@harnessio/react-chaos-manager-client 1.80.0 → 1.80.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/chaos-manager/src/services/index.d.ts +2 -1
- package/dist/chaos-manager/src/services/schemas/K8sIoApiCoreV1EnvVar.d.ts +5 -4
- package/dist/chaos-manager/src/services/schemas/RiskReportInfo.d.ts +6 -0
- package/dist/chaos-manager/src/services/schemas/RiskScan.d.ts +2 -0
- package/dist/chaos-manager/src/services/schemas/RiskScanStatus.d.ts +1 -1
- package/dist/chaos-manager/src/services/schemas/RiskscansRiskScanResponse.d.ts +2 -0
- package/dist/chaos-manager/src/services/schemas/V1AwsElasticBlockStoreVolumeSource.d.ts +4 -5
- package/dist/chaos-manager/src/services/schemas/V1AzureDiskVolumeSource.d.ts +6 -6
- package/dist/chaos-manager/src/services/schemas/V1AzureFileVolumeSource.d.ts +3 -3
- package/dist/chaos-manager/src/services/schemas/V1CephFsVolumeSource.d.ts +6 -6
- package/dist/chaos-manager/src/services/schemas/V1CinderVolumeSource.d.ts +4 -4
- package/dist/chaos-manager/src/services/schemas/V1ConfigMapProjection.d.ts +2 -2
- package/dist/chaos-manager/src/services/schemas/V1ConfigMapVolumeSource.d.ts +3 -3
- package/dist/chaos-manager/src/services/schemas/V1CsiVolumeSource.d.ts +5 -5
- package/dist/chaos-manager/src/services/schemas/V1EmptyDirVolumeSource.d.ts +2 -2
- package/dist/chaos-manager/src/services/schemas/V1FcVolumeSource.d.ts +5 -5
- package/dist/chaos-manager/src/services/schemas/V1FlexVolumeSource.d.ts +5 -5
- package/dist/chaos-manager/src/services/schemas/V1FlockerVolumeSource.d.ts +2 -2
- package/dist/chaos-manager/src/services/schemas/V1GcePersistentDiskVolumeSource.d.ts +4 -4
- package/dist/chaos-manager/src/services/schemas/V1GitRepoVolumeSource.d.ts +3 -3
- package/dist/chaos-manager/src/services/schemas/V1GlusterfsVolumeSource.d.ts +3 -3
- package/dist/chaos-manager/src/services/schemas/V1HostPathVolumeSource.d.ts +2 -2
- package/dist/chaos-manager/src/services/schemas/V1IpFamilyPolicy.d.ts +1 -0
- package/dist/chaos-manager/src/services/schemas/V1IpFamilyPolicy.js +4 -0
- package/dist/chaos-manager/src/services/schemas/V1IscsiVolumeSource.d.ts +11 -11
- package/dist/chaos-manager/src/services/schemas/V1KeyToPath.d.ts +3 -3
- package/dist/chaos-manager/src/services/schemas/V1ManagedFieldsEntry.d.ts +15 -1
- package/dist/chaos-manager/src/services/schemas/V1NfsVolumeSource.d.ts +3 -4
- package/dist/chaos-manager/src/services/schemas/V1ObjectMeta.d.ts +2 -18
- package/dist/chaos-manager/src/services/schemas/V1OwnerReference.d.ts +2 -0
- package/dist/chaos-manager/src/services/schemas/V1PersistentVolumeAccessMode.d.ts +1 -1
- package/dist/chaos-manager/src/services/schemas/V1PersistentVolumeClaimSpec.d.ts +32 -9
- package/dist/chaos-manager/src/services/schemas/V1PersistentVolumeClaimVolumeSource.d.ts +2 -2
- package/dist/chaos-manager/src/services/schemas/V1PhotonPersistentDiskVolumeSource.d.ts +2 -2
- package/dist/chaos-manager/src/services/schemas/V1PodSecurityContext.d.ts +9 -0
- package/dist/chaos-manager/src/services/schemas/V1PortworxVolumeSource.d.ts +3 -3
- package/dist/chaos-manager/src/services/schemas/V1ProjectedVolumeSource.d.ts +2 -2
- package/dist/chaos-manager/src/services/schemas/V1QuobyteVolumeSource.d.ts +6 -6
- package/dist/chaos-manager/src/services/schemas/V1RbdVolumeSource.d.ts +8 -8
- package/dist/chaos-manager/src/services/schemas/V1ScaleIoVolumeSource.d.ts +10 -10
- package/dist/chaos-manager/src/services/schemas/V1SecretProjection.d.ts +2 -2
- package/dist/chaos-manager/src/services/schemas/V1SecretVolumeSource.d.ts +4 -4
- package/dist/chaos-manager/src/services/schemas/V1SecurityContext.d.ts +10 -0
- package/dist/chaos-manager/src/services/schemas/V1ServiceAccountTokenProjection.d.ts +3 -3
- package/dist/chaos-manager/src/services/schemas/V1ServicePort.d.ts +1 -3
- package/dist/chaos-manager/src/services/schemas/V1ServiceSpec.d.ts +55 -65
- package/dist/chaos-manager/src/services/schemas/V1StorageOsVolumeSource.d.ts +5 -5
- package/dist/chaos-manager/src/services/schemas/V1Volume.d.ts +30 -33
- package/dist/chaos-manager/src/services/schemas/V1VolumeProjection.d.ts +4 -4
- package/dist/chaos-manager/src/services/schemas/V1VsphereVirtualDiskVolumeSource.d.ts +4 -4
- package/dist/chaos-manager/src/services/schemas/V1WindowsSecurityContextOptions.d.ts +11 -0
- package/package.json +1 -1
- package/dist/chaos-manager/src/services/schemas/V1IpFamilyPolicyType.d.ts +0 -1
- /package/dist/chaos-manager/src/services/schemas/{V1IpFamilyPolicyType.js → RiskReportInfo.js} +0 -0
|
@@ -1,10 +1,10 @@
|
|
|
1
1
|
export interface V1KeyToPath {
|
|
2
2
|
/**
|
|
3
|
-
*
|
|
3
|
+
* key is the key to project.
