aws-sdk-batch 1.83.0 → 1.84.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 654afc632bf18f8dedf03e4ff615f316ae0efe3155596716fc222f619d6193cb
-  data.tar.gz: 5bf3361f366a51789403aedfb2a18a6ec52f8fac83f87a64b9f238bb54e420b2
+  metadata.gz: 8a0613ac3ac932d3b66d0d88a70bfde8e7afdebfbd5e6e7e2d609961334a2c89
+  data.tar.gz: af5e559e54d4b00cc5ee5cbbd18280eae9618f3e77524e1f05723055647d58d1
 SHA512:
-  metadata.gz: ceae264195f2513c9949279fa79df0b1b713f4113a0f93c73d308901a869eaae07b9dc5e4ba0184018860dace375e139f791340e7b325467fe2220c331844796
-  data.tar.gz: dcc23cda6e64b24e5bcb7523afec050aab42a25148738d8190e63a4320be94cdbb6907c9ab3c1e7d3e1de03805209f5304879c91cc6cda4b6c36e2fe6a0a2054
+  metadata.gz: 4b79c8c00c44cf4352593da80c3086ff301c745481b25cccdfb90ce57c97598593ab9c99f27b18e8ed354d1bc3d79dede33a1cd8fee1cc6bc0385c3fe7df0b95
+  data.tar.gz: 69dcb497c172dc0d10df4c03d06db28fb11a3f62ac08ebe35899bbdb69a9447106dbdd7c9cfe920cb954bf39483acbc4dd6b8a23bcabd7747e1662c7077e5f2e

data/CHANGELOG.md

@@ -1,6 +1,11 @@
 Unreleased Changes
 ------------------
 
+1.84.0 (2024-03-27)
+------------------
+
+* Feature - This feature allows AWS Batch to support configuration of imagePullSecrets and allowPrivilegeEscalation for jobs running on EKS
+
 1.83.0 (2024-03-08)
 ------------------
 

