancer implementation is used, today\ + \ this is typically done through the cloud provider integration, but should\ + \ apply for any default implementation. If set, it is assumed that a load\ + \ balancer implementation is watching for Services with a matching class.\ + \ Any default load balancer implementation (e.g. cloud providers) should\ + \ ignore Services that set this field. This field can only be set when\ + \ creating or updating a Service to type 'LoadBalancer'. Once set, it\ + \ can not be changed. This field will be wiped when a service is updated\ + \ to a non 'LoadBalancer' type." + type: string + loadBalancerIP: + description: "Only applies to Service Type: LoadBalancer. This feature depends\ + \ on whether the underlying cloud-provider supports specifying the loadBalancerIP\ + \ when a load balancer is created. This field will be ignored if the cloud-provider\ + \ does not support the feature. Deprecated: This field was under-specified\ + \ and its meaning varies across implementations. Using it is non-portable\ + \ and it may not support dual-stack. Users are encouraged to use implementation-specific\ + \ annotations when available." + type: string + loadBalancerSourceRanges: + description: "If specified and supported by the platform, this will restrict\ + \ traffic through the cloud-provider load-balancer will be restricted\ + \ to the specified client IPs. This field will be ignored if the cloud-provider\ + \ does not support the feature.\" More info: https://kubernetes.io/docs/tasks/access-application-cluster/create-external-load-balancer/" + items: + type: string + type: array + x-kubernetes-list-type: atomic + ports: + description: "The list of ports that are exposed by this service. More info:\ + \ https://kubernetes.io/docs/concepts/services-networking/service/#virtual-ips-and-service-proxies" + items: + $ref: "#/components/schemas/v1.ServicePort" + type: array + x-kubernetes-patch-strategy: merge + x-kubernetes-list-type: map + x-kubernetes-list-map-keys: + - port + - protocol + x-kubernetes-patch-merge-key: port + publishNotReadyAddresses: + description: publishNotReadyAddresses indicates that any agent which deals + with endpoints for this Service should disregard any indications of ready/not-ready. + The primary use case for setting this field is for a StatefulSet's Headless + Service to propagate SRV DNS records for its Pods for the purpose of peer + discovery. The Kubernetes controllers that generate Endpoints and EndpointSlice + resources for Services interpret this to mean that all endpoints are considered + "ready" even if the Pods themselves are not. Agents which consume only + Kubernetes generated endpoints through the Endpoints or EndpointSlice + resources can safely assume this behavior. + type: boolean + selector: + additionalProperties: + type: string + description: "Route service traffic to pods with label keys and values matching\ + \ this selector. If empty or not present, the service is assumed to have\ + \ an external process managing its endpoints, which Kubernetes will not\ + \ modify. Only applies to types ClusterIP, NodePort, and LoadBalancer.\ + \ Ignored if type is ExternalName. More info: https://kubernetes.io/docs/concepts/services-networking/service/" + type: object + x-kubernetes-map-type: atomic + sessionAffinity: + description: "Supports \"ClientIP\" and \"None\". Used to maintain session\ + \ affinity. Enable client IP based session affinity. Must be ClientIP\ + \ or None. Defaults to None. More info: https://kubernetes.io/docs/concepts/services-networking/service/#virtual-ips-and-service-proxies" + type: string + sessionAffinityConfig: + $ref: "#/components/schemas/v1.SessionAffinityConfig" + trafficDistribution: + description: "TrafficDistribution offers a way to express preferences for\ + \ how traffic is distributed to Service endpoints. Implementations can\ + \ use this field as a hint, but are not required to guarantee strict adherence.\ + \ If the field is not set, the implementation will apply its default routing\ + \ strategy. If set to \"PreferClose\", implementations should prioritize\ + \ endpoints that are in the same zone." + type: string + type: + description: "type determines how the Service is exposed. Defaults to ClusterIP.\ + \ Valid options are ExternalName, ClusterIP, NodePort, and LoadBalancer.\ + \ \"ClusterIP\" allocates a cluster-internal IP address for load-balancing\ + \ to endpoints. Endpoints are determined by the selector or if that is\ + \ not specified, by manual construction of an Endpoints object or EndpointSlice\ + \ objects. If clusterIP is \"None\", no virtual IP is allocated and the\ + \ endpoints are published as a set of endpoints rather than a virtual\ + \ IP. \"NodePort\" builds on ClusterIP and allocates a port on every node\ + \ which routes to the same endpoints as the clusterIP. \"LoadBalancer\"\ + \ builds on NodePort and creates an external load-balancer (if supported\ + \ in the current cloud) which routes to the same endpoints as the clusterIP.\ + \ \"ExternalName\" aliases this service to the specified externalName.\ + \ Several other fields do not apply to ExternalName services. More info:\ + \ https://kubernetes.io/docs/concepts/services-networking/service/#publishing-services-service-types" + type: string + type: object + v1.ServiceStatus: + description: ServiceStatus represents the current status of a service. + example: + loadBalancer: + ingress: + - ipMode: ipMode + hostname: hostname + ip: ip + ports: + - protocol: protocol + port: 2 + error: error + - protocol: protocol + port: 2 + error: error + - ipMode: ipMode + hostname: hostname + ip: ip + ports: + - protocol: protocol + port: 2 + error: error + - protocol: protocol + port: 2 + error: error + conditions: + - reason: reason + lastTransitionTime: 2000-01-23T04:56:07.000+00:00 + message: message + type: type + observedGeneration: 5 + status: status + - reason: reason + lastTransitionTime: 2000-01-23T04:56:07.000+00:00 + message: message + type: type + observedGeneration: 5 + status: status + properties: + conditions: + description: Current service state + items: + $ref: "#/components/schemas/v1.Condition" + type: array + x-kubernetes-patch-strategy: merge + x-kubernetes-list-type: map + x-kubernetes-list-map-keys: + - type + x-kubernetes-patch-merge-key: type + loadBalancer: + $ref: "#/components/schemas/v1.LoadBalancerStatus" + type: object + v1.SessionAffinityConfig: + description: SessionAffinityConfig represents the configurations of session + affinity. + example: + clientIP: + timeoutSeconds: 5 + properties: + clientIP: + $ref: "#/components/schemas/v1.ClientIPConfig" + type: object + v1.SleepAction: + description: SleepAction describes a "sleep" action. + example: + seconds: 5 + properties: + seconds: + description: Seconds is the number of seconds to sleep. + format: int64 + type: integer + required: + - seconds + type: object + v1.StorageOSPersistentVolumeSource: + description: Represents a StorageOS persistent volume resource. + example: + volumeNamespace: volumeNamespace + volumeName: volumeName + secretRef: + uid: uid + apiVersion: apiVersion + kind: kind + resourceVersion: resourceVersion + fieldPath: fieldPath + name: name + namespace: namespace + readOnly: true + fsType: fsType + properties: + fsType: + description: "fsType is the filesystem type to mount. Must be a filesystem\ + \ type supported by the host operating system. Ex. \"ext4\", \"xfs\",\ + \ \"ntfs\". Implicitly inferred to be \"ext4\" if unspecified." + type: string + readOnly: + description: readOnly defaults to false (read/write). ReadOnly here will + force the ReadOnly setting in VolumeMounts. + type: boolean + secretRef: + $ref: "#/components/schemas/v1.ObjectReference" + volumeName: + description: volumeName is the human-readable name of the StorageOS volume. Volume + names are only unique within a namespace. + type: string + volumeNamespace: + description: volumeNamespace specifies the scope of the volume within StorageOS. If + no namespace is specified then the Pod's namespace will be used. This + allows the Kubernetes name scoping to be mirrored within StorageOS for + tighter integration. Set VolumeName to any name to override the default + behaviour. Set to "default" if you are not using namespaces within StorageOS. + Namespaces that do not pre-exist within StorageOS will be created. + type: string + type: object + v1.StorageOSVolumeSource: + description: Represents a StorageOS persistent volume resource. + example: + volumeNamespace: volumeNamespace + volumeName: volumeName + secretRef: + name: name + readOnly: true + fsType: fsType + properties: + fsType: + description: "fsType is the filesystem type to mount. Must be a filesystem\ + \ type supported by the host operating system. Ex. \"ext4\", \"xfs\",\ + \ \"ntfs\". Implicitly inferred to be \"ext4\" if unspecified." + type: string + readOnly: + description: readOnly defaults to false (read/write). ReadOnly here will + force the ReadOnly setting in VolumeMounts. + type: boolean + secretRef: + $ref: "#/components/schemas/v1.LocalObjectReference" + volumeName: + description: volumeName is the human-readable name of the StorageOS volume. Volume + names are only unique within a namespace. + type: string + volumeNamespace: + description: volumeNamespace specifies the scope of the volume within StorageOS. If + no namespace is specified then the Pod's namespace will be used. This + allows the Kubernetes name scoping to be mirrored within StorageOS for + tighter integration. Set VolumeName to any name to override the default + behaviour. Set to "default" if you are not using namespaces within StorageOS. + Namespaces that do not pre-exist within StorageOS will be created. + type: string + type: object + v1.Sysctl: + description: Sysctl defines a kernel parameter to be set + example: + name: name + value: value + properties: + name: + description: Name of a property to set + type: string + value: + description: Value of a property to set + type: string + required: + - name + - value + type: object + v1.TCPSocketAction: + description: TCPSocketAction describes an action based on opening a socket + example: + port: port + host: host + properties: + host: + description: "Optional: Host name to connect to, defaults to the pod IP." + type: string + port: + description: "IntOrString is a type that can hold an int32 or a string.\ + \ When used in JSON or YAML marshalling and unmarshalling, it produces\ + \ or consumes the inner type. This allows you to have, for example, a\ + \ JSON field that can accept a name or number." + format: int-or-string + type: string + required: + - port + type: object + v1.Taint: + description: The node this Taint is attached to has the "effect" on any pod + that does not tolerate the Taint. + example: + timeAdded: 2000-01-23T04:56:07.000+00:00 + effect: effect + value: value + key: key + properties: + effect: + description: "Required. The effect of the taint on pods that do not tolerate\ + \ the taint. Valid effects are NoSchedule, PreferNoSchedule and NoExecute." + type: string + key: + description: Required. The taint key to be applied to a node. + type: string + timeAdded: + description: TimeAdded represents the time at which the taint was added. + format: date-time + type: string + value: + description: The taint value corresponding to the taint key. + type: string + required: + - effect + - key + type: object + v1.Toleration: + description: "The pod this Toleration is attached to tolerates any taint that\ + \ matches the triple using the matching operator ." + example: + effect: effect + tolerationSeconds: 8 + value: value + key: key + operator: operator + properties: + effect: + description: "Effect indicates the taint effect to match. Empty means match\ + \ all taint effects. When specified, allowed values are NoSchedule, PreferNoSchedule\ + \ and NoExecute." + type: string + key: + description: "Key is the taint key that the toleration applies to. Empty\ + \ means match all taint keys. If the key is empty, operator must be Exists;\ + \ this combination means to match all values and all keys." + type: string + operator: + description: "Operator represents a key's relationship to the value. Valid\ + \ operators are Exists, Equal, Lt, and Gt. Defaults to Equal. Exists is\ + \ equivalent to wildcard for value, so that a pod can tolerate all taints\ + \ of a particular category. Lt and Gt perform numeric comparisons (requires\ + \ feature gate TaintTolerationComparisonOperators)." + type: string + tolerationSeconds: + description: "TolerationSeconds represents the period of time the toleration\ + \ (which must be of effect NoExecute, otherwise this field is ignored)\ + \ tolerates the taint. By default, it is not set, which means tolerate\ + \ the taint forever (do not evict). Zero and negative values will be treated\ + \ as 0 (evict immediately) by the system." + format: int64 + type: integer + value: + description: "Value is the taint value the toleration matches to. If the\ + \ operator is Exists, the value should be empty, otherwise just a regular\ + \ string." + type: string + type: object + v1.TopologySelectorLabelRequirement: + description: A topology selector requirement is a selector that matches given + label. This is an alpha feature and may change in the future. + example: + values: + - values + - values + key: key + properties: + key: + description: The label key that the selector applies to. + type: string + values: + description: An array of string values. One value must match the label to + be selected. Each entry in Values is ORed. + items: + type: string + type: array + x-kubernetes-list-type: atomic + required: + - key + - values + type: object + v1.TopologySelectorTerm: + description: A topology selector term represents the result of label queries. + A null or empty topology selector term matches no objects. The requirements + of them are ANDed. It provides a subset of functionality as NodeSelectorTerm. + This is an alpha feature and may change in the future. + example: + matchLabelExpressions: + - values: + - values + - values + key: key + - values: + - values + - values + key: key + properties: + matchLabelExpressions: + description: A list of topology selector requirements by labels. + items: + $ref: "#/components/schemas/v1.TopologySelectorLabelRequirement" + type: array + x-kubernetes-list-type: atomic + type: object + x-kubernetes-map-type: atomic + v1.TopologySpreadConstraint: + description: TopologySpreadConstraint specifies how to spread matching pods + among the given topology. + example: + nodeTaintsPolicy: nodeTaintsPolicy + whenUnsatisfiable: whenUnsatisfiable + maxSkew: 9 + nodeAffinityPolicy: nodeAffinityPolicy + labelSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + minDomains: 6 + topologyKey: topologyKey + matchLabelKeys: + - matchLabelKeys + - matchLabelKeys + properties: + labelSelector: + $ref: "#/components/schemas/v1.LabelSelector" + matchLabelKeys: + description: |- + MatchLabelKeys is a set of pod label keys to select the pods over which spreading will be calculated. The keys are used to lookup values from the incoming pod labels, those key-value labels are ANDed with labelSelector to select the group of existing pods over which spreading will be calculated for the incoming pod. The same key is forbidden to exist in both MatchLabelKeys and LabelSelector. MatchLabelKeys cannot be set when LabelSelector isn't set. Keys that don't exist in the incoming pod labels will be ignored. A null or empty list means only match against labelSelector. + + This is a beta field and requires the MatchLabelKeysInPodTopologySpread feature gate to be enabled (enabled by default). + items: + type: string + type: array + x-kubernetes-list-type: atomic + maxSkew: + description: "MaxSkew describes the degree to which pods may be unevenly\ + \ distributed. When `whenUnsatisfiable=DoNotSchedule`, it is the maximum\ + \ permitted difference between the number of matching pods in the target\ + \ topology and the global minimum. The global minimum is the minimum number\ + \ of matching pods in an eligible domain or zero if the number of eligible\ + \ domains is less than MinDomains. For example, in a 3-zone cluster, MaxSkew\ + \ is set to 1, and pods with the same labelSelector spread as 2/2/1: In\ + \ this case, the global minimum is 1. | zone1 | zone2 | zone3 | | P P\ + \ | P P | P | - if MaxSkew is 1, incoming pod can only be scheduled\ + \ to zone3 to become 2/2/2; scheduling it onto zone1(zone2) would make\ + \ the ActualSkew(3-1) on zone1(zone2) violate MaxSkew(1). - if MaxSkew\ + \ is 2, incoming pod can be scheduled onto any zone. When `whenUnsatisfiable=ScheduleAnyway`,\ + \ it is used to give higher precedence to topologies that satisfy it.\ + \ It's a required field. Default value is 1 and 0 is not allowed." + format: int32 + type: integer + minDomains: + description: |- + MinDomains indicates a minimum number of eligible domains. When the number of eligible domains with matching topology keys is less than minDomains, Pod Topology Spread treats "global minimum" as 0, and then the calculation of Skew is performed. And when the number of eligible domains with matching topology keys equals or greater than minDomains, this value has no effect on scheduling. As a result, when the number of eligible domains is less than minDomains, scheduler won't schedule more than maxSkew Pods to those domains. If value is nil, the constraint behaves as if MinDomains is equal to 1. Valid values are integers greater than 0. When value is not nil, WhenUnsatisfiable must be DoNotSchedule. + + For example, in a 3-zone cluster, MaxSkew is set to 2, MinDomains is set to 5 and pods with the same labelSelector spread as 2/2/2: | zone1 | zone2 | zone3 | | P P | P P | P P | The number of domains is less than 5(MinDomains), so "global minimum" is treated as 0. In this situation, new pod with the same labelSelector cannot be scheduled, because computed skew will be 3(3 - 0) if new Pod is scheduled to any of the three zones, it will violate MaxSkew. + format: int32 + type: integer + nodeAffinityPolicy: + description: |- + NodeAffinityPolicy indicates how we will treat Pod's nodeAffinity/nodeSelector when calculating pod topology spread skew. Options are: - Honor: only nodes matching nodeAffinity/nodeSelector are included in the calculations. - Ignore: nodeAffinity/nodeSelector are ignored. All nodes are included in the calculations. + + If this value is nil, the behavior is equivalent to the Honor policy. + type: string + nodeTaintsPolicy: + description: |- + NodeTaintsPolicy indicates how we will treat node taints when calculating pod topology spread skew. Options are: - Honor: nodes without taints, along with tainted nodes for which the incoming pod has a toleration, are included. - Ignore: node taints are ignored. All nodes are included. + + If this value is nil, the behavior is equivalent to the Ignore policy. + type: string + topologyKey: + description: "TopologyKey is the key of node labels. Nodes that have a label\ + \ with this key and identical values are considered to be in the same\ + \ topology. We consider each as a \"bucket\", and try to\ + \ put balanced number of pods into each bucket. We define a domain as\ + \ a particular instance of a topology. Also, we define an eligible domain\ + \ as a domain whose nodes meet the requirements of nodeAffinityPolicy\ + \ and nodeTaintsPolicy. e.g. If TopologyKey is \"kubernetes.io/hostname\"\ + , each Node is a domain of that topology. And, if TopologyKey is \"topology.kubernetes.io/zone\"\ + , each zone is a domain of that topology. It's a required field." + type: string + whenUnsatisfiable: + description: |- + WhenUnsatisfiable indicates how to deal with a pod if it doesn't satisfy the spread constraint. - DoNotSchedule (default) tells the scheduler not to schedule it. - ScheduleAnyway tells the scheduler to schedule the pod in any location, + but giving higher precedence to topologies that would help reduce the + skew. + A constraint is considered "Unsatisfiable" for an incoming pod if and only if every possible node assignment for that pod would violate "MaxSkew" on some topology. For example, in a 3-zone cluster, MaxSkew is set to 1, and pods with the same labelSelector spread as 3/1/1: | zone1 | zone2 | zone3 | | P P P | P | P | If WhenUnsatisfiable is set to DoNotSchedule, incoming pod can only be scheduled to zone2(zone3) to become 3/2/1(3/1/2) as ActualSkew(2-1) on zone2(zone3) satisfies MaxSkew(1). In other words, the cluster can still be imbalanced, but scheduler won't make it *more* imbalanced. It's a required field. + type: string + required: + - maxSkew + - topologyKey + - whenUnsatisfiable + type: object + v1.TypedLocalObjectReference: + description: TypedLocalObjectReference contains enough information to let you + locate the typed referenced object inside the same namespace. + example: + apiGroup: apiGroup + kind: kind + name: name + properties: + apiGroup: + description: "APIGroup is the group for the resource being referenced. If\ + \ APIGroup is not specified, the specified Kind must be in the core API\ + \ group. For any other third-party types, APIGroup is required." + type: string + kind: + description: Kind is the type of resource being referenced + type: string + name: + description: Name is the name of resource being referenced + type: string + required: + - kind + - name + type: object + x-kubernetes-map-type: atomic + v1.TypedObjectReference: + description: TypedObjectReference contains enough information to let you locate + the typed referenced object + example: + apiGroup: apiGroup + kind: kind + name: name + namespace: namespace + properties: + apiGroup: + description: "APIGroup is the group for the resource being referenced. If\ + \ APIGroup is not specified, the specified Kind must be in the core API\ + \ group. For any other third-party types, APIGroup is required." + type: string + kind: + description: Kind is the type of resource being referenced + type: string + name: + description: Name is the name of resource being referenced + type: string + namespace: + description: "Namespace is the namespace of resource being referenced Note\ + \ that when a namespace is specified, a gateway.networking.k8s.io/ReferenceGrant\ + \ object is required in the referent namespace to allow that namespace's\ + \ owner to accept the reference. See the ReferenceGrant documentation\ + \ for details. (Alpha) This field requires the CrossNamespaceVolumeDataSource\ + \ feature gate to be enabled." + type: string + required: + - kind + - name + type: object + v1.Volume: + description: Volume represents a named volume in a pod that may be accessed + by any container in the pod. + example: + quobyte: + volume: volume + registry: registry + readOnly: true + user: user + tenant: tenant + group: group + azureFile: + secretName: secretName + readOnly: true + shareName: shareName + flexVolume: + driver: driver + options: + key: options + secretRef: + name: name + readOnly: true + fsType: fsType + ephemeral: + volumeClaimTemplate: + metadata: + generation: 6 + finalizers: + - finalizers + - finalizers + resourceVersion: resourceVersion + annotations: + key: annotations + generateName: generateName + deletionTimestamp: 2000-01-23T04:56:07.000+00:00 + labels: + key: labels + ownerReferences: + - uid: uid + controller: true + apiVersion: apiVersion + kind: kind name: name - containerPort: 7 - hostPort: 1 - volumeMounts: - - mountPath: mountPath - mountPropagation: mountPropagation + blockOwnerDeletion: true + - uid: uid + controller: true + apiVersion: apiVersion + kind: kind name: name - readOnly: true - subPath: subPath - recursiveReadOnly: recursiveReadOnly - subPathExpr: subPathExpr - - mountPath: mountPath - mountPropagation: mountPropagation + blockOwnerDeletion: true + selfLink: selfLink + deletionGracePeriodSeconds: 0 + uid: uid + managedFields: + - apiVersion: apiVersion + fieldsV1: "{}" + manager: manager + subresource: subresource + time: 2000-01-23T04:56:07.000+00:00 + operation: operation + fieldsType: fieldsType + - apiVersion: apiVersion + fieldsV1: "{}" + manager: manager + subresource: subresource + time: 2000-01-23T04:56:07.000+00:00 + operation: operation + fieldsType: fieldsType + creationTimestamp: 2000-01-23T04:56:07.000+00:00 + name: name + namespace: namespace + spec: + storageClassName: storageClassName + dataSourceRef: + apiGroup: apiGroup + kind: kind name: name - readOnly: true - subPath: subPath - recursiveReadOnly: recursiveReadOnly - subPathExpr: subPathExpr - lifecycle: - postStart: - sleep: - seconds: 5 - tcpSocket: - port: port - host: host - exec: - command: - - command - - command - httpGet: - path: path - scheme: scheme - port: port - host: host - httpHeaders: - - name: name - value: value - - name: name - value: value - preStop: - sleep: - seconds: 5 - tcpSocket: - port: port - host: host - exec: - command: - - command - - command - httpGet: - path: path - scheme: scheme - port: port - host: host - httpHeaders: - - name: name - value: value - - name: name - value: value - stopSignal: stopSignal - readinessProbe: - terminationGracePeriodSeconds: 2 - failureThreshold: 5 - periodSeconds: 9 - tcpSocket: - port: port - host: host - timeoutSeconds: 4 - successThreshold: 3 - initialDelaySeconds: 7 - exec: - command: - - command - - command - grpc: - port: 2 - service: service - httpGet: - path: path - scheme: scheme - port: port - host: host - httpHeaders: - - name: name - value: value - - name: name - value: value - resizePolicy: - - resourceName: resourceName - restartPolicy: restartPolicy - - resourceName: resourceName - restartPolicy: restartPolicy - envFrom: - - configMapRef: - name: name - optional: true - prefix: prefix - secretRef: - name: name - optional: true - - configMapRef: - name: name - optional: true - prefix: prefix - secretRef: - name: name - optional: true - image: image - imagePullPolicy: imagePullPolicy - livenessProbe: - terminationGracePeriodSeconds: 2 - failureThreshold: 5 - periodSeconds: 9 - tcpSocket: - port: port - host: host - timeoutSeconds: 4 - successThreshold: 3 - initialDelaySeconds: 7 - exec: - command: - - command - - command - grpc: - port: 2 - service: service - httpGet: - path: path - scheme: scheme - port: port - host: host - httpHeaders: - - name: name - value: value - - name: name - value: value - terminationMessagePath: terminationMessagePath - workingDir: workingDir + namespace: namespace + volumeName: volumeName + volumeAttributesClassName: volumeAttributesClassName resources: - claims: - - request: request - name: name - - request: request - name: name requests: key: null limits: key: null - env: - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath - fileKeyRef: - path: path - volumeName: volumeName - optional: true - key: key - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath - fileKeyRef: - path: path - volumeName: volumeName - optional: true - key: key - restartPolicy: restartPolicy - command: - - command - - command - args: - - args - - args + selector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + accessModes: + - accessModes + - accessModes + dataSource: + apiGroup: apiGroup + kind: kind + name: name + volumeMode: volumeMode + secret: + secretName: secretName + defaultMode: 7 + defaultUser: 5 + optional: true + items: + - mode: 2 + path: path + user: 6 + key: key + - mode: 2 + path: path + user: 6 + key: key + projected: + sources: + - downwardAPI: + items: + - mode: 6 + path: path + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + user: 3 + - mode: 6 + path: path + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + user: 3 + configMap: name: name - tty: true - stdinOnce: true - affinity: - nodeAffinity: - requiredDuringSchedulingIgnoredDuringExecution: - nodeSelectorTerms: - - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchFields: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchFields: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - preferredDuringSchedulingIgnoredDuringExecution: - - preference: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchFields: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - weight: 6 - - preference: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchFields: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - weight: 6 - podAffinity: - requiredDuringSchedulingIgnoredDuringExecution: - - labelSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - namespaceSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - topologyKey: topologyKey - matchLabelKeys: - - matchLabelKeys - - matchLabelKeys - mismatchLabelKeys: - - mismatchLabelKeys - - mismatchLabelKeys - namespaces: - - namespaces - - namespaces - - labelSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - namespaceSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - topologyKey: topologyKey - matchLabelKeys: - - matchLabelKeys - - matchLabelKeys - mismatchLabelKeys: - - mismatchLabelKeys - - mismatchLabelKeys - namespaces: - - namespaces - - namespaces - preferredDuringSchedulingIgnoredDuringExecution: - - podAffinityTerm: - labelSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - namespaceSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - topologyKey: topologyKey - matchLabelKeys: - - matchLabelKeys - - matchLabelKeys - mismatchLabelKeys: - - mismatchLabelKeys - - mismatchLabelKeys - namespaces: - - namespaces - - namespaces - weight: 1 - - podAffinityTerm: - labelSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - namespaceSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - topologyKey: topologyKey - matchLabelKeys: - - matchLabelKeys - - matchLabelKeys - mismatchLabelKeys: - - mismatchLabelKeys - - mismatchLabelKeys - namespaces: - - namespaces - - namespaces - weight: 1 - podAntiAffinity: - requiredDuringSchedulingIgnoredDuringExecution: - - labelSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - namespaceSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - topologyKey: topologyKey - matchLabelKeys: - - matchLabelKeys - - matchLabelKeys - mismatchLabelKeys: - - mismatchLabelKeys - - mismatchLabelKeys - namespaces: - - namespaces - - namespaces - - labelSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - namespaceSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - topologyKey: topologyKey - matchLabelKeys: - - matchLabelKeys - - matchLabelKeys - mismatchLabelKeys: - - mismatchLabelKeys - - mismatchLabelKeys - namespaces: - - namespaces - - namespaces - preferredDuringSchedulingIgnoredDuringExecution: - - podAffinityTerm: - labelSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - namespaceSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - topologyKey: topologyKey - matchLabelKeys: - - matchLabelKeys - - matchLabelKeys - mismatchLabelKeys: - - mismatchLabelKeys - - mismatchLabelKeys - namespaces: - - namespaces - - namespaces - weight: 1 - - podAffinityTerm: - labelSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - namespaceSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - topologyKey: topologyKey - matchLabelKeys: - - matchLabelKeys - - matchLabelKeys - mismatchLabelKeys: - - mismatchLabelKeys - - mismatchLabelKeys - namespaces: - - namespaces - - namespaces - weight: 1 - hostPID: true - replicas: 6 - selector: - key: selector - minReadySeconds: 0 + optional: true + items: + - mode: 2 + path: path + user: 6 + key: key + - mode: 2 + path: path + user: 6 + key: key + podCertificate: + certificateChainPath: certificateChainPath + userAnnotations: + key: userAnnotations + keyPath: keyPath + maxExpirationSeconds: 8 + keyType: keyType + user: 7 + credentialBundlePath: credentialBundlePath + signerName: signerName + secret: + name: name + optional: true + items: + - mode: 2 + path: path + user: 6 + key: key + - mode: 2 + path: path + user: 6 + key: key + serviceAccountToken: + path: path + audience: audience + expirationSeconds: 3 + user: 3 + clusterTrustBundle: + path: path + labelSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + name: name + optional: true + user: 4 + signerName: signerName + - downwardAPI: + items: + - mode: 6 + path: path + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + user: 3 + - mode: 6 + path: path + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + user: 3 + configMap: + name: name + optional: true + items: + - mode: 2 + path: path + user: 6 + key: key + - mode: 2 + path: path + user: 6 + key: key + podCertificate: + certificateChainPath: certificateChainPath + userAnnotations: + key: userAnnotations + keyPath: keyPath + maxExpirationSeconds: 8 + keyType: keyType + user: 7 + credentialBundlePath: credentialBundlePath + signerName: signerName + secret: + name: name + optional: true + items: + - mode: 2 + path: path + user: 6 + key: key + - mode: 2 + path: path + user: 6 + key: key + serviceAccountToken: + path: path + audience: audience + expirationSeconds: 3 + user: 3 + clusterTrustBundle: + path: path + labelSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + name: name + optional: true + user: 4 + signerName: signerName + defaultMode: 6 + defaultUser: 0 + cephfs: + path: path + secretRef: + name: name + secretFile: secretFile + readOnly: true + user: user + monitors: + - monitors + - monitors + scaleIO: + system: system + protectionDomain: protectionDomain + sslEnabled: true + storageMode: storageMode + volumeName: volumeName + secretRef: + name: name + readOnly: true + fsType: fsType + storagePool: storagePool + gateway: gateway + emptyDir: + mode: 3 + sizeLimit: sizeLimit + medium: medium + glusterfs: + path: path + endpoints: endpoints + readOnly: true + gcePersistentDisk: + partition: 0 + readOnly: true + pdName: pdName + fsType: fsType + image: + reference: reference + pullPolicy: pullPolicy + photonPersistentDisk: + pdID: pdID + fsType: fsType + azureDisk: + diskName: diskName + kind: kind + readOnly: true + cachingMode: cachingMode + diskURI: diskURI + fsType: fsType + cinder: + secretRef: + name: name + volumeID: volumeID + readOnly: true + fsType: fsType + downwardAPI: + defaultMode: 6 + defaultUser: 5 + items: + - mode: 6 + path: path + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + user: 3 + - mode: 6 + path: path + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + user: 3 + awsElasticBlockStore: + partition: 3 + volumeID: volumeID + readOnly: true + fsType: fsType + flocker: + datasetName: datasetName + datasetUUID: datasetUUID + iscsi: + chapAuthSession: true + iscsiInterface: iscsiInterface + lun: 7 + chapAuthDiscovery: true + iqn: iqn + portals: + - portals + - portals + secretRef: + name: name + initiatorName: initiatorName + readOnly: true + fsType: fsType + targetPortal: targetPortal + rbd: + image: image + pool: pool + secretRef: + name: name + readOnly: true + fsType: fsType + keyring: keyring + user: user + monitors: + - monitors + - monitors + configMap: + defaultMode: 6 + name: name + defaultUser: 1 + optional: true + items: + - mode: 2 + path: path + user: 6 + key: key + - mode: 2 + path: path + user: 6 + key: key + storageos: + volumeNamespace: volumeNamespace + volumeName: volumeName + secretRef: + name: name + readOnly: true + fsType: fsType + csi: + driver: driver + nodePublishSecretRef: + name: name + readOnly: true + fsType: fsType + volumeAttributes: + key: volumeAttributes + name: name + nfs: + path: path + server: server + readOnly: true + persistentVolumeClaim: + claimName: claimName + readOnly: true + gitRepo: + repository: repository + directory: directory + revision: revision + portworxVolume: + volumeID: volumeID + readOnly: true + fsType: fsType + vsphereVolume: + storagePolicyName: storagePolicyName + storagePolicyID: storagePolicyID + volumePath: volumePath + fsType: fsType + fc: + lun: 7 + targetWWNs: + - targetWWNs + - targetWWNs + readOnly: true + wwids: + - wwids + - wwids + fsType: fsType + hostPath: + path: path + type: type properties: - minReadySeconds: - description: "Minimum number of seconds for which a newly created pod should\ - \ be ready without any of its container crashing, for it to be considered\ - \ available. Defaults to 0 (pod will be considered available as soon as\ - \ it is ready)" - format: int32 - type: integer - replicas: - description: "Replicas is the number of desired replicas. This is a pointer\ - \ to distinguish between explicit zero and unspecified. Defaults to 1.\ - \ More info: https://kubernetes.io/docs/concepts/workloads/controllers/replicationcontroller#what-is-a-replicationcontroller" - format: int32 - type: integer - selector: - additionalProperties: - type: string - description: "Selector is a label query over pods that should match the\ - \ Replicas count. If Selector is empty, it is defaulted to the labels\ - \ present on the Pod template. Label keys and values that must match in\ - \ order to be controlled by this replication controller, if empty defaulted\ - \ to labels on Pod template. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#label-selectors" - type: object - x-kubernetes-map-type: atomic - template: - $ref: "#/components/schemas/v1.PodTemplateSpec" + awsElasticBlockStore: + $ref: "#/components/schemas/v1.AWSElasticBlockStoreVolumeSource" + azureDisk: + $ref: "#/components/schemas/v1.AzureDiskVolumeSource" + azureFile: + $ref: "#/components/schemas/v1.AzureFileVolumeSource" + cephfs: + $ref: "#/components/schemas/v1.CephFSVolumeSource" + cinder: + $ref: "#/components/schemas/v1.CinderVolumeSource" + configMap: + $ref: "#/components/schemas/v1.ConfigMapVolumeSource" + csi: + $ref: "#/components/schemas/v1.CSIVolumeSource" + downwardAPI: + $ref: "#/components/schemas/v1.DownwardAPIVolumeSource" + emptyDir: + $ref: "#/components/schemas/v1.EmptyDirVolumeSource" + ephemeral: + $ref: "#/components/schemas/v1.EphemeralVolumeSource" + fc: + $ref: "#/components/schemas/v1.FCVolumeSource" + flexVolume: + $ref: "#/components/schemas/v1.FlexVolumeSource" + flocker: + $ref: "#/components/schemas/v1.FlockerVolumeSource" + gcePersistentDisk: + $ref: "#/components/schemas/v1.GCEPersistentDiskVolumeSource" + gitRepo: + $ref: "#/components/schemas/v1.GitRepoVolumeSource" + glusterfs: + $ref: "#/components/schemas/v1.GlusterfsVolumeSource" + hostPath: + $ref: "#/components/schemas/v1.HostPathVolumeSource" + image: + $ref: "#/components/schemas/v1.ImageVolumeSource" + iscsi: + $ref: "#/components/schemas/v1.ISCSIVolumeSource" + name: + description: "name of the volume. Must be a DNS_LABEL and unique within\ + \ the pod. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names" + type: string + nfs: + $ref: "#/components/schemas/v1.NFSVolumeSource" + persistentVolumeClaim: + $ref: "#/components/schemas/v1.PersistentVolumeClaimVolumeSource" + photonPersistentDisk: + $ref: "#/components/schemas/v1.PhotonPersistentDiskVolumeSource" + portworxVolume: + $ref: "#/components/schemas/v1.PortworxVolumeSource" + projected: + $ref: "#/components/schemas/v1.ProjectedVolumeSource" + quobyte: + $ref: "#/components/schemas/v1.QuobyteVolumeSource" + rbd: + $ref: "#/components/schemas/v1.RBDVolumeSource" + scaleIO: + $ref: "#/components/schemas/v1.ScaleIOVolumeSource" + secret: + $ref: "#/components/schemas/v1.SecretVolumeSource" + storageos: + $ref: "#/components/schemas/v1.StorageOSVolumeSource" + vsphereVolume: + $ref: "#/components/schemas/v1.VsphereVirtualDiskVolumeSource" + required: + - name type: object - v1.ReplicationControllerStatus: - description: ReplicationControllerStatus represents the current status of a - replication controller. + v1.VolumeDevice: + description: volumeDevice describes a mapping of a raw block device within a + container. example: - fullyLabeledReplicas: 5 - replicas: 7 - readyReplicas: 2 - conditions: + devicePath: devicePath + name: name + properties: + devicePath: + description: devicePath is the path inside of the container that the device + will be mapped to. + type: string + name: + description: name must match the name of a persistentVolumeClaim in the + pod + type: string + required: + - devicePath + - name + type: object + v1.VolumeHealthCondition: + description: VolumeHealthCondition represents an adverse health condition reported + for a volume. + example: + reason: reason + message: message + status: status + properties: + message: + description: message is a human-readable description. Maximum permitted + length of a message is 1024 bytes. + type: string + reason: + description: reason is a brief CamelCase machine-parseable reason. Together + with status it forms the unique identity of a condition entry. Maximum + permitted length of a reason is 256 bytes. + type: string + status: + description: "status is the machine-parseable health category. Possible\ + \ values: - \"Inaccessible\": the volume cannot be accessed. - \"DataLoss\"\ + : data loss has been detected on the volume. - \"Degraded\": the volume\ + \ is functioning with reduced capability." + type: string + required: + - reason + - status + type: object + v1.VolumeHealthStatus: + description: VolumeHealthStatus contains health information for a volume reported + by the CSI controller plugin. + example: + healthConditions: - reason: reason - lastTransitionTime: 2000-01-23T04:56:07.000+00:00 message: message - type: type status: status - reason: reason - lastTransitionTime: 2000-01-23T04:56:07.000+00:00 message: message - type: type status: status - availableReplicas: 1 - observedGeneration: 5 + lastTransitionTime: 2000-01-23T04:56:07.000+00:00 properties: - availableReplicas: - description: The number of available replicas (ready for at least minReadySeconds) - for this replication controller. - format: int32 - type: integer - conditions: - description: Represents the latest available observations of a replication - controller's current state. + healthConditions: + description: conditions is the set of adverse conditions reported by the + CSI controller plugin. An empty list means no adverse condition. At most + 16 conditions may be reported. items: - $ref: "#/components/schemas/v1.ReplicationControllerCondition" + $ref: "#/components/schemas/v1.VolumeHealthCondition" type: array x-kubernetes-patch-strategy: merge x-kubernetes-list-type: map x-kubernetes-list-map-keys: - - type - x-kubernetes-patch-merge-key: type - fullyLabeledReplicas: - description: The number of pods that have labels matching the labels of - the pod template of the replication controller. - format: int32 - type: integer - observedGeneration: - description: ObservedGeneration reflects the generation of the most recently - observed replication controller. - format: int64 - type: integer - readyReplicas: - description: The number of ready replicas for this replication controller. - format: int32 - type: integer - replicas: - description: "Replicas is the most recently observed number of replicas.\ - \ More info: https://kubernetes.io/docs/concepts/workloads/controllers/replicationcontroller#what-is-a-replicationcontroller" - format: int32 - type: integer - required: - - replicas + - status + - reason + x-kubernetes-patch-merge-key: status + lastTransitionTime: + description: lastTransitionTime is when the current set of conditions first + appeared. + format: date-time + type: string type: object - core.v1.ResourceClaim: - description: ResourceClaim references one entry in PodSpec.ResourceClaims. + v1.VolumeMount: + description: VolumeMount describes a mounting of a Volume within a container. example: - request: request + mountPath: mountPath + mountPropagation: mountPropagation name: name + bindMountOptions: + - bindMountOptions + - bindMountOptions + readOnly: true + subPath: subPath + recursiveReadOnly: recursiveReadOnly + subPathExpr: subPathExpr properties: - name: - description: Name must match the name of one entry in pod.spec.resourceClaims - of the Pod where this field is used. It makes that resource available - inside a container. + bindMountOptions: + description: "bindMountOptions is the list of additional bind mount options\ + \ to apply when mounting this volume into the container. Allowed values\ + \ are noexec, nodev, and nosuid. These are Linux mount options and have\ + \ no effect on Windows nodes. This field is not supported with image volumes.\ + \ This is an alpha field and requires enabling the VolumeBindMountOptions\ + \ feature gate." + items: + type: string + type: array + x-kubernetes-list-type: set + mountPath: + description: Path within the container at which the volume should be mounted. type: string - request: - description: "Request is the name chosen for a request in the referenced\ - \ claim. If empty, everything from the claim is made available, otherwise\ - \ only the result of this request." + mountPropagation: + description: "mountPropagation determines how mounts are propagated from\ + \ the host to container and the other way around. When not set, MountPropagationNone\ + \ is used. This field is beta in 1.10. When RecursiveReadOnly is set to\ + \ IfPossible or to Enabled, MountPropagation must be None or unspecified\ + \ (which defaults to None)." type: string - required: - - name - type: object - v1.ResourceFieldSelector: - description: "ResourceFieldSelector represents container resources (cpu, memory)\ - \ and their output format" - example: - divisor: divisor - resource: resource - containerName: containerName - properties: - containerName: - description: "Container name: required for volumes, optional for env vars" + name: + description: This must match the Name of a Volume. type: string - divisor: - description: "Quantity is a fixed-point representation of a number. It provides\ - \ convenient marshaling/unmarshaling in JSON and YAML, in addition to\ - \ String() and AsInt64() accessors.\n\nThe serialization format is:\n\n\ - ``` ::= \n\n\t(Note that \ - \ may be empty, from the \"\" case in .)\n\n \ - \ ::= 0 | 1 | ... | 9 ::= | \ - \ ::= | . | . | .\ - \ ::= \"+\" | \"-\" ::= |\ - \ ::= | \ - \ | ::= Ki | Mi | Gi | Ti | Pi | Ei\n\n\t\ - (International System of units; See: http://physics.nist.gov/cuu/Units/binary.html)\n\ - \n ::= m | \"\" | k | M | G | T | P | E\n\n\t(Note that\ - \ 1024 = 1Ki but 1000 = 1k; I didn't choose the capitalization.)\n\n\ - \ ::= \"e\" | \"E\" ```\n\nNo matter which\ - \ of the three exponent forms is used, no quantity may represent a number\ - \ greater than 2^63-1 in magnitude, nor may it have more than 3 decimal\ - \ places. Numbers larger or more precise will be capped or rounded up.\ - \ (E.g.: 0.1m will rounded up to 1m.) This may be extended in the future\ - \ if we require larger or smaller quantities.\n\nWhen a Quantity is parsed\ - \ from a string, it will remember the type of suffix it had, and will\ - \ use the same type again when it is serialized.\n\nBefore serializing,\ - \ Quantity will be put in \"canonical form\". This means that Exponent/suffix\ - \ will be adjusted up or down (with a corresponding increase or decrease\ - \ in Mantissa) such that:\n\n- No precision is lost - No fractional digits\ - \ will be emitted - The exponent (or suffix) is as large as possible.\n\ - \nThe sign will be omitted unless the number is negative.\n\nExamples:\n\ - \n- 1.5 will be serialized as \"1500m\" - 1.5Gi will be serialized as\ - \ \"1536Mi\"\n\nNote that the quantity will NEVER be internally represented\ - \ by a floating point number. That is the whole point of this exercise.\n\ - \nNon-canonical values will still parse as long as they are well formed,\ - \ but will be re-emitted in their canonical form. (So always use canonical\ - \ form, or don't diff.)\n\nThis format is intended to make it difficult\ - \ to use these numbers without writing some sort of special handling code\ - \ in the hopes that that will cause implementors to also use a fixed point\ - \ implementation." - format: quantity + readOnly: + description: "Mounted read-only if true, read-write otherwise (false or\ + \ unspecified). Defaults to false." + type: boolean + recursiveReadOnly: + description: |- + RecursiveReadOnly specifies whether read-only mounts should be handled recursively. + + If ReadOnly is false, this field has no meaning and must be unspecified. + + If ReadOnly is true, and this field is set to Disabled, the mount is not made recursively read-only. If this field is set to IfPossible, the mount is made recursively read-only, if it is supported by the container runtime. If this field is set to Enabled, the mount is made recursively read-only if it is supported by the container runtime, otherwise the pod will not be started and an error will be generated to indicate the reason. + + If this field is set to IfPossible or Enabled, MountPropagation must be set to None (or be unspecified, which defaults to None). + + If this field is not specified, it is treated as an equivalent of Disabled. type: string - resource: - description: "Required: resource to select" + subPath: + description: Path within the volume from which the container's volume should + be mounted. Defaults to "" (volume's root). + type: string + subPathExpr: + description: Expanded path within the volume from which the container's + volume should be mounted. Behaves similarly to SubPath but environment + variable references $(VAR_NAME) are expanded using the container's environment. + Defaults to "" (volume's root). SubPathExpr and SubPath are mutually exclusive. type: string required: - - resource + - mountPath + - name type: object - x-kubernetes-map-type: atomic - v1.ResourceHealth: - description: ResourceHealth represents the health of a resource. It has the - latest device health information. This is a part of KEP https://kep.k8s.io/4680. + v1.VolumeMountStatus: + description: VolumeMountStatus shows status of volume mounts. example: - resourceID: resourceID - health: health - message: message + mountPath: mountPath + name: name + readOnly: true + volumeStatus: + image: + imageRef: imageRef + recursiveReadOnly: recursiveReadOnly properties: - health: - description: |- - Health of the resource. can be one of: - - Healthy: operates as normal - - Unhealthy: reported unhealthy. We consider this a temporary health issue - since we do not have a mechanism today to distinguish - temporary and permanent issues. - - Unknown: The status cannot be determined. - For example, Device Plugin got unregistered and hasn't been re-registered since. - - In future we may want to introduce the PermanentlyUnhealthy Status. + mountPath: + description: MountPath corresponds to the original VolumeMount. type: string - message: - description: "Message provides human-readable context for Health (e.g. \"\ - ECC error count exceeded threshold\"). This field is populated by the\ - \ kubelet when ResourceHealthStatusMessage is enabled if the DRA plugin\ - \ returns a message, and is null otherwise." + name: + description: Name corresponds to the name of the original VolumeMount. type: string - resourceID: - description: ResourceID is the unique identifier of the resource. See the - ResourceID type for more information. + readOnly: + description: ReadOnly corresponds to the original VolumeMount. + type: boolean + recursiveReadOnly: + description: "RecursiveReadOnly must be set to Disabled, Enabled, or unspecified\ + \ (for non-readonly mounts). An IfPossible value in the original VolumeMount\ + \ must be translated to Disabled or Enabled, depending on the mount result." type: string + volumeStatus: + $ref: "#/components/schemas/v1.VolumeStatus" required: - - resourceID + - mountPath + - name type: object - v1.ResourceQuota: - description: ResourceQuota sets aggregate quota restrictions enforced per namespace + v1.VolumeNodeAffinity: + description: VolumeNodeAffinity defines constraints that limit what nodes this + volume can be accessed from. example: - metadata: - generation: 6 - finalizers: - - finalizers - - finalizers - resourceVersion: resourceVersion - annotations: - key: annotations - generateName: generateName - deletionTimestamp: 2000-01-23T04:56:07.000+00:00 - labels: - key: labels - ownerReferences: - - uid: uid - controller: true - apiVersion: apiVersion - kind: kind - name: name - blockOwnerDeletion: true - - uid: uid - controller: true - apiVersion: apiVersion - kind: kind - name: name - blockOwnerDeletion: true - selfLink: selfLink - deletionGracePeriodSeconds: 0 - uid: uid - managedFields: - - apiVersion: apiVersion - fieldsV1: "{}" - manager: manager - subresource: subresource - time: 2000-01-23T04:56:07.000+00:00 - operation: operation - fieldsType: fieldsType - - apiVersion: apiVersion - fieldsV1: "{}" - manager: manager - subresource: subresource - time: 2000-01-23T04:56:07.000+00:00 - operation: operation - fieldsType: fieldsType - creationTimestamp: 2000-01-23T04:56:07.000+00:00 - name: name - namespace: namespace - apiVersion: apiVersion - kind: kind - spec: - scopeSelector: - matchExpressions: - - scopeName: scopeName - values: + required: + nodeSelectorTerms: + - matchExpressions: + - values: - values - values + key: key operator: operator - - scopeName: scopeName - values: + - values: - values - values + key: key + operator: operator + matchFields: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + - matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchFields: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key operator: operator - hard: - key: null - scopes: - - scopes - - scopes - status: - hard: - key: null - used: - key: null properties: - apiVersion: - description: "APIVersion defines the versioned schema of this representation\ - \ of an object. Servers should convert recognized schemas to the latest\ - \ internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources" - type: string - kind: - description: "Kind is a string value representing the REST resource this\ - \ object represents. Servers may infer this from the endpoint the client\ - \ submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds" - type: string - metadata: - $ref: "#/components/schemas/v1.ObjectMeta" - spec: - $ref: "#/components/schemas/v1.ResourceQuotaSpec" - status: - $ref: "#/components/schemas/v1.ResourceQuotaStatus" + required: + $ref: "#/components/schemas/v1.NodeSelector" type: object - x-kubernetes-group-version-kind: - - group: "" - kind: ResourceQuota - version: v1 - x-implements: - - io.kubernetes.client.common.KubernetesObject - v1.ResourceQuotaList: - description: ResourceQuotaList is a list of ResourceQuota items. + v1.VolumeProjection: + description: Projection that may be projected along with other supported volume + types. Exactly one of these fields must be set. example: - metadata: - remainingItemCount: 1 - continue: continue - resourceVersion: resourceVersion - shardInfo: - selector: selector - selfLink: selfLink - apiVersion: apiVersion - kind: kind - items: - - metadata: - generation: 6 - finalizers: - - finalizers - - finalizers - resourceVersion: resourceVersion - annotations: - key: annotations - generateName: generateName - deletionTimestamp: 2000-01-23T04:56:07.000+00:00 - labels: - key: labels - ownerReferences: - - uid: uid - controller: true - apiVersion: apiVersion - kind: kind - name: name - blockOwnerDeletion: true - - uid: uid - controller: true - apiVersion: apiVersion - kind: kind - name: name - blockOwnerDeletion: true - selfLink: selfLink - deletionGracePeriodSeconds: 0 - uid: uid - managedFields: - - apiVersion: apiVersion - fieldsV1: "{}" - manager: manager - subresource: subresource - time: 2000-01-23T04:56:07.000+00:00 - operation: operation - fieldsType: fieldsType - - apiVersion: apiVersion - fieldsV1: "{}" - manager: manager - subresource: subresource - time: 2000-01-23T04:56:07.000+00:00 - operation: operation - fieldsType: fieldsType - creationTimestamp: 2000-01-23T04:56:07.000+00:00 - name: name - namespace: namespace - apiVersion: apiVersion - kind: kind - spec: - scopeSelector: - matchExpressions: - - scopeName: scopeName - values: - - values - - values - operator: operator - - scopeName: scopeName - values: - - values - - values - operator: operator - hard: - key: null - scopes: - - scopes - - scopes - status: - hard: - key: null - used: - key: null - - metadata: - generation: 6 - finalizers: - - finalizers - - finalizers - resourceVersion: resourceVersion - annotations: - key: annotations - generateName: generateName - deletionTimestamp: 2000-01-23T04:56:07.000+00:00 - labels: - key: labels - ownerReferences: - - uid: uid - controller: true + downwardAPI: + items: + - mode: 6 + path: path + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + fieldRef: apiVersion: apiVersion - kind: kind - name: name - blockOwnerDeletion: true - - uid: uid - controller: true + fieldPath: fieldPath + user: 3 + - mode: 6 + path: path + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + fieldRef: apiVersion: apiVersion - kind: kind - name: name - blockOwnerDeletion: true - selfLink: selfLink - deletionGracePeriodSeconds: 0 - uid: uid - managedFields: - - apiVersion: apiVersion - fieldsV1: "{}" - manager: manager - subresource: subresource - time: 2000-01-23T04:56:07.000+00:00 - operation: operation - fieldsType: fieldsType - - apiVersion: apiVersion - fieldsV1: "{}" - manager: manager - subresource: subresource - time: 2000-01-23T04:56:07.000+00:00 - operation: operation - fieldsType: fieldsType - creationTimestamp: 2000-01-23T04:56:07.000+00:00 - name: name - namespace: namespace - apiVersion: apiVersion - kind: kind - spec: - scopeSelector: - matchExpressions: - - scopeName: scopeName - values: - - values - - values - operator: operator - - scopeName: scopeName - values: - - values - - values - operator: operator - hard: - key: null - scopes: - - scopes - - scopes - status: - hard: - key: null - used: - key: null - properties: - apiVersion: - description: "APIVersion defines the versioned schema of this representation\ - \ of an object. Servers should convert recognized schemas to the latest\ - \ internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources" - type: string - items: - description: "Items is a list of ResourceQuota objects. More info: https://kubernetes.io/docs/concepts/policy/resource-quotas/" + fieldPath: fieldPath + user: 3 + configMap: + name: name + optional: true items: - $ref: "#/components/schemas/v1.ResourceQuota" - type: array - kind: - description: "Kind is a string value representing the REST resource this\ - \ object represents. Servers may infer this from the endpoint the client\ - \ submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds" - type: string - metadata: - $ref: "#/components/schemas/v1.ListMeta" - required: - - items - type: object - x-kubernetes-group-version-kind: - - group: "" - kind: ResourceQuotaList - version: v1 - x-implements: - - io.kubernetes.client.common.KubernetesListObject - v1.ResourceQuotaSpec: - description: ResourceQuotaSpec defines the desired hard limits to enforce for - Quota. - example: - scopeSelector: - matchExpressions: - - scopeName: scopeName - values: - - values - - values - operator: operator - - scopeName: scopeName - values: - - values - - values - operator: operator - hard: - key: null - scopes: - - scopes - - scopes - properties: - hard: - additionalProperties: - $ref: "#/components/schemas/resource.Quantity" - description: "hard is the set of desired hard limits for each named resource.\ - \ More info: https://kubernetes.io/docs/concepts/policy/resource-quotas/" - type: object - scopeSelector: - $ref: "#/components/schemas/v1.ScopeSelector" - scopes: - description: "A collection of filters that must match each object tracked\ - \ by a quota. If not specified, the quota matches all objects." + - mode: 2 + path: path + user: 6 + key: key + - mode: 2 + path: path + user: 6 + key: key + podCertificate: + certificateChainPath: certificateChainPath + userAnnotations: + key: userAnnotations + keyPath: keyPath + maxExpirationSeconds: 8 + keyType: keyType + user: 7 + credentialBundlePath: credentialBundlePath + signerName: signerName + secret: + name: name + optional: true items: - type: string - type: array - x-kubernetes-list-type: atomic - type: object - v1.ResourceQuotaStatus: - description: ResourceQuotaStatus defines the enforced hard limits and observed - use. - example: - hard: - key: null - used: - key: null + - mode: 2 + path: path + user: 6 + key: key + - mode: 2 + path: path + user: 6 + key: key + serviceAccountToken: + path: path + audience: audience + expirationSeconds: 3 + user: 3 + clusterTrustBundle: + path: path + labelSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + name: name + optional: true + user: 4 + signerName: signerName properties: - hard: - additionalProperties: - $ref: "#/components/schemas/resource.Quantity" - description: "Hard is the set of enforced hard limits for each named resource.\ - \ More info: https://kubernetes.io/docs/concepts/policy/resource-quotas/" - type: object - used: - additionalProperties: - $ref: "#/components/schemas/resource.Quantity" - description: Used is the current observed total usage of the resource in - the namespace. - type: object + clusterTrustBundle: + $ref: "#/components/schemas/v1.ClusterTrustBundleProjection" + configMap: + $ref: "#/components/schemas/v1.ConfigMapProjection" + downwardAPI: + $ref: "#/components/schemas/v1.DownwardAPIProjection" + podCertificate: + $ref: "#/components/schemas/v1.PodCertificateProjection" + secret: + $ref: "#/components/schemas/v1.SecretProjection" + serviceAccountToken: + $ref: "#/components/schemas/v1.ServiceAccountTokenProjection" type: object - v1.ResourceRequirements: - description: ResourceRequirements describes the compute resource requirements. + v1.VolumeResourceRequirements: + description: VolumeResourceRequirements describes the storage resource requirements + for a volume. example: - claims: - - request: request - name: name - - request: request - name: name requests: key: null limits: key: null properties: - claims: - description: |- - Claims lists the names of resources, defined in spec.resourceClaims, that are used by this container. - - This field depends on the DynamicResourceAllocation feature gate. - - This field is immutable. It can only be set for containers. - items: - $ref: "#/components/schemas/core.v1.ResourceClaim" - type: array - x-kubernetes-list-type: map - x-kubernetes-list-map-keys: - - name limits: additionalProperties: $ref: "#/components/schemas/resource.Quantity" @@ -260834,268 +278544,370 @@ components: description: "Requests describes the minimum amount of compute resources\ \ required. If Requests is omitted for a container, it defaults to Limits\ \ if that is explicitly specified, otherwise to an implementation-defined\ - \ value. Requests cannot exceed Limits. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/" - type: object - type: object - v1.ResourceStatus: - description: ResourceStatus represents the status of a single resource allocated - to a Pod. - example: - name: name - resources: - - resourceID: resourceID - health: health - message: message - - resourceID: resourceID - health: health - message: message - properties: - name: - description: "Name of the resource. Must be unique within the pod and in\ - \ case of non-DRA resource, match one of the resources from the pod spec.\ - \ For DRA resources, the value must be \"claim:/\"\ - . When this status is reported about a container, the \"claim_name\" and\ - \ \"request\" must match one of the claims of this container." - type: string - resources: - description: "List of unique resources health. Each element in the list\ - \ contains an unique resource ID and its health. At a minimum, for the\ - \ lifetime of a Pod, resource ID must uniquely identify the resource allocated\ - \ to the Pod on the Node. If other Pod on the same Node reports the status\ - \ with the same resource ID, it must be the same resource they share.\ - \ See ResourceID type definition for a specific format it has in various\ - \ use cases." - items: - $ref: "#/components/schemas/v1.ResourceHealth" - type: array - x-kubernetes-list-type: map - x-kubernetes-list-map-keys: - - resourceID - required: - - name + \ value. Requests cannot exceed Limits. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/" + type: object type: object - v1.SELinuxOptions: - description: SELinuxOptions are the labels to be applied to the container + v1.VolumeStatus: + description: VolumeStatus represents the status of a mounted volume. At most + one of its members must be specified. example: - role: role - level: level - type: type - user: user + image: + imageRef: imageRef properties: - level: - description: Level is SELinux level label that applies to the container. - type: string - role: - description: Role is a SELinux role label that applies to the container. - type: string - type: - description: Type is a SELinux type label that applies to the container. - type: string - user: - description: User is a SELinux user label that applies to the container. - type: string + image: + $ref: "#/components/schemas/v1.ImageVolumeStatus" type: object - v1.ScaleIOPersistentVolumeSource: - description: ScaleIOPersistentVolumeSource represents a persistent ScaleIO volume + v1.VsphereVirtualDiskVolumeSource: + description: Represents a vSphere volume resource. example: - system: system - protectionDomain: protectionDomain - sslEnabled: true - storageMode: storageMode - volumeName: volumeName - secretRef: - name: name - namespace: namespace - readOnly: true + storagePolicyName: storagePolicyName + storagePolicyID: storagePolicyID + volumePath: volumePath fsType: fsType - storagePool: storagePool - gateway: gateway properties: fsType: - description: "fsType is the filesystem type to mount. Must be a filesystem\ - \ type supported by the host operating system. Ex. \"ext4\", \"xfs\",\ - \ \"ntfs\". Default is \"xfs\"" - type: string - gateway: - description: gateway is the host address of the ScaleIO API Gateway. - type: string - protectionDomain: - description: protectionDomain is the name of the ScaleIO Protection Domain - for the configured storage. - type: string - readOnly: - description: readOnly defaults to false (read/write). ReadOnly here will - force the ReadOnly setting in VolumeMounts. - type: boolean - secretRef: - $ref: "#/components/schemas/v1.SecretReference" - sslEnabled: - description: "sslEnabled is the flag to enable/disable SSL communication\ - \ with Gateway, default false" - type: boolean - storageMode: - description: storageMode indicates whether the storage for a volume should - be ThickProvisioned or ThinProvisioned. Default is ThinProvisioned. + description: "fsType is filesystem type to mount. Must be a filesystem type\ + \ supported by the host operating system. Ex. \"ext4\", \"xfs\", \"ntfs\"\ + . Implicitly inferred to be \"ext4\" if unspecified." type: string - storagePool: - description: storagePool is the ScaleIO Storage Pool associated with the - protection domain. + storagePolicyID: + description: storagePolicyID is the storage Policy Based Management (SPBM) + profile ID associated with the StoragePolicyName. type: string - system: - description: system is the name of the storage system as configured in ScaleIO. + storagePolicyName: + description: storagePolicyName is the storage Policy Based Management (SPBM) + profile name. type: string - volumeName: - description: volumeName is the name of a volume already created in the ScaleIO - system that is associated with this volume source. + volumePath: + description: volumePath is the path that identifies vSphere volume vmdk type: string required: - - gateway - - secretRef - - system + - volumePath type: object - v1.ScaleIOVolumeSource: - description: ScaleIOVolumeSource represents a persistent ScaleIO volume + v1.WeightedPodAffinityTerm: + description: The weights of all of the matched WeightedPodAffinityTerm fields + are added per-node to find the most preferred node(s) example: - system: system - protectionDomain: protectionDomain - sslEnabled: true - storageMode: storageMode - volumeName: volumeName - secretRef: - name: name - readOnly: true - fsType: fsType - storagePool: storagePool - gateway: gateway + podAffinityTerm: + labelSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + namespaceSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + topologyKey: topologyKey + matchLabelKeys: + - matchLabelKeys + - matchLabelKeys + mismatchLabelKeys: + - mismatchLabelKeys + - mismatchLabelKeys + namespaces: + - namespaces + - namespaces + weight: 1 properties: - fsType: - description: "fsType is the filesystem type to mount. Must be a filesystem\ - \ type supported by the host operating system. Ex. \"ext4\", \"xfs\",\ - \ \"ntfs\". Default is \"xfs\"." - type: string - gateway: - description: gateway is the host address of the ScaleIO API Gateway. + podAffinityTerm: + $ref: "#/components/schemas/v1.PodAffinityTerm" + weight: + description: "weight associated with matching the corresponding podAffinityTerm,\ + \ in the range 1-100." + format: int32 + type: integer + required: + - podAffinityTerm + - weight + type: object + v1.WindowsSecurityContextOptions: + description: WindowsSecurityContextOptions contain Windows-specific options + and credentials. + example: + gmsaCredentialSpec: gmsaCredentialSpec + runAsUserName: runAsUserName + hostProcess: true + gmsaCredentialSpecName: gmsaCredentialSpecName + properties: + gmsaCredentialSpec: + description: GMSACredentialSpec is where the GMSA admission webhook (https://github.com/kubernetes-sigs/windows-gmsa) + inlines the contents of the GMSA credential spec named by the GMSACredentialSpecName + field. type: string - protectionDomain: - description: protectionDomain is the name of the ScaleIO Protection Domain - for the configured storage. + gmsaCredentialSpecName: + description: GMSACredentialSpecName is the name of the GMSA credential spec + to use. type: string - readOnly: - description: readOnly Defaults to false (read/write). ReadOnly here will - force the ReadOnly setting in VolumeMounts. - type: boolean - secretRef: - $ref: "#/components/schemas/v1.LocalObjectReference" - sslEnabled: - description: "sslEnabled Flag enable/disable SSL communication with Gateway,\ - \ default false" + hostProcess: + description: "HostProcess determines if a container should be run as a 'Host\ + \ Process' container. All of a Pod's containers must have the same effective\ + \ HostProcess value (it is not allowed to have a mix of HostProcess containers\ + \ and non-HostProcess containers). In addition, if HostProcess is true\ + \ then HostNetwork must also be set to true." type: boolean - storageMode: - description: storageMode indicates whether the storage for a volume should - be ThickProvisioned or ThinProvisioned. Default is ThinProvisioned. + runAsUserName: + description: "The UserName in Windows to run the entrypoint of the container\ + \ process. Defaults to the user specified in image metadata if unspecified.