@bluedynamics/cdk8s-plone 0.1.28 → 0.1.30

package/.jsii

@@ -279,7 +279,7 @@
         },
         "locationInModule": {
           "filename": "src/plone.ts",
-          "line": 324
+          "line": 398
         },
         "parameters": [
           {
@@ -306,7 +306,7 @@
       "kind": "class",
       "locationInModule": {
         "filename": "src/plone.ts",
-        "line": 301
+        "line": 375
       },
       "name": "Plone",
       "properties": [
@@ -319,7 +319,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/plone.ts",
-            "line": 306
+            "line": 380
           },
           "name": "backendServiceName",
           "type": {
@@ -334,7 +334,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/plone.ts",
-            "line": 322
+            "line": 396
           },
           "name": "siteId",
           "type": {
@@ -349,7 +349,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/plone.ts",
-            "line": 317
+            "line": 391
           },
           "name": "variant",
           "type": {
@@ -365,7 +365,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/plone.ts",
-            "line": 312
+            "line": 386
           },
           "name": "frontendServiceName",
           "optional": true,
@@ -388,7 +388,7 @@
       "kind": "interface",
       "locationInModule": {
         "filename": "src/plone.ts",
-        "line": 15
+        "line": 81
       },
       "name": "PloneBaseOptions",
       "properties": [
@@ -403,7 +403,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/plone.ts",
-            "line": 166
+            "line": 232
           },
           "name": "annotations",
           "optional": true,
@@ -427,7 +427,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/plone.ts",
-            "line": 84
+            "line": 150
           },
           "name": "environment",
           "optional": true,
@@ -446,7 +446,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/plone.ts",
-            "line": 21
+            "line": 87
           },
           "name": "image",
           "optional": true,
@@ -464,7 +464,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/plone.ts",
-            "line": 27
+            "line": 93
           },
           "name": "imagePullPolicy",
           "optional": true,
@@ -483,7 +483,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/plone.ts",
-            "line": 56
+            "line": 122
           },
           "name": "limitCpu",
           "optional": true,
@@ -502,7 +502,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/plone.ts",
-            "line": 63
+            "line": 129
           },
           "name": "limitMemory",
           "optional": true,
@@ -521,7 +521,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/plone.ts",
-            "line": 129
+            "line": 195
           },
           "name": "livenessEnabled",
           "optional": true,
@@ -539,7 +539,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/plone.ts",
-            "line": 159
+            "line": 225
           },
           "name": "livenessFailureThreshold",
           "optional": true,
@@ -557,7 +557,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/plone.ts",
-            "line": 135
+            "line": 201
           },
           "name": "livenessInitialDelaySeconds",
           "optional": true,
@@ -575,7 +575,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/plone.ts",
-            "line": 147
+            "line": 213
           },
           "name": "livenessPeriodSeconds",
           "optional": true,
@@ -593,7 +593,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/plone.ts",
-            "line": 153
+            "line": 219
           },
           "name": "livenessSuccessThreshold",
           "optional": true,
@@ -611,7 +611,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/plone.ts",
-            "line": 141
+            "line": 207
           },
           "name": "livenessTimeoutSeconds",
           "optional": true,
@@ -630,7 +630,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/plone.ts",
-            "line": 41
+            "line": 107
           },
           "name": "maxUnavailable",
           "optional": true,
@@ -658,7 +658,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/plone.ts",
-            "line": 204
+            "line": 270
           },
           "name": "metricsPath",
           "optional": true,
@@ -677,7 +677,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/plone.ts",
-            "line": 197
+            "line": 263
           },
           "name": "metricsPort",
           "optional": true,
@@ -705,7 +705,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/plone.ts",
-            "line": 49
+            "line": 115
           },
           "name": "minAvailable",
           "optional": true,
@@ -734,7 +734,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/plone.ts",
-            "line": 212
+            "line": 278
           },
           "name": "nodeSelector",
           "optional": true,
@@ -759,7 +759,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/plone.ts",
-            "line": 174
+            "line": 240
           },
           "name": "podAnnotations",
           "optional": true,
@@ -783,7 +783,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/plone.ts",
-            "line": 91
+            "line": 157
           },
           "name": "readinessEnabled",
           "optional": true,
@@ -801,7 +801,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/plone.ts",
-            "line": 121
+            "line": 187
           },
           "name": "readinessFailureThreshold",
           "optional": true,
@@ -819,7 +819,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/plone.ts",
-            "line": 97
+            "line": 163
           },
           "name": "readinessInitialDelaySeconds",
           "optional": true,
@@ -837,7 +837,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/plone.ts",
-            "line": 109
+            "line": 175
           },
           "name": "readinessPeriodSeconds",