data/VERSION

@@ -1 +1 @@
-1.83.0
+1.84.0

data/lib/aws-sdk-batch/client.rb

@@ -1762,6 +1762,8 @@ module Aws::Batch
     #   resp.job_definitions[0].eks_properties.pod_properties.service_account_name #=> String
     #   resp.job_definitions[0].eks_properties.pod_properties.host_network #=> Boolean
     #   resp.job_definitions[0].eks_properties.pod_properties.dns_policy #=> String
+    #   resp.job_definitions[0].eks_properties.pod_properties.image_pull_secrets #=> Array
+    #   resp.job_definitions[0].eks_properties.pod_properties.image_pull_secrets[0].name #=> String
     #   resp.job_definitions[0].eks_properties.pod_properties.containers #=> Array
     #   resp.job_definitions[0].eks_properties.pod_properties.containers[0].name #=> String
     #   resp.job_definitions[0].eks_properties.pod_properties.containers[0].image #=> String
@@ -1784,6 +1786,7 @@ module Aws::Batch
     #   resp.job_definitions[0].eks_properties.pod_properties.containers[0].security_context.run_as_user #=> Integer
     #   resp.job_definitions[0].eks_properties.pod_properties.containers[0].security_context.run_as_group #=> Integer
     #   resp.job_definitions[0].eks_properties.pod_properties.containers[0].security_context.privileged #=> Boolean
+    #   resp.job_definitions[0].eks_properties.pod_properties.containers[0].security_context.allow_privilege_escalation #=> Boolean
     #   resp.job_definitions[0].eks_properties.pod_properties.containers[0].security_context.read_only_root_filesystem #=> Boolean
     #   resp.job_definitions[0].eks_properties.pod_properties.containers[0].security_context.run_as_non_root #=> Boolean
     #   resp.job_definitions[0].eks_properties.pod_properties.init_containers #=> Array
@@ -1808,6 +1811,7 @@ module Aws::Batch
     #   resp.job_definitions[0].eks_properties.pod_properties.init_containers[0].security_context.run_as_user #=> Integer
     #   resp.job_definitions[0].eks_properties.pod_properties.init_containers[0].security_context.run_as_group #=> Integer
     #   resp.job_definitions[0].eks_properties.pod_properties.init_containers[0].security_context.privileged #=> Boolean
+    #   resp.job_definitions[0].eks_properties.pod_properties.init_containers[0].security_context.allow_privilege_escalation #=> Boolean
     #   resp.job_definitions[0].eks_properties.pod_properties.init_containers[0].security_context.read_only_root_filesystem #=> Boolean
     #   resp.job_definitions[0].eks_properties.pod_properties.init_containers[0].security_context.run_as_non_root #=> Boolean
     #   resp.job_definitions[0].eks_properties.pod_properties.volumes #=> Array
@@ -2266,6 +2270,8 @@ module Aws::Batch
     #   resp.jobs[0].eks_properties.pod_properties.service_account_name #=> String
     #   resp.jobs[0].eks_properties.pod_properties.host_network #=> Boolean
     #   resp.jobs[0].eks_properties.pod_properties.dns_policy #=> String
+    #   resp.jobs[0].eks_properties.pod_properties.image_pull_secrets #=> Array
+    #   resp.jobs[0].eks_properties.pod_properties.image_pull_secrets[0].name #=> String
     #   resp.jobs[0].eks_properties.pod_properties.containers #=> Array
     #   resp.jobs[0].eks_properties.pod_properties.containers[0].name #=> String
     #   resp.jobs[0].eks_properties.pod_properties.containers[0].image #=> String
@@ -2290,6 +2296,7 @@ module Aws::Batch
     #   resp.jobs[0].eks_properties.pod_properties.containers[0].security_context.run_as_user #=> Integer
     #   resp.jobs[0].eks_properties.pod_properties.containers[0].security_context.run_as_group #=> Integer
     #   resp.jobs[0].eks_properties.pod_properties.containers[0].security_context.privileged #=> Boolean
+    #   resp.jobs[0].eks_properties.pod_properties.containers[0].security_context.allow_privilege_escalation #=> Boolean
     #   resp.jobs[0].eks_properties.pod_properties.containers[0].security_context.read_only_root_filesystem #=> Boolean
     #   resp.jobs[0].eks_properties.pod_properties.containers[0].security_context.run_as_non_root #=> Boolean
     #   resp.jobs[0].eks_properties.pod_properties.init_containers #=> Array
@@ -2316,6 +2323,7 @@ module Aws::Batch
     #   resp.jobs[0].eks_properties.pod_properties.init_containers[0].security_context.run_as_user #=> Integer
     #   resp.jobs[0].eks_properties.pod_properties.init_containers[0].security_context.run_as_group #=> Integer
     #   resp.jobs[0].eks_properties.pod_properties.init_containers[0].security_context.privileged #=> Boolean
+    #   resp.jobs[0].eks_properties.pod_properties.init_containers[0].security_context.allow_privilege_escalation #=> Boolean
     #   resp.jobs[0].eks_properties.pod_properties.init_containers[0].security_context.read_only_root_filesystem #=> Boolean
     #   resp.jobs[0].eks_properties.pod_properties.init_containers[0].security_context.run_as_non_root #=> Boolean
     #   resp.jobs[0].eks_properties.pod_properties.volumes #=> Array
@@ -3370,6 +3378,11 @@ module Aws::Batch
     #         service_account_name: "String",
     #         host_network: false,
     #         dns_policy: "String",
+    #         image_pull_secrets: [
+    #           {
+    #             name: "String", # required
+    #           },
+    #         ],
     #         containers: [
     #           {
     #             name: "String",
@@ -3402,6 +3415,7 @@ module Aws::Batch
     #               run_as_user: 1,
     #               run_as_group: 1,
     #               privileged: false,
+    #               allow_privilege_escalation: false,
     #               read_only_root_filesystem: false,
     #               run_as_non_root: false,
     #             },
@@ -3439,6 +3453,7 @@ module Aws::Batch
     #               run_as_user: 1,
     #               run_as_group: 1,
     #               privileged: false,
+    #               allow_privilege_escalation: false,
     #               read_only_root_filesystem: false,
     #               run_as_non_root: false,
     #             },
@@ -4465,7 +4480,7 @@ module Aws::Batch
         params: params,
         config: config)
       context[:gem_name] = 'aws-sdk-batch'
-      context[:gem_version] = '1.83.0'
+      context[:gem_version] = '1.84.0'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-batch/client_api.rb