\ + \ May also be set in PodSecurityContext. If set in both SecurityContext\ + \ and PodSecurityContext, the value specified in SecurityContext takes\ + \ precedence." type: string - storagePool: - description: storagePool is the ScaleIO Storage Pool associated with the - protection domain. + type: object + v1.Endpoint: + description: Endpoint represents a single logical "backend" implementing a service. + example: + nodeName: nodeName + targetRef: + uid: uid + apiVersion: apiVersion + kind: kind + resourceVersion: resourceVersion + fieldPath: fieldPath + name: name + namespace: namespace + addresses: + - addresses + - addresses + hostname: hostname + zone: zone + hints: + forZones: + - name: name + - name: name + forNodes: + - name: name + - name: name + conditions: + ready: true + terminating: true + serving: true + deprecatedTopology: + key: deprecatedTopology + properties: + addresses: + description: "addresses of this endpoint. For EndpointSlices of addressType\ + \ \"IPv4\" or \"IPv6\", the values are IP addresses in canonical form.\ + \ The syntax and semantics of other addressType values are not defined.\ + \ This must contain at least one address but no more than 100. EndpointSlices\ + \ generated by the EndpointSlice controller will always have exactly 1\ + \ address. No semantics are defined for additional addresses beyond the\ + \ first, and kube-proxy does not look at them." + items: + type: string + type: array + x-kubernetes-list-type: set + conditions: + $ref: "#/components/schemas/v1.EndpointConditions" + deprecatedTopology: + additionalProperties: + type: string + description: "deprecatedTopology contains topology information part of the\ + \ v1beta1 API. This field is deprecated, and will be removed when the\ + \ v1beta1 API is removed (no sooner than kubernetes v1.24). While this\ + \ field can hold values, it is not writable through the v1 API, and any\ + \ attempts to write to it will be silently ignored. Topology information\ + \ can be found in the zone and nodeName fields instead." + type: object + hints: + $ref: "#/components/schemas/v1.EndpointHints" + hostname: + description: hostname of this endpoint. This field may be used by consumers + of endpoints to distinguish endpoints from each other (e.g. in DNS names). + Multiple endpoints which use the same hostname should be considered fungible + (e.g. multiple A values in DNS). Must be lowercase and pass DNS Label + (RFC 1123) validation. type: string - system: - description: system is the name of the storage system as configured in ScaleIO. + nodeName: + description: nodeName represents the name of the Node hosting this endpoint. + This can be used to determine endpoints local to a Node. type: string - volumeName: - description: volumeName is the name of a volume already created in the ScaleIO - system that is associated with this volume source. + targetRef: + $ref: "#/components/schemas/v1.ObjectReference" + zone: + description: zone is the name of the Zone this endpoint exists in. type: string required: - - gateway - - secretRef - - system + - addresses type: object - v1.ScopeSelector: - description: A scope selector represents the AND of the selectors represented - by the scoped-resource selector requirements. + v1.EndpointConditions: + description: EndpointConditions represents the current condition of an endpoint. example: - matchExpressions: - - scopeName: scopeName - values: - - values - - values - operator: operator - - scopeName: scopeName - values: - - values - - values - operator: operator + ready: true + terminating: true + serving: true properties: - matchExpressions: - description: A list of scope selector requirements by scope of the resources. - items: - $ref: "#/components/schemas/v1.ScopedResourceSelectorRequirement" - type: array - x-kubernetes-list-type: atomic + ready: + description: "ready indicates that this endpoint is ready to receive traffic,\ + \ according to whatever system is managing the endpoint. A nil value should\ + \ be interpreted as \"true\". In general, an endpoint should be marked\ + \ ready if it is serving and not terminating, though this can be overridden\ + \ in some cases, such as when the associated Service has set the publishNotReadyAddresses\ + \ flag." + type: boolean + serving: + description: "serving indicates that this endpoint is able to receive traffic,\ + \ according to whatever system is managing the endpoint. For endpoints\ + \ backed by pods, the EndpointSlice controller will mark the endpoint\ + \ as serving if the pod's Ready condition is True. A nil value should\ + \ be interpreted as \"true\"." + type: boolean + terminating: + description: terminating indicates that this endpoint is terminating. A + nil value should be interpreted as "false". + type: boolean type: object - x-kubernetes-map-type: atomic - v1.ScopedResourceSelectorRequirement: - description: "A scoped-resource selector requirement is a selector that contains\ - \ values, a scope name, and an operator that relates the scope name and values." + v1.EndpointHints: + description: EndpointHints provides hints describing how an endpoint should + be consumed. example: - scopeName: scopeName - values: - - values - - values - operator: operator + forZones: + - name: name + - name: name + forNodes: + - name: name + - name: name properties: - operator: - description: "Represents a scope's relationship to a set of values. Valid\ - \ operators are In, NotIn, Exists, DoesNotExist." - type: string - scopeName: - description: The name of the scope that the selector applies to. - type: string - values: - description: "An array of string values. If the operator is In or NotIn,\ - \ the values array must be non-empty. If the operator is Exists or DoesNotExist,\ - \ the values array must be empty. This array is replaced during a strategic\ - \ merge patch." + forNodes: + description: forNodes indicates the node(s) this endpoint should be consumed + by when using topology aware routing. May contain a maximum of 8 entries. items: - type: string + $ref: "#/components/schemas/v1.ForNode" + type: array + x-kubernetes-list-type: atomic + forZones: + description: forZones indicates the zone(s) this endpoint should be consumed + by when using topology aware routing. May contain a maximum of 8 entries. + items: + $ref: "#/components/schemas/v1.ForZone" type: array x-kubernetes-list-type: atomic - required: - - operator - - scopeName type: object - v1.SeccompProfile: - description: SeccompProfile defines a pod/container's seccomp profile settings. - Only one profile source may be set. + discovery.v1.EndpointPort: + description: EndpointPort represents a Port used by an EndpointSlice example: - localhostProfile: localhostProfile - type: type + protocol: protocol + port: 0 + appProtocol: appProtocol + name: name properties: - localhostProfile: - description: "localhostProfile indicates a profile defined in a file on\ - \ the node should be used. The profile must be preconfigured on the node\ - \ to work. Must be a descending path, relative to the kubelet's configured\ - \ seccomp profile location. Must be set if type is \"Localhost\". Must\ - \ NOT be set for any other type." - type: string - type: + appProtocol: description: |- - type indicates which kind of seccomp profile will be applied. Valid options are: + The application protocol for this port. This is used as a hint for implementations to offer richer behavior for protocols that they understand. This field follows standard Kubernetes label syntax. Valid values are either: - Localhost - a profile defined in a file on the node should be used. RuntimeDefault - the container runtime default profile should be used. Unconfined - no profile should be applied. + * Un-prefixed protocol names - reserved for IANA standard service names (as per RFC-6335 and https://www.iana.org/assignments/service-names). + + * Kubernetes-defined prefixed names: + * 'kubernetes.io/h2c' - HTTP/2 prior knowledge over cleartext as described in https://www.rfc-editor.org/rfc/rfc9113.html#name-starting-http-2-with-prior- + * 'kubernetes.io/ws' - WebSocket over cleartext as described in https://www.rfc-editor.org/rfc/rfc6455 + * 'kubernetes.io/wss' - WebSocket over TLS as described in https://www.rfc-editor.org/rfc/rfc6455 + + * Other protocols should use implementation-defined prefixed names such as mycompany.com/my-custom-protocol. + type: string + name: + description: "name represents the name of this port. All ports in an EndpointSlice\ + \ must have a unique name. If the EndpointSlice is derived from a Kubernetes\ + \ service, this corresponds to the Service.ports[].name. Name must either\ + \ be an empty string or pass DNS_LABEL validation: * must be no more than\ + \ 63 characters long. * must consist of lower case alphanumeric characters\ + \ or '-'. * must start and end with an alphanumeric character. Default\ + \ is empty string." + type: string + port: + description: "port represents the port number of the endpoint. If the EndpointSlice\ + \ is derived from a Kubernetes service, this must be set to the service's\ + \ target port. EndpointSlices used for other purposes may have a nil port." + format: int32 + type: integer + protocol: + description: "protocol represents the IP protocol for this port. Must be\ + \ UDP, TCP, or SCTP. Default is TCP." type: string - required: - - type type: object - x-kubernetes-unions: - - discriminator: type - fields-to-discriminateBy: - localhostProfile: LocalhostProfile - v1.Secret: - description: Secret holds secret data of a certain type. The total bytes of - the values in the Data field must be less than MaxSecretSize bytes. + x-kubernetes-map-type: atomic + v1.EndpointSlice: + description: EndpointSlice represents a set of service endpoints. Most EndpointSlices + are created by the EndpointSlice controller to represent the Pods selected + by Service objects. For a given service there may be multiple EndpointSlice + objects which must be joined to produce the full set of endpoints; you can + find all of the slices for a given service by listing EndpointSlices in the + service's namespace whose `kubernetes.io/service-name` label contains the + service's name. example: - immutable: true + endpoints: + - nodeName: nodeName + targetRef: + uid: uid + apiVersion: apiVersion + kind: kind + resourceVersion: resourceVersion + fieldPath: fieldPath + name: name + namespace: namespace + addresses: + - addresses + - addresses + hostname: hostname + zone: zone + hints: + forZones: + - name: name + - name: name + forNodes: + - name: name + - name: name + conditions: + ready: true + terminating: true + serving: true + deprecatedTopology: + key: deprecatedTopology + - nodeName: nodeName + targetRef: + uid: uid + apiVersion: apiVersion + kind: kind + resourceVersion: resourceVersion + fieldPath: fieldPath + name: name + namespace: namespace + addresses: + - addresses + - addresses + hostname: hostname + zone: zone + hints: + forZones: + - name: name + - name: name + forNodes: + - name: name + - name: name + conditions: + ready: true + terminating: true + serving: true + deprecatedTopology: + key: deprecatedTopology metadata: generation: 6 finalizers: @@ -261143,34 +278955,40 @@ components: name: name namespace: namespace apiVersion: apiVersion - data: - key: data + addressType: addressType kind: kind - type: type - stringData: - key: stringData + ports: + - protocol: protocol + port: 0 + appProtocol: appProtocol + name: name + - protocol: protocol + port: 0 + appProtocol: appProtocol + name: name properties: + addressType: + description: "addressType specifies the type of address carried by this\ + \ EndpointSlice. All addresses in this slice must be the same type. This\ + \ field is immutable after creation. The following address types are currently\ + \ supported: * IPv4: Represents an IPv4 Address. * IPv6: Represents an\ + \ IPv6 Address. * FQDN: Represents a Fully Qualified Domain Name. (Deprecated)\ + \ The EndpointSlice controller only generates, and kube-proxy only processes,\ + \ slices of addressType \"IPv4\" and \"IPv6\". No semantics are defined\ + \ for the \"FQDN\" type." + type: string apiVersion: description: "APIVersion defines the versioned schema of this representation\ \ of an object. Servers should convert recognized schemas to the latest\ \ internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources" type: string - data: - additionalProperties: - format: byte - pattern: "^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$" - type: string - description: "Data contains the secret data. Each key must consist of alphanumeric\ - \ characters, '-', '_' or '.'. The serialized form of the secret data\ - \ is a base64 encoded string, representing the arbitrary (possibly non-string)\ - \ data value here. Described in https://tools.ietf.org/html/rfc4648#section-4" - type: object - immutable: - description: "Immutable, if set to true, ensures that data stored in the\ - \ Secret cannot be updated (only object metadata can be modified). If\ - \ not set to true, the field can be modified at any time. Defaulted to\ - \ nil." - type: boolean + endpoints: + description: endpoints is a list of unique endpoints in this slice. Each + slice may include a maximum of 1000 endpoints. + items: + $ref: "#/components/schemas/v1.Endpoint" + type: array + x-kubernetes-list-type: atomic kind: description: "Kind is a string value representing the REST resource this\ \ object represents. Servers may infer this from the endpoint the client\ @@ -261178,71 +278996,28 @@ components: type: string metadata: $ref: "#/components/schemas/v1.ObjectMeta" - stringData: - additionalProperties: - type: string - description: "stringData allows specifying non-binary secret data in string\ - \ form. It is provided as a write-only input field for convenience. All\ - \ keys and values are merged into the data field on write, overwriting\ - \ any existing values. The stringData field is never output when reading\ - \ from the API." - type: object - type: - description: "Used to facilitate programmatic handling of secret data. More\ - \ info: https://kubernetes.io/docs/concepts/configuration/secret/#secret-types" - type: string + ports: + description: "ports specifies the list of network ports exposed by each\ + \ endpoint in this slice. Each port must have a unique name. Each slice\ + \ may include a maximum of 100 ports. Services always have at least 1\ + \ port, so EndpointSlices generated by the EndpointSlice controller will\ + \ likewise always have at least 1 port. EndpointSlices used for other\ + \ purposes may have an empty ports list." + items: + $ref: "#/components/schemas/discovery.v1.EndpointPort" + type: array + x-kubernetes-list-type: atomic + required: + - addressType type: object x-kubernetes-group-version-kind: - - group: "" - kind: Secret + - group: discovery.k8s.io + kind: EndpointSlice version: v1 x-implements: - io.kubernetes.client.common.KubernetesObject - v1.SecretEnvSource: - description: |- - SecretEnvSource selects a Secret to populate the environment variables with. - - The contents of the target Secret's Data field will represent the key-value pairs as environment variables. - example: - name: name - optional: true - properties: - name: - description: "Name of the referent. This field is effectively required,\ - \ but due to backwards compatibility is allowed to be empty. Instances\ - \ of this type with an empty value here are almost certainly wrong. More\ - \ info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names" - type: string - optional: - description: Specify whether the Secret must be defined - type: boolean - type: object - v1.SecretKeySelector: - description: SecretKeySelector selects a key of a Secret. - example: - name: name - optional: true - key: key - properties: - key: - description: The key of the secret to select from. Must be a valid secret - key. - type: string - name: - description: "Name of the referent. This field is effectively required,\ - \ but due to backwards compatibility is allowed to be empty. Instances\ - \ of this type with an empty value here are almost certainly wrong. More\ - \ info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names" - type: string - optional: - description: Specify whether the Secret or its key must be defined - type: boolean - required: - - key - type: object - x-kubernetes-map-type: atomic - v1.SecretList: - description: SecretList is a list of Secret. + v1.EndpointSliceList: + description: EndpointSliceList represents a list of endpoint slices example: metadata: remainingItemCount: 1 @@ -261254,500 +279029,293 @@ components: apiVersion: apiVersion kind: kind items: - - immutable: true - metadata: - generation: 6 - finalizers: - - finalizers - - finalizers - resourceVersion: resourceVersion - annotations: - key: annotations - generateName: generateName - deletionTimestamp: 2000-01-23T04:56:07.000+00:00 - labels: - key: labels - ownerReferences: - - uid: uid - controller: true + - endpoints: + - nodeName: nodeName + targetRef: + uid: uid apiVersion: apiVersion kind: kind + resourceVersion: resourceVersion + fieldPath: fieldPath name: name - blockOwnerDeletion: true - - uid: uid - controller: true + namespace: namespace + addresses: + - addresses + - addresses + hostname: hostname + zone: zone + hints: + forZones: + - name: name + - name: name + forNodes: + - name: name + - name: name + conditions: + ready: true + terminating: true + serving: true + deprecatedTopology: + key: deprecatedTopology + - nodeName: nodeName + targetRef: + uid: uid apiVersion: apiVersion kind: kind + resourceVersion: resourceVersion + fieldPath: fieldPath name: name - blockOwnerDeletion: true - selfLink: selfLink - deletionGracePeriodSeconds: 0 - uid: uid - managedFields: - - apiVersion: apiVersion - fieldsV1: "{}" - manager: manager - subresource: subresource - time: 2000-01-23T04:56:07.000+00:00 - operation: operation - fieldsType: fieldsType - - apiVersion: apiVersion - fieldsV1: "{}" - manager: manager - subresource: subresource - time: 2000-01-23T04:56:07.000+00:00 - operation: operation - fieldsType: fieldsType - creationTimestamp: 2000-01-23T04:56:07.000+00:00 - name: name - namespace: namespace - apiVersion: apiVersion - data: - key: data - kind: kind - type: type - stringData: - key: stringData - - immutable: true + namespace: namespace + addresses: + - addresses + - addresses + hostname: hostname + zone: zone + hints: + forZones: + - name: name + - name: name + forNodes: + - name: name + - name: name + conditions: + ready: true + terminating: true + serving: true + deprecatedTopology: + key: deprecatedTopology metadata: generation: 6 finalizers: - - finalizers - - finalizers - resourceVersion: resourceVersion - annotations: - key: annotations - generateName: generateName - deletionTimestamp: 2000-01-23T04:56:07.000+00:00 - labels: - key: labels - ownerReferences: - - uid: uid - controller: true - apiVersion: apiVersion - kind: kind - name: name - blockOwnerDeletion: true - - uid: uid - controller: true - apiVersion: apiVersion - kind: kind - name: name - blockOwnerDeletion: true - selfLink: selfLink - deletionGracePeriodSeconds: 0 - uid: uid - managedFields: - - apiVersion: apiVersion - fieldsV1: "{}" - manager: manager - subresource: subresource - time: 2000-01-23T04:56:07.000+00:00 - operation: operation - fieldsType: fieldsType - - apiVersion: apiVersion - fieldsV1: "{}" - manager: manager - subresource: subresource - time: 2000-01-23T04:56:07.000+00:00 - operation: operation - fieldsType: fieldsType - creationTimestamp: 2000-01-23T04:56:07.000+00:00 - name: name - namespace: namespace - apiVersion: apiVersion - data: - key: data - kind: kind - type: type - stringData: - key: stringData - properties: - apiVersion: - description: "APIVersion defines the versioned schema of this representation\ - \ of an object. Servers should convert recognized schemas to the latest\ - \ internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources" - type: string - items: - description: "Items is a list of secret objects. More info: https://kubernetes.io/docs/concepts/configuration/secret" - items: - $ref: "#/components/schemas/v1.Secret" - type: array - kind: - description: "Kind is a string value representing the REST resource this\ - \ object represents. Servers may infer this from the endpoint the client\ - \ submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds" - type: string - metadata: - $ref: "#/components/schemas/v1.ListMeta" - required: - - items - type: object - x-kubernetes-group-version-kind: - - group: "" - kind: SecretList - version: v1 - x-implements: - - io.kubernetes.client.common.KubernetesListObject - v1.SecretProjection: - description: |- - Adapts a secret into a projected volume. - - The contents of the target Secret's Data field will be presented in a projected volume as files using the keys in the Data field as the file names. Note that this is identical to a secret volume source without the default mode. - example: - name: name - optional: true - items: - - mode: 6 - path: path - key: key - - mode: 6 - path: path - key: key - properties: - items: - description: "items if unspecified, each key-value pair in the Data field\ - \ of the referenced Secret will be projected into the volume as a file\ - \ whose name is the key and content is the value. If specified, the listed\ - \ keys will be projected into the specified paths, and unlisted keys will\ - \ not be present. If a key is specified which is not present in the Secret,\ - \ the volume setup will error unless it is marked optional. Paths must\ - \ be relative and may not contain the '..' path or start with '..'." - items: - $ref: "#/components/schemas/v1.KeyToPath" - type: array - x-kubernetes-list-type: atomic - name: - description: "Name of the referent. This field is effectively required,\ - \ but due to backwards compatibility is allowed to be empty. Instances\ - \ of this type with an empty value here are almost certainly wrong. More\ - \ info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names" - type: string - optional: - description: optional field specify whether the Secret or its key must be - defined - type: boolean - type: object - v1.SecretReference: - description: SecretReference represents a Secret Reference. It has enough information - to retrieve secret in any namespace - example: - name: name - namespace: namespace - properties: - name: - description: name is unique within a namespace to reference a secret resource. - type: string - namespace: - description: namespace defines the space within which the secret name must - be unique. - type: string - type: object - x-kubernetes-map-type: atomic - v1.SecretVolumeSource: - description: |- - Adapts a Secret into a volume. - - The contents of the target Secret's Data field will be presented in a volume as files using the keys in the Data field as the file names. Secret volumes support ownership management and SELinux relabeling. - example: - secretName: secretName - defaultMode: 7 - optional: true - items: - - mode: 6 - path: path - key: key - - mode: 6 - path: path - key: key - properties: - defaultMode: - description: "defaultMode is Optional: mode bits used to set permissions\ - \ on created files by default. Must be an octal value between 0000 and\ - \ 0777 or a decimal value between 0 and 511. YAML accepts both octal and\ - \ decimal values, JSON requires decimal values for mode bits. Defaults\ - \ to 0644. Directories within the path are not affected by this setting.\ - \ This might be in conflict with other options that affect the file mode,\ - \ like fsGroup, and the result can be other mode bits set." - format: int32 - type: integer - items: - description: "items If unspecified, each key-value pair in the Data field\ - \ of the referenced Secret will be projected into the volume as a file\ - \ whose name is the key and content is the value. If specified, the listed\ - \ keys will be projected into the specified paths, and unlisted keys will\ - \ not be present. If a key is specified which is not present in the Secret,\ - \ the volume setup will error unless it is marked optional. Paths must\ - \ be relative and may not contain the '..' path or start with '..'." - items: - $ref: "#/components/schemas/v1.KeyToPath" - type: array - x-kubernetes-list-type: atomic - optional: - description: optional field specify whether the Secret or its keys must - be defined - type: boolean - secretName: - description: "secretName is the name of the secret in the pod's namespace\ - \ to use. More info: https://kubernetes.io/docs/concepts/storage/volumes#secret" - type: string - type: object - v1.SecurityContext: - description: "SecurityContext holds security configuration that will be applied\ - \ to a container. Some fields are present in both SecurityContext and PodSecurityContext.\ - \ When both are set, the values in SecurityContext take precedence." - example: - privileged: true - runAsUser: 6 - capabilities: - add: - - add - - add - drop: - - drop - - drop - seLinuxOptions: - role: role - level: level - type: type - user: user - appArmorProfile: - localhostProfile: localhostProfile - type: type - seccompProfile: - localhostProfile: localhostProfile - type: type - windowsOptions: - gmsaCredentialSpec: gmsaCredentialSpec - runAsUserName: runAsUserName - hostProcess: true - gmsaCredentialSpecName: gmsaCredentialSpecName - procMount: procMount - allowPrivilegeEscalation: true - runAsGroup: 1 - runAsNonRoot: true - readOnlyRootFilesystem: true - properties: - allowPrivilegeEscalation: - description: "AllowPrivilegeEscalation controls whether a process can gain\ - \ more privileges than its parent process. This bool directly controls\ - \ if the no_new_privs flag will be set on the container process. AllowPrivilegeEscalation\ - \ is true always when the container is: 1) run as Privileged 2) has CAP_SYS_ADMIN\ - \ Note that this field cannot be set when spec.os.name is windows." - type: boolean - appArmorProfile: - $ref: "#/components/schemas/v1.AppArmorProfile" - capabilities: - $ref: "#/components/schemas/v1.Capabilities" - privileged: - description: Run container in privileged mode. Processes in privileged containers - are essentially equivalent to root on the host. Defaults to false. Note - that this field cannot be set when spec.os.name is windows. - type: boolean - procMount: - description: procMount denotes the type of proc mount to use for the containers. - The default value is Default which uses the container runtime defaults - for readonly paths and masked paths. Note that this field cannot be set - when spec.os.name is windows. - type: string - readOnlyRootFilesystem: - description: Whether this container has a read-only root filesystem. Default - is false. Note that this field cannot be set when spec.os.name is windows. - type: boolean - runAsGroup: - description: "The GID to run the entrypoint of the container process. Uses\ - \ runtime default if unset. May also be set in PodSecurityContext. If\ - \ set in both SecurityContext and PodSecurityContext, the value specified\ - \ in SecurityContext takes precedence. Note that this field cannot be\ - \ set when spec.os.name is windows." - format: int64 - type: integer - runAsNonRoot: - description: "Indicates that the container must run as a non-root user.\ - \ If true, the Kubelet will validate the image at runtime to ensure that\ - \ it does not run as UID 0 (root) and fail to start the container if it\ - \ does. If unset or false, no such validation will be performed. May also\ - \ be set in PodSecurityContext. If set in both SecurityContext and PodSecurityContext,\ - \ the value specified in SecurityContext takes precedence." - type: boolean - runAsUser: - description: "The UID to run the entrypoint of the container process. Defaults\ - \ to user specified in image metadata if unspecified. May also be set\ - \ in PodSecurityContext. If set in both SecurityContext and PodSecurityContext,\ - \ the value specified in SecurityContext takes precedence. Note that this\ - \ field cannot be set when spec.os.name is windows." - format: int64 - type: integer - seLinuxOptions: - $ref: "#/components/schemas/v1.SELinuxOptions" - seccompProfile: - $ref: "#/components/schemas/v1.SeccompProfile" - windowsOptions: - $ref: "#/components/schemas/v1.WindowsSecurityContextOptions" - type: object - v1.Service: - description: "Service is a named abstraction of software service (for example,\ - \ mysql) consisting of local port (for example 3306) that the proxy listens\ - \ on, and the selector that determines which pods will answer requests sent\ - \ through the proxy." - example: - metadata: - generation: 6 - finalizers: - - finalizers - - finalizers - resourceVersion: resourceVersion - annotations: - key: annotations - generateName: generateName - deletionTimestamp: 2000-01-23T04:56:07.000+00:00 - labels: - key: labels - ownerReferences: - - uid: uid - controller: true - apiVersion: apiVersion - kind: kind + - finalizers + - finalizers + resourceVersion: resourceVersion + annotations: + key: annotations + generateName: generateName + deletionTimestamp: 2000-01-23T04:56:07.000+00:00 + labels: + key: labels + ownerReferences: + - uid: uid + controller: true + apiVersion: apiVersion + kind: kind + name: name + blockOwnerDeletion: true + - uid: uid + controller: true + apiVersion: apiVersion + kind: kind + name: name + blockOwnerDeletion: true + selfLink: selfLink + deletionGracePeriodSeconds: 0 + uid: uid + managedFields: + - apiVersion: apiVersion + fieldsV1: "{}" + manager: manager + subresource: subresource + time: 2000-01-23T04:56:07.000+00:00 + operation: operation + fieldsType: fieldsType + - apiVersion: apiVersion + fieldsV1: "{}" + manager: manager + subresource: subresource + time: 2000-01-23T04:56:07.000+00:00 + operation: operation + fieldsType: fieldsType + creationTimestamp: 2000-01-23T04:56:07.000+00:00 name: name - blockOwnerDeletion: true - - uid: uid - controller: true - apiVersion: apiVersion - kind: kind + namespace: namespace + apiVersion: apiVersion + addressType: addressType + kind: kind + ports: + - protocol: protocol + port: 0 + appProtocol: appProtocol name: name - blockOwnerDeletion: true - selfLink: selfLink - deletionGracePeriodSeconds: 0 - uid: uid - managedFields: - - apiVersion: apiVersion - fieldsV1: "{}" - manager: manager - subresource: subresource - time: 2000-01-23T04:56:07.000+00:00 - operation: operation - fieldsType: fieldsType - - apiVersion: apiVersion - fieldsV1: "{}" - manager: manager - subresource: subresource - time: 2000-01-23T04:56:07.000+00:00 - operation: operation - fieldsType: fieldsType - creationTimestamp: 2000-01-23T04:56:07.000+00:00 - name: name - namespace: namespace - apiVersion: apiVersion - kind: kind - spec: - clusterIPs: - - clusterIPs - - clusterIPs - healthCheckNodePort: 0 - ipFamilyPolicy: ipFamilyPolicy - externalIPs: - - externalIPs - - externalIPs - sessionAffinity: sessionAffinity - trafficDistribution: trafficDistribution - allocateLoadBalancerNodePorts: true + - protocol: protocol + port: 0 + appProtocol: appProtocol + name: name + - endpoints: + - nodeName: nodeName + targetRef: + uid: uid + apiVersion: apiVersion + kind: kind + resourceVersion: resourceVersion + fieldPath: fieldPath + name: name + namespace: namespace + addresses: + - addresses + - addresses + hostname: hostname + zone: zone + hints: + forZones: + - name: name + - name: name + forNodes: + - name: name + - name: name + conditions: + ready: true + terminating: true + serving: true + deprecatedTopology: + key: deprecatedTopology + - nodeName: nodeName + targetRef: + uid: uid + apiVersion: apiVersion + kind: kind + resourceVersion: resourceVersion + fieldPath: fieldPath + name: name + namespace: namespace + addresses: + - addresses + - addresses + hostname: hostname + zone: zone + hints: + forZones: + - name: name + - name: name + forNodes: + - name: name + - name: name + conditions: + ready: true + terminating: true + serving: true + deprecatedTopology: + key: deprecatedTopology + metadata: + generation: 6 + finalizers: + - finalizers + - finalizers + resourceVersion: resourceVersion + annotations: + key: annotations + generateName: generateName + deletionTimestamp: 2000-01-23T04:56:07.000+00:00 + labels: + key: labels + ownerReferences: + - uid: uid + controller: true + apiVersion: apiVersion + kind: kind + name: name + blockOwnerDeletion: true + - uid: uid + controller: true + apiVersion: apiVersion + kind: kind + name: name + blockOwnerDeletion: true + selfLink: selfLink + deletionGracePeriodSeconds: 0 + uid: uid + managedFields: + - apiVersion: apiVersion + fieldsV1: "{}" + manager: manager + subresource: subresource + time: 2000-01-23T04:56:07.000+00:00 + operation: operation + fieldsType: fieldsType + - apiVersion: apiVersion + fieldsV1: "{}" + manager: manager + subresource: subresource + time: 2000-01-23T04:56:07.000+00:00 + operation: operation + fieldsType: fieldsType + creationTimestamp: 2000-01-23T04:56:07.000+00:00 + name: name + namespace: namespace + apiVersion: apiVersion + addressType: addressType + kind: kind ports: - protocol: protocol - port: 1 + port: 0 appProtocol: appProtocol name: name - nodePort: 6 - targetPort: targetPort - protocol: protocol - port: 1 + port: 0 appProtocol: appProtocol name: name - nodePort: 6 - targetPort: targetPort - type: type - loadBalancerClass: loadBalancerClass - sessionAffinityConfig: - clientIP: - timeoutSeconds: 5 - ipFamilies: - - ipFamilies - - ipFamilies - loadBalancerIP: loadBalancerIP - externalName: externalName - loadBalancerSourceRanges: - - loadBalancerSourceRanges - - loadBalancerSourceRanges - externalTrafficPolicy: externalTrafficPolicy - selector: - key: selector - publishNotReadyAddresses: true - internalTrafficPolicy: internalTrafficPolicy - clusterIP: clusterIP - status: - loadBalancer: - ingress: - - ipMode: ipMode - hostname: hostname - ip: ip - ports: - - protocol: protocol - port: 2 - error: error - - protocol: protocol - port: 2 - error: error - - ipMode: ipMode - hostname: hostname - ip: ip - ports: - - protocol: protocol - port: 2 - error: error - - protocol: protocol - port: 2 - error: error - conditions: - - reason: reason - lastTransitionTime: 2000-01-23T04:56:07.000+00:00 - message: message - type: type - observedGeneration: 5 - status: status - - reason: reason - lastTransitionTime: 2000-01-23T04:56:07.000+00:00 - message: message - type: type - observedGeneration: 5 - status: status properties: apiVersion: description: "APIVersion defines the versioned schema of this representation\ \ of an object. Servers should convert recognized schemas to the latest\ \ internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources" type: string + items: + description: items is the list of endpoint slices + items: + $ref: "#/components/schemas/v1.EndpointSlice" + type: array kind: description: "Kind is a string value representing the REST resource this\ \ object represents. Servers may infer this from the endpoint the client\ \ submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds" type: string metadata: - $ref: "#/components/schemas/v1.ObjectMeta" - spec: - $ref: "#/components/schemas/v1.ServiceSpec" - status: - $ref: "#/components/schemas/v1.ServiceStatus" + $ref: "#/components/schemas/v1.ListMeta" + required: + - items type: object x-kubernetes-group-version-kind: - - group: "" - kind: Service + - group: discovery.k8s.io + kind: EndpointSliceList version: v1 x-implements: - - io.kubernetes.client.common.KubernetesObject - v1.ServiceAccount: - description: "ServiceAccount binds together: * a name, understood by users,\ - \ and perhaps by peripheral systems, for an identity * a principal that can\ - \ be authenticated and authorized * a set of secrets" + - io.kubernetes.client.common.KubernetesListObject + v1.ForNode: + description: ForNode provides information about which nodes should consume this + endpoint. + example: + name: name + properties: + name: + description: name represents the name of the node. + type: string + required: + - name + type: object + v1.ForZone: + description: ForZone provides information about which zones should consume this + endpoint. + example: + name: name + properties: + name: + description: name represents the name of the zone. + type: string + required: + - name + type: object + events.v1.Event: + description: "Event is a report of an event somewhere in the cluster. It generally\ + \ denotes some state change in the system. Events have a limited retention\ + \ time and triggers and messages may evolve with time. Event consumers should\ + \ not rely on the timing of an event with a given Reason reflecting a consistent\ + \ underlying trigger, or the continued existence of events with that Reason.\ + \ Events should be treated as informative, best-effort, supplemental data." example: + note: note + reason: reason metadata: generation: 6 finalizers: @@ -261794,48 +279362,71 @@ components: creationTimestamp: 2000-01-23T04:56:07.000+00:00 name: name namespace: namespace - apiVersion: apiVersion - automountServiceAccountToken: true + reportingInstance: reportingInstance + deprecatedCount: 0 kind: kind - imagePullSecrets: - - name: name - - name: name - secrets: - - uid: uid + deprecatedSource: + component: component + host: host + type: type + deprecatedLastTimestamp: 2000-01-23T04:56:07.000+00:00 + regarding: + uid: uid apiVersion: apiVersion kind: kind resourceVersion: resourceVersion fieldPath: fieldPath name: name namespace: namespace - - uid: uid + deprecatedFirstTimestamp: 2000-01-23T04:56:07.000+00:00 + apiVersion: apiVersion + reportingController: reportingController + related: + uid: uid apiVersion: apiVersion kind: kind resourceVersion: resourceVersion fieldPath: fieldPath name: name namespace: namespace + series: + count: 6 + lastObservedTime: 2000-01-23T04:56:07.000+00:00 + eventTime: 2000-01-23T04:56:07.000+00:00 + action: action properties: + action: + description: action is what action was taken/failed regarding to the regarding + object. It is machine-readable. This field cannot be empty for new Events + and it can have at most 128 characters. + type: string apiVersion: description: "APIVersion defines the versioned schema of this representation\ \ of an object. Servers should convert recognized schemas to the latest\ \ internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources" type: string - automountServiceAccountToken: - description: AutomountServiceAccountToken indicates whether pods running - as this service account should have an API token automatically mounted. - Can be overridden at the pod level. - type: boolean - imagePullSecrets: - description: "ImagePullSecrets is a list of references to secrets in the\ - \ same namespace to use for pulling any images in pods that reference\ - \ this ServiceAccount. ImagePullSecrets are distinct from Secrets because\ - \ Secrets can be mounted in the pod, but ImagePullSecrets are only accessed\ - \ by the kubelet. More info: https://kubernetes.io/docs/concepts/containers/images/#specifying-imagepullsecrets-on-a-pod" - items: - $ref: "#/components/schemas/v1.LocalObjectReference" - type: array - x-kubernetes-list-type: atomic + deprecatedCount: + description: deprecatedCount is the deprecated field assuring backward compatibility + with core.v1 Event type. + format: int32 + type: integer + deprecatedFirstTimestamp: + description: deprecatedFirstTimestamp is the deprecated field assuring backward + compatibility with core.v1 Event type. + format: date-time + type: string + deprecatedLastTimestamp: + description: deprecatedLastTimestamp is the deprecated field assuring backward + compatibility with core.v1 Event type. + format: date-time + type: string + deprecatedSource: + $ref: "#/components/schemas/v1.EventSource" + eventTime: + description: eventTime is the time when this Event was first observed. It + is required. + format: date-time + type: string kind: description: "Kind is a string value representing the REST resource this\ \ object represents. Servers may infer this from the endpoint the client\ @@ -261843,34 +279434,47 @@ components: type: string metadata: $ref: "#/components/schemas/v1.ObjectMeta" - secrets: - description: "Secrets is a list of the secrets in the same namespace that\ - \ pods running using this ServiceAccount are allowed to use. Pods are\ - \ only limited to this list if this service account has a \"kubernetes.io/enforce-mountable-secrets\"\ - \ annotation set to \"true\". The \"kubernetes.io/enforce-mountable-secrets\"\ - \ annotation is deprecated since v1.32. Prefer separate namespaces to\ - \ isolate access to mounted secrets. This field should not be used to\ - \ find auto-generated service account token secrets for use outside of\ - \ pods. Instead, tokens can be requested directly using the TokenRequest\ - \ API, or service account token secrets can be manually created. More\ - \ info: https://kubernetes.io/docs/concepts/configuration/secret" - items: - $ref: "#/components/schemas/v1.ObjectReference" - type: array - x-kubernetes-patch-strategy: merge - x-kubernetes-list-type: map - x-kubernetes-list-map-keys: - - name - x-kubernetes-patch-merge-key: name + note: + description: "note is a human-readable description of the status of this\ + \ operation. Maximal length of the note is 1kB, but libraries should be\ + \ prepared to handle values up to 64kB." + type: string + reason: + description: reason is why the action was taken. It is human-readable. This + field cannot be empty for new Events and it can have at most 128 characters. + type: string + regarding: + $ref: "#/components/schemas/v1.ObjectReference" + related: + $ref: "#/components/schemas/v1.ObjectReference" + reportingController: + description: "reportingController is the name of the controller that emitted\ + \ this Event, e.g. `kubernetes.io/kubelet`. This field cannot be empty\ + \ for new Events." + type: string + reportingInstance: + description: "reportingInstance is the ID of the controller instance, e.g.\ + \ `kubelet-xyzf`. This field cannot be empty for new Events and it can\ + \ have at most 128 characters." + type: string + series: + $ref: "#/components/schemas/events.v1.EventSeries" + type: + description: "type is the type of this event (Normal, Warning), new types\ + \ could be added in the future. It is machine-readable. This field cannot\ + \ be empty for new Events." + type: string + required: + - eventTime type: object x-kubernetes-group-version-kind: - - group: "" - kind: ServiceAccount + - group: events.k8s.io + kind: Event version: v1 x-implements: - io.kubernetes.client.common.KubernetesObject - v1.ServiceAccountList: - description: ServiceAccountList is a list of ServiceAccount objects + events.v1.EventList: + description: EventList is a list of Event objects. example: metadata: remainingItemCount: 1 @@ -261882,7 +279486,9 @@ components: apiVersion: apiVersion kind: kind items: - - metadata: + - note: note + reason: reason + metadata: generation: 6 finalizers: - finalizers @@ -261928,28 +279534,41 @@ components: creationTimestamp: 2000-01-23T04:56:07.000+00:00 name: name namespace: namespace - apiVersion: apiVersion - automountServiceAccountToken: true + reportingInstance: reportingInstance + deprecatedCount: 0 kind: kind - imagePullSecrets: - - name: name - - name: name - secrets: - - uid: uid + deprecatedSource: + component: component + host: host + type: type + deprecatedLastTimestamp: 2000-01-23T04:56:07.000+00:00 + regarding: + uid: uid apiVersion: apiVersion kind: kind resourceVersion: resourceVersion fieldPath: fieldPath name: name namespace: namespace - - uid: uid + deprecatedFirstTimestamp: 2000-01-23T04:56:07.000+00:00 + apiVersion: apiVersion + reportingController: reportingController + related: + uid: uid apiVersion: apiVersion kind: kind resourceVersion: resourceVersion fieldPath: fieldPath name: name namespace: namespace - - metadata: + series: + count: 6 + lastObservedTime: 2000-01-23T04:56:07.000+00:00 + eventTime: 2000-01-23T04:56:07.000+00:00 + action: action + - note: note + reason: reason + metadata: generation: 6 finalizers: - finalizers @@ -261995,27 +279614,38 @@ components: creationTimestamp: 2000-01-23T04:56:07.000+00:00 name: name namespace: namespace - apiVersion: apiVersion - automountServiceAccountToken: true + reportingInstance: reportingInstance + deprecatedCount: 0 kind: kind - imagePullSecrets: - - name: name - - name: name - secrets: - - uid: uid + deprecatedSource: + component: component + host: host + type: type + deprecatedLastTimestamp: 2000-01-23T04:56:07.000+00:00 + regarding: + uid: uid apiVersion: apiVersion kind: kind resourceVersion: resourceVersion fieldPath: fieldPath name: name namespace: namespace - - uid: uid + deprecatedFirstTimestamp: 2000-01-23T04:56:07.000+00:00 + apiVersion: apiVersion + reportingController: reportingController + related: + uid: uid apiVersion: apiVersion kind: kind resourceVersion: resourceVersion fieldPath: fieldPath name: name namespace: namespace + series: + count: 6 + lastObservedTime: 2000-01-23T04:56:07.000+00:00 + eventTime: 2000-01-23T04:56:07.000+00:00 + action: action properties: apiVersion: description: "APIVersion defines the versioned schema of this representation\ @@ -262023,9 +279653,9 @@ components: \ internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources" type: string items: - description: "List of ServiceAccounts. More info: https://kubernetes.io/docs/tasks/configure-pod-container/configure-service-account/" + description: items is a list of schema objects. items: - $ref: "#/components/schemas/v1.ServiceAccount" + $ref: "#/components/schemas/events.v1.Event" type: array kind: description: "Kind is a string value representing the REST resource this\ @@ -262038,45 +279668,320 @@ components: - items type: object x-kubernetes-group-version-kind: - - group: "" - kind: ServiceAccountList + - group: events.k8s.io + kind: EventList version: v1 x-implements: - io.kubernetes.client.common.KubernetesListObject - v1.ServiceAccountTokenProjection: - description: ServiceAccountTokenProjection represents a projected service account - token volume. This projection can be used to insert a service account token - into the pods runtime filesystem for use against APIs (Kubernetes API Server - or otherwise). + events.v1.EventSeries: + description: "EventSeries contain information on series of events, i.e. thing\ + \ that was/is happening continuously for some time. How often to update the\ + \ EventSeries is up to the event reporters. The default event reporter in\ + \ \"k8s.io/client-go/tools/events/event_broadcaster.go\" shows how this struct\ + \ is updated on heartbeats and can guide customized reporter implementations." example: - path: path - audience: audience - expirationSeconds: 3 + count: 6 + lastObservedTime: 2000-01-23T04:56:07.000+00:00 properties: - audience: - description: "audience is the intended audience of the token. A recipient\ - \ of a token must identify itself with an identifier specified in the\ - \ audience of the token, and otherwise should reject the token. The audience\ - \ defaults to the identifier of the apiserver." + count: + description: count is the number of occurrences in this series up to the + last heartbeat time. + format: int32 + type: integer + lastObservedTime: + description: lastObservedTime is the time when last Event from the series + was seen before last heartbeat. + format: date-time type: string - expirationSeconds: - description: "expirationSeconds is the requested duration of validity of\ - \ the service account token. As the token approaches expiration, the kubelet\ - \ volume plugin will proactively rotate the service account token. The\ - \ kubelet will start trying to rotate the token if the token is older\ - \ than 80 percent of its time to live or if the token is older than 24\ - \ hours.Defaults to 1 hour and must be at least 10 minutes." - format: int64 + required: + - count + - lastObservedTime + type: object + v1.ExemptPriorityLevelConfiguration: + description: "ExemptPriorityLevelConfiguration describes the configurable aspects\ + \ of the handling of exempt requests. In the mandatory exempt configuration\ + \ object the values in the fields here can be modified by authorized users,\ + \ unlike the rest of the `spec`." + example: + lendablePercent: 0 + nominalConcurrencyShares: 6 + properties: + lendablePercent: + description: |- + `lendablePercent` prescribes the fraction of the level's NominalCL that can be borrowed by other priority levels. This value of this field must be between 0 and 100, inclusive, and it defaults to 0. The number of seats that other levels can borrow from this level, known as this level's LendableConcurrencyLimit (LendableCL), is defined as follows. + + LendableCL(i) = round( NominalCL(i) * lendablePercent(i)/100.0 ) + format: int32 type: integer - path: - description: path is the path relative to the mount point of the file to - project the token into. + nominalConcurrencyShares: + description: |- + `nominalConcurrencyShares` (NCS) contributes to the computation of the NominalConcurrencyLimit (NominalCL) of this level. This is the number of execution seats nominally reserved for this priority level. This DOES NOT limit the dispatching from this priority level but affects the other priority levels through the borrowing mechanism. The server's concurrency limit (ServerCL) is divided among all the priority levels in proportion to their NCS values: + + NominalCL(i) = ceil( ServerCL * NCS(i) / sum_ncs ) sum_ncs = sum[priority level k] NCS(k) + + Bigger numbers mean a larger nominal concurrency limit, at the expense of every other priority level. This field has a default value of zero. + format: int32 + type: integer + type: object + v1.FlowDistinguisherMethod: + description: FlowDistinguisherMethod specifies the method of a flow distinguisher. + example: + type: type + properties: + type: + description: '`type` is the type of flow distinguisher method The supported + types are "ByUser" and "ByNamespace". Required.' type: string required: - - path + - type type: object - v1.ServiceList: - description: ServiceList holds a list of services. + v1.FlowSchema: + description: "FlowSchema defines the schema of a group of flows. Note that a\ + \ flow is made up of a set of inbound API requests with similar attributes\ + \ and is identified by a pair of strings: the name of the FlowSchema and a\ + \ \"flow distinguisher\"." + example: + metadata: + generation: 6 + finalizers: + - finalizers + - finalizers + resourceVersion: resourceVersion + annotations: + key: annotations + generateName: generateName + deletionTimestamp: 2000-01-23T04:56:07.000+00:00 + labels: + key: labels + ownerReferences: + - uid: uid + controller: true + apiVersion: apiVersion + kind: kind + name: name + blockOwnerDeletion: true + - uid: uid + controller: true + apiVersion: apiVersion + kind: kind + name: name + blockOwnerDeletion: true + selfLink: selfLink + deletionGracePeriodSeconds: 0 + uid: uid + managedFields: + - apiVersion: apiVersion + fieldsV1: "{}" + manager: manager + subresource: subresource + time: 2000-01-23T04:56:07.000+00:00 + operation: operation + fieldsType: fieldsType + - apiVersion: apiVersion + fieldsV1: "{}" + manager: manager + subresource: subresource + time: 2000-01-23T04:56:07.000+00:00 + operation: operation + fieldsType: fieldsType + creationTimestamp: 2000-01-23T04:56:07.000+00:00 + name: name + namespace: namespace + apiVersion: apiVersion + kind: kind + spec: + priorityLevelConfiguration: + name: name + matchingPrecedence: 0 + rules: + - nonResourceRules: + - verbs: + - verbs + - verbs + nonResourceURLs: + - nonResourceURLs + - nonResourceURLs + - verbs: + - verbs + - verbs + nonResourceURLs: + - nonResourceURLs + - nonResourceURLs + resourceRules: + - clusterScope: true + resources: + - resources + - resources + verbs: + - verbs + - verbs + apiGroups: + - apiGroups + - apiGroups + namespaces: + - namespaces + - namespaces + - clusterScope: true + resources: + - resources + - resources + verbs: + - verbs + - verbs + apiGroups: + - apiGroups + - apiGroups + namespaces: + - namespaces + - namespaces + subjects: + - kind: kind + serviceAccount: + name: name + namespace: namespace + user: + name: name + group: + name: name + - kind: kind + serviceAccount: + name: name + namespace: namespace + user: + name: name + group: + name: name + - nonResourceRules: + - verbs: + - verbs + - verbs + nonResourceURLs: + - nonResourceURLs + - nonResourceURLs + - verbs: + - verbs + - verbs + nonResourceURLs: + - nonResourceURLs + - nonResourceURLs + resourceRules: + - clusterScope: true + resources: + - resources + - resources + verbs: + - verbs + - verbs + apiGroups: + - apiGroups + - apiGroups + namespaces: + - namespaces + - namespaces + - clusterScope: true + resources: + - resources + - resources + verbs: + - verbs + - verbs + apiGroups: + - apiGroups + - apiGroups + namespaces: + - namespaces + - namespaces + subjects: + - kind: kind + serviceAccount: + name: name + namespace: namespace + user: + name: name + group: + name: name + - kind: kind + serviceAccount: + name: name + namespace: namespace + user: + name: name + group: + name: name + distinguisherMethod: + type: type + status: + conditions: + - reason: reason + lastTransitionTime: 2000-01-23T04:56:07.000+00:00 + message: message + type: type + status: status + - reason: reason + lastTransitionTime: 2000-01-23T04:56:07.000+00:00 + message: message + type: type + status: status + properties: + apiVersion: + description: "APIVersion defines the versioned schema of this representation\ + \ of an object. Servers should convert recognized schemas to the latest\ + \ internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources" + type: string + kind: + description: "Kind is a string value representing the REST resource this\ + \ object represents. Servers may infer this from the endpoint the client\ + \ submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds" + type: string + metadata: + $ref: "#/components/schemas/v1.ObjectMeta" + spec: + $ref: "#/components/schemas/v1.FlowSchemaSpec" + status: + $ref: "#/components/schemas/v1.FlowSchemaStatus" + required: + - spec + type: object + x-kubernetes-group-version-kind: + - group: flowcontrol.apiserver.k8s.io + kind: FlowSchema + version: v1 + x-implements: + - io.kubernetes.client.common.KubernetesObject + v1.FlowSchemaCondition: + description: FlowSchemaCondition describes conditions for a FlowSchema. + example: + reason: reason + lastTransitionTime: 2000-01-23T04:56:07.000+00:00 + message: message + type: type + status: status + properties: + lastTransitionTime: + description: '`lastTransitionTime` is the last time the condition transitioned + from one status to another.' + format: date-time + type: string + message: + description: '`message` is a human-readable message indicating details about + last transition.' + type: string + reason: + description: "`reason` is a unique, one-word, CamelCase reason for the condition's\ + \ last transition." + type: string + status: + description: "`status` is the status of the condition. Should be specified\ + \ and set to one of True, False, Unknown." + type: string + type: + description: '`type` is the type of the condition. Required.' + type: string + required: + - type + type: object + v1.FlowSchemaList: + description: FlowSchemaList is a list of FlowSchema objects. example: metadata: remainingItemCount: 1 @@ -262137,84 +280042,137 @@ components: apiVersion: apiVersion kind: kind spec: - clusterIPs: - - clusterIPs - - clusterIPs - healthCheckNodePort: 0 - ipFamilyPolicy: ipFamilyPolicy - externalIPs: - - externalIPs - - externalIPs - sessionAffinity: sessionAffinity - trafficDistribution: trafficDistribution - allocateLoadBalancerNodePorts: true - ports: - - protocol: protocol - port: 1 - appProtocol: appProtocol - name: name - nodePort: 6 - targetPort: targetPort - - protocol: protocol - port: 1 - appProtocol: appProtocol + priorityLevelConfiguration: name: name - nodePort: 6 - targetPort: targetPort - type: type - loadBalancerClass: loadBalancerClass - sessionAffinityConfig: - clientIP: - timeoutSeconds: 5 - ipFamilies: - - ipFamilies - - ipFamilies - loadBalancerIP: loadBalancerIP - externalName: externalName - loadBalancerSourceRanges: - - loadBalancerSourceRanges - - loadBalancerSourceRanges - externalTrafficPolicy: externalTrafficPolicy - selector: - key: selector - publishNotReadyAddresses: true - internalTrafficPolicy: internalTrafficPolicy - clusterIP: clusterIP - status: - loadBalancer: - ingress: - - ipMode: ipMode - hostname: hostname - ip: ip - ports: - - protocol: protocol - port: 2 - error: error - - protocol: protocol - port: 2 - error: error - - ipMode: ipMode - hostname: hostname - ip: ip - ports: - - protocol: protocol - port: 2 - error: error - - protocol: protocol - port: 2 - error: error + matchingPrecedence: 0 + rules: + - nonResourceRules: + - verbs: + - verbs + - verbs + nonResourceURLs: + - nonResourceURLs + - nonResourceURLs + - verbs: + - verbs + - verbs + nonResourceURLs: + - nonResourceURLs + - nonResourceURLs + resourceRules: + - clusterScope: true + resources: + - resources + - resources + verbs: + - verbs + - verbs + apiGroups: + - apiGroups + - apiGroups + namespaces: + - namespaces + - namespaces + - clusterScope: true + resources: + - resources + - resources + verbs: + - verbs + - verbs + apiGroups: + - apiGroups + - apiGroups + namespaces: + - namespaces + - namespaces + subjects: + - kind: kind + serviceAccount: + name: name + namespace: namespace + user: + name: name + group: + name: name + - kind: kind + serviceAccount: + name: name + namespace: namespace + user: + name: name + group: + name: name + - nonResourceRules: + - verbs: + - verbs + - verbs + nonResourceURLs: + - nonResourceURLs + - nonResourceURLs + - verbs: + - verbs + - verbs + nonResourceURLs: + - nonResourceURLs + - nonResourceURLs + resourceRules: + - clusterScope: true + resources: + - resources + - resources + verbs: + - verbs + - verbs + apiGroups: + - apiGroups + - apiGroups + namespaces: + - namespaces + - namespaces + - clusterScope: true + resources: + - resources + - resources + verbs: + - verbs + - verbs + apiGroups: + - apiGroups + - apiGroups + namespaces: + - namespaces + - namespaces + subjects: + - kind: kind + serviceAccount: + name: name + namespace: namespace + user: + name: name + group: + name: name + - kind: kind + serviceAccount: + name: name + namespace: namespace + user: + name: name + group: + name: name + distinguisherMethod: + type: type + status: conditions: - reason: reason lastTransitionTime: 2000-01-23T04:56:07.000+00:00 message: message type: type - observedGeneration: 5 status: status - reason: reason lastTransitionTime: 2000-01-23T04:56:07.000+00:00 message: message type: type - observedGeneration: 5 status: status - metadata: generation: 6 @@ -262265,84 +280223,137 @@ components: apiVersion: apiVersion kind: kind spec: - clusterIPs: - - clusterIPs - - clusterIPs - healthCheckNodePort: 0 - ipFamilyPolicy: ipFamilyPolicy - externalIPs: - - externalIPs - - externalIPs - sessionAffinity: sessionAffinity - trafficDistribution: trafficDistribution - allocateLoadBalancerNodePorts: true - ports: - - protocol: protocol - port: 1 - appProtocol: appProtocol - name: name - nodePort: 6 - targetPort: targetPort - - protocol: protocol - port: 1 - appProtocol: appProtocol + priorityLevelConfiguration: name: name - nodePort: 6 - targetPort: targetPort - type: type - loadBalancerClass: loadBalancerClass - sessionAffinityConfig: - clientIP: - timeoutSeconds: 5 - ipFamilies: - - ipFamilies - - ipFamilies - loadBalancerIP: loadBalancerIP - externalName: externalName - loadBalancerSourceRanges: - - loadBalancerSourceRanges - - loadBalancerSourceRanges - externalTrafficPolicy: externalTrafficPolicy - selector: - key: selector - publishNotReadyAddresses: true - internalTrafficPolicy: internalTrafficPolicy - clusterIP: clusterIP + matchingPrecedence: 0 + rules: + - nonResourceRules: + - verbs: + - verbs + - verbs + nonResourceURLs: + - nonResourceURLs + - nonResourceURLs + - verbs: + - verbs + - verbs + nonResourceURLs: + - nonResourceURLs + - nonResourceURLs + resourceRules: + - clusterScope: true + resources: + - resources + - resources + verbs: + - verbs + - verbs + apiGroups: + - apiGroups + - apiGroups + namespaces: + - namespaces + - namespaces + - clusterScope: true + resources: + - resources + - resources + verbs: + - verbs + - verbs + apiGroups: + - apiGroups + - apiGroups + namespaces: + - namespaces + - namespaces + subjects: + - kind: kind + serviceAccount: + name: name + namespace: namespace + user: + name: name + group: + name: name + - kind: kind + serviceAccount: + name: name + namespace: namespace + user: + name: name + group: + name: name + - nonResourceRules: + - verbs: + - verbs + - verbs + nonResourceURLs: + - nonResourceURLs + - nonResourceURLs + - verbs: + - verbs + - verbs + nonResourceURLs: + - nonResourceURLs + - nonResourceURLs + resourceRules: + - clusterScope: true + resources: + - resources + - resources + verbs: + - verbs + - verbs + apiGroups: + - apiGroups + - apiGroups + namespaces: + - namespaces + - namespaces + - clusterScope: true + resources: + - resources + - resources + verbs: + - verbs + - verbs + apiGroups: + - apiGroups + - apiGroups + namespaces: + - namespaces + - namespaces + subjects: + - kind: kind + serviceAccount: + name: name + namespace: namespace + user: + name: name + group: + name: name + - kind: kind + serviceAccount: + name: name + namespace: namespace + user: + name: name + group: + name: name + distinguisherMethod: + type: type status: - loadBalancer: - ingress: - - ipMode: ipMode - hostname: hostname - ip: ip - ports: - - protocol: protocol - port: 2 - error: error - - protocol: protocol - port: 2 - error: error - - ipMode: ipMode - hostname: hostname - ip: ip - ports: - - protocol: protocol - port: 2 - error: error - - protocol: protocol - port: 2 - error: error conditions: - reason: reason lastTransitionTime: 2000-01-23T04:56:07.000+00:00 message: message type: type - observedGeneration: 5 status: status - reason: reason lastTransitionTime: 2000-01-23T04:56:07.000+00:00 message: message type: type - observedGeneration: 5 status: status properties: apiVersion: @@ -262351,9 +280362,9 @@ components: \ internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources" type: string items: - description: List of services + description: '`items` is a list of FlowSchemas.' items: - $ref: "#/components/schemas/v1.Service" + $ref: "#/components/schemas/v1.FlowSchema" type: array kind: description: "Kind is a string value representing the REST resource this\ @@ -262366,1911 +280377,1376 @@ components: - items type: object x-kubernetes-group-version-kind: - - group: "" - kind: ServiceList + - group: flowcontrol.apiserver.k8s.io + kind: FlowSchemaList version: v1 x-implements: - io.kubernetes.client.common.KubernetesListObject - v1.ServicePort: - description: ServicePort contains information on service's port. - example: - protocol: protocol - port: 1 - appProtocol: appProtocol - name: name - nodePort: 6 - targetPort: targetPort - properties: - appProtocol: - description: |- - The application protocol for this port. This is used as a hint for implementations to offer richer behavior for protocols that they understand. This field follows standard Kubernetes label syntax. Valid values are either: - - * Un-prefixed protocol names - reserved for IANA standard service names (as per RFC-6335 and https://www.iana.org/assignments/service-names). - - * Kubernetes-defined prefixed names: - * 'kubernetes.io/h2c' - HTTP/2 prior knowledge over cleartext as described in https://www.rfc-editor.org/rfc/rfc9113.html#name-starting-http-2-with-prior- - * 'kubernetes.io/ws' - WebSocket over cleartext as described in https://www.rfc-editor.org/rfc/rfc6455 - * 'kubernetes.io/wss' - WebSocket over TLS as described in https://www.rfc-editor.org/rfc/rfc6455 - - * Other protocols should use implementation-defined prefixed names such as mycompany.com/my-custom-protocol. - type: string - name: - description: "The name of this port within the service. This must be a DNS_LABEL.\ - \ All ports within a ServiceSpec must have unique names. When considering\ - \ the endpoints for a Service, this must match the 'name' field in the\ - \ EndpointPort. Optional if only one ServicePort is defined on this service." - type: string - nodePort: - description: "The port on each node on which this service is exposed when\ - \ type is NodePort or LoadBalancer. Usually assigned by the system. If\ - \ a value is specified, in-range, and not in use it will be used, otherwise\ - \ the operation will fail. If not specified, a port will be allocated\ - \ if this Service requires one. If this field is specified when creating\ - \ a Service which does not need it, creation will fail. This field will\ - \ be wiped when updating a Service to no longer need it (e.g. changing\ - \ type from NodePort to ClusterIP). More info: https://kubernetes.io/docs/concepts/services-networking/service/#type-nodeport" - format: int32 - type: integer - port: - description: The port that will be exposed by this service. - format: int32 - type: integer - protocol: - description: "The IP protocol for this port. Supports \"TCP\", \"UDP\",\ - \ and \"SCTP\". Default is TCP." - type: string - targetPort: - description: "IntOrString is a type that can hold an int32 or a string.\ - \ When used in JSON or YAML marshalling and unmarshalling, it produces\ - \ or consumes the inner type. This allows you to have, for example, a\ - \ JSON field that can accept a name or number." - format: int-or-string - type: string - required: - - port - type: object - v1.ServiceSpec: - description: ServiceSpec describes the attributes that a user creates on a service. + v1.FlowSchemaSpec: + description: FlowSchemaSpec describes how the FlowSchema's specification looks + like. example: - clusterIPs: - - clusterIPs - - clusterIPs - healthCheckNodePort: 0 - ipFamilyPolicy: ipFamilyPolicy - externalIPs: - - externalIPs - - externalIPs - sessionAffinity: sessionAffinity - trafficDistribution: trafficDistribution - allocateLoadBalancerNodePorts: true - ports: - - protocol: protocol - port: 1 - appProtocol: appProtocol - name: name - nodePort: 6 - targetPort: targetPort - - protocol: protocol - port: 1 - appProtocol: appProtocol + priorityLevelConfiguration: name: name - nodePort: 6 - targetPort: targetPort - type: type - loadBalancerClass: loadBalancerClass - sessionAffinityConfig: - clientIP: - timeoutSeconds: 5 - ipFamilies: - - ipFamilies - - ipFamilies - loadBalancerIP: loadBalancerIP - externalName: externalName - loadBalancerSourceRanges: - - loadBalancerSourceRanges - - loadBalancerSourceRanges - externalTrafficPolicy: externalTrafficPolicy - selector: - key: selector - publishNotReadyAddresses: true - internalTrafficPolicy: internalTrafficPolicy - clusterIP: clusterIP + matchingPrecedence: 0 + rules: + - nonResourceRules: + - verbs: + - verbs + - verbs + nonResourceURLs: + - nonResourceURLs + - nonResourceURLs + - verbs: + - verbs + - verbs + nonResourceURLs: + - nonResourceURLs + - nonResourceURLs + resourceRules: + - clusterScope: true + resources: + - resources + - resources + verbs: + - verbs + - verbs + apiGroups: + - apiGroups + - apiGroups + namespaces: + - namespaces + - namespaces + - clusterScope: true + resources: + - resources + - resources + verbs: + - verbs + - verbs + apiGroups: + - apiGroups + - apiGroups + namespaces: + - namespaces + - namespaces + subjects: + - kind: kind + serviceAccount: + name: name + namespace: namespace + user: + name: name + group: + name: name + - kind: kind + serviceAccount: + name: name + namespace: namespace + user: + name: name + group: + name: name + - nonResourceRules: + - verbs: + - verbs + - verbs + nonResourceURLs: + - nonResourceURLs + - nonResourceURLs + - verbs: + - verbs + - verbs + nonResourceURLs: + - nonResourceURLs + - nonResourceURLs + resourceRules: + - clusterScope: true + resources: + - resources + - resources + verbs: + - verbs + - verbs + apiGroups: + - apiGroups + - apiGroups + namespaces: + - namespaces + - namespaces + - clusterScope: true + resources: + - resources + - resources + verbs: + - verbs + - verbs + apiGroups: + - apiGroups + - apiGroups + namespaces: + - namespaces + - namespaces + subjects: + - kind: kind + serviceAccount: + name: name + namespace: namespace + user: + name: name + group: + name: name + - kind: kind + serviceAccount: + name: name + namespace: namespace + user: + name: name + group: + name: name + distinguisherMethod: + type: type properties: - allocateLoadBalancerNodePorts: - description: "allocateLoadBalancerNodePorts defines if NodePorts will be\ - \ automatically allocated for services with type LoadBalancer. Default\ - \ is \"true\". It may be set to \"false\" if the cluster load-balancer\ - \ does not rely on NodePorts. If the caller requests specific NodePorts\ - \ (by specifying a value), those requests will be respected, regardless\ - \ of this field. This field may only be set for services with type LoadBalancer\ - \ and will be cleared if the type is changed to any other type." - type: boolean - clusterIP: - description: "clusterIP is the IP address of the service and is usually\ - \ assigned randomly. If an address is specified manually, is in-range\ - \ (as per system configuration), and is not in use, it will be allocated\ - \ to the service; otherwise creation of the service will fail. This field\ - \ may not be changed through updates unless the type field is also being\ - \ changed to ExternalName (which requires this field to be blank) or the\ - \ type field is being changed from ExternalName (in which case this field\ - \ may optionally be specified, as describe above). Valid values are \"\ - None\", empty string (\"\"), or a valid IP address. Setting this to \"\ - None\" makes a \"headless service\" (no virtual IP), which is useful when\ - \ direct endpoint connections are preferred and proxying is not required.