|
|
4
4
|
*/
|
|
5
5
|
key?: string;
|
|
6
6
|
/**
|
|
7
|
-
* Optional: mode bits used to set permissions on this file.
|
|
7
|
+
* mode is Optional: mode bits used to set permissions on this file.
|
|
8
8
|
* Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511.
|
|
9
9
|
* YAML accepts both octal and decimal values, JSON requires decimal values for mode bits.
|
|
10
10
|
* If not specified, the volume defaultMode will be used.
|
|
@@ -14,7 +14,7 @@ export interface V1KeyToPath {
|
|
|
14
14
|
*/
|
|
15
15
|
mode?: number;
|
|
16
16
|
/**
|
|
17
|
-
*
|
|
17
|
+
* path is the relative path of the file to map the key to.
|
|
18
18
|
* May not be an absolute path.
|
|
19
19
|
* May not contain the path element '..'.
|
|
20
20
|
* May not start with the string '..'.
|
|
@@ -28,7 +28,21 @@ export interface V1ManagedFieldsEntry {
|
|
|
28
28
|
*/
|
|
29
29
|
operation?: V1ManagedFieldsOperationType;
|
|
30
30
|
/**
|
|
31
|
-
*
|
|
31
|
+
* Subresource is the name of the subresource used to update that object, or
|
|
32
|
+
* empty string if the object was updated through the main resource. The
|
|
33
|
+
* value of this field is used to distinguish between managers, even if they
|
|
34
|
+
* share the same name. For example, a status update will be distinct from a
|
|
35
|
+
* regular update using the same manager name.
|
|
36
|
+
* Note that the APIVersion field is not related to the Subresource field and
|
|
37
|
+
* it always corresponds to the version of the main resource.
|
|
38
|
+
*/
|
|
39
|
+
subresource?: string;
|
|
40
|
+
/**
|
|
41
|
+
* Time is the timestamp of when the ManagedFields entry was added. The
|
|
42
|
+
* timestamp will also be updated if a field is added, the manager
|
|
43
|
+
* changes any of the owned fields value or removes a field. The
|
|
44
|
+
* timestamp does not update when a field is removed from the entry
|
|
45
|
+
* because another manager took it over.
|
|
32
46
|
* +optional
|
|
33
47
|
*/
|
|
34
48
|
time?: string;
|
|
@@ -1,19 +1,18 @@
|
|
|
1
1
|
export interface V1NfsVolumeSource {
|
|
2
2
|
/**
|
|
3
|
-
*
|
|
3
|
+
* path that is exported by the NFS server.
|
|
4
4
|
* More info: https://kubernetes.io/docs/concepts/storage/volumes#nfs
|
|
5
5
|
*/
|
|
6
6
|
path?: string;
|
|
7
7
|
/**
|
|
8
|
-
*
|
|
9
|
-
* the NFS export to be mounted with read-only permissions.
|
|
8
|
+
* readOnly here will force the NFS export to be mounted with read-only permissions.
|
|
10
9
|
* Defaults to false.
|
|
11
10
|
* More info: https://kubernetes.io/docs/concepts/storage/volumes#nfs
|
|
12
11
|
* +optional
|
|
13
12
|
*/
|
|
14
13
|
readOnly?: boolean;
|
|
15
14
|
/**
|
|
16
|
-
*
|
|
15
|
+
* server is the hostname or IP address of the NFS server.
|
|
17
16
|
* More info: https://kubernetes.io/docs/concepts/storage/volumes#nfs
|
|
18
17
|
*/
|
|
19
18
|
server?: string;
|
|
@@ -11,13 +11,6 @@ export interface V1ObjectMeta {
|
|
|
11
11
|
annotations?: {
|
|
12
12
|
[key: string]: string;
|
|
13
13
|
};
|
|
14
|
-
/**
|
|
15
|
-
* The name of the cluster which the object belongs to.
|
|
16
|
-
* This is used to distinguish resources with same name and namespace in different clusters.
|
|
17
|
-
* This field is not set anywhere right now and apiserver is going to ignore it if set in create or update request.
|
|
18
|
-
* +optional
|
|
19
|
-
*/
|
|
20
|
-
clusterName?: string;
|
|
21
14
|
/**
|
|
22
15
|
* CreationTimestamp is a timestamp representing the server time when this object was
|
|
23
16
|
* created. It is not guaranteed to be set in happens-before order across separate operations.
|
|
@@ -87,10 +80,7 @@ export interface V1ObjectMeta {
|
|
|
87
80
|
* and may be truncated by the length of the suffix required to make the value
|
|
88
81
|
* unique on the server.