@@ -122,6 +122,8 @@ module Aws::Batch
     Float = Shapes::FloatShape.new(name: 'Float')
     Host = Shapes::StructureShape.new(name: 'Host')
     ImageIdOverride = Shapes::StringShape.new(name: 'ImageIdOverride')
+    ImagePullSecret = Shapes::StructureShape.new(name: 'ImagePullSecret')
+    ImagePullSecrets = Shapes::ListShape.new(name: 'ImagePullSecrets')
     ImageType = Shapes::StringShape.new(name: 'ImageType')
     Integer = Shapes::IntegerShape.new(name: 'Integer')
     JQState = Shapes::StringShape.new(name: 'JQState')
@@ -637,6 +639,7 @@ module Aws::Batch
     EksContainerSecurityContext.add_member(:run_as_user, Shapes::ShapeRef.new(shape: Long, location_name: "runAsUser"))
     EksContainerSecurityContext.add_member(:run_as_group, Shapes::ShapeRef.new(shape: Long, location_name: "runAsGroup"))
     EksContainerSecurityContext.add_member(:privileged, Shapes::ShapeRef.new(shape: Boolean, location_name: "privileged"))
+    EksContainerSecurityContext.add_member(:allow_privilege_escalation, Shapes::ShapeRef.new(shape: Boolean, location_name: "allowPrivilegeEscalation"))
     EksContainerSecurityContext.add_member(:read_only_root_filesystem, Shapes::ShapeRef.new(shape: Boolean, location_name: "readOnlyRootFilesystem"))
     EksContainerSecurityContext.add_member(:run_as_non_root, Shapes::ShapeRef.new(shape: Boolean, location_name: "runAsNonRoot"))
     EksContainerSecurityContext.struct_class = Types::EksContainerSecurityContext
@@ -669,6 +672,7 @@ module Aws::Batch
     EksPodProperties.add_member(:service_account_name, Shapes::ShapeRef.new(shape: String, location_name: "serviceAccountName"))
     EksPodProperties.add_member(:host_network, Shapes::ShapeRef.new(shape: Boolean, location_name: "hostNetwork"))
     EksPodProperties.add_member(:dns_policy, Shapes::ShapeRef.new(shape: String, location_name: "dnsPolicy"))
+    EksPodProperties.add_member(:image_pull_secrets, Shapes::ShapeRef.new(shape: ImagePullSecrets, location_name: "imagePullSecrets"))
     EksPodProperties.add_member(:containers, Shapes::ShapeRef.new(shape: EksContainers, location_name: "containers"))
     EksPodProperties.add_member(:init_containers, Shapes::ShapeRef.new(shape: EksContainers, location_name: "initContainers"))
     EksPodProperties.add_member(:volumes, Shapes::ShapeRef.new(shape: EksVolumes, location_name: "volumes"))
@@ -679,6 +683,7 @@ module Aws::Batch
     EksPodPropertiesDetail.add_member(:service_account_name, Shapes::ShapeRef.new(shape: String, location_name: "serviceAccountName"))
     EksPodPropertiesDetail.add_member(:host_network, Shapes::ShapeRef.new(shape: Boolean, location_name: "hostNetwork"))
     EksPodPropertiesDetail.add_member(:dns_policy, Shapes::ShapeRef.new(shape: String, location_name: "dnsPolicy"))
+    EksPodPropertiesDetail.add_member(:image_pull_secrets, Shapes::ShapeRef.new(shape: ImagePullSecrets, location_name: "imagePullSecrets"))
     EksPodPropertiesDetail.add_member(:containers, Shapes::ShapeRef.new(shape: EksContainerDetails, location_name: "containers"))
     EksPodPropertiesDetail.add_member(:init_containers, Shapes::ShapeRef.new(shape: EksContainerDetails, location_name: "initContainers"))
     EksPodPropertiesDetail.add_member(:volumes, Shapes::ShapeRef.new(shape: EksVolumes, location_name: "volumes"))
@@ -741,6 +746,11 @@ module Aws::Batch
     Host.add_member(:source_path, Shapes::ShapeRef.new(shape: String, location_name: "sourcePath"))
     Host.struct_class = Types::Host
 
