@intentius/chant-lexicon-k8s 0.13.0 → 0.14.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/generated/index.d.ts +14 -0
- package/dist/generated/index.d.ts.map +1 -1
- package/dist/integrity.json +4 -4
- package/dist/manifest.json +1 -1
- package/dist/meta.json +112 -14
- package/dist/spec/fetch.d.ts +1 -1
- package/dist/types/index.d.ts +251 -71
- package/package.json +2 -2
- package/src/generated/index.d.ts +251 -71
- package/src/generated/index.ts +14 -0
- package/src/generated/lexicon-k8s.json +112 -14
- package/src/spec/fetch.ts +1 -1
package/dist/types/index.d.ts
CHANGED
|
@@ -253,6 +253,30 @@ export declare class ClusterRoleList {
|
|
|
253
253
|
readonly uid: string;
|
|
254
254
|
}
|
|
255
255
|
|
|
256
|
+
export declare class ClusterTrustBundle {
|
|
257
|
+
constructor(props: {
|
|
258
|
+
/** spec contains the signer (if any) and trust anchors. */
|
|
259
|
+
spec: Record<string, unknown>;
|
|
260
|
+
/** metadata contains the object metadata. */
|
|
261
|
+
metadata?: ObjectMeta;
|
|
262
|
+
});
|
|
263
|
+
readonly name: string;
|
|
264
|
+
readonly namespace: string;
|
|
265
|
+
readonly uid: string;
|
|
266
|
+
}
|
|
267
|
+
|
|
268
|
+
export declare class ClusterTrustBundleList {
|
|
269
|
+
constructor(props: {
|
|
270
|
+
/** items is a collection of ClusterTrustBundle objects */
|
|
271
|
+
items: Record<string, unknown>[];
|
|
272
|
+
/** metadata contains the list metadata. */
|
|
273
|
+
metadata?: Record<string, unknown>;
|
|
274
|
+
});
|
|
275
|
+
readonly name: string;
|
|
276
|
+
readonly namespace: string;
|
|
277
|
+
readonly uid: string;
|
|
278
|
+
}
|
|
279
|
+
|
|
256
280
|
export declare class CM {
|
|
257
281
|
constructor(props: {
|
|
258
282
|
/** BinaryData contains the binary data. Each key must consist of alphanumeric characters, '-', '_' or '.'. BinaryData can contain byte sequences that are not in the UTF-8 range. The keys stored in BinaryData must not overlap with the ones in the Data field, this is enforced during validation process. Using this field will require 1.10+ apiserver and kubelet. */
|
|
@@ -372,10 +396,10 @@ export declare class CrdbCluster {
|
|
|
372
396
|
|
|
373
397
|
export declare class CronJob {
|
|
374
398
|
constructor(props: {
|
|
399
|
+
/** Specification of the desired behavior of a cron job, including the schedule. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status */
|
|
400
|
+
spec: Record<string, unknown>;
|
|
375
401
|
/** Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata */
|
|
376
402
|
metadata?: ObjectMeta;
|
|
377
|
-
/** Specification of the desired behavior of a cron job, including the schedule. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status */
|
|
378
|
-
spec?: Record<string, unknown>;
|
|
379
403
|
});
|
|
380
404
|
readonly name: string;
|
|
381
405
|
readonly namespace: string;
|
|
@@ -612,6 +636,32 @@ export declare class DeviceClassList {
|
|
|
612
636
|
readonly uid: string;
|
|
613
637
|
}
|
|
614
638
|
|
|
639
|
+
export declare class DeviceTaintRule {
|
|
640
|
+
constructor(props: {
|
|
641
|
+
/** Spec specifies the selector and one taint.
|
|
642
|
+
|
|
643
|
+
Changing the spec automatically increments the metadata.generation number. */
|
|
644
|
+
spec: Record<string, unknown>;
|
|
645
|
+
/** Standard object metadata */
|
|
646
|
+
metadata?: ObjectMeta;
|
|
647
|
+
});
|
|
648
|
+
readonly name: string;
|
|
649
|
+
readonly namespace: string;
|
|
650
|
+
readonly uid: string;
|
|
651
|
+
}
|
|
652
|
+
|
|
653
|
+
export declare class DeviceTaintRuleList {
|
|
654
|
+
constructor(props: {
|
|
655
|
+
/** Items is the list of DeviceTaintRules. */
|
|
656
|
+
items: Record<string, unknown>[];
|
|
657
|
+
/** Standard list metadata */
|
|
658
|
+
metadata?: Record<string, unknown>;
|
|
659
|
+
});
|
|
660
|
+
readonly name: string;
|
|
661
|
+
readonly namespace: string;
|
|
662
|
+
readonly uid: string;
|
|
663
|
+
}
|
|
664
|
+
|
|
615
665
|
export declare class DS {
|
|
616
666
|
constructor(props: {
|
|
617
667
|
/** Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata */
|
|
@@ -638,13 +688,13 @@ export declare class Endpoints {
|
|
|
638
688
|
|
|
639
689
|
export declare class EndpointSlice {
|
|
640
690
|
constructor(props: {
|
|
641
|
-
/** addressType specifies the type of address carried by this EndpointSlice. All addresses in this slice must be the same type. This field is immutable after creation. The following address types are currently supported: * IPv4: Represents an IPv4 Address. * IPv6: Represents an IPv6 Address. * FQDN: Represents a Fully Qualified Domain Name. */
|
|
691
|
+
/** addressType specifies the type of address carried by this EndpointSlice. All addresses in this slice must be the same type. This field is immutable after creation. The following address types are currently supported: * IPv4: Represents an IPv4 Address. * IPv6: Represents an IPv6 Address. * FQDN: Represents a Fully Qualified Domain Name. (Deprecated) The EndpointSlice controller only generates, and kube-proxy only processes, slices of addressType "IPv4" and "IPv6". No semantics are defined for the "FQDN" type. */
|
|
642
692
|
addressType: string;
|
|
643
693
|
/** endpoints is a list of unique endpoints in this slice. Each slice may include a maximum of 1000 endpoints. */
|
|
644
|
-
endpoints
|
|
694
|
+
endpoints?: Record<string, unknown>[];
|
|
645
695
|
/** Standard object's metadata. */
|
|
646
696
|
metadata?: ObjectMeta;
|
|
647
|
-
/** ports specifies the list of network ports exposed by each endpoint in this slice. Each port must have a unique name.