|
|
89
82
|
*
|
|
90
|
-
* If this field is specified and the generated name exists, the server will
|
|
91
|
-
* NOT return a 409 - instead, it will either return 201 Created or 500 with Reason
|
|
92
|
-
* ServerTimeout indicating a unique name could not be found in the time allotted, and the client
|
|
93
|
-
* should retry (optionally after the time indicated in the Retry-After header).
|
|
83
|
+
* If this field is specified and the generated name exists, the server will return a 409.
|
|
94
84
|
*
|
|
95
85
|
* Applied only if Name is not specified.
|
|
96
86
|
* More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#idempotency
|
|
@@ -172,13 +162,7 @@ export interface V1ObjectMeta {
|
|
|
172
162
|
*/
|
|
173
163
|
resourceVersion?: string;
|
|
174
164
|
/**
|
|
175
|
-
*
|
|
176
|
-
* Populated by the system.
|
|
177
|
-
* Read-only.
|
|
178
|
-
*
|
|
179
|
-
* DEPRECATED
|
|
180
|
-
* Kubernetes will stop propagating this field in 1.20 release and the field is planned
|
|
181
|
-
* to be removed in 1.21 release.
|
|
165
|
+
* Deprecated: selfLink is a legacy read-only field that is no longer populated by the system.
|
|
182
166
|
* +optional
|
|
183
167
|
*/
|
|
184
168
|
selfLink?: string;
|
|
@@ -7,6 +7,8 @@ export interface V1OwnerReference {
|
|
|
7
7
|
* If true, AND if the owner has the "foregroundDeletion" finalizer, then
|
|
8
8
|
* the owner cannot be deleted from the key-value store until this
|
|
9
9
|
* reference is removed.
|
|
10
|
+
* See https://kubernetes.io/docs/concepts/architecture/garbage-collection/#foreground-deletion
|
|
11
|
+
* for how the garbage collector interacts with this field and enforces the foreground deletion.
|
|
10
12
|
* Defaults to false.
|
|
11
13
|
* To set this field, a user needs "delete" permission of the owner,
|
|
12
14
|
* otherwise 422 (Unprocessable Entity) will be returned.
|
|
@@ -1 +1 @@
|
|
|
1
|
-
export type V1PersistentVolumeAccessMode = 'ReadOnlyMany' | 'ReadWriteMany' | 'ReadWriteOnce';
|
|
1
|
+
export type V1PersistentVolumeAccessMode = 'ReadOnlyMany' | 'ReadWriteMany' | 'ReadWriteOnce' | 'ReadWriteOncePod';
|
|
@@ -5,36 +5,59 @@ import type { V1LabelSelector } from '../schemas/V1LabelSelector';
|
|
|
5
5
|
import type { V1PersistentVolumeMode } from '../schemas/V1PersistentVolumeMode';
|
|
6
6
|
export interface V1PersistentVolumeClaimSpec {
|
|
7
7
|
/**
|
|
8
|
-
*
|
|
8
|
+
* accessModes contains the desired access modes the volume should have.
|
|
9
9
|
* More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#access-modes-1
|
|
10
10
|
* +optional
|
|
11
11
|
*/
|
|
12
12
|
accessModes?: V1PersistentVolumeAccessMode[];
|
|
13
13
|
/**
|
|
14
|
-
*
|
|
14
|
+
* dataSource field can be used to specify either:
|
|
15
15
|
* * An existing VolumeSnapshot object (snapshot.storage.k8s.io/VolumeSnapshot)
|
|
16
16
|
* * An existing PVC (PersistentVolumeClaim)
|
|
17
|
-
* * An existing custom resource that implements data population (Alpha)
|
|
18
|
-
* In order to use custom resource types that implement data population,
|
|
19
|
-
* the AnyVolumeDataSource feature gate must be enabled.
|
|
20
17
|
* If the provisioner or an external controller can support the specified data source,
|
|
21
18
|
* it will create a new volume based on the contents of the specified data source.
|
|
19
|
+
* If the AnyVolumeDataSource feature gate is enabled, this field will always have
|
|
20
|
+
* the same contents as the DataSourceRef field.
|
|
22
21
|
* +optional
|
|
23
22
|
*/
|
|
24
23
|
dataSource?: V1TypedLocalObjectReference;
|
|
25
24
|
/**
|
|
26
|
-
*
|
|
25
|
+
* dataSourceRef specifies the object from which to populate the volume with data, if a non-empty
|
|
26
|
+
* volume is desired. This may be any local object from a non-empty API group (non
|
|
27
|
+
* core object) or a PersistentVolumeClaim object.
|
|
28
|
+
* When this field is specified, volume binding will only succeed if the type of
|
|
29
|
+
* the specified object matches some installed volume populator or dynamic
|
|
30
|
+
* provisioner.
|
|
31
|
+
* This field will replace the functionality of the DataSource field and as such
|
|
32
|
+
* if both fields are non-empty, they must have the same value. For backwards
|
|
33
|
+
* compatibility, both fields (DataSource and DataSourceRef) will be set to the same
|
|
34
|
+
* value automatically if one of them is empty and the other is non-empty.
|
|
35
|
+
* There are two important differences between DataSource and DataSourceRef:
|
|
36
|
+
* * While DataSource only allows two specific types of objects, DataSourceRef
|
|
37
|
+
* allows any non-core object, as well as PersistentVolumeClaim objects.