\ - \ Only applies to types ClusterIP, NodePort, and LoadBalancer. If this\ - \ field is specified when creating a Service of type ExternalName, creation\ - \ will fail. This field will be wiped when updating a Service to type\ - \ ExternalName. More info: https://kubernetes.io/docs/concepts/services-networking/service/#virtual-ips-and-service-proxies" - type: string - clusterIPs: - description: |- - ClusterIPs is a list of IP addresses assigned to this service, and are usually assigned randomly. If an address is specified manually, is in-range (as per system configuration), and is not in use, it will be allocated to the service; otherwise creation of the service will fail. This field may not be changed through updates unless the type field is also being changed to ExternalName (which requires this field to be empty) or the type field is being changed from ExternalName (in which case this field may optionally be specified, as describe above). Valid values are "None", empty string (""), or a valid IP address. Setting this to "None" makes a "headless service" (no virtual IP), which is useful when direct endpoint connections are preferred and proxying is not required. Only applies to types ClusterIP, NodePort, and LoadBalancer. If this field is specified when creating a Service of type ExternalName, creation will fail. This field will be wiped when updating a Service to type ExternalName. If this field is not specified, it will be initialized from the clusterIP field. If this field is specified, clients must ensure that clusterIPs[0] and clusterIP have the same value. - - This field may hold a maximum of two entries (dual-stack IPs, in either order). These IPs must correspond to the values of the ipFamilies field. Both clusterIPs and ipFamilies are governed by the ipFamilyPolicy field. More info: https://kubernetes.io/docs/concepts/services-networking/service/#virtual-ips-and-service-proxies - items: - type: string - type: array - x-kubernetes-list-type: atomic - externalIPs: - description: externalIPs is a list of IP addresses for which nodes in the - cluster will also accept traffic for this service. These IPs are not - managed by Kubernetes. The user is responsible for ensuring that traffic - arrives at a node with this IP. A common example is external load-balancers - that are not part of the Kubernetes system. - items: - type: string - type: array - x-kubernetes-list-type: atomic - externalName: - description: externalName is the external reference that discovery mechanisms - will return as an alias for this service (e.g. a DNS CNAME record). No - proxying will be involved. Must be a lowercase RFC-1123 hostname (https://tools.ietf.org/html/rfc1123) - and requires `type` to be "ExternalName". - type: string - externalTrafficPolicy: - description: "externalTrafficPolicy describes how nodes distribute service\ - \ traffic they receive on one of the Service's \"externally-facing\" addresses\ - \ (NodePorts, ExternalIPs, and LoadBalancer IPs). If set to \"Local\"\ - , the proxy will configure the service in a way that assumes that external\ - \ load balancers will take care of balancing the service traffic between\ - \ nodes, and so each node will deliver traffic only to the node-local\ - \ endpoints of the service, without masquerading the client source IP.\ - \ (Traffic mistakenly sent to a node with no endpoints will be dropped.)\ - \ The default value, \"Cluster\", uses the standard behavior of routing\ - \ to all endpoints evenly (possibly modified by topology and other features).\ - \ Note that traffic sent to an External IP or LoadBalancer IP from within\ - \ the cluster will always get \"Cluster\" semantics, but clients sending\ - \ to a NodePort from within the cluster may need to take traffic policy\ - \ into account when picking a node." - type: string - healthCheckNodePort: - description: "healthCheckNodePort specifies the healthcheck nodePort for\ - \ the service. This only applies when type is set to LoadBalancer and\ - \ externalTrafficPolicy is set to Local. If a value is specified, is in-range,\ - \ and is not in use, it will be used. If not specified, a value will\ - \ be automatically allocated. External systems (e.g. load-balancers)\ - \ can use this port to determine if a given node holds endpoints for this\ - \ service or not. If this field is specified when creating a Service\ - \ which does not need it, creation will fail. This field will be wiped\ - \ when updating a Service to no longer need it (e.g. changing type). This\ - \ field cannot be updated once set." + distinguisherMethod: + $ref: "#/components/schemas/v1.FlowDistinguisherMethod" + matchingPrecedence: + description: "`matchingPrecedence` is used to choose among the FlowSchemas\ + \ that match a given request. The chosen FlowSchema is among those with\ + \ the numerically lowest (which we take to be logically highest) MatchingPrecedence.\ + \ Each MatchingPrecedence value must be ranged in [1,10000]. Note that\ + \ if the precedence is not specified, it will be set to 1000 as default." format: int32 type: integer - internalTrafficPolicy: - description: "InternalTrafficPolicy describes how nodes distribute service\ - \ traffic they receive on the ClusterIP. If set to \"Local\", the proxy\ - \ will assume that pods only want to talk to endpoints of the service\ - \ on the same node as the pod, dropping the traffic if there are no local\ - \ endpoints. The default value, \"Cluster\", uses the standard behavior\ - \ of routing to all endpoints evenly (possibly modified by topology and\ - \ other features)." - type: string - ipFamilies: - description: |- - IPFamilies is a list of IP families (e.g. IPv4, IPv6) assigned to this service. This field is usually assigned automatically based on cluster configuration and the ipFamilyPolicy field. If this field is specified manually, the requested family is available in the cluster, and ipFamilyPolicy allows it, it will be used; otherwise creation of the service will fail. This field is conditionally mutable: it allows for adding or removing a secondary IP family, but it does not allow changing the primary IP family of the Service. Valid values are "IPv4" and "IPv6". This field only applies to Services of types ClusterIP, NodePort, and LoadBalancer, and does apply to "headless" services. This field will be wiped when updating a Service to type ExternalName. - - This field may hold a maximum of two entries (dual-stack families, in either order). These families must correspond to the values of the clusterIPs field, if specified. Both clusterIPs and ipFamilies are governed by the ipFamilyPolicy field. - items: - type: string - type: array - x-kubernetes-list-type: atomic - ipFamilyPolicy: - description: "IPFamilyPolicy represents the dual-stack-ness requested or\ - \ required by this Service. If there is no value provided, then this field\ - \ will be set to SingleStack. Services can be \"SingleStack\" (a single\ - \ IP family), \"PreferDualStack\" (two IP families on dual-stack configured\ - \ clusters or a single IP family on single-stack clusters), or \"RequireDualStack\"\ - \ (two IP families on dual-stack configured clusters, otherwise fail).\ - \ The ipFamilies and clusterIPs fields depend on the value of this field.\ - \ This field will be wiped when updating a service to type ExternalName." - type: string - loadBalancerClass: - description: "loadBalancerClass is the class of the load balancer implementation\ - \ this Service belongs to. If specified, the value of this field must\ - \ be a label-style identifier, with an optional prefix, e.g. \"internal-vip\"\ - \ or \"example.com/internal-vip\". Unprefixed names are reserved for end-users.\ - \ This field can only be set when the Service type is 'LoadBalancer'.\ - \ If not set, the default load balancer implementation is used, today\ - \ this is typically done through the cloud provider integration, but should\ - \ apply for any default implementation. If set, it is assumed that a load\ - \ balancer implementation is watching for Services with a matching class.\ - \ Any default load balancer implementation (e.g. cloud providers) should\ - \ ignore Services that set this field. This field can only be set when\ - \ creating or updating a Service to type 'LoadBalancer'. Once set, it\ - \ can not be changed. This field will be wiped when a service is updated\ - \ to a non 'LoadBalancer' type." - type: string - loadBalancerIP: - description: "Only applies to Service Type: LoadBalancer. This feature depends\ - \ on whether the underlying cloud-provider supports specifying the loadBalancerIP\ - \ when a load balancer is created. This field will be ignored if the cloud-provider\ - \ does not support the feature. Deprecated: This field was under-specified\ - \ and its meaning varies across implementations. Using it is non-portable\ - \ and it may not support dual-stack. Users are encouraged to use implementation-specific\ - \ annotations when available." - type: string - loadBalancerSourceRanges: - description: "If specified and supported by the platform, this will restrict\ - \ traffic through the cloud-provider load-balancer will be restricted\ - \ to the specified client IPs. This field will be ignored if the cloud-provider\ - \ does not support the feature.\" More info: https://kubernetes.io/docs/tasks/access-application-cluster/create-external-load-balancer/" + priorityLevelConfiguration: + $ref: "#/components/schemas/v1.PriorityLevelConfigurationReference" + rules: + description: "`rules` describes which requests will match this flow schema.\ + \ This FlowSchema matches a request if and only if at least one member\ + \ of rules matches the request. if it is an empty slice, there will be\ + \ no requests matching the FlowSchema." items: - type: string + $ref: "#/components/schemas/v1.PolicyRulesWithSubjects" type: array x-kubernetes-list-type: atomic - ports: - description: "The list of ports that are exposed by this service. More info:\ - \ https://kubernetes.io/docs/concepts/services-networking/service/#virtual-ips-and-service-proxies" - items: - $ref: "#/components/schemas/v1.ServicePort" - type: array - x-kubernetes-patch-strategy: merge - x-kubernetes-list-type: map - x-kubernetes-list-map-keys: - - port - - protocol - x-kubernetes-patch-merge-key: port - publishNotReadyAddresses: - description: publishNotReadyAddresses indicates that any agent which deals - with endpoints for this Service should disregard any indications of ready/not-ready. - The primary use case for setting this field is for a StatefulSet's Headless - Service to propagate SRV DNS records for its Pods for the purpose of peer - discovery. The Kubernetes controllers that generate Endpoints and EndpointSlice - resources for Services interpret this to mean that all endpoints are considered - "ready" even if the Pods themselves are not. Agents which consume only - Kubernetes generated endpoints through the Endpoints or EndpointSlice - resources can safely assume this behavior. - type: boolean - selector: - additionalProperties: - type: string - description: "Route service traffic to pods with label keys and values matching\ - \ this selector. If empty or not present, the service is assumed to have\ - \ an external process managing its endpoints, which Kubernetes will not\ - \ modify. Only applies to types ClusterIP, NodePort, and LoadBalancer.\ - \ Ignored if type is ExternalName. More info: https://kubernetes.io/docs/concepts/services-networking/service/" - type: object - x-kubernetes-map-type: atomic - sessionAffinity: - description: "Supports \"ClientIP\" and \"None\". Used to maintain session\ - \ affinity. Enable client IP based session affinity. Must be ClientIP\ - \ or None. Defaults to None. More info: https://kubernetes.io/docs/concepts/services-networking/service/#virtual-ips-and-service-proxies" - type: string - sessionAffinityConfig: - $ref: "#/components/schemas/v1.SessionAffinityConfig" - trafficDistribution: - description: "TrafficDistribution offers a way to express preferences for\ - \ how traffic is distributed to Service endpoints. Implementations can\ - \ use this field as a hint, but are not required to guarantee strict adherence.\ - \ If the field is not set, the implementation will apply its default routing\ - \ strategy. If set to \"PreferClose\", implementations should prioritize\ - \ endpoints that are in the same zone." - type: string - type: - description: "type determines how the Service is exposed. Defaults to ClusterIP.\ - \ Valid options are ExternalName, ClusterIP, NodePort, and LoadBalancer.\ - \ \"ClusterIP\" allocates a cluster-internal IP address for load-balancing\ - \ to endpoints. Endpoints are determined by the selector or if that is\ - \ not specified, by manual construction of an Endpoints object or EndpointSlice\ - \ objects. If clusterIP is \"None\", no virtual IP is allocated and the\ - \ endpoints are published as a set of endpoints rather than a virtual\ - \ IP. \"NodePort\" builds on ClusterIP and allocates a port on every node\ - \ which routes to the same endpoints as the clusterIP. \"LoadBalancer\"\ - \ builds on NodePort and creates an external load-balancer (if supported\ - \ in the current cloud) which routes to the same endpoints as the clusterIP.\ - \ \"ExternalName\" aliases this service to the specified externalName.\ - \ Several other fields do not apply to ExternalName services. More info:\ - \ https://kubernetes.io/docs/concepts/services-networking/service/#publishing-services-service-types" - type: string + required: + - priorityLevelConfiguration type: object - v1.ServiceStatus: - description: ServiceStatus represents the current status of a service. + v1.FlowSchemaStatus: + description: FlowSchemaStatus represents the current state of a FlowSchema. example: - loadBalancer: - ingress: - - ipMode: ipMode - hostname: hostname - ip: ip - ports: - - protocol: protocol - port: 2 - error: error - - protocol: protocol - port: 2 - error: error - - ipMode: ipMode - hostname: hostname - ip: ip - ports: - - protocol: protocol - port: 2 - error: error - - protocol: protocol - port: 2 - error: error conditions: - reason: reason lastTransitionTime: 2000-01-23T04:56:07.000+00:00 message: message type: type - observedGeneration: 5 status: status - reason: reason lastTransitionTime: 2000-01-23T04:56:07.000+00:00 message: message type: type - observedGeneration: 5 status: status properties: conditions: - description: Current service state + description: '`conditions` is a list of the current states of FlowSchema.' items: - $ref: "#/components/schemas/v1.Condition" + $ref: "#/components/schemas/v1.FlowSchemaCondition" type: array x-kubernetes-patch-strategy: merge x-kubernetes-list-type: map x-kubernetes-list-map-keys: - type x-kubernetes-patch-merge-key: type - loadBalancer: - $ref: "#/components/schemas/v1.LoadBalancerStatus" - type: object - v1.SessionAffinityConfig: - description: SessionAffinityConfig represents the configurations of session - affinity. - example: - clientIP: - timeoutSeconds: 5 - properties: - clientIP: - $ref: "#/components/schemas/v1.ClientIPConfig" - type: object - v1.SleepAction: - description: SleepAction describes a "sleep" action. - example: - seconds: 5 - properties: - seconds: - description: Seconds is the number of seconds to sleep. - format: int64 - type: integer - required: - - seconds - type: object - v1.StorageOSPersistentVolumeSource: - description: Represents a StorageOS persistent volume resource. - example: - volumeNamespace: volumeNamespace - volumeName: volumeName - secretRef: - uid: uid - apiVersion: apiVersion - kind: kind - resourceVersion: resourceVersion - fieldPath: fieldPath - name: name - namespace: namespace - readOnly: true - fsType: fsType - properties: - fsType: - description: "fsType is the filesystem type to mount. Must be a filesystem\ - \ type supported by the host operating system. Ex. \"ext4\", \"xfs\",\ - \ \"ntfs\". Implicitly inferred to be \"ext4\" if unspecified." - type: string - readOnly: - description: readOnly defaults to false (read/write). ReadOnly here will - force the ReadOnly setting in VolumeMounts. - type: boolean - secretRef: - $ref: "#/components/schemas/v1.ObjectReference" - volumeName: - description: volumeName is the human-readable name of the StorageOS volume. Volume - names are only unique within a namespace. - type: string - volumeNamespace: - description: volumeNamespace specifies the scope of the volume within StorageOS. If - no namespace is specified then the Pod's namespace will be used. This - allows the Kubernetes name scoping to be mirrored within StorageOS for - tighter integration. Set VolumeName to any name to override the default - behaviour. Set to "default" if you are not using namespaces within StorageOS. - Namespaces that do not pre-exist within StorageOS will be created. - type: string - type: object - v1.StorageOSVolumeSource: - description: Represents a StorageOS persistent volume resource. - example: - volumeNamespace: volumeNamespace - volumeName: volumeName - secretRef: - name: name - readOnly: true - fsType: fsType - properties: - fsType: - description: "fsType is the filesystem type to mount. Must be a filesystem\ - \ type supported by the host operating system. Ex. \"ext4\", \"xfs\",\ - \ \"ntfs\". Implicitly inferred to be \"ext4\" if unspecified." - type: string - readOnly: - description: readOnly defaults to false (read/write). ReadOnly here will - force the ReadOnly setting in VolumeMounts. - type: boolean - secretRef: - $ref: "#/components/schemas/v1.LocalObjectReference" - volumeName: - description: volumeName is the human-readable name of the StorageOS volume. Volume - names are only unique within a namespace. - type: string - volumeNamespace: - description: volumeNamespace specifies the scope of the volume within StorageOS. If - no namespace is specified then the Pod's namespace will be used. This - allows the Kubernetes name scoping to be mirrored within StorageOS for - tighter integration. Set VolumeName to any name to override the default - behaviour. Set to "default" if you are not using namespaces within StorageOS. - Namespaces that do not pre-exist within StorageOS will be created. - type: string type: object - v1.Sysctl: - description: Sysctl defines a kernel parameter to be set + v1.GroupSubject: + description: GroupSubject holds detailed information for group-kind subject. example: name: name - value: value properties: name: - description: Name of a property to set - type: string - value: - description: Value of a property to set + description: "name is the user group that matches, or \"*\" to match all\ + \ user groups. See https://github.com/kubernetes/apiserver/blob/master/pkg/authentication/user/user.go\ + \ for some well-known group names. Required." type: string required: - name - - value type: object - v1.TCPSocketAction: - description: TCPSocketAction describes an action based on opening a socket + v1.LimitResponse: + description: LimitResponse defines how to handle requests that can not be executed + right now. example: - port: port - host: host + queuing: + handSize: 5 + queues: 7 + queueLengthLimit: 2 + type: type properties: - host: - description: "Optional: Host name to connect to, defaults to the pod IP." - type: string - port: - description: "IntOrString is a type that can hold an int32 or a string.\ - \ When used in JSON or YAML marshalling and unmarshalling, it produces\ - \ or consumes the inner type. This allows you to have, for example, a\ - \ JSON field that can accept a name or number." - format: int-or-string + queuing: + $ref: "#/components/schemas/v1.QueuingConfiguration" + type: + description: '`type` is "Queue" or "Reject". "Queue" means that requests + that can not be executed upon arrival are held in a queue until they can + be executed or a queuing limit is reached. "Reject" means that requests + that can not be executed upon arrival are rejected. Required.' type: string required: - - port + - type type: object - v1.Taint: - description: The node this Taint is attached to has the "effect" on any pod - that does not tolerate the Taint. + x-kubernetes-unions: + - discriminator: type + fields-to-discriminateBy: + queuing: Queuing + v1.LimitedPriorityLevelConfiguration: + description: |- + LimitedPriorityLevelConfiguration specifies how to handle requests that are subject to limits. It addresses two issues: + - How are requests for this priority level limited? + - What should be done with requests that exceed the limit? example: - timeAdded: 2000-01-23T04:56:07.000+00:00 - effect: effect - value: value - key: key + lendablePercent: 5 + borrowingLimitPercent: 1 + limitResponse: + queuing: + handSize: 5 + queues: 7 + queueLengthLimit: 2 + type: type + nominalConcurrencyShares: 9 properties: - effect: - description: "Required. The effect of the taint on pods that do not tolerate\ - \ the taint. Valid effects are NoSchedule, PreferNoSchedule and NoExecute." - type: string - key: - description: Required. The taint key to be applied to a node. - type: string - timeAdded: - description: TimeAdded represents the time at which the taint was added. - format: date-time - type: string - value: - description: The taint value corresponding to the taint key. - type: string + borrowingLimitPercent: + description: |- + `borrowingLimitPercent`, if present, configures a limit on how many seats this priority level can borrow from other priority levels. The limit is known as this level's BorrowingConcurrencyLimit (BorrowingCL) and is a limit on the total number of seats that this level may borrow at any one time. This field holds the ratio of that limit to the level's nominal concurrency limit. When this field is non-nil, it must hold a non-negative integer and the limit is calculated as follows. + + BorrowingCL(i) = round( NominalCL(i) * borrowingLimitPercent(i)/100.0 ) + + The value of this field can be more than 100, implying that this priority level can borrow a number of seats that is greater than its own nominal concurrency limit (NominalCL). When this field is left `nil`, the limit is effectively infinite. + format: int32 + type: integer + lendablePercent: + description: |- + `lendablePercent` prescribes the fraction of the level's NominalCL that can be borrowed by other priority levels. The value of this field must be between 0 and 100, inclusive, and it defaults to 0. The number of seats that other levels can borrow from this level, known as this level's LendableConcurrencyLimit (LendableCL), is defined as follows. + + LendableCL(i) = round( NominalCL(i) * lendablePercent(i)/100.0 ) + format: int32 + type: integer + limitResponse: + $ref: "#/components/schemas/v1.LimitResponse" + nominalConcurrencyShares: + description: |- + `nominalConcurrencyShares` (NCS) contributes to the computation of the NominalConcurrencyLimit (NominalCL) of this level. This is the number of execution seats available at this priority level. This is used both for requests dispatched from this priority level as well as requests dispatched from other priority levels borrowing seats from this level. The server's concurrency limit (ServerCL) is divided among the Limited priority levels in proportion to their NCS values: + + NominalCL(i) = ceil( ServerCL * NCS(i) / sum_ncs ) sum_ncs = sum[priority level k] NCS(k) + + Bigger numbers mean a larger nominal concurrency limit, at the expense of every other priority level. + + If not specified, this field defaults to a value of 30. + + Setting this field to zero supports the construction of a "jail" for this priority level that is used to hold some request(s) + format: int32 + type: integer required: - - effect - - key + - limitResponse type: object - v1.Toleration: - description: "The pod this Toleration is attached to tolerates any taint that\ - \ matches the triple using the matching operator ." + v1.NonResourcePolicyRule: + description: NonResourcePolicyRule is a predicate that matches non-resource + requests according to their verb and the target non-resource URL. A NonResourcePolicyRule + matches a request if and only if both (a) at least one member of verbs matches + the request and (b) at least one member of nonResourceURLs matches the request. example: - effect: effect - tolerationSeconds: 6 - value: value - key: key - operator: operator + verbs: + - verbs + - verbs + nonResourceURLs: + - nonResourceURLs + - nonResourceURLs properties: - effect: - description: "Effect indicates the taint effect to match. Empty means match\ - \ all taint effects. When specified, allowed values are NoSchedule, PreferNoSchedule\ - \ and NoExecute." - type: string - key: - description: "Key is the taint key that the toleration applies to. Empty\ - \ means match all taint keys. If the key is empty, operator must be Exists;\ - \ this combination means to match all values and all keys." - type: string - operator: - description: "Operator represents a key's relationship to the value. Valid\ - \ operators are Exists, Equal, Lt, and Gt. Defaults to Equal. Exists is\ - \ equivalent to wildcard for value, so that a pod can tolerate all taints\ - \ of a particular category. Lt and Gt perform numeric comparisons (requires\ - \ feature gate TaintTolerationComparisonOperators)." - type: string - tolerationSeconds: - description: "TolerationSeconds represents the period of time the toleration\ - \ (which must be of effect NoExecute, otherwise this field is ignored)\ - \ tolerates the taint. By default, it is not set, which means tolerate\ - \ the taint forever (do not evict). Zero and negative values will be treated\ - \ as 0 (evict immediately) by the system." - format: int64 - type: integer - value: - description: "Value is the taint value the toleration matches to. If the\ - \ operator is Exists, the value should be empty, otherwise just a regular\ - \ string." - type: string + nonResourceURLs: + description: |- + `nonResourceURLs` is a set of url prefixes that a user should have access to and may not be empty. For example: + - "/healthz" is legal + - "/hea*" is illegal + - "/hea" is legal but matches nothing + - "/hea/*" also matches nothing + - "/healthz/*" matches all per-component health checks. + "*" matches all non-resource urls. if it is present, it must be the only entry. Required. + items: + type: string + type: array + x-kubernetes-list-type: set + verbs: + description: "`verbs` is a list of matching verbs and may not be empty.\ + \ \"*\" matches all verbs. If it is present, it must be the only entry.\ + \ Required." + items: + type: string + type: array + x-kubernetes-list-type: set + required: + - nonResourceURLs + - verbs type: object - v1.TopologySelectorLabelRequirement: - description: A topology selector requirement is a selector that matches given - label. This is an alpha feature and may change in the future. + v1.PolicyRulesWithSubjects: + description: "PolicyRulesWithSubjects prescribes a test that applies to a request\ + \ to an apiserver. The test considers the subject making the request, the\ + \ verb being requested, and the resource to be acted upon. This PolicyRulesWithSubjects\ + \ matches a request if and only if both (a) at least one member of subjects\ + \ matches the request and (b) at least one member of resourceRules or nonResourceRules\ + \ matches the request." example: - values: - - values - - values - key: key + nonResourceRules: + - verbs: + - verbs + - verbs + nonResourceURLs: + - nonResourceURLs + - nonResourceURLs + - verbs: + - verbs + - verbs + nonResourceURLs: + - nonResourceURLs + - nonResourceURLs + resourceRules: + - clusterScope: true + resources: + - resources + - resources + verbs: + - verbs + - verbs + apiGroups: + - apiGroups + - apiGroups + namespaces: + - namespaces + - namespaces + - clusterScope: true + resources: + - resources + - resources + verbs: + - verbs + - verbs + apiGroups: + - apiGroups + - apiGroups + namespaces: + - namespaces + - namespaces + subjects: + - kind: kind + serviceAccount: + name: name + namespace: namespace + user: + name: name + group: + name: name + - kind: kind + serviceAccount: + name: name + namespace: namespace + user: + name: name + group: + name: name properties: - key: - description: The label key that the selector applies to. - type: string - values: - description: An array of string values. One value must match the label to - be selected. Each entry in Values is ORed. + nonResourceRules: + description: '`nonResourceRules` is a list of NonResourcePolicyRules that + identify matching requests according to their verb and the target non-resource + URL.' items: - type: string + $ref: "#/components/schemas/v1.NonResourcePolicyRule" type: array x-kubernetes-list-type: atomic - required: - - key - - values - type: object - v1.TopologySelectorTerm: - description: A topology selector term represents the result of label queries. - A null or empty topology selector term matches no objects. The requirements - of them are ANDed. It provides a subset of functionality as NodeSelectorTerm. - This is an alpha feature and may change in the future. - example: - matchLabelExpressions: - - values: - - values - - values - key: key - - values: - - values - - values - key: key - properties: - matchLabelExpressions: - description: A list of topology selector requirements by labels. + resourceRules: + description: '`resourceRules` is a slice of ResourcePolicyRules that identify + matching requests according to their verb and the target resource. At + least one of `resourceRules` and `nonResourceRules` has to be non-empty.' items: - $ref: "#/components/schemas/v1.TopologySelectorLabelRequirement" + $ref: "#/components/schemas/v1.ResourcePolicyRule" type: array x-kubernetes-list-type: atomic - type: object - x-kubernetes-map-type: atomic - v1.TopologySpreadConstraint: - description: TopologySpreadConstraint specifies how to spread matching pods - among the given topology. - example: - nodeTaintsPolicy: nodeTaintsPolicy - whenUnsatisfiable: whenUnsatisfiable - maxSkew: 8 - nodeAffinityPolicy: nodeAffinityPolicy - labelSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - minDomains: 9 - topologyKey: topologyKey - matchLabelKeys: - - matchLabelKeys - - matchLabelKeys - properties: - labelSelector: - $ref: "#/components/schemas/v1.LabelSelector" - matchLabelKeys: - description: |- - MatchLabelKeys is a set of pod label keys to select the pods over which spreading will be calculated. The keys are used to lookup values from the incoming pod labels, those key-value labels are ANDed with labelSelector to select the group of existing pods over which spreading will be calculated for the incoming pod. The same key is forbidden to exist in both MatchLabelKeys and LabelSelector. MatchLabelKeys cannot be set when LabelSelector isn't set. Keys that don't exist in the incoming pod labels will be ignored. A null or empty list means only match against labelSelector. - - This is a beta field and requires the MatchLabelKeysInPodTopologySpread feature gate to be enabled (enabled by default). + subjects: + description: "subjects is the list of normal user, serviceaccount, or group\ + \ that this rule cares about. There must be at least one member in this\ + \ slice. A slice that includes both the system:authenticated and system:unauthenticated\ + \ user groups matches every request. Required." items: - type: string + $ref: "#/components/schemas/flowcontrol.v1.Subject" type: array x-kubernetes-list-type: atomic - maxSkew: - description: "MaxSkew describes the degree to which pods may be unevenly\ - \ distributed. When `whenUnsatisfiable=DoNotSchedule`, it is the maximum\ - \ permitted difference between the number of matching pods in the target\ - \ topology and the global minimum. The global minimum is the minimum number\ - \ of matching pods in an eligible domain or zero if the number of eligible\ - \ domains is less than MinDomains. For example, in a 3-zone cluster, MaxSkew\ - \ is set to 1, and pods with the same labelSelector spread as 2/2/1: In\ - \ this case, the global minimum is 1. | zone1 | zone2 | zone3 | | P P\ - \ | P P | P | - if MaxSkew is 1, incoming pod can only be scheduled\ - \ to zone3 to become 2/2/2; scheduling it onto zone1(zone2) would make\ - \ the ActualSkew(3-1) on zone1(zone2) violate MaxSkew(1). - if MaxSkew\ - \ is 2, incoming pod can be scheduled onto any zone. When `whenUnsatisfiable=ScheduleAnyway`,\ - \ it is used to give higher precedence to topologies that satisfy it.\ - \ It's a required field. Default value is 1 and 0 is not allowed." - format: int32 - type: integer - minDomains: - description: |- - MinDomains indicates a minimum number of eligible domains. When the number of eligible domains with matching topology keys is less than minDomains, Pod Topology Spread treats "global minimum" as 0, and then the calculation of Skew is performed. And when the number of eligible domains with matching topology keys equals or greater than minDomains, this value has no effect on scheduling. As a result, when the number of eligible domains is less than minDomains, scheduler won't schedule more than maxSkew Pods to those domains. If value is nil, the constraint behaves as if MinDomains is equal to 1. Valid values are integers greater than 0. When value is not nil, WhenUnsatisfiable must be DoNotSchedule. - - For example, in a 3-zone cluster, MaxSkew is set to 2, MinDomains is set to 5 and pods with the same labelSelector spread as 2/2/2: | zone1 | zone2 | zone3 | | P P | P P | P P | The number of domains is less than 5(MinDomains), so "global minimum" is treated as 0. In this situation, new pod with the same labelSelector cannot be scheduled, because computed skew will be 3(3 - 0) if new Pod is scheduled to any of the three zones, it will violate MaxSkew. - format: int32 - type: integer - nodeAffinityPolicy: - description: |- - NodeAffinityPolicy indicates how we will treat Pod's nodeAffinity/nodeSelector when calculating pod topology spread skew. Options are: - Honor: only nodes matching nodeAffinity/nodeSelector are included in the calculations. - Ignore: nodeAffinity/nodeSelector are ignored. All nodes are included in the calculations. - - If this value is nil, the behavior is equivalent to the Honor policy. - type: string - nodeTaintsPolicy: - description: |- - NodeTaintsPolicy indicates how we will treat node taints when calculating pod topology spread skew. Options are: - Honor: nodes without taints, along with tainted nodes for which the incoming pod has a toleration, are included. - Ignore: node taints are ignored. All nodes are included. - - If this value is nil, the behavior is equivalent to the Ignore policy. - type: string - topologyKey: - description: "TopologyKey is the key of node labels. Nodes that have a label\ - \ with this key and identical values are considered to be in the same\ - \ topology. We consider each as a \"bucket\", and try to\ - \ put balanced number of pods into each bucket. We define a domain as\ - \ a particular instance of a topology. Also, we define an eligible domain\ - \ as a domain whose nodes meet the requirements of nodeAffinityPolicy\ - \ and nodeTaintsPolicy. e.g. If TopologyKey is \"kubernetes.io/hostname\"\ - , each Node is a domain of that topology. And, if TopologyKey is \"topology.kubernetes.io/zone\"\ - , each zone is a domain of that topology. It's a required field." - type: string - whenUnsatisfiable: - description: |- - WhenUnsatisfiable indicates how to deal with a pod if it doesn't satisfy the spread constraint. - DoNotSchedule (default) tells the scheduler not to schedule it. - ScheduleAnyway tells the scheduler to schedule the pod in any location, - but giving higher precedence to topologies that would help reduce the - skew. - A constraint is considered "Unsatisfiable" for an incoming pod if and only if every possible node assignment for that pod would violate "MaxSkew" on some topology. For example, in a 3-zone cluster, MaxSkew is set to 1, and pods with the same labelSelector spread as 3/1/1: | zone1 | zone2 | zone3 | | P P P | P | P | If WhenUnsatisfiable is set to DoNotSchedule, incoming pod can only be scheduled to zone2(zone3) to become 3/2/1(3/1/2) as ActualSkew(2-1) on zone2(zone3) satisfies MaxSkew(1). In other words, the cluster can still be imbalanced, but scheduler won't make it *more* imbalanced. It's a required field. - type: string required: - - maxSkew - - topologyKey - - whenUnsatisfiable + - subjects type: object - v1.TypedLocalObjectReference: - description: TypedLocalObjectReference contains enough information to let you - locate the typed referenced object inside the same namespace. + v1.PriorityLevelConfiguration: + description: PriorityLevelConfiguration represents the configuration of a priority + level. example: - apiGroup: apiGroup + metadata: + generation: 6 + finalizers: + - finalizers + - finalizers + resourceVersion: resourceVersion + annotations: + key: annotations + generateName: generateName + deletionTimestamp: 2000-01-23T04:56:07.000+00:00 + labels: + key: labels + ownerReferences: + - uid: uid + controller: true + apiVersion: apiVersion + kind: kind + name: name + blockOwnerDeletion: true + - uid: uid + controller: true + apiVersion: apiVersion + kind: kind + name: name + blockOwnerDeletion: true + selfLink: selfLink + deletionGracePeriodSeconds: 0 + uid: uid + managedFields: + - apiVersion: apiVersion + fieldsV1: "{}" + manager: manager + subresource: subresource + time: 2000-01-23T04:56:07.000+00:00 + operation: operation + fieldsType: fieldsType + - apiVersion: apiVersion + fieldsV1: "{}" + manager: manager + subresource: subresource + time: 2000-01-23T04:56:07.000+00:00 + operation: operation + fieldsType: fieldsType + creationTimestamp: 2000-01-23T04:56:07.000+00:00 + name: name + namespace: namespace + apiVersion: apiVersion kind: kind - name: name + spec: + limited: + lendablePercent: 5 + borrowingLimitPercent: 1 + limitResponse: + queuing: + handSize: 5 + queues: 7 + queueLengthLimit: 2 + type: type + nominalConcurrencyShares: 9 + exempt: + lendablePercent: 0 + nominalConcurrencyShares: 6 + type: type + status: + conditions: + - reason: reason + lastTransitionTime: 2000-01-23T04:56:07.000+00:00 + message: message + type: type + status: status + - reason: reason + lastTransitionTime: 2000-01-23T04:56:07.000+00:00 + message: message + type: type + status: status properties: - apiGroup: - description: "APIGroup is the group for the resource being referenced. If\ - \ APIGroup is not specified, the specified Kind must be in the core API\ - \ group. For any other third-party types, APIGroup is required." + apiVersion: + description: "APIVersion defines the versioned schema of this representation\ + \ of an object. Servers should convert recognized schemas to the latest\ + \ internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources" type: string kind: - description: Kind is the type of resource being referenced - type: string - name: - description: Name is the name of resource being referenced + description: "Kind is a string value representing the REST resource this\ + \ object represents. Servers may infer this from the endpoint the client\ + \ submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds" type: string + metadata: + $ref: "#/components/schemas/v1.ObjectMeta" + spec: + $ref: "#/components/schemas/v1.PriorityLevelConfigurationSpec" + status: + $ref: "#/components/schemas/v1.PriorityLevelConfigurationStatus" required: - - kind - - name + - spec type: object - x-kubernetes-map-type: atomic - v1.TypedObjectReference: - description: TypedObjectReference contains enough information to let you locate - the typed referenced object + x-kubernetes-group-version-kind: + - group: flowcontrol.apiserver.k8s.io + kind: PriorityLevelConfiguration + version: v1 + x-implements: + - io.kubernetes.client.common.KubernetesObject + v1.PriorityLevelConfigurationCondition: + description: PriorityLevelConfigurationCondition defines the condition of priority + level. example: - apiGroup: apiGroup - kind: kind - name: name - namespace: namespace + reason: reason + lastTransitionTime: 2000-01-23T04:56:07.000+00:00 + message: message + type: type + status: status properties: - apiGroup: - description: "APIGroup is the group for the resource being referenced. If\ - \ APIGroup is not specified, the specified Kind must be in the core API\ - \ group. For any other third-party types, APIGroup is required." + lastTransitionTime: + description: '`lastTransitionTime` is the last time the condition transitioned + from one status to another.' + format: date-time type: string - kind: - description: Kind is the type of resource being referenced + message: + description: '`message` is a human-readable message indicating details about + last transition.' type: string - name: - description: Name is the name of resource being referenced + reason: + description: "`reason` is a unique, one-word, CamelCase reason for the condition's\ + \ last transition." type: string - namespace: - description: "Namespace is the namespace of resource being referenced Note\ - \ that when a namespace is specified, a gateway.networking.k8s.io/ReferenceGrant\ - \ object is required in the referent namespace to allow that namespace's\ - \ owner to accept the reference. See the ReferenceGrant documentation\ - \ for details. (Alpha) This field requires the CrossNamespaceVolumeDataSource\ - \ feature gate to be enabled." + status: + description: "`status` is the status of the condition. Should be specified\ + \ and set to one of True, False, Unknown." + type: string + type: + description: '`type` is the type of the condition. Required.' type: string required: - - kind - - name + - type type: object - v1.Volume: - description: Volume represents a named volume in a pod that may be accessed - by any container in the pod. + v1.PriorityLevelConfigurationList: + description: PriorityLevelConfigurationList is a list of PriorityLevelConfiguration + objects. example: - quobyte: - volume: volume - registry: registry - readOnly: true - user: user - tenant: tenant - group: group - azureFile: - secretName: secretName - readOnly: true - shareName: shareName - flexVolume: - driver: driver - options: - key: options - secretRef: - name: name - readOnly: true - fsType: fsType - ephemeral: - volumeClaimTemplate: - metadata: - generation: 6 - finalizers: - - finalizers - - finalizers - resourceVersion: resourceVersion - annotations: - key: annotations - generateName: generateName - deletionTimestamp: 2000-01-23T04:56:07.000+00:00 - labels: - key: labels - ownerReferences: - - uid: uid - controller: true - apiVersion: apiVersion - kind: kind - name: name - blockOwnerDeletion: true - - uid: uid - controller: true - apiVersion: apiVersion - kind: kind - name: name - blockOwnerDeletion: true - selfLink: selfLink - deletionGracePeriodSeconds: 0 - uid: uid - managedFields: - - apiVersion: apiVersion - fieldsV1: "{}" - manager: manager - subresource: subresource - time: 2000-01-23T04:56:07.000+00:00 - operation: operation - fieldsType: fieldsType - - apiVersion: apiVersion - fieldsV1: "{}" - manager: manager - subresource: subresource - time: 2000-01-23T04:56:07.000+00:00 - operation: operation - fieldsType: fieldsType - creationTimestamp: 2000-01-23T04:56:07.000+00:00 - name: name - namespace: namespace - spec: - storageClassName: storageClassName - dataSourceRef: - apiGroup: apiGroup - kind: kind - name: name - namespace: namespace - volumeName: volumeName - volumeAttributesClassName: volumeAttributesClassName - resources: - requests: - key: null - limits: - key: null - selector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - accessModes: - - accessModes - - accessModes - dataSource: - apiGroup: apiGroup - kind: kind - name: name - volumeMode: volumeMode - secret: - secretName: secretName - defaultMode: 7 - optional: true - items: - - mode: 6 - path: path - key: key - - mode: 6 - path: path - key: key - projected: - sources: - - downwardAPI: - items: - - mode: 2 - path: path - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath - - mode: 2 - path: path - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath - configMap: - name: name - optional: true - items: - - mode: 6 - path: path - key: key - - mode: 6 - path: path - key: key - podCertificate: - certificateChainPath: certificateChainPath - userAnnotations: - key: userAnnotations - keyPath: keyPath - maxExpirationSeconds: 3 - keyType: keyType - credentialBundlePath: credentialBundlePath - signerName: signerName - secret: - name: name - optional: true - items: - - mode: 6 - path: path - key: key - - mode: 6 - path: path - key: key - serviceAccountToken: - path: path - audience: audience - expirationSeconds: 3 - clusterTrustBundle: - path: path - labelSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - name: name - optional: true - signerName: signerName - - downwardAPI: - items: - - mode: 2 - path: path - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath - - mode: 2 - path: path - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath - configMap: - name: name - optional: true - items: - - mode: 6 - path: path - key: key - - mode: 6 - path: path - key: key - podCertificate: - certificateChainPath: certificateChainPath - userAnnotations: - key: userAnnotations - keyPath: keyPath - maxExpirationSeconds: 3 - keyType: keyType - credentialBundlePath: credentialBundlePath - signerName: signerName - secret: + metadata: + remainingItemCount: 1 + continue: continue + resourceVersion: resourceVersion + shardInfo: + selector: selector + selfLink: selfLink + apiVersion: apiVersion + kind: kind + items: + - metadata: + generation: 6 + finalizers: + - finalizers + - finalizers + resourceVersion: resourceVersion + annotations: + key: annotations + generateName: generateName + deletionTimestamp: 2000-01-23T04:56:07.000+00:00 + labels: + key: labels + ownerReferences: + - uid: uid + controller: true + apiVersion: apiVersion + kind: kind name: name - optional: true - items: - - mode: 6 - path: path - key: key - - mode: 6 - path: path - key: key - serviceAccountToken: - path: path - audience: audience - expirationSeconds: 3 - clusterTrustBundle: - path: path - labelSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels + blockOwnerDeletion: true + - uid: uid + controller: true + apiVersion: apiVersion + kind: kind name: name - optional: true - signerName: signerName - defaultMode: 6 - cephfs: - path: path - secretRef: - name: name - secretFile: secretFile - readOnly: true - user: user - monitors: - - monitors - - monitors - scaleIO: - system: system - protectionDomain: protectionDomain - sslEnabled: true - storageMode: storageMode - volumeName: volumeName - secretRef: + blockOwnerDeletion: true + selfLink: selfLink + deletionGracePeriodSeconds: 0 + uid: uid + managedFields: + - apiVersion: apiVersion + fieldsV1: "{}" + manager: manager + subresource: subresource + time: 2000-01-23T04:56:07.000+00:00 + operation: operation + fieldsType: fieldsType + - apiVersion: apiVersion + fieldsV1: "{}" + manager: manager + subresource: subresource + time: 2000-01-23T04:56:07.000+00:00 + operation: operation + fieldsType: fieldsType + creationTimestamp: 2000-01-23T04:56:07.000+00:00 name: name - readOnly: true - fsType: fsType - storagePool: storagePool - gateway: gateway - emptyDir: - sizeLimit: sizeLimit - medium: medium - glusterfs: - path: path - endpoints: endpoints - readOnly: true - gcePersistentDisk: - partition: 6 - readOnly: true - pdName: pdName - fsType: fsType - image: - reference: reference - pullPolicy: pullPolicy - photonPersistentDisk: - pdID: pdID - fsType: fsType - azureDisk: - diskName: diskName + namespace: namespace + apiVersion: apiVersion kind: kind - readOnly: true - cachingMode: cachingMode - diskURI: diskURI - fsType: fsType - cinder: - secretRef: - name: name - volumeID: volumeID - readOnly: true - fsType: fsType - downwardAPI: - defaultMode: 1 - items: - - mode: 2 - path: path - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - fieldRef: + spec: + limited: + lendablePercent: 5 + borrowingLimitPercent: 1 + limitResponse: + queuing: + handSize: 5 + queues: 7 + queueLengthLimit: 2 + type: type + nominalConcurrencyShares: 9 + exempt: + lendablePercent: 0 + nominalConcurrencyShares: 6 + type: type + status: + conditions: + - reason: reason + lastTransitionTime: 2000-01-23T04:56:07.000+00:00 + message: message + type: type + status: status + - reason: reason + lastTransitionTime: 2000-01-23T04:56:07.000+00:00 + message: message + type: type + status: status + - metadata: + generation: 6 + finalizers: + - finalizers + - finalizers + resourceVersion: resourceVersion + annotations: + key: annotations + generateName: generateName + deletionTimestamp: 2000-01-23T04:56:07.000+00:00 + labels: + key: labels + ownerReferences: + - uid: uid + controller: true apiVersion: apiVersion - fieldPath: fieldPath - - mode: 2 - path: path - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - fieldRef: + kind: kind + name: name + blockOwnerDeletion: true + - uid: uid + controller: true apiVersion: apiVersion - fieldPath: fieldPath - awsElasticBlockStore: - partition: 6 - volumeID: volumeID - readOnly: true - fsType: fsType - flocker: - datasetName: datasetName - datasetUUID: datasetUUID - iscsi: - chapAuthSession: true - iscsiInterface: iscsiInterface - lun: 5 - chapAuthDiscovery: true - iqn: iqn - portals: - - portals - - portals - secretRef: - name: name - initiatorName: initiatorName - readOnly: true - fsType: fsType - targetPortal: targetPortal - rbd: - image: image - pool: pool - secretRef: - name: name - readOnly: true - fsType: fsType - keyring: keyring - user: user - monitors: - - monitors - - monitors - configMap: - defaultMode: 3 - name: name - optional: true - items: - - mode: 6 - path: path - key: key - - mode: 6 - path: path - key: key - storageos: - volumeNamespace: volumeNamespace - volumeName: volumeName - secretRef: - name: name - readOnly: true - fsType: fsType - csi: - driver: driver - nodePublishSecretRef: + kind: kind + name: name + blockOwnerDeletion: true + selfLink: selfLink + deletionGracePeriodSeconds: 0 + uid: uid + managedFields: + - apiVersion: apiVersion + fieldsV1: "{}" + manager: manager + subresource: subresource + time: 2000-01-23T04:56:07.000+00:00 + operation: operation + fieldsType: fieldsType + - apiVersion: apiVersion + fieldsV1: "{}" + manager: manager + subresource: subresource + time: 2000-01-23T04:56:07.000+00:00 + operation: operation + fieldsType: fieldsType + creationTimestamp: 2000-01-23T04:56:07.000+00:00 name: name - readOnly: true - fsType: fsType - volumeAttributes: - key: volumeAttributes - name: name - nfs: - path: path - server: server - readOnly: true - persistentVolumeClaim: - claimName: claimName - readOnly: true - gitRepo: - repository: repository - directory: directory - revision: revision - portworxVolume: - volumeID: volumeID - readOnly: true - fsType: fsType - vsphereVolume: - storagePolicyName: storagePolicyName - storagePolicyID: storagePolicyID - volumePath: volumePath - fsType: fsType - fc: - lun: 6 - targetWWNs: - - targetWWNs - - targetWWNs - readOnly: true - wwids: - - wwids - - wwids - fsType: fsType - hostPath: - path: path - type: type - properties: - awsElasticBlockStore: - $ref: "#/components/schemas/v1.AWSElasticBlockStoreVolumeSource" - azureDisk: - $ref: "#/components/schemas/v1.AzureDiskVolumeSource" - azureFile: - $ref: "#/components/schemas/v1.AzureFileVolumeSource" - cephfs: - $ref: "#/components/schemas/v1.CephFSVolumeSource" - cinder: - $ref: "#/components/schemas/v1.CinderVolumeSource" - configMap: - $ref: "#/components/schemas/v1.ConfigMapVolumeSource" - csi: - $ref: "#/components/schemas/v1.CSIVolumeSource" - downwardAPI: - $ref: "#/components/schemas/v1.DownwardAPIVolumeSource" - emptyDir: - $ref: "#/components/schemas/v1.EmptyDirVolumeSource" - ephemeral: - $ref: "#/components/schemas/v1.EphemeralVolumeSource" - fc: - $ref: "#/components/schemas/v1.FCVolumeSource" - flexVolume: - $ref: "#/components/schemas/v1.FlexVolumeSource" - flocker: - $ref: "#/components/schemas/v1.FlockerVolumeSource" - gcePersistentDisk: - $ref: "#/components/schemas/v1.GCEPersistentDiskVolumeSource" - gitRepo: - $ref: "#/components/schemas/v1.GitRepoVolumeSource" - glusterfs: - $ref: "#/components/schemas/v1.GlusterfsVolumeSource" - hostPath: - $ref: "#/components/schemas/v1.HostPathVolumeSource" - image: - $ref: "#/components/schemas/v1.ImageVolumeSource" - iscsi: - $ref: "#/components/schemas/v1.ISCSIVolumeSource" - name: - description: "name of the volume. Must be a DNS_LABEL and unique within\ - \ the pod. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names" - type: string - nfs: - $ref: "#/components/schemas/v1.NFSVolumeSource" - persistentVolumeClaim: - $ref: "#/components/schemas/v1.PersistentVolumeClaimVolumeSource" - photonPersistentDisk: - $ref: "#/components/schemas/v1.PhotonPersistentDiskVolumeSource" - portworxVolume: - $ref: "#/components/schemas/v1.PortworxVolumeSource" - projected: - $ref: "#/components/schemas/v1.ProjectedVolumeSource" - quobyte: - $ref: "#/components/schemas/v1.QuobyteVolumeSource" - rbd: - $ref: "#/components/schemas/v1.RBDVolumeSource" - scaleIO: - $ref: "#/components/schemas/v1.ScaleIOVolumeSource" - secret: - $ref: "#/components/schemas/v1.SecretVolumeSource" - storageos: - $ref: "#/components/schemas/v1.StorageOSVolumeSource" - vsphereVolume: - $ref: "#/components/schemas/v1.VsphereVirtualDiskVolumeSource" - required: - - name - type: object - v1.VolumeDevice: - description: volumeDevice describes a mapping of a raw block device within a - container. - example: - devicePath: devicePath - name: name - properties: - devicePath: - description: devicePath is the path inside of the container that the device - will be mapped to. - type: string - name: - description: name must match the name of a persistentVolumeClaim in the - pod - type: string - required: - - devicePath - - name - type: object - v1.VolumeMount: - description: VolumeMount describes a mounting of a Volume within a container. - example: - mountPath: mountPath - mountPropagation: mountPropagation - name: name - readOnly: true - subPath: subPath - recursiveReadOnly: recursiveReadOnly - subPathExpr: subPathExpr + namespace: namespace + apiVersion: apiVersion + kind: kind + spec: + limited: + lendablePercent: 5 + borrowingLimitPercent: 1 + limitResponse: + queuing: + handSize: 5 + queues: 7 + queueLengthLimit: 2 + type: type + nominalConcurrencyShares: 9 + exempt: + lendablePercent: 0 + nominalConcurrencyShares: 6 + type: type + status: + conditions: + - reason: reason + lastTransitionTime: 2000-01-23T04:56:07.000+00:00 + message: message + type: type + status: status + - reason: reason + lastTransitionTime: 2000-01-23T04:56:07.000+00:00 + message: message + type: type + status: status properties: - mountPath: - description: Path within the container at which the volume should be mounted. Must - not contain ':'. - type: string - mountPropagation: - description: "mountPropagation determines how mounts are propagated from\ - \ the host to container and the other way around. When not set, MountPropagationNone\ - \ is used. This field is beta in 1.10. When RecursiveReadOnly is set to\ - \ IfPossible or to Enabled, MountPropagation must be None or unspecified\ - \ (which defaults to None)." - type: string - name: - description: This must match the Name of a Volume. - type: string - readOnly: - description: "Mounted read-only if true, read-write otherwise (false or\ - \ unspecified). Defaults to false." - type: boolean - recursiveReadOnly: - description: |- - RecursiveReadOnly specifies whether read-only mounts should be handled recursively. - - If ReadOnly is false, this field has no meaning and must be unspecified. - - If ReadOnly is true, and this field is set to Disabled, the mount is not made recursively read-only. If this field is set to IfPossible, the mount is made recursively read-only, if it is supported by the container runtime. If this field is set to Enabled, the mount is made recursively read-only if it is supported by the container runtime, otherwise the pod will not be started and an error will be generated to indicate the reason. - - If this field is set to IfPossible or Enabled, MountPropagation must be set to None (or be unspecified, which defaults to None). - - If this field is not specified, it is treated as an equivalent of Disabled. - type: string - subPath: - description: Path within the volume from which the container's volume should - be mounted. Defaults to "" (volume's root). + apiVersion: + description: "APIVersion defines the versioned schema of this representation\ + \ of an object. Servers should convert recognized schemas to the latest\ + \ internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources" type: string - subPathExpr: - description: Expanded path within the volume from which the container's - volume should be mounted. Behaves similarly to SubPath but environment - variable references $(VAR_NAME) are expanded using the container's environment. - Defaults to "" (volume's root). SubPathExpr and SubPath are mutually exclusive. + items: + description: '`items` is a list of request-priorities.' + items: + $ref: "#/components/schemas/v1.PriorityLevelConfiguration" + type: array + kind: + description: "Kind is a string value representing the REST resource this\ + \ object represents. Servers may infer this from the endpoint the client\ + \ submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds" type: string + metadata: + $ref: "#/components/schemas/v1.ListMeta" required: - - mountPath - - name + - items type: object - v1.VolumeMountStatus: - description: VolumeMountStatus shows status of volume mounts. + x-kubernetes-group-version-kind: + - group: flowcontrol.apiserver.k8s.io + kind: PriorityLevelConfigurationList + version: v1 + x-implements: + - io.kubernetes.client.common.KubernetesListObject + v1.PriorityLevelConfigurationReference: + description: PriorityLevelConfigurationReference contains information that points + to the "request-priority" being used. example: - mountPath: mountPath name: name - readOnly: true - volumeStatus: - image: - imageRef: imageRef - recursiveReadOnly: recursiveReadOnly properties: - mountPath: - description: MountPath corresponds to the original VolumeMount. - type: string name: - description: Name corresponds to the name of the original VolumeMount. - type: string - readOnly: - description: ReadOnly corresponds to the original VolumeMount. - type: boolean - recursiveReadOnly: - description: "RecursiveReadOnly must be set to Disabled, Enabled, or unspecified\ - \ (for non-readonly mounts). An IfPossible value in the original VolumeMount\ - \ must be translated to Disabled or Enabled, depending on the mount result." + description: '`name` is the name of the priority level configuration being + referenced Required.' type: string - volumeStatus: - $ref: "#/components/schemas/v1.VolumeStatus" required: - - mountPath - name type: object - v1.VolumeNodeAffinity: - description: VolumeNodeAffinity defines constraints that limit what nodes this - volume can be accessed from. + v1.PriorityLevelConfigurationSpec: + description: PriorityLevelConfigurationSpec specifies the configuration of a + priority level. example: - required: - nodeSelectorTerms: - - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchFields: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchFields: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator + limited: + lendablePercent: 5 + borrowingLimitPercent: 1 + limitResponse: + queuing: + handSize: 5 + queues: 7 + queueLengthLimit: 2 + type: type + nominalConcurrencyShares: 9 + exempt: + lendablePercent: 0 + nominalConcurrencyShares: 6 + type: type properties: - required: - $ref: "#/components/schemas/v1.NodeSelector" + exempt: + $ref: "#/components/schemas/v1.ExemptPriorityLevelConfiguration" + limited: + $ref: "#/components/schemas/v1.LimitedPriorityLevelConfiguration" + type: + description: '`type` indicates whether this priority level is subject to + limitation on request execution. A value of `"Exempt"` means that requests + of this priority level are not subject to a limit (and thus are never + queued) and do not detract from the capacity made available to other priority + levels. A value of `"Limited"` means that (a) requests of this priority + level _are_ subject to limits and (b) some of the server''s limited capacity + is made available exclusively to this priority level. Required.' + type: string + required: + - type type: object - v1.VolumeProjection: - description: Projection that may be projected along with other supported volume - types. Exactly one of these fields must be set. + x-kubernetes-unions: + - discriminator: type + fields-to-discriminateBy: + exempt: Exempt + limited: Limited + v1.PriorityLevelConfigurationStatus: + description: PriorityLevelConfigurationStatus represents the current state of + a "request-priority". example: - downwardAPI: - items: - - mode: 2 - path: path - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath - - mode: 2 - path: path - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath - configMap: - name: name - optional: true - items: - - mode: 6 - path: path - key: key - - mode: 6 - path: path - key: key - podCertificate: - certificateChainPath: certificateChainPath - userAnnotations: - key: userAnnotations - keyPath: keyPath - maxExpirationSeconds: 3 - keyType: keyType - credentialBundlePath: credentialBundlePath - signerName: signerName - secret: - name: name - optional: true - items: - - mode: 6 - path: path - key: key - - mode: 6 - path: path - key: key - serviceAccountToken: - path: path - audience: audience - expirationSeconds: 3 - clusterTrustBundle: - path: path - labelSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - name: name - optional: true - signerName: signerName + conditions: + - reason: reason + lastTransitionTime: 2000-01-23T04:56:07.000+00:00 + message: message + type: type + status: status + - reason: reason + lastTransitionTime: 2000-01-23T04:56:07.000+00:00 + message: message + type: type + status: status properties: - clusterTrustBundle: - $ref: "#/components/schemas/v1.ClusterTrustBundleProjection" - configMap: - $ref: "#/components/schemas/v1.ConfigMapProjection" - downwardAPI: - $ref: "#/components/schemas/v1.DownwardAPIProjection" - podCertificate: - $ref: "#/components/schemas/v1.PodCertificateProjection" - secret: - $ref: "#/components/schemas/v1.SecretProjection" - serviceAccountToken: - $ref: "#/components/schemas/v1.ServiceAccountTokenProjection" + conditions: + description: '`conditions` is the current state of "request-priority".' + items: + $ref: "#/components/schemas/v1.PriorityLevelConfigurationCondition" + type: array + x-kubernetes-patch-strategy: merge + x-kubernetes-list-type: map + x-kubernetes-list-map-keys: + - type + x-kubernetes-patch-merge-key: type type: object - v1.VolumeResourceRequirements: - description: VolumeResourceRequirements describes the storage resource requirements - for a volume. + v1.QueuingConfiguration: + description: QueuingConfiguration holds the configuration parameters for queuing example: - requests: - key: null - limits: - key: null + handSize: 5 + queues: 7 + queueLengthLimit: 2 properties: - limits: - additionalProperties: - $ref: "#/components/schemas/resource.Quantity" - description: "Limits describes the maximum amount of compute resources allowed.\ - \ More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/" - type: object - requests: - additionalProperties: - $ref: "#/components/schemas/resource.Quantity" - description: "Requests describes the minimum amount of compute resources\ - \ required. If Requests is omitted for a container, it defaults to Limits\ - \ if that is explicitly specified, otherwise to an implementation-defined\ - \ value. Requests cannot exceed Limits. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/" - type: object + handSize: + description: "`handSize` is a small positive number that configures the\ + \ shuffle sharding of requests into queues. When enqueuing a request\ + \ at this priority level the request's flow identifier (a string pair)\ + \ is hashed and the hash value is used to shuffle the list of queues and\ + \ deal a hand of the size specified here. The request is put into one\ + \ of the shortest queues in that hand. `handSize` must be no larger than\ + \ `queues`, and should be significantly smaller (so that a few heavy flows\ + \ do not saturate most of the queues). See the user-facing documentation\ + \ for more extensive guidance on setting this field. This field has a\ + \ default value of 8." + format: int32 + type: integer + queueLengthLimit: + description: "`queueLengthLimit` is the maximum number of requests allowed\ + \ to be waiting in a given queue of this priority level at a time; excess\ + \ requests are rejected. This value must be positive. If not specified,\ + \ it will be defaulted to 50." + format: int32 + type: integer + queues: + description: '`queues` is the number of queues for this priority level. + The queues exist independently at each apiserver. The value must be positive. Setting + it to 1 effectively precludes shufflesharding and thus makes the distinguisher + method of associated flow schemas irrelevant. This field has a default + value of 64.' + format: int32 + type: integer type: object - v1.VolumeStatus: - description: VolumeStatus represents the status of a mounted volume. At most - one of its members must be specified. + v1.ResourcePolicyRule: + description: "ResourcePolicyRule is a predicate that matches some resource requests,\ + \ testing the request's verb and the target resource. A ResourcePolicyRule\ + \ matches a resource request if and only if: (a) at least one member of verbs\ + \ matches the request, (b) at least one member of apiGroups matches the request,\ + \ (c) at least one member of resources matches the request, and (d) either\ + \ (d1) the request does not specify a namespace (i.e., `Namespace==\"\"`)\ + \ and clusterScope is true or (d2) the request specifies a namespace and least\ + \ one member of namespaces matches the request's namespace." example: - image: - imageRef: imageRef + clusterScope: true + resources: + - resources + - resources + verbs: + - verbs + - verbs + apiGroups: + - apiGroups + - apiGroups + namespaces: + - namespaces + - namespaces properties: - image: - $ref: "#/components/schemas/v1.ImageVolumeStatus" + apiGroups: + description: "`apiGroups` is a list of matching API groups and may not be\ + \ empty. \"*\" matches all API groups and, if present, must be the only\ + \ entry. Required." + items: + type: string + type: array + x-kubernetes-list-type: set + clusterScope: + description: '`clusterScope` indicates whether to match requests that do + not specify a namespace (which happens either because the resource is + not namespaced or the request targets all namespaces). If this field is + omitted or false then the `namespaces` field must contain a non-empty + list.' + type: boolean + namespaces: + description: "`namespaces` is a list of target namespaces that restricts\ + \ matches. A request that specifies a target namespace matches only if\ + \ either (a) this list contains that target namespace or (b) this list\ + \ contains \"*\". Note that \"*\" matches any specified namespace but\ + \ does not match a request that _does not specify_ a namespace (see the\ + \ `clusterScope` field for that). This list may be empty, but only if\ + \ `clusterScope` is true." + items: + type: string + type: array + x-kubernetes-list-type: set + resources: + description: "`resources` is a list of matching resources (i.e., lowercase\ + \ and plural) with, if desired, subresource. For example, [ \"services\"\ + , \"nodes/status\" ]. This list may not be empty. \"*\" matches all resources\ + \ and, if present, must be the only entry. Required." + items: + type: string + type: array + x-kubernetes-list-type: set + verbs: + description: "`verbs` is a list of matching verbs and may not be empty.