|
|
697
|
+
/** ports specifies the list of network ports exposed by each endpoint in this slice. Each port must have a unique name. Each slice may include a maximum of 100 ports. Services always have at least 1 port, so EndpointSlices generated by the EndpointSlice controller will likewise always have at least 1 port. EndpointSlices used for other purposes may have an empty ports list. */
|
|
648
698
|
ports?: Record<string, unknown>[];
|
|
649
699
|
});
|
|
650
700
|
readonly name: string;
|
|
@@ -835,10 +885,10 @@ export declare class GRPCRoute {
|
|
|
835
885
|
|
|
836
886
|
export declare class HorizontalPodAutoscaler {
|
|
837
887
|
constructor(props: {
|
|
888
|
+
/** spec is the specification for the behaviour of the autoscaler. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status. */
|
|
889
|
+
spec: Record<string, unknown>;
|
|
838
890
|
/** metadata is the standard object metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata */
|
|
839
891
|
metadata?: ObjectMeta;
|
|
840
|
-
/** spec is the specification for the behaviour of the autoscaler. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status. */
|
|
841
|
-
spec?: Record<string, unknown>;
|
|
842
892
|
});
|
|
843
893
|
readonly name: string;
|
|
844
894
|
readonly namespace: string;
|
|
@@ -859,10 +909,10 @@ export declare class HorizontalPodAutoscalerList {
|
|
|
859
909
|
|
|
860
910
|
export declare class HPA {
|
|
861
911
|
constructor(props: {
|
|
912
|
+
/** spec is the specification for the behaviour of the autoscaler. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status. */
|
|
913
|
+
spec: Record<string, unknown>;
|
|
862
914
|
/** metadata is the standard object metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata */
|
|
863
915
|
metadata?: ObjectMeta;
|
|
864
|
-
/** spec is the specification for the behaviour of the autoscaler. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status. */
|
|
865
|
-
spec?: Record<string, unknown>;
|
|
866
916
|
});
|
|
867
917
|
readonly name: string;
|
|
868
918
|
readonly namespace: string;
|
|
@@ -942,10 +992,10 @@ export declare class IngressList {
|
|
|
942
992
|
|
|
943
993
|
export declare class IPAddress {
|
|
944
994
|
constructor(props: {
|
|
995
|
+
/** spec is the desired state of the IPAddress. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status */
|
|
996
|
+
spec: Record<string, unknown>;
|
|
945
997
|
/** Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata */
|
|
946
998
|
metadata?: ObjectMeta;
|
|
947
|
-
/** spec is the desired state of the IPAddress. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status */
|
|
948
|
-
spec?: Record<string, unknown>;
|
|
949
999
|
});
|
|
950
1000
|
readonly name: string;
|
|
951
1001
|
readonly namespace: string;
|
|
@@ -1011,6 +1061,30 @@ export declare class Lease {
|
|
|
1011
1061
|
readonly uid: string;
|
|
1012
1062
|
}
|
|
1013
1063
|
|
|
1064
|
+
export declare class LeaseCandidate {
|
|
1065
|
+
constructor(props: {
|
|
1066
|
+
/** spec contains the specification of the Lease. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status */
|
|
1067
|
+
spec: Record<string, unknown>;
|
|
1068
|
+
/** More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata */
|
|
1069
|
+
metadata?: ObjectMeta;
|
|
1070
|
+
});
|
|
1071
|
+
readonly name: string;
|
|
1072
|
+
readonly namespace: string;
|
|
1073
|
+
readonly uid: string;
|
|
1074
|
+
}
|
|
1075
|
+
|
|
1076
|
+
export declare class LeaseCandidateList {
|
|
1077
|
+
constructor(props: {
|
|
1078
|
+
/** items is a list of schema objects. */
|
|
1079
|
+
items: Record<string, unknown>[];
|
|
1080
|
+
/** Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata */
|
|
1081
|
+
metadata?: Record<string, unknown>;
|
|
1082
|
+
});
|
|
1083
|
+
readonly name: string;
|
|
1084
|
+
readonly namespace: string;
|
|
1085
|
+
readonly uid: string;
|
|
1086
|
+
}
|
|
1087
|
+
|
|
1014
1088
|
export declare class LeaseList {
|
|
1015
1089
|
constructor(props: {
|
|
1016
1090
|
/** items is a list of schema objects. */
|
|
@@ -1049,10 +1123,58 @@ export declare class LimitRangeList {
|
|
|
1049
1123
|
|
|
1050
1124
|
export declare class LocalSubjectAccessReview {
|
|
1051
1125
|
constructor(props: {
|
|
1052
|
-
/**
|
|
1126
|
+
/** spec holds information about the request being evaluated. spec.namespace must be equal to the namespace you made the request against. If empty, it is defaulted. */
|
|
1053
1127
|
spec: Record<string, unknown>;
|
|
1054
|
-
/**
|
|
1128
|
+
/** metadata is the standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata */
|
|
1129
|
+
metadata?: ObjectMeta;
|
|
1130
|
+
});
|
|
1131
|
+
readonly name: string;
|
|
1132
|
+
readonly namespace: string;
|
|
1133
|
+
readonly uid: string;
|
|
1134
|
+
}
|
|
1135
|
+
|
|
1136
|
+
export declare class MutatingAdmissionPolicy {
|
|
1137
|
+
constructor(props: {
|
|
1138
|
+
/** metadata is the standard object metadata; More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata. */
|
|
1055
1139
|
metadata?: ObjectMeta;
|
|
1140
|
+
/** spec defines the desired behavior of the MutatingAdmissionPolicy. */
|
|
1141
|
+
spec?: Record<string, unknown>;
|
|
1142
|
+
});
|
|
1143
|
+
readonly name: string;
|
|
1144
|
+
readonly namespace: string;
|
|
1145
|
+
readonly uid: string;
|
|
1146
|
+
}
|
|
1147
|
+
|
|
1148
|
+
export declare class MutatingAdmissionPolicyBinding {
|
|
1149
|
+
constructor(props: {
|
|
1150
|
+
/** metadata is the standard object metadata; More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata. */
|
|
1151
|
+
metadata?: ObjectMeta;
|
|
1152
|
+
/** spec defines the desired behavior of the MutatingAdmissionPolicyBinding. */
|
|
1153
|
+
spec?: Record<string, unknown>;
|
|
1154
|
+
});
|
|
1155
|
+
readonly name: string;
|
|
1156
|
+
readonly namespace: string;
|
|
1157
|
+
readonly uid: string;
|
|
1158
|
+
}
|
|
1159
|
+
|
|
1160
|
+
export declare class MutatingAdmissionPolicyBindingList {
|
|
1161
|
+
constructor(props: {
|
|
1162
|
+
/** List of PolicyBinding. */
|
|
1163
|
+
items: Record<string, unknown>[];
|
|
1164
|
+
/** metadata is the standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds */
|
|
1165
|
+
metadata?: Record<string, unknown>;
|
|
1166
|
+
});
|
|
1167
|
+
readonly name: string;
|
|
1168
|
+
readonly namespace: string;
|
|
1169
|
+
readonly uid: string;
|
|
1170
|
+
}
|
|
1171
|
+
|
|
1172
|
+
export declare class MutatingAdmissionPolicyList {
|
|
1173
|
+
constructor(props: {
|
|
1174
|
+
/** List of ValidatingAdmissionPolicy. */
|
|
1175
|
+
items: Record<string, unknown>[];
|
|
1176
|
+
/** metadata is the standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds */
|
|
1177
|
+
metadata?: Record<string, unknown>;
|
|
1056
1178
|
});
|
|
1057
1179
|
readonly name: string;
|
|
1058
1180
|
readonly namespace: string;