|
|
38
|
+
* * While DataSource ignores disallowed values (dropping them), DataSourceRef
|
|
39
|
+
* preserves all values, and generates an error if a disallowed value is
|
|
40
|
+
* specified.
|
|
41
|
+
* (Beta) Using this field requires the AnyVolumeDataSource feature gate to be enabled.
|
|
42
|
+
* +optional
|
|
43
|
+
*/
|
|
44
|
+
dataSourceRef?: V1TypedLocalObjectReference;
|
|
45
|
+
/**
|
|
46
|
+
* resources represents the minimum resources the volume should have.
|
|
47
|
+
* If RecoverVolumeExpansionFailure feature is enabled users are allowed to specify resource requirements
|
|
48
|
+
* that are lower than previous value but must still be higher than capacity recorded in the
|
|
49
|
+
* status field of the claim.
|
|
27
50
|
* More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#resources
|
|
28
51
|
* +optional
|
|
29
52
|
*/
|
|
30
53
|
resources?: V1ResourceRequirements;
|
|
31
54
|
/**
|
|
32
|
-
*
|
|
55
|
+
* selector is a label query over volumes to consider for binding.
|
|
33
56
|
* +optional
|
|
34
57
|
*/
|
|
35
58
|
selector?: V1LabelSelector;
|
|
36
59
|
/**
|
|
37
|
-
*
|
|
60
|
+
* storageClassName is the name of the StorageClass required by the claim.
|
|
38
61
|
* More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#class-1
|
|
39
62
|
* +optional
|
|
40
63
|
*/
|
|
@@ -46,7 +69,7 @@ export interface V1PersistentVolumeClaimSpec {
|
|
|
46
69
|
*/
|
|
47
70
|
volumeMode?: V1PersistentVolumeMode;
|
|
48
71
|
/**
|
|
49
|
-
*
|
|
72
|
+
* volumeName is the binding reference to the PersistentVolume backing this claim.
|
|
50
73
|
* +optional
|
|
51
74
|
*/
|
|
52
75
|
volumeName?: string;
|
|
@@ -1,11 +1,11 @@
|
|
|
1
1
|
export interface V1PersistentVolumeClaimVolumeSource {
|
|
2
2
|
/**
|
|
3
|
-
*
|
|
3
|
+
* claimName is the name of a PersistentVolumeClaim in the same namespace as the pod using this volume.
|
|
4
4
|
* More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#persistentvolumeclaims
|
|
5
5
|
*/
|
|
6
6
|
claimName?: string;
|
|
7
7
|
/**
|
|
8
|
-
* Will force the ReadOnly setting in VolumeMounts.
|
|
8
|
+
* readOnly Will force the ReadOnly setting in VolumeMounts.
|
|
9
9
|
* Default false.
|
|
10
10
|
* +optional
|
|
11
11
|
*/
|
|
@@ -1,12 +1,12 @@
|
|
|
1
1
|
export interface V1PhotonPersistentDiskVolumeSource {
|
|
2
2
|
/**
|
|
3
|
-
*
|
|
3
|
+
* fsType is the filesystem type to mount.
|
|
4
4
|
* Must be a filesystem type supported by the host operating system.
|
|
5
5
|
* Ex. "ext4", "xfs", "ntfs". Implicitly inferred to be "ext4" if unspecified.
|
|
6
6
|
*/
|
|
7
7
|
fsType?: string;
|
|
8
8
|
/**
|
|
9
|
-
* ID that identifies Photon Controller persistent disk
|
|
9
|
+
* pdID is the ID that identifies Photon Controller persistent disk
|
|
10
10
|
*/
|
|
11
11
|
pdID?: string;
|
|
12
12
|
}
|
|
@@ -14,6 +14,7 @@ export interface V1PodSecurityContext {
|
|
|
14
14
|
* 3. The permission bits are OR'd with rw-rw----
|
|
15
15
|
*
|
|
16
16
|
* If unset, the Kubelet will not modify the ownership and permissions of any volume.
|
|
17
|
+
* Note that this field cannot be set when spec.os.name is windows.
|
|
17
18
|
* +optional
|
|
18
19
|
*/
|
|
19
20
|
fsGroup?: number;
|
|
@@ -24,6 +25,7 @@ export interface V1PodSecurityContext {
|
|
|
24
25
|
* It will have no effect on ephemeral volume types such as: secret, configmaps
|
|
25
26
|
* and emptydir.
|
|
26
27
|
* Valid values are "OnRootMismatch" and "Always". If not specified, "Always" is used.
|
|
28
|
+
* Note that this field cannot be set when spec.os.name is windows.
|
|
27
29
|
* +optional
|
|
28
30
|
*/
|
|
29
31
|
fsGroupChangePolicy?: V1PodFsGroupChangePolicy;
|
|
@@ -33,6 +35,7 @@ export interface V1PodSecurityContext {
|
|
|
33
35
|
* May also be set in SecurityContext. If set in both SecurityContext and
|
|
34
36
|
* PodSecurityContext, the value specified in SecurityContext takes precedence
|
|
35
37
|
* for that container.
|
|
38
|
+
* Note that this field cannot be set when spec.os.name is windows.