\ + \ \"*\" matches all verbs and, if present, must be the only entry. Required." + items: + type: string + type: array + x-kubernetes-list-type: set + required: + - apiGroups + - resources + - verbs type: object - v1.VsphereVirtualDiskVolumeSource: - description: Represents a vSphere volume resource. + v1.ServiceAccountSubject: + description: ServiceAccountSubject holds detailed information for service-account-kind + subject. example: - storagePolicyName: storagePolicyName - storagePolicyID: storagePolicyID - volumePath: volumePath - fsType: fsType + name: name + namespace: namespace properties: - fsType: - description: "fsType is filesystem type to mount. Must be a filesystem type\ - \ supported by the host operating system. Ex. \"ext4\", \"xfs\", \"ntfs\"\ - . Implicitly inferred to be \"ext4\" if unspecified." - type: string - storagePolicyID: - description: storagePolicyID is the storage Policy Based Management (SPBM) - profile ID associated with the StoragePolicyName. - type: string - storagePolicyName: - description: storagePolicyName is the storage Policy Based Management (SPBM) - profile name. + name: + description: "`name` is the name of matching ServiceAccount objects, or\ + \ \"*\" to match regardless of name. Required." type: string - volumePath: - description: volumePath is the path that identifies vSphere volume vmdk + namespace: + description: '`namespace` is the namespace of matching ServiceAccount objects. + Required.' type: string required: - - volumePath + - name + - namespace type: object - v1.WeightedPodAffinityTerm: - description: The weights of all of the matched WeightedPodAffinityTerm fields - are added per-node to find the most preferred node(s) + flowcontrol.v1.Subject: + description: "Subject matches the originator of a request, as identified by\ + \ the request authentication system. There are three ways of matching an originator;\ + \ by user, group, or service account." example: - podAffinityTerm: - labelSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - namespaceSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - topologyKey: topologyKey - matchLabelKeys: - - matchLabelKeys - - matchLabelKeys - mismatchLabelKeys: - - mismatchLabelKeys - - mismatchLabelKeys - namespaces: - - namespaces - - namespaces - weight: 1 + kind: kind + serviceAccount: + name: name + namespace: namespace + user: + name: name + group: + name: name properties: - podAffinityTerm: - $ref: "#/components/schemas/v1.PodAffinityTerm" - weight: - description: "weight associated with matching the corresponding podAffinityTerm,\ - \ in the range 1-100." - format: int32 - type: integer + group: + $ref: "#/components/schemas/v1.GroupSubject" + kind: + description: '`kind` indicates which one of the other fields is non-empty. + Required' + type: string + serviceAccount: + $ref: "#/components/schemas/v1.ServiceAccountSubject" + user: + $ref: "#/components/schemas/v1.UserSubject" required: - - podAffinityTerm - - weight + - kind type: object - v1.WindowsSecurityContextOptions: - description: WindowsSecurityContextOptions contain Windows-specific options - and credentials. + x-kubernetes-unions: + - discriminator: kind + fields-to-discriminateBy: + group: Group + serviceAccount: ServiceAccount + user: User + v1.UserSubject: + description: UserSubject holds detailed information for user-kind subject. example: - gmsaCredentialSpec: gmsaCredentialSpec - runAsUserName: runAsUserName - hostProcess: true - gmsaCredentialSpecName: gmsaCredentialSpecName + name: name properties: - gmsaCredentialSpec: - description: GMSACredentialSpec is where the GMSA admission webhook (https://github.com/kubernetes-sigs/windows-gmsa) - inlines the contents of the GMSA credential spec named by the GMSACredentialSpecName - field. - type: string - gmsaCredentialSpecName: - description: GMSACredentialSpecName is the name of the GMSA credential spec - to use. - type: string - hostProcess: - description: "HostProcess determines if a container should be run as a 'Host\ - \ Process' container. All of a Pod's containers must have the same effective\ - \ HostProcess value (it is not allowed to have a mix of HostProcess containers\ - \ and non-HostProcess containers). In addition, if HostProcess is true\ - \ then HostNetwork must also be set to true." - type: boolean - runAsUserName: - description: "The UserName in Windows to run the entrypoint of the container\ - \ process. Defaults to the user specified in image metadata if unspecified.\ - \ May also be set in PodSecurityContext. If set in both SecurityContext\ - \ and PodSecurityContext, the value specified in SecurityContext takes\ - \ precedence." + name: + description: "`name` is the username that matches, or \"*\" to match all\ + \ usernames. Required." type: string + required: + - name type: object - v1.Endpoint: - description: Endpoint represents a single logical "backend" implementing a service. + v1alpha1.Eviction: + description: |- + Eviction initiates an eviction process, which should ideally result in a graceful eviction of a .spec.target (e.g. termination of a pod). + + The evictionrequest-controller observes intents of all EvictionRequests and transforms them into Evictions. It manages the Eviction lifecycle. Requesters are preserved in .status.requesters even after they have withdrawn their request. If all requesters withdraw their eviction intent for a common target, the eviction will be canceled. Once all EvictionRequest corresponding to this Eviction .spec.target have been removed, this Eviction object will eventually be garbage collected. + + If the target is a pod, the .status.targetResponders is populated from Pod's .spec.evictionResponders. + + Responders should observe and communicate through the .status to help with the eviction of the target when they see their state == Active in .status.targetResponders. ResponderStatus struct should then be periodically updated to indicate the progress or completion of the eviction process by each responder in .status.responders. If .status.responders[].heartbeatTime is not updated within the heartbeat deadline defined by the Eviction API (currently 20 minutes), the eviction is passed over to the next responder with a lower priority. + + If there are no other responders and the target is a pod, the last default imperative-eviction.k8s.io/evictor responder with a priority of 100 will evict the pod using the imperative Eviction API (pods//eviction subresource). example: - nodeName: nodeName - targetRef: - uid: uid - apiVersion: apiVersion - kind: kind + metadata: + generation: 6 + finalizers: + - finalizers + - finalizers resourceVersion: resourceVersion - fieldPath: fieldPath + annotations: + key: annotations + generateName: generateName + deletionTimestamp: 2000-01-23T04:56:07.000+00:00 + labels: + key: labels + ownerReferences: + - uid: uid + controller: true + apiVersion: apiVersion + kind: kind + name: name + blockOwnerDeletion: true + - uid: uid + controller: true + apiVersion: apiVersion + kind: kind + name: name + blockOwnerDeletion: true + selfLink: selfLink + deletionGracePeriodSeconds: 0 + uid: uid + managedFields: + - apiVersion: apiVersion + fieldsV1: "{}" + manager: manager + subresource: subresource + time: 2000-01-23T04:56:07.000+00:00 + operation: operation + fieldsType: fieldsType + - apiVersion: apiVersion + fieldsV1: "{}" + manager: manager + subresource: subresource + time: 2000-01-23T04:56:07.000+00:00 + operation: operation + fieldsType: fieldsType + creationTimestamp: 2000-01-23T04:56:07.000+00:00 name: name namespace: namespace - addresses: - - addresses - - addresses - hostname: hostname - zone: zone - hints: - forZones: + apiVersion: apiVersion + kind: kind + spec: + target: + pod: + uid: uid + name: name + status: + requesters: - name: name + intent: intent - name: name - forNodes: + intent: intent + conditions: + - reason: reason + lastTransitionTime: 2000-01-23T04:56:07.000+00:00 + message: message + type: type + observedGeneration: 5 + status: status + - reason: reason + lastTransitionTime: 2000-01-23T04:56:07.000+00:00 + message: message + type: type + observedGeneration: 5 + status: status + responders: + - completionTime: 2000-01-23T04:56:07.000+00:00 + expectedCompletionTime: 2000-01-23T04:56:07.000+00:00 + heartbeatTime: 2000-01-23T04:56:07.000+00:00 + name: name + startTime: 2000-01-23T04:56:07.000+00:00 + message: message + - completionTime: 2000-01-23T04:56:07.000+00:00 + expectedCompletionTime: 2000-01-23T04:56:07.000+00:00 + heartbeatTime: 2000-01-23T04:56:07.000+00:00 + name: name + startTime: 2000-01-23T04:56:07.000+00:00 + message: message + observedGeneration: 0 + targetResponders: - name: name + state: state + priority: 6 - name: name - conditions: - ready: true - terminating: true - serving: true - deprecatedTopology: - key: deprecatedTopology + state: state + priority: 6 properties: - addresses: - description: "addresses of this endpoint. For EndpointSlices of addressType\ - \ \"IPv4\" or \"IPv6\", the values are IP addresses in canonical form.\ - \ The syntax and semantics of other addressType values are not defined.\ - \ This must contain at least one address but no more than 100. EndpointSlices\ - \ generated by the EndpointSlice controller will always have exactly 1\ - \ address. No semantics are defined for additional addresses beyond the\ - \ first, and kube-proxy does not look at them." - items: - type: string - type: array - x-kubernetes-list-type: set - conditions: - $ref: "#/components/schemas/v1.EndpointConditions" - deprecatedTopology: - additionalProperties: - type: string - description: "deprecatedTopology contains topology information part of the\ - \ v1beta1 API. This field is deprecated, and will be removed when the\ - \ v1beta1 API is removed (no sooner than kubernetes v1.24). While this\ - \ field can hold values, it is not writable through the v1 API, and any\ - \ attempts to write to it will be silently ignored. Topology information\ - \ can be found in the zone and nodeName fields instead." - type: object - hints: - $ref: "#/components/schemas/v1.EndpointHints" - hostname: - description: hostname of this endpoint. This field may be used by consumers - of endpoints to distinguish endpoints from each other (e.g. in DNS names). - Multiple endpoints which use the same hostname should be considered fungible - (e.g. multiple A values in DNS). Must be lowercase and pass DNS Label - (RFC 1123) validation. - type: string - nodeName: - description: nodeName represents the name of the Node hosting this endpoint. - This can be used to determine endpoints local to a Node. + apiVersion: + description: "APIVersion defines the versioned schema of this representation\ + \ of an object. Servers should convert recognized schemas to the latest\ + \ internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources" type: string - targetRef: - $ref: "#/components/schemas/v1.ObjectReference" - zone: - description: zone is the name of the Zone this endpoint exists in. + kind: + description: "Kind is a string value representing the REST resource this\ + \ object represents. Servers may infer this from the endpoint the client\ + \ submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds" type: string + metadata: + $ref: "#/components/schemas/v1.ObjectMeta" + spec: + $ref: "#/components/schemas/v1alpha1.EvictionSpec" + status: + $ref: "#/components/schemas/v1alpha1.EvictionStatus" required: - - addresses - type: object - v1.EndpointConditions: - description: EndpointConditions represents the current condition of an endpoint. - example: - ready: true - terminating: true - serving: true - properties: - ready: - description: "ready indicates that this endpoint is ready to receive traffic,\ - \ according to whatever system is managing the endpoint. A nil value should\ - \ be interpreted as \"true\". In general, an endpoint should be marked\ - \ ready if it is serving and not terminating, though this can be overridden\ - \ in some cases, such as when the associated Service has set the publishNotReadyAddresses\ - \ flag." - type: boolean - serving: - description: "serving indicates that this endpoint is able to receive traffic,\ - \ according to whatever system is managing the endpoint. For endpoints\ - \ backed by pods, the EndpointSlice controller will mark the endpoint\ - \ as serving if the pod's Ready condition is True. A nil value should\ - \ be interpreted as \"true\"." - type: boolean - terminating: - description: terminating indicates that this endpoint is terminating. A - nil value should be interpreted as "false". - type: boolean - type: object - v1.EndpointHints: - description: EndpointHints provides hints describing how an endpoint should - be consumed. - example: - forZones: - - name: name - - name: name - forNodes: - - name: name - - name: name - properties: - forNodes: - description: forNodes indicates the node(s) this endpoint should be consumed - by when using topology aware routing. May contain a maximum of 8 entries. - items: - $ref: "#/components/schemas/v1.ForNode" - type: array - x-kubernetes-list-type: atomic - forZones: - description: forZones indicates the zone(s) this endpoint should be consumed - by when using topology aware routing. May contain a maximum of 8 entries. - items: - $ref: "#/components/schemas/v1.ForZone" - type: array - x-kubernetes-list-type: atomic - type: object - discovery.v1.EndpointPort: - description: EndpointPort represents a Port used by an EndpointSlice - example: - protocol: protocol - port: 0 - appProtocol: appProtocol - name: name - properties: - appProtocol: - description: |- - The application protocol for this port. This is used as a hint for implementations to offer richer behavior for protocols that they understand. This field follows standard Kubernetes label syntax. Valid values are either: - - * Un-prefixed protocol names - reserved for IANA standard service names (as per RFC-6335 and https://www.iana.org/assignments/service-names). - - * Kubernetes-defined prefixed names: - * 'kubernetes.io/h2c' - HTTP/2 prior knowledge over cleartext as described in https://www.rfc-editor.org/rfc/rfc9113.html#name-starting-http-2-with-prior- - * 'kubernetes.io/ws' - WebSocket over cleartext as described in https://www.rfc-editor.org/rfc/rfc6455 - * 'kubernetes.io/wss' - WebSocket over TLS as described in https://www.rfc-editor.org/rfc/rfc6455 - - * Other protocols should use implementation-defined prefixed names such as mycompany.com/my-custom-protocol. - type: string - name: - description: "name represents the name of this port. All ports in an EndpointSlice\ - \ must have a unique name. If the EndpointSlice is derived from a Kubernetes\ - \ service, this corresponds to the Service.ports[].name. Name must either\ - \ be an empty string or pass DNS_LABEL validation: * must be no more than\ - \ 63 characters long. * must consist of lower case alphanumeric characters\ - \ or '-'. * must start and end with an alphanumeric character. Default\ - \ is empty string." - type: string - port: - description: "port represents the port number of the endpoint. If the EndpointSlice\ - \ is derived from a Kubernetes service, this must be set to the service's\ - \ target port. EndpointSlices used for other purposes may have a nil port." - format: int32 - type: integer - protocol: - description: "protocol represents the IP protocol for this port. Must be\ - \ UDP, TCP, or SCTP. Default is TCP." - type: string + - spec type: object - x-kubernetes-map-type: atomic - v1.EndpointSlice: - description: EndpointSlice represents a set of service endpoints. Most EndpointSlices - are created by the EndpointSlice controller to represent the Pods selected - by Service objects. For a given service there may be multiple EndpointSlice - objects which must be joined to produce the full set of endpoints; you can - find all of the slices for a given service by listing EndpointSlices in the - service's namespace whose `kubernetes.io/service-name` label contains the - service's name. + x-kubernetes-group-version-kind: + - group: lifecycle.k8s.io + kind: Eviction + version: v1alpha1 + x-implements: + - io.kubernetes.client.common.KubernetesObject + v1alpha1.EvictionList: + description: EvictionList contains a list of Eviction resources. example: - endpoints: - - nodeName: nodeName - targetRef: - uid: uid - apiVersion: apiVersion - kind: kind + metadata: + remainingItemCount: 1 + continue: continue + resourceVersion: resourceVersion + shardInfo: + selector: selector + selfLink: selfLink + apiVersion: apiVersion + kind: kind + items: + - metadata: + generation: 6 + finalizers: + - finalizers + - finalizers resourceVersion: resourceVersion - fieldPath: fieldPath + annotations: + key: annotations + generateName: generateName + deletionTimestamp: 2000-01-23T04:56:07.000+00:00 + labels: + key: labels + ownerReferences: + - uid: uid + controller: true + apiVersion: apiVersion + kind: kind + name: name + blockOwnerDeletion: true + - uid: uid + controller: true + apiVersion: apiVersion + kind: kind + name: name + blockOwnerDeletion: true + selfLink: selfLink + deletionGracePeriodSeconds: 0 + uid: uid + managedFields: + - apiVersion: apiVersion + fieldsV1: "{}" + manager: manager + subresource: subresource + time: 2000-01-23T04:56:07.000+00:00 + operation: operation + fieldsType: fieldsType + - apiVersion: apiVersion + fieldsV1: "{}" + manager: manager + subresource: subresource + time: 2000-01-23T04:56:07.000+00:00 + operation: operation + fieldsType: fieldsType + creationTimestamp: 2000-01-23T04:56:07.000+00:00 name: name namespace: namespace - addresses: - - addresses - - addresses - hostname: hostname - zone: zone - hints: - forZones: + apiVersion: apiVersion + kind: kind + spec: + target: + pod: + uid: uid + name: name + status: + requesters: - name: name + intent: intent - name: name - forNodes: + intent: intent + conditions: + - reason: reason + lastTransitionTime: 2000-01-23T04:56:07.000+00:00 + message: message + type: type + observedGeneration: 5 + status: status + - reason: reason + lastTransitionTime: 2000-01-23T04:56:07.000+00:00 + message: message + type: type + observedGeneration: 5 + status: status + responders: + - completionTime: 2000-01-23T04:56:07.000+00:00 + expectedCompletionTime: 2000-01-23T04:56:07.000+00:00 + heartbeatTime: 2000-01-23T04:56:07.000+00:00 + name: name + startTime: 2000-01-23T04:56:07.000+00:00 + message: message + - completionTime: 2000-01-23T04:56:07.000+00:00 + expectedCompletionTime: 2000-01-23T04:56:07.000+00:00 + heartbeatTime: 2000-01-23T04:56:07.000+00:00 + name: name + startTime: 2000-01-23T04:56:07.000+00:00 + message: message + observedGeneration: 0 + targetResponders: - name: name + state: state + priority: 6 - name: name - conditions: - ready: true - terminating: true - serving: true - deprecatedTopology: - key: deprecatedTopology - - nodeName: nodeName - targetRef: - uid: uid - apiVersion: apiVersion - kind: kind + state: state + priority: 6 + - metadata: + generation: 6 + finalizers: + - finalizers + - finalizers resourceVersion: resourceVersion - fieldPath: fieldPath + annotations: + key: annotations + generateName: generateName + deletionTimestamp: 2000-01-23T04:56:07.000+00:00 + labels: + key: labels + ownerReferences: + - uid: uid + controller: true + apiVersion: apiVersion + kind: kind + name: name + blockOwnerDeletion: true + - uid: uid + controller: true + apiVersion: apiVersion + kind: kind + name: name + blockOwnerDeletion: true + selfLink: selfLink + deletionGracePeriodSeconds: 0 + uid: uid + managedFields: + - apiVersion: apiVersion + fieldsV1: "{}" + manager: manager + subresource: subresource + time: 2000-01-23T04:56:07.000+00:00 + operation: operation + fieldsType: fieldsType + - apiVersion: apiVersion + fieldsV1: "{}" + manager: manager + subresource: subresource + time: 2000-01-23T04:56:07.000+00:00 + operation: operation + fieldsType: fieldsType + creationTimestamp: 2000-01-23T04:56:07.000+00:00 name: name namespace: namespace - addresses: - - addresses - - addresses - hostname: hostname - zone: zone - hints: - forZones: + apiVersion: apiVersion + kind: kind + spec: + target: + pod: + uid: uid + name: name + status: + requesters: - name: name + intent: intent - name: name - forNodes: + intent: intent + conditions: + - reason: reason + lastTransitionTime: 2000-01-23T04:56:07.000+00:00 + message: message + type: type + observedGeneration: 5 + status: status + - reason: reason + lastTransitionTime: 2000-01-23T04:56:07.000+00:00 + message: message + type: type + observedGeneration: 5 + status: status + responders: + - completionTime: 2000-01-23T04:56:07.000+00:00 + expectedCompletionTime: 2000-01-23T04:56:07.000+00:00 + heartbeatTime: 2000-01-23T04:56:07.000+00:00 + name: name + startTime: 2000-01-23T04:56:07.000+00:00 + message: message + - completionTime: 2000-01-23T04:56:07.000+00:00 + expectedCompletionTime: 2000-01-23T04:56:07.000+00:00 + heartbeatTime: 2000-01-23T04:56:07.000+00:00 + name: name + startTime: 2000-01-23T04:56:07.000+00:00 + message: message + observedGeneration: 0 + targetResponders: - name: name + state: state + priority: 6 - name: name - conditions: - ready: true - terminating: true - serving: true - deprecatedTopology: - key: deprecatedTopology + state: state + priority: 6 + properties: + apiVersion: + description: "APIVersion defines the versioned schema of this representation\ + \ of an object. Servers should convert recognized schemas to the latest\ + \ internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources" + type: string + items: + description: items is the list of Evictions. + items: + $ref: "#/components/schemas/v1alpha1.Eviction" + type: array + kind: + description: "Kind is a string value representing the REST resource this\ + \ object represents. Servers may infer this from the endpoint the client\ + \ submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds" + type: string + metadata: + $ref: "#/components/schemas/v1.ListMeta" + required: + - items + type: object + x-kubernetes-group-version-kind: + - group: lifecycle.k8s.io + kind: EvictionList + version: v1alpha1 + x-implements: + - io.kubernetes.client.common.KubernetesListObject + v1alpha1.EvictionPodReference: + description: EvictionPodReference contains enough information to locate the + referenced pod inside the same namespace. + example: + uid: uid + name: name + properties: + name: + description: name of the target. This field is required. + type: string + uid: + description: uid of the target. It can be found in .metadata.uid of the + target and is a lowercase UUID in 8-4-4-4-12 format. This field is required. + type: string + required: + - name + - uid + type: object + v1alpha1.EvictionRequest: + description: |- + EvictionRequest defines a request that should ideally result in a graceful eviction of a .spec.target (e.g. termination of a pod). + + The evictionrequest-controller observes intents of all EvictionRequests and transforms them into Evictions. + - .spec.requester is set as a label on the Eviction for easier lookup. + - Each target can have a set of responders assigned to it. Eviction objects are observed by + these responders, who implement the eviction logic and update the Eviction's status with + progress. + + There is many-to-many relationship between EvictionRequests and Evictions in general. And many-to-one if the target is a pod. + + If all requesters withdraw their eviction intent for a common target, the eviction will be canceled. Deleting an EvictionRequest also counts as a withdrawal. Once all EvictionRequest of a target are removed, the corresponding Evictions are eventually garbage collected. + example: metadata: generation: 6 finalizers: @@ -264318,40 +281794,35 @@ components: name: name namespace: namespace apiVersion: apiVersion - addressType: addressType - kind: kind - ports: - - protocol: protocol - port: 0 - appProtocol: appProtocol - name: name - - protocol: protocol - port: 0 - appProtocol: appProtocol - name: name + kind: kind + spec: + requester: requester + intent: intent + target: + pod: + uid: uid + name: name + status: + conditions: + - reason: reason + lastTransitionTime: 2000-01-23T04:56:07.000+00:00 + message: message + type: type + observedGeneration: 5 + status: status + - reason: reason + lastTransitionTime: 2000-01-23T04:56:07.000+00:00 + message: message + type: type + observedGeneration: 5 + status: status + observedGeneration: 0 properties: - addressType: - description: "addressType specifies the type of address carried by this\ - \ EndpointSlice. All addresses in this slice must be the same type. This\ - \ field is immutable after creation. The following address types are currently\ - \ supported: * IPv4: Represents an IPv4 Address. * IPv6: Represents an\ - \ IPv6 Address. * FQDN: Represents a Fully Qualified Domain Name. (Deprecated)\ - \ The EndpointSlice controller only generates, and kube-proxy only processes,\ - \ slices of addressType \"IPv4\" and \"IPv6\". No semantics are defined\ - \ for the \"FQDN\" type." - type: string apiVersion: description: "APIVersion defines the versioned schema of this representation\ \ of an object. Servers should convert recognized schemas to the latest\ \ internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources" type: string - endpoints: - description: endpoints is a list of unique endpoints in this slice. Each - slice may include a maximum of 1000 endpoints. - items: - $ref: "#/components/schemas/v1.Endpoint" - type: array - x-kubernetes-list-type: atomic kind: description: "Kind is a string value representing the REST resource this\ \ object represents. Servers may infer this from the endpoint the client\ @@ -264359,28 +281830,21 @@ components: type: string metadata: $ref: "#/components/schemas/v1.ObjectMeta" - ports: - description: "ports specifies the list of network ports exposed by each\ - \ endpoint in this slice. Each port must have a unique name. Each slice\ - \ may include a maximum of 100 ports. Services always have at least 1\ - \ port, so EndpointSlices generated by the EndpointSlice controller will\ - \ likewise always have at least 1 port. EndpointSlices used for other\ - \ purposes may have an empty ports list." - items: - $ref: "#/components/schemas/discovery.v1.EndpointPort" - type: array - x-kubernetes-list-type: atomic + spec: + $ref: "#/components/schemas/v1alpha1.EvictionRequestSpec" + status: + $ref: "#/components/schemas/v1alpha1.EvictionRequestStatus" required: - - addressType + - spec type: object x-kubernetes-group-version-kind: - - group: discovery.k8s.io - kind: EndpointSlice - version: v1 + - group: lifecycle.k8s.io + kind: EvictionRequest + version: v1alpha1 x-implements: - io.kubernetes.client.common.KubernetesObject - v1.EndpointSliceList: - description: EndpointSliceList represents a list of endpoint slices + v1alpha1.EvictionRequestList: + description: EvictionRequestList contains a list of EvictionRequests resources. example: metadata: remainingItemCount: 1 @@ -264392,62 +281856,7 @@ components: apiVersion: apiVersion kind: kind items: - - endpoints: - - nodeName: nodeName - targetRef: - uid: uid - apiVersion: apiVersion - kind: kind - resourceVersion: resourceVersion - fieldPath: fieldPath - name: name - namespace: namespace - addresses: - - addresses - - addresses - hostname: hostname - zone: zone - hints: - forZones: - - name: name - - name: name - forNodes: - - name: name - - name: name - conditions: - ready: true - terminating: true - serving: true - deprecatedTopology: - key: deprecatedTopology - - nodeName: nodeName - targetRef: - uid: uid - apiVersion: apiVersion - kind: kind - resourceVersion: resourceVersion - fieldPath: fieldPath - name: name - namespace: namespace - addresses: - - addresses - - addresses - hostname: hostname - zone: zone - hints: - forZones: - - name: name - - name: name - forNodes: - - name: name - - name: name - conditions: - ready: true - terminating: true - serving: true - deprecatedTopology: - key: deprecatedTopology - metadata: + - metadata: generation: 6 finalizers: - finalizers @@ -264494,73 +281903,30 @@ components: name: name namespace: namespace apiVersion: apiVersion - addressType: addressType kind: kind - ports: - - protocol: protocol - port: 0 - appProtocol: appProtocol - name: name - - protocol: protocol - port: 0 - appProtocol: appProtocol - name: name - - endpoints: - - nodeName: nodeName - targetRef: - uid: uid - apiVersion: apiVersion - kind: kind - resourceVersion: resourceVersion - fieldPath: fieldPath - name: name - namespace: namespace - addresses: - - addresses - - addresses - hostname: hostname - zone: zone - hints: - forZones: - - name: name - - name: name - forNodes: - - name: name - - name: name - conditions: - ready: true - terminating: true - serving: true - deprecatedTopology: - key: deprecatedTopology - - nodeName: nodeName - targetRef: - uid: uid - apiVersion: apiVersion - kind: kind - resourceVersion: resourceVersion - fieldPath: fieldPath - name: name - namespace: namespace - addresses: - - addresses - - addresses - hostname: hostname - zone: zone - hints: - forZones: - - name: name - - name: name - forNodes: - - name: name - - name: name + spec: + requester: requester + intent: intent + target: + pod: + uid: uid + name: name + status: conditions: - ready: true - terminating: true - serving: true - deprecatedTopology: - key: deprecatedTopology - metadata: + - reason: reason + lastTransitionTime: 2000-01-23T04:56:07.000+00:00 + message: message + type: type + observedGeneration: 5 + status: status + - reason: reason + lastTransitionTime: 2000-01-23T04:56:07.000+00:00 + message: message + type: type + observedGeneration: 5 + status: status + observedGeneration: 0 + - metadata: generation: 6 finalizers: - finalizers @@ -264607,17 +281973,29 @@ components: name: name namespace: namespace apiVersion: apiVersion - addressType: addressType kind: kind - ports: - - protocol: protocol - port: 0 - appProtocol: appProtocol - name: name - - protocol: protocol - port: 0 - appProtocol: appProtocol - name: name + spec: + requester: requester + intent: intent + target: + pod: + uid: uid + name: name + status: + conditions: + - reason: reason + lastTransitionTime: 2000-01-23T04:56:07.000+00:00 + message: message + type: type + observedGeneration: 5 + status: status + - reason: reason + lastTransitionTime: 2000-01-23T04:56:07.000+00:00 + message: message + type: type + observedGeneration: 5 + status: status + observedGeneration: 0 properties: apiVersion: description: "APIVersion defines the versioned schema of this representation\ @@ -264625,9 +282003,9 @@ components: \ internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources" type: string items: - description: items is the list of endpoint slices + description: items is the list of EvictionRequests. items: - $ref: "#/components/schemas/v1.EndpointSlice" + $ref: "#/components/schemas/v1alpha1.EvictionRequest" type: array kind: description: "Kind is a string value representing the REST resource this\ @@ -264640,45 +282018,501 @@ components: - items type: object x-kubernetes-group-version-kind: - - group: discovery.k8s.io - kind: EndpointSliceList - version: v1 + - group: lifecycle.k8s.io + kind: EvictionRequestList + version: v1alpha1 x-implements: - io.kubernetes.client.common.KubernetesListObject - v1.ForNode: - description: ForNode provides information about which nodes should consume this - endpoint. + v1alpha1.EvictionRequestPodReference: + description: EvictionRequestPodReference contains enough information to locate + the referenced pod inside the same namespace. example: + uid: uid name: name properties: name: - description: name represents the name of the node. + description: name of the target. This field is required. + type: string + uid: + description: uid of the target. It can be found in .metadata.uid of the + target and is a lowercase UUID in 8-4-4-4-12 format. This field is required. type: string required: - name + - uid type: object - v1.ForZone: - description: ForZone provides information about which zones should consume this - endpoint. + v1alpha1.EvictionRequestSpec: + description: EvictionRequestSpec is a specification of an EvictionRequest. + example: + requester: requester + intent: intent + target: + pod: + uid: uid + name: name + properties: + intent: + description: |- + intent specifies the action that should be taken for the specified target. + + - Eviction means that the requester is interested in the eviction of the target. - Withdrawn means that the requester is no longer interested in the eviction of the target. + If all requesters' intents are withdrawn for a common target, the eviction will be canceled. + Cancellation consequences: + - Inactive responders will never run. + - Active responders are expected to cancel the eviction. + - Completed or Interrupted responders should not take any action. + type: string + requester: + description: |- + requester allows you to identify the entity, that requested the eviction of the target. + + It must be a valid domain-prefixed key (such as "acme.io/foo"). Domain names *.k8s.io and *.kubernetes.io are reserved. This field is required and immutable. + type: string + target: + $ref: "#/components/schemas/v1alpha1.EvictionRequestTarget" + required: + - intent + - requester + - target + type: object + v1alpha1.EvictionRequestStatus: + description: EvictionRequestStatus represents the last observed status of the + eviction request. + example: + conditions: + - reason: reason + lastTransitionTime: 2000-01-23T04:56:07.000+00:00 + message: message + type: type + observedGeneration: 5 + status: status + - reason: reason + lastTransitionTime: 2000-01-23T04:56:07.000+00:00 + message: message + type: type + observedGeneration: 5 + status: status + observedGeneration: 0 + properties: + conditions: + description: |- + conditions contain information about the eviction request. + + EvictionRequest specific conditions are: TargetEvicted or Failed (managed by evictionrequest-controller). - Failed means that the eviction request is no longer being processed + by any eviction responder. This can happen if the request is canceled or if no responder + managed to evict the target (e.g. terminate or delete a pod). + - TargetEvicted means that the target has been evicted (e.g. a pod has been terminated or deleted). + + These conditions can be reset if the eviction was unsuccessful and a new Eviction intent has been submitted. + + The maximum length of the conditions list is 100. + items: + $ref: "#/components/schemas/v1.Condition" + type: array + x-kubernetes-patch-strategy: merge + x-kubernetes-list-type: map + x-kubernetes-list-map-keys: + - type + x-kubernetes-patch-merge-key: type + observedGeneration: + description: observedGeneration is EvictionRequest's .metadata.generation + observed by the evictionrequest-controller. The observed generation value + cannot be negative and can only be incremented. The minimum value is 1. + This field is managed by evictionrequest-controller. + format: int64 + type: integer + type: object + v1alpha1.EvictionRequestTarget: + description: EvictionRequestTarget contains a reference to an object that should + be evicted. + example: + pod: + uid: uid + name: name + properties: + pod: + $ref: "#/components/schemas/v1alpha1.EvictionRequestPodReference" + type: object + x-kubernetes-unions: + - fields-to-discriminateBy: + pod: Pod + v1alpha1.EvictionSpec: + description: EvictionSpec is a specification of an Eviction. + example: + target: + pod: + uid: uid + name: name + properties: + target: + $ref: "#/components/schemas/v1alpha1.EvictionTarget" + required: + - target + type: object + v1alpha1.EvictionStatus: + description: EvictionStatus represents the last observed status of the eviction + request. + example: + requesters: + - name: name + intent: intent + - name: name + intent: intent + conditions: + - reason: reason + lastTransitionTime: 2000-01-23T04:56:07.000+00:00 + message: message + type: type + observedGeneration: 5 + status: status + - reason: reason + lastTransitionTime: 2000-01-23T04:56:07.000+00:00 + message: message + type: type + observedGeneration: 5 + status: status + responders: + - completionTime: 2000-01-23T04:56:07.000+00:00 + expectedCompletionTime: 2000-01-23T04:56:07.000+00:00 + heartbeatTime: 2000-01-23T04:56:07.000+00:00 + name: name + startTime: 2000-01-23T04:56:07.000+00:00 + message: message + - completionTime: 2000-01-23T04:56:07.000+00:00 + expectedCompletionTime: 2000-01-23T04:56:07.000+00:00 + heartbeatTime: 2000-01-23T04:56:07.000+00:00 + name: name + startTime: 2000-01-23T04:56:07.000+00:00 + message: message + observedGeneration: 0 + targetResponders: + - name: name + state: state + priority: 6 + - name: name + state: state + priority: 6 + properties: + conditions: + description: "conditions contain information about the eviction request.\n\ + \nEviction specific conditions are: TargetEvicted or Failed (managed by\ + \ evictionrequest-controller). - Failed means that the eviction request\ + \ is no longer being processed\n by any eviction responder. This can\ + \ happen if the request is canceled or if no responder\n managed to evict\ + \ the target (e.g. terminate or delete a pod).\n- TargetEvicted means\ + \ that the target has been evicted (e.g. a pod has been terminated or\ + \ deleted).\n\n\tThe maximum length of the conditions list is 100." + items: + $ref: "#/components/schemas/v1.Condition" + type: array + x-kubernetes-patch-strategy: merge + x-kubernetes-list-type: map + x-kubernetes-list-map-keys: + - type + x-kubernetes-patch-merge-key: type + observedGeneration: + description: observedGeneration is Eviction's .metadata.generation observed + by the evictionrequest-controller. The observed generation value cannot + be negative and can only be incremented. The minimum value is 1. This + field is managed by evictionrequest-controller. + format: int64 + type: integer + requesters: + description: |- + requesters allow you to identify the entities, that requested the eviction of the target. If all the requesters withdraw their eviction intent, the eviction will be canceled. + + The maximum length of the requesters list is 100. If this limit is exceeded, requesters with Withdrawn intent should be dropped first. + items: + $ref: "#/components/schemas/v1alpha1.Requester" + type: array + x-kubernetes-patch-strategy: merge + x-kubernetes-list-type: map + x-kubernetes-list-map-keys: + - name + x-kubernetes-patch-merge-key: name + responders: + description: |- + responders represents the eviction process status of each declared responder. + + The responder list should be the same length and have the same .name fields as .status.targetResponders. Only responders with .name that have Active state in .targetResponders[].state should be updated and can be mutated. First initialization of the list is allowed. + + Each ResponderStatus is initialized by evictionrequest-controller and then managed by the designated responder. + items: + $ref: "#/components/schemas/v1alpha1.ResponderStatus" + type: array + x-kubernetes-patch-strategy: merge + x-kubernetes-list-type: map + x-kubernetes-list-map-keys: + - name + x-kubernetes-patch-merge-key: name + targetResponders: + description: |- + targetResponders reference responders that should eventually respond to this eviction to help with the graceful eviction of a target. These responders are selected sequentially, according to their specified priority by setting the Active state to the TargetResponder .state field. The maximum number of active responders allowed is 1. Eventually each responder can end up in an Interrupted, Canceled or, Completed state. Responders should observe these states in order to navigate their lifecycle. + + If the target is a pod, the field is populated from Pod's .spec.evictionResponders. Default responders may be added to the list according to the target. + + Default responders: - imperative-eviction.k8s.io/evictor responder with a priority of 100 is added to the list if the + target is a pod. It will call the imperative Eviction API (pods//eviction subresource). + This call may not succeed due to PodDisruptionBudgets, which may block the pod termination. + It will update the responder message and try again with a backoff. + + The maximum length of the responders list is 11. The length and keys of the list cannot change once set. This field is managed by evictionrequest-controller. + items: + $ref: "#/components/schemas/v1alpha1.TargetResponder" + type: array + x-kubernetes-patch-strategy: merge + x-kubernetes-list-type: map + x-kubernetes-list-map-keys: + - name + x-kubernetes-patch-merge-key: name + type: object + v1alpha1.EvictionTarget: + description: EvictionTarget contains a reference to an object that should be + evicted. + example: + pod: + uid: uid + name: name + properties: + pod: + $ref: "#/components/schemas/v1alpha1.EvictionPodReference" + type: object + x-kubernetes-unions: + - fields-to-discriminateBy: + pod: Pod + v1alpha1.Requester: + description: "Requester allows you to identify the entity, that requested the\ + \ eviction of the target." example: name: name + intent: intent properties: + intent: + description: |- + intent specifies the action that should be taken for the specified target. + + - Eviction means that the requester is interested in the eviction of the target. - Withdrawn means that the requester is no longer interested in the eviction of the target. + If all requesters' intents are withdrawn, the eviction will be canceled. + Cancellation consequences: + - Inactive responders will never run. + - Active responders are expected to cancel the eviction. + - Completed or Interrupted responders should not take any action. + type: string name: - description: name represents the name of the zone. + description: |- + name allows you to identify the entity, that requested the eviction of the target. + + It must be a valid domain-prefixed key (such as "acme.io/foo"). This field must be unique for each requester. This field is required. type: string required: + - intent - name type: object - events.v1.Event: - description: "Event is a report of an event somewhere in the cluster. It generally\ - \ denotes some state change in the system. Events have a limited retention\ - \ time and triggers and messages may evolve with time. Event consumers should\ - \ not rely on the timing of an event with a given Reason reflecting a consistent\ - \ underlying trigger, or the continued existence of events with that Reason.\ - \ Events should be treated as informative, best-effort, supplemental data." + x-kubernetes-map-type: atomic + v1alpha1.ResponderStatus: + description: ResponderStatus represents the last observed status of the eviction + process of the responder. It should be only updated by the designated responder + whose name is .name field. + example: + completionTime: 2000-01-23T04:56:07.000+00:00 + expectedCompletionTime: 2000-01-23T04:56:07.000+00:00 + heartbeatTime: 2000-01-23T04:56:07.000+00:00 + name: name + startTime: 2000-01-23T04:56:07.000+00:00 + message: message + properties: + completionTime: + description: "completionTime tracks the time at which the Responder stopped\ + \ processing the eviction request. Completion means that the responders\ + \ has either fully or partially completed the eviction process, which\ + \ may have resulted in target eviction (e.g. pod termination). It should\ + \ reflect the present time when set. This field becomes immutable once\ + \ set." + format: date-time + type: string + expectedCompletionTime: + description: expectedCompletionTime is the time at which the eviction process + step is expected to end for the responder. The time cannot be set to the + past. May be omitted if no estimate can be made. + format: date-time + type: string + heartbeatTime: + description: heartbeatTime is the last time at which the eviction process + was reported to be in progress by the responder. It should reflect the + present time when set. Responders should avoid heartbeats more frequent + than 20 seconds to avoid overloading the control-plane. + format: date-time + type: string + message: + description: message provides human-readable details about the state of + the responder and the eviction process. Maximum length is 4000 characters. + type: string + name: + description: |- + name allows you to identify the responder reacting to the Eviction. + + It must be a valid domain-prefixed key (such as "acme.io/foo"). This field is initialized by Kubernetes and must be unique for each responder. This field is required. + type: string + startTime: + description: startTime tracks the time at which this responder was designated + as active and should start processing the eviction request. It should + reflect the present time when set. This field is initialized by Kubernetes + when this responder becomes active. This field becomes immutable once + set. + format: date-time + type: string + required: + - name + type: object + x-kubernetes-map-type: granular + v1alpha1.TargetResponder: + description: TargetResponder allows you to specify the responder reacting to + the Eviction. Responders should observe and communicate through the Eviction + API (see .state) to help with the graceful eviction of a target (e.g. termination + of a pod). + example: + name: name + state: state + priority: 6 + properties: + name: + description: |- + name allows you to identify the responder reacting to the Eviction. + + It must be a valid domain-prefixed key (such as "acme.io/foo"). This field must be unique for each responder. This field is required. + type: string + priority: + description: |- + priority for this responder. Higher priorities are selected first by the evictionrequest-controller. If there are responders with the same priority, the responder whose domain name comes first in the alphabetical higher domain order, will be picked. This means that the top domain labels are compared alphabetically first, followed by the lower domain labels. The key is compared last. + + The responder that is the managing controller of the pod should set the value of this field to 10000 to allow both for preemption or fallback registration by other responders. + + The minimum value is 0 and the maximum value is 100000. The interval 0-999 is reserved for responders with *.k8s.io suffix. This field is required and immutable. + format: int32 + type: integer + state: + description: "state specifies a state that is assigned by the evictionrequest-controller.\ + \ Responders should observe this state in order to navigate their lifecycle.\ + \ - Inactive means that the responder should not yet process this eviction\ + \ request. - Active means that the responder is either running or expected\ + \ to start soon.\n Also, startTime has been set in the ResponderStatus\ + \ by the evictionrequest-controller.\n\n An active responder should currently\ + \ interact with the eviction process by updating\n .status.responders,\ + \ where .name is the active responder name. ResponderStatus fields\n \ + \ should be periodically updated to indicate the progress or completion\ + \ of the eviction process.\n If .status.responders[].heartbeatTime field\ + \ is not updated within the heartbeat deadline defined\n by the Eviction\ + \ API (currently 20 minutes), the eviction is passed over to the next\ + \ responder\n\t with a lower priority. Only one responder can be active\ + \ at a time.\n- Interrupted means that the responder has failed to start\ + \ or failed to update\n heartbeatTime in ResponderStatus in a timely\ + \ manner.\n- Canceled means that the responder has been canceled. In other\ + \ words, there\tis no\n EvictionRequest with the same target and Eviction\ + \ intent in .spec.intent.\n- Completed means that the responder has successfully\ + \ completed and set completionTime\n in ResponderStatus.\n\nPlease refer\ + \ to the ResponderStatus in .status.responders for more details on each\ + \ responder." + type: string + required: + - name + - priority + - state + type: object + x-kubernetes-map-type: atomic + v1.HTTPIngressPath: + description: HTTPIngressPath associates a path with a backend. Incoming urls + matching the path are forwarded to the backend. + example: + path: path + backend: + resource: + apiGroup: apiGroup + kind: kind + name: name + service: + port: + number: 0 + name: name + name: name + pathType: pathType + properties: + backend: + $ref: "#/components/schemas/v1.IngressBackend" + path: + description: path is matched against the path of an incoming request. Currently + it can contain characters disallowed from the conventional "path" part + of a URL as defined by RFC 3986. Paths must begin with a '/' and must + be present when using PathType with value "Exact" or "Prefix". + type: string + pathType: + description: |- + pathType determines the interpretation of the path matching. PathType can be one of the following values: * Exact: Matches the URL path exactly. * Prefix: Matches based on a URL path prefix split by '/'. Matching is + done on a path element by element basis. A path element refers is the + list of labels in the path split by the '/' separator. A request is a + match for path p if every p is an element-wise prefix of p of the + request path. Note that if the last element of the path is a substring + of the last element in request path, it is not a match (e.g. /foo/bar + matches /foo/bar/baz, but does not match /foo/barbaz). + * ImplementationSpecific: Interpretation of the Path matching is up to + the IngressClass. Implementations can treat this as a separate PathType + or treat it identically to Prefix or Exact path types. + Implementations are required to support all path types. + type: string + required: + - backend + - pathType + type: object + v1.HTTPIngressRuleValue: + description: "HTTPIngressRuleValue is a list of http selectors pointing to backends.\ + \ In the example: http:///? -> backend where where\ + \ parts of the url correspond to RFC 3986, this resource will be used to match\ + \ against everything after the last '/' and before the first '?' or '#'." + example: + paths: + - path: path + backend: + resource: + apiGroup: apiGroup + kind: kind + name: name + service: + port: + number: 0 + name: name + name: name + pathType: pathType + - path: path + backend: + resource: + apiGroup: apiGroup + kind: kind + name: name + service: + port: + number: 0 + name: name + name: name + pathType: pathType + properties: + paths: + description: paths is a collection of paths that map requests to backends. + items: + $ref: "#/components/schemas/v1.HTTPIngressPath" + type: array + x-kubernetes-list-type: atomic + required: + - paths + type: object + v1.IPAddress: + description: "IPAddress represents a single IP of a single IP Family. The object\ + \ is designed to be used by APIs that operate on IP addresses. The object\ + \ is used by the Service core API for allocation of IP addresses. An IP address\ + \ can be represented in different formats, to guarantee the uniqueness of\ + \ the IP, the name of the object is the IP address in canonical format, four\ + \ decimal digits separated by dots suppressing leading zeros for IPv4 and\ + \ the representation defined by RFC 5952 for IPv6. Valid: 192.168.1.5 or 2001:db8::1\ + \ or 2001:db8:aaaa:bbbb:cccc:dddd:eeee:1 Invalid: 10.01.2.3 or 2001:db8:0:0:0::1" example: - note: note - reason: reason metadata: generation: 6 finalizers: @@ -264725,71 +282559,20 @@ components: creationTimestamp: 2000-01-23T04:56:07.000+00:00 name: name namespace: namespace - reportingInstance: reportingInstance - deprecatedCount: 0 - kind: kind - deprecatedSource: - component: component - host: host - type: type - deprecatedLastTimestamp: 2000-01-23T04:56:07.000+00:00 - regarding: - uid: uid - apiVersion: apiVersion - kind: kind - resourceVersion: resourceVersion - fieldPath: fieldPath - name: name - namespace: namespace - deprecatedFirstTimestamp: 2000-01-23T04:56:07.000+00:00 apiVersion: apiVersion - reportingController: reportingController - related: - uid: uid - apiVersion: apiVersion - kind: kind - resourceVersion: resourceVersion - fieldPath: fieldPath - name: name - namespace: namespace - series: - count: 6 - lastObservedTime: 2000-01-23T04:56:07.000+00:00 - eventTime: 2000-01-23T04:56:07.000+00:00 - action: action + kind: kind + spec: + parentRef: + resource: resource + name: name + namespace: namespace + group: group properties: - action: - description: action is what action was taken/failed regarding to the regarding - object. It is machine-readable. This field cannot be empty for new Events - and it can have at most 128 characters. - type: string apiVersion: description: "APIVersion defines the versioned schema of this representation\ \ of an object. Servers should convert recognized schemas to the latest\ \ internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources" type: string - deprecatedCount: - description: deprecatedCount is the deprecated field assuring backward compatibility - with core.v1 Event type. - format: int32 - type: integer - deprecatedFirstTimestamp: - description: deprecatedFirstTimestamp is the deprecated field assuring backward - compatibility with core.v1 Event type. - format: date-time - type: string - deprecatedLastTimestamp: - description: deprecatedLastTimestamp is the deprecated field assuring backward - compatibility with core.v1 Event type. - format: date-time - type: string - deprecatedSource: - $ref: "#/components/schemas/v1.EventSource" - eventTime: - description: eventTime is the time when this Event was first observed. It - is required. - format: date-time - type: string kind: description: "Kind is a string value representing the REST resource this\ \ object represents. Servers may infer this from the endpoint the client\ @@ -264797,47 +282580,19 @@ components: type: string metadata: $ref: "#/components/schemas/v1.ObjectMeta" - note: - description: "note is a human-readable description of the status of this\ - \ operation. Maximal length of the note is 1kB, but libraries should be\ - \ prepared to handle values up to 64kB." - type: string - reason: - description: reason is why the action was taken. It is human-readable. This - field cannot be empty for new Events and it can have at most 128 characters. - type: string - regarding: - $ref: "#/components/schemas/v1.ObjectReference" - related: - $ref: "#/components/schemas/v1.ObjectReference" - reportingController: - description: "reportingController is the name of the controller that emitted\ - \ this Event, e.g. `kubernetes.io/kubelet`. This field cannot be empty\ - \ for new Events." - type: string - reportingInstance: - description: "reportingInstance is the ID of the controller instance, e.g.\ - \ `kubelet-xyzf`. This field cannot be empty for new Events and it can\ - \ have at most 128 characters." - type: string - series: - $ref: "#/components/schemas/events.v1.EventSeries" - type: - description: "type is the type of this event (Normal, Warning), new types\ - \ could be added in the future. It is machine-readable. This field cannot\ - \ be empty for new Events." - type: string + spec: + $ref: "#/components/schemas/v1.IPAddressSpec" required: - - eventTime + - spec type: object x-kubernetes-group-version-kind: - - group: events.k8s.io - kind: Event + - group: networking.k8s.io + kind: IPAddress version: v1 x-implements: - io.kubernetes.client.common.KubernetesObject - events.v1.EventList: - description: EventList is a list of Event objects. + v1.IPAddressList: + description: IPAddressList contains a list of IPAddress. example: metadata: remainingItemCount: 1 @@ -264849,9 +282604,7 @@ components: apiVersion: apiVersion kind: kind items: - - note: note - reason: reason - metadata: + - metadata: generation: 6 finalizers: - finalizers @@ -264897,41 +282650,15 @@ components: creationTimestamp: 2000-01-23T04:56:07.000+00:00 name: name namespace: namespace - reportingInstance: reportingInstance - deprecatedCount: 0 - kind: kind - deprecatedSource: - component: component - host: host - type: type - deprecatedLastTimestamp: 2000-01-23T04:56:07.000+00:00 - regarding: - uid: uid - apiVersion: apiVersion - kind: kind - resourceVersion: resourceVersion - fieldPath: fieldPath - name: name - namespace: namespace - deprecatedFirstTimestamp: 2000-01-23T04:56:07.000+00:00 apiVersion: apiVersion - reportingController: reportingController - related: - uid: uid - apiVersion: apiVersion - kind: kind - resourceVersion: resourceVersion - fieldPath: fieldPath - name: name - namespace: namespace - series: - count: 6 - lastObservedTime: 2000-01-23T04:56:07.000+00:00 - eventTime: 2000-01-23T04:56:07.000+00:00 - action: action - - note: note - reason: reason - metadata: + kind: kind + spec: + parentRef: + resource: resource + name: name + namespace: namespace + group: group + - metadata: generation: 6 finalizers: - finalizers @@ -264977,38 +282704,14 @@ components: creationTimestamp: 2000-01-23T04:56:07.000+00:00 name: name namespace: namespace - reportingInstance: reportingInstance - deprecatedCount: 0 - kind: kind - deprecatedSource: - component: component - host: host - type: type - deprecatedLastTimestamp: 2000-01-23T04:56:07.000+00:00 - regarding: - uid: uid - apiVersion: apiVersion - kind: kind - resourceVersion: resourceVersion - fieldPath: fieldPath - name: name - namespace: namespace - deprecatedFirstTimestamp: 2000-01-23T04:56:07.000+00:00 apiVersion: apiVersion - reportingController: reportingController - related: - uid: uid - apiVersion: apiVersion - kind: kind - resourceVersion: resourceVersion - fieldPath: fieldPath - name: name - namespace: namespace - series: - count: 6 - lastObservedTime: 2000-01-23T04:56:07.000+00:00 - eventTime: 2000-01-23T04:56:07.000+00:00 - action: action + kind: kind + spec: + parentRef: + resource: resource + name: name + namespace: namespace + group: group properties: apiVersion: description: "APIVersion defines the versioned schema of this representation\ @@ -265016,9 +282719,9 @@ components: \ internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources" type: string items: - description: items is a list of schema objects. + description: items is the list of IPAddresses. items: - $ref: "#/components/schemas/events.v1.Event" + $ref: "#/components/schemas/v1.IPAddress" type: array kind: description: "Kind is a string value representing the REST resource this\ @@ -265031,78 +282734,252 @@ components: - items type: object x-kubernetes-group-version-kind: - - group: events.k8s.io - kind: EventList + - group: networking.k8s.io + kind: IPAddressList version: v1 x-implements: - io.kubernetes.client.common.KubernetesListObject - events.v1.EventSeries: - description: "EventSeries contain information on series of events, i.e. thing\ - \ that was/is happening continuously for some time. How often to update the\ - \ EventSeries is up to the event reporters. The default event reporter in\ - \ \"k8s.io/client-go/tools/events/event_broadcaster.go\" shows how this struct\ - \ is updated on heartbeats and can guide customized reporter implementations." + v1.IPAddressSpec: + description: IPAddressSpec describe the attributes in an IP Address. example: - count: 6 - lastObservedTime: 2000-01-23T04:56:07.000+00:00 + parentRef: + resource: resource + name: name + namespace: namespace + group: group properties: - count: - description: count is the number of occurrences in this series up to the - last heartbeat time. - format: int32 - type: integer - lastObservedTime: - description: lastObservedTime is the time when last Event from the series - was seen before last heartbeat. - format: date-time - type: string + parentRef: + $ref: "#/components/schemas/v1.ParentReference" required: - - count - - lastObservedTime + - parentRef type: object - v1.ExemptPriorityLevelConfiguration: - description: "ExemptPriorityLevelConfiguration describes the configurable aspects\ - \ of the handling of exempt requests. In the mandatory exempt configuration\ - \ object the values in the fields here can be modified by authorized users,\ - \ unlike the rest of the `spec`." + v1.IPBlock: + description: "IPBlock describes a particular CIDR (Ex. \"192.168.1.0/24\",\"\ + 2001:db8::/64\") that is allowed to the pods matched by a NetworkPolicySpec's\ + \ podSelector. The except entry describes CIDRs that should not be included\ + \ within this rule." example: - lendablePercent: 0 - nominalConcurrencyShares: 6 + cidr: cidr + except: + - except + - except properties: - lendablePercent: - description: |- - `lendablePercent` prescribes the fraction of the level's NominalCL that can be borrowed by other priority levels. This value of this field must be between 0 and 100, inclusive, and it defaults to 0. The number of seats that other levels can borrow from this level, known as this level's LendableConcurrencyLimit (LendableCL), is defined as follows. - - LendableCL(i) = round( NominalCL(i) * lendablePercent(i)/100.0 ) - format: int32 - type: integer - nominalConcurrencyShares: - description: |- - `nominalConcurrencyShares` (NCS) contributes to the computation of the NominalConcurrencyLimit (NominalCL) of this level. This is the number of execution seats nominally reserved for this priority level. This DOES NOT limit the dispatching from this priority level but affects the other priority levels through the borrowing mechanism. The server's concurrency limit (ServerCL) is divided among all the priority levels in proportion to their NCS values: - - NominalCL(i) = ceil( ServerCL * NCS(i) / sum_ncs ) sum_ncs = sum[priority level k] NCS(k) - - Bigger numbers mean a larger nominal concurrency limit, at the expense of every other priority level. This field has a default value of zero. - format: int32 - type: integer + cidr: + description: cidr is a string representing the IPBlock Valid examples are + "192.168.1.0/24" or "2001:db8::/64" + type: string + except: + description: except is a slice of CIDRs that should not be included within + an IPBlock Valid examples are "192.168.1.0/24" or "2001:db8::/64" Except + values will be rejected if they are outside the cidr range + items: + type: string + type: array + x-kubernetes-list-type: atomic + required: + - cidr type: object - v1.FlowDistinguisherMethod: - description: FlowDistinguisherMethod specifies the method of a flow distinguisher. + v1.Ingress: + description: "Ingress is a collection of rules that allow inbound connections\ + \ to reach the endpoints defined by a backend. An Ingress can be configured\ + \ to give services externally-reachable urls, load balance traffic, terminate\ + \ SSL, offer name based virtual hosting etc." example: - type: type + metadata: + generation: 6 + finalizers: + - finalizers + - finalizers + resourceVersion: resourceVersion + annotations: + key: annotations + generateName: generateName + deletionTimestamp: 2000-01-23T04:56:07.000+00:00 + labels: + key: labels + ownerReferences: + - uid: uid + controller: true + apiVersion: apiVersion + kind: kind + name: name + blockOwnerDeletion: true + - uid: uid + controller: true + apiVersion: apiVersion + kind: kind + name: name + blockOwnerDeletion: true + selfLink: selfLink + deletionGracePeriodSeconds: 0 + uid: uid + managedFields: + - apiVersion: apiVersion + fieldsV1: "{}" + manager: manager + subresource: subresource + time: 2000-01-23T04:56:07.000+00:00 + operation: operation + fieldsType: fieldsType + - apiVersion: apiVersion + fieldsV1: "{}" + manager: manager + subresource: subresource + time: 2000-01-23T04:56:07.000+00:00 + operation: operation + fieldsType: fieldsType + creationTimestamp: 2000-01-23T04:56:07.000+00:00 + name: name + namespace: namespace + apiVersion: apiVersion + kind: kind + spec: + defaultBackend: + resource: + apiGroup: apiGroup + kind: kind + name: name + service: + port: + number: 0 + name: name + name: name + ingressClassName: ingressClassName + rules: + - host: host + http: + paths: + - path: path + backend: + resource: + apiGroup: apiGroup + kind: kind + name: name + service: + port: + number: 0 + name: name + name: name + pathType: pathType + - path: path + backend: + resource: + apiGroup: apiGroup + kind: kind + name: name + service: + port: + number: 0 + name: name + name: name + pathType: pathType + - host: host + http: + paths: + - path: path + backend: + resource: + apiGroup: apiGroup + kind: kind + name: name + service: + port: + number: 0 + name: name + name: name + pathType: pathType + - path: path + backend: + resource: + apiGroup: apiGroup + kind: kind + name: name + service: + port: + number: 0 + name: name + name: name + pathType: pathType + tls: + - secretName: secretName + hosts: + - hosts + - hosts + - secretName: secretName + hosts: + - hosts + - hosts + status: + loadBalancer: + ingress: + - hostname: hostname + ip: ip + ports: + - protocol: protocol + port: 6 + error: error + - protocol: protocol + port: 6 + error: error + - hostname: hostname + ip: ip + ports: + - protocol: protocol + port: 6 + error: error + - protocol: protocol + port: 6 + error: error properties: - type: - description: '`type` is the type of flow distinguisher method The supported - types are "ByUser" and "ByNamespace". Required.' + apiVersion: + description: "APIVersion defines the versioned schema of this representation\ + \ of an object. Servers should convert recognized schemas to the latest\ + \ internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources" type: string - required: - - type + kind: + description: "Kind is a string value representing the REST resource this\ + \ object represents. Servers may infer this from the endpoint the client\ + \ submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds" + type: string + metadata: + $ref: "#/components/schemas/v1.ObjectMeta" + spec: + $ref: "#/components/schemas/v1.IngressSpec" + status: + $ref: "#/components/schemas/v1.IngressStatus" type: object - v1.FlowSchema: - description: "FlowSchema defines the schema of a group of flows. Note that a\ - \ flow is made up of a set of inbound API requests with similar attributes\ - \ and is identified by a pair of strings: the name of the FlowSchema and a\ - \ \"flow distinguisher\"." + x-kubernetes-group-version-kind: + - group: networking.k8s.io + kind: Ingress + version: v1 + x-implements: + - io.kubernetes.client.common.KubernetesObject + v1.IngressBackend: + description: IngressBackend describes all endpoints for a given service and + port. + example: + resource: + apiGroup: apiGroup + kind: kind + name: name + service: + port: + number: 0 + name: name + name: name + properties: + resource: + $ref: "#/components/schemas/v1.TypedLocalObjectReference" + service: + $ref: "#/components/schemas/v1.IngressServiceBackend" + type: object + v1.IngressClass: + description: "IngressClass represents the class of the Ingress, referenced by\ + \ the Ingress Spec. The `ingressclass.kubernetes.io/is-default-class` annotation\ + \ can be used to indicate that an IngressClass should be considered default.