|
|
@@ -1061,9 +1183,9 @@ export declare class LocalSubjectAccessReview {
|
|
|
1061
1183
|
|
|
1062
1184
|
export declare class MutatingWebhookConfiguration {
|
|
1063
1185
|
constructor(props: {
|
|
1064
|
-
/**
|
|
1186
|
+
/** metadata is the standard object metadata; More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata. */
|
|
1065
1187
|
metadata?: ObjectMeta;
|
|
1066
|
-
/**
|
|
1188
|
+
/** webhooks is a list of webhooks and the affected resources and operations. */
|
|
1067
1189
|
webhooks?: Record<string, unknown>[];
|
|
1068
1190
|
});
|
|
1069
1191
|
readonly name: string;
|
|
@@ -1075,7 +1197,7 @@ export declare class MutatingWebhookConfigurationList {
|
|
|
1075
1197
|
constructor(props: {
|
|
1076
1198
|
/** List of MutatingWebhookConfiguration. */
|
|
1077
1199
|
items: Record<string, unknown>[];
|
|
1078
|
-
/**
|
|
1200
|
+
/** metadata is the standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds */
|
|
1079
1201
|
metadata?: Record<string, unknown>;
|
|
1080
1202
|
});
|
|
1081
1203
|
readonly name: string;
|
|
@@ -1261,6 +1383,30 @@ export declare class Pod {
|
|
|
1261
1383
|
readonly uid: string;
|
|
1262
1384
|
}
|
|
1263
1385
|
|
|
1386
|
+
export declare class PodCertificateRequest {
|
|
1387
|
+
constructor(props: {
|
|
1388
|
+
/** spec contains the details about the certificate being requested. */
|
|
1389
|
+
spec: Record<string, unknown>;
|
|
1390
|
+
/** metadata contains the object metadata. */
|
|
1391
|
+
metadata?: ObjectMeta;
|
|
1392
|
+
});
|
|
1393
|
+
readonly name: string;
|
|
1394
|
+
readonly namespace: string;
|
|
1395
|
+
readonly uid: string;
|
|
1396
|
+
}
|
|
1397
|
+
|
|
1398
|
+
export declare class PodCertificateRequestList {
|
|
1399
|
+
constructor(props: {
|
|
1400
|
+
/** items is a collection of PodCertificateRequest objects */
|
|
1401
|
+
items: Record<string, unknown>[];
|
|
1402
|
+
/** metadata contains the list metadata. */
|
|
1403
|
+
metadata?: Record<string, unknown>;
|
|
1404
|
+
});
|
|
1405
|
+
readonly name: string;
|
|
1406
|
+
readonly namespace: string;
|
|
1407
|
+
readonly uid: string;
|
|
1408
|
+
}
|
|
1409
|
+
|
|
1264
1410
|
export declare class PodDisruptionBudget {
|
|
1265
1411
|
constructor(props: {
|
|
1266
1412
|
/** Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata */
|
|
@@ -1323,8 +1469,6 @@ export declare class PodTemplateList {
|
|
|
1323
1469
|
|
|
1324
1470
|
export declare class PriorityClass {
|
|
1325
1471
|
constructor(props: {
|
|
1326
|
-
/** value represents the integer value of this priority class. This is the actual priority that pods receive when they have the name of this class in their pod spec. */
|
|
1327
|
-
value: number;
|
|
1328
1472
|
/** description is an arbitrary string that usually provides guidelines on when this priority class should be used. */
|
|
1329
1473
|
description?: string;
|
|
1330
1474
|
/** globalDefault specifies whether this PriorityClass should be considered as the default priority for pods that do not have any priority class. Only one PriorityClass can be marked as `globalDefault`. However, if more than one PriorityClasses exists with their `globalDefault` field set to true, the smallest value of such global default PriorityClasses will be used as the default priority. */
|
|
@@ -1333,6 +1477,8 @@ export declare class PriorityClass {
|
|
|
1333
1477
|
metadata?: ObjectMeta;
|
|
1334
1478
|
/** preemptionPolicy is the Policy for preempting pods with lower priority. One of Never, PreemptLowerPriority. Defaults to PreemptLowerPriority if unset. */
|
|
1335
1479
|
preemptionPolicy?: string;
|
|
1480
|
+
/** value represents the integer value of this priority class. This is the actual priority that pods receive when they have the name of this class in their pod spec. */
|
|
1481
|
+
value?: number;
|
|
1336
1482
|
});
|
|
1337
1483
|
readonly name: string;
|
|
1338
1484
|
readonly namespace: string;
|
|
@@ -1465,7 +1611,7 @@ export declare class ReplicaSet {
|
|
|
1465
1611
|
|
|
1466
1612
|
export declare class ReplicaSetList {
|
|
1467
1613
|
constructor(props: {
|
|
1468
|
-
/** List of ReplicaSets. More info: https://kubernetes.io/docs/concepts/workloads/controllers/
|
|
1614
|
+
/** List of ReplicaSets. More info: https://kubernetes.io/docs/concepts/workloads/controllers/replicaset */
|
|
1469
1615
|
items: Record<string, unknown>[];
|
|
1470
1616
|
/** Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds */
|
|
1471
1617
|
metadata?: Record<string, unknown>;
|
|
@@ -1756,9 +1902,9 @@ export declare class SecretList {
|
|
|
1756
1902
|
|
|
1757
1903
|
export declare class SelfSubjectAccessReview {
|
|
1758
1904
|
constructor(props: {
|
|
1759
|
-
/**
|
|
1905
|
+
/** spec holds information about the request being evaluated. user and groups must be empty */
|
|
1760
1906
|
spec: Record<string, unknown>;
|
|
1761
|
-
/**
|
|
1907
|
+
/** metadata is the standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata */
|
|
1762
1908
|
metadata?: ObjectMeta;
|
|
1763
1909
|
});
|
|
1764
1910
|
readonly name: string;
|
|
@@ -1768,7 +1914,7 @@ export declare class SelfSubjectAccessReview {
|
|
|
1768
1914
|
|
|
1769
1915
|
export declare class SelfSubjectReview {
|
|
1770
1916
|
constructor(props: {
|
|
1771
|
-
/**
|
|
1917
|
+
/** metadata is standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata */
|
|
1772
1918
|
metadata?: ObjectMeta;
|
|
1773
1919
|
});
|
|
1774
1920
|
readonly name: string;
|
|
@@ -1778,9 +1924,9 @@ export declare class SelfSubjectReview {
|
|
|
1778
1924
|
|
|
1779
1925
|
export declare class SelfSubjectRulesReview {
|
|
1780
1926
|
constructor(props: {
|
|
1781
|
-
/**
|
|
1927
|
+
/** spec holds information about the request being evaluated. */
|
|
1782
1928
|
spec: Record<string, unknown>;
|
|
1783
|
-
/**
|
|
1929
|
+
/** metadata is the standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata */
|
|
1784
1930
|
metadata?: ObjectMeta;
|
|
1785
1931
|
});
|
|
1786
1932
|
readonly name: string;
|
|
@@ -1954,6 +2100,30 @@ export declare class StorageClassList {
|
|
|
1954
2100
|
readonly uid: string;
|
|
1955
2101
|
}
|
|
1956
2102
|
|
|
2103
|
+
export declare class StorageVersionMigration {
|
|
2104
|
+
constructor(props: {
|
|
2105
|
+
/** Standard object metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata */
|
|
2106
|
+
metadata?: ObjectMeta;
|
|
2107
|
+
/** Specification of the migration. */
|
|
2108
|
+
spec?: Record<string, unknown>;
|
|
2109
|
+
});
|
|
2110
|
+
readonly name: string;
|
|
2111
|
+
readonly namespace: string;
|
|
2112
|
+
readonly uid: string;
|
|
2113
|
+
}
|
|
2114
|
+
|
|
2115
|
+
export declare class StorageVersionMigrationList {
|
|
2116
|
+
constructor(props: {
|
|
2117
|
+
/** Items is the list of StorageVersionMigration */
|
|
2118
|
+
items: Record<string, unknown>[];
|