           "optional": true,
@@ -855,7 +855,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/plone.ts",
-            "line": 115
+            "line": 181
           },
           "name": "readinessSuccessThreshold",
           "optional": true,
@@ -873,7 +873,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/plone.ts",
-            "line": 103
+            "line": 169
           },
           "name": "readinessTimeoutSeconds",
           "optional": true,
@@ -891,7 +891,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/plone.ts",
-            "line": 33
+            "line": 99
           },
           "name": "replicas",
           "optional": true,
@@ -910,7 +910,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/plone.ts",
-            "line": 70
+            "line": 136
           },
           "name": "requestCpu",
           "optional": true,
@@ -929,7 +929,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/plone.ts",
-            "line": 77
+            "line": 143
           },
           "name": "requestMemory",
           "optional": true,
@@ -937,6 +937,26 @@
             "primitive": "string"
           }
         },
+        {
+          "abstract": true,
+          "docs": {
+            "default": "- no security context",
+            "example": "{ capabilities: { add: ['SYS_PTRACE'] } }",
+            "remarks": "Use to set capabilities, run as non-root, read-only filesystem, etc.",
+            "stability": "stable",
+            "summary": "Security context for the container."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/plone.ts",
+            "line": 286
+          },
+          "name": "securityContext",
+          "optional": true,
+          "type": {
+            "fqn": "@bluedynamics/cdk8s-plone.PloneSecurityContext"
+          }
+        },
         {
           "abstract": true,
           "docs": {
@@ -949,7 +969,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/plone.ts",
-            "line": 182
+            "line": 248
           },
           "name": "serviceAnnotations",
           "optional": true,
@@ -973,7 +993,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/plone.ts",
-            "line": 190
+            "line": 256
           },
           "name": "servicemonitor",
           "optional": true,
@@ -984,6 +1004,70 @@
       ],
       "symbolId": "src/plone:PloneBaseOptions"
     },
+    "@bluedynamics/cdk8s-plone.PloneCapabilities": {
+      "assembly": "@bluedynamics/cdk8s-plone",
+      "datatype": true,
+      "docs": {
+        "stability": "stable",
+        "summary": "Linux capabilities to add or drop on a container."
+      },
+      "fqn": "@bluedynamics/cdk8s-plone.PloneCapabilities",
+      "kind": "interface",
+      "locationInModule": {
+        "filename": "src/plone.ts",
+        "line": 13
+      },
+      "name": "PloneCapabilities",
+      "properties": [
+        {
+          "abstract": true,
+          "docs": {
+            "default": "- no capabilities added",
+            "stability": "stable",
+            "summary": "Capabilities to add (e.g. 'SYS_PTRACE', 'NET_ADMIN')."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/plone.ts",
+            "line": 18
+          },
+          "name": "add",
+          "optional": true,
+          "type": {
+            "collection": {
+              "elementtype": {
+                "primitive": "string"
+              },
+              "kind": "array"
+            }
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "default": "- no capabilities dropped",
+            "stability": "stable",
+            "summary": "Capabilities to drop (e.g. 'ALL', 'NET_RAW')."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/plone.ts",
+            "line": 24
+          },
+          "name": "drop",
+          "optional": true,
+          "type": {
+            "collection": {
+              "elementtype": {
+                "primitive": "string"
+              },
+              "kind": "array"
+            }
+          }
+        }
+      ],
+      "symbolId": "src/plone:PloneCapabilities"
+    },
     "@bluedynamics/cdk8s-plone.PloneHttpcache": {
       "assembly": "@bluedynamics/cdk8s-plone",
       "base": "constructs.Construct",
@@ -1366,7 +1450,7 @@
       "kind": "interface",
       "locationInModule": {
         "filename": "src/plone.ts",
-        "line": 234
+        "line": 308
       },
       "name": "PloneOptions",
       "properties": [
@@ -1380,7 +1464,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/plone.ts",
-            "line": 259
+            "line": 333
           },
           "name": "backend",
           "optional": true,
@@ -1399,7 +1483,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/plone.ts",
-            "line": 266
+            "line": 340
           },
           "name": "frontend",
           "optional": true,
@@ -1419,7 +1503,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/plone.ts",
-            "line": 274
+            "line": 348
           },
           "name": "imagePullSecrets",
           "optional": true,
@@ -1443,7 +1527,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/plone.ts",
-            "line": 247
+            "line": 321
           },
           "name": "siteId",
           "optional": true,
@@ -1461,7 +1545,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/plone.ts",
-            "line": 253
+            "line": 327
           },
           "name": "variant",
           "optional": true,
@@ -1480,7 +1564,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/plone.ts",
-            "line": 240
+            "line": 314
           },
           "name": "version",
           "optional": true,
@@ -1491,6 +1575,152 @@
       ],
       "symbolId": "src/plone:PloneOptions"
     },
+    "@bluedynamics/cdk8s-plone.PloneSecurityContext": {
+      "assembly": "@bluedynamics/cdk8s-plone",
+      "datatype": true,
+      "docs": {
+        "remarks": "Controls privilege and access settings.",
+        "stability": "stable",
+        "summary": "Security context for a Plone container."