+    ImagePullSecret.add_member(:name, Shapes::ShapeRef.new(shape: String, required: true, location_name: "name"))
+    ImagePullSecret.struct_class = Types::ImagePullSecret
+
+    ImagePullSecrets.member = Shapes::ShapeRef.new(shape: ImagePullSecret)
+
     JobDefinition.add_member(:job_definition_name, Shapes::ShapeRef.new(shape: String, required: true, location_name: "jobDefinitionName"))
     JobDefinition.add_member(:job_definition_arn, Shapes::ShapeRef.new(shape: String, required: true, location_name: "jobDefinitionArn"))
     JobDefinition.add_member(:revision, Shapes::ShapeRef.new(shape: Integer, required: true, location_name: "revision"))

data/lib/aws-sdk-batch/types.rb

@@ -3817,6 +3817,12 @@ module Aws::Batch
     #   [1]: https://kubernetes.io/docs/concepts/security/pod-security-policy/#privileged
     #   @return [Boolean]
     #
+    # @!attribute [rw] allow_privilege_escalation
+    #   Whether or not a container or a Kubernetes pod is allowed to gain
+    #   more privileges than its parent process. The default value is
+    #   `false`.
+    #   @return [Boolean]
+    #
     # @!attribute [rw] read_only_root_filesystem
     #   When this parameter is `true`, the container is given read-only
     #   access to its root file system. The default value is `false`. This
@@ -3847,6 +3853,7 @@ module Aws::Batch
       :run_as_user,
       :run_as_group,
       :privileged,
+      :allow_privilege_escalation,
       :read_only_root_filesystem,
       :run_as_non_root)
       SENSITIVE = []
@@ -4025,6 +4032,15 @@ module Aws::Batch
     #   [1]: https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-s-dns-policy
     #   @return [String]
     #
+    # @!attribute [rw] image_pull_secrets
+    #   References a Kubernetes secret resource. This object must start and
+    #   end with an alphanumeric character, is required to be lowercase, can
+    #   include periods (.) and hyphens (-), and can't contain more than
+    #   253 characters.
+    #
+    #   `ImagePullSecret$name` is required when this object is used.
+    #   @return [Array<Types::ImagePullSecret>]
+    #
     # @!attribute [rw] containers
     #   The properties of the container that's used on the Amazon EKS pod.
     #   @return [Array<Types::EksContainer>]
@@ -4077,6 +4093,7 @@ module Aws::Batch
       :service_account_name,
       :host_network,
       :dns_policy,
+      :image_pull_secrets,
       :containers,
       :init_containers,
       :volumes,
@@ -4142,6 +4159,10 @@ module Aws::Batch
     #   [4]: https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-s-dns-policy
     #   @return [String]
     #
+    # @!attribute [rw] image_pull_secrets
+    #   Displays the reference pointer to the Kubernetes secret resource.
+    #   @return [Array<Types::ImagePullSecret>]
+    #
     # @!attribute [rw] containers
     #   The properties of the container that's used on the Amazon EKS pod.
     #   @return [Array<Types::EksContainerDetail>]
@@ -4192,6 +4213,7 @@ module Aws::Batch
       :service_account_name,
       :host_network,
       :dns_policy,
+      :image_pull_secrets,
       :containers,
       :init_containers,
       :volumes,
@@ -4540,6 +4562,23 @@ module Aws::Batch
       include Aws::Structure
     end
 