|
2119
|
+
/** Standard list metadata More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata */
|
|
2120
|
+
metadata?: Record<string, unknown>;
|
|
2121
|
+
});
|
|
2122
|
+
readonly name: string;
|
|
2123
|
+
readonly namespace: string;
|
|
2124
|
+
readonly uid: string;
|
|
2125
|
+
}
|
|
2126
|
+
|
|
1957
2127
|
export declare class STS {
|
|
1958
2128
|
constructor(props: {
|
|
1959
2129
|
/** Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata */
|
|
@@ -1968,9 +2138,9 @@ export declare class STS {
|
|
|
1968
2138
|
|
|
1969
2139
|
export declare class SubjectAccessReview {
|
|
1970
2140
|
constructor(props: {
|
|
1971
|
-
/**
|
|
2141
|
+
/** spec holds information about the request being evaluated */
|
|
1972
2142
|
spec: Record<string, unknown>;
|
|
1973
|
-
/**
|
|
2143
|
+
/** metadata is the standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata */
|
|
1974
2144
|
metadata?: ObjectMeta;
|
|
1975
2145
|
});
|
|
1976
2146
|
readonly name: string;
|
|
@@ -1980,10 +2150,10 @@ export declare class SubjectAccessReview {
|
|
|
1980
2150
|
|
|
1981
2151
|
export declare class TokenRequest {
|
|
1982
2152
|
constructor(props: {
|
|
1983
|
-
/**
|
|
1984
|
-
spec: Record<string, unknown>;
|
|
1985
|
-
/** Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata */
|
|
2153
|
+
/** metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata */
|
|
1986
2154
|
metadata?: ObjectMeta;
|
|
2155
|
+
/** spec holds information about the request being evaluated */
|
|
2156
|
+
spec?: Record<string, unknown>;
|
|
1987
2157
|
});
|
|
1988
2158
|
readonly name: string;
|
|
1989
2159
|
readonly namespace: string;
|
|
@@ -1992,9 +2162,9 @@ export declare class TokenRequest {
|
|
|
1992
2162
|
|
|
1993
2163
|
export declare class TokenReview {
|
|
1994
2164
|
constructor(props: {
|
|
1995
|
-
/**
|
|
2165
|
+
/** spec holds information about the request being evaluated */
|
|
1996
2166
|
spec: Record<string, unknown>;
|
|
1997
|
-
/**
|
|
2167
|
+
/** metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata */
|
|
1998
2168
|
metadata?: ObjectMeta;
|
|
1999
2169
|
});
|
|
2000
2170
|
readonly name: string;
|
|
@@ -2004,9 +2174,9 @@ export declare class TokenReview {
|
|
|
2004
2174
|
|
|
2005
2175
|
export declare class ValidatingAdmissionPolicy {
|
|
2006
2176
|
constructor(props: {
|
|
2007
|
-
/**
|
|
2177
|
+
/** metadata is the standard object metadata; More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata. */
|
|
2008
2178
|
metadata?: ObjectMeta;
|
|
2009
|
-
/**
|
|
2179
|
+
/** spec defines the desired behavior of the ValidatingAdmissionPolicy. */
|
|
2010
2180
|
spec?: Record<string, unknown>;
|
|
2011
2181
|
});
|
|
2012
2182
|
readonly name: string;
|
|
@@ -2016,10 +2186,10 @@ export declare class ValidatingAdmissionPolicy {
|
|
|
2016
2186
|
|
|
2017
2187
|
export declare class ValidatingAdmissionPolicyBinding {
|
|
2018
2188
|
constructor(props: {
|
|
2019
|
-
/**
|
|
2189
|
+
/** spec defines the desired behavior of the ValidatingAdmissionPolicyBinding. */
|
|
2190
|
+
spec: Record<string, unknown>;
|
|
2191
|
+
/** metadata is the standard object metadata; More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata. */
|
|
2020
2192
|
metadata?: ObjectMeta;
|
|
2021
|
-
/** Specification of the desired behavior of the ValidatingAdmissionPolicyBinding. */
|
|
2022
|
-
spec?: Record<string, unknown>;
|
|
2023
2193
|
});
|
|
2024
2194
|
readonly name: string;
|
|
2025
2195
|
readonly namespace: string;
|
|
@@ -2030,7 +2200,7 @@ export declare class ValidatingAdmissionPolicyBindingList {
|
|
|
2030
2200
|
constructor(props: {
|
|
2031
2201
|
/** List of PolicyBinding. */
|
|
2032
2202
|
items: Record<string, unknown>[];
|
|
2033
|
-
/**
|
|
2203
|
+
/** metadata is the standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds */
|
|
2034
2204
|
metadata?: Record<string, unknown>;
|
|
2035
2205
|
});
|
|
2036
2206
|
readonly name: string;
|
|
@@ -2042,7 +2212,7 @@ export declare class ValidatingAdmissionPolicyList {
|
|
|
2042
2212
|
constructor(props: {
|
|
2043
2213
|
/** List of ValidatingAdmissionPolicy. */
|
|
2044
2214
|
items: Record<string, unknown>[];
|
|
2045
|
-
/**
|
|
2215
|
+
/** metadata is the standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds */
|
|
2046
2216
|
metadata?: Record<string, unknown>;
|
|
2047
2217
|
});
|
|
2048
2218
|
readonly name: string;
|
|
@@ -2052,9 +2222,9 @@ export declare class ValidatingAdmissionPolicyList {
|
|
|
2052
2222
|
|
|
2053
2223
|
export declare class ValidatingWebhookConfiguration {
|
|
2054
2224
|
constructor(props: {
|
|
2055
|
-
/**
|
|
2225
|
+
/** metadata is the standard object metadata; More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata. */
|
|
2056
2226
|
metadata?: ObjectMeta;
|
|
2057
|
-
/**
|
|
2227
|
+
/** webhooks is a list of webhooks and the affected resources and operations. */
|
|
2058
2228
|
webhooks?: Record<string, unknown>[];
|
|
2059
2229
|
});
|
|
2060
2230
|
readonly name: string;
|
|
@@ -2066,7 +2236,7 @@ export declare class ValidatingWebhookConfigurationList {
|
|
|
2066
2236
|
constructor(props: {
|
|
2067
2237
|
/** List of ValidatingWebhookConfiguration. */
|
|
2068
2238
|
items: Record<string, unknown>[];
|
|
2069
|
-
/**
|
|
2239
|
+
/** metadata is the standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds */
|
|
2070
2240
|
metadata?: Record<string, unknown>;
|
|
2071
2241
|
});
|
|
2072
2242
|
readonly name: string;
|
|
@@ -2184,7 +2354,7 @@ export declare class Container {
|
|
|
2184
2354
|
command?: string[];
|
|
2185
2355
|
/** List of environment variables to set in the container. Cannot be updated. */
|
|
2186
2356
|
env?: EnvVar[];
|
|
2187
|
-
/** List of sources to populate environment variables in the container. The keys defined within a source
|
|
2357
|
+
/** List of sources to populate environment variables in the container. The keys defined within a source may consist of any printable ASCII characters except '='. When a key exists in multiple sources, the value associated with the last source will take precedence. Values defined by an Env with a duplicate key will take precedence. Cannot be updated. */
|
|
2188
2358
|
envFrom?: EnvFromSource[];
|
|
2189
2359
|
/** Container image name. More info: https://kubernetes.io/docs/concepts/containers/images This field is optional to allow higher level config management to default or override container images in workload controllers like Deployments and StatefulSets. */
|
|
2190
2360
|
image?: string;
|
|
@@ -2198,12 +2368,14 @@ export declare class Container {
|
|
|
2198
2368
|
ports?: ContainerPort[];
|
|
2199
2369
|
/** Periodic probe of container service readiness. Container will be removed from service endpoints if the probe fails. Cannot be updated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes */
|
|
2200
2370
|
readinessProbe?: Probe;
|
|
2201
|
-
/** Resources resize policy for the container. */
|
|
2371
|
+
/** Resources resize policy for the container. This field cannot be set on ephemeral containers. */
|
|
2202
2372
|
resizePolicy?: Record<string, unknown>[];
|
|
2203
2373
|
/** Compute Resources required by this container. Cannot be updated. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/ */
|
|
2204
2374
|
resources?: ResourceRequirements;
|
|
2205
|
-
/** RestartPolicy defines the restart behavior of individual containers in a pod. This
|
|
2375
|
+
/** RestartPolicy defines the restart behavior of individual containers in a pod. This overrides the pod-level restart policy. When this field is not specified, the restart behavior is defined by the Pod's restart policy and the container type. Additionally, setting the RestartPolicy as "Always" for the init container will have the following effect: this init container will be continually restarted on exit until all regular containers have terminated. Once all regular containers have completed, all init containers with restartPolicy "Always" will be shut down. This lifecycle differs from normal init containers and is often referred to as a "sidecar" container. Although this init container still starts in the init container sequence, it does not wait for the container to complete before proceeding to the next init container. Instead, the next init container starts immediately after this init container is started, or after any startupProbe has successfully completed. */
|
|
2206
2376
|
restartPolicy?: string;
|
|
2377
|
+
/** Represents a list of rules to be checked to determine if the container should be restarted on exit. The rules are evaluated in order. Once a rule matches a container exit condition, the remaining rules are ignored. If no rule matches the container exit condition, the Container-level restart policy determines the whether the container is restarted or not. Constraints on the rules: - At most 20 rules are allowed. - Rules can have the same action. - Identical rules are not forbidden in validations. When rules are specified, container MUST set RestartPolicy explicitly even it if matches the Pod's RestartPolicy. */
|
|
2378
|
+
restartPolicyRules?: Record<string, unknown>[];
|
|
2207
2379
|
/** SecurityContext defines the security options the container should be run with. If set, the fields of SecurityContext override the equivalent fields of PodSecurityContext. More info: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ */
|
|
2208
2380
|
securityContext?: SecurityContext;
|
|
2209
2381
|
/** StartupProbe indicates that the Pod has successfully initialized. If specified, no other probes are executed until this completes successfully. If this probe fails, the Pod will be restarted, just as if the livenessProbe failed. This can be used to provide different probe parameters at the beginning of a Pod's lifecycle, when it might take a long time to load data or warm a cache, than during steady-state operation. This cannot be updated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes */
|
|
@@ -2255,7 +2427,7 @@ export declare class EnvFromSource {
|
|
|
2255
2427
|
constructor(props: {
|
|
2256
2428
|
/** The ConfigMap to select from */
|
|
2257
2429
|
configMapRef?: Record<string, unknown>;
|
|
2258
|
-
/**
|
|
2430
|
+
/** Optional text to prepend to the name of each environment variable. May consist of any printable ASCII characters except '='. */
|
|
2259
2431
|
prefix?: string;
|
|
2260
2432
|
/** The Secret to select from */
|
|
2261
2433
|
secretRef?: Record<string, unknown>;
|
|
@@ -2264,7 +2436,7 @@ export declare class EnvFromSource {
|
|
|
2264
2436
|
|
|
2265
2437
|
export declare class EnvVar {
|
|
2266
2438
|
constructor(props: {
|
|
2267
|
-
/** Name of the environment variable.
|
|
2439
|
+
/** Name of the environment variable. May consist of any printable ASCII characters except '='. */
|
|
2268
2440
|
name: string;
|
|
2269
2441
|
/** Variable references $(VAR_NAME) are expanded using the previously defined environment variables in the container and any service environment variables. If a variable cannot be resolved, the reference in the input string will be unchanged. Double $$ are reduced to a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. "$$(VAR_NAME)" will produce the string literal "$(VAR_NAME)". Escaped references will never be expanded, regardless of whether the variable exists or not. Defaults to "". */
|
|
2270
2442
|
value?: string;
|
|
@@ -2279,6 +2451,8 @@ export declare class EnvVarSource {
|
|
|
2279
2451
|
configMapKeyRef?: ConfigMapKeySelector;
|
|
2280
2452
|
/** Selects a field of the pod: supports metadata.name, metadata.namespace, `metadata.labels['<KEY>']`, `metadata.annotations['<KEY>']`, spec.nodeName, spec.serviceAccountName, status.hostIP, status.podIP, status.podIPs. */
|
|
2281
2453
|
fieldRef?: Record<string, unknown>;
|
|
2454
|
+
/** FileKeyRef selects a key of the env file. Requires the EnvFiles feature gate to be enabled. */
|
|
2455
|
+
fileKeyRef?: Record<string, unknown>;
|
|
2282
2456
|
/** Selects a resource of the container: only resources limits and requests (limits.cpu, limits.memory, limits.ephemeral-storage, requests.cpu, requests.memory and requests.ephemeral-storage) are currently supported. */
|
|
2283
2457
|
resourceFieldRef?: Record<string, unknown>;
|
|
2284
2458
|
/** Selects a key of a secret in the pod's namespace */
|
|
@@ -2296,7 +2470,7 @@ export declare class EphemeralContainer {
|
|
|
2296
2470
|
command?: string[];
|
|
2297
2471
|
/** List of environment variables to set in the container. Cannot be updated. */
|
|
2298
2472
|
env?: EnvVar[];
|
|
2299
|
-
/** List of sources to populate environment variables in the container. The keys defined within a source
|
|
2473
|
+
/** List of sources to populate environment variables in the container. The keys defined within a source may consist of any printable ASCII characters except '='. When a key exists in multiple sources, the value associated with the last source will take precedence. Values defined by an Env with a duplicate key will take precedence. Cannot be updated. */
|
|
2300
2474
|
envFrom?: EnvFromSource[];
|
|
2301
2475
|
/** Container image name. More info: https://kubernetes.io/docs/concepts/containers/images */
|
|
2302
2476
|
image?: string;
|
|
@@ -2314,8 +2488,10 @@ export declare class EphemeralContainer {
|
|
|
2314
2488
|
resizePolicy?: Record<string, unknown>[];
|
|
2315
2489
|
/** Resources are not allowed for ephemeral containers. Ephemeral containers use spare resources already allocated to the pod. */
|
|
2316
2490
|
resources?: ResourceRequirements;
|
|
2317
|
-
/** Restart policy for the container to manage the restart behavior of each container within a pod.