|
|
36
39
|
* +optional
|
|
37
40
|
*/
|
|
38
41
|
runAsGroup?: number;
|
|
@@ -52,6 +55,7 @@ export interface V1PodSecurityContext {
|
|
|
52
55
|
* May also be set in SecurityContext. If set in both SecurityContext and
|
|
53
56
|
* PodSecurityContext, the value specified in SecurityContext takes precedence
|
|
54
57
|
* for that container.
|
|
58
|
+
* Note that this field cannot be set when spec.os.name is windows.
|
|
55
59
|
* +optional
|
|
56
60
|
*/
|
|
57
61
|
runAsUser?: number;
|
|
@@ -61,11 +65,13 @@ export interface V1PodSecurityContext {
|
|
|
61
65
|
* container. May also be set in SecurityContext. If set in
|
|
62
66
|
* both SecurityContext and PodSecurityContext, the value specified in SecurityContext
|
|
63
67
|
* takes precedence for that container.
|
|
68
|
+
* Note that this field cannot be set when spec.os.name is windows.
|
|
64
69
|
* +optional
|
|
65
70
|
*/
|
|
66
71
|
seLinuxOptions?: V1SeLinuxOptions;
|
|
67
72
|
/**
|
|
68
73
|
* The seccomp options to use by the containers in this pod.
|
|
74
|
+
* Note that this field cannot be set when spec.os.name is windows.
|
|
69
75
|
* +optional
|
|
70
76
|
*/
|
|
71
77
|
seccompProfile?: V1SeccompProfile;
|
|
@@ -73,12 +79,14 @@ export interface V1PodSecurityContext {
|
|
|
73
79
|
* A list of groups applied to the first process run in each container, in addition
|
|
74
80
|
* to the container's primary GID. If unspecified, no groups will be added to
|
|
75
81
|
* any container.
|
|
82
|
+
* Note that this field cannot be set when spec.os.name is windows.
|
|
76
83
|
* +optional
|
|
77
84
|
*/
|
|
78
85
|
supplementalGroups?: number[];
|
|
79
86
|
/**
|
|
80
87
|
* Sysctls hold a list of namespaced sysctls used for the pod. Pods with unsupported
|
|
81
88
|
* sysctls (by the container runtime) might fail to launch.
|
|
89
|
+
* Note that this field cannot be set when spec.os.name is windows.
|
|
82
90
|
* +optional
|
|
83
91
|
*/
|
|
84
92
|
sysctls?: V1Sysctl[];
|
|
@@ -86,6 +94,7 @@ export interface V1PodSecurityContext {
|
|
|
86
94
|
* The Windows specific settings applied to all containers.
|
|
87
95
|
* If unspecified, the options within a container's SecurityContext will be used.
|
|
88
96
|
* If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.
|
|
97
|
+
* Note that this field cannot be set when spec.os.name is linux.
|
|
89
98
|
* +optional
|
|
90
99
|
*/
|
|
91
100
|
windowsOptions?: V1WindowsSecurityContextOptions;
|
|
@@ -1,18 +1,18 @@
|
|
|
1
1
|
export interface V1PortworxVolumeSource {
|
|
2
2
|
/**
|
|
3
|
-
*
|
|
3
|
+
* fSType represents the filesystem type to mount
|
|
4
4
|
* Must be a filesystem type supported by the host operating system.
|
|
5
5
|
* Ex. "ext4", "xfs". Implicitly inferred to be "ext4" if unspecified.
|
|
6
6
|
*/
|
|
7
7
|
fsType?: string;
|
|
8
8
|
/**
|
|
9
|
-
*
|
|
9
|
+
* readOnly defaults to false (read/write). ReadOnly here will force
|
|
10
10
|
* the ReadOnly setting in VolumeMounts.
|
|
11
11
|
* +optional
|
|
12
12
|
*/
|
|
13
13
|
readOnly?: boolean;
|
|
14
14
|
/**
|
|
15
|
-
*
|
|
15
|
+
* volumeID uniquely identifies a Portworx volume
|
|
16
16
|
*/
|
|
17
17
|
volumeID?: string;
|
|
18
18
|
}
|
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
import type { V1VolumeProjection } from '../schemas/V1VolumeProjection';
|
|
2
2
|
export interface V1ProjectedVolumeSource {
|
|
3
3
|
/**
|
|
4
|
-
*
|
|
4
|
+
* defaultMode are the mode bits used to set permissions on created files by default.
|
|
5
5
|
* Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511.
|
|
6
6
|
* YAML accepts both octal and decimal values, JSON requires decimal values for mode bits.
|
|
7
7
|
* Directories within the path are not affected by this setting.
|
|
@@ -11,7 +11,7 @@ export interface V1ProjectedVolumeSource {
|
|
|
11
11
|
*/
|
|
12
12
|
defaultMode?: number;
|
|
13
13
|
/**
|
|
14
|
-
* list of volume projections
|
|
14
|
+
* sources is the list of volume projections
|
|
15
15
|
* +optional
|
|
16
16
|
*/
|
|
17
17
|
sources?: V1VolumeProjection[];
|
|
@@ -1,36 +1,36 @@
|
|
|
1
1
|
export interface V1QuobyteVolumeSource {
|
|
2
2
|
/**
|
|
3
|
-
*
|
|
3
|
+
* group to map volume access to
|
|
4
4
|
* Default is no group
|
|
5
5
|
* +optional
|
|
6
6
|
*/
|
|
7
7
|
group?: string;
|
|
8
8
|
/**
|
|
9
|
-
*
|
|
9
|
+
* readOnly here will force the Quobyte volume to be mounted with read-only permissions.