\ + \ When a single IngressClass resource has this annotation set to true, new\ + \ Ingress resources without a class specified will be assigned this default\ + \ class." example: metadata: generation: 6 @@ -265153,138 +283030,13 @@ components: apiVersion: apiVersion kind: kind spec: - priorityLevelConfiguration: + controller: controller + parameters: + apiGroup: apiGroup + kind: kind + scope: scope name: name - matchingPrecedence: 0 - rules: - - nonResourceRules: - - verbs: - - verbs - - verbs - nonResourceURLs: - - nonResourceURLs - - nonResourceURLs - - verbs: - - verbs - - verbs - nonResourceURLs: - - nonResourceURLs - - nonResourceURLs - resourceRules: - - clusterScope: true - resources: - - resources - - resources - verbs: - - verbs - - verbs - apiGroups: - - apiGroups - - apiGroups - namespaces: - - namespaces - - namespaces - - clusterScope: true - resources: - - resources - - resources - verbs: - - verbs - - verbs - apiGroups: - - apiGroups - - apiGroups - namespaces: - - namespaces - - namespaces - subjects: - - kind: kind - serviceAccount: - name: name - namespace: namespace - user: - name: name - group: - name: name - - kind: kind - serviceAccount: - name: name - namespace: namespace - user: - name: name - group: - name: name - - nonResourceRules: - - verbs: - - verbs - - verbs - nonResourceURLs: - - nonResourceURLs - - nonResourceURLs - - verbs: - - verbs - - verbs - nonResourceURLs: - - nonResourceURLs - - nonResourceURLs - resourceRules: - - clusterScope: true - resources: - - resources - - resources - verbs: - - verbs - - verbs - apiGroups: - - apiGroups - - apiGroups - namespaces: - - namespaces - - namespaces - - clusterScope: true - resources: - - resources - - resources - verbs: - - verbs - - verbs - apiGroups: - - apiGroups - - apiGroups - namespaces: - - namespaces - - namespaces - subjects: - - kind: kind - serviceAccount: - name: name - namespace: namespace - user: - name: name - group: - name: name - - kind: kind - serviceAccount: - name: name - namespace: namespace - user: - name: name - group: - name: name - distinguisherMethod: - type: type - status: - conditions: - - reason: reason - lastTransitionTime: 2000-01-23T04:56:07.000+00:00 - message: message - type: type - status: status - - reason: reason - lastTransitionTime: 2000-01-23T04:56:07.000+00:00 - message: message - type: type - status: status + namespace: namespace properties: apiVersion: description: "APIVersion defines the versioned schema of this representation\ @@ -265299,48 +283051,224 @@ components: metadata: $ref: "#/components/schemas/v1.ObjectMeta" spec: - $ref: "#/components/schemas/v1.FlowSchemaSpec" - status: - $ref: "#/components/schemas/v1.FlowSchemaStatus" + $ref: "#/components/schemas/v1.IngressClassSpec" type: object x-kubernetes-group-version-kind: - - group: flowcontrol.apiserver.k8s.io - kind: FlowSchema + - group: networking.k8s.io + kind: IngressClass version: v1 x-implements: - io.kubernetes.client.common.KubernetesObject - v1.FlowSchemaCondition: - description: FlowSchemaCondition describes conditions for a FlowSchema. + v1.IngressClassList: + description: IngressClassList is a collection of IngressClasses. example: - reason: reason - lastTransitionTime: 2000-01-23T04:56:07.000+00:00 - message: message - type: type - status: status + metadata: + remainingItemCount: 1 + continue: continue + resourceVersion: resourceVersion + shardInfo: + selector: selector + selfLink: selfLink + apiVersion: apiVersion + kind: kind + items: + - metadata: + generation: 6 + finalizers: + - finalizers + - finalizers + resourceVersion: resourceVersion + annotations: + key: annotations + generateName: generateName + deletionTimestamp: 2000-01-23T04:56:07.000+00:00 + labels: + key: labels + ownerReferences: + - uid: uid + controller: true + apiVersion: apiVersion + kind: kind + name: name + blockOwnerDeletion: true + - uid: uid + controller: true + apiVersion: apiVersion + kind: kind + name: name + blockOwnerDeletion: true + selfLink: selfLink + deletionGracePeriodSeconds: 0 + uid: uid + managedFields: + - apiVersion: apiVersion + fieldsV1: "{}" + manager: manager + subresource: subresource + time: 2000-01-23T04:56:07.000+00:00 + operation: operation + fieldsType: fieldsType + - apiVersion: apiVersion + fieldsV1: "{}" + manager: manager + subresource: subresource + time: 2000-01-23T04:56:07.000+00:00 + operation: operation + fieldsType: fieldsType + creationTimestamp: 2000-01-23T04:56:07.000+00:00 + name: name + namespace: namespace + apiVersion: apiVersion + kind: kind + spec: + controller: controller + parameters: + apiGroup: apiGroup + kind: kind + scope: scope + name: name + namespace: namespace + - metadata: + generation: 6 + finalizers: + - finalizers + - finalizers + resourceVersion: resourceVersion + annotations: + key: annotations + generateName: generateName + deletionTimestamp: 2000-01-23T04:56:07.000+00:00 + labels: + key: labels + ownerReferences: + - uid: uid + controller: true + apiVersion: apiVersion + kind: kind + name: name + blockOwnerDeletion: true + - uid: uid + controller: true + apiVersion: apiVersion + kind: kind + name: name + blockOwnerDeletion: true + selfLink: selfLink + deletionGracePeriodSeconds: 0 + uid: uid + managedFields: + - apiVersion: apiVersion + fieldsV1: "{}" + manager: manager + subresource: subresource + time: 2000-01-23T04:56:07.000+00:00 + operation: operation + fieldsType: fieldsType + - apiVersion: apiVersion + fieldsV1: "{}" + manager: manager + subresource: subresource + time: 2000-01-23T04:56:07.000+00:00 + operation: operation + fieldsType: fieldsType + creationTimestamp: 2000-01-23T04:56:07.000+00:00 + name: name + namespace: namespace + apiVersion: apiVersion + kind: kind + spec: + controller: controller + parameters: + apiGroup: apiGroup + kind: kind + scope: scope + name: name + namespace: namespace properties: - lastTransitionTime: - description: '`lastTransitionTime` is the last time the condition transitioned - from one status to another.' - format: date-time + apiVersion: + description: "APIVersion defines the versioned schema of this representation\ + \ of an object. Servers should convert recognized schemas to the latest\ + \ internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources" type: string - message: - description: '`message` is a human-readable message indicating details about - last transition.' + items: + description: items is the list of IngressClasses. + items: + $ref: "#/components/schemas/v1.IngressClass" + type: array + kind: + description: "Kind is a string value representing the REST resource this\ + \ object represents. Servers may infer this from the endpoint the client\ + \ submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds" type: string - reason: - description: "`reason` is a unique, one-word, CamelCase reason for the condition's\ - \ last transition." + metadata: + $ref: "#/components/schemas/v1.ListMeta" + required: + - items + type: object + x-kubernetes-group-version-kind: + - group: networking.k8s.io + kind: IngressClassList + version: v1 + x-implements: + - io.kubernetes.client.common.KubernetesListObject + v1.IngressClassParametersReference: + description: IngressClassParametersReference identifies an API object. This + can be used to specify a cluster or namespace-scoped resource. + example: + apiGroup: apiGroup + kind: kind + scope: scope + name: name + namespace: namespace + properties: + apiGroup: + description: "apiGroup is the group for the resource being referenced. If\ + \ APIGroup is not specified, the specified Kind must be in the core API\ + \ group. For any other third-party types, APIGroup is required." type: string - status: - description: "`status` is the status of the condition. Can be True, False,\ - \ Unknown. Required." + kind: + description: kind is the type of resource being referenced. type: string - type: - description: '`type` is the type of the condition. Required.' + name: + description: name is the name of resource being referenced. + type: string + namespace: + description: namespace is the namespace of the resource being referenced. + This field is required when scope is set to "Namespace" and must be unset + when scope is set to "Cluster". + type: string + scope: + description: scope represents if this refers to a cluster or namespace scoped + resource. This may be set to "Cluster" (default) or "Namespace". type: string + required: + - kind + - name type: object - v1.FlowSchemaList: - description: FlowSchemaList is a list of FlowSchema objects. + v1.IngressClassSpec: + description: IngressClassSpec provides information about the class of an Ingress. + example: + controller: controller + parameters: + apiGroup: apiGroup + kind: kind + scope: scope + name: name + namespace: namespace + properties: + controller: + description: "controller refers to the name of the controller that should\ + \ handle this class. This allows for different \"flavors\" that are controlled\ + \ by the same controller. For example, you may have different parameters\ + \ for the same implementing controller. This should be specified as a\ + \ domain-prefixed path no more than 250 characters in length, e.g. \"\ + acme.io/ingress-controller\". This field is immutable." + type: string + parameters: + $ref: "#/components/schemas/v1.IngressClassParametersReference" + type: object + v1.IngressList: + description: IngressList is a collection of Ingress. example: metadata: remainingItemCount: 1 @@ -265401,138 +283329,102 @@ components: apiVersion: apiVersion kind: kind spec: - priorityLevelConfiguration: - name: name - matchingPrecedence: 0 - rules: - - nonResourceRules: - - verbs: - - verbs - - verbs - nonResourceURLs: - - nonResourceURLs - - nonResourceURLs - - verbs: - - verbs - - verbs - nonResourceURLs: - - nonResourceURLs - - nonResourceURLs - resourceRules: - - clusterScope: true - resources: - - resources - - resources - verbs: - - verbs - - verbs - apiGroups: - - apiGroups - - apiGroups - namespaces: - - namespaces - - namespaces - - clusterScope: true - resources: - - resources - - resources - verbs: - - verbs - - verbs - apiGroups: - - apiGroups - - apiGroups - namespaces: - - namespaces - - namespaces - subjects: - - kind: kind - serviceAccount: - name: name - namespace: namespace - user: - name: name - group: - name: name - - kind: kind - serviceAccount: - name: name - namespace: namespace - user: - name: name - group: - name: name - - nonResourceRules: - - verbs: - - verbs - - verbs - nonResourceURLs: - - nonResourceURLs - - nonResourceURLs - - verbs: - - verbs - - verbs - nonResourceURLs: - - nonResourceURLs - - nonResourceURLs - resourceRules: - - clusterScope: true - resources: - - resources - - resources - verbs: - - verbs - - verbs - apiGroups: - - apiGroups - - apiGroups - namespaces: - - namespaces - - namespaces - - clusterScope: true - resources: - - resources - - resources - verbs: - - verbs - - verbs - apiGroups: - - apiGroups - - apiGroups - namespaces: - - namespaces - - namespaces - subjects: - - kind: kind - serviceAccount: - name: name - namespace: namespace - user: - name: name - group: - name: name - - kind: kind - serviceAccount: - name: name - namespace: namespace - user: - name: name - group: + defaultBackend: + resource: + apiGroup: apiGroup + kind: kind + name: name + service: + port: + number: 0 name: name - distinguisherMethod: - type: type + name: name + ingressClassName: ingressClassName + rules: + - host: host + http: + paths: + - path: path + backend: + resource: + apiGroup: apiGroup + kind: kind + name: name + service: + port: + number: 0 + name: name + name: name + pathType: pathType + - path: path + backend: + resource: + apiGroup: apiGroup + kind: kind + name: name + service: + port: + number: 0 + name: name + name: name + pathType: pathType + - host: host + http: + paths: + - path: path + backend: + resource: + apiGroup: apiGroup + kind: kind + name: name + service: + port: + number: 0 + name: name + name: name + pathType: pathType + - path: path + backend: + resource: + apiGroup: apiGroup + kind: kind + name: name + service: + port: + number: 0 + name: name + name: name + pathType: pathType + tls: + - secretName: secretName + hosts: + - hosts + - hosts + - secretName: secretName + hosts: + - hosts + - hosts status: - conditions: - - reason: reason - lastTransitionTime: 2000-01-23T04:56:07.000+00:00 - message: message - type: type - status: status - - reason: reason - lastTransitionTime: 2000-01-23T04:56:07.000+00:00 - message: message - type: type - status: status + loadBalancer: + ingress: + - hostname: hostname + ip: ip + ports: + - protocol: protocol + port: 6 + error: error + - protocol: protocol + port: 6 + error: error + - hostname: hostname + ip: ip + ports: + - protocol: protocol + port: 6 + error: error + - protocol: protocol + port: 6 + error: error - metadata: generation: 6 finalizers: @@ -265582,138 +283474,102 @@ components: apiVersion: apiVersion kind: kind spec: - priorityLevelConfiguration: - name: name - matchingPrecedence: 0 - rules: - - nonResourceRules: - - verbs: - - verbs - - verbs - nonResourceURLs: - - nonResourceURLs - - nonResourceURLs - - verbs: - - verbs - - verbs - nonResourceURLs: - - nonResourceURLs - - nonResourceURLs - resourceRules: - - clusterScope: true - resources: - - resources - - resources - verbs: - - verbs - - verbs - apiGroups: - - apiGroups - - apiGroups - namespaces: - - namespaces - - namespaces - - clusterScope: true - resources: - - resources - - resources - verbs: - - verbs - - verbs - apiGroups: - - apiGroups - - apiGroups - namespaces: - - namespaces - - namespaces - subjects: - - kind: kind - serviceAccount: - name: name - namespace: namespace - user: - name: name - group: - name: name - - kind: kind - serviceAccount: - name: name - namespace: namespace - user: - name: name - group: - name: name - - nonResourceRules: - - verbs: - - verbs - - verbs - nonResourceURLs: - - nonResourceURLs - - nonResourceURLs - - verbs: - - verbs - - verbs - nonResourceURLs: - - nonResourceURLs - - nonResourceURLs - resourceRules: - - clusterScope: true - resources: - - resources - - resources - verbs: - - verbs - - verbs - apiGroups: - - apiGroups - - apiGroups - namespaces: - - namespaces - - namespaces - - clusterScope: true - resources: - - resources - - resources - verbs: - - verbs - - verbs - apiGroups: - - apiGroups - - apiGroups - namespaces: - - namespaces - - namespaces - subjects: - - kind: kind - serviceAccount: - name: name - namespace: namespace - user: - name: name - group: - name: name - - kind: kind - serviceAccount: - name: name - namespace: namespace - user: - name: name - group: + defaultBackend: + resource: + apiGroup: apiGroup + kind: kind + name: name + service: + port: + number: 0 name: name - distinguisherMethod: - type: type + name: name + ingressClassName: ingressClassName + rules: + - host: host + http: + paths: + - path: path + backend: + resource: + apiGroup: apiGroup + kind: kind + name: name + service: + port: + number: 0 + name: name + name: name + pathType: pathType + - path: path + backend: + resource: + apiGroup: apiGroup + kind: kind + name: name + service: + port: + number: 0 + name: name + name: name + pathType: pathType + - host: host + http: + paths: + - path: path + backend: + resource: + apiGroup: apiGroup + kind: kind + name: name + service: + port: + number: 0 + name: name + name: name + pathType: pathType + - path: path + backend: + resource: + apiGroup: apiGroup + kind: kind + name: name + service: + port: + number: 0 + name: name + name: name + pathType: pathType + tls: + - secretName: secretName + hosts: + - hosts + - hosts + - secretName: secretName + hosts: + - hosts + - hosts status: - conditions: - - reason: reason - lastTransitionTime: 2000-01-23T04:56:07.000+00:00 - message: message - type: type - status: status - - reason: reason - lastTransitionTime: 2000-01-23T04:56:07.000+00:00 - message: message - type: type - status: status + loadBalancer: + ingress: + - hostname: hostname + ip: ip + ports: + - protocol: protocol + port: 6 + error: error + - protocol: protocol + port: 6 + error: error + - hostname: hostname + ip: ip + ports: + - protocol: protocol + port: 6 + error: error + - protocol: protocol + port: 6 + error: error properties: apiVersion: description: "APIVersion defines the versioned schema of this representation\ @@ -265721,9 +283577,9 @@ components: \ internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources" type: string items: - description: '`items` is a list of FlowSchemas.' + description: items is the list of Ingress. items: - $ref: "#/components/schemas/v1.FlowSchema" + $ref: "#/components/schemas/v1.Ingress" type: array kind: description: "Kind is a string value representing the REST resource this\ @@ -265736,407 +283592,340 @@ components: - items type: object x-kubernetes-group-version-kind: - - group: flowcontrol.apiserver.k8s.io - kind: FlowSchemaList + - group: networking.k8s.io + kind: IngressList version: v1 x-implements: - io.kubernetes.client.common.KubernetesListObject - v1.FlowSchemaSpec: - description: FlowSchemaSpec describes how the FlowSchema's specification looks - like. + v1.IngressLoadBalancerIngress: + description: IngressLoadBalancerIngress represents the status of a load-balancer + ingress point. example: - priorityLevelConfiguration: - name: name - matchingPrecedence: 0 - rules: - - nonResourceRules: - - verbs: - - verbs - - verbs - nonResourceURLs: - - nonResourceURLs - - nonResourceURLs - - verbs: - - verbs - - verbs - nonResourceURLs: - - nonResourceURLs - - nonResourceURLs - resourceRules: - - clusterScope: true - resources: - - resources - - resources - verbs: - - verbs - - verbs - apiGroups: - - apiGroups - - apiGroups - namespaces: - - namespaces - - namespaces - - clusterScope: true - resources: - - resources - - resources - verbs: - - verbs - - verbs - apiGroups: - - apiGroups - - apiGroups - namespaces: - - namespaces - - namespaces - subjects: - - kind: kind - serviceAccount: - name: name - namespace: namespace - user: - name: name - group: - name: name - - kind: kind - serviceAccount: - name: name - namespace: namespace - user: - name: name - group: - name: name - - nonResourceRules: - - verbs: - - verbs - - verbs - nonResourceURLs: - - nonResourceURLs - - nonResourceURLs - - verbs: - - verbs - - verbs - nonResourceURLs: - - nonResourceURLs - - nonResourceURLs - resourceRules: - - clusterScope: true - resources: - - resources - - resources - verbs: - - verbs - - verbs - apiGroups: - - apiGroups - - apiGroups - namespaces: - - namespaces - - namespaces - - clusterScope: true - resources: - - resources - - resources - verbs: - - verbs - - verbs - apiGroups: - - apiGroups - - apiGroups - namespaces: - - namespaces - - namespaces - subjects: - - kind: kind - serviceAccount: - name: name - namespace: namespace - user: - name: name - group: - name: name - - kind: kind - serviceAccount: - name: name - namespace: namespace - user: - name: name - group: - name: name - distinguisherMethod: - type: type + hostname: hostname + ip: ip + ports: + - protocol: protocol + port: 6 + error: error + - protocol: protocol + port: 6 + error: error properties: - distinguisherMethod: - $ref: "#/components/schemas/v1.FlowDistinguisherMethod" - matchingPrecedence: - description: "`matchingPrecedence` is used to choose among the FlowSchemas\ - \ that match a given request. The chosen FlowSchema is among those with\ - \ the numerically lowest (which we take to be logically highest) MatchingPrecedence.\ - \ Each MatchingPrecedence value must be ranged in [1,10000]. Note that\ - \ if the precedence is not specified, it will be set to 1000 as default." - format: int32 - type: integer - priorityLevelConfiguration: - $ref: "#/components/schemas/v1.PriorityLevelConfigurationReference" - rules: - description: "`rules` describes which requests will match this flow schema.\ - \ This FlowSchema matches a request if and only if at least one member\ - \ of rules matches the request. if it is an empty slice, there will be\ - \ no requests matching the FlowSchema." + hostname: + description: hostname is set for load-balancer ingress points that are DNS + based. + type: string + ip: + description: ip is set for load-balancer ingress points that are IP based. + type: string + ports: + description: ports provides information about the ports exposed by this + LoadBalancer. items: - $ref: "#/components/schemas/v1.PolicyRulesWithSubjects" + $ref: "#/components/schemas/v1.IngressPortStatus" type: array x-kubernetes-list-type: atomic - required: - - priorityLevelConfiguration type: object - v1.FlowSchemaStatus: - description: FlowSchemaStatus represents the current state of a FlowSchema. + v1.IngressLoadBalancerStatus: + description: IngressLoadBalancerStatus represents the status of a load-balancer. example: - conditions: - - reason: reason - lastTransitionTime: 2000-01-23T04:56:07.000+00:00 - message: message - type: type - status: status - - reason: reason - lastTransitionTime: 2000-01-23T04:56:07.000+00:00 - message: message - type: type - status: status + ingress: + - hostname: hostname + ip: ip + ports: + - protocol: protocol + port: 6 + error: error + - protocol: protocol + port: 6 + error: error + - hostname: hostname + ip: ip + ports: + - protocol: protocol + port: 6 + error: error + - protocol: protocol + port: 6 + error: error properties: - conditions: - description: '`conditions` is a list of the current states of FlowSchema.' + ingress: + description: ingress is a list containing ingress points for the load-balancer. items: - $ref: "#/components/schemas/v1.FlowSchemaCondition" + $ref: "#/components/schemas/v1.IngressLoadBalancerIngress" type: array - x-kubernetes-patch-strategy: merge - x-kubernetes-list-type: map - x-kubernetes-list-map-keys: - - type - x-kubernetes-patch-merge-key: type + x-kubernetes-list-type: atomic type: object - v1.GroupSubject: - description: GroupSubject holds detailed information for group-kind subject. + v1.IngressPortStatus: + description: IngressPortStatus represents the error condition of a service port example: - name: name + protocol: protocol + port: 6 + error: error properties: - name: - description: "name is the user group that matches, or \"*\" to match all\ - \ user groups. See https://github.com/kubernetes/apiserver/blob/master/pkg/authentication/user/user.go\ - \ for some well-known group names. Required." + error: + description: |- + error is to record the problem with the service port The format of the error shall comply with the following rules: - built-in error values shall be specified in this file and those shall use + CamelCase names + - cloud provider specific error values must have names that comply with the + format foo.example.com/CamelCase. type: string - required: - - name - type: object - v1.LimitResponse: - description: LimitResponse defines how to handle requests that can not be executed - right now. - example: - queuing: - handSize: 5 - queues: 7 - queueLengthLimit: 2 - type: type - properties: - queuing: - $ref: "#/components/schemas/v1.QueuingConfiguration" - type: - description: '`type` is "Queue" or "Reject". "Queue" means that requests - that can not be executed upon arrival are held in a queue until they can - be executed or a queuing limit is reached. "Reject" means that requests - that can not be executed upon arrival are rejected. Required.' + port: + description: port is the port number of the ingress port. + format: int32 + type: integer + protocol: + description: "protocol is the protocol of the ingress port. The supported\ + \ values are: \"TCP\", \"UDP\", \"SCTP\"" type: string required: - - type + - port + - protocol type: object - x-kubernetes-unions: - - discriminator: type - fields-to-discriminateBy: - queuing: Queuing - v1.LimitedPriorityLevelConfiguration: - description: |- - LimitedPriorityLevelConfiguration specifies how to handle requests that are subject to limits. It addresses two issues: - - How are requests for this priority level limited? - - What should be done with requests that exceed the limit? + v1.IngressRule: + description: "IngressRule represents the rules mapping the paths under a specified\ + \ host to the related backend services. Incoming requests are first evaluated\ + \ for a host match, then routed to the backend associated with the matching\ + \ IngressRuleValue." example: - lendablePercent: 5 - borrowingLimitPercent: 1 - limitResponse: - queuing: - handSize: 5 - queues: 7 - queueLengthLimit: 2 - type: type - nominalConcurrencyShares: 9 + host: host + http: + paths: + - path: path + backend: + resource: + apiGroup: apiGroup + kind: kind + name: name + service: + port: + number: 0 + name: name + name: name + pathType: pathType + - path: path + backend: + resource: + apiGroup: apiGroup + kind: kind + name: name + service: + port: + number: 0 + name: name + name: name + pathType: pathType properties: - borrowingLimitPercent: - description: |- - `borrowingLimitPercent`, if present, configures a limit on how many seats this priority level can borrow from other priority levels. The limit is known as this level's BorrowingConcurrencyLimit (BorrowingCL) and is a limit on the total number of seats that this level may borrow at any one time. This field holds the ratio of that limit to the level's nominal concurrency limit. When this field is non-nil, it must hold a non-negative integer and the limit is calculated as follows. - - BorrowingCL(i) = round( NominalCL(i) * borrowingLimitPercent(i)/100.0 ) - - The value of this field can be more than 100, implying that this priority level can borrow a number of seats that is greater than its own nominal concurrency limit (NominalCL). When this field is left `nil`, the limit is effectively infinite. - format: int32 - type: integer - lendablePercent: - description: |- - `lendablePercent` prescribes the fraction of the level's NominalCL that can be borrowed by other priority levels. The value of this field must be between 0 and 100, inclusive, and it defaults to 0. The number of seats that other levels can borrow from this level, known as this level's LendableConcurrencyLimit (LendableCL), is defined as follows. - - LendableCL(i) = round( NominalCL(i) * lendablePercent(i)/100.0 ) - format: int32 - type: integer - limitResponse: - $ref: "#/components/schemas/v1.LimitResponse" - nominalConcurrencyShares: - description: |- - `nominalConcurrencyShares` (NCS) contributes to the computation of the NominalConcurrencyLimit (NominalCL) of this level. This is the number of execution seats available at this priority level. This is used both for requests dispatched from this priority level as well as requests dispatched from other priority levels borrowing seats from this level. The server's concurrency limit (ServerCL) is divided among the Limited priority levels in proportion to their NCS values: - - NominalCL(i) = ceil( ServerCL * NCS(i) / sum_ncs ) sum_ncs = sum[priority level k] NCS(k) - - Bigger numbers mean a larger nominal concurrency limit, at the expense of every other priority level. - - If not specified, this field defaults to a value of 30. - - Setting this field to zero supports the construction of a "jail" for this priority level that is used to hold some request(s) - format: int32 - type: integer + host: + description: "host is the fully qualified domain name of a network host,\ + \ as defined by RFC 3986. Note the following deviations from the \"host\"\ + \ part of the URI as defined in RFC 3986: 1. IPs are not allowed. Currently\ + \ an IngressRuleValue can only apply to\n the IP in the Spec of the\ + \ parent Ingress.\n2. The `:` delimiter is not respected because ports\ + \ are not allowed.\n\t Currently the port of an Ingress is implicitly\ + \ :80 for http and\n\t :443 for https.\nBoth these may change in the\ + \ future. Incoming requests are matched against the host before the IngressRuleValue.\ + \ If the host is unspecified, the Ingress routes all traffic based on\ + \ the specified IngressRuleValue.\n\nhost can be \"precise\" which is\ + \ a domain name without the terminating dot of a network host (e.g. \"\ + foo.bar.com\") or \"wildcard\", which is a domain name prefixed with a\ + \ single wildcard label (e.g. \"*.foo.com\"). The wildcard character '*'\ + \ must appear by itself as the first DNS label and matches only a single\ + \ label. You cannot have a wildcard label by itself (e.g. Host == \"*\"\ + ). Requests will be matched against the Host field in the following way:\ + \ 1. If host is precise, the request matches this rule if the http host\ + \ header is equal to Host. 2. If host is a wildcard, then the request\ + \ matches this rule if the http host header is to equal to the suffix\ + \ (removing the first label) of the wildcard rule." + type: string + http: + $ref: "#/components/schemas/v1.HTTPIngressRuleValue" type: object - v1.NonResourcePolicyRule: - description: NonResourcePolicyRule is a predicate that matches non-resource - requests according to their verb and the target non-resource URL. A NonResourcePolicyRule - matches a request if and only if both (a) at least one member of verbs matches - the request and (b) at least one member of nonResourceURLs matches the request. + v1.IngressServiceBackend: + description: IngressServiceBackend references a Kubernetes Service as a Backend. example: - verbs: - - verbs - - verbs - nonResourceURLs: - - nonResourceURLs - - nonResourceURLs + port: + number: 0 + name: name + name: name properties: - nonResourceURLs: - description: |- - `nonResourceURLs` is a set of url prefixes that a user should have access to and may not be empty. For example: - - "/healthz" is legal - - "/hea*" is illegal - - "/hea" is legal but matches nothing - - "/hea/*" also matches nothing - - "/healthz/*" matches all per-component health checks. - "*" matches all non-resource urls. if it is present, it must be the only entry. Required. - items: - type: string - type: array - x-kubernetes-list-type: set - verbs: - description: "`verbs` is a list of matching verbs and may not be empty.\ - \ \"*\" matches all verbs. If it is present, it must be the only entry.\ - \ Required." - items: - type: string - type: array - x-kubernetes-list-type: set + name: + description: name is the referenced service. The service must exist in the + same namespace as the Ingress object. + type: string + port: + $ref: "#/components/schemas/v1.ServiceBackendPort" required: - - nonResourceURLs - - verbs + - name type: object - v1.PolicyRulesWithSubjects: - description: "PolicyRulesWithSubjects prescribes a test that applies to a request\ - \ to an apiserver. The test considers the subject making the request, the\ - \ verb being requested, and the resource to be acted upon. This PolicyRulesWithSubjects\ - \ matches a request if and only if both (a) at least one member of subjects\ - \ matches the request and (b) at least one member of resourceRules or nonResourceRules\ - \ matches the request." + v1.IngressSpec: + description: IngressSpec describes the Ingress the user wishes to exist. example: - nonResourceRules: - - verbs: - - verbs - - verbs - nonResourceURLs: - - nonResourceURLs - - nonResourceURLs - - verbs: - - verbs - - verbs - nonResourceURLs: - - nonResourceURLs - - nonResourceURLs - resourceRules: - - clusterScope: true - resources: - - resources - - resources - verbs: - - verbs - - verbs - apiGroups: - - apiGroups - - apiGroups - namespaces: - - namespaces - - namespaces - - clusterScope: true - resources: - - resources - - resources - verbs: - - verbs - - verbs - apiGroups: - - apiGroups - - apiGroups - namespaces: - - namespaces - - namespaces - subjects: - - kind: kind - serviceAccount: - name: name - namespace: namespace - user: - name: name - group: - name: name - - kind: kind - serviceAccount: - name: name - namespace: namespace - user: + defaultBackend: + resource: + apiGroup: apiGroup + kind: kind name: name - group: + service: + port: + number: 0 + name: name name: name + ingressClassName: ingressClassName + rules: + - host: host + http: + paths: + - path: path + backend: + resource: + apiGroup: apiGroup + kind: kind + name: name + service: + port: + number: 0 + name: name + name: name + pathType: pathType + - path: path + backend: + resource: + apiGroup: apiGroup + kind: kind + name: name + service: + port: + number: 0 + name: name + name: name + pathType: pathType + - host: host + http: + paths: + - path: path + backend: + resource: + apiGroup: apiGroup + kind: kind + name: name + service: + port: + number: 0 + name: name + name: name + pathType: pathType + - path: path + backend: + resource: + apiGroup: apiGroup + kind: kind + name: name + service: + port: + number: 0 + name: name + name: name + pathType: pathType + tls: + - secretName: secretName + hosts: + - hosts + - hosts + - secretName: secretName + hosts: + - hosts + - hosts properties: - nonResourceRules: - description: '`nonResourceRules` is a list of NonResourcePolicyRules that - identify matching requests according to their verb and the target non-resource - URL.' + defaultBackend: + $ref: "#/components/schemas/v1.IngressBackend" + ingressClassName: + description: "ingressClassName is the name of an IngressClass cluster resource.\ + \ Ingress controller implementations use this field to know whether they\ + \ should be serving this Ingress resource, by a transitive connection\ + \ (controller -> IngressClass -> Ingress resource). Although the `kubernetes.io/ingress.class`\ + \ annotation (simple constant name) was never formally defined, it was\ + \ widely supported by Ingress controllers to create a direct binding between\ + \ Ingress controller and Ingress resources. Newly created Ingress resources\ + \ should prefer using the field. However, even though the annotation is\ + \ officially deprecated, for backwards compatibility reasons, ingress\ + \ controllers should still honor that annotation if present." + type: string + rules: + description: "rules is a list of host rules used to configure the Ingress.\ + \ If unspecified, or no rule matches, all traffic is sent to the default\ + \ backend." items: - $ref: "#/components/schemas/v1.NonResourcePolicyRule" + $ref: "#/components/schemas/v1.IngressRule" type: array x-kubernetes-list-type: atomic - resourceRules: - description: '`resourceRules` is a slice of ResourcePolicyRules that identify - matching requests according to their verb and the target resource. At - least one of `resourceRules` and `nonResourceRules` has to be non-empty.' + tls: + description: "tls represents the TLS configuration. Currently the Ingress\ + \ only supports a single TLS port, 443. If multiple members of this list\ + \ specify different hosts, they will be multiplexed on the same port according\ + \ to the hostname specified through the SNI TLS extension, if the ingress\ + \ controller fulfilling the ingress supports SNI." items: - $ref: "#/components/schemas/v1.ResourcePolicyRule" + $ref: "#/components/schemas/v1.IngressTLS" type: array x-kubernetes-list-type: atomic - subjects: - description: "subjects is the list of normal user, serviceaccount, or group\ - \ that this rule cares about. There must be at least one member in this\ - \ slice. A slice that includes both the system:authenticated and system:unauthenticated\ - \ user groups matches every request. Required." + type: object + v1.IngressStatus: + description: IngressStatus describe the current state of the Ingress. + example: + loadBalancer: + ingress: + - hostname: hostname + ip: ip + ports: + - protocol: protocol + port: 6 + error: error + - protocol: protocol + port: 6 + error: error + - hostname: hostname + ip: ip + ports: + - protocol: protocol + port: 6 + error: error + - protocol: protocol + port: 6 + error: error + properties: + loadBalancer: + $ref: "#/components/schemas/v1.IngressLoadBalancerStatus" + type: object + v1.IngressTLS: + description: IngressTLS describes the transport layer security associated with + an ingress. + example: + secretName: secretName + hosts: + - hosts + - hosts + properties: + hosts: + description: "hosts is a list of hosts included in the TLS certificate.\ + \ The values in this list must match the name/s used in the tlsSecret.\ + \ Defaults to the wildcard host setting for the loadbalancer controller\ + \ fulfilling this Ingress, if left unspecified." items: - $ref: "#/components/schemas/flowcontrol.v1.Subject" + type: string type: array x-kubernetes-list-type: atomic - required: - - subjects + secretName: + description: "secretName is the name of the secret used to terminate TLS\ + \ traffic on port 443. Field is left optional to allow TLS routing based\ + \ on SNI hostname alone. If the SNI host in a listener conflicts with\ + \ the \"Host\" header field used by an IngressRule, the SNI host is used\ + \ for termination and value of the \"Host\" header is used for routing." + type: string type: object - v1.PriorityLevelConfiguration: - description: PriorityLevelConfiguration represents the configuration of a priority - level. + v1.NetworkPolicy: + description: NetworkPolicy describes what network traffic is allowed for a set + of Pods example: metadata: generation: 6 @@ -266187,32 +283976,321 @@ components: apiVersion: apiVersion kind: kind spec: - limited: - lendablePercent: 5 - borrowingLimitPercent: 1 - limitResponse: - queuing: - handSize: 5 - queues: 7 - queueLengthLimit: 2 - type: type - nominalConcurrencyShares: 9 - exempt: - lendablePercent: 0 - nominalConcurrencyShares: 6 - type: type - status: - conditions: - - reason: reason - lastTransitionTime: 2000-01-23T04:56:07.000+00:00 - message: message - type: type - status: status - - reason: reason - lastTransitionTime: 2000-01-23T04:56:07.000+00:00 - message: message - type: type - status: status + ingress: + - from: + - podSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + ipBlock: + cidr: cidr + except: + - except + - except + namespaceSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + - podSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + ipBlock: + cidr: cidr + except: + - except + - except + namespaceSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + ports: + - protocol: protocol + port: port + endPort: 0 + - protocol: protocol + port: port + endPort: 0 + - from: + - podSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + ipBlock: + cidr: cidr + except: + - except + - except + namespaceSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + - podSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + ipBlock: + cidr: cidr + except: + - except + - except + namespaceSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + ports: + - protocol: protocol + port: port + endPort: 0 + - protocol: protocol + port: port + endPort: 0 + podSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + policyTypes: + - policyTypes + - policyTypes + egress: + - to: + - podSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + ipBlock: + cidr: cidr + except: + - except + - except + namespaceSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + - podSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + ipBlock: + cidr: cidr + except: + - except + - except + namespaceSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + ports: + - protocol: protocol + port: port + endPort: 0 + - protocol: protocol + port: port + endPort: 0 + - to: + - podSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + ipBlock: + cidr: cidr + except: + - except + - except + namespaceSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + - podSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + ipBlock: + cidr: cidr + except: + - except + - except + namespaceSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + ports: + - protocol: protocol + port: port + endPort: 0 + - protocol: protocol + port: port + endPort: 0 properties: apiVersion: description: "APIVersion defines the versioned schema of this representation\ @@ -266227,50 +284305,222 @@ components: metadata: $ref: "#/components/schemas/v1.ObjectMeta" spec: - $ref: "#/components/schemas/v1.PriorityLevelConfigurationSpec" - status: - $ref: "#/components/schemas/v1.PriorityLevelConfigurationStatus" + $ref: "#/components/schemas/v1.NetworkPolicySpec" type: object x-kubernetes-group-version-kind: - - group: flowcontrol.apiserver.k8s.io - kind: PriorityLevelConfiguration + - group: networking.k8s.io + kind: NetworkPolicy version: v1 x-implements: - io.kubernetes.client.common.KubernetesObject - v1.PriorityLevelConfigurationCondition: - description: PriorityLevelConfigurationCondition defines the condition of priority - level. + v1.NetworkPolicyEgressRule: + description: NetworkPolicyEgressRule describes a particular set of traffic that + is allowed out of pods matched by a NetworkPolicySpec's podSelector. The traffic + must match both ports and to. This type is beta-level in 1.8 example: - reason: reason - lastTransitionTime: 2000-01-23T04:56:07.000+00:00 - message: message - type: type - status: status + to: + - podSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + ipBlock: + cidr: cidr + except: + - except + - except + namespaceSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + - podSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + ipBlock: + cidr: cidr + except: + - except + - except + namespaceSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + ports: + - protocol: protocol + port: port + endPort: 0 + - protocol: protocol + port: port + endPort: 0 properties: - lastTransitionTime: - description: '`lastTransitionTime` is the last time the condition transitioned - from one status to another.' - format: date-time - type: string - message: - description: '`message` is a human-readable message indicating details about - last transition.' - type: string - reason: - description: "`reason` is a unique, one-word, CamelCase reason for the condition's\ - \ last transition." - type: string - status: - description: "`status` is the status of the condition. Can be True, False,\ - \ Unknown. Required." - type: string - type: - description: '`type` is the type of the condition. Required.' - type: string + ports: + description: "ports is a list of destination ports for outgoing traffic.\ + \ Each item in this list is combined using a logical OR. If this field\ + \ is empty or missing, this rule matches all ports (traffic not restricted\ + \ by port). If this field is present and contains at least one item, then\ + \ this rule allows traffic only if the traffic matches at least one port\ + \ in the list." + items: + $ref: "#/components/schemas/v1.NetworkPolicyPort" + type: array + x-kubernetes-list-type: atomic + to: + description: "to is a list of destinations for outgoing traffic of pods\ + \ selected for this rule. Items in this list are combined using a logical\ + \ OR operation. If this field is empty or missing, this rule matches all\ + \ destinations (traffic not restricted by destination). If this field\ + \ is present and contains at least one item, this rule allows traffic\ + \ only if the traffic matches at least one item in the to list." + items: + $ref: "#/components/schemas/v1.NetworkPolicyPeer" + type: array + x-kubernetes-list-type: atomic + type: object + v1.NetworkPolicyIngressRule: + description: NetworkPolicyIngressRule describes a particular set of traffic + that is allowed to the pods matched by a NetworkPolicySpec's podSelector. + The traffic must match both ports and from. + example: + from: + - podSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + ipBlock: + cidr: cidr + except: + - except + - except + namespaceSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + - podSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + ipBlock: + cidr: cidr + except: + - except + - except + namespaceSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + ports: + - protocol: protocol + port: port + endPort: 0 + - protocol: protocol + port: port + endPort: 0 + properties: + from: + description: "from is a list of sources which should be able to access the\ + \ pods selected for this rule. Items in this list are combined using a\ + \ logical OR operation. If this field is empty or missing, this rule matches\ + \ all sources (traffic not restricted by source). If this field is present\ + \ and contains at least one item, this rule allows traffic only if the\ + \ traffic matches at least one item in the from list." + items: + $ref: "#/components/schemas/v1.NetworkPolicyPeer" + type: array + x-kubernetes-list-type: atomic + ports: + description: "ports is a list of ports which should be made accessible on\ + \ the pods selected for this rule. Each item in this list is combined\ + \ using a logical OR. If this field is empty or missing, this rule matches\ + \ all ports (traffic not restricted by port). If this field is present\ + \ and contains at least one item, then this rule allows traffic only if\ + \ the traffic matches at least one port in the list." + items: + $ref: "#/components/schemas/v1.NetworkPolicyPort" + type: array + x-kubernetes-list-type: atomic type: object - v1.PriorityLevelConfigurationList: - description: PriorityLevelConfigurationList is a list of PriorityLevelConfiguration - objects. + v1.NetworkPolicyList: + description: NetworkPolicyList is a list of NetworkPolicy objects. example: metadata: remainingItemCount: 1 @@ -266331,32 +284581,321 @@ components: apiVersion: apiVersion kind: kind spec: - limited: - lendablePercent: 5 - borrowingLimitPercent: 1 - limitResponse: - queuing: - handSize: 5 - queues: 7 - queueLengthLimit: 2 - type: type - nominalConcurrencyShares: 9 - exempt: - lendablePercent: 0 - nominalConcurrencyShares: 6 - type: type - status: - conditions: - - reason: reason - lastTransitionTime: 2000-01-23T04:56:07.000+00:00 - message: message - type: type - status: status - - reason: reason - lastTransitionTime: 2000-01-23T04:56:07.000+00:00 - message: message - type: type - status: status + ingress: + - from: + - podSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + ipBlock: + cidr: cidr + except: + - except + - except + namespaceSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + - podSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + ipBlock: + cidr: cidr + except: + - except + - except + namespaceSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + ports: + - protocol: protocol + port: port + endPort: 0 + - protocol: protocol + port: port + endPort: 0 + - from: + - podSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + ipBlock: + cidr: cidr + except: + - except + - except + namespaceSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + - podSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + ipBlock: + cidr: cidr + except: + - except + - except + namespaceSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + ports: + - protocol: protocol + port: port + endPort: 0 + - protocol: protocol + port: port + endPort: 0 + podSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + policyTypes: + - policyTypes + - policyTypes + egress: + - to: + - podSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + ipBlock: + cidr: cidr + except: + - except + - except + namespaceSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + - podSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + ipBlock: + cidr: cidr + except: + - except + - except + namespaceSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + ports: + - protocol: protocol + port: port + endPort: 0 + - protocol: protocol + port: port + endPort: 0 + - to: + - podSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + ipBlock: + cidr: cidr + except: + - except + - except + namespaceSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + - podSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + ipBlock: + cidr: cidr + except: + - except + - except + namespaceSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + ports: + - protocol: protocol + port: port + endPort: 0 + - protocol: protocol + port: port + endPort: 0 - metadata: generation: 6 finalizers: @@ -266406,32 +284945,321 @@ components: apiVersion: apiVersion kind: kind spec: - limited: - lendablePercent: 5 - borrowingLimitPercent: 1 - limitResponse: - queuing: - handSize: 5 - queues: 7 - queueLengthLimit: 2 - type: type - nominalConcurrencyShares: 9 - exempt: - lendablePercent: 0 - nominalConcurrencyShares: 6 - type: type - status: - conditions: - - reason: reason - lastTransitionTime: 2000-01-23T04:56:07.000+00:00 - message: message - type: type - status: status - - reason: reason - lastTransitionTime: 2000-01-23T04:56:07.000+00:00 - message: message - type: type - status: status + ingress: + - from: + - podSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + ipBlock: + cidr: cidr + except: + - except + - except + namespaceSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + - podSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + ipBlock: + cidr: cidr + except: + - except + - except + namespaceSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + ports: + - protocol: protocol + port: port + endPort: 0 + - protocol: protocol + port: port + endPort: 0 + - from: + - podSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + ipBlock: + cidr: cidr + except: + - except + - except + namespaceSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + - podSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + ipBlock: + cidr: cidr + except: + - except + - except + namespaceSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + ports: + - protocol: protocol + port: port + endPort: 0 + - protocol: protocol + port: port + endPort: 0 + podSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + policyTypes: + - policyTypes + - policyTypes + egress: + - to: + - podSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + ipBlock: + cidr: cidr + except: + - except + - except + namespaceSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + - podSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + ipBlock: + cidr: cidr + except: + - except + - except + namespaceSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + ports: + - protocol: protocol + port: port + endPort: 0 + - protocol: protocol + port: port + endPort: 0 + - to: + - podSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + ipBlock: + cidr: cidr + except: + - except + - except + namespaceSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + - podSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + ipBlock: + cidr: cidr + except: + - except + - except + namespaceSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + ports: + - protocol: protocol + port: port + endPort: 0 + - protocol: protocol + port: port + endPort: 0 properties: apiVersion: description: "APIVersion defines the versioned schema of this representation\ @@ -266439,9 +285267,9 @@ components: \ internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources" type: string items: - description: '`items` is a list of request-priorities.' + description: items is a list of schema objects. items: - $ref: "#/components/schemas/v1.PriorityLevelConfiguration" + $ref: "#/components/schemas/v1.NetworkPolicy" type: array kind: description: "Kind is a string value representing the REST resource this\ @@ -266454,356 +285282,493 @@ components: - items type: object x-kubernetes-group-version-kind: - - group: flowcontrol.apiserver.k8s.io - kind: PriorityLevelConfigurationList + - group: networking.k8s.io + kind: NetworkPolicyList version: v1 x-implements: - io.kubernetes.client.common.KubernetesListObject - v1.PriorityLevelConfigurationReference: - description: PriorityLevelConfigurationReference contains information that points - to the "request-priority" being used. - example: - name: name - properties: - name: - description: '`name` is the name of the priority level configuration being - referenced Required.' - type: string - required: - - name - type: object - v1.PriorityLevelConfigurationSpec: - description: PriorityLevelConfigurationSpec specifies the configuration of a - priority level. - example: - limited: - lendablePercent: 5 - borrowingLimitPercent: 1 - limitResponse: - queuing: - handSize: 5 - queues: 7 - queueLengthLimit: 2 - type: type - nominalConcurrencyShares: 9 - exempt: - lendablePercent: 0 - nominalConcurrencyShares: 6 - type: type - properties: - exempt: - $ref: "#/components/schemas/v1.ExemptPriorityLevelConfiguration" - limited: - $ref: "#/components/schemas/v1.LimitedPriorityLevelConfiguration" - type: - description: '`type` indicates whether this priority level is subject to - limitation on request execution. A value of `"Exempt"` means that requests - of this priority level are not subject to a limit (and thus are never - queued) and do not detract from the capacity made available to other priority - levels. A value of `"Limited"` means that (a) requests of this priority - level _are_ subject to limits and (b) some of the server''s limited capacity - is made available exclusively to this priority level. Required.' - type: string - required: - - type - type: object - x-kubernetes-unions: - - discriminator: type - fields-to-discriminateBy: - exempt: Exempt - limited: Limited - v1.PriorityLevelConfigurationStatus: - description: PriorityLevelConfigurationStatus represents the current state of - a "request-priority". + v1.NetworkPolicyPeer: + description: NetworkPolicyPeer describes a peer to allow traffic to/from. Only + certain combinations of fields are allowed example: - conditions: - - reason: reason - lastTransitionTime: 2000-01-23T04:56:07.000+00:00 - message: message - type: type - status: status - - reason: reason - lastTransitionTime: 2000-01-23T04:56:07.000+00:00 - message: message - type: type - status: status + podSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + ipBlock: + cidr: cidr + except: + - except + - except + namespaceSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels properties: - conditions: - description: '`conditions` is the current state of "request-priority".' - items: - $ref: "#/components/schemas/v1.PriorityLevelConfigurationCondition" - type: array - x-kubernetes-patch-strategy: merge - x-kubernetes-list-type: map - x-kubernetes-list-map-keys: - - type - x-kubernetes-patch-merge-key: type + ipBlock: + $ref: "#/components/schemas/v1.IPBlock" + namespaceSelector: + $ref: "#/components/schemas/v1.LabelSelector" + podSelector: + $ref: "#/components/schemas/v1.LabelSelector" type: object - v1.QueuingConfiguration: - description: QueuingConfiguration holds the configuration parameters for queuing + v1.NetworkPolicyPort: + description: NetworkPolicyPort describes a port to allow traffic on example: - handSize: 5 - queues: 7 - queueLengthLimit: 2 + protocol: protocol + port: port + endPort: 0 properties: - handSize: - description: "`handSize` is a small positive number that configures the\ - \ shuffle sharding of requests into queues. When enqueuing a request\ - \ at this priority level the request's flow identifier (a string pair)\ - \ is hashed and the hash value is used to shuffle the list of queues and\ - \ deal a hand of the size specified here. The request is put into one\ - \ of the shortest queues in that hand. `handSize` must be no larger than\ - \ `queues`, and should be significantly smaller (so that a few heavy flows\ - \ do not saturate most of the queues). See the user-facing documentation\ - \ for more extensive guidance on setting this field. This field has a\ - \ default value of 8." - format: int32 - type: integer - queueLengthLimit: - description: "`queueLengthLimit` is the maximum number of requests allowed\ - \ to be waiting in a given queue of this priority level at a time; excess\ - \ requests are rejected. This value must be positive. If not specified,\ - \ it will be defaulted to 50." - format: int32 - type: integer - queues: - description: '`queues` is the number of queues for this priority level. - The queues exist independently at each apiserver. The value must be positive. Setting - it to 1 effectively precludes shufflesharding and thus makes the distinguisher - method of associated flow schemas irrelevant. This field has a default - value of 64.' + endPort: + description: "endPort indicates that the range of ports from port to endPort\ + \ if set, inclusive, should be allowed by the policy. This field cannot\ + \ be defined if the port field is not defined or if the port field is\ + \ defined as a named (string) port. The endPort must be equal or greater\ + \ than port." format: int32 type: integer + port: + description: "IntOrString is a type that can hold an int32 or a string.\ + \ When used in JSON or YAML marshalling and unmarshalling, it produces\ + \ or consumes the inner type. This allows you to have, for example, a\ + \ JSON field that can accept a name or number." + format: int-or-string + type: string + protocol: + description: "protocol represents the protocol (TCP, UDP, or SCTP) which\ + \ traffic must match. If not specified, this field defaults to TCP." + type: string type: object - v1.ResourcePolicyRule: - description: "ResourcePolicyRule is a predicate that matches some resource requests,\ - \ testing the request's verb and the target resource. A ResourcePolicyRule\ - \ matches a resource request if and only if: (a) at least one member of verbs\ - \ matches the request, (b) at least one member of apiGroups matches the request,\ - \ (c) at least one member of resources matches the request, and (d) either\ - \ (d1) the request does not specify a namespace (i.e., `Namespace==\"\"`)\ - \ and clusterScope is true or (d2) the request specifies a namespace and least\ - \ one member of namespaces matches the request's namespace." + v1.NetworkPolicySpec: + description: NetworkPolicySpec provides the specification of a NetworkPolicy example: - clusterScope: true - resources: - - resources - - resources - verbs: - - verbs - - verbs - apiGroups: - - apiGroups - - apiGroups - namespaces: - - namespaces - - namespaces + ingress: + - from: + - podSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + ipBlock: + cidr: cidr + except: + - except + - except + namespaceSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + - podSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + ipBlock: + cidr: cidr + except: + - except + - except + namespaceSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + ports: + - protocol: protocol + port: port + endPort: 0 + - protocol: protocol + port: port + endPort: 0 + - from: + - podSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + ipBlock: + cidr: cidr + except: + - except + - except + namespaceSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + - podSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + ipBlock: + cidr: cidr + except: + - except + - except + namespaceSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + ports: + - protocol: protocol + port: port + endPort: 0 + - protocol: protocol + port: port + endPort: 0 + podSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + policyTypes: + - policyTypes + - policyTypes + egress: + - to: + - podSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + ipBlock: + cidr: cidr + except: + - except + - except + namespaceSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + - podSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + ipBlock: + cidr: cidr + except: + - except + - except + namespaceSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + ports: + - protocol: protocol + port: port + endPort: 0 + - protocol: protocol + port: port + endPort: 0 + - to: + - podSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + ipBlock: + cidr: cidr + except: + - except + - except + namespaceSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + - podSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + ipBlock: + cidr: cidr + except: + - except + - except + namespaceSelector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + ports: + - protocol: protocol + port: port + endPort: 0 + - protocol: protocol + port: port + endPort: 0 properties: - apiGroups: - description: "`apiGroups` is a list of matching API groups and may not be\ - \ empty. \"*\" matches all API groups and, if present, must be the only\ - \ entry. Required." - items: - type: string - type: array - x-kubernetes-list-type: set - clusterScope: - description: '`clusterScope` indicates whether to match requests that do - not specify a namespace (which happens either because the resource is - not namespaced or the request targets all namespaces). If this field is - omitted or false then the `namespaces` field must contain a non-empty - list.' - type: boolean - namespaces: - description: "`namespaces` is a list of target namespaces that restricts\ - \ matches. A request that specifies a target namespace matches only if\ - \ either (a) this list contains that target namespace or (b) this list\ - \ contains \"*\". Note that \"*\" matches any specified namespace but\ - \ does not match a request that _does not specify_ a namespace (see the\ - \ `clusterScope` field for that). This list may be empty, but only if\ - \ `clusterScope` is true." + egress: + description: "egress is a list of egress rules to be applied to the selected\ + \ pods. Outgoing traffic is allowed if there are no NetworkPolicies selecting\ + \ the pod (and cluster policy otherwise allows the traffic), OR if the\ + \ traffic matches at least one egress rule across all of the NetworkPolicy\ + \ objects whose podSelector matches the pod. If this field is empty then\ + \ this NetworkPolicy limits all outgoing traffic (and serves solely to\ + \ ensure that the pods it selects are isolated by default). This field\ + \ is beta-level in 1.8" items: - type: string + $ref: "#/components/schemas/v1.NetworkPolicyEgressRule" type: array - x-kubernetes-list-type: set - resources: - description: "`resources` is a list of matching resources (i.e., lowercase\ - \ and plural) with, if desired, subresource. For example, [ \"services\"\ - , \"nodes/status\" ]. This list may not be empty. \"*\" matches all resources\ - \ and, if present, must be the only entry. Required." + x-kubernetes-list-type: atomic + ingress: + description: "ingress is a list of ingress rules to be applied to the selected\ + \ pods. Traffic is allowed to a pod if there are no NetworkPolicies selecting\ + \ the pod (and cluster policy otherwise allows the traffic), OR if the\ + \ traffic source is the pod's local node, OR if the traffic matches at\ + \ least one ingress rule across all of the NetworkPolicy objects whose\ + \ podSelector matches the pod. If this field is empty then this NetworkPolicy\ + \ does not allow any traffic (and serves solely to ensure that the pods\ + \ it selects are isolated by default)" items: - type: string + $ref: "#/components/schemas/v1.NetworkPolicyIngressRule" type: array - x-kubernetes-list-type: set - verbs: - description: "`verbs` is a list of matching verbs and may not be empty.\ - \ \"*\" matches all verbs and, if present, must be the only entry. Required." + x-kubernetes-list-type: atomic + podSelector: + $ref: "#/components/schemas/v1.LabelSelector" + policyTypes: + description: "policyTypes is a list of rule types that the NetworkPolicy\ + \ relates to. Valid options are [\"Ingress\"], [\"Egress\"], or [\"Ingress\"\ + , \"Egress\"]. If this field is not specified, it will default based on\ + \ the existence of ingress or egress rules; policies that contain an egress\ + \ section are assumed to affect egress, and all policies (whether or not\ + \ they contain an ingress section) are assumed to affect ingress. If you\ + \ want to write an egress-only policy, you must explicitly specify policyTypes\ + \ [ \"Egress\" ]. Likewise, if you want to write a policy that specifies\ + \ that no egress is allowed, you must specify a policyTypes value that\ + \ include \"Egress\" (since such a policy would not include an egress\ + \ section and would otherwise default to just [ \"Ingress\" ]). This field\ + \ is beta-level in 1.8" items: type: string type: array - x-kubernetes-list-type: set - required: - - apiGroups - - resources - - verbs + x-kubernetes-list-type: atomic type: object - v1.ServiceAccountSubject: - description: ServiceAccountSubject holds detailed information for service-account-kind - subject. + v1.ParentReference: + description: ParentReference describes a reference to a parent object. example: + resource: resource name: name namespace: namespace + group: group properties: + group: + description: group is the group of the object being referenced. + type: string name: - description: "`name` is the name of matching ServiceAccount objects, or\ - \ \"*\" to match regardless of name. Required." + description: name is the name of the object being referenced. type: string namespace: - description: '`namespace` is the namespace of matching ServiceAccount objects. - Required.' + description: namespace is the namespace of the object being referenced. type: string - required: - - name - - namespace - type: object - flowcontrol.v1.Subject: - description: "Subject matches the originator of a request, as identified by\ - \ the request authentication system. There are three ways of matching an originator;\ - \ by user, group, or service account." - example: - kind: kind - serviceAccount: - name: name - namespace: namespace - user: - name: name - group: - name: name - properties: - group: - $ref: "#/components/schemas/v1.GroupSubject" - kind: - description: '`kind` indicates which one of the other fields is non-empty. - Required' + resource: + description: resource is the resource of the object being referenced. type: string - serviceAccount: - $ref: "#/components/schemas/v1.ServiceAccountSubject" - user: - $ref: "#/components/schemas/v1.UserSubject" required: - - kind + - name + - resource type: object - x-kubernetes-unions: - - discriminator: kind - fields-to-discriminateBy: - group: Group - serviceAccount: ServiceAccount - user: User - v1.UserSubject: - description: UserSubject holds detailed information for user-kind subject. + v1.ServiceBackendPort: + description: ServiceBackendPort is the service port being referenced. example: + number: 0 name: name properties: name: - description: "`name` is the username that matches, or \"*\" to match all\ - \ usernames. Required." - type: string - required: - - name - type: object - v1.HTTPIngressPath: - description: HTTPIngressPath associates a path with a backend. Incoming urls - matching the path are forwarded to the backend. - example: - path: path - backend: - resource: - apiGroup: apiGroup - kind: kind - name: name - service: - port: - number: 0 - name: name - name: name - pathType: pathType - properties: - backend: - $ref: "#/components/schemas/v1.IngressBackend" - path: - description: path is matched against the path of an incoming request. Currently - it can contain characters disallowed from the conventional "path" part - of a URL as defined by RFC 3986. Paths must begin with a '/' and must - be present when using PathType with value "Exact" or "Prefix". - type: string - pathType: - description: |- - pathType determines the interpretation of the path matching. PathType can be one of the following values: * Exact: Matches the URL path exactly. * Prefix: Matches based on a URL path prefix split by '/'. Matching is - done on a path element by element basis. A path element refers is the - list of labels in the path split by the '/' separator. A request is a - match for path p if every p is an element-wise prefix of p of the - request path. Note that if the last element of the path is a substring - of the last element in request path, it is not a match (e.g. /foo/bar - matches /foo/bar/baz, but does not match /foo/barbaz). - * ImplementationSpecific: Interpretation of the Path matching is up to - the IngressClass. Implementations can treat this as a separate PathType - or treat it identically to Prefix or Exact path types. - Implementations are required to support all path types. + description: name is the name of the port on the Service. This is a mutually + exclusive setting with "Number". type: string - required: - - backend - - pathType - type: object - v1.HTTPIngressRuleValue: - description: "HTTPIngressRuleValue is a list of http selectors pointing to backends.