|
|
2491
|
+
/** Restart policy for the container to manage the restart behavior of each container within a pod. You cannot set this field on ephemeral containers. */
|
|
2318
2492
|
restartPolicy?: string;
|
|
2493
|
+
/** Represents a list of rules to be checked to determine if the container should be restarted on exit. You cannot set this field on ephemeral containers. */
|
|
2494
|
+
restartPolicyRules?: Record<string, unknown>[];
|
|
2319
2495
|
/** Optional: SecurityContext defines the security options the ephemeral container should be run with. If set, the fields of SecurityContext override the equivalent fields of PodSecurityContext. */
|
|
2320
2496
|
securityContext?: SecurityContext;
|
|
2321
2497
|
/** Probes are not allowed for ephemeral containers. */
|
|
@@ -2631,13 +2807,13 @@ export declare class PersistentVolumeClaimSpec {
|
|
|
2631
2807
|
in any namespaces.
|
|
2632
2808
|
(Beta) Using this field requires the AnyVolumeDataSource feature gate to be enabled. (Alpha) Using the namespace field of dataSourceRef requires the CrossNamespaceVolumeDataSource feature gate to be enabled. */
|
|
2633
2809
|
dataSourceRef?: Record<string, unknown>;
|
|
2634
|
-
/** resources represents the minimum resources the volume should have.
|
|
2810
|
+
/** resources represents the minimum resources the volume should have. Users are allowed to specify resource requirements that are lower than previous value but must still be higher than capacity recorded in the status field of the claim. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#resources */
|
|
2635
2811
|
resources?: Record<string, unknown>;
|
|
2636
2812
|
/** selector is a label query over volumes to consider for binding. */
|
|
2637
2813
|
selector?: LabelSelector;
|
|
2638
2814
|
/** storageClassName is the name of the StorageClass required by the claim. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#class-1 */
|
|
2639
2815
|
storageClassName?: string;
|
|
2640
|
-
/** volumeAttributesClassName may be used to set the VolumeAttributesClass used by this claim. If specified, the CSI driver will create or update the volume with the attributes defined in the corresponding VolumeAttributesClass. This has a different purpose than storageClassName, it can be changed after the claim is created. An empty string value
|
|
2816
|
+
/** volumeAttributesClassName may be used to set the VolumeAttributesClass used by this claim. If specified, the CSI driver will create or update the volume with the attributes defined in the corresponding VolumeAttributesClass. This has a different purpose than storageClassName, it can be changed after the claim is created. An empty string or nil value indicates that no VolumeAttributesClass will be applied to the claim. If the claim enters an Infeasible error state, this field can be reset to its previous value (including nil) to cancel the modification. If the resource referred to by volumeAttributesClass does not exist, this PersistentVolumeClaim will be set to a Pending state, as reflected by the modifyVolumeStatus field, until such as a resource exists. More info: https://kubernetes.io/docs/concepts/storage/volume-attributes-classes/ */
|
|
2641
2817
|
volumeAttributesClassName?: string;
|
|
2642
2818
|
/** volumeMode defines what type of volume is required by the claim. Value of Filesystem is implied when not included in claim spec. */
|
|
2643
2819
|
volumeMode?: string;
|
|
@@ -2662,9 +2838,7 @@ IfHealthyBudget policy means that running pods (status.phase="Running"), but not
|
|
|
2662
2838
|
|
|
2663
2839
|
AlwaysAllow policy means that all running pods (status.phase="Running"), but not yet healthy are considered disrupted and can be evicted regardless of whether the criteria in a PDB is met. This means perspective running pods of a disrupted application might not get a chance to become healthy. Healthy pods will be subject to the PDB for eviction.
|
|
2664
2840
|
|
|
2665
|
-
Additional policies may be added in the future. Clients making eviction decisions should disallow eviction of unhealthy pods if they encounter an unrecognized policy in this field.
|
|
2666
|
-
|
|
2667
|
-
This field is beta-level. The eviction API uses this field when the feature gate PDBUnhealthyPodEvictionPolicy is enabled (enabled by default). */
|
|
2841
|
+
Additional policies may be added in the future. Clients making eviction decisions should disallow eviction of unhealthy pods if they encounter an unrecognized policy in this field. */
|
|
2668
2842
|
unhealthyPodEvictionPolicy?: string;
|
|
2669
2843
|
});
|
|
2670
2844
|
}
|
|
@@ -2738,15 +2912,19 @@ export declare class PodSpec {
|
|
|
2738
2912
|
hostIPC?: boolean;
|
|
2739
2913
|
/** Specifies the hostname of the Pod If not specified, the pod's hostname will be set to a system-defined value. */
|
|
2740
2914
|
hostname?: string;
|
|
2741
|
-
/**
|
|
2915
|
+
/** HostnameOverride specifies an explicit override for the pod's hostname as perceived by the pod. This field only specifies the pod's hostname and does not affect its DNS records. When this field is set to a non-empty string: - It takes precedence over the values set in `hostname` and `subdomain`. - The Pod's hostname will be set to this value. - `setHostnameAsFQDN` must be nil or set to false. - `hostNetwork` must be set to false.
|
|
2916
|
+
|
|
2917
|
+
This field must be a valid DNS subdomain as defined in RFC 1123 and contain at most 64 characters. Requires the HostnameOverride feature gate to be enabled. */
|
|
2918
|
+
hostnameOverride?: string;
|
|
2919
|
+
/** Host networking requested for this pod. Use the host's network namespace. When using HostNetwork you should specify ports so the scheduler is aware. When `hostNetwork` is true, specified `hostPort` fields in port definitions must match `containerPort`, and unspecified `hostPort` fields in port definitions are defaulted to match `containerPort`. Default to false. */
|
|
2742
2920
|
hostNetwork?: boolean;
|
|
2743
2921
|
/** Use the host's pid namespace. Optional: Default to false. */
|
|
2744
2922
|
hostPID?: boolean;
|
|
2745
|
-
/** Use the host's user namespace. Optional: Default to true. If set to true or not present, the pod will be run in the host user namespace, useful for when the pod needs a feature only available to the host user namespace, such as loading a kernel module with CAP_SYS_MODULE. When set to false, a new userns is created for the pod. Setting false is useful for mitigating container breakout vulnerabilities even allowing users to run their containers as root without actually having root privileges on the host.