|
|
10
10
|
* Defaults to false.
|
|
11
11
|
* +optional
|
|
12
12
|
*/
|
|
13
13
|
readOnly?: boolean;
|
|
14
14
|
/**
|
|
15
|
-
*
|
|
15
|
+
* registry represents a single or multiple Quobyte Registry services
|
|
16
16
|
* specified as a string as host:port pair (multiple entries are separated with commas)
|
|
17
17
|
* which acts as the central registry for volumes
|
|
18
18
|
*/
|
|
19
19
|
registry?: string;
|
|
20
20
|
/**
|
|
21
|
-
*
|
|
21
|
+
* tenant owning the given Quobyte volume in the Backend
|
|
22
22
|
* Used with dynamically provisioned Quobyte volumes, value is set by the plugin
|
|
23
23
|
* +optional
|
|
24
24
|
*/
|
|
25
25
|
tenant?: string;
|
|
26
26
|
/**
|
|
27
|
-
*
|
|
27
|
+
* user to map volume access to
|
|
28
28
|
* Defaults to serivceaccount user
|
|
29
29
|
* +optional
|
|
30
30
|
*/
|
|
31
31
|
user?: string;
|
|
32
32
|
/**
|
|
33
|
-
*
|
|
33
|
+
* volume is a string that references an already created Quobyte volume by name.
|
|
34
34
|
*/
|
|
35
35
|
volume?: string;
|
|
36
36
|
}
|
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
import type { V1LocalObjectReference } from '../schemas/V1LocalObjectReference';
|
|
2
2
|
export interface V1RbdVolumeSource {
|
|
3
3
|
/**
|
|
4
|
-
*
|
|
4
|
+
* fsType is the filesystem type of the volume that you want to mount.
|
|
5
5
|
* Tip: Ensure that the filesystem type is supported by the host operating system.
|
|
6
6
|
* Examples: "ext4", "xfs", "ntfs". Implicitly inferred to be "ext4" if unspecified.
|
|
7
7
|
* More info: https://kubernetes.io/docs/concepts/storage/volumes#rbd
|
|
@@ -10,38 +10,38 @@ export interface V1RbdVolumeSource {
|
|
|
10
10
|
*/
|
|
11
11
|
fsType?: string;
|
|
12
12
|
/**
|
|
13
|
-
*
|
|
13
|
+
* image is the rados image name.
|
|
14
14
|
* More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it
|
|
15
15
|
*/
|
|
16
16
|
image?: string;
|
|
17
17
|
/**
|
|
18
|
-
*
|
|
18
|
+
* keyring is the path to key ring for RBDUser.
|
|
19
19
|
* Default is /etc/ceph/keyring.
|
|
20
20
|
* More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it
|
|
21
21
|
* +optional
|
|
22
22
|
*/
|
|
23
23
|
keyring?: string;
|
|
24
24
|
/**
|
|
25
|
-
*
|
|
25
|
+
* monitors is a collection of Ceph monitors.
|
|
26
26
|
* More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it
|
|
27
27
|
*/
|
|
28
28
|
monitors?: string[];
|
|
29
29
|
/**
|
|
30
|
-
*
|
|
30
|
+
* pool is the rados pool name.
|
|
31
31
|
* Default is rbd.
|
|
32
32
|
* More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it
|
|
33
33
|
* +optional
|
|
34
34
|
*/
|
|
35
35
|
pool?: string;
|
|
36
36
|
/**
|
|
37
|
-
*
|
|
37
|
+
* readOnly here will force the ReadOnly setting in VolumeMounts.
|
|
38
38
|
* Defaults to false.
|
|
39
39
|
* More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it
|
|
40
40
|
* +optional
|
|
41
41
|
*/
|
|
42
42
|
readOnly?: boolean;
|
|
43
43
|
/**
|
|
44
|
-
*
|
|
44
|
+
* secretRef is name of the authentication secret for RBDUser. If provided
|
|
45
45
|
* overrides keyring.
|
|
46
46
|
* Default is nil.
|
|
47
47
|
* More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it
|
|
@@ -49,7 +49,7 @@ export interface V1RbdVolumeSource {
|
|
|
49
49
|
*/
|
|
50
50
|
secretRef?: V1LocalObjectReference;
|
|
51
51
|
/**
|
|
52
|
-
*
|
|
52
|
+
* user is the rados user name.
|
|
53
53
|
* Default is admin.
|
|
54
54
|
* More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it
|
|
55
55
|
* +optional
|
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
import type { V1LocalObjectReference } from '../schemas/V1LocalObjectReference';
|
|
2
2
|
export interface V1ScaleIoVolumeSource {
|
|
3
3
|
/**
|
|
4
|
-
*
|
|
4
|
+
* fsType is the filesystem type to mount.
|
|
5
5
|
* Must be a filesystem type supported by the host operating system.
|
|
6
6
|
* Ex. "ext4", "xfs", "ntfs".
|
|
7
7
|
* Default is "xfs".
|
|
@@ -9,47 +9,47 @@ export interface V1ScaleIoVolumeSource {
|
|
|
9
9
|
*/
|
|
10
10
|
fsType?: string;
|
|
11
11
|
/**
|
|
12
|
-
*
|
|
12
|
+
* gateway is the host address of the ScaleIO API Gateway.