+    # References a Kubernetes configuration resource that holds a list of
+    # secrets. These secrets help to gain access to pull an image from a
+    # private registry.
+    #
+    # @!attribute [rw] name
+    #   Provides a unique identifier for the `ImagePullSecret`. This object
+    #   is required when `EksPodProperties$imagePullSecrets` is used.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/batch-2016-08-10/ImagePullSecret AWS API Documentation
+    #
+    class ImagePullSecret < Struct.new(
+      :name)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # An object that represents an Batch job definition.
     #
     # @!attribute [rw] job_definition_name

data/lib/aws-sdk-batch.rb

@@ -52,6 +52,6 @@ require_relative 'aws-sdk-batch/customizations'
 # @!group service
 module Aws::Batch
 
-  GEM_VERSION = '1.83.0'
+  GEM_VERSION = '1.84.0'
 
 end

data/sig/client.rbs

@@ -704,6 +704,11 @@ module Aws
                                          service_account_name: ::String?,
                                          host_network: bool?,
                                          dns_policy: ::String?,
+                                         image_pull_secrets: Array[
+                                           {
+                                             name: ::String
+                                           },
+                                         ]?,
                                          containers: Array[
                                            {
                                              name: ::String?,
@@ -732,6 +737,7 @@ module Aws
                                                run_as_user: ::Integer?,
                                                run_as_group: ::Integer?,
                                                privileged: bool?,
+                                               allow_privilege_escalation: bool?,
                                                read_only_root_filesystem: bool?,
                                                run_as_non_root: bool?
                                              }?
@@ -765,6 +771,7 @@ module Aws
                                                run_as_user: ::Integer?,
                                                run_as_group: ::Integer?,
                                                privileged: bool?,
+                                               allow_privilege_escalation: bool?,
                                                read_only_root_filesystem: bool?,
                                                run_as_non_root: bool?
                                              }?

data/sig/types.rbs

@@ -493,6 +493,7 @@ module Aws::Batch
       attr_accessor run_as_user: ::Integer
       attr_accessor run_as_group: ::Integer
       attr_accessor privileged: bool
+      attr_accessor allow_privilege_escalation: bool
       attr_accessor read_only_root_filesystem: bool
       attr_accessor run_as_non_root: bool
       SENSITIVE: []
@@ -525,6 +526,7 @@ module Aws::Batch
       attr_accessor service_account_name: ::String
       attr_accessor host_network: bool
       attr_accessor dns_policy: ::String
+      attr_accessor image_pull_secrets: ::Array[Types::ImagePullSecret]
       attr_accessor containers: ::Array[Types::EksContainer]
       attr_accessor init_containers: ::Array[Types::EksContainer]
       attr_accessor volumes: ::Array[Types::EksVolume]
@@ -537,6 +539,7 @@ module Aws::Batch
       attr_accessor service_account_name: ::String
       attr_accessor host_network: bool
       attr_accessor dns_policy: ::String
+      attr_accessor image_pull_secrets: ::Array[Types::ImagePullSecret]
       attr_accessor containers: ::Array[Types::EksContainerDetail]
       attr_accessor init_containers: ::Array[Types::EksContainerDetail]
       attr_accessor volumes: ::Array[Types::EksVolume]
@@ -613,6 +616,11 @@ module Aws::Batch
       SENSITIVE: []
     end
 
+    class ImagePullSecret
+      attr_accessor name: ::String
+      SENSITIVE: []
+    end
+
     class JobDefinition
       attr_accessor job_definition_name: ::String
       attr_accessor job_definition_arn: ::String

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: aws-sdk-batch
 version: !ruby/object:Gem::Version
-  version: 1.83.0
+  version: 1.84.0
 platform: ruby
 authors:
 - Amazon Web Services
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2024-03-08 00:00:00.000000000 Z
+date: 2024-03-27 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: aws-sdk-core