\ - \ In the example: http:///? -> backend where where\ - \ parts of the url correspond to RFC 3986, this resource will be used to match\ - \ against everything after the last '/' and before the first '?' or '#'." - example: - paths: - - path: path - backend: - resource: - apiGroup: apiGroup - kind: kind - name: name - service: - port: - number: 0 - name: name - name: name - pathType: pathType - - path: path - backend: - resource: - apiGroup: apiGroup - kind: kind - name: name - service: - port: - number: 0 - name: name - name: name - pathType: pathType - properties: - paths: - description: paths is a collection of paths that map requests to backends. - items: - $ref: "#/components/schemas/v1.HTTPIngressPath" - type: array - x-kubernetes-list-type: atomic - required: - - paths + number: + description: number is the numerical port number (e.g. 80) on the Service. + This is a mutually exclusive setting with "Name". + format: int32 + type: integer type: object - v1.IPAddress: - description: "IPAddress represents a single IP of a single IP Family. The object\ - \ is designed to be used by APIs that operate on IP addresses. The object\ - \ is used by the Service core API for allocation of IP addresses. An IP address\ - \ can be represented in different formats, to guarantee the uniqueness of\ - \ the IP, the name of the object is the IP address in canonical format, four\ - \ decimal digits separated by dots suppressing leading zeros for IPv4 and\ - \ the representation defined by RFC 5952 for IPv6. Valid: 192.168.1.5 or 2001:db8::1\ - \ or 2001:db8:aaaa:bbbb:cccc:dddd:eeee:1 Invalid: 10.01.2.3 or 2001:db8:0:0:0::1" + x-kubernetes-map-type: atomic + v1.ServiceCIDR: + description: ServiceCIDR defines a range of IP addresses using CIDR format (e.g. + 192.168.0.0/24 or 2001:db2::/64). This range is used to allocate ClusterIPs + to Service objects. example: metadata: generation: 6 @@ -266854,11 +285819,23 @@ components: apiVersion: apiVersion kind: kind spec: - parentRef: - resource: resource - name: name - namespace: namespace - group: group + cidrs: + - cidrs + - cidrs + status: + conditions: + - reason: reason + lastTransitionTime: 2000-01-23T04:56:07.000+00:00 + message: message + type: type + observedGeneration: 5 + status: status + - reason: reason + lastTransitionTime: 2000-01-23T04:56:07.000+00:00 + message: message + type: type + observedGeneration: 5 + status: status properties: apiVersion: description: "APIVersion defines the versioned schema of this representation\ @@ -266873,18 +285850,18 @@ components: metadata: $ref: "#/components/schemas/v1.ObjectMeta" spec: - $ref: "#/components/schemas/v1.IPAddressSpec" - required: - - spec + $ref: "#/components/schemas/v1.ServiceCIDRSpec" + status: + $ref: "#/components/schemas/v1.ServiceCIDRStatus" type: object x-kubernetes-group-version-kind: - group: networking.k8s.io - kind: IPAddress + kind: ServiceCIDR version: v1 x-implements: - io.kubernetes.client.common.KubernetesObject - v1.IPAddressList: - description: IPAddressList contains a list of IPAddress. + v1.ServiceCIDRList: + description: ServiceCIDRList contains a list of ServiceCIDR objects. example: metadata: remainingItemCount: 1 @@ -266945,11 +285922,23 @@ components: apiVersion: apiVersion kind: kind spec: - parentRef: - resource: resource - name: name - namespace: namespace - group: group + cidrs: + - cidrs + - cidrs + status: + conditions: + - reason: reason + lastTransitionTime: 2000-01-23T04:56:07.000+00:00 + message: message + type: type + observedGeneration: 5 + status: status + - reason: reason + lastTransitionTime: 2000-01-23T04:56:07.000+00:00 + message: message + type: type + observedGeneration: 5 + status: status - metadata: generation: 6 finalizers: @@ -266999,11 +285988,23 @@ components: apiVersion: apiVersion kind: kind spec: - parentRef: - resource: resource - name: name - namespace: namespace - group: group + cidrs: + - cidrs + - cidrs + status: + conditions: + - reason: reason + lastTransitionTime: 2000-01-23T04:56:07.000+00:00 + message: message + type: type + observedGeneration: 5 + status: status + - reason: reason + lastTransitionTime: 2000-01-23T04:56:07.000+00:00 + message: message + type: type + observedGeneration: 5 + status: status properties: apiVersion: description: "APIVersion defines the versioned schema of this representation\ @@ -267011,9 +286012,9 @@ components: \ internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources" type: string items: - description: items is the list of IPAddresses. + description: items is the list of ServiceCIDRs. items: - $ref: "#/components/schemas/v1.IPAddress" + $ref: "#/components/schemas/v1.ServiceCIDR" type: array kind: description: "Kind is a string value representing the REST resource this\ @@ -267027,252 +286028,79 @@ components: type: object x-kubernetes-group-version-kind: - group: networking.k8s.io - kind: IPAddressList + kind: ServiceCIDRList version: v1 x-implements: - io.kubernetes.client.common.KubernetesListObject - v1.IPAddressSpec: - description: IPAddressSpec describe the attributes in an IP Address. - example: - parentRef: - resource: resource - name: name - namespace: namespace - group: group - properties: - parentRef: - $ref: "#/components/schemas/v1.ParentReference" - required: - - parentRef - type: object - v1.IPBlock: - description: "IPBlock describes a particular CIDR (Ex. \"192.168.1.0/24\",\"\ - 2001:db8::/64\") that is allowed to the pods matched by a NetworkPolicySpec's\ - \ podSelector. The except entry describes CIDRs that should not be included\ - \ within this rule." + v1.ServiceCIDRSpec: + description: ServiceCIDRSpec define the CIDRs the user wants to use for allocating + ClusterIPs for Services. example: - cidr: cidr - except: - - except - - except + cidrs: + - cidrs + - cidrs properties: - cidr: - description: cidr is a string representing the IPBlock Valid examples are - "192.168.1.0/24" or "2001:db8::/64" - type: string - except: - description: except is a slice of CIDRs that should not be included within - an IPBlock Valid examples are "192.168.1.0/24" or "2001:db8::/64" Except - values will be rejected if they are outside the cidr range + cidrs: + description: "cidrs defines the IP blocks in CIDR notation (e.g. \"192.168.0.0/24\"\ + \ or \"2001:db8::/64\") from which to assign service cluster IPs. Max\ + \ of two CIDRs is allowed, one of each IP family. This field is immutable." items: type: string type: array x-kubernetes-list-type: atomic - required: - - cidr type: object - v1.Ingress: - description: "Ingress is a collection of rules that allow inbound connections\ - \ to reach the endpoints defined by a backend. An Ingress can be configured\ - \ to give services externally-reachable urls, load balance traffic, terminate\ - \ SSL, offer name based virtual hosting etc." + v1.ServiceCIDRStatus: + description: ServiceCIDRStatus describes the current state of the ServiceCIDR. example: - metadata: - generation: 6 - finalizers: - - finalizers - - finalizers - resourceVersion: resourceVersion - annotations: - key: annotations - generateName: generateName - deletionTimestamp: 2000-01-23T04:56:07.000+00:00 - labels: - key: labels - ownerReferences: - - uid: uid - controller: true - apiVersion: apiVersion - kind: kind - name: name - blockOwnerDeletion: true - - uid: uid - controller: true - apiVersion: apiVersion - kind: kind - name: name - blockOwnerDeletion: true - selfLink: selfLink - deletionGracePeriodSeconds: 0 - uid: uid - managedFields: - - apiVersion: apiVersion - fieldsV1: "{}" - manager: manager - subresource: subresource - time: 2000-01-23T04:56:07.000+00:00 - operation: operation - fieldsType: fieldsType - - apiVersion: apiVersion - fieldsV1: "{}" - manager: manager - subresource: subresource - time: 2000-01-23T04:56:07.000+00:00 - operation: operation - fieldsType: fieldsType - creationTimestamp: 2000-01-23T04:56:07.000+00:00 - name: name - namespace: namespace - apiVersion: apiVersion - kind: kind - spec: - defaultBackend: - resource: - apiGroup: apiGroup - kind: kind - name: name - service: - port: - number: 0 - name: name - name: name - ingressClassName: ingressClassName - rules: - - host: host - http: - paths: - - path: path - backend: - resource: - apiGroup: apiGroup - kind: kind - name: name - service: - port: - number: 0 - name: name - name: name - pathType: pathType - - path: path - backend: - resource: - apiGroup: apiGroup - kind: kind - name: name - service: - port: - number: 0 - name: name - name: name - pathType: pathType - - host: host - http: - paths: - - path: path - backend: - resource: - apiGroup: apiGroup - kind: kind - name: name - service: - port: - number: 0 - name: name - name: name - pathType: pathType - - path: path - backend: - resource: - apiGroup: apiGroup - kind: kind - name: name - service: - port: - number: 0 - name: name - name: name - pathType: pathType - tls: - - secretName: secretName - hosts: - - hosts - - hosts - - secretName: secretName - hosts: - - hosts - - hosts - status: - loadBalancer: - ingress: - - hostname: hostname - ip: ip - ports: - - protocol: protocol - port: 6 - error: error - - protocol: protocol - port: 6 - error: error - - hostname: hostname - ip: ip - ports: - - protocol: protocol - port: 6 - error: error - - protocol: protocol - port: 6 - error: error + conditions: + - reason: reason + lastTransitionTime: 2000-01-23T04:56:07.000+00:00 + message: message + type: type + observedGeneration: 5 + status: status + - reason: reason + lastTransitionTime: 2000-01-23T04:56:07.000+00:00 + message: message + type: type + observedGeneration: 5 + status: status properties: - apiVersion: - description: "APIVersion defines the versioned schema of this representation\ - \ of an object. Servers should convert recognized schemas to the latest\ - \ internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources" - type: string - kind: - description: "Kind is a string value representing the REST resource this\ - \ object represents. Servers may infer this from the endpoint the client\ - \ submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds" - type: string - metadata: - $ref: "#/components/schemas/v1.ObjectMeta" - spec: - $ref: "#/components/schemas/v1.IngressSpec" - status: - $ref: "#/components/schemas/v1.IngressStatus" + conditions: + description: conditions holds an array of metav1.Condition that describe + the state of the ServiceCIDR. Current service state + items: + $ref: "#/components/schemas/v1.Condition" + type: array + x-kubernetes-patch-strategy: merge + x-kubernetes-list-type: map + x-kubernetes-list-map-keys: + - type + x-kubernetes-patch-merge-key: type type: object - x-kubernetes-group-version-kind: - - group: networking.k8s.io - kind: Ingress - version: v1 - x-implements: - - io.kubernetes.client.common.KubernetesObject - v1.IngressBackend: - description: IngressBackend describes all endpoints for a given service and - port. + v1.Overhead: + description: Overhead structure represents the resource overhead associated + with running a pod. example: - resource: - apiGroup: apiGroup - kind: kind - name: name - service: - port: - number: 0 - name: name - name: name + podFixed: + key: null properties: - resource: - $ref: "#/components/schemas/v1.TypedLocalObjectReference" - service: - $ref: "#/components/schemas/v1.IngressServiceBackend" + podFixed: + additionalProperties: + $ref: "#/components/schemas/resource.Quantity" + description: podFixed represents the fixed resource overhead associated + with running a pod. + type: object type: object - v1.IngressClass: - description: "IngressClass represents the class of the Ingress, referenced by\ - \ the Ingress Spec. The `ingressclass.kubernetes.io/is-default-class` annotation\ - \ can be used to indicate that an IngressClass should be considered default.\ - \ When a single IngressClass resource has this annotation set to true, new\ - \ Ingress resources without a class specified will be assigned this default\ - \ class." + v1.RuntimeClass: + description: "RuntimeClass defines a class of container runtime supported in\ + \ the cluster. The RuntimeClass is used to determine which container runtime\ + \ is used to run all containers in a pod. RuntimeClasses are manually defined\ + \ by a user or cluster provisioner, and referenced in the PodSpec. The Kubelet\ + \ is responsible for resolving the RuntimeClassName reference before running\ + \ the pod. For more details, see https://kubernetes.io/docs/concepts/containers/runtime-class/" example: + handler: handler metadata: generation: 6 finalizers: @@ -267321,246 +286149,62 @@ components: namespace: namespace apiVersion: apiVersion kind: kind - spec: - controller: controller - parameters: - apiGroup: apiGroup - kind: kind - scope: scope - name: name - namespace: namespace + overhead: + podFixed: + key: null + scheduling: + tolerations: + - effect: effect + tolerationSeconds: 8 + value: value + key: key + operator: operator + - effect: effect + tolerationSeconds: 8 + value: value + key: key + operator: operator + nodeSelector: + key: nodeSelector properties: apiVersion: description: "APIVersion defines the versioned schema of this representation\ \ of an object. Servers should convert recognized schemas to the latest\ \ internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources" type: string - kind: - description: "Kind is a string value representing the REST resource this\ - \ object represents. Servers may infer this from the endpoint the client\ - \ submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds" - type: string - metadata: - $ref: "#/components/schemas/v1.ObjectMeta" - spec: - $ref: "#/components/schemas/v1.IngressClassSpec" - type: object - x-kubernetes-group-version-kind: - - group: networking.k8s.io - kind: IngressClass - version: v1 - x-implements: - - io.kubernetes.client.common.KubernetesObject - v1.IngressClassList: - description: IngressClassList is a collection of IngressClasses. - example: - metadata: - remainingItemCount: 1 - continue: continue - resourceVersion: resourceVersion - shardInfo: - selector: selector - selfLink: selfLink - apiVersion: apiVersion - kind: kind - items: - - metadata: - generation: 6 - finalizers: - - finalizers - - finalizers - resourceVersion: resourceVersion - annotations: - key: annotations - generateName: generateName - deletionTimestamp: 2000-01-23T04:56:07.000+00:00 - labels: - key: labels - ownerReferences: - - uid: uid - controller: true - apiVersion: apiVersion - kind: kind - name: name - blockOwnerDeletion: true - - uid: uid - controller: true - apiVersion: apiVersion - kind: kind - name: name - blockOwnerDeletion: true - selfLink: selfLink - deletionGracePeriodSeconds: 0 - uid: uid - managedFields: - - apiVersion: apiVersion - fieldsV1: "{}" - manager: manager - subresource: subresource - time: 2000-01-23T04:56:07.000+00:00 - operation: operation - fieldsType: fieldsType - - apiVersion: apiVersion - fieldsV1: "{}" - manager: manager - subresource: subresource - time: 2000-01-23T04:56:07.000+00:00 - operation: operation - fieldsType: fieldsType - creationTimestamp: 2000-01-23T04:56:07.000+00:00 - name: name - namespace: namespace - apiVersion: apiVersion - kind: kind - spec: - controller: controller - parameters: - apiGroup: apiGroup - kind: kind - scope: scope - name: name - namespace: namespace - - metadata: - generation: 6 - finalizers: - - finalizers - - finalizers - resourceVersion: resourceVersion - annotations: - key: annotations - generateName: generateName - deletionTimestamp: 2000-01-23T04:56:07.000+00:00 - labels: - key: labels - ownerReferences: - - uid: uid - controller: true - apiVersion: apiVersion - kind: kind - name: name - blockOwnerDeletion: true - - uid: uid - controller: true - apiVersion: apiVersion - kind: kind - name: name - blockOwnerDeletion: true - selfLink: selfLink - deletionGracePeriodSeconds: 0 - uid: uid - managedFields: - - apiVersion: apiVersion - fieldsV1: "{}" - manager: manager - subresource: subresource - time: 2000-01-23T04:56:07.000+00:00 - operation: operation - fieldsType: fieldsType - - apiVersion: apiVersion - fieldsV1: "{}" - manager: manager - subresource: subresource - time: 2000-01-23T04:56:07.000+00:00 - operation: operation - fieldsType: fieldsType - creationTimestamp: 2000-01-23T04:56:07.000+00:00 - name: name - namespace: namespace - apiVersion: apiVersion - kind: kind - spec: - controller: controller - parameters: - apiGroup: apiGroup - kind: kind - scope: scope - name: name - namespace: namespace - properties: - apiVersion: - description: "APIVersion defines the versioned schema of this representation\ - \ of an object. Servers should convert recognized schemas to the latest\ - \ internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources" + handler: + description: "handler specifies the underlying runtime and configuration\ + \ that the CRI implementation will use to handle pods of this class. The\ + \ possible values are specific to the node & CRI configuration. It is\ + \ assumed that all handlers are available on every node, and handlers\ + \ of the same name are equivalent on every node. For example, a handler\ + \ called \"runc\" might specify that the runc OCI runtime (using native\ + \ Linux containers) will be used to run the containers in a pod. The Handler\ + \ must be lowercase, conform to the DNS Label (RFC 1123) requirements,\ + \ and is immutable." type: string - items: - description: items is the list of IngressClasses. - items: - $ref: "#/components/schemas/v1.IngressClass" - type: array kind: description: "Kind is a string value representing the REST resource this\ - \ object represents. Servers may infer this from the endpoint the client\ - \ submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds" - type: string - metadata: - $ref: "#/components/schemas/v1.ListMeta" - required: - - items - type: object - x-kubernetes-group-version-kind: - - group: networking.k8s.io - kind: IngressClassList - version: v1 - x-implements: - - io.kubernetes.client.common.KubernetesListObject - v1.IngressClassParametersReference: - description: IngressClassParametersReference identifies an API object. This - can be used to specify a cluster or namespace-scoped resource. - example: - apiGroup: apiGroup - kind: kind - scope: scope - name: name - namespace: namespace - properties: - apiGroup: - description: "apiGroup is the group for the resource being referenced. If\ - \ APIGroup is not specified, the specified Kind must be in the core API\ - \ group. For any other third-party types, APIGroup is required." - type: string - kind: - description: kind is the type of resource being referenced. - type: string - name: - description: name is the name of resource being referenced. - type: string - namespace: - description: namespace is the namespace of the resource being referenced. - This field is required when scope is set to "Namespace" and must be unset - when scope is set to "Cluster". - type: string - scope: - description: scope represents if this refers to a cluster or namespace scoped - resource. This may be set to "Cluster" (default) or "Namespace". + \ object represents. Servers may infer this from the endpoint the client\ + \ submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds" type: string + metadata: + $ref: "#/components/schemas/v1.ObjectMeta" + overhead: + $ref: "#/components/schemas/v1.Overhead" + scheduling: + $ref: "#/components/schemas/v1.Scheduling" required: - - kind - - name - type: object - v1.IngressClassSpec: - description: IngressClassSpec provides information about the class of an Ingress. - example: - controller: controller - parameters: - apiGroup: apiGroup - kind: kind - scope: scope - name: name - namespace: namespace - properties: - controller: - description: "controller refers to the name of the controller that should\ - \ handle this class. This allows for different \"flavors\" that are controlled\ - \ by the same controller. For example, you may have different parameters\ - \ for the same implementing controller. This should be specified as a\ - \ domain-prefixed path no more than 250 characters in length, e.g. \"\ - acme.io/ingress-controller\". This field is immutable." - type: string - parameters: - $ref: "#/components/schemas/v1.IngressClassParametersReference" + - handler type: object - v1.IngressList: - description: IngressList is a collection of Ingress. + x-kubernetes-group-version-kind: + - group: node.k8s.io + kind: RuntimeClass + version: v1 + x-implements: + - io.kubernetes.client.common.KubernetesObject + v1.RuntimeClassList: + description: RuntimeClassList is a list of RuntimeClass objects. example: metadata: remainingItemCount: 1 @@ -267572,7 +286216,8 @@ components: apiVersion: apiVersion kind: kind items: - - metadata: + - handler: handler + metadata: generation: 6 finalizers: - finalizers @@ -267620,104 +286265,25 @@ components: namespace: namespace apiVersion: apiVersion kind: kind - spec: - defaultBackend: - resource: - apiGroup: apiGroup - kind: kind - name: name - service: - port: - number: 0 - name: name - name: name - ingressClassName: ingressClassName - rules: - - host: host - http: - paths: - - path: path - backend: - resource: - apiGroup: apiGroup - kind: kind - name: name - service: - port: - number: 0 - name: name - name: name - pathType: pathType - - path: path - backend: - resource: - apiGroup: apiGroup - kind: kind - name: name - service: - port: - number: 0 - name: name - name: name - pathType: pathType - - host: host - http: - paths: - - path: path - backend: - resource: - apiGroup: apiGroup - kind: kind - name: name - service: - port: - number: 0 - name: name - name: name - pathType: pathType - - path: path - backend: - resource: - apiGroup: apiGroup - kind: kind - name: name - service: - port: - number: 0 - name: name - name: name - pathType: pathType - tls: - - secretName: secretName - hosts: - - hosts - - hosts - - secretName: secretName - hosts: - - hosts - - hosts - status: - loadBalancer: - ingress: - - hostname: hostname - ip: ip - ports: - - protocol: protocol - port: 6 - error: error - - protocol: protocol - port: 6 - error: error - - hostname: hostname - ip: ip - ports: - - protocol: protocol - port: 6 - error: error - - protocol: protocol - port: 6 - error: error - - metadata: + overhead: + podFixed: + key: null + scheduling: + tolerations: + - effect: effect + tolerationSeconds: 8 + value: value + key: key + operator: operator + - effect: effect + tolerationSeconds: 8 + value: value + key: key + operator: operator + nodeSelector: + key: nodeSelector + - handler: handler + metadata: generation: 6 finalizers: - finalizers @@ -267765,103 +286331,23 @@ components: namespace: namespace apiVersion: apiVersion kind: kind - spec: - defaultBackend: - resource: - apiGroup: apiGroup - kind: kind - name: name - service: - port: - number: 0 - name: name - name: name - ingressClassName: ingressClassName - rules: - - host: host - http: - paths: - - path: path - backend: - resource: - apiGroup: apiGroup - kind: kind - name: name - service: - port: - number: 0 - name: name - name: name - pathType: pathType - - path: path - backend: - resource: - apiGroup: apiGroup - kind: kind - name: name - service: - port: - number: 0 - name: name - name: name - pathType: pathType - - host: host - http: - paths: - - path: path - backend: - resource: - apiGroup: apiGroup - kind: kind - name: name - service: - port: - number: 0 - name: name - name: name - pathType: pathType - - path: path - backend: - resource: - apiGroup: apiGroup - kind: kind - name: name - service: - port: - number: 0 - name: name - name: name - pathType: pathType - tls: - - secretName: secretName - hosts: - - hosts - - hosts - - secretName: secretName - hosts: - - hosts - - hosts - status: - loadBalancer: - ingress: - - hostname: hostname - ip: ip - ports: - - protocol: protocol - port: 6 - error: error - - protocol: protocol - port: 6 - error: error - - hostname: hostname - ip: ip - ports: - - protocol: protocol - port: 6 - error: error - - protocol: protocol - port: 6 - error: error + overhead: + podFixed: + key: null + scheduling: + tolerations: + - effect: effect + tolerationSeconds: 8 + value: value + key: key + operator: operator + - effect: effect + tolerationSeconds: 8 + value: value + key: key + operator: operator + nodeSelector: + key: nodeSelector properties: apiVersion: description: "APIVersion defines the versioned schema of this representation\ @@ -267869,9 +286355,9 @@ components: \ internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources" type: string items: - description: items is the list of Ingress. + description: items is a list of schema objects. items: - $ref: "#/components/schemas/v1.Ingress" + $ref: "#/components/schemas/v1.RuntimeClass" type: array kind: description: "Kind is a string value representing the REST resource this\ @@ -267884,340 +286370,139 @@ components: - items type: object x-kubernetes-group-version-kind: - - group: networking.k8s.io - kind: IngressList + - group: node.k8s.io + kind: RuntimeClassList version: v1 x-implements: - io.kubernetes.client.common.KubernetesListObject - v1.IngressLoadBalancerIngress: - description: IngressLoadBalancerIngress represents the status of a load-balancer - ingress point. - example: - hostname: hostname - ip: ip - ports: - - protocol: protocol - port: 6 - error: error - - protocol: protocol - port: 6 - error: error - properties: - hostname: - description: hostname is set for load-balancer ingress points that are DNS - based. - type: string - ip: - description: ip is set for load-balancer ingress points that are IP based. - type: string - ports: - description: ports provides information about the ports exposed by this - LoadBalancer. - items: - $ref: "#/components/schemas/v1.IngressPortStatus" - type: array - x-kubernetes-list-type: atomic - type: object - v1.IngressLoadBalancerStatus: - description: IngressLoadBalancerStatus represents the status of a load-balancer. + v1.Scheduling: + description: Scheduling specifies the scheduling constraints for nodes supporting + a RuntimeClass. example: - ingress: - - hostname: hostname - ip: ip - ports: - - protocol: protocol - port: 6 - error: error - - protocol: protocol - port: 6 - error: error - - hostname: hostname - ip: ip - ports: - - protocol: protocol - port: 6 - error: error - - protocol: protocol - port: 6 - error: error + tolerations: + - effect: effect + tolerationSeconds: 8 + value: value + key: key + operator: operator + - effect: effect + tolerationSeconds: 8 + value: value + key: key + operator: operator + nodeSelector: + key: nodeSelector properties: - ingress: - description: ingress is a list containing ingress points for the load-balancer. + nodeSelector: + additionalProperties: + type: string + description: nodeSelector lists labels that must be present on nodes that + support this RuntimeClass. Pods using this RuntimeClass can only be scheduled + to a node matched by this selector. The RuntimeClass nodeSelector is merged + with a pod's existing nodeSelector. Any conflicts will cause the pod to + be rejected in admission. + type: object + x-kubernetes-map-type: atomic + tolerations: + description: "tolerations are appended (excluding duplicates) to pods running\ + \ with this RuntimeClass during admission, effectively unioning the set\ + \ of nodes tolerated by the pod and the RuntimeClass." items: - $ref: "#/components/schemas/v1.IngressLoadBalancerIngress" + $ref: "#/components/schemas/v1.Toleration" type: array x-kubernetes-list-type: atomic type: object - v1.IngressPortStatus: - description: IngressPortStatus represents the error condition of a service port - example: - protocol: protocol - port: 6 - error: error - properties: - error: - description: |- - error is to record the problem with the service port The format of the error shall comply with the following rules: - built-in error values shall be specified in this file and those shall use - CamelCase names - - cloud provider specific error values must have names that comply with the - format foo.example.com/CamelCase. - type: string - port: - description: port is the port number of the ingress port. - format: int32 - type: integer - protocol: - description: "protocol is the protocol of the ingress port. The supported\ - \ values are: \"TCP\", \"UDP\", \"SCTP\"" - type: string - required: - - port - - protocol - type: object - v1.IngressRule: - description: "IngressRule represents the rules mapping the paths under a specified\ - \ host to the related backend services. Incoming requests are first evaluated\ - \ for a host match, then routed to the backend associated with the matching\ - \ IngressRuleValue." - example: - host: host - http: - paths: - - path: path - backend: - resource: - apiGroup: apiGroup - kind: kind - name: name - service: - port: - number: 0 - name: name - name: name - pathType: pathType - - path: path - backend: - resource: - apiGroup: apiGroup - kind: kind - name: name - service: - port: - number: 0 - name: name - name: name - pathType: pathType - properties: - host: - description: "host is the fully qualified domain name of a network host,\ - \ as defined by RFC 3986. Note the following deviations from the \"host\"\ - \ part of the URI as defined in RFC 3986: 1. IPs are not allowed. Currently\ - \ an IngressRuleValue can only apply to\n the IP in the Spec of the\ - \ parent Ingress.\n2. The `:` delimiter is not respected because ports\ - \ are not allowed.\n\t Currently the port of an Ingress is implicitly\ - \ :80 for http and\n\t :443 for https.\nBoth these may change in the\ - \ future. Incoming requests are matched against the host before the IngressRuleValue.\ - \ If the host is unspecified, the Ingress routes all traffic based on\ - \ the specified IngressRuleValue.\n\nhost can be \"precise\" which is\ - \ a domain name without the terminating dot of a network host (e.g. \"\ - foo.bar.com\") or \"wildcard\", which is a domain name prefixed with a\ - \ single wildcard label (e.g. \"*.foo.com\"). The wildcard character '*'\ - \ must appear by itself as the first DNS label and matches only a single\ - \ label. You cannot have a wildcard label by itself (e.g. Host == \"*\"\ - ). Requests will be matched against the Host field in the following way:\ - \ 1. If host is precise, the request matches this rule if the http host\ - \ header is equal to Host. 2. If host is a wildcard, then the request\ - \ matches this rule if the http host header is to equal to the suffix\ - \ (removing the first label) of the wildcard rule." - type: string - http: - $ref: "#/components/schemas/v1.HTTPIngressRuleValue" - type: object - v1.IngressServiceBackend: - description: IngressServiceBackend references a Kubernetes Service as a Backend. - example: - port: - number: 0 - name: name - name: name - properties: - name: - description: name is the referenced service. The service must exist in the - same namespace as the Ingress object. - type: string - port: - $ref: "#/components/schemas/v1.ServiceBackendPort" - required: - - name - type: object - v1.IngressSpec: - description: IngressSpec describes the Ingress the user wishes to exist. + v1.Eviction: + description: Eviction evicts a pod from its node subject to certain policies + and safety constraints. This is a subresource of Pod. A request to cause + such an eviction is created by POSTing to .../pods//evictions. example: - defaultBackend: - resource: - apiGroup: apiGroup + deleteOptions: + orphanDependents: true + apiVersion: apiVersion + dryRun: + - dryRun + - dryRun + kind: kind + preconditions: + uid: uid + resourceVersion: resourceVersion + ignoreStoreReadErrorWithClusterBreakingPotential: true + gracePeriodSeconds: 0 + propagationPolicy: propagationPolicy + metadata: + generation: 6 + finalizers: + - finalizers + - finalizers + resourceVersion: resourceVersion + annotations: + key: annotations + generateName: generateName + deletionTimestamp: 2000-01-23T04:56:07.000+00:00 + labels: + key: labels + ownerReferences: + - uid: uid + controller: true + apiVersion: apiVersion kind: kind name: name - service: - port: - number: 0 - name: name + blockOwnerDeletion: true + - uid: uid + controller: true + apiVersion: apiVersion + kind: kind name: name - ingressClassName: ingressClassName - rules: - - host: host - http: - paths: - - path: path - backend: - resource: - apiGroup: apiGroup - kind: kind - name: name - service: - port: - number: 0 - name: name - name: name - pathType: pathType - - path: path - backend: - resource: - apiGroup: apiGroup - kind: kind - name: name - service: - port: - number: 0 - name: name - name: name - pathType: pathType - - host: host - http: - paths: - - path: path - backend: - resource: - apiGroup: apiGroup - kind: kind - name: name - service: - port: - number: 0 - name: name - name: name - pathType: pathType - - path: path - backend: - resource: - apiGroup: apiGroup - kind: kind - name: name - service: - port: - number: 0 - name: name - name: name - pathType: pathType - tls: - - secretName: secretName - hosts: - - hosts - - hosts - - secretName: secretName - hosts: - - hosts - - hosts + blockOwnerDeletion: true + selfLink: selfLink + deletionGracePeriodSeconds: 0 + uid: uid + managedFields: + - apiVersion: apiVersion + fieldsV1: "{}" + manager: manager + subresource: subresource + time: 2000-01-23T04:56:07.000+00:00 + operation: operation + fieldsType: fieldsType + - apiVersion: apiVersion + fieldsV1: "{}" + manager: manager + subresource: subresource + time: 2000-01-23T04:56:07.000+00:00 + operation: operation + fieldsType: fieldsType + creationTimestamp: 2000-01-23T04:56:07.000+00:00 + name: name + namespace: namespace + apiVersion: apiVersion + kind: kind properties: - defaultBackend: - $ref: "#/components/schemas/v1.IngressBackend" - ingressClassName: - description: "ingressClassName is the name of an IngressClass cluster resource.\ - \ Ingress controller implementations use this field to know whether they\ - \ should be serving this Ingress resource, by a transitive connection\ - \ (controller -> IngressClass -> Ingress resource). Although the `kubernetes.io/ingress.class`\ - \ annotation (simple constant name) was never formally defined, it was\ - \ widely supported by Ingress controllers to create a direct binding between\ - \ Ingress controller and Ingress resources. Newly created Ingress resources\ - \ should prefer using the field. However, even though the annotation is\ - \ officially deprecated, for backwards compatibility reasons, ingress\ - \ controllers should still honor that annotation if present." + apiVersion: + description: "APIVersion defines the versioned schema of this representation\ + \ of an object. Servers should convert recognized schemas to the latest\ + \ internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources" type: string - rules: - description: "rules is a list of host rules used to configure the Ingress.\ - \ If unspecified, or no rule matches, all traffic is sent to the default\ - \ backend." - items: - $ref: "#/components/schemas/v1.IngressRule" - type: array - x-kubernetes-list-type: atomic - tls: - description: "tls represents the TLS configuration. Currently the Ingress\ - \ only supports a single TLS port, 443. If multiple members of this list\ - \ specify different hosts, they will be multiplexed on the same port according\ - \ to the hostname specified through the SNI TLS extension, if the ingress\ - \ controller fulfilling the ingress supports SNI." - items: - $ref: "#/components/schemas/v1.IngressTLS" - type: array - x-kubernetes-list-type: atomic - type: object - v1.IngressStatus: - description: IngressStatus describe the current state of the Ingress. - example: - loadBalancer: - ingress: - - hostname: hostname - ip: ip - ports: - - protocol: protocol - port: 6 - error: error - - protocol: protocol - port: 6 - error: error - - hostname: hostname - ip: ip - ports: - - protocol: protocol - port: 6 - error: error - - protocol: protocol - port: 6 - error: error - properties: - loadBalancer: - $ref: "#/components/schemas/v1.IngressLoadBalancerStatus" - type: object - v1.IngressTLS: - description: IngressTLS describes the transport layer security associated with - an ingress. - example: - secretName: secretName - hosts: - - hosts - - hosts - properties: - hosts: - description: "hosts is a list of hosts included in the TLS certificate.\ - \ The values in this list must match the name/s used in the tlsSecret.\ - \ Defaults to the wildcard host setting for the loadbalancer controller\ - \ fulfilling this Ingress, if left unspecified." - items: - type: string - type: array - x-kubernetes-list-type: atomic - secretName: - description: "secretName is the name of the secret used to terminate TLS\ - \ traffic on port 443. Field is left optional to allow TLS routing based\ - \ on SNI hostname alone. If the SNI host in a listener conflicts with\ - \ the \"Host\" header field used by an IngressRule, the SNI host is used\ - \ for termination and value of the \"Host\" header is used for routing." + deleteOptions: + $ref: "#/components/schemas/v1.DeleteOptions" + kind: + description: "Kind is a string value representing the REST resource this\ + \ object represents. Servers may infer this from the endpoint the client\ + \ submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds" type: string + metadata: + $ref: "#/components/schemas/v1.ObjectMeta" type: object - v1.NetworkPolicy: - description: NetworkPolicy describes what network traffic is allowed for a set - of Pods + x-kubernetes-group-version-kind: + - group: policy + kind: Eviction + version: v1 + x-implements: + - io.kubernetes.client.common.KubernetesObject + v1.PodDisruptionBudget: + description: PodDisruptionBudget is an object to define the max disruption that + can be caused to a collection of pods example: metadata: generation: 6 @@ -268267,322 +286552,45 @@ components: namespace: namespace apiVersion: apiVersion kind: kind - spec: - ingress: - - from: - - podSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - ipBlock: - cidr: cidr - except: - - except - - except - namespaceSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - - podSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - ipBlock: - cidr: cidr - except: - - except - - except - namespaceSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - ports: - - protocol: protocol - port: port - endPort: 0 - - protocol: protocol - port: port - endPort: 0 - - from: - - podSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - ipBlock: - cidr: cidr - except: - - except - - except - namespaceSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - - podSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - ipBlock: - cidr: cidr - except: - - except - - except - namespaceSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - ports: - - protocol: protocol - port: port - endPort: 0 - - protocol: protocol - port: port - endPort: 0 - podSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - policyTypes: - - policyTypes - - policyTypes - egress: - - to: - - podSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - ipBlock: - cidr: cidr - except: - - except - - except - namespaceSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - - podSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - ipBlock: - cidr: cidr - except: - - except - - except - namespaceSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - ports: - - protocol: protocol - port: port - endPort: 0 - - protocol: protocol - port: port - endPort: 0 - - to: - - podSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - ipBlock: - cidr: cidr - except: - - except - - except - namespaceSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - - podSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - ipBlock: - cidr: cidr - except: - - except - - except - namespaceSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - ports: - - protocol: protocol - port: port - endPort: 0 - - protocol: protocol - port: port - endPort: 0 + spec: + minAvailable: minAvailable + maxUnavailable: maxUnavailable + unhealthyPodEvictionPolicy: unhealthyPodEvictionPolicy + selector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + status: + currentHealthy: 0 + expectedPods: 5 + disruptionsAllowed: 1 + disruptedPods: + key: 2000-01-23T04:56:07.000+00:00 + conditions: + - reason: reason + lastTransitionTime: 2000-01-23T04:56:07.000+00:00 + message: message + type: type + observedGeneration: 5 + status: status + - reason: reason + lastTransitionTime: 2000-01-23T04:56:07.000+00:00 + message: message + type: type + observedGeneration: 5 + status: status + observedGeneration: 5 + desiredHealthy: 6 properties: apiVersion: description: "APIVersion defines the versioned schema of this representation\ @@ -268597,222 +286605,18 @@ components: metadata: $ref: "#/components/schemas/v1.ObjectMeta" spec: - $ref: "#/components/schemas/v1.NetworkPolicySpec" + $ref: "#/components/schemas/v1.PodDisruptionBudgetSpec" + status: + $ref: "#/components/schemas/v1.PodDisruptionBudgetStatus" type: object x-kubernetes-group-version-kind: - - group: networking.k8s.io - kind: NetworkPolicy + - group: policy + kind: PodDisruptionBudget version: v1 x-implements: - io.kubernetes.client.common.KubernetesObject - v1.NetworkPolicyEgressRule: - description: NetworkPolicyEgressRule describes a particular set of traffic that - is allowed out of pods matched by a NetworkPolicySpec's podSelector. The traffic - must match both ports and to. This type is beta-level in 1.8 - example: - to: - - podSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - ipBlock: - cidr: cidr - except: - - except - - except - namespaceSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - - podSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - ipBlock: - cidr: cidr - except: - - except - - except - namespaceSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - ports: - - protocol: protocol - port: port - endPort: 0 - - protocol: protocol - port: port - endPort: 0 - properties: - ports: - description: "ports is a list of destination ports for outgoing traffic.\ - \ Each item in this list is combined using a logical OR. If this field\ - \ is empty or missing, this rule matches all ports (traffic not restricted\ - \ by port). If this field is present and contains at least one item, then\ - \ this rule allows traffic only if the traffic matches at least one port\ - \ in the list." - items: - $ref: "#/components/schemas/v1.NetworkPolicyPort" - type: array - x-kubernetes-list-type: atomic - to: - description: "to is a list of destinations for outgoing traffic of pods\ - \ selected for this rule. Items in this list are combined using a logical\ - \ OR operation. If this field is empty or missing, this rule matches all\ - \ destinations (traffic not restricted by destination). If this field\ - \ is present and contains at least one item, this rule allows traffic\ - \ only if the traffic matches at least one item in the to list." - items: - $ref: "#/components/schemas/v1.NetworkPolicyPeer" - type: array - x-kubernetes-list-type: atomic - type: object - v1.NetworkPolicyIngressRule: - description: NetworkPolicyIngressRule describes a particular set of traffic - that is allowed to the pods matched by a NetworkPolicySpec's podSelector. - The traffic must match both ports and from. - example: - from: - - podSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - ipBlock: - cidr: cidr - except: - - except - - except - namespaceSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - - podSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - ipBlock: - cidr: cidr - except: - - except - - except - namespaceSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - ports: - - protocol: protocol - port: port - endPort: 0 - - protocol: protocol - port: port - endPort: 0 - properties: - from: - description: "from is a list of sources which should be able to access the\ - \ pods selected for this rule. Items in this list are combined using a\ - \ logical OR operation. If this field is empty or missing, this rule matches\ - \ all sources (traffic not restricted by source). If this field is present\ - \ and contains at least one item, this rule allows traffic only if the\ - \ traffic matches at least one item in the from list." - items: - $ref: "#/components/schemas/v1.NetworkPolicyPeer" - type: array - x-kubernetes-list-type: atomic - ports: - description: "ports is a list of ports which should be made accessible on\ - \ the pods selected for this rule. Each item in this list is combined\ - \ using a logical OR. If this field is empty or missing, this rule matches\ - \ all ports (traffic not restricted by port). If this field is present\ - \ and contains at least one item, then this rule allows traffic only if\ - \ the traffic matches at least one port in the list." - items: - $ref: "#/components/schemas/v1.NetworkPolicyPort" - type: array - x-kubernetes-list-type: atomic - type: object - v1.NetworkPolicyList: - description: NetworkPolicyList is a list of NetworkPolicy objects. + v1.PodDisruptionBudgetList: + description: PodDisruptionBudgetList is a collection of PodDisruptionBudgets. example: metadata: remainingItemCount: 1 @@ -268873,156 +286677,10 @@ components: apiVersion: apiVersion kind: kind spec: - ingress: - - from: - - podSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - ipBlock: - cidr: cidr - except: - - except - - except - namespaceSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - - podSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - ipBlock: - cidr: cidr - except: - - except - - except - namespaceSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - ports: - - protocol: protocol - port: port - endPort: 0 - - protocol: protocol - port: port - endPort: 0 - - from: - - podSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - ipBlock: - cidr: cidr - except: - - except - - except - namespaceSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - - podSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - ipBlock: - cidr: cidr - except: - - except - - except - namespaceSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - ports: - - protocol: protocol - port: port - endPort: 0 - - protocol: protocol - port: port - endPort: 0 - podSelector: + minAvailable: minAvailable + maxUnavailable: maxUnavailable + unhealthyPodEvictionPolicy: unhealthyPodEvictionPolicy + selector: matchExpressions: - values: - values @@ -269036,158 +286694,567 @@ components: operator: operator matchLabels: key: matchLabels - policyTypes: - - policyTypes - - policyTypes - egress: - - to: - - podSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - ipBlock: - cidr: cidr - except: - - except - - except - namespaceSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - - podSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - ipBlock: - cidr: cidr - except: - - except - - except - namespaceSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - ports: - - protocol: protocol - port: port - endPort: 0 - - protocol: protocol - port: port - endPort: 0 - - to: - - podSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - ipBlock: - cidr: cidr - except: - - except - - except - namespaceSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - - podSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - ipBlock: - cidr: cidr - except: - - except - - except - namespaceSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - ports: - - protocol: protocol - port: port - endPort: 0 - - protocol: protocol - port: port - endPort: 0 + status: + currentHealthy: 0 + expectedPods: 5 + disruptionsAllowed: 1 + disruptedPods: + key: 2000-01-23T04:56:07.000+00:00 + conditions: + - reason: reason + lastTransitionTime: 2000-01-23T04:56:07.000+00:00 + message: message + type: type + observedGeneration: 5 + status: status + - reason: reason + lastTransitionTime: 2000-01-23T04:56:07.000+00:00 + message: message + type: type + observedGeneration: 5 + status: status + observedGeneration: 5 + desiredHealthy: 6 + - metadata: + generation: 6 + finalizers: + - finalizers + - finalizers + resourceVersion: resourceVersion + annotations: + key: annotations + generateName: generateName + deletionTimestamp: 2000-01-23T04:56:07.000+00:00 + labels: + key: labels + ownerReferences: + - uid: uid + controller: true + apiVersion: apiVersion + kind: kind + name: name + blockOwnerDeletion: true + - uid: uid + controller: true + apiVersion: apiVersion + kind: kind + name: name + blockOwnerDeletion: true + selfLink: selfLink + deletionGracePeriodSeconds: 0 + uid: uid + managedFields: + - apiVersion: apiVersion + fieldsV1: "{}" + manager: manager + subresource: subresource + time: 2000-01-23T04:56:07.000+00:00 + operation: operation + fieldsType: fieldsType + - apiVersion: apiVersion + fieldsV1: "{}" + manager: manager + subresource: subresource + time: 2000-01-23T04:56:07.000+00:00 + operation: operation + fieldsType: fieldsType + creationTimestamp: 2000-01-23T04:56:07.000+00:00 + name: name + namespace: namespace + apiVersion: apiVersion + kind: kind + spec: + minAvailable: minAvailable + maxUnavailable: maxUnavailable + unhealthyPodEvictionPolicy: unhealthyPodEvictionPolicy + selector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + status: + currentHealthy: 0 + expectedPods: 5 + disruptionsAllowed: 1 + disruptedPods: + key: 2000-01-23T04:56:07.000+00:00 + conditions: + - reason: reason + lastTransitionTime: 2000-01-23T04:56:07.000+00:00 + message: message + type: type + observedGeneration: 5 + status: status + - reason: reason + lastTransitionTime: 2000-01-23T04:56:07.000+00:00 + message: message + type: type + observedGeneration: 5 + status: status + observedGeneration: 5 + desiredHealthy: 6 + properties: + apiVersion: + description: "APIVersion defines the versioned schema of this representation\ + \ of an object. Servers should convert recognized schemas to the latest\ + \ internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources" + type: string + items: + description: Items is a list of PodDisruptionBudgets + items: + $ref: "#/components/schemas/v1.PodDisruptionBudget" + type: array + kind: + description: "Kind is a string value representing the REST resource this\ + \ object represents. Servers may infer this from the endpoint the client\ + \ submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds" + type: string + metadata: + $ref: "#/components/schemas/v1.ListMeta" + required: + - items + type: object + x-kubernetes-group-version-kind: + - group: policy + kind: PodDisruptionBudgetList + version: v1 + x-implements: + - io.kubernetes.client.common.KubernetesListObject + v1.PodDisruptionBudgetSpec: + description: PodDisruptionBudgetSpec is a description of a PodDisruptionBudget. + example: + minAvailable: minAvailable + maxUnavailable: maxUnavailable + unhealthyPodEvictionPolicy: unhealthyPodEvictionPolicy + selector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + properties: + maxUnavailable: + description: "IntOrString is a type that can hold an int32 or a string.\ + \ When used in JSON or YAML marshalling and unmarshalling, it produces\ + \ or consumes the inner type. This allows you to have, for example, a\ + \ JSON field that can accept a name or number." + format: int-or-string + type: string + minAvailable: + description: "IntOrString is a type that can hold an int32 or a string.\ + \ When used in JSON or YAML marshalling and unmarshalling, it produces\ + \ or consumes the inner type. This allows you to have, for example, a\ + \ JSON field that can accept a name or number." + format: int-or-string + type: string + selector: + $ref: "#/components/schemas/v1.LabelSelector" + unhealthyPodEvictionPolicy: + description: |- + unhealthyPodEvictionPolicy defines the criteria for when unhealthy pods should be considered for eviction. Current implementation considers healthy pods, as pods that have status.conditions item with type="Ready",status="True". + + Valid policies are IfHealthyBudget and AlwaysAllow. If no policy is specified, the default behavior will be used, which corresponds to the IfHealthyBudget policy. + + IfHealthyBudget policy means that running pods (status.phase="Running"), but not yet healthy can be evicted only if the guarded application is not disrupted (status.currentHealthy is at least equal to status.desiredHealthy). Healthy pods will be subject to the PDB for eviction. + + AlwaysAllow policy means that all running pods (status.phase="Running"), but not yet healthy are considered disrupted and can be evicted regardless of whether the criteria in a PDB is met. This means perspective running pods of a disrupted application might not get a chance to become healthy. Healthy pods will be subject to the PDB for eviction. + + Additional policies may be added in the future. Clients making eviction decisions should disallow eviction of unhealthy pods if they encounter an unrecognized policy in this field. + type: string + type: object + v1.PodDisruptionBudgetStatus: + description: PodDisruptionBudgetStatus represents information about the status + of a PodDisruptionBudget. Status may trail the actual state of a system. + example: + currentHealthy: 0 + expectedPods: 5 + disruptionsAllowed: 1 + disruptedPods: + key: 2000-01-23T04:56:07.000+00:00 + conditions: + - reason: reason + lastTransitionTime: 2000-01-23T04:56:07.000+00:00 + message: message + type: type + observedGeneration: 5 + status: status + - reason: reason + lastTransitionTime: 2000-01-23T04:56:07.000+00:00 + message: message + type: type + observedGeneration: 5 + status: status + observedGeneration: 5 + desiredHealthy: 6 + properties: + conditions: + description: |- + Conditions contain conditions for PDB. The disruption controller sets the DisruptionAllowed condition. The following are known values for the reason field (additional reasons could be added in the future): - SyncFailed: The controller encountered an error and wasn't able to compute + the number of allowed disruptions. Therefore no disruptions are + allowed and the status of the condition will be False. + - InsufficientPods: The number of pods are either at or below the number + required by the PodDisruptionBudget. No disruptions are + allowed and the status of the condition will be False. + - SufficientPods: There are more pods than required by the PodDisruptionBudget. + The condition will be True, and the number of allowed + disruptions are provided by the disruptionsAllowed property. + items: + $ref: "#/components/schemas/v1.Condition" + type: array + x-kubernetes-patch-strategy: merge + x-kubernetes-list-type: map + x-kubernetes-list-map-keys: + - type + x-kubernetes-patch-merge-key: type + currentHealthy: + description: current number of healthy pods + format: int32 + type: integer + desiredHealthy: + description: minimum desired number of healthy pods + format: int32 + type: integer + disruptedPods: + additionalProperties: + description: Time is a wrapper around time.Time which supports correct + marshaling to YAML and JSON. Wrappers are provided for many of the + factory methods that the time package offers. + format: date-time + type: string + description: DisruptedPods contains information about pods whose eviction + was processed by the API server eviction subresource handler but has not + yet been observed by the PodDisruptionBudget controller. A pod will be + in this map from the time when the API server processed the eviction request + to the time when the pod is seen by PDB controller as having been marked + for deletion (or after a timeout). The key in the map is the name of the + pod and the value is the time when the API server processed the eviction + request. If the deletion didn't occur and a pod is still there it will + be removed from the list automatically by PodDisruptionBudget controller + after some time. If everything goes smooth this map should be empty for + the most of the time. Large number of entries in the map may indicate + problems with pod deletions. + type: object + disruptionsAllowed: + description: Number of pod disruptions that are currently allowed. + format: int32 + type: integer + expectedPods: + description: total number of pods counted by this disruption budget + format: int32 + type: integer + observedGeneration: + description: Most recent generation observed when updating this PDB status. + DisruptionsAllowed and other status information is valid only if observedGeneration + equals to PDB's object generation. + format: int64 + type: integer + type: object + v1.AggregationRule: + description: AggregationRule describes how to locate ClusterRoles to aggregate + into the ClusterRole + example: + clusterRoleSelectors: + - matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + - matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + properties: + clusterRoleSelectors: + description: "clusterRoleSelectors holds a list of selectors which will\ + \ be used to find ClusterRoles and create the rules. If any of the selectors\ + \ match, then the ClusterRole's permissions will be added" + items: + $ref: "#/components/schemas/v1.LabelSelector" + type: array + x-kubernetes-list-type: atomic + type: object + v1.ClusterRole: + description: "ClusterRole is a cluster level, logical grouping of PolicyRules\ + \ that can be referenced as a unit by a RoleBinding or ClusterRoleBinding." + example: + metadata: + generation: 6 + finalizers: + - finalizers + - finalizers + resourceVersion: resourceVersion + annotations: + key: annotations + generateName: generateName + deletionTimestamp: 2000-01-23T04:56:07.000+00:00 + labels: + key: labels + ownerReferences: + - uid: uid + controller: true + apiVersion: apiVersion + kind: kind + name: name + blockOwnerDeletion: true + - uid: uid + controller: true + apiVersion: apiVersion + kind: kind + name: name + blockOwnerDeletion: true + selfLink: selfLink + deletionGracePeriodSeconds: 0 + uid: uid + managedFields: + - apiVersion: apiVersion + fieldsV1: "{}" + manager: manager + subresource: subresource + time: 2000-01-23T04:56:07.000+00:00 + operation: operation + fieldsType: fieldsType + - apiVersion: apiVersion + fieldsV1: "{}" + manager: manager + subresource: subresource + time: 2000-01-23T04:56:07.000+00:00 + operation: operation + fieldsType: fieldsType + creationTimestamp: 2000-01-23T04:56:07.000+00:00 + name: name + namespace: namespace + aggregationRule: + clusterRoleSelectors: + - matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + - matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + apiVersion: apiVersion + kind: kind + rules: + - resourceNames: + - resourceNames + - resourceNames + resources: + - resources + - resources + verbs: + - verbs + - verbs + apiGroups: + - apiGroups + - apiGroups + nonResourceURLs: + - nonResourceURLs + - nonResourceURLs + - resourceNames: + - resourceNames + - resourceNames + resources: + - resources + - resources + verbs: + - verbs + - verbs + apiGroups: + - apiGroups + - apiGroups + nonResourceURLs: + - nonResourceURLs + - nonResourceURLs + properties: + aggregationRule: + $ref: "#/components/schemas/v1.AggregationRule" + apiVersion: + description: "APIVersion defines the versioned schema of this representation\ + \ of an object. Servers should convert recognized schemas to the latest\ + \ internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources" + type: string + kind: + description: "Kind is a string value representing the REST resource this\ + \ object represents. Servers may infer this from the endpoint the client\ + \ submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds" + type: string + metadata: + $ref: "#/components/schemas/v1.ObjectMeta" + rules: + description: rules holds all the PolicyRules for this ClusterRole + items: + $ref: "#/components/schemas/v1.PolicyRule" + type: array + x-kubernetes-list-type: atomic + type: object + x-kubernetes-group-version-kind: + - group: rbac.authorization.k8s.io + kind: ClusterRole + version: v1 + x-implements: + - io.kubernetes.client.common.KubernetesObject + v1.ClusterRoleBinding: + description: "ClusterRoleBinding references a ClusterRole, but not contain it.\ + \ It can reference a ClusterRole in the global namespace, and adds who information\ + \ via Subject." + example: + metadata: + generation: 6 + finalizers: + - finalizers + - finalizers + resourceVersion: resourceVersion + annotations: + key: annotations + generateName: generateName + deletionTimestamp: 2000-01-23T04:56:07.000+00:00 + labels: + key: labels + ownerReferences: + - uid: uid + controller: true + apiVersion: apiVersion + kind: kind + name: name + blockOwnerDeletion: true + - uid: uid + controller: true + apiVersion: apiVersion + kind: kind + name: name + blockOwnerDeletion: true + selfLink: selfLink + deletionGracePeriodSeconds: 0 + uid: uid + managedFields: + - apiVersion: apiVersion + fieldsV1: "{}" + manager: manager + subresource: subresource + time: 2000-01-23T04:56:07.000+00:00 + operation: operation + fieldsType: fieldsType + - apiVersion: apiVersion + fieldsV1: "{}" + manager: manager + subresource: subresource + time: 2000-01-23T04:56:07.000+00:00 + operation: operation + fieldsType: fieldsType + creationTimestamp: 2000-01-23T04:56:07.000+00:00 + name: name + namespace: namespace + apiVersion: apiVersion + kind: kind + subjects: + - apiGroup: apiGroup + kind: kind + name: name + namespace: namespace + - apiGroup: apiGroup + kind: kind + name: name + namespace: namespace + roleRef: + apiGroup: apiGroup + kind: kind + name: name + properties: + apiVersion: + description: "APIVersion defines the versioned schema of this representation\ + \ of an object. Servers should convert recognized schemas to the latest\ + \ internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources" + type: string + kind: + description: "Kind is a string value representing the REST resource this\ + \ object represents. Servers may infer this from the endpoint the client\ + \ submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds" + type: string + metadata: + $ref: "#/components/schemas/v1.ObjectMeta" + roleRef: + $ref: "#/components/schemas/v1.RoleRef" + subjects: + description: subjects holds references to the objects the role applies to. + items: + $ref: "#/components/schemas/rbac.v1.Subject" + type: array + x-kubernetes-list-type: atomic + required: + - roleRef + type: object + x-kubernetes-group-version-kind: + - group: rbac.authorization.k8s.io + kind: ClusterRoleBinding + version: v1 + x-implements: + - io.kubernetes.client.common.KubernetesObject + v1.ClusterRoleBindingList: + description: ClusterRoleBindingList is a collection of ClusterRoleBindings + example: + metadata: + remainingItemCount: 1 + continue: continue + resourceVersion: resourceVersion + shardInfo: + selector: selector + selfLink: selfLink + apiVersion: apiVersion + kind: kind + items: - metadata: generation: 6 finalizers: @@ -269236,322 +287303,80 @@ components: namespace: namespace apiVersion: apiVersion kind: kind - spec: - ingress: - - from: - - podSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - ipBlock: - cidr: cidr - except: - - except - - except - namespaceSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - - podSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - ipBlock: - cidr: cidr - except: - - except - - except - namespaceSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - ports: - - protocol: protocol - port: port - endPort: 0 - - protocol: protocol - port: port - endPort: 0 - - from: - - podSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - ipBlock: - cidr: cidr - except: - - except - - except - namespaceSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - - podSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - ipBlock: - cidr: cidr - except: - - except - - except - namespaceSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - ports: - - protocol: protocol - port: port - endPort: 0 - - protocol: protocol - port: port - endPort: 0 - podSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - policyTypes: - - policyTypes - - policyTypes - egress: - - to: - - podSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - ipBlock: - cidr: cidr - except: - - except - - except - namespaceSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - - podSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - ipBlock: - cidr: cidr - except: - - except - - except - namespaceSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - ports: - - protocol: protocol - port: port - endPort: 0 - - protocol: protocol - port: port - endPort: 0 - - to: - - podSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - ipBlock: - cidr: cidr - except: - - except - - except - namespaceSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - - podSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - ipBlock: - cidr: cidr - except: - - except - - except - namespaceSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - ports: - - protocol: protocol - port: port - endPort: 0 - - protocol: protocol - port: port - endPort: 0 + subjects: + - apiGroup: apiGroup + kind: kind + name: name + namespace: namespace + - apiGroup: apiGroup + kind: kind + name: name + namespace: namespace + roleRef: + apiGroup: apiGroup + kind: kind + name: name + - metadata: + generation: 6 + finalizers: + - finalizers + - finalizers + resourceVersion: resourceVersion + annotations: + key: annotations + generateName: generateName + deletionTimestamp: 2000-01-23T04:56:07.000+00:00 + labels: + key: labels + ownerReferences: + - uid: uid + controller: true + apiVersion: apiVersion + kind: kind + name: name + blockOwnerDeletion: true + - uid: uid + controller: true + apiVersion: apiVersion + kind: kind + name: name + blockOwnerDeletion: true + selfLink: selfLink + deletionGracePeriodSeconds: 0 + uid: uid + managedFields: + - apiVersion: apiVersion + fieldsV1: "{}" + manager: manager + subresource: subresource + time: 2000-01-23T04:56:07.000+00:00 + operation: operation + fieldsType: fieldsType + - apiVersion: apiVersion + fieldsV1: "{}" + manager: manager + subresource: subresource + time: 2000-01-23T04:56:07.000+00:00 + operation: operation + fieldsType: fieldsType + creationTimestamp: 2000-01-23T04:56:07.000+00:00 + name: name + namespace: namespace + apiVersion: apiVersion + kind: kind + subjects: + - apiGroup: apiGroup + kind: kind + name: name + namespace: namespace + - apiGroup: apiGroup + kind: kind + name: name + namespace: namespace + roleRef: + apiGroup: apiGroup + kind: kind + name: name properties: apiVersion: description: "APIVersion defines the versioned schema of this representation\ @@ -269559,9 +287384,9 @@ components: \ internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources" type: string items: - description: items is a list of schema objects. + description: Items is a list of ClusterRoleBindings items: - $ref: "#/components/schemas/v1.NetworkPolicy" + $ref: "#/components/schemas/v1.ClusterRoleBinding" type: array kind: description: "Kind is a string value representing the REST resource this\ @@ -269574,330 +287399,73 @@ components: - items type: object x-kubernetes-group-version-kind: - - group: networking.k8s.io - kind: NetworkPolicyList + - group: rbac.authorization.k8s.io + kind: ClusterRoleBindingList version: v1 x-implements: - io.kubernetes.client.common.KubernetesListObject - v1.NetworkPolicyPeer: - description: NetworkPolicyPeer describes a peer to allow traffic to/from. Only - certain combinations of fields are allowed - example: - podSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - ipBlock: - cidr: cidr - except: - - except - - except - namespaceSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - properties: - ipBlock: - $ref: "#/components/schemas/v1.IPBlock" - namespaceSelector: - $ref: "#/components/schemas/v1.LabelSelector" - podSelector: - $ref: "#/components/schemas/v1.LabelSelector" - type: object - v1.NetworkPolicyPort: - description: NetworkPolicyPort describes a port to allow traffic on - example: - protocol: protocol - port: port - endPort: 0 - properties: - endPort: - description: "endPort indicates that the range of ports from port to endPort\ - \ if set, inclusive, should be allowed by the policy. This field cannot\ - \ be defined if the port field is not defined or if the port field is\ - \ defined as a named (string) port. The endPort must be equal or greater\ - \ than port." - format: int32 - type: integer - port: - description: "IntOrString is a type that can hold an int32 or a string.\ - \ When used in JSON or YAML marshalling and unmarshalling, it produces\ - \ or consumes the inner type. This allows you to have, for example, a\ - \ JSON field that can accept a name or number." - format: int-or-string - type: string - protocol: - description: "protocol represents the protocol (TCP, UDP, or SCTP) which\ - \ traffic must match. If not specified, this field defaults to TCP." - type: string - type: object - v1.NetworkPolicySpec: - description: NetworkPolicySpec provides the specification of a NetworkPolicy + v1.ClusterRoleList: + description: ClusterRoleList is a collection of ClusterRoles example: - ingress: - - from: - - podSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - ipBlock: - cidr: cidr - except: - - except - - except - namespaceSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - - podSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - ipBlock: - cidr: cidr - except: - - except - - except - namespaceSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - ports: - - protocol: protocol - port: port - endPort: 0 - - protocol: protocol - port: port - endPort: 0 - - from: - - podSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - ipBlock: - cidr: cidr - except: - - except - - except - namespaceSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - - podSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - ipBlock: - cidr: cidr - except: - - except - - except - namespaceSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - ports: - - protocol: protocol - port: port - endPort: 0 - - protocol: protocol - port: port - endPort: 0 - podSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - policyTypes: - - policyTypes - - policyTypes - egress: - - to: - - podSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - ipBlock: - cidr: cidr - except: - - except - - except - namespaceSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - - podSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - ipBlock: - cidr: cidr - except: - - except - - except - namespaceSelector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - ports: - - protocol: protocol - port: port - endPort: 0 - - protocol: protocol - port: port - endPort: 0 - - to: - - podSelector: - matchExpressions: + metadata: + remainingItemCount: 1 + continue: continue + resourceVersion: resourceVersion + shardInfo: + selector: selector + selfLink: selfLink + apiVersion: apiVersion + kind: kind + items: + - metadata: + generation: 6 + finalizers: + - finalizers + - finalizers + resourceVersion: resourceVersion + annotations: + key: annotations + generateName: generateName + deletionTimestamp: 2000-01-23T04:56:07.000+00:00 + labels: + key: labels + ownerReferences: + - uid: uid + controller: true + apiVersion: apiVersion + kind: kind + name: name + blockOwnerDeletion: true + - uid: uid + controller: true + apiVersion: apiVersion + kind: kind + name: name + blockOwnerDeletion: true + selfLink: selfLink + deletionGracePeriodSeconds: 0 + uid: uid + managedFields: + - apiVersion: apiVersion + fieldsV1: "{}" + manager: manager + subresource: subresource + time: 2000-01-23T04:56:07.000+00:00 + operation: operation + fieldsType: fieldsType + - apiVersion: apiVersion + fieldsV1: "{}" + manager: manager + subresource: subresource + time: 2000-01-23T04:56:07.000+00:00 + operation: operation + fieldsType: fieldsType + creationTimestamp: 2000-01-23T04:56:07.000+00:00 + name: name + namespace: namespace + aggregationRule: + clusterRoleSelectors: + - matchExpressions: - values: - values - values @@ -269910,13 +287478,7 @@ components: operator: operator matchLabels: key: matchLabels - ipBlock: - cidr: cidr - except: - - except - - except - namespaceSelector: - matchExpressions: + - matchExpressions: - values: - values - values @@ -269929,8 +287491,88 @@ components: operator: operator matchLabels: key: matchLabels - - podSelector: - matchExpressions: + apiVersion: apiVersion + kind: kind + rules: + - resourceNames: + - resourceNames + - resourceNames + resources: + - resources + - resources + verbs: + - verbs + - verbs + apiGroups: + - apiGroups + - apiGroups + nonResourceURLs: + - nonResourceURLs + - nonResourceURLs + - resourceNames: + - resourceNames + - resourceNames + resources: + - resources + - resources + verbs: + - verbs + - verbs + apiGroups: + - apiGroups + - apiGroups + nonResourceURLs: + - nonResourceURLs + - nonResourceURLs + - metadata: + generation: 6 + finalizers: + - finalizers + - finalizers + resourceVersion: resourceVersion + annotations: + key: annotations + generateName: generateName + deletionTimestamp: 2000-01-23T04:56:07.000+00:00 + labels: + key: labels + ownerReferences: + - uid: uid + controller: true + apiVersion: apiVersion + kind: kind + name: name + blockOwnerDeletion: true + - uid: uid + controller: true + apiVersion: apiVersion + kind: kind + name: name + blockOwnerDeletion: true + selfLink: selfLink + deletionGracePeriodSeconds: 0 + uid: uid + managedFields: + - apiVersion: apiVersion + fieldsV1: "{}" + manager: manager + subresource: subresource + time: 2000-01-23T04:56:07.000+00:00 + operation: operation + fieldsType: fieldsType + - apiVersion: apiVersion + fieldsV1: "{}" + manager: manager + subresource: subresource + time: 2000-01-23T04:56:07.000+00:00 + operation: operation + fieldsType: fieldsType + creationTimestamp: 2000-01-23T04:56:07.000+00:00 + name: name + namespace: namespace + aggregationRule: + clusterRoleSelectors: + - matchExpressions: - values: - values - values @@ -269943,13 +287585,7 @@ components: operator: operator matchLabels: key: matchLabels - ipBlock: - cidr: cidr - except: - - except - - except - namespaceSelector: - matchExpressions: + - matchExpressions: - values: - values - values @@ -269962,105 +287598,246 @@ components: operator: operator matchLabels: key: matchLabels - ports: - - protocol: protocol - port: port - endPort: 0 - - protocol: protocol - port: port - endPort: 0 + apiVersion: apiVersion + kind: kind + rules: + - resourceNames: + - resourceNames + - resourceNames + resources: + - resources + - resources + verbs: + - verbs + - verbs + apiGroups: + - apiGroups + - apiGroups + nonResourceURLs: + - nonResourceURLs + - nonResourceURLs + - resourceNames: + - resourceNames + - resourceNames + resources: + - resources + - resources + verbs: + - verbs + - verbs + apiGroups: + - apiGroups + - apiGroups + nonResourceURLs: + - nonResourceURLs + - nonResourceURLs + properties: + apiVersion: + description: "APIVersion defines the versioned schema of this representation\ + \ of an object. Servers should convert recognized schemas to the latest\ + \ internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources" + type: string + items: + description: Items is a list of ClusterRoles + items: + $ref: "#/components/schemas/v1.ClusterRole" + type: array + kind: + description: "Kind is a string value representing the REST resource this\ + \ object represents. Servers may infer this from the endpoint the client\ + \ submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds" + type: string + metadata: + $ref: "#/components/schemas/v1.ListMeta" + required: + - items + type: object + x-kubernetes-group-version-kind: + - group: rbac.authorization.k8s.io + kind: ClusterRoleList + version: v1 + x-implements: + - io.kubernetes.client.common.KubernetesListObject + v1.PolicyRule: + description: "PolicyRule holds information that describes a policy rule, but\ + \ does not contain information about who the rule applies to or which namespace\ + \ the rule applies to." + example: + resourceNames: + - resourceNames + - resourceNames + resources: + - resources + - resources + verbs: + - verbs + - verbs + apiGroups: + - apiGroups + - apiGroups + nonResourceURLs: + - nonResourceURLs + - nonResourceURLs properties: - egress: - description: "egress is a list of egress rules to be applied to the selected\ - \ pods. Outgoing traffic is allowed if there are no NetworkPolicies selecting\ - \ the pod (and cluster policy otherwise allows the traffic), OR if the\ - \ traffic matches at least one egress rule across all of the NetworkPolicy\ - \ objects whose podSelector matches the pod. If this field is empty then\ - \ this NetworkPolicy limits all outgoing traffic (and serves solely to\ - \ ensure that the pods it selects are isolated by default). This field\ - \ is beta-level in 1.8" + apiGroups: + description: "apiGroups is the name of the APIGroup that contains the resources.