|
|
13
13
|
*/
|
|
14
14
|
gateway?: string;
|
|
15
15
|
/**
|
|
16
|
-
*
|
|
16
|
+
* protectionDomain is the name of the ScaleIO Protection Domain for the configured storage.
|
|
17
17
|
* +optional
|
|
18
18
|
*/
|
|
19
19
|
protectionDomain?: string;
|
|
20
20
|
/**
|
|
21
|
-
* Defaults to false (read/write). ReadOnly here will force
|
|
21
|
+
* readOnly Defaults to false (read/write). ReadOnly here will force
|
|
22
22
|
* the ReadOnly setting in VolumeMounts.
|
|
23
23
|
* +optional
|
|
24
24
|
*/
|
|
25
25
|
readOnly?: boolean;
|
|
26
26
|
/**
|
|
27
|
-
*
|
|
27
|
+
* secretRef references to the secret for ScaleIO user and other
|
|
28
28
|
* sensitive information. If this is not provided, Login operation will fail.
|
|
29
29
|
*/
|
|
30
30
|
secretRef?: V1LocalObjectReference;
|
|
31
31
|
/**
|
|
32
|
-
* Flag
|
|
32
|
+
* sslEnabled Flag enable/disable SSL communication with Gateway, default false
|
|
33
33
|
* +optional
|
|
34
34
|
*/
|
|
35
35
|
sslEnabled?: boolean;
|
|
36
36
|
/**
|
|
37
|
-
*
|
|
37
|
+
* storageMode indicates whether the storage for a volume should be ThickProvisioned or ThinProvisioned.
|
|
38
38
|
* Default is ThinProvisioned.
|
|
39
39
|
* +optional
|
|
40
40
|
*/
|
|
41
41
|
storageMode?: string;
|
|
42
42
|
/**
|
|
43
|
-
*
|
|
43
|
+
* storagePool is the ScaleIO Storage Pool associated with the protection domain.
|
|
44
44
|
* +optional
|
|
45
45
|
*/
|
|
46
46
|
storagePool?: string;
|
|
47
47
|
/**
|
|
48
|
-
*
|
|
48
|
+
* system is the name of the storage system as configured in ScaleIO.
|
|
49
49
|
*/
|
|
50
50
|
system?: string;
|
|
51
51
|
/**
|
|
52
|
-
*
|
|
52
|
+
* volumeName is the name of a volume already created in the ScaleIO system
|
|
53
53
|
* that is associated with this volume source.
|
|
54
54
|
*/
|
|
55
55
|
volumeName?: string;
|
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
import type { V1KeyToPath } from '../schemas/V1KeyToPath';
|
|
2
2
|
export interface V1SecretProjection {
|
|
3
3
|
/**
|
|
4
|
-
*
|
|
4
|
+
* items if unspecified, each key-value pair in the Data field of the referenced
|
|
5
5
|
* Secret will be projected into the volume as a file whose name is the
|
|
6
6
|
* key and content is the value. If specified, the listed keys will be
|
|
7
7
|
* projected into the specified paths, and unlisted keys will not be
|
|
@@ -19,7 +19,7 @@ export interface V1SecretProjection {
|
|
|
19
19
|
*/
|
|
20
20
|
name?: string;
|
|
21
21
|
/**
|
|
22
|
-
*
|
|
22
|
+
* optional field specify whether the Secret or its key must be defined
|
|
23
23
|
* +optional
|
|
24
24
|
*/
|
|
25
25
|
optional?: boolean;
|
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
import type { V1KeyToPath } from '../schemas/V1KeyToPath';
|
|
2
2
|
export interface V1SecretVolumeSource {
|
|
3
3
|
/**
|
|
4
|
-
* Optional: mode bits used to set permissions on created files by default.
|
|
4
|
+
* defaultMode is Optional: mode bits used to set permissions on created files by default.
|
|
5
5
|
* Must be an octal value between 0000 and 0777 or a decimal value between 0 and 511.
|
|
6
6
|
* YAML accepts both octal and decimal values, JSON requires decimal values
|
|
7
7
|
* for mode bits. Defaults to 0644.
|
|
@@ -12,7 +12,7 @@ export interface V1SecretVolumeSource {
|
|
|
12
12
|
*/
|
|
13
13
|
defaultMode?: number;
|
|
14
14
|
/**
|
|
15
|
-
* If unspecified, each key-value pair in the Data field of the referenced
|
|
15
|
+
* items If unspecified, each key-value pair in the Data field of the referenced
|
|
16
16
|
* Secret will be projected into the volume as a file whose name is the
|
|
17
17
|
* key and content is the value. If specified, the listed keys will be
|
|
18
18
|
* projected into the specified paths, and unlisted keys will not be
|
|
@@ -23,12 +23,12 @@ export interface V1SecretVolumeSource {
|
|
|
23
23
|
*/
|
|
24
24
|
items?: V1KeyToPath[];
|
|
25
25
|
/**
|
|
26
|
-
*
|
|
26
|
+
* optional field specify whether the Secret or its keys must be defined
|
|
27
27
|
* +optional
|
|
28
28
|
*/
|
|
29
29
|
optional?: boolean;
|
|
30
30
|
/**
|
|
31
|
-
*
|
|
31
|
+
* secretName is the name of the secret in the pod's namespace to use.