+      },
+      "fqn": "@bluedynamics/cdk8s-plone.PloneSecurityContext",
+      "kind": "interface",
+      "locationInModule": {
+        "filename": "src/plone.ts",
+        "line": 31
+      },
+      "name": "PloneSecurityContext",
+      "properties": [
+        {
+          "abstract": true,
+          "docs": {
+            "default": "- undefined",
+            "stability": "stable",
+            "summary": "Allow privilege escalation for the container process."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/plone.ts",
+            "line": 67
+          },
+          "name": "allowPrivilegeEscalation",
+          "optional": true,
+          "type": {
+            "primitive": "boolean"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "default": "- no capability changes",
+            "example": "{ add: ['SYS_PTRACE'] }",
+            "stability": "stable",
+            "summary": "Linux capabilities to add or drop."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/plone.ts",
+            "line": 37
+          },
+          "name": "capabilities",
+          "optional": true,
+          "type": {
+            "fqn": "@bluedynamics/cdk8s-plone.PloneCapabilities"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "default": "- undefined",
+            "stability": "stable",
+            "summary": "Run the container in privileged mode."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/plone.ts",
+            "line": 73
+          },
+          "name": "privileged",
+          "optional": true,
+          "type": {
+            "primitive": "boolean"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "default": "- undefined",
+            "stability": "stable",
+            "summary": "Mount the root filesystem as read-only."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/plone.ts",
+            "line": 61
+          },
+          "name": "readOnlyRootFilesystem",
+          "optional": true,
+          "type": {
+            "primitive": "boolean"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "default": "- container default",
+            "stability": "stable",
+            "summary": "Run the container as a specific group ID."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/plone.ts",
+            "line": 49
+          },
+          "name": "runAsGroup",
+          "optional": true,
+          "type": {
+            "primitive": "number"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "default": "- undefined",
+            "stability": "stable",
+            "summary": "Require the container to run as non-root."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/plone.ts",
+            "line": 55
+          },
+          "name": "runAsNonRoot",
+          "optional": true,
+          "type": {
+            "primitive": "boolean"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "default": "- container default",
+            "stability": "stable",
+            "summary": "Run the container as a specific user ID."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/plone.ts",
+            "line": 43
+          },
+          "name": "runAsUser",
+          "optional": true,
+          "type": {
+            "primitive": "number"
+          }
+        }
+      ],
+      "symbolId": "src/plone:PloneSecurityContext"
+    },
     "@bluedynamics/cdk8s-plone.PloneVariant": {
       "assembly": "@bluedynamics/cdk8s-plone",
       "docs": {
@@ -1501,7 +1731,7 @@
       "kind": "enum",
       "locationInModule": {
         "filename": "src/plone.ts",
-        "line": 217
+        "line": 291
       },
       "members": [
         {
@@ -2431,6 +2661,6 @@
       "symbolId": "src/vinylcache:VinylCacheToleration"
     }
   },
-  "version": "0.1.28",
-  "fingerprint": "bZ+Xd/+EDtyskE0MYgnVHD/7pQ06zIDKEp9k1EGarQM="
+  "version": "0.1.30",
+  "fingerprint": "/cf1QfInFt8/uNcVNwuYZBnwHBL9lnsbGiDggT63ZLg="
 }