\ + \ If multiple API groups are specified, any action requested against\ + \ one of the enumerated resources in any API group will be allowed. \"\ + \" represents the core API group and \"*\" represents all API groups." items: - $ref: "#/components/schemas/v1.NetworkPolicyEgressRule" + type: string type: array x-kubernetes-list-type: atomic - ingress: - description: "ingress is a list of ingress rules to be applied to the selected\ - \ pods. Traffic is allowed to a pod if there are no NetworkPolicies selecting\ - \ the pod (and cluster policy otherwise allows the traffic), OR if the\ - \ traffic source is the pod's local node, OR if the traffic matches at\ - \ least one ingress rule across all of the NetworkPolicy objects whose\ - \ podSelector matches the pod. If this field is empty then this NetworkPolicy\ - \ does not allow any traffic (and serves solely to ensure that the pods\ - \ it selects are isolated by default)" + nonResourceURLs: + description: "nonResourceURLs is a set of partial urls that a user should\ + \ have access to. *s are allowed, but only as the full, final step in\ + \ the path Since non-resource URLs are not namespaced, this field is only\ + \ applicable for ClusterRoles referenced from a ClusterRoleBinding. Rules\ + \ can either apply to API resources (such as \"pods\" or \"secrets\")\ + \ or non-resource URL paths (such as \"/api\"), but not both." items: - $ref: "#/components/schemas/v1.NetworkPolicyIngressRule" + type: string type: array x-kubernetes-list-type: atomic - podSelector: - $ref: "#/components/schemas/v1.LabelSelector" - policyTypes: - description: "policyTypes is a list of rule types that the NetworkPolicy\ - \ relates to. Valid options are [\"Ingress\"], [\"Egress\"], or [\"Ingress\"\ - , \"Egress\"]. If this field is not specified, it will default based on\ - \ the existence of ingress or egress rules; policies that contain an egress\ - \ section are assumed to affect egress, and all policies (whether or not\ - \ they contain an ingress section) are assumed to affect ingress. If you\ - \ want to write an egress-only policy, you must explicitly specify policyTypes\ - \ [ \"Egress\" ]. Likewise, if you want to write a policy that specifies\ - \ that no egress is allowed, you must specify a policyTypes value that\ - \ include \"Egress\" (since such a policy would not include an egress\ - \ section and would otherwise default to just [ \"Ingress\" ]). This field\ - \ is beta-level in 1.8" + resourceNames: + description: resourceNames is an optional white list of names that the rule + applies to. An empty set means that everything is allowed. + items: + type: string + type: array + x-kubernetes-list-type: atomic + resources: + description: resources is a list of resources this rule applies to. '*' + represents all resources. + items: + type: string + type: array + x-kubernetes-list-type: atomic + verbs: + description: verbs is a list of Verbs that apply to ALL the ResourceKinds + contained in this rule. '*' represents all verbs. items: type: string type: array x-kubernetes-list-type: atomic - type: object - v1.ParentReference: - description: ParentReference describes a reference to a parent object. - example: - resource: resource - name: name - namespace: namespace - group: group - properties: - group: - description: Group is the group of the object being referenced. - type: string - name: - description: Name is the name of the object being referenced. - type: string - namespace: - description: Namespace is the namespace of the object being referenced. - type: string - resource: - description: Resource is the resource of the object being referenced. - type: string required: - - name - - resource + - verbs type: object - v1.ServiceBackendPort: - description: ServiceBackendPort is the service port being referenced. + v1.Role: + description: "Role is a namespaced, logical grouping of PolicyRules that can\ + \ be referenced as a unit by a RoleBinding." example: - number: 0 - name: name + metadata: + generation: 6 + finalizers: + - finalizers + - finalizers + resourceVersion: resourceVersion + annotations: + key: annotations + generateName: generateName + deletionTimestamp: 2000-01-23T04:56:07.000+00:00 + labels: + key: labels + ownerReferences: + - uid: uid + controller: true + apiVersion: apiVersion + kind: kind + name: name + blockOwnerDeletion: true + - uid: uid + controller: true + apiVersion: apiVersion + kind: kind + name: name + blockOwnerDeletion: true + selfLink: selfLink + deletionGracePeriodSeconds: 0 + uid: uid + managedFields: + - apiVersion: apiVersion + fieldsV1: "{}" + manager: manager + subresource: subresource + time: 2000-01-23T04:56:07.000+00:00 + operation: operation + fieldsType: fieldsType + - apiVersion: apiVersion + fieldsV1: "{}" + manager: manager + subresource: subresource + time: 2000-01-23T04:56:07.000+00:00 + operation: operation + fieldsType: fieldsType + creationTimestamp: 2000-01-23T04:56:07.000+00:00 + name: name + namespace: namespace + apiVersion: apiVersion + kind: kind + rules: + - resourceNames: + - resourceNames + - resourceNames + resources: + - resources + - resources + verbs: + - verbs + - verbs + apiGroups: + - apiGroups + - apiGroups + nonResourceURLs: + - nonResourceURLs + - nonResourceURLs + - resourceNames: + - resourceNames + - resourceNames + resources: + - resources + - resources + verbs: + - verbs + - verbs + apiGroups: + - apiGroups + - apiGroups + nonResourceURLs: + - nonResourceURLs + - nonResourceURLs properties: - name: - description: name is the name of the port on the Service. This is a mutually - exclusive setting with "Number". + apiVersion: + description: "APIVersion defines the versioned schema of this representation\ + \ of an object. Servers should convert recognized schemas to the latest\ + \ internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources" type: string - number: - description: number is the numerical port number (e.g. 80) on the Service. - This is a mutually exclusive setting with "Name". - format: int32 - type: integer + kind: + description: "Kind is a string value representing the REST resource this\ + \ object represents. Servers may infer this from the endpoint the client\ + \ submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds" + type: string + metadata: + $ref: "#/components/schemas/v1.ObjectMeta" + rules: + description: rules holds all the PolicyRules for this Role + items: + $ref: "#/components/schemas/v1.PolicyRule" + type: array + x-kubernetes-list-type: atomic type: object - x-kubernetes-map-type: atomic - v1.ServiceCIDR: - description: ServiceCIDR defines a range of IP addresses using CIDR format (e.g. - 192.168.0.0/24 or 2001:db2::/64). This range is used to allocate ClusterIPs - to Service objects. + x-kubernetes-group-version-kind: + - group: rbac.authorization.k8s.io + kind: Role + version: v1 + x-implements: + - io.kubernetes.client.common.KubernetesObject + v1.RoleBinding: + description: "RoleBinding references a role, but does not contain it. It can\ + \ reference a Role in the same namespace or a ClusterRole in the global namespace.\ + \ It adds who information via Subjects and namespace information by which\ + \ namespace it exists in. RoleBindings in a given namespace only have effect\ + \ in that namespace." example: metadata: generation: 6 @@ -270110,24 +287887,19 @@ components: namespace: namespace apiVersion: apiVersion kind: kind - spec: - cidrs: - - cidrs - - cidrs - status: - conditions: - - reason: reason - lastTransitionTime: 2000-01-23T04:56:07.000+00:00 - message: message - type: type - observedGeneration: 5 - status: status - - reason: reason - lastTransitionTime: 2000-01-23T04:56:07.000+00:00 - message: message - type: type - observedGeneration: 5 - status: status + subjects: + - apiGroup: apiGroup + kind: kind + name: name + namespace: namespace + - apiGroup: apiGroup + kind: kind + name: name + namespace: namespace + roleRef: + apiGroup: apiGroup + kind: kind + name: name properties: apiVersion: description: "APIVersion defines the versioned schema of this representation\ @@ -270141,19 +287913,25 @@ components: type: string metadata: $ref: "#/components/schemas/v1.ObjectMeta" - spec: - $ref: "#/components/schemas/v1.ServiceCIDRSpec" - status: - $ref: "#/components/schemas/v1.ServiceCIDRStatus" + roleRef: + $ref: "#/components/schemas/v1.RoleRef" + subjects: + description: subjects holds references to the objects the role applies to. + items: + $ref: "#/components/schemas/rbac.v1.Subject" + type: array + x-kubernetes-list-type: atomic + required: + - roleRef type: object x-kubernetes-group-version-kind: - - group: networking.k8s.io - kind: ServiceCIDR + - group: rbac.authorization.k8s.io + kind: RoleBinding version: v1 x-implements: - io.kubernetes.client.common.KubernetesObject - v1.ServiceCIDRList: - description: ServiceCIDRList contains a list of ServiceCIDR objects. + v1.RoleBindingList: + description: RoleBindingList is a collection of RoleBindings example: metadata: remainingItemCount: 1 @@ -270213,24 +287991,19 @@ components: namespace: namespace apiVersion: apiVersion kind: kind - spec: - cidrs: - - cidrs - - cidrs - status: - conditions: - - reason: reason - lastTransitionTime: 2000-01-23T04:56:07.000+00:00 - message: message - type: type - observedGeneration: 5 - status: status - - reason: reason - lastTransitionTime: 2000-01-23T04:56:07.000+00:00 - message: message - type: type - observedGeneration: 5 - status: status + subjects: + - apiGroup: apiGroup + kind: kind + name: name + namespace: namespace + - apiGroup: apiGroup + kind: kind + name: name + namespace: namespace + roleRef: + apiGroup: apiGroup + kind: kind + name: name - metadata: generation: 6 finalizers: @@ -270279,24 +288052,19 @@ components: namespace: namespace apiVersion: apiVersion kind: kind - spec: - cidrs: - - cidrs - - cidrs - status: - conditions: - - reason: reason - lastTransitionTime: 2000-01-23T04:56:07.000+00:00 - message: message - type: type - observedGeneration: 5 - status: status - - reason: reason - lastTransitionTime: 2000-01-23T04:56:07.000+00:00 - message: message - type: type - observedGeneration: 5 - status: status + subjects: + - apiGroup: apiGroup + kind: kind + name: name + namespace: namespace + - apiGroup: apiGroup + kind: kind + name: name + namespace: namespace + roleRef: + apiGroup: apiGroup + kind: kind + name: name properties: apiVersion: description: "APIVersion defines the versioned schema of this representation\ @@ -270304,9 +288072,9 @@ components: \ internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources" type: string items: - description: items is the list of ServiceCIDRs. + description: Items is a list of RoleBindings items: - $ref: "#/components/schemas/v1.ServiceCIDR" + $ref: "#/components/schemas/v1.RoleBinding" type: array kind: description: "Kind is a string value representing the REST resource this\ @@ -270319,147 +288087,13 @@ components: - items type: object x-kubernetes-group-version-kind: - - group: networking.k8s.io - kind: ServiceCIDRList + - group: rbac.authorization.k8s.io + kind: RoleBindingList version: v1 x-implements: - io.kubernetes.client.common.KubernetesListObject - v1.ServiceCIDRSpec: - description: ServiceCIDRSpec define the CIDRs the user wants to use for allocating - ClusterIPs for Services. - example: - cidrs: - - cidrs - - cidrs - properties: - cidrs: - description: "CIDRs defines the IP blocks in CIDR notation (e.g. \"192.168.0.0/24\"\ - \ or \"2001:db8::/64\") from which to assign service cluster IPs. Max\ - \ of two CIDRs is allowed, one of each IP family. This field is immutable." - items: - type: string - type: array - x-kubernetes-list-type: atomic - type: object - v1.ServiceCIDRStatus: - description: ServiceCIDRStatus describes the current state of the ServiceCIDR. - example: - conditions: - - reason: reason - lastTransitionTime: 2000-01-23T04:56:07.000+00:00 - message: message - type: type - observedGeneration: 5 - status: status - - reason: reason - lastTransitionTime: 2000-01-23T04:56:07.000+00:00 - message: message - type: type - observedGeneration: 5 - status: status - properties: - conditions: - description: conditions holds an array of metav1.Condition that describe - the state of the ServiceCIDR. Current service state - items: - $ref: "#/components/schemas/v1.Condition" - type: array - x-kubernetes-patch-strategy: merge - x-kubernetes-list-type: map - x-kubernetes-list-map-keys: - - type - x-kubernetes-patch-merge-key: type - type: object - v1beta1.IPAddress: - description: "IPAddress represents a single IP of a single IP Family. The object\ - \ is designed to be used by APIs that operate on IP addresses. The object\ - \ is used by the Service core API for allocation of IP addresses. An IP address\ - \ can be represented in different formats, to guarantee the uniqueness of\ - \ the IP, the name of the object is the IP address in canonical format, four\ - \ decimal digits separated by dots suppressing leading zeros for IPv4 and\ - \ the representation defined by RFC 5952 for IPv6. Valid: 192.168.1.5 or 2001:db8::1\ - \ or 2001:db8:aaaa:bbbb:cccc:dddd:eeee:1 Invalid: 10.01.2.3 or 2001:db8:0:0:0::1" - example: - metadata: - generation: 6 - finalizers: - - finalizers - - finalizers - resourceVersion: resourceVersion - annotations: - key: annotations - generateName: generateName - deletionTimestamp: 2000-01-23T04:56:07.000+00:00 - labels: - key: labels - ownerReferences: - - uid: uid - controller: true - apiVersion: apiVersion - kind: kind - name: name - blockOwnerDeletion: true - - uid: uid - controller: true - apiVersion: apiVersion - kind: kind - name: name - blockOwnerDeletion: true - selfLink: selfLink - deletionGracePeriodSeconds: 0 - uid: uid - managedFields: - - apiVersion: apiVersion - fieldsV1: "{}" - manager: manager - subresource: subresource - time: 2000-01-23T04:56:07.000+00:00 - operation: operation - fieldsType: fieldsType - - apiVersion: apiVersion - fieldsV1: "{}" - manager: manager - subresource: subresource - time: 2000-01-23T04:56:07.000+00:00 - operation: operation - fieldsType: fieldsType - creationTimestamp: 2000-01-23T04:56:07.000+00:00 - name: name - namespace: namespace - apiVersion: apiVersion - kind: kind - spec: - parentRef: - resource: resource - name: name - namespace: namespace - group: group - properties: - apiVersion: - description: "APIVersion defines the versioned schema of this representation\ - \ of an object. Servers should convert recognized schemas to the latest\ - \ internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources" - type: string - kind: - description: "Kind is a string value representing the REST resource this\ - \ object represents. Servers may infer this from the endpoint the client\ - \ submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds" - type: string - metadata: - $ref: "#/components/schemas/v1.ObjectMeta" - spec: - $ref: "#/components/schemas/v1beta1.IPAddressSpec" - required: - - spec - type: object - x-kubernetes-group-version-kind: - - group: networking.k8s.io - kind: IPAddress - version: v1beta1 - x-implements: - - io.kubernetes.client.common.KubernetesObject - v1beta1.IPAddressList: - description: IPAddressList contains a list of IPAddress. + v1.RoleList: + description: RoleList is a collection of Roles example: metadata: remainingItemCount: 1 @@ -270519,12 +288153,37 @@ components: namespace: namespace apiVersion: apiVersion kind: kind - spec: - parentRef: - resource: resource - name: name - namespace: namespace - group: group + rules: + - resourceNames: + - resourceNames + - resourceNames + resources: + - resources + - resources + verbs: + - verbs + - verbs + apiGroups: + - apiGroups + - apiGroups + nonResourceURLs: + - nonResourceURLs + - nonResourceURLs + - resourceNames: + - resourceNames + - resourceNames + resources: + - resources + - resources + verbs: + - verbs + - verbs + apiGroups: + - apiGroups + - apiGroups + nonResourceURLs: + - nonResourceURLs + - nonResourceURLs - metadata: generation: 6 finalizers: @@ -270573,465 +288232,1006 @@ components: namespace: namespace apiVersion: apiVersion kind: kind - spec: - parentRef: - resource: resource - name: name - namespace: namespace - group: group + rules: + - resourceNames: + - resourceNames + - resourceNames + resources: + - resources + - resources + verbs: + - verbs + - verbs + apiGroups: + - apiGroups + - apiGroups + nonResourceURLs: + - nonResourceURLs + - nonResourceURLs + - resourceNames: + - resourceNames + - resourceNames + resources: + - resources + - resources + verbs: + - verbs + - verbs + apiGroups: + - apiGroups + - apiGroups + nonResourceURLs: + - nonResourceURLs + - nonResourceURLs properties: apiVersion: description: "APIVersion defines the versioned schema of this representation\ \ of an object. Servers should convert recognized schemas to the latest\ \ internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources" type: string - items: - description: items is the list of IPAddresses. - items: - $ref: "#/components/schemas/v1beta1.IPAddress" - type: array - kind: - description: "Kind is a string value representing the REST resource this\ - \ object represents. Servers may infer this from the endpoint the client\ - \ submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds" + items: + description: Items is a list of Roles + items: + $ref: "#/components/schemas/v1.Role" + type: array + kind: + description: "Kind is a string value representing the REST resource this\ + \ object represents. Servers may infer this from the endpoint the client\ + \ submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds" + type: string + metadata: + $ref: "#/components/schemas/v1.ListMeta" + required: + - items + type: object + x-kubernetes-group-version-kind: + - group: rbac.authorization.k8s.io + kind: RoleList + version: v1 + x-implements: + - io.kubernetes.client.common.KubernetesListObject + v1.RoleRef: + description: RoleRef contains information that points to the role being used + example: + apiGroup: apiGroup + kind: kind + name: name + properties: + apiGroup: + description: apiGroup is the group for the resource being referenced + type: string + kind: + description: kind is the type of resource being referenced + type: string + name: + description: name is the name of resource being referenced + type: string + required: + - kind + - name + type: object + x-kubernetes-map-type: atomic + rbac.v1.Subject: + description: "Subject contains a reference to the object or user identities\ + \ a role binding applies to. This can either hold a direct API object reference,\ + \ or a value for non-objects such as user and group names." + example: + apiGroup: apiGroup + kind: kind + name: name + namespace: namespace + properties: + apiGroup: + description: apiGroup holds the API group of the referenced subject. Defaults + to "" for ServiceAccount subjects. Defaults to "rbac.authorization.k8s.io" + for User and Group subjects. + type: string + kind: + description: "kind of object being referenced. Values defined by this API\ + \ group are \"User\", \"Group\", and \"ServiceAccount\". If the Authorizer\ + \ does not recognized the kind value, the Authorizer should report an\ + \ error." + type: string + name: + description: name of the object being referenced. + type: string + namespace: + description: "namespace of the referenced object. If the object kind is\ + \ non-namespace, such as \"User\" or \"Group\", and this value is not\ + \ empty the Authorizer should report an error." + type: string + required: + - kind + - name + type: object + x-kubernetes-map-type: atomic + v1.AllocatedDeviceStatus: + description: |- + AllocatedDeviceStatus contains the status of an allocated device, if the driver chooses to report it. This may include driver-specific information. + + The combination of Driver, Pool, Device, and ShareID must match the corresponding key in Status.Allocation.Devices. + example: + data: "{}" + driver: driver + networkData: + hardwareAddress: hardwareAddress + interfaceName: interfaceName + ips: + - ips + - ips + pool: pool + shareID: shareID + conditions: + - reason: reason + lastTransitionTime: 2000-01-23T04:56:07.000+00:00 + message: message + type: type + observedGeneration: 5 + status: status + - reason: reason + lastTransitionTime: 2000-01-23T04:56:07.000+00:00 + message: message + type: type + observedGeneration: 5 + status: status + device: device + properties: + conditions: + description: |- + Conditions contains the latest observation of the device's state. If the device has been configured according to the class and claim config references, the `Ready` condition should be True. + + Must not contain more than 8 entries. + items: + $ref: "#/components/schemas/v1.Condition" + type: array + x-kubernetes-list-type: map + x-kubernetes-list-map-keys: + - type + data: + description: |- + Data contains arbitrary driver-specific data. + + The length of the raw data must be smaller or equal to 10 Ki. + properties: {} + type: object + device: + description: Device references one device instance via its name in the driver's + resource pool. It must be a DNS label. + type: string + driver: + description: |- + Driver specifies the name of the DRA driver whose kubelet plugin should be invoked to process the allocation once the claim is needed on a node. + + Must be a DNS subdomain and should end with a DNS domain owned by the vendor of the driver. It should use only lower case characters. + type: string + networkData: + $ref: "#/components/schemas/v1.NetworkDeviceData" + pool: + description: |- + This name together with the driver name and the device name field identify which device was allocated (`//`). + + Must not be longer than 253 characters and may contain one or more DNS sub-domains separated by slashes. + type: string + shareID: + description: ShareID uniquely identifies an individual allocation share + of the device. + type: string + required: + - device + - driver + - pool + type: object + v1.AllocationResult: + description: AllocationResult contains attributes of an allocated resource. + example: + allocationTimestamp: 2000-01-23T04:56:07.000+00:00 + devices: + config: + - opaque: + driver: driver + parameters: "{}" + requests: + - requests + - requests + source: source + - opaque: + driver: driver + parameters: "{}" + requests: + - requests + - requests + source: source + results: + - request: request + adminAccess: true + skipNodeOperations: + - skipNodeOperations + - skipNodeOperations + tolerations: + - effect: effect + tolerationSeconds: 6 + value: value + key: key + operator: operator + - effect: effect + tolerationSeconds: 6 + value: value + key: key + operator: operator + driver: driver + bindingFailureConditions: + - bindingFailureConditions + - bindingFailureConditions + pool: pool + shareID: shareID + consumedCapacity: + key: null + device: device + bindingConditions: + - bindingConditions + - bindingConditions + - request: request + adminAccess: true + skipNodeOperations: + - skipNodeOperations + - skipNodeOperations + tolerations: + - effect: effect + tolerationSeconds: 6 + value: value + key: key + operator: operator + - effect: effect + tolerationSeconds: 6 + value: value + key: key + operator: operator + driver: driver + bindingFailureConditions: + - bindingFailureConditions + - bindingFailureConditions + pool: pool + shareID: shareID + consumedCapacity: + key: null + device: device + bindingConditions: + - bindingConditions + - bindingConditions + nodeSelector: + nodeSelectorTerms: + - matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchFields: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + - matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchFields: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + properties: + allocationTimestamp: + description: |- + AllocationTimestamp stores the time when the resources were allocated. This field is not guaranteed to be set, in which case that time is unknown. + + This is a beta field and requires enabling the DRADeviceBindingConditions and DRAResourceClaimDeviceStatus feature gate. + format: date-time + type: string + devices: + $ref: "#/components/schemas/v1.DeviceAllocationResult" + nodeSelector: + $ref: "#/components/schemas/v1.NodeSelector" + type: object + v1.CELDeviceSelector: + description: CELDeviceSelector contains a CEL expression for selecting a device. + example: + expression: expression + properties: + expression: + description: |- + Expression is a CEL expression which evaluates a single device. It must evaluate to true when the device under consideration satisfies the desired criteria, and false when it does not. Any other result is an error and causes allocation of devices to abort. + + The expression's input is an object named "device", which carries the following properties: + - driver (string): the name of the driver which defines this device. + - attributes (map[string]object): the device's attributes, grouped by prefix + (e.g. device.attributes["dra.example.com"] evaluates to an object with all + of the attributes which were prefixed by "dra.example.com"). + - capacity (map[string]object): the device's capacities, grouped by prefix. + - allowMultipleAllocations (bool): the allowMultipleAllocations property of the device + (v1.34+ with the DRAConsumableCapacity feature enabled). + + Example: Consider a device with driver="dra.example.com", which exposes two attributes named "model" and "ext.example.com/family" and which exposes one capacity named "modules". This input to this expression would have the following fields: + + device.driver + device.attributes["dra.example.com"].model + device.attributes["ext.example.com"].family + device.capacity["dra.example.com"].modules + + The device.driver field can be used to check for a specific driver, either as a high-level precondition (i.e. you only want to consider devices from this driver) or as part of a multi-clause expression that is meant to consider devices from different drivers. + + The value type of each attribute is defined by the device definition, and users who write these expressions must consult the documentation for their specific drivers. The value type of each capacity is Quantity. + + If an unknown prefix is used as a lookup in either device.attributes or device.capacity, an empty map will be returned. Any reference to an unknown field will cause an evaluation error and allocation to abort. + + A robust expression should check for the existence of attributes before referencing them. + + Common errors: - "no such key": Use optional chaining (.? followed by orValue()) + or guarding the check with has() for optional fields. + See CEL Optional Types for details: + https://pkg.go.dev/github.com/google/cel-go@v0.17.4/cel#OptionalTypes + + For more CEL expression syntax and examples, see: https://kubernetes.io/docs/reference/using-api/cel/ + + For ease of use, the cel.bind() function is enabled, and can be used to simplify expressions that access multiple attributes with the same domain. For example: + + cel.bind(dra, device.attributes["dra.example.com"], dra.someBool && dra.anotherBool) + + When the DRAListTypeAttributes feature gate is enabled, the includes() helper is available and it can work for both scalar and list-type attributes. It was introduced to support smooth migration from scalar attributes to list-type attributes while keeping CEL expressions simple. For example: + + device.attributes["dra.example.com"].models.includes("some-model") + + The length of the expression must be smaller or equal to 10 Ki. The cost of evaluating it is also limited based on the estimated number of logical steps. + type: string + required: + - expression + type: object + v1.CapacityRequestPolicy: + description: |- + CapacityRequestPolicy defines how requests consume device capacity. + + Must not set more than one ValidRequestValues. + example: + default: default + validRange: + min: min + max: max + step: step + validValues: + - null + - null + properties: + default: + description: "Quantity is a fixed-point representation of a number. It provides\ + \ convenient marshaling/unmarshaling in JSON and YAML, in addition to\ + \ String() and AsInt64() accessors.\n\nThe serialization format is:\n\n\ + ``` ::= \n\n\t(Note that \ + \ may be empty, from the \"\" case in .)\n\n \ + \ ::= 0 | 1 | ... | 9 ::= | \ + \ ::= | . | . | .\ + \ ::= \"+\" | \"-\" ::= |\ + \ ::= | \ + \ | ::= Ki | Mi | Gi | Ti | Pi | Ei\n\n\t\ + (International System of units; See: http://physics.nist.gov/cuu/Units/binary.html)\n\ + \n ::= m | \"\" | k | M | G | T | P | E\n\n\t(Note that\ + \ 1024 = 1Ki but 1000 = 1k; I didn't choose the capitalization.)\n\n\ + \ ::= \"e\" | \"E\" ```\n\nNo matter which\ + \ of the three exponent forms is used, no quantity may represent a number\ + \ greater than 2^63-1 in magnitude, nor may it have more than 3 decimal\ + \ places. Numbers larger or more precise will be capped or rounded up.\ + \ (E.g.: 0.1m will rounded up to 1m.) This may be extended in the future\ + \ if we require larger or smaller quantities.\n\nWhen a Quantity is parsed\ + \ from a string, it will remember the type of suffix it had, and will\ + \ use the same type again when it is serialized.\n\nBefore serializing,\ + \ Quantity will be put in \"canonical form\". This means that Exponent/suffix\ + \ will be adjusted up or down (with a corresponding increase or decrease\ + \ in Mantissa) such that:\n\n- No precision is lost - No fractional digits\ + \ will be emitted - The exponent (or suffix) is as large as possible.\n\ + \nThe sign will be omitted unless the number is negative.\n\nExamples:\n\ + \n- 1.5 will be serialized as \"1500m\" - 1.5Gi will be serialized as\ + \ \"1536Mi\"\n\nNote that the quantity will NEVER be internally represented\ + \ by a floating point number. That is the whole point of this exercise.\n\ + \nNon-canonical values will still parse as long as they are well formed,\ + \ but will be re-emitted in their canonical form. (So always use canonical\ + \ form, or don't diff.)\n\nThis format is intended to make it difficult\ + \ to use these numbers without writing some sort of special handling code\ + \ in the hopes that that will cause implementors to also use a fixed point\ + \ implementation." + format: quantity + type: string + validRange: + $ref: "#/components/schemas/v1.CapacityRequestPolicyRange" + validValues: + description: |- + ValidValues defines a set of acceptable quantity values in consuming requests. + + Must not contain more than 10 entries. Must be sorted in ascending order. + + If this field is set, Default must be defined and it must be included in ValidValues list. + + If the requested amount does not match any valid value but smaller than some valid values, the scheduler calculates the smallest valid value that is greater than or equal to the request. That is: min(ceil(requestedValue) ∈ validValues), where requestedValue ≤ max(validValues). + + If the requested amount exceeds all valid values, the request violates the policy, and this device cannot be allocated. + items: + $ref: "#/components/schemas/resource.Quantity" + type: array + x-kubernetes-list-type: atomic + type: object + v1.CapacityRequestPolicyRange: + description: |- + CapacityRequestPolicyRange defines a valid range for consumable capacity values. + + If the DRAFractionalCapacityRange feature gate is enabled and at least one of Min, Max, or Step is a fractional quantity (i.e. its value is not an integer), milli-unit arithmetic is used instead, supporting values with up to 3 decimal places (e.g. 100m = 0.1). The largest supported value then is 1000 times smaller compared to using 64-bit integers. Otherwise, all comparisons use 64-bit integer arithmetic via resource.Quantity.Value(). + + - If the requested amount is less than Min, it is rounded up to the Min value. + - If Step is set and the requested amount is between Min and Max but not aligned with Step, + it will be rounded up to the next value equal to Min + (n * Step). + - If Step is not set, the requested amount is used as-is if it falls within the range Min to Max (if set). + - If the requested or rounded amount exceeds Max (if set), the request does not satisfy the policy, + and the device cannot be allocated. + example: + min: min + max: max + step: step + properties: + max: + description: "Quantity is a fixed-point representation of a number. It provides\ + \ convenient marshaling/unmarshaling in JSON and YAML, in addition to\ + \ String() and AsInt64() accessors.\n\nThe serialization format is:\n\n\ + ``` ::= \n\n\t(Note that \ + \ may be empty, from the \"\" case in .)\n\n \ + \ ::= 0 | 1 | ... | 9 ::= | \ + \ ::= | . | . | .\ + \ ::= \"+\" | \"-\" ::= |\ + \ ::= | \ + \ | ::= Ki | Mi | Gi | Ti | Pi | Ei\n\n\t\ + (International System of units; See: http://physics.nist.gov/cuu/Units/binary.html)\n\ + \n ::= m | \"\" | k | M | G | T | P | E\n\n\t(Note that\ + \ 1024 = 1Ki but 1000 = 1k; I didn't choose the capitalization.)\n\n\ + \ ::= \"e\" | \"E\" ```\n\nNo matter which\ + \ of the three exponent forms is used, no quantity may represent a number\ + \ greater than 2^63-1 in magnitude, nor may it have more than 3 decimal\ + \ places. Numbers larger or more precise will be capped or rounded up.\ + \ (E.g.: 0.1m will rounded up to 1m.) This may be extended in the future\ + \ if we require larger or smaller quantities.\n\nWhen a Quantity is parsed\ + \ from a string, it will remember the type of suffix it had, and will\ + \ use the same type again when it is serialized.\n\nBefore serializing,\ + \ Quantity will be put in \"canonical form\". This means that Exponent/suffix\ + \ will be adjusted up or down (with a corresponding increase or decrease\ + \ in Mantissa) such that:\n\n- No precision is lost - No fractional digits\ + \ will be emitted - The exponent (or suffix) is as large as possible.\n\ + \nThe sign will be omitted unless the number is negative.\n\nExamples:\n\ + \n- 1.5 will be serialized as \"1500m\" - 1.5Gi will be serialized as\ + \ \"1536Mi\"\n\nNote that the quantity will NEVER be internally represented\ + \ by a floating point number. That is the whole point of this exercise.\n\ + \nNon-canonical values will still parse as long as they are well formed,\ + \ but will be re-emitted in their canonical form. (So always use canonical\ + \ form, or don't diff.)\n\nThis format is intended to make it difficult\ + \ to use these numbers without writing some sort of special handling code\ + \ in the hopes that that will cause implementors to also use a fixed point\ + \ implementation." + format: quantity + type: string + min: + description: "Quantity is a fixed-point representation of a number. It provides\ + \ convenient marshaling/unmarshaling in JSON and YAML, in addition to\ + \ String() and AsInt64() accessors.\n\nThe serialization format is:\n\n\ + ``` ::= \n\n\t(Note that \ + \ may be empty, from the \"\" case in .)\n\n \ + \ ::= 0 | 1 | ... | 9 ::= | \ + \ ::= | . | . | .\ + \ ::= \"+\" | \"-\" ::= |\ + \ ::= | \ + \ | ::= Ki | Mi | Gi | Ti | Pi | Ei\n\n\t\ + (International System of units; See: http://physics.nist.gov/cuu/Units/binary.html)\n\ + \n ::= m | \"\" | k | M | G | T | P | E\n\n\t(Note that\ + \ 1024 = 1Ki but 1000 = 1k; I didn't choose the capitalization.)\n\n\ + \ ::= \"e\" | \"E\" ```\n\nNo matter which\ + \ of the three exponent forms is used, no quantity may represent a number\ + \ greater than 2^63-1 in magnitude, nor may it have more than 3 decimal\ + \ places. Numbers larger or more precise will be capped or rounded up.\ + \ (E.g.: 0.1m will rounded up to 1m.) This may be extended in the future\ + \ if we require larger or smaller quantities.\n\nWhen a Quantity is parsed\ + \ from a string, it will remember the type of suffix it had, and will\ + \ use the same type again when it is serialized.\n\nBefore serializing,\ + \ Quantity will be put in \"canonical form\". This means that Exponent/suffix\ + \ will be adjusted up or down (with a corresponding increase or decrease\ + \ in Mantissa) such that:\n\n- No precision is lost - No fractional digits\ + \ will be emitted - The exponent (or suffix) is as large as possible.\n\ + \nThe sign will be omitted unless the number is negative.\n\nExamples:\n\ + \n- 1.5 will be serialized as \"1500m\" - 1.5Gi will be serialized as\ + \ \"1536Mi\"\n\nNote that the quantity will NEVER be internally represented\ + \ by a floating point number. That is the whole point of this exercise.\n\ + \nNon-canonical values will still parse as long as they are well formed,\ + \ but will be re-emitted in their canonical form. (So always use canonical\ + \ form, or don't diff.)\n\nThis format is intended to make it difficult\ + \ to use these numbers without writing some sort of special handling code\ + \ in the hopes that that will cause implementors to also use a fixed point\ + \ implementation." + format: quantity + type: string + step: + description: "Quantity is a fixed-point representation of a number. It provides\ + \ convenient marshaling/unmarshaling in JSON and YAML, in addition to\ + \ String() and AsInt64() accessors.\n\nThe serialization format is:\n\n\ + ``` ::= \n\n\t(Note that \ + \ may be empty, from the \"\" case in .)\n\n \ + \ ::= 0 | 1 | ... | 9 ::= | \ + \ ::= | . | . | .\ + \ ::= \"+\" | \"-\" ::= |\ + \ ::= | \ + \ | ::= Ki | Mi | Gi | Ti | Pi | Ei\n\n\t\ + (International System of units; See: http://physics.nist.gov/cuu/Units/binary.html)\n\ + \n ::= m | \"\" | k | M | G | T | P | E\n\n\t(Note that\ + \ 1024 = 1Ki but 1000 = 1k; I didn't choose the capitalization.)\n\n\ + \ ::= \"e\" | \"E\" ```\n\nNo matter which\ + \ of the three exponent forms is used, no quantity may represent a number\ + \ greater than 2^63-1 in magnitude, nor may it have more than 3 decimal\ + \ places. Numbers larger or more precise will be capped or rounded up.\ + \ (E.g.: 0.1m will rounded up to 1m.) This may be extended in the future\ + \ if we require larger or smaller quantities.\n\nWhen a Quantity is parsed\ + \ from a string, it will remember the type of suffix it had, and will\ + \ use the same type again when it is serialized.\n\nBefore serializing,\ + \ Quantity will be put in \"canonical form\". This means that Exponent/suffix\ + \ will be adjusted up or down (with a corresponding increase or decrease\ + \ in Mantissa) such that:\n\n- No precision is lost - No fractional digits\ + \ will be emitted - The exponent (or suffix) is as large as possible.\n\ + \nThe sign will be omitted unless the number is negative.\n\nExamples:\n\ + \n- 1.5 will be serialized as \"1500m\" - 1.5Gi will be serialized as\ + \ \"1536Mi\"\n\nNote that the quantity will NEVER be internally represented\ + \ by a floating point number. That is the whole point of this exercise.\n\ + \nNon-canonical values will still parse as long as they are well formed,\ + \ but will be re-emitted in their canonical form. (So always use canonical\ + \ form, or don't diff.)\n\nThis format is intended to make it difficult\ + \ to use these numbers without writing some sort of special handling code\ + \ in the hopes that that will cause implementors to also use a fixed point\ + \ implementation." + format: quantity type: string - metadata: - $ref: "#/components/schemas/v1.ListMeta" required: - - items + - min type: object - x-kubernetes-group-version-kind: - - group: networking.k8s.io - kind: IPAddressList - version: v1beta1 - x-implements: - - io.kubernetes.client.common.KubernetesListObject - v1beta1.IPAddressSpec: - description: IPAddressSpec describe the attributes in an IP Address. + v1.CapacityRequirements: + description: CapacityRequirements defines the capacity requirements for a specific + device request. example: - parentRef: - resource: resource - name: name - namespace: namespace - group: group + requests: + key: null properties: - parentRef: - $ref: "#/components/schemas/v1beta1.ParentReference" + requests: + additionalProperties: + $ref: "#/components/schemas/resource.Quantity" + description: |- + Requests represent individual device resource requests for distinct resources, all of which must be provided by the device. + + This value is used as an additional filtering condition against the available capacity on the device. This is semantically equivalent to a CEL selector with `device.capacity[]..compareTo(quantity()) >= 0`. For example, device.capacity['test-driver.cdi.k8s.io'].counters.compareTo(quantity('2')) >= 0. + + When a requestPolicy is defined, the requested amount is adjusted upward to the nearest valid value based on the policy. If the requested amount cannot be adjusted to a valid value—because it exceeds what the requestPolicy allows— the device is considered ineligible for allocation. + + For any capacity that is not explicitly requested: - If no requestPolicy is set, the default consumed capacity is equal to the full device capacity + (i.e., the whole device is claimed). + - If a requestPolicy is set, the default consumed capacity is determined according to that policy. + + If the device allows multiple allocation, the aggregated amount across all requests must not exceed the capacity value. The consumed capacity, which may be adjusted based on the requestPolicy if defined, is recorded in the resource claim’s status.devices[*].consumedCapacity field. + type: object + type: object + v1.Counter: + description: Counter describes a quantity associated with a device. + example: + value: value + properties: + value: + description: "Quantity is a fixed-point representation of a number. It provides\ + \ convenient marshaling/unmarshaling in JSON and YAML, in addition to\ + \ String() and AsInt64() accessors.\n\nThe serialization format is:\n\n\ + ``` ::= \n\n\t(Note that \ + \ may be empty, from the \"\" case in .)\n\n \ + \ ::= 0 | 1 | ... | 9 ::= | \ + \ ::= | . | . | .\ + \ ::= \"+\" | \"-\" ::= |\ + \ ::= | \ + \ | ::= Ki | Mi | Gi | Ti | Pi | Ei\n\n\t\ + (International System of units; See: http://physics.nist.gov/cuu/Units/binary.html)\n\ + \n ::= m | \"\" | k | M | G | T | P | E\n\n\t(Note that\ + \ 1024 = 1Ki but 1000 = 1k; I didn't choose the capitalization.)\n\n\ + \ ::= \"e\" | \"E\" ```\n\nNo matter which\ + \ of the three exponent forms is used, no quantity may represent a number\ + \ greater than 2^63-1 in magnitude, nor may it have more than 3 decimal\ + \ places. Numbers larger or more precise will be capped or rounded up.\ + \ (E.g.: 0.1m will rounded up to 1m.) This may be extended in the future\ + \ if we require larger or smaller quantities.\n\nWhen a Quantity is parsed\ + \ from a string, it will remember the type of suffix it had, and will\ + \ use the same type again when it is serialized.\n\nBefore serializing,\ + \ Quantity will be put in \"canonical form\". This means that Exponent/suffix\ + \ will be adjusted up or down (with a corresponding increase or decrease\ + \ in Mantissa) such that:\n\n- No precision is lost - No fractional digits\ + \ will be emitted - The exponent (or suffix) is as large as possible.\n\ + \nThe sign will be omitted unless the number is negative.\n\nExamples:\n\ + \n- 1.5 will be serialized as \"1500m\" - 1.5Gi will be serialized as\ + \ \"1536Mi\"\n\nNote that the quantity will NEVER be internally represented\ + \ by a floating point number. That is the whole point of this exercise.\n\ + \nNon-canonical values will still parse as long as they are well formed,\ + \ but will be re-emitted in their canonical form. (So always use canonical\ + \ form, or don't diff.)\n\nThis format is intended to make it difficult\ + \ to use these numbers without writing some sort of special handling code\ + \ in the hopes that that will cause implementors to also use a fixed point\ + \ implementation." + format: quantity + type: string required: - - parentRef + - value type: object - v1beta1.ParentReference: - description: ParentReference describes a reference to a parent object. + v1.CounterSet: + description: |- + CounterSet defines a named set of counters that are available to be used by devices defined in the ResourcePool. + + The counters are not allocatable by themselves, but can be referenced by devices. When a device is allocated, the portion of counters it uses will no longer be available for use by other devices. example: - resource: resource + counters: + key: + value: value name: name - namespace: namespace - group: group properties: - group: - description: Group is the group of the object being referenced. - type: string + counters: + additionalProperties: + $ref: "#/components/schemas/v1.Counter" + description: |- + Counters defines the set of counters for this CounterSet The name of each counter must be unique in that set and must be a DNS label. + + The maximum number of counters is 32. + type: object name: - description: Name is the name of the object being referenced. - type: string - namespace: - description: Namespace is the namespace of the object being referenced. - type: string - resource: - description: Resource is the resource of the object being referenced. + description: Name defines the name of the counter set. It must be a DNS + label. type: string required: + - counters - name - - resource type: object - v1beta1.ServiceCIDR: - description: ServiceCIDR defines a range of IP addresses using CIDR format (e.g. - 192.168.0.0/24 or 2001:db2::/64). This range is used to allocate ClusterIPs - to Service objects. + v1.Device: + description: "Device represents one individual hardware instance that can be\ + \ selected based on its attributes. Besides the name, exactly one field must\ + \ be set." example: - metadata: - generation: 6 - finalizers: - - finalizers - - finalizers - resourceVersion: resourceVersion - annotations: - key: annotations - generateName: generateName - deletionTimestamp: 2000-01-23T04:56:07.000+00:00 - labels: - key: labels - ownerReferences: - - uid: uid - controller: true - apiVersion: apiVersion - kind: kind - name: name - blockOwnerDeletion: true - - uid: uid - controller: true - apiVersion: apiVersion - kind: kind - name: name - blockOwnerDeletion: true - selfLink: selfLink - deletionGracePeriodSeconds: 0 - uid: uid - managedFields: - - apiVersion: apiVersion - fieldsV1: "{}" - manager: manager - subresource: subresource - time: 2000-01-23T04:56:07.000+00:00 - operation: operation - fieldsType: fieldsType - - apiVersion: apiVersion - fieldsV1: "{}" - manager: manager - subresource: subresource - time: 2000-01-23T04:56:07.000+00:00 - operation: operation - fieldsType: fieldsType - creationTimestamp: 2000-01-23T04:56:07.000+00:00 - name: name - namespace: namespace - apiVersion: apiVersion - kind: kind - spec: - cidrs: - - cidrs - - cidrs - status: - conditions: - - reason: reason - lastTransitionTime: 2000-01-23T04:56:07.000+00:00 - message: message - type: type - observedGeneration: 5 - status: status - - reason: reason - lastTransitionTime: 2000-01-23T04:56:07.000+00:00 - message: message - type: type - observedGeneration: 5 - status: status + nodeName: nodeName + allowMultipleAllocations: true + consumesCounters: + - counters: + key: + value: value + compatibilityGroups: + - compatibilityGroups + - compatibilityGroups + counterSet: counterSet + - counters: + key: + value: value + compatibilityGroups: + - compatibilityGroups + - compatibilityGroups + counterSet: counterSet + taints: + - timeAdded: 2000-01-23T04:56:07.000+00:00 + effect: effect + value: value + key: key + - timeAdded: 2000-01-23T04:56:07.000+00:00 + effect: effect + value: value + key: key + allNodes: true + bindingConditions: + - bindingConditions + - bindingConditions + capacity: + key: + value: value + requestPolicy: + default: default + validRange: + min: min + max: max + step: step + validValues: + - null + - null + nodeSelector: + nodeSelectorTerms: + - matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchFields: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + - matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchFields: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + nodeAllocatableResources: + key: + mapping: + capacityMultiplier: capacityMultiplier + deviceMultiplier: deviceMultiplier + capacityKey: capacityKey + overhead: + perPod: perPod + perContainer: perContainer + bindingFailureConditions: + - bindingFailureConditions + - bindingFailureConditions + name: name + attributes: + key: + bools: + - true + - true + bool: true + string: string + strings: + - strings + - strings + ints: + - 6 + - 6 + versions: + - versions + - versions + version: version + int: 0 + bindsToNode: true properties: - apiVersion: - description: "APIVersion defines the versioned schema of this representation\ - \ of an object. Servers should convert recognized schemas to the latest\ - \ internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources" - type: string - kind: - description: "Kind is a string value representing the REST resource this\ - \ object represents. Servers may infer this from the endpoint the client\ - \ submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds" + allNodes: + description: |- + AllNodes indicates that all nodes have access to the device. + + Must only be set if Spec.PerDeviceNodeSelection is set to true. At most one of NodeName, NodeSelector and AllNodes can be set. + type: boolean + allowMultipleAllocations: + description: |- + AllowMultipleAllocations marks whether the device is allowed to be allocated to multiple DeviceRequests. + + If AllowMultipleAllocations is set to true, the device can be allocated more than once, and all of its capacity is consumable, regardless of whether the requestPolicy is defined or not. + type: boolean + attributes: + additionalProperties: + $ref: "#/components/schemas/v1.DeviceAttribute" + description: |- + Attributes defines the set of attributes for this device. The name of each attribute must be unique in that set. + + The maximum number of attributes and capacities combined is 32. + type: object + bindingConditions: + description: |- + BindingConditions defines the conditions for proceeding with binding. All of these conditions must be set in the per-device status conditions with a value of True to proceed with binding the pod to the node while scheduling the pod. + + The maximum number of binding conditions is 4. + + The conditions must be a valid condition type string. + + This is a beta field and requires enabling the DRADeviceBindingConditions and DRAResourceClaimDeviceStatus feature gates. + items: + type: string + type: array + x-kubernetes-list-type: atomic + bindingFailureConditions: + description: |- + BindingFailureConditions defines the conditions for binding failure. They may be set in the per-device status conditions. If any is set to "True", a binding failure occurred. + + The maximum number of binding failure conditions is 4. + + The conditions must be a valid condition type string. + + This is a beta field and requires enabling the DRADeviceBindingConditions and DRAResourceClaimDeviceStatus feature gates. + items: + type: string + type: array + x-kubernetes-list-type: atomic + bindsToNode: + description: |- + BindsToNode indicates if the usage of an allocation involving this device has to be limited to exactly the node that was chosen when allocating the claim. If set to true, the scheduler will set the ResourceClaim.Status.Allocation.NodeSelector to match the node where the allocation was made. + + This is a beta field and requires enabling the DRADeviceBindingConditions and DRAResourceClaimDeviceStatus feature gates. + type: boolean + capacity: + additionalProperties: + $ref: "#/components/schemas/v1.DeviceCapacity" + description: |- + Capacity defines the set of capacities for this device. The name of each capacity must be unique in that set. + + The maximum number of attributes and capacities combined is 32. + type: object + consumesCounters: + description: |- + ConsumesCounters defines a list of references to sharedCounters and the set of counters that the device will consume from those counter sets. + + There can only be a single entry per counterSet. + + The maximum number of device counter consumptions per device is 2. + items: + $ref: "#/components/schemas/v1.DeviceCounterConsumption" + type: array + x-kubernetes-list-type: atomic + name: + description: Name is unique identifier among all devices managed by the + driver in the pool. It must be a DNS label. type: string - metadata: - $ref: "#/components/schemas/v1.ObjectMeta" - spec: - $ref: "#/components/schemas/v1beta1.ServiceCIDRSpec" - status: - $ref: "#/components/schemas/v1beta1.ServiceCIDRStatus" - type: object - x-kubernetes-group-version-kind: - - group: networking.k8s.io - kind: ServiceCIDR - version: v1beta1 - x-implements: - - io.kubernetes.client.common.KubernetesObject - v1beta1.ServiceCIDRList: - description: ServiceCIDRList contains a list of ServiceCIDR objects. - example: - metadata: - remainingItemCount: 1 - continue: continue - resourceVersion: resourceVersion - shardInfo: - selector: selector - selfLink: selfLink - apiVersion: apiVersion - kind: kind - items: - - metadata: - generation: 6 - finalizers: - - finalizers - - finalizers - resourceVersion: resourceVersion - annotations: - key: annotations - generateName: generateName - deletionTimestamp: 2000-01-23T04:56:07.000+00:00 - labels: - key: labels - ownerReferences: - - uid: uid - controller: true - apiVersion: apiVersion - kind: kind - name: name - blockOwnerDeletion: true - - uid: uid - controller: true - apiVersion: apiVersion - kind: kind - name: name - blockOwnerDeletion: true - selfLink: selfLink - deletionGracePeriodSeconds: 0 - uid: uid - managedFields: - - apiVersion: apiVersion - fieldsV1: "{}" - manager: manager - subresource: subresource - time: 2000-01-23T04:56:07.000+00:00 - operation: operation - fieldsType: fieldsType - - apiVersion: apiVersion - fieldsV1: "{}" - manager: manager - subresource: subresource - time: 2000-01-23T04:56:07.000+00:00 - operation: operation - fieldsType: fieldsType - creationTimestamp: 2000-01-23T04:56:07.000+00:00 - name: name - namespace: namespace - apiVersion: apiVersion - kind: kind - spec: - cidrs: - - cidrs - - cidrs - status: - conditions: - - reason: reason - lastTransitionTime: 2000-01-23T04:56:07.000+00:00 - message: message - type: type - observedGeneration: 5 - status: status - - reason: reason - lastTransitionTime: 2000-01-23T04:56:07.000+00:00 - message: message - type: type - observedGeneration: 5 - status: status - - metadata: - generation: 6 - finalizers: - - finalizers - - finalizers - resourceVersion: resourceVersion - annotations: - key: annotations - generateName: generateName - deletionTimestamp: 2000-01-23T04:56:07.000+00:00 - labels: - key: labels - ownerReferences: - - uid: uid - controller: true - apiVersion: apiVersion - kind: kind - name: name - blockOwnerDeletion: true - - uid: uid - controller: true - apiVersion: apiVersion - kind: kind - name: name - blockOwnerDeletion: true - selfLink: selfLink - deletionGracePeriodSeconds: 0 - uid: uid - managedFields: - - apiVersion: apiVersion - fieldsV1: "{}" - manager: manager - subresource: subresource - time: 2000-01-23T04:56:07.000+00:00 - operation: operation - fieldsType: fieldsType - - apiVersion: apiVersion - fieldsV1: "{}" - manager: manager - subresource: subresource - time: 2000-01-23T04:56:07.000+00:00 - operation: operation - fieldsType: fieldsType - creationTimestamp: 2000-01-23T04:56:07.000+00:00 - name: name - namespace: namespace - apiVersion: apiVersion - kind: kind - spec: - cidrs: - - cidrs - - cidrs - status: - conditions: - - reason: reason - lastTransitionTime: 2000-01-23T04:56:07.000+00:00 - message: message - type: type - observedGeneration: 5 - status: status - - reason: reason - lastTransitionTime: 2000-01-23T04:56:07.000+00:00 - message: message - type: type - observedGeneration: 5 - status: status - properties: - apiVersion: - description: "APIVersion defines the versioned schema of this representation\ - \ of an object. Servers should convert recognized schemas to the latest\ - \ internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources" + nodeAllocatableResources: + additionalProperties: + $ref: "#/components/schemas/v1.NodeAllocatableResource" + description: "NodeAllocatableResources defines the mapping of node resources\ + \ that are managed by the DRA driver exposing this device. This includes\ + \ resources currently reported in v1.Node `status.allocatable` that are\ + \ not extended resources (see https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#extended-resources).\ + \ Examples include \"cpu\", \"memory\", \"ephemeral-storage\", and hugepages.\ + \ In addition to standard requests made through the Pod `spec`, these\ + \ resources can also be requested through claims and allocated by the\ + \ DRA driver. For example, a CPU DRA driver might allocate exclusive CPUs\ + \ or auxiliary node memory dependencies of an accelerator device. The\ + \ keys of this map are the node-allocatable resource names (e.g., \"cpu\"\ + , \"memory\"). Extended resource names are not permitted as keys." + type: object + nodeName: + description: |- + NodeName identifies the node where the device is available. + + Must only be set if Spec.PerDeviceNodeSelection is set to true. At most one of NodeName, NodeSelector and AllNodes can be set. type: string - items: - description: items is the list of ServiceCIDRs. + nodeSelector: + $ref: "#/components/schemas/v1.NodeSelector" + taints: + description: |- + If specified, these are the driver-defined taints. + + The maximum number of taints is 16. If taints are set for any device in a ResourceSlice, then the maximum number of allowed devices per ResourceSlice is 64 instead of 128. + + This is a beta field and requires enabling the DRADeviceTaints feature gate. items: - $ref: "#/components/schemas/v1beta1.ServiceCIDR" + $ref: "#/components/schemas/v1.DeviceTaint" type: array - kind: - description: "Kind is a string value representing the REST resource this\ - \ object represents. Servers may infer this from the endpoint the client\ - \ submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds" - type: string - metadata: - $ref: "#/components/schemas/v1.ListMeta" + x-kubernetes-list-type: atomic required: - - items + - name type: object - x-kubernetes-group-version-kind: - - group: networking.k8s.io - kind: ServiceCIDRList - version: v1beta1 - x-implements: - - io.kubernetes.client.common.KubernetesListObject - v1beta1.ServiceCIDRSpec: - description: ServiceCIDRSpec define the CIDRs the user wants to use for allocating - ClusterIPs for Services. + v1.DeviceAllocationConfiguration: + description: DeviceAllocationConfiguration gets embedded in an AllocationResult. example: - cidrs: - - cidrs - - cidrs + opaque: + driver: driver + parameters: "{}" + requests: + - requests + - requests + source: source properties: - cidrs: - description: "CIDRs defines the IP blocks in CIDR notation (e.g. \"192.168.0.0/24\"\ - \ or \"2001:db8::/64\") from which to assign service cluster IPs. Max\ - \ of two CIDRs is allowed, one of each IP family. This field is immutable." + opaque: + $ref: "#/components/schemas/v1.OpaqueDeviceConfiguration" + requests: + description: |- + Requests lists the names of requests where the configuration applies. If empty, its applies to all requests. + + References to subrequests must include the name of the main request and may include the subrequest using the format