|
|
2923
|
+
/** Use the host's user namespace. Optional: Default to true. If set to true or not present, the pod will be run in the host user namespace, useful for when the pod needs a feature only available to the host user namespace, such as loading a kernel module with CAP_SYS_MODULE. When set to false, a new userns is created for the pod. Setting false is useful for mitigating container breakout vulnerabilities even allowing users to run their containers as root without actually having root privileges on the host. */
|
|
2746
2924
|
hostUsers?: boolean;
|
|
2747
2925
|
/** ImagePullSecrets is an optional list of references to secrets in the same namespace to use for pulling any of the images used by this PodSpec. If specified, these secrets will be passed to individual puller implementations for them to use. More info: https://kubernetes.io/docs/concepts/containers/images#specifying-imagepullsecrets-on-a-pod */
|
|
2748
2926
|
imagePullSecrets?: LocalObjectReference[];
|
|
2749
|
-
/** List of initialization containers belonging to the pod. Init containers are executed in order prior to containers being started. If any init container fails, the pod is considered to have failed and is handled according to its restartPolicy. The name for an init container or normal container must be unique among all containers. Init containers may not have Lifecycle actions, Readiness probes, Liveness probes, or Startup probes. The resourceRequirements of an init container are taken into account during scheduling by finding the highest request/limit for each resource type, and then using the max of
|
|
2927
|
+
/** List of initialization containers belonging to the pod. Init containers are executed in order prior to containers being started. If any init container fails, the pod is considered to have failed and is handled according to its restartPolicy. The name for an init container or normal container must be unique among all containers. Init containers may not have Lifecycle actions, Readiness probes, Liveness probes, or Startup probes. The resourceRequirements of an init container are taken into account during scheduling by finding the highest request/limit for each resource type, and then using the max of that value or the sum of the normal containers. Limits are applied to init containers in a similar fashion. Init containers cannot currently be added or removed. Cannot be updated. More info: https://kubernetes.io/docs/concepts/workloads/pods/init-containers/ */
|
|
2750
2928
|
initContainers?: Container[];
|
|
2751
2929
|
/** NodeName indicates in which node this pod is scheduled. If empty, this pod is a candidate for scheduling by the scheduler defined in schedulerName. Once this field is set, the kubelet for this node becomes responsible for the lifecycle of this pod. This field should not be used to express a desire for the pod to be scheduled on a specific node. https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#nodename */
|
|
2752
2930
|
nodeName?: string;
|
|
@@ -2756,7 +2934,7 @@ export declare class PodSpec {
|
|
|
2756
2934
|
|
|
2757
2935
|
If the OS field is set to linux, the following fields must be unset: -securityContext.windowsOptions
|
|
2758
2936
|
|
|
2759
|
-
If the OS field is set to windows, following fields must be unset: - spec.hostPID - spec.hostIPC - spec.hostUsers - spec.securityContext.appArmorProfile - spec.securityContext.seLinuxOptions - spec.securityContext.seccompProfile - spec.securityContext.fsGroup - spec.securityContext.fsGroupChangePolicy - spec.securityContext.sysctls - spec.shareProcessNamespace - spec.securityContext.runAsUser - spec.securityContext.runAsGroup - spec.securityContext.supplementalGroups - spec.securityContext.supplementalGroupsPolicy - spec.containers[*].securityContext.appArmorProfile - spec.containers[*].securityContext.seLinuxOptions - spec.containers[*].securityContext.seccompProfile - spec.containers[*].securityContext.capabilities - spec.containers[*].securityContext.readOnlyRootFilesystem - spec.containers[*].securityContext.privileged - spec.containers[*].securityContext.allowPrivilegeEscalation - spec.containers[*].securityContext.procMount - spec.containers[*].securityContext.runAsUser - spec.containers[*].securityContext.runAsGroup */
|
|
2937
|
+
If the OS field is set to windows, following fields must be unset: - spec.hostPID - spec.hostIPC - spec.hostUsers - spec.resources - spec.securityContext.appArmorProfile - spec.securityContext.seLinuxOptions - spec.securityContext.seccompProfile - spec.securityContext.fsGroup - spec.securityContext.fsGroupChangePolicy - spec.securityContext.sysctls - spec.shareProcessNamespace - spec.securityContext.runAsUser - spec.securityContext.runAsGroup - spec.securityContext.supplementalGroups - spec.securityContext.supplementalGroupsPolicy - spec.containers[*].securityContext.appArmorProfile - spec.containers[*].securityContext.seLinuxOptions - spec.containers[*].securityContext.seccompProfile - spec.containers[*].securityContext.capabilities - spec.containers[*].securityContext.readOnlyRootFilesystem - spec.containers[*].securityContext.privileged - spec.containers[*].securityContext.allowPrivilegeEscalation - spec.containers[*].securityContext.procMount - spec.containers[*].securityContext.runAsUser - spec.containers[*].securityContext.runAsGroup */
|
|
2760
2938
|
os?: Record<string, unknown>;
|
|
2761
2939
|
/** Overhead represents the resource overhead associated with running a pod for a given RuntimeClass. This field will be autopopulated at admission time by the RuntimeClass admission controller. If the RuntimeClass admission controller is enabled, overhead must not be set in Pod create requests. The RuntimeClass admission controller will reject Pod create requests which have the overhead already set. If RuntimeClass is configured and selected in the PodSpec, Overhead will be set to the value defined in the corresponding RuntimeClass, otherwise it will remain unset and treated as zero. More info: https://git.k8s.io/enhancements/keps/sig-node/688-pod-overhead/README.md */
|
|
2762
2940
|
overhead?: Record<string, string>;
|
|
@@ -2770,11 +2948,11 @@ If the OS field is set to windows, following fields must be unset: - spec.hostPI
|
|
|
2770
2948
|
readinessGates?: Record<string, unknown>[];
|
|
2771
2949
|
/** ResourceClaims defines which ResourceClaims must be allocated and reserved before the Pod is allowed to start. The resources will be made available to those containers which consume them by name.
|
|
2772
2950
|
|
|
2773
|
-
This is
|
|
2951
|
+
This is a stable field but requires that the DynamicResourceAllocation feature gate is enabled.
|
|
2774
2952
|
|
|
2775
2953
|
This field is immutable. */
|
|
2776
2954
|
resourceClaims?: Record<string, unknown>[];
|
|
2777
|
-
/** Resources is the total amount of CPU and Memory resources required by all containers in the pod. It supports specifying Requests and Limits for "cpu" and "
|
|
2955
|
+
/** Resources is the total amount of CPU and Memory resources required by all containers in the pod. It supports specifying Requests and Limits for "cpu", "memory" and "hugepages-" resource names only. ResourceClaims are not supported.
|
|
2778
2956
|
|
|
2779
2957
|
This field enables fine-grained control over resource allocation for the entire pod, allowing resource sharing among containers in a pod.
|
|
2780
2958
|
|
|
@@ -2790,6 +2968,8 @@ This is an alpha field and requires enabling the PodLevelResources feature gate.
|
|
|
2790
2968
|
|
|
2791
2969
|
SchedulingGates can only be set at pod creation time, and be removed only afterwards. */
|
|
2792
2970
|
schedulingGates?: Record<string, unknown>[];
|
|
2971
|
+
/** SchedulingGroup provides a reference to the immediate scheduling runtime grouping object that this Pod belongs to. This field is used by the scheduler to identify the group and apply the correct group scheduling policies. The association with a group also impacts other lifecycle aspects of a Pod that are relevant in a wider context of scheduling like preemption, resource attachment, etc. If not specified, the Pod is treated as a single unit in all of these aspects. The group object referenced by this field may not exist at the time the Pod is created. This field is immutable, but a group object with the same name may be recreated with different policies. Doing this during pod scheduling may result in the placement not conforming to the expected policies. */
|
|
2972
|
+
schedulingGroup?: Record<string, unknown>;
|
|
2793
2973
|
/** SecurityContext holds pod-level security attributes and common container settings. Optional: Defaults to empty. See type description for default values of each field. */
|
|
2794
2974
|
securityContext?: PodSecurityContext;
|
|
2795
2975
|
/** DeprecatedServiceAccount is a deprecated alias for ServiceAccountName. Deprecated: Use serviceAccountName instead. */
|
|
@@ -2866,7 +3046,7 @@ export declare class ResourceRequirements {
|
|
|
2866
3046
|
constructor(props: {
|
|
2867
3047
|
/** Claims lists the names of resources, defined in spec.resourceClaims, that are used by this container.
|
|
2868
3048
|
|
|
2869
|
-
This
|
|
3049
|
+
This field depends on the DynamicResourceAllocation feature gate.