|
|
32
32
|
* More info: https://kubernetes.io/docs/concepts/storage/volumes#secret
|
|
33
33
|
* +optional
|
|
34
34
|
*/
|
|
@@ -11,12 +11,14 @@ export interface V1SecurityContext {
|
|
|
11
11
|
* AllowPrivilegeEscalation is true always when the container is:
|
|
12
12
|
* 1) run as Privileged
|
|
13
13
|
* 2) has CAP_SYS_ADMIN
|
|
14
|
+
* Note that this field cannot be set when spec.os.name is windows.
|
|
14
15
|
* +optional
|
|
15
16
|
*/
|
|
16
17
|
allowPrivilegeEscalation?: boolean;
|
|
17
18
|
/**
|
|
18
19
|
* The capabilities to add/drop when running containers.
|
|
19
20
|
* Defaults to the default set of capabilities granted by the container runtime.
|
|
21
|
+
* Note that this field cannot be set when spec.os.name is windows.
|
|
20
22
|
* +optional
|
|
21
23
|
*/
|
|
22
24
|
capabilities?: V1Capabilities;
|
|
@@ -24,6 +26,7 @@ export interface V1SecurityContext {
|
|
|
24
26
|
* Run container in privileged mode.
|
|
25
27
|
* Processes in privileged containers are essentially equivalent to root on the host.
|
|
26
28
|
* Defaults to false.
|
|
29
|
+
* Note that this field cannot be set when spec.os.name is windows.
|
|
27
30
|
* +optional
|
|
28
31
|
*/
|
|
29
32
|
privileged?: boolean;
|
|
@@ -32,12 +35,14 @@ export interface V1SecurityContext {
|
|
|
32
35
|
* The default is DefaultProcMount which uses the container runtime defaults for
|
|
33
36
|
* readonly paths and masked paths.
|
|
34
37
|
* This requires the ProcMountType feature flag to be enabled.
|
|
38
|
+
* Note that this field cannot be set when spec.os.name is windows.
|
|
35
39
|
* +optional
|
|
36
40
|
*/
|
|
37
41
|
procMount?: V1ProcMountType;
|
|
38
42
|
/**
|
|
39
43
|
* Whether this container has a read-only root filesystem.
|
|
40
44
|
* Default is false.
|
|
45
|
+
* Note that this field cannot be set when spec.os.name is windows.
|
|
41
46
|
* +optional
|
|
42
47
|
*/
|
|
43
48
|
readOnlyRootFilesystem?: boolean;
|
|
@@ -46,6 +51,7 @@ export interface V1SecurityContext {
|
|
|
46
51
|
* Uses runtime default if unset.
|
|
47
52
|
* May also be set in PodSecurityContext. If set in both SecurityContext and
|
|
48
53
|
* PodSecurityContext, the value specified in SecurityContext takes precedence.
|
|
54
|
+
* Note that this field cannot be set when spec.os.name is windows.
|
|
49
55
|
* +optional
|
|
50
56
|
*/
|
|
51
57
|
runAsGroup?: number;
|
|
@@ -64,6 +70,7 @@ export interface V1SecurityContext {
|
|
|
64
70
|
* Defaults to user specified in image metadata if unspecified.
|
|
65
71
|
* May also be set in PodSecurityContext. If set in both SecurityContext and
|
|
66
72
|
* PodSecurityContext, the value specified in SecurityContext takes precedence.
|
|
73
|
+
* Note that this field cannot be set when spec.os.name is windows.
|
|
67
74
|
* +optional
|
|
68
75
|
*/
|
|
69
76
|
runAsUser?: number;
|
|
@@ -72,6 +79,7 @@ export interface V1SecurityContext {
|
|
|
72
79
|
* If unspecified, the container runtime will allocate a random SELinux context for each
|
|
73
80
|
* container. May also be set in PodSecurityContext. If set in both SecurityContext and
|
|
74
81
|
* PodSecurityContext, the value specified in SecurityContext takes precedence.
|
|
82
|
+
* Note that this field cannot be set when spec.os.name is windows.
|
|
75
83
|
* +optional
|
|
76
84
|
*/
|
|
77
85
|
seLinuxOptions?: V1SeLinuxOptions;
|
|
@@ -79,6 +87,7 @@ export interface V1SecurityContext {
|
|
|
79
87
|
* The seccomp options to use by this container. If seccomp options are
|
|
80
88
|
* provided at both the pod & container level, the container options
|
|
81
89
|
* override the pod options.
|
|
90
|
+
* Note that this field cannot be set when spec.os.name is windows.
|
|
82
91
|
* +optional
|
|
83
92
|
*/
|
|
84
93
|
seccompProfile?: V1SeccompProfile;
|
|
@@ -86,6 +95,7 @@ export interface V1SecurityContext {
|
|
|
86
95
|
* The Windows specific settings applied to all containers.
|
|
87
96
|
* If unspecified, the options from the PodSecurityContext will be used.
|
|
88
97
|
* If set in both SecurityContext and PodSecurityContext, the value specified in SecurityContext takes precedence.
|
|
98
|
+
* Note that this field cannot be set when spec.os.name is linux.
|
|
89
99
|
* +optional
|
|
90
100
|
*/
|
|
91
101
|
windowsOptions?: V1WindowsSecurityContextOptions;
|