[/]. If just the main request is given, the configuration applies to all subrequests. items: type: string type: array x-kubernetes-list-type: atomic + source: + description: Source records whether the configuration comes from a class + and thus is not something that a normal user would have been able to set + or from a claim. + type: string + required: + - source type: object - v1beta1.ServiceCIDRStatus: - description: ServiceCIDRStatus describes the current state of the ServiceCIDR. - example: - conditions: - - reason: reason - lastTransitionTime: 2000-01-23T04:56:07.000+00:00 - message: message - type: type - observedGeneration: 5 - status: status - - reason: reason - lastTransitionTime: 2000-01-23T04:56:07.000+00:00 - message: message - type: type - observedGeneration: 5 - status: status - properties: - conditions: - description: conditions holds an array of metav1.Condition that describe - the state of the ServiceCIDR. Current service state - items: - $ref: "#/components/schemas/v1.Condition" - type: array - x-kubernetes-patch-strategy: merge - x-kubernetes-list-type: map - x-kubernetes-list-map-keys: - - type - x-kubernetes-patch-merge-key: type - type: object - v1.Overhead: - description: Overhead structure represents the resource overhead associated - with running a pod. - example: - podFixed: - key: null - properties: - podFixed: - additionalProperties: - $ref: "#/components/schemas/resource.Quantity" - description: podFixed represents the fixed resource overhead associated - with running a pod. - type: object - type: object - v1.RuntimeClass: - description: "RuntimeClass defines a class of container runtime supported in\ - \ the cluster. The RuntimeClass is used to determine which container runtime\ - \ is used to run all containers in a pod. RuntimeClasses are manually defined\ - \ by a user or cluster provisioner, and referenced in the PodSpec. The Kubelet\ - \ is responsible for resolving the RuntimeClassName reference before running\ - \ the pod. For more details, see https://kubernetes.io/docs/concepts/containers/runtime-class/" + v1.DeviceAllocationResult: + description: DeviceAllocationResult is the result of allocating devices. example: - handler: handler - metadata: - generation: 6 - finalizers: - - finalizers - - finalizers - resourceVersion: resourceVersion - annotations: - key: annotations - generateName: generateName - deletionTimestamp: 2000-01-23T04:56:07.000+00:00 - labels: - key: labels - ownerReferences: - - uid: uid - controller: true - apiVersion: apiVersion - kind: kind - name: name - blockOwnerDeletion: true - - uid: uid - controller: true - apiVersion: apiVersion - kind: kind - name: name - blockOwnerDeletion: true - selfLink: selfLink - deletionGracePeriodSeconds: 0 - uid: uid - managedFields: - - apiVersion: apiVersion - fieldsV1: "{}" - manager: manager - subresource: subresource - time: 2000-01-23T04:56:07.000+00:00 - operation: operation - fieldsType: fieldsType - - apiVersion: apiVersion - fieldsV1: "{}" - manager: manager - subresource: subresource - time: 2000-01-23T04:56:07.000+00:00 - operation: operation - fieldsType: fieldsType - creationTimestamp: 2000-01-23T04:56:07.000+00:00 - name: name - namespace: namespace - apiVersion: apiVersion - kind: kind - overhead: - podFixed: + config: + - opaque: + driver: driver + parameters: "{}" + requests: + - requests + - requests + source: source + - opaque: + driver: driver + parameters: "{}" + requests: + - requests + - requests + source: source + results: + - request: request + adminAccess: true + skipNodeOperations: + - skipNodeOperations + - skipNodeOperations + tolerations: + - effect: effect + tolerationSeconds: 6 + value: value + key: key + operator: operator + - effect: effect + tolerationSeconds: 6 + value: value + key: key + operator: operator + driver: driver + bindingFailureConditions: + - bindingFailureConditions + - bindingFailureConditions + pool: pool + shareID: shareID + consumedCapacity: key: null - scheduling: + device: device + bindingConditions: + - bindingConditions + - bindingConditions + - request: request + adminAccess: true + skipNodeOperations: + - skipNodeOperations + - skipNodeOperations tolerations: - effect: effect tolerationSeconds: 6 @@ -271043,111 +289243,201 @@ components: value: value key: key operator: operator - nodeSelector: - key: nodeSelector + driver: driver + bindingFailureConditions: + - bindingFailureConditions + - bindingFailureConditions + pool: pool + shareID: shareID + consumedCapacity: + key: null + device: device + bindingConditions: + - bindingConditions + - bindingConditions properties: - apiVersion: - description: "APIVersion defines the versioned schema of this representation\ - \ of an object. Servers should convert recognized schemas to the latest\ - \ internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources" - type: string - handler: - description: "handler specifies the underlying runtime and configuration\ - \ that the CRI implementation will use to handle pods of this class. The\ - \ possible values are specific to the node & CRI configuration. It is\ - \ assumed that all handlers are available on every node, and handlers\ - \ of the same name are equivalent on every node. For example, a handler\ - \ called \"runc\" might specify that the runc OCI runtime (using native\ - \ Linux containers) will be used to run the containers in a pod. The Handler\ - \ must be lowercase, conform to the DNS Label (RFC 1123) requirements,\ - \ and is immutable." + config: + description: |- + This field is a combination of all the claim and class configuration parameters. Drivers can distinguish between those based on a flag. + + This includes configuration parameters for drivers which have no allocated devices in the result because it is up to the drivers which configuration parameters they support. They can silently ignore unknown configuration parameters. + items: + $ref: "#/components/schemas/v1.DeviceAllocationConfiguration" + type: array + x-kubernetes-list-type: atomic + results: + description: Results lists all allocated devices. + items: + $ref: "#/components/schemas/v1.DeviceRequestAllocationResult" + type: array + x-kubernetes-list-type: atomic + type: object + v1.DeviceAttribute: + description: DeviceAttribute must have exactly one field set. + example: + bools: + - true + - true + bool: true + string: string + strings: + - strings + - strings + ints: + - 6 + - 6 + versions: + - versions + - versions + version: version + int: 0 + properties: + bool: + description: BoolValue is a true/false value. + type: boolean + bools: + description: BoolValues is a non-empty list of true/false values. + items: + type: boolean + type: array + x-kubernetes-list-type: atomic + int: + description: IntValue is a number. + format: int64 + type: integer + ints: + description: |- + IntValues is a non-empty list of numbers. + + This is an alpha field and requires enabling the DRAListTypeAttributes feature gate. + items: + format: int64 + type: integer + type: array + x-kubernetes-list-type: atomic + string: + description: StringValue is a string. Must not be longer than 64 characters. type: string - kind: - description: "Kind is a string value representing the REST resource this\ - \ object represents. Servers may infer this from the endpoint the client\ - \ submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds" + strings: + description: |- + StringValues is a non-empty list of strings. Each string must not be longer than 64 characters. + + This is an alpha field and requires enabling the DRAListTypeAttributes feature gate. + items: + type: string + type: array + x-kubernetes-list-type: atomic + version: + description: VersionValue is a semantic version according to semver.org + spec 2.0.0. Must not be longer than 64 characters. type: string - metadata: - $ref: "#/components/schemas/v1.ObjectMeta" - overhead: - $ref: "#/components/schemas/v1.Overhead" - scheduling: - $ref: "#/components/schemas/v1.Scheduling" - required: - - handler + versions: + description: |- + VersionValues is a non-empty list of semantic versions according to semver.org spec 2.0.0. Each version string must not be longer than 64 characters. + + This is an alpha field and requires enabling the DRAListTypeAttributes feature gate. + items: + type: string + type: array + x-kubernetes-list-type: atomic type: object - x-kubernetes-group-version-kind: - - group: node.k8s.io - kind: RuntimeClass - version: v1 - x-implements: - - io.kubernetes.client.common.KubernetesObject - v1.RuntimeClassList: - description: RuntimeClassList is a list of RuntimeClass objects. + v1.DeviceCapacity: + description: DeviceCapacity describes a quantity associated with a device. + example: + value: value + requestPolicy: + default: default + validRange: + min: min + max: max + step: step + validValues: + - null + - null + properties: + requestPolicy: + $ref: "#/components/schemas/v1.CapacityRequestPolicy" + value: + description: "Quantity is a fixed-point representation of a number. It provides\ + \ convenient marshaling/unmarshaling in JSON and YAML, in addition to\ + \ String() and AsInt64() accessors.\n\nThe serialization format is:\n\n\ + ``` ::= \n\n\t(Note that \ + \ may be empty, from the \"\" case in .)\n\n \ + \ ::= 0 | 1 | ... | 9 ::= | \ + \ ::= | . | . | .\ + \ ::= \"+\" | \"-\" ::= |\ + \ ::= | \ + \ | ::= Ki | Mi | Gi | Ti | Pi | Ei\n\n\t\ + (International System of units; See: http://physics.nist.gov/cuu/Units/binary.html)\n\ + \n ::= m | \"\" | k | M | G | T | P | E\n\n\t(Note that\ + \ 1024 = 1Ki but 1000 = 1k; I didn't choose the capitalization.)\n\n\ + \ ::= \"e\" | \"E\" ```\n\nNo matter which\ + \ of the three exponent forms is used, no quantity may represent a number\ + \ greater than 2^63-1 in magnitude, nor may it have more than 3 decimal\ + \ places. Numbers larger or more precise will be capped or rounded up.\ + \ (E.g.: 0.1m will rounded up to 1m.) This may be extended in the future\ + \ if we require larger or smaller quantities.\n\nWhen a Quantity is parsed\ + \ from a string, it will remember the type of suffix it had, and will\ + \ use the same type again when it is serialized.\n\nBefore serializing,\ + \ Quantity will be put in \"canonical form\". This means that Exponent/suffix\ + \ will be adjusted up or down (with a corresponding increase or decrease\ + \ in Mantissa) such that:\n\n- No precision is lost - No fractional digits\ + \ will be emitted - The exponent (or suffix) is as large as possible.\n\ + \nThe sign will be omitted unless the number is negative.\n\nExamples:\n\ + \n- 1.5 will be serialized as \"1500m\" - 1.5Gi will be serialized as\ + \ \"1536Mi\"\n\nNote that the quantity will NEVER be internally represented\ + \ by a floating point number. That is the whole point of this exercise.\n\ + \nNon-canonical values will still parse as long as they are well formed,\ + \ but will be re-emitted in their canonical form. (So always use canonical\ + \ form, or don't diff.)\n\nThis format is intended to make it difficult\ + \ to use these numbers without writing some sort of special handling code\ + \ in the hopes that that will cause implementors to also use a fixed point\ + \ implementation." + format: quantity + type: string + required: + - value + type: object + v1.DeviceClaim: + description: DeviceClaim defines how to request devices with a ResourceClaim. example: - metadata: - remainingItemCount: 1 - continue: continue - resourceVersion: resourceVersion - shardInfo: - selector: selector - selfLink: selfLink - apiVersion: apiVersion - kind: kind - items: - - handler: handler - metadata: - generation: 6 - finalizers: - - finalizers - - finalizers - resourceVersion: resourceVersion - annotations: - key: annotations - generateName: generateName - deletionTimestamp: 2000-01-23T04:56:07.000+00:00 - labels: - key: labels - ownerReferences: - - uid: uid - controller: true - apiVersion: apiVersion - kind: kind + requests: + - firstAvailable: + - allocationMode: allocationMode + derivedAttributes: + - expression: expression name: name - blockOwnerDeletion: true - - uid: uid - controller: true - apiVersion: apiVersion - kind: kind + - expression: expression name: name - blockOwnerDeletion: true - selfLink: selfLink - deletionGracePeriodSeconds: 0 - uid: uid - managedFields: - - apiVersion: apiVersion - fieldsV1: "{}" - manager: manager - subresource: subresource - time: 2000-01-23T04:56:07.000+00:00 - operation: operation - fieldsType: fieldsType - - apiVersion: apiVersion - fieldsV1: "{}" - manager: manager - subresource: subresource - time: 2000-01-23T04:56:07.000+00:00 - operation: operation - fieldsType: fieldsType - creationTimestamp: 2000-01-23T04:56:07.000+00:00 + deviceClassName: deviceClassName + tolerations: + - effect: effect + tolerationSeconds: 6 + value: value + key: key + operator: operator + - effect: effect + tolerationSeconds: 6 + value: value + key: key + operator: operator + count: 1 name: name - namespace: namespace - apiVersion: apiVersion - kind: kind - overhead: - podFixed: - key: null - scheduling: + selectors: + - cel: + expression: expression + - cel: + expression: expression + capacity: + requests: + key: null + - allocationMode: allocationMode + derivedAttributes: + - expression: expression + name: name + - expression: expression + name: name + deviceClassName: deviceClassName tolerations: - effect: effect tolerationSeconds: 6 @@ -271159,61 +289449,82 @@ components: value: value key: key operator: operator - nodeSelector: - key: nodeSelector - - handler: handler - metadata: - generation: 6 - finalizers: - - finalizers - - finalizers - resourceVersion: resourceVersion - annotations: - key: annotations - generateName: generateName - deletionTimestamp: 2000-01-23T04:56:07.000+00:00 - labels: - key: labels - ownerReferences: - - uid: uid - controller: true - apiVersion: apiVersion - kind: kind + count: 1 + name: name + selectors: + - cel: + expression: expression + - cel: + expression: expression + capacity: + requests: + key: null + name: name + exactly: + allocationMode: allocationMode + derivedAttributes: + - expression: expression name: name - blockOwnerDeletion: true - - uid: uid - controller: true - apiVersion: apiVersion - kind: kind + - expression: expression name: name - blockOwnerDeletion: true - selfLink: selfLink - deletionGracePeriodSeconds: 0 - uid: uid - managedFields: - - apiVersion: apiVersion - fieldsV1: "{}" - manager: manager - subresource: subresource - time: 2000-01-23T04:56:07.000+00:00 - operation: operation - fieldsType: fieldsType - - apiVersion: apiVersion - fieldsV1: "{}" - manager: manager - subresource: subresource - time: 2000-01-23T04:56:07.000+00:00 - operation: operation - fieldsType: fieldsType - creationTimestamp: 2000-01-23T04:56:07.000+00:00 + deviceClassName: deviceClassName + adminAccess: true + tolerations: + - effect: effect + tolerationSeconds: 6 + value: value + key: key + operator: operator + - effect: effect + tolerationSeconds: 6 + value: value + key: key + operator: operator + count: 0 + selectors: + - cel: + expression: expression + - cel: + expression: expression + capacity: + requests: + key: null + - firstAvailable: + - allocationMode: allocationMode + derivedAttributes: + - expression: expression + name: name + - expression: expression + name: name + deviceClassName: deviceClassName + tolerations: + - effect: effect + tolerationSeconds: 6 + value: value + key: key + operator: operator + - effect: effect + tolerationSeconds: 6 + value: value + key: key + operator: operator + count: 1 name: name - namespace: namespace - apiVersion: apiVersion - kind: kind - overhead: - podFixed: - key: null - scheduling: + selectors: + - cel: + expression: expression + - cel: + expression: expression + capacity: + requests: + key: null + - allocationMode: allocationMode + derivedAttributes: + - expression: expression + name: name + - expression: expression + name: name + deviceClassName: deviceClassName tolerations: - effect: effect tolerationSeconds: 6 @@ -271225,90 +289536,122 @@ components: value: value key: key operator: operator - nodeSelector: - key: nodeSelector + count: 1 + name: name + selectors: + - cel: + expression: expression + - cel: + expression: expression + capacity: + requests: + key: null + name: name + exactly: + allocationMode: allocationMode + derivedAttributes: + - expression: expression + name: name + - expression: expression + name: name + deviceClassName: deviceClassName + adminAccess: true + tolerations: + - effect: effect + tolerationSeconds: 6 + value: value + key: key + operator: operator + - effect: effect + tolerationSeconds: 6 + value: value + key: key + operator: operator + count: 0 + selectors: + - cel: + expression: expression + - cel: + expression: expression + capacity: + requests: + key: null + config: + - opaque: + driver: driver + parameters: "{}" + requests: + - requests + - requests + - opaque: + driver: driver + parameters: "{}" + requests: + - requests + - requests + constraints: + - distinctAttribute: distinctAttribute + matchAttribute: matchAttribute + requests: + - requests + - requests + - distinctAttribute: distinctAttribute + matchAttribute: matchAttribute + requests: + - requests + - requests properties: - apiVersion: - description: "APIVersion defines the versioned schema of this representation\ - \ of an object. Servers should convert recognized schemas to the latest\ - \ internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources" - type: string - items: - description: items is a list of schema objects. + config: + description: This field holds configuration for multiple potential drivers + which could satisfy requests in this claim. It is ignored while allocating + the claim. items: - $ref: "#/components/schemas/v1.RuntimeClass" + $ref: "#/components/schemas/v1.DeviceClaimConfiguration" type: array - kind: - description: "Kind is a string value representing the REST resource this\ - \ object represents. Servers may infer this from the endpoint the client\ - \ submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds" - type: string - metadata: - $ref: "#/components/schemas/v1.ListMeta" - required: - - items + x-kubernetes-list-type: atomic + constraints: + description: These constraints must be satisfied by the set of devices that + get allocated for the claim. + items: + $ref: "#/components/schemas/v1.DeviceConstraint" + type: array + x-kubernetes-list-type: atomic + requests: + description: "Requests represent individual requests for distinct devices\ + \ which must all be satisfied. If empty, nothing needs to be allocated." + items: + $ref: "#/components/schemas/v1.DeviceRequest" + type: array + x-kubernetes-list-type: atomic type: object - x-kubernetes-group-version-kind: - - group: node.k8s.io - kind: RuntimeClassList - version: v1 - x-implements: - - io.kubernetes.client.common.KubernetesListObject - v1.Scheduling: - description: Scheduling specifies the scheduling constraints for nodes supporting - a RuntimeClass. + v1.DeviceClaimConfiguration: + description: DeviceClaimConfiguration is used for configuration parameters in + DeviceClaim. example: - tolerations: - - effect: effect - tolerationSeconds: 6 - value: value - key: key - operator: operator - - effect: effect - tolerationSeconds: 6 - value: value - key: key - operator: operator - nodeSelector: - key: nodeSelector + opaque: + driver: driver + parameters: "{}" + requests: + - requests + - requests properties: - nodeSelector: - additionalProperties: - type: string - description: nodeSelector lists labels that must be present on nodes that - support this RuntimeClass. Pods using this RuntimeClass can only be scheduled - to a node matched by this selector. The RuntimeClass nodeSelector is merged - with a pod's existing nodeSelector. Any conflicts will cause the pod to - be rejected in admission. - type: object - x-kubernetes-map-type: atomic - tolerations: - description: "tolerations are appended (excluding duplicates) to pods running\ - \ with this RuntimeClass during admission, effectively unioning the set\ - \ of nodes tolerated by the pod and the RuntimeClass." + opaque: + $ref: "#/components/schemas/v1.OpaqueDeviceConfiguration" + requests: + description: |- + Requests lists the names of requests where the configuration applies. If empty, it applies to all requests. + + References to subrequests must include the name of the main request and may include the subrequest using the format
[/]. If just the main request is given, the configuration applies to all subrequests. items: - $ref: "#/components/schemas/v1.Toleration" + type: string type: array x-kubernetes-list-type: atomic type: object - v1.Eviction: - description: Eviction evicts a pod from its node subject to certain policies - and safety constraints. This is a subresource of Pod. A request to cause - such an eviction is created by POSTing to .../pods//evictions. + v1.DeviceClass: + description: DeviceClass is a vendor- or admin-provided resource that contains + device configuration and selectors. It can be referenced in the device requests + of a claim to apply these presets. Cluster scoped. example: - deleteOptions: - orphanDependents: true - apiVersion: apiVersion - dryRun: - - dryRun - - dryRun - kind: kind - preconditions: - uid: uid - resourceVersion: resourceVersion - ignoreStoreReadErrorWithClusterBreakingPotential: true - gracePeriodSeconds: 0 - propagationPolicy: propagationPolicy metadata: generation: 6 finalizers: @@ -271357,14 +289700,26 @@ components: namespace: namespace apiVersion: apiVersion kind: kind + spec: + extendedResourceName: extendedResourceName + selectors: + - cel: + expression: expression + - cel: + expression: expression + config: + - opaque: + driver: driver + parameters: "{}" + - opaque: + driver: driver + parameters: "{}" properties: apiVersion: description: "APIVersion defines the versioned schema of this representation\ \ of an object. Servers should convert recognized schemas to the latest\ \ internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources" type: string - deleteOptions: - $ref: "#/components/schemas/v1.DeleteOptions" kind: description: "Kind is a string value representing the REST resource this\ \ object represents. Servers may infer this from the endpoint the client\ @@ -271372,130 +289727,27 @@ components: type: string metadata: $ref: "#/components/schemas/v1.ObjectMeta" + spec: + $ref: "#/components/schemas/v1.DeviceClassSpec" type: object x-kubernetes-group-version-kind: - - group: policy - kind: Eviction + - group: resource.k8s.io + kind: DeviceClass version: v1 x-implements: - io.kubernetes.client.common.KubernetesObject - v1.PodDisruptionBudget: - description: PodDisruptionBudget is an object to define the max disruption that - can be caused to a collection of pods + v1.DeviceClassConfiguration: + description: DeviceClassConfiguration is used in DeviceClass. example: - metadata: - generation: 6 - finalizers: - - finalizers - - finalizers - resourceVersion: resourceVersion - annotations: - key: annotations - generateName: generateName - deletionTimestamp: 2000-01-23T04:56:07.000+00:00 - labels: - key: labels - ownerReferences: - - uid: uid - controller: true - apiVersion: apiVersion - kind: kind - name: name - blockOwnerDeletion: true - - uid: uid - controller: true - apiVersion: apiVersion - kind: kind - name: name - blockOwnerDeletion: true - selfLink: selfLink - deletionGracePeriodSeconds: 0 - uid: uid - managedFields: - - apiVersion: apiVersion - fieldsV1: "{}" - manager: manager - subresource: subresource - time: 2000-01-23T04:56:07.000+00:00 - operation: operation - fieldsType: fieldsType - - apiVersion: apiVersion - fieldsV1: "{}" - manager: manager - subresource: subresource - time: 2000-01-23T04:56:07.000+00:00 - operation: operation - fieldsType: fieldsType - creationTimestamp: 2000-01-23T04:56:07.000+00:00 - name: name - namespace: namespace - apiVersion: apiVersion - kind: kind - spec: - minAvailable: minAvailable - maxUnavailable: maxUnavailable - unhealthyPodEvictionPolicy: unhealthyPodEvictionPolicy - selector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - status: - currentHealthy: 0 - expectedPods: 5 - disruptionsAllowed: 1 - disruptedPods: - key: 2000-01-23T04:56:07.000+00:00 - conditions: - - reason: reason - lastTransitionTime: 2000-01-23T04:56:07.000+00:00 - message: message - type: type - observedGeneration: 5 - status: status - - reason: reason - lastTransitionTime: 2000-01-23T04:56:07.000+00:00 - message: message - type: type - observedGeneration: 5 - status: status - observedGeneration: 5 - desiredHealthy: 6 + opaque: + driver: driver + parameters: "{}" properties: - apiVersion: - description: "APIVersion defines the versioned schema of this representation\ - \ of an object. Servers should convert recognized schemas to the latest\ - \ internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources" - type: string - kind: - description: "Kind is a string value representing the REST resource this\ - \ object represents. Servers may infer this from the endpoint the client\ - \ submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds" - type: string - metadata: - $ref: "#/components/schemas/v1.ObjectMeta" - spec: - $ref: "#/components/schemas/v1.PodDisruptionBudgetSpec" - status: - $ref: "#/components/schemas/v1.PodDisruptionBudgetStatus" + opaque: + $ref: "#/components/schemas/v1.OpaqueDeviceConfiguration" type: object - x-kubernetes-group-version-kind: - - group: policy - kind: PodDisruptionBudget - version: v1 - x-implements: - - io.kubernetes.client.common.KubernetesObject - v1.PodDisruptionBudgetList: - description: PodDisruptionBudgetList is a collection of PodDisruptionBudgets. + v1.DeviceClassList: + description: DeviceClassList is a collection of classes. example: metadata: remainingItemCount: 1 @@ -271556,44 +289808,19 @@ components: apiVersion: apiVersion kind: kind spec: - minAvailable: minAvailable - maxUnavailable: maxUnavailable - unhealthyPodEvictionPolicy: unhealthyPodEvictionPolicy - selector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - status: - currentHealthy: 0 - expectedPods: 5 - disruptionsAllowed: 1 - disruptedPods: - key: 2000-01-23T04:56:07.000+00:00 - conditions: - - reason: reason - lastTransitionTime: 2000-01-23T04:56:07.000+00:00 - message: message - type: type - observedGeneration: 5 - status: status - - reason: reason - lastTransitionTime: 2000-01-23T04:56:07.000+00:00 - message: message - type: type - observedGeneration: 5 - status: status - observedGeneration: 5 - desiredHealthy: 6 + extendedResourceName: extendedResourceName + selectors: + - cel: + expression: expression + - cel: + expression: expression + config: + - opaque: + driver: driver + parameters: "{}" + - opaque: + driver: driver + parameters: "{}" - metadata: generation: 6 finalizers: @@ -271643,44 +289870,19 @@ components: apiVersion: apiVersion kind: kind spec: - minAvailable: minAvailable - maxUnavailable: maxUnavailable - unhealthyPodEvictionPolicy: unhealthyPodEvictionPolicy - selector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - status: - currentHealthy: 0 - expectedPods: 5 - disruptionsAllowed: 1 - disruptedPods: - key: 2000-01-23T04:56:07.000+00:00 - conditions: - - reason: reason - lastTransitionTime: 2000-01-23T04:56:07.000+00:00 - message: message - type: type - observedGeneration: 5 - status: status - - reason: reason - lastTransitionTime: 2000-01-23T04:56:07.000+00:00 - message: message - type: type - observedGeneration: 5 - status: status - observedGeneration: 5 - desiredHealthy: 6 + extendedResourceName: extendedResourceName + selectors: + - cel: + expression: expression + - cel: + expression: expression + config: + - opaque: + driver: driver + parameters: "{}" + - opaque: + driver: driver + parameters: "{}" properties: apiVersion: description: "APIVersion defines the versioned schema of this representation\ @@ -271688,9 +289890,9 @@ components: \ internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources" type: string items: - description: Items is a list of PodDisruptionBudgets + description: Items is the list of resource classes. items: - $ref: "#/components/schemas/v1.PodDisruptionBudget" + $ref: "#/components/schemas/v1.DeviceClass" type: array kind: description: "Kind is a string value representing the REST resource this\ @@ -271703,332 +289905,574 @@ components: - items type: object x-kubernetes-group-version-kind: - - group: policy - kind: PodDisruptionBudgetList + - group: resource.k8s.io + kind: DeviceClassList version: v1 x-implements: - io.kubernetes.client.common.KubernetesListObject - v1.PodDisruptionBudgetSpec: - description: PodDisruptionBudgetSpec is a description of a PodDisruptionBudget. + v1.DeviceClassSpec: + description: "DeviceClassSpec is used in a [DeviceClass] to define what can\ + \ be allocated and how to configure it." + example: + extendedResourceName: extendedResourceName + selectors: + - cel: + expression: expression + - cel: + expression: expression + config: + - opaque: + driver: driver + parameters: "{}" + - opaque: + driver: driver + parameters: "{}" + properties: + config: + description: |- + Config defines configuration parameters that apply to each device that is claimed via this class. Some classses may potentially be satisfied by multiple drivers, so each instance of a vendor configuration applies to exactly one driver. + + They are passed to the driver, but are not considered while allocating the claim. + items: + $ref: "#/components/schemas/v1.DeviceClassConfiguration" + type: array + x-kubernetes-list-type: atomic + extendedResourceName: + description: "ExtendedResourceName is the extended resource name for the\ + \ devices of this class. The devices of this class can be used to satisfy\ + \ a pod's extended resource requests. It has the same format as the name\ + \ of a pod's extended resource. It should be unique among all the device\ + \ classes in a cluster. If two device classes have the same name, then\ + \ the class created later is picked to satisfy a pod's extended resource\ + \ requests. If two classes are created at the same time, then the name\ + \ of the class lexicographically sorted first is picked." + type: string + selectors: + description: Each selector must be satisfied by a device which is claimed + via this class. + items: + $ref: "#/components/schemas/v1.DeviceSelector" + type: array + x-kubernetes-list-type: atomic + type: object + v1.DeviceConstraint: + description: DeviceConstraint must have exactly one field set besides Requests. + example: + distinctAttribute: distinctAttribute + matchAttribute: matchAttribute + requests: + - requests + - requests + properties: + distinctAttribute: + description: |- + DistinctAttribute requires that all devices in question have this attribute and that its type and value are unique across those devices. + + When the DRAListTypeAttributes feature gate is enabled, comparison uses set semantics (i.e., element order and duplicates are ignored): list-valued attributes must be pairwise disjoint across devices. Scalar values are treated as singleton sets for backward compatibility. + + This acts as the inverse of MatchAttribute. + + This constraint is used to avoid allocating multiple requests to the same device by ensuring attribute-level differentiation. + + This is useful for scenarios where resource requests must be fulfilled by separate physical devices. For example, a container requests two network interfaces that must be allocated from two different physical NICs. + type: string + matchAttribute: + description: |- + MatchAttribute requires that all devices in question have this attribute and that its type and value are the same across those devices. + + For example, if you specified "dra.example.com/numa" (a hypothetical example!), then only devices in the same NUMA node will be chosen. A device which does not have that attribute will not be chosen. All devices should use a value of the same type for this attribute because that is part of its specification, but if one device doesn't, then it also will not be chosen. + + When the DRAListTypeAttributes feature gate is enabled, comparison uses set semantics(i.e., element order and duplicates are ignored): list-valued attributes match when the intersection across all devices is non-empty. Scalar values are treated as single-element lists for backward compatibility. + + Must include the domain qualifier. + type: string + requests: + description: |- + Requests is a list of the one or more requests in this claim which must co-satisfy this constraint. If a request is fulfilled by multiple devices, then all of the devices must satisfy the constraint. If this is not specified, this constraint applies to all requests in this claim. + + References to subrequests must include the name of the main request and may include the subrequest using the format
[/]. If just the main request is given, the constraint applies to all subrequests. + items: + type: string + type: array + x-kubernetes-list-type: atomic + type: object + v1.DeviceCounterConsumption: + description: DeviceCounterConsumption defines a set of counters that a device + will consume from a CounterSet. + example: + counters: + key: + value: value + compatibilityGroups: + - compatibilityGroups + - compatibilityGroups + counterSet: counterSet + properties: + compatibilityGroups: + description: |- + CompatibilityGroups is a list of opaque group names for this counter set consumption. + + Devices that consume counters from the same counter set may only be allocated at the same time ("co-allocated") if they all share at least one common group: the intersection of the CompatibilityGroups of all co-allocated devices on that counter set must be non-empty. Devices that consume from different counter sets are never compared via this field. + + An unset field, an explicit nil, and an empty list are equivalent and mean "no groups": such a device is only co-allocatable with sibling devices on the same counter set that also have no groups, and is never co-allocatable with a device that declares one or more groups. + + Group names are opaque and meaningful only within the publishing driver's pool. + + The maximum number of groups is 2, and the names must be unique. + items: + type: string + type: array + x-kubernetes-list-type: atomic + counterSet: + description: CounterSet is the name of the set from which the counters defined + will be consumed. + type: string + counters: + additionalProperties: + $ref: "#/components/schemas/v1.Counter" + description: |- + Counters defines the counters that will be consumed by the device. + + The maximum number of counters is 32. + type: object + required: + - counterSet + - counters + type: object + v1.DeviceDerivedAttribute: + description: DeviceDerivedAttribute defines a derived attribute computed via + CEL. + example: + expression: expression + name: name + properties: + expression: + description: |- + Expression is a CEL expression evaluated against each candidate device. The expression must evaluate to a primitive scalar (string, integer, boolean, or semver) or a list of these scalars ([]string, []int64, []bool, []semver) to act as a virtual grouping key. Any other return type is an error and causes CEL evaluation for the device to fail. + + The expression's input is an object named "device", which carries the same properties as in a CELDeviceSelector. + + When pod scheduling encounters CEL runtime errors (such as looking up an attribute that isn't defined) for some devices, it will abort allocation and fail scheduling for the Pod. Surfacing evaluation errors immediately prevents silent topology matching failures that are extremely hard to detect. A robust expression should, for example, check for the existence of attributes before referencing them to avoid runtime evaluation errors. + + The expression gets evaluated after a device has passed the other selector expressions for the request in which this expression is used. This allows writing expressions that are tailored towards the specific devices being requested (for example, by assuming the device is from a certain vendor and skipping those checks). + + The length of the expression must be smaller or equal to 10 Ki. The cost of evaluating it is also limited based on the estimated number of logical steps; the combined cost of all derived attributes in a claim is capped by a shared CEL cost budget. + type: string + name: + description: |- + Name is the identifier for this derived attribute, used in constraints. + + It must be a DNS subdomain followed by a slash ("/") followed by a C identifier (e.g. "example.com/numaNode" or "derived/numaNode"). + + If the chosen name matches an existing physical attribute from a driver, the derived attribute's expression will shadow the physical attribute, and its evaluated value will be used in constraints instead. When the goal is to define a derived attribute that is only used within the ResourceClaim and not meant to shadow an existing attribute, use a domain prefix that no DRA driver should be using (e.g. "derived/myAttribute"). + + It is not valid to define a derived attribute that isn't used in at least one constraint. + type: string + required: + - expression + - name + type: object + v1.DeviceRequest: + description: "DeviceRequest is a request for devices required for a claim. This\ + \ is typically a request for a single resource like a device, but can also\ + \ ask for several identical devices. With FirstAvailable it is also possible\ + \ to provide a prioritized list of requests." + example: + firstAvailable: + - allocationMode: allocationMode + derivedAttributes: + - expression: expression + name: name + - expression: expression + name: name + deviceClassName: deviceClassName + tolerations: + - effect: effect + tolerationSeconds: 6 + value: value + key: key + operator: operator + - effect: effect + tolerationSeconds: 6 + value: value + key: key + operator: operator + count: 1 + name: name + selectors: + - cel: + expression: expression + - cel: + expression: expression + capacity: + requests: + key: null + - allocationMode: allocationMode + derivedAttributes: + - expression: expression + name: name + - expression: expression + name: name + deviceClassName: deviceClassName + tolerations: + - effect: effect + tolerationSeconds: 6 + value: value + key: key + operator: operator + - effect: effect + tolerationSeconds: 6 + value: value + key: key + operator: operator + count: 1 + name: name + selectors: + - cel: + expression: expression + - cel: + expression: expression + capacity: + requests: + key: null + name: name + exactly: + allocationMode: allocationMode + derivedAttributes: + - expression: expression + name: name + - expression: expression + name: name + deviceClassName: deviceClassName + adminAccess: true + tolerations: + - effect: effect + tolerationSeconds: 6 + value: value + key: key + operator: operator + - effect: effect + tolerationSeconds: 6 + value: value + key: key + operator: operator + count: 0 + selectors: + - cel: + expression: expression + - cel: + expression: expression + capacity: + requests: + key: null + properties: + exactly: + $ref: "#/components/schemas/v1.ExactDeviceRequest" + firstAvailable: + description: |- + FirstAvailable contains subrequests, of which exactly one will be selected by the scheduler. It tries to satisfy them in the order in which they are listed here. So if there are two entries in the list, the scheduler will only check the second one if it determines that the first one can not be used. + + DRA does not yet implement scoring, so the scheduler will select the first set of devices that satisfies all the requests in the claim. And if the requirements can be satisfied on more than one node, other scheduling features will determine which node is chosen. This means that the set of devices allocated to a claim might not be the optimal set available to the cluster. Scoring will be implemented later. + items: + $ref: "#/components/schemas/v1.DeviceSubRequest" + type: array + x-kubernetes-list-type: atomic + name: + description: |- + Name can be used to reference this request in a pod.spec.containers[].resources.claims entry and in a constraint of the claim. + + References using the name in the DeviceRequest will uniquely identify a request when the Exactly field is set. When the FirstAvailable field is set, a reference to the name of the DeviceRequest will match whatever subrequest is chosen by the scheduler. + + Must be a DNS label. + type: string + required: + - name + type: object + v1.DeviceRequestAllocationResult: + description: DeviceRequestAllocationResult contains the allocation result for + one request. + example: + request: request + adminAccess: true + skipNodeOperations: + - skipNodeOperations + - skipNodeOperations + tolerations: + - effect: effect + tolerationSeconds: 6 + value: value + key: key + operator: operator + - effect: effect + tolerationSeconds: 6 + value: value + key: key + operator: operator + driver: driver + bindingFailureConditions: + - bindingFailureConditions + - bindingFailureConditions + pool: pool + shareID: shareID + consumedCapacity: + key: null + device: device + bindingConditions: + - bindingConditions + - bindingConditions + properties: + adminAccess: + description: |- + AdminAccess indicates that this device was allocated for administrative access. See the corresponding request field for a definition of mode. + + Admin access is disabled if this field is unset or set to false, otherwise it is enabled. + type: boolean + bindingConditions: + description: |- + BindingConditions contains a copy of the BindingConditions from the corresponding ResourceSlice at the time of allocation. + + This is a beta field and requires enabling the DRADeviceBindingConditions and DRAResourceClaimDeviceStatus feature gates. + items: + type: string + type: array + x-kubernetes-list-type: atomic + bindingFailureConditions: + description: |- + BindingFailureConditions contains a copy of the BindingFailureConditions from the corresponding ResourceSlice at the time of allocation. + + This is a beta field and requires enabling the DRADeviceBindingConditions and DRAResourceClaimDeviceStatus feature gates. + items: + type: string + type: array + x-kubernetes-list-type: atomic + consumedCapacity: + additionalProperties: + $ref: "#/components/schemas/resource.Quantity" + description: |- + ConsumedCapacity tracks the amount of capacity consumed per device as part of the claim request. The consumed amount may differ from the requested amount: it is rounded up to the nearest valid value based on the device’s requestPolicy if applicable (i.e., may not be less than the requested amount). + + The total consumed capacity for each device must not exceed the DeviceCapacity's Value. + + This field is populated only for devices that allow multiple allocations. All capacity entries are included, even if the consumed amount is zero. + type: object + device: + description: Device references one device instance via its name in the driver's + resource pool. It must be a DNS label. + type: string + driver: + description: |- + Driver specifies the name of the DRA driver whose kubelet plugin should be invoked to process the allocation once the claim is needed on a node. + + Must be a DNS subdomain and should end with a DNS domain owned by the vendor of the driver. It should use only lower case characters. + type: string + pool: + description: |- + This name together with the driver name and the device name field identify which device was allocated (`//`). + + Must not be longer than 253 characters and may contain one or more DNS sub-domains separated by slashes. + type: string + request: + description: |- + Request is the name of the request in the claim which caused this device to be allocated. If it references a subrequest in the firstAvailable list on a DeviceRequest, this field must include both the name of the main request and the subrequest using the format
/. + + Multiple devices may have been allocated per request. + type: string + shareID: + description: "ShareID uniquely identifies an individual allocation share\ + \ of the device, used when the device supports multiple simultaneous allocations.\ + \ It serves as an additional map key to differentiate concurrent shares\ + \ of the same device." + type: string + skipNodeOperations: + description: "SkipNodeOperations lists node-local resource operations (gRPC\ + \ calls) that will be skipped for this allocated device when determining\ + \ whether operations are necessary on the node. If all allocated devices\ + \ for a driver in a claim skip an operation, that gRPC call will be skipped.\ + \ It is a copy of the ResourceSlice.spec.skipNodeOperations value at the\ + \ time when the device was allocated." + items: + type: string + type: array + x-kubernetes-list-type: set + tolerations: + description: |- + A copy of all tolerations specified in the request at the time when the device got allocated. + + The maximum number of tolerations is 16. + + This is a beta field and requires enabling the DRADeviceTaints feature gate. + items: + $ref: "#/components/schemas/v1.DeviceToleration" + type: array + x-kubernetes-list-type: atomic + required: + - device + - driver + - pool + - request + type: object + v1.DeviceSelector: + description: DeviceSelector must have exactly one field set. + example: + cel: + expression: expression + properties: + cel: + $ref: "#/components/schemas/v1.CELDeviceSelector" + type: object + v1.DeviceSubRequest: + description: |- + DeviceSubRequest describes a request for device provided in the claim.spec.devices.requests[].firstAvailable array. Each is typically a request for a single resource like a device, but can also ask for several identical devices. + + DeviceSubRequest is similar to ExactDeviceRequest, but doesn't expose the AdminAccess field as that one is only supported when requesting a specific device. example: - minAvailable: minAvailable - maxUnavailable: maxUnavailable - unhealthyPodEvictionPolicy: unhealthyPodEvictionPolicy - selector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels + allocationMode: allocationMode + derivedAttributes: + - expression: expression + name: name + - expression: expression + name: name + deviceClassName: deviceClassName + tolerations: + - effect: effect + tolerationSeconds: 6 + value: value + key: key + operator: operator + - effect: effect + tolerationSeconds: 6 + value: value + key: key + operator: operator + count: 1 + name: name + selectors: + - cel: + expression: expression + - cel: + expression: expression + capacity: + requests: + key: null properties: - maxUnavailable: - description: "IntOrString is a type that can hold an int32 or a string.\ - \ When used in JSON or YAML marshalling and unmarshalling, it produces\ - \ or consumes the inner type. This allows you to have, for example, a\ - \ JSON field that can accept a name or number." - format: int-or-string - type: string - minAvailable: - description: "IntOrString is a type that can hold an int32 or a string.\ - \ When used in JSON or YAML marshalling and unmarshalling, it produces\ - \ or consumes the inner type. This allows you to have, for example, a\ - \ JSON field that can accept a name or number." - format: int-or-string + allocationMode: + description: |- + AllocationMode and its related fields define how devices are allocated to satisfy this subrequest. Supported values are: + + - ExactCount: This request is for a specific number of devices. + This is the default. The exact number is provided in the + count field. + + - All: This subrequest is for all of the matching devices in a pool. + Allocation will fail if some devices are already allocated, + unless adminAccess is requested. + + If AllocationMode is not specified, the default mode is ExactCount. If the mode is ExactCount and count is not specified, the default count is one. Any other subrequests must specify this field. + + More modes may get added in the future. Clients must refuse to handle requests with unknown modes. type: string - selector: - $ref: "#/components/schemas/v1.LabelSelector" - unhealthyPodEvictionPolicy: + capacity: + $ref: "#/components/schemas/v1.CapacityRequirements" + count: + description: "Count is used only when the count mode is \"ExactCount\".\ + \ Must be greater than zero. If AllocationMode is ExactCount and this\ + \ field is not specified, the default is one." + format: int64 + type: integer + derivedAttributes: description: |- - UnhealthyPodEvictionPolicy defines the criteria for when unhealthy pods should be considered for eviction. Current implementation considers healthy pods, as pods that have status.conditions item with type="Ready",status="True". + DerivedAttributes defines a set of virtual attributes computed via CEL expressions for each candidate device. These virtual attributes can be referenced in `.devices.constraints` to align and match different devices (e.g., co-allocating a GPU and a NIC on the same NUMA node) even if their drivers publish different attributes. Derived attributes are not available via `device.attributes` in the CEL environment when evaluating selector expressions. - Valid policies are IfHealthyBudget and AlwaysAllow. If no policy is specified, the default behavior will be used, which corresponds to the IfHealthyBudget policy. + Derived attributes allow you to extract, transform, or normalize topology information (such as extracting a NUMA index from a complex topology string or renaming a vendor-specific attribute) into a common virtual attribute name at scheduling time. The scheduler then evaluates these virtual attributes exactly like static attributes when matching constraints. - IfHealthyBudget policy means that running pods (status.phase="Running"), but not yet healthy can be evicted only if the guarded application is not disrupted (status.currentHealthy is at least equal to status.desiredHealthy). Healthy pods will be subject to the PDB for eviction. + Every derived attribute defined in this list must be referenced by at least one MatchAttribute or DistinctAttribute constraint in the `.devices.constraints` list. - AlwaysAllow policy means that all running pods (status.phase="Running"), but not yet healthy are considered disrupted and can be evicted regardless of whether the criteria in a PDB is met. This means perspective running pods of a disrupted application might not get a chance to become healthy. Healthy pods will be subject to the PDB for eviction. + The maximum number of derived attributes is 32. - Additional policies may be added in the future. Clients making eviction decisions should disallow eviction of unhealthy pods if they encounter an unrecognized policy in this field. + This is an alpha field and requires enabling the DRADerivedAttributes feature gate. + items: + $ref: "#/components/schemas/v1.DeviceDerivedAttribute" + type: array + x-kubernetes-list-type: atomic + deviceClassName: + description: |- + DeviceClassName references a specific DeviceClass, which can define additional configuration and selectors to be inherited by this subrequest. + + A class is required. Which classes are available depends on the cluster. + + Administrators may use this to restrict which devices may get requested by only installing classes with selectors for permitted devices. If users are free to request anything without restrictions, then administrators can create an empty DeviceClass for users to reference. type: string - type: object - v1.PodDisruptionBudgetStatus: - description: PodDisruptionBudgetStatus represents information about the status - of a PodDisruptionBudget. Status may trail the actual state of a system. - example: - currentHealthy: 0 - expectedPods: 5 - disruptionsAllowed: 1 - disruptedPods: - key: 2000-01-23T04:56:07.000+00:00 - conditions: - - reason: reason - lastTransitionTime: 2000-01-23T04:56:07.000+00:00 - message: message - type: type - observedGeneration: 5 - status: status - - reason: reason - lastTransitionTime: 2000-01-23T04:56:07.000+00:00 - message: message - type: type - observedGeneration: 5 - status: status - observedGeneration: 5 - desiredHealthy: 6 - properties: - conditions: + name: description: |- - Conditions contain conditions for PDB. The disruption controller sets the DisruptionAllowed condition. The following are known values for the reason field (additional reasons could be added in the future): - SyncFailed: The controller encountered an error and wasn't able to compute - the number of allowed disruptions. Therefore no disruptions are - allowed and the status of the condition will be False. - - InsufficientPods: The number of pods are either at or below the number - required by the PodDisruptionBudget. No disruptions are - allowed and the status of the condition will be False. - - SufficientPods: There are more pods than required by the PodDisruptionBudget. - The condition will be True, and the number of allowed - disruptions are provided by the disruptionsAllowed property. + Name can be used to reference this subrequest in the list of constraints or the list of configurations for the claim. References must use the format
/. + + Must be a DNS label. + type: string + selectors: + description: Selectors define criteria which must be satisfied by a specific + device in order for that device to be considered for this subrequest. + All selectors must be satisfied for a device to be considered. items: - $ref: "#/components/schemas/v1.Condition" + $ref: "#/components/schemas/v1.DeviceSelector" type: array - x-kubernetes-patch-strategy: merge - x-kubernetes-list-type: map - x-kubernetes-list-map-keys: - - type - x-kubernetes-patch-merge-key: type - currentHealthy: - description: current number of healthy pods - format: int32 - type: integer - desiredHealthy: - description: minimum desired number of healthy pods - format: int32 - type: integer - disruptedPods: - additionalProperties: - description: Time is a wrapper around time.Time which supports correct - marshaling to YAML and JSON. Wrappers are provided for many of the - factory methods that the time package offers. - format: date-time - type: string - description: DisruptedPods contains information about pods whose eviction - was processed by the API server eviction subresource handler but has not - yet been observed by the PodDisruptionBudget controller. A pod will be - in this map from the time when the API server processed the eviction request - to the time when the pod is seen by PDB controller as having been marked - for deletion (or after a timeout). The key in the map is the name of the - pod and the value is the time when the API server processed the eviction - request. If the deletion didn't occur and a pod is still there it will - be removed from the list automatically by PodDisruptionBudget controller - after some time. If everything goes smooth this map should be empty for - the most of the time. Large number of entries in the map may indicate - problems with pod deletions. - type: object - disruptionsAllowed: - description: Number of pod disruptions that are currently allowed. - format: int32 - type: integer - expectedPods: - description: total number of pods counted by this disruption budget - format: int32 - type: integer - observedGeneration: - description: Most recent generation observed when updating this PDB status. - DisruptionsAllowed and other status information is valid only if observedGeneration - equals to PDB's object generation. - format: int64 - type: integer - type: object - v1.AggregationRule: - description: AggregationRule describes how to locate ClusterRoles to aggregate - into the ClusterRole - example: - clusterRoleSelectors: - - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - properties: - clusterRoleSelectors: - description: "ClusterRoleSelectors holds a list of selectors which will\ - \ be used to find ClusterRoles and create the rules. If any of the selectors\ - \ match, then the ClusterRole's permissions will be added" + x-kubernetes-list-type: atomic + tolerations: + description: |- + If specified, the request's tolerations. + + Tolerations for NoSchedule are required to allocate a device which has a taint with that effect. The same applies to NoExecute. + + In addition, should any of the allocated devices get tainted with NoExecute after allocation and that effect is not tolerated, then all pods consuming the ResourceClaim get deleted to evict them. The scheduler will not let new pods reserve the claim while it has these tainted devices. Once all pods are evicted, the claim will get deallocated. + + The maximum number of tolerations is 16. + + This is a beta field and requires enabling the DRADeviceTaints feature gate. items: - $ref: "#/components/schemas/v1.LabelSelector" + $ref: "#/components/schemas/v1.DeviceToleration" type: array x-kubernetes-list-type: atomic + required: + - deviceClassName + - name type: object - v1.ClusterRole: - description: "ClusterRole is a cluster level, logical grouping of PolicyRules\ - \ that can be referenced as a unit by a RoleBinding or ClusterRoleBinding." + v1.DeviceTaint: + description: "The device this taint is attached to has the \"effect\" on any\ + \ claim which does not tolerate the taint and, through the claim, to pods\ + \ using the claim." example: - metadata: - generation: 6 - finalizers: - - finalizers - - finalizers - resourceVersion: resourceVersion - annotations: - key: annotations - generateName: generateName - deletionTimestamp: 2000-01-23T04:56:07.000+00:00 - labels: - key: labels - ownerReferences: - - uid: uid - controller: true - apiVersion: apiVersion - kind: kind - name: name - blockOwnerDeletion: true - - uid: uid - controller: true - apiVersion: apiVersion - kind: kind - name: name - blockOwnerDeletion: true - selfLink: selfLink - deletionGracePeriodSeconds: 0 - uid: uid - managedFields: - - apiVersion: apiVersion - fieldsV1: "{}" - manager: manager - subresource: subresource - time: 2000-01-23T04:56:07.000+00:00 - operation: operation - fieldsType: fieldsType - - apiVersion: apiVersion - fieldsV1: "{}" - manager: manager - subresource: subresource - time: 2000-01-23T04:56:07.000+00:00 - operation: operation - fieldsType: fieldsType - creationTimestamp: 2000-01-23T04:56:07.000+00:00 - name: name - namespace: namespace - aggregationRule: - clusterRoleSelectors: - - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - apiVersion: apiVersion - kind: kind - rules: - - resourceNames: - - resourceNames - - resourceNames - resources: - - resources - - resources - verbs: - - verbs - - verbs - apiGroups: - - apiGroups - - apiGroups - nonResourceURLs: - - nonResourceURLs - - nonResourceURLs - - resourceNames: - - resourceNames - - resourceNames - resources: - - resources - - resources - verbs: - - verbs - - verbs - apiGroups: - - apiGroups - - apiGroups - nonResourceURLs: - - nonResourceURLs - - nonResourceURLs + timeAdded: 2000-01-23T04:56:07.000+00:00 + effect: effect + value: value + key: key properties: - aggregationRule: - $ref: "#/components/schemas/v1.AggregationRule" - apiVersion: - description: "APIVersion defines the versioned schema of this representation\ - \ of an object. Servers should convert recognized schemas to the latest\ - \ internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources" + effect: + description: |- + The effect of the taint on claims that do not tolerate the taint and through such claims on the pods using them. + + Valid effects are None, NoSchedule and NoExecute. PreferNoSchedule as used for nodes is not valid here. More effects may get added in the future. Consumers must treat unknown effects like None. type: string - kind: - description: "Kind is a string value representing the REST resource this\ - \ object represents. Servers may infer this from the endpoint the client\ - \ submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds" + key: + description: The taint key to be applied to a device. Must be a label name. type: string - metadata: - $ref: "#/components/schemas/v1.ObjectMeta" - rules: - description: Rules holds all the PolicyRules for this ClusterRole - items: - $ref: "#/components/schemas/v1.PolicyRule" - type: array - x-kubernetes-list-type: atomic + timeAdded: + description: |- + TimeAdded represents the time at which the taint was added or (only in a DeviceTaintRule) the effect was modified. Added automatically during create or update if not set. + + In addition, in a DeviceTaintRule a value provided during an update gets replaced with the current time if the provided value is the same as the old one and the new effect is different. Changing the key and/or value while keeping the effect unchanged is possible and does not update the time stamp because the eviction which uses it is either already started (NoExecute) or not started yet (NoEffect, NoSchedule). + format: date-time + type: string + value: + description: The taint value corresponding to the taint key. Must be a label + value. + type: string + required: + - effect + - key type: object - x-kubernetes-group-version-kind: - - group: rbac.authorization.k8s.io - kind: ClusterRole - version: v1 - x-implements: - - io.kubernetes.client.common.KubernetesObject - v1.ClusterRoleBinding: - description: "ClusterRoleBinding references a ClusterRole, but not contain it.\ - \ It can reference a ClusterRole in the global namespace, and adds who information\ - \ via Subject." + v1.DeviceTaintRule: + description: DeviceTaintRule adds one taint to all devices which match the selector. + This has the same effect as if the taint was specified directly in the ResourceSlice + by the DRA driver. example: metadata: generation: 6 @@ -272078,19 +290522,30 @@ components: namespace: namespace apiVersion: apiVersion kind: kind - subjects: - - apiGroup: apiGroup - kind: kind - name: name - namespace: namespace - - apiGroup: apiGroup - kind: kind - name: name - namespace: namespace - roleRef: - apiGroup: apiGroup - kind: kind - name: name + spec: + taint: + timeAdded: 2000-01-23T04:56:07.000+00:00 + effect: effect + value: value + key: key + deviceSelector: + driver: driver + pool: pool + device: device + status: + conditions: + - reason: reason + lastTransitionTime: 2000-01-23T04:56:07.000+00:00 + message: message + type: type + observedGeneration: 5 + status: status + - reason: reason + lastTransitionTime: 2000-01-23T04:56:07.000+00:00 + message: message + type: type + observedGeneration: 5 + status: status properties: apiVersion: description: "APIVersion defines the versioned schema of this representation\ @@ -272104,25 +290559,21 @@ components: type: string metadata: $ref: "#/components/schemas/v1.ObjectMeta" - roleRef: - $ref: "#/components/schemas/v1.RoleRef" - subjects: - description: Subjects holds references to the objects the role applies to. - items: - $ref: "#/components/schemas/rbac.v1.Subject" - type: array - x-kubernetes-list-type: atomic + spec: + $ref: "#/components/schemas/v1.DeviceTaintRuleSpec" + status: + $ref: "#/components/schemas/v1.DeviceTaintRuleStatus" required: - - roleRef + - spec type: object x-kubernetes-group-version-kind: - - group: rbac.authorization.k8s.io - kind: ClusterRoleBinding + - group: resource.k8s.io + kind: DeviceTaintRule version: v1 x-implements: - io.kubernetes.client.common.KubernetesObject - v1.ClusterRoleBindingList: - description: ClusterRoleBindingList is a collection of ClusterRoleBindings + v1.DeviceTaintRuleList: + description: DeviceTaintRuleList is a collection of DeviceTaintRules. example: metadata: remainingItemCount: 1 @@ -272182,19 +290633,30 @@ components: namespace: namespace apiVersion: apiVersion kind: kind - subjects: - - apiGroup: apiGroup - kind: kind - name: name - namespace: namespace - - apiGroup: apiGroup - kind: kind - name: name - namespace: namespace - roleRef: - apiGroup: apiGroup - kind: kind - name: name + spec: + taint: + timeAdded: 2000-01-23T04:56:07.000+00:00 + effect: effect + value: value + key: key + deviceSelector: + driver: driver + pool: pool + device: device + status: + conditions: + - reason: reason + lastTransitionTime: 2000-01-23T04:56:07.000+00:00 + message: message + type: type + observedGeneration: 5 + status: status + - reason: reason + lastTransitionTime: 2000-01-23T04:56:07.000+00:00 + message: message + type: type + observedGeneration: 5 + status: status - metadata: generation: 6 finalizers: @@ -272243,19 +290705,30 @@ components: namespace: namespace apiVersion: apiVersion kind: kind - subjects: - - apiGroup: apiGroup - kind: kind - name: name - namespace: namespace - - apiGroup: apiGroup - kind: kind - name: name - namespace: namespace - roleRef: - apiGroup: apiGroup - kind: kind - name: name + spec: + taint: + timeAdded: 2000-01-23T04:56:07.000+00:00 + effect: effect + value: value + key: key + deviceSelector: + driver: driver + pool: pool + device: device + status: + conditions: + - reason: reason + lastTransitionTime: 2000-01-23T04:56:07.000+00:00 + message: message + type: type + observedGeneration: 5 + status: status + - reason: reason + lastTransitionTime: 2000-01-23T04:56:07.000+00:00 + message: message + type: type + observedGeneration: 5 + status: status properties: apiVersion: description: "APIVersion defines the versioned schema of this representation\ @@ -272263,9 +290736,9 @@ components: \ internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources" type: string items: - description: Items is a list of ClusterRoleBindings + description: Items is the list of DeviceTaintRules. items: - $ref: "#/components/schemas/v1.ClusterRoleBinding" + $ref: "#/components/schemas/v1.DeviceTaintRule" type: array kind: description: "Kind is a string value representing the REST resource this\ @@ -272278,333 +290751,527 @@ components: - items type: object x-kubernetes-group-version-kind: - - group: rbac.authorization.k8s.io - kind: ClusterRoleBindingList + - group: resource.k8s.io + kind: DeviceTaintRuleList version: v1 x-implements: - io.kubernetes.client.common.KubernetesListObject - v1.ClusterRoleList: - description: ClusterRoleList is a collection of ClusterRoles + v1.DeviceTaintRuleSpec: + description: DeviceTaintRuleSpec specifies the selector and one taint. example: - metadata: - remainingItemCount: 1 - continue: continue - resourceVersion: resourceVersion - shardInfo: - selector: selector - selfLink: selfLink - apiVersion: apiVersion - kind: kind - items: - - metadata: - generation: 6 - finalizers: - - finalizers - - finalizers - resourceVersion: resourceVersion - annotations: - key: annotations - generateName: generateName - deletionTimestamp: 2000-01-23T04:56:07.000+00:00 - labels: - key: labels - ownerReferences: - - uid: uid - controller: true - apiVersion: apiVersion - kind: kind - name: name - blockOwnerDeletion: true - - uid: uid - controller: true - apiVersion: apiVersion - kind: kind - name: name - blockOwnerDeletion: true - selfLink: selfLink - deletionGracePeriodSeconds: 0 - uid: uid - managedFields: - - apiVersion: apiVersion - fieldsV1: "{}" - manager: manager - subresource: subresource - time: 2000-01-23T04:56:07.000+00:00 - operation: operation - fieldsType: fieldsType - - apiVersion: apiVersion - fieldsV1: "{}" - manager: manager - subresource: subresource - time: 2000-01-23T04:56:07.000+00:00 - operation: operation - fieldsType: fieldsType - creationTimestamp: 2000-01-23T04:56:07.000+00:00 - name: name - namespace: namespace - aggregationRule: - clusterRoleSelectors: - - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - apiVersion: apiVersion - kind: kind - rules: - - resourceNames: - - resourceNames - - resourceNames - resources: - - resources - - resources - verbs: - - verbs - - verbs - apiGroups: - - apiGroups - - apiGroups - nonResourceURLs: - - nonResourceURLs - - nonResourceURLs - - resourceNames: - - resourceNames - - resourceNames - resources: - - resources - - resources - verbs: - - verbs - - verbs - apiGroups: - - apiGroups - - apiGroups - nonResourceURLs: - - nonResourceURLs - - nonResourceURLs - - metadata: - generation: 6 - finalizers: - - finalizers - - finalizers - resourceVersion: resourceVersion - annotations: - key: annotations - generateName: generateName - deletionTimestamp: 2000-01-23T04:56:07.000+00:00 - labels: - key: labels - ownerReferences: - - uid: uid - controller: true - apiVersion: apiVersion - kind: kind - name: name - blockOwnerDeletion: true - - uid: uid - controller: true - apiVersion: apiVersion - kind: kind - name: name - blockOwnerDeletion: true - selfLink: selfLink - deletionGracePeriodSeconds: 0 - uid: uid - managedFields: - - apiVersion: apiVersion - fieldsV1: "{}" - manager: manager - subresource: subresource - time: 2000-01-23T04:56:07.000+00:00 - operation: operation - fieldsType: fieldsType - - apiVersion: apiVersion - fieldsV1: "{}" - manager: manager - subresource: subresource - time: 2000-01-23T04:56:07.000+00:00 - operation: operation - fieldsType: fieldsType - creationTimestamp: 2000-01-23T04:56:07.000+00:00 - name: name - namespace: namespace - aggregationRule: - clusterRoleSelectors: - - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - apiVersion: apiVersion - kind: kind - rules: - - resourceNames: - - resourceNames - - resourceNames - resources: - - resources - - resources - verbs: - - verbs - - verbs - apiGroups: - - apiGroups - - apiGroups - nonResourceURLs: - - nonResourceURLs - - nonResourceURLs - - resourceNames: - - resourceNames - - resourceNames - resources: - - resources - - resources - verbs: - - verbs - - verbs - apiGroups: - - apiGroups - - apiGroups - nonResourceURLs: - - nonResourceURLs - - nonResourceURLs + taint: + timeAdded: 2000-01-23T04:56:07.000+00:00 + effect: effect + value: value + key: key + deviceSelector: + driver: driver + pool: pool + device: device properties: - apiVersion: - description: "APIVersion defines the versioned schema of this representation\ - \ of an object. Servers should convert recognized schemas to the latest\ - \ internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources" - type: string - items: - description: Items is a list of ClusterRoles - items: - $ref: "#/components/schemas/v1.ClusterRole" - type: array - kind: - description: "Kind is a string value representing the REST resource this\ - \ object represents. Servers may infer this from the endpoint the client\ - \ submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds" - type: string - metadata: - $ref: "#/components/schemas/v1.ListMeta" + deviceSelector: + $ref: "#/components/schemas/v1.DeviceTaintSelector" + taint: + $ref: "#/components/schemas/v1.DeviceTaint" required: - - items + - taint type: object - x-kubernetes-group-version-kind: - - group: rbac.authorization.k8s.io - kind: ClusterRoleList - version: v1 - x-implements: - - io.kubernetes.client.common.KubernetesListObject - v1.PolicyRule: - description: "PolicyRule holds information that describes a policy rule, but\ - \ does not contain information about who the rule applies to or which namespace\ - \ the rule applies to." + v1.DeviceTaintRuleStatus: + description: DeviceTaintRuleStatus provides information about an on-going pod + eviction. example: - resourceNames: - - resourceNames - - resourceNames - resources: - - resources - - resources - verbs: - - verbs - - verbs - apiGroups: - - apiGroups - - apiGroups - nonResourceURLs: - - nonResourceURLs - - nonResourceURLs + conditions: + - reason: reason + lastTransitionTime: 2000-01-23T04:56:07.000+00:00 + message: message + type: type + observedGeneration: 5 + status: status + - reason: reason + lastTransitionTime: 2000-01-23T04:56:07.000+00:00 + message: message + type: type + observedGeneration: 5 + status: status properties: - apiGroups: - description: "APIGroups is the name of the APIGroup that contains the resources.\ - \ If multiple API groups are specified, any action requested against\ - \ one of the enumerated resources in any API group will be allowed. \"\ - \" represents the core API group and \"*\" represents all API groups." + conditions: + description: |- + Conditions provide information about the state of the DeviceTaintRule and the cluster at some point in time, in a machine-readable and human-readable format. + + The following condition is currently defined as part of this API, more may get added: - Type: EvictionInProgress - Status: True if there are currently pods which need to be evicted, False otherwise + (includes the effects which don't cause eviction). + - Reason: not specified, may change - Message: includes information about number of pending pods and already evicted pods + in a human-readable format, updated periodically, may change + + For `effect: None`, the condition above gets set once for each change to the spec, with the message containing information about what would happen if the effect was `NoExecute`. This feedback can be used to decide whether changing the effect to `NoExecute` will work as intended. It only gets set once to avoid having to constantly update the status. + + Must have 8 or fewer entries. items: - type: string + $ref: "#/components/schemas/v1.Condition" type: array - x-kubernetes-list-type: atomic - nonResourceURLs: - description: "NonResourceURLs is a set of partial urls that a user should\ - \ have access to. *s are allowed, but only as the full, final step in\ - \ the path Since non-resource URLs are not namespaced, this field is only\ - \ applicable for ClusterRoles referenced from a ClusterRoleBinding. Rules\ - \ can either apply to API resources (such as \"pods\" or \"secrets\")\ - \ or non-resource URL paths (such as \"/api\"), but not both." + x-kubernetes-patch-strategy: merge + x-kubernetes-list-type: map + x-kubernetes-list-map-keys: + - type + x-kubernetes-patch-merge-key: type + type: object + v1.DeviceTaintSelector: + description: "DeviceTaintSelector defines which device(s) a DeviceTaintRule\ + \ applies to. The empty selector matches all devices. Without a selector,\ + \ no devices are matched." + example: + driver: driver + pool: pool + device: device + properties: + device: + description: |- + If device is set, only devices with that name are selected. This field corresponds to slice.spec.devices[].name. + + Setting also driver and pool may be required to avoid ambiguity, but is not required. + type: string + driver: + description: "If driver is set, only devices from that driver are selected.\ + \ This fields corresponds to slice.spec.driver." + type: string + pool: + description: |- + If pool is set, only devices in that pool are selected. + + Also setting the driver name may be useful to avoid ambiguity when different drivers use the same pool name, but this is not required because selecting pools from different drivers may also be useful, for example when drivers with node-local devices use the node name as their pool name. + type: string + type: object + v1.DeviceToleration: + description: "The ResourceClaim this DeviceToleration is attached to tolerates\ + \ any taint that matches the triple using the matching\ + \ operator ." + example: + effect: effect + tolerationSeconds: 6 + value: value + key: key + operator: operator + properties: + effect: + description: "Effect indicates the taint effect to match. Empty means match\ + \ all taint effects. When specified, allowed values are NoSchedule and\ + \ NoExecute." + type: string + key: + description: "Key is the taint key that the toleration applies to. Empty\ + \ means match all taint keys. If the key is empty, operator must be Exists;\ + \ this combination means to match all values and all keys. Must be a label\ + \ name." + type: string + operator: + description: "Operator represents a key's relationship to the value. Valid\ + \ operators are Exists and Equal. Defaults to Equal. Exists is equivalent\ + \ to wildcard for value, so that a ResourceClaim can tolerate all taints\ + \ of a particular category." + type: string + tolerationSeconds: + description: "TolerationSeconds represents the period of time the toleration\ + \ (which must be of effect NoExecute, otherwise this field is ignored)\ + \ tolerates the taint. By default, it is not set, which means tolerate\ + \ the taint forever (do not evict). Zero and negative values will be treated\ + \ as 0 (evict immediately) by the system. If larger than zero, the time\ + \ when the pod needs to be evicted is calculated as