|
|
2870
3050
|
|
|
2871
3051
|
This field is immutable. It can only be set for containers. */
|
|
2872
3052
|
claims?: Record<string, unknown>[];
|
|
@@ -2879,12 +3059,12 @@ This field is immutable. It can only be set for containers. */
|
|
|
2879
3059
|
|
|
2880
3060
|
export declare class RoleRef {
|
|
2881
3061
|
constructor(props: {
|
|
2882
|
-
/** APIGroup is the group for the resource being referenced */
|
|
2883
|
-
apiGroup: string;
|
|
2884
3062
|
/** Kind is the type of resource being referenced */
|
|
2885
3063
|
kind: string;
|
|
2886
3064
|
/** Name is the name of resource being referenced */
|
|
2887
3065
|
name: string;
|
|
3066
|
+
/** APIGroup is the group for the resource being referenced */
|
|
3067
|
+
apiGroup?: string;
|
|
2888
3068
|
});
|
|
2889
3069
|
}
|
|
2890
3070
|
|
|
@@ -2918,7 +3098,7 @@ export declare class SecurityContext {
|
|
|
2918
3098
|
capabilities?: Capabilities;
|
|
2919
3099
|
/** Run container in privileged mode. Processes in privileged containers are essentially equivalent to root on the host. Defaults to false. Note that this field cannot be set when spec.os.name is windows. */
|
|
2920
3100
|
privileged?: boolean;
|
|
2921
|
-
/** procMount denotes the type of proc mount to use for the containers. The default value is Default which uses the container runtime defaults for readonly paths and masked paths.
|
|
3101
|
+
/** procMount denotes the type of proc mount to use for the containers. The default value is Default which uses the container runtime defaults for readonly paths and masked paths. Note that this field cannot be set when spec.os.name is windows. */
|
|
2922
3102
|
procMount?: string;
|
|
2923
3103
|
/** Whether this container has a read-only root filesystem. Default is false. Note that this field cannot be set when spec.os.name is windows. */
|
|
2924
3104
|
readOnlyRootFilesystem?: boolean;
|
|
@@ -3000,7 +3180,7 @@ export declare class Toleration {
|
|
|
3000
3180
|
effect?: string;
|
|
3001
3181
|
/** Key is the taint key that the toleration applies to. Empty means match all taint keys. If the key is empty, operator must be Exists; this combination means to match all values and all keys. */
|
|
3002
3182
|
key?: string;
|
|
3003
|
-
/** Operator represents a key's relationship to the value. Valid operators are Exists and
|
|
3183
|
+
/** Operator represents a key's relationship to the value. Valid operators are Exists, Equal, Lt, and Gt. Defaults to Equal. Exists is equivalent to wildcard for value, so that a pod can tolerate all taints of a particular category. Lt and Gt perform numeric comparisons (requires feature gate TaintTolerationComparisonOperators). */
|
|
3004
3184
|
operator?: string;
|
|
3005
3185
|
/** TolerationSeconds represents the period of time the toleration (which must be of effect NoExecute, otherwise this field is ignored) tolerates the taint. By default, it is not set, which means tolerate the taint forever (do not evict). Zero and negative values will be treated as 0 (evict immediately) by the system. */
|
|
3006
3186
|
tolerationSeconds?: number;
|
|
@@ -3032,11 +3212,11 @@ For example, in a 3-zone cluster, MaxSkew is set to 2, MinDomains is set to 5 an
|
|
|
3032
3212
|
minDomains?: number;
|
|
3033
3213
|
/** NodeAffinityPolicy indicates how we will treat Pod's nodeAffinity/nodeSelector when calculating pod topology spread skew. Options are: - Honor: only nodes matching nodeAffinity/nodeSelector are included in the calculations. - Ignore: nodeAffinity/nodeSelector are ignored. All nodes are included in the calculations.
|
|
3034
3214
|
|
|
3035
|
-
If this value is nil, the behavior is equivalent to the Honor policy.
|
|
3215
|
+
If this value is nil, the behavior is equivalent to the Honor policy. */
|
|
3036
3216
|
nodeAffinityPolicy?: string;
|
|
3037
3217
|
/** NodeTaintsPolicy indicates how we will treat node taints when calculating pod topology spread skew. Options are: - Honor: nodes without taints, along with tainted nodes for which the incoming pod has a toleration, are included. - Ignore: node taints are ignored. All nodes are included.
|
|
3038
3218
|
|
|
3039
|
-
If this value is nil, the behavior is equivalent to the Ignore policy.
|
|
3219
|
+
If this value is nil, the behavior is equivalent to the Ignore policy. */
|
|
3040
3220
|
nodeTaintsPolicy?: string;
|
|
3041
3221
|
});
|
|
3042
3222
|
}
|
|
@@ -3088,7 +3268,7 @@ A pod can use both types of ephemeral volumes and persistent volumes at the same
|
|
|
3088
3268
|
gcePersistentDisk?: Record<string, unknown>;
|
|
3089
3269
|
/** gitRepo represents a git repository at a particular revision. Deprecated: GitRepo is deprecated. To provision a container with a git repo, mount an EmptyDir into an InitContainer that clones the repo using git, then mount the EmptyDir into the Pod's container. */
|
|
3090
3270
|
gitRepo?: Record<string, unknown>;
|
|
3091
|
-
/** glusterfs represents a Glusterfs mount on the host that shares a pod's lifetime. Deprecated: Glusterfs is deprecated and the in-tree glusterfs type is no longer supported.
|
|
3271
|
+
/** glusterfs represents a Glusterfs mount on the host that shares a pod's lifetime. Deprecated: Glusterfs is deprecated and the in-tree glusterfs type is no longer supported. */
|
|
3092
3272
|
glusterfs?: Record<string, unknown>;
|
|
3093
3273
|
/** hostPath represents a pre-existing file or directory on the host machine that is directly exposed to the container. This is generally used for system agents or other privileged things that are allowed to see the host machine. Most containers will NOT need this. More info: https://kubernetes.io/docs/concepts/storage/volumes#hostpath */
|
|
3094
3274
|
hostPath?: Record<string, unknown>;
|
|
@@ -3096,9 +3276,9 @@ A pod can use both types of ephemeral volumes and persistent volumes at the same
|
|
|
3096
3276
|
|
|
3097
3277
|
- Always: the kubelet always attempts to pull the reference. Container creation will fail If the pull fails. - Never: the kubelet never pulls the reference and only uses a local image or artifact. Container creation will fail if the reference isn't present. - IfNotPresent: the kubelet pulls if the reference isn't already present on disk. Container creation will fail if the reference isn't present and the pull fails.
|
|
3098
3278
|
|
|
3099
|
-
The volume gets re-resolved if the pod gets deleted and recreated, which means that new remote content will become available on pod recreation. A failure to resolve or pull the image during pod startup will block containers from starting and may add significant latency. Failures will be retried using normal volume backoff and will be reported on the pod reason and message. The types of objects that may be mounted by this volume are defined by the container runtime implementation on a host machine and at minimum must include all valid types supported by the container image field. The OCI object gets mounted in a single directory (spec.containers[*].volumeMounts.mountPath) by merging the manifest layers in the same way as for container images. The volume will be mounted read-only (ro)
|
|
3279
|
+
The volume gets re-resolved if the pod gets deleted and recreated, which means that new remote content will become available on pod recreation. A failure to resolve or pull the image during pod startup will block containers from starting and may add significant latency. Failures will be retried using normal volume backoff and will be reported on the pod reason and message. The types of objects that may be mounted by this volume are defined by the container runtime implementation on a host machine and at minimum must include all valid types supported by the container image field. The OCI object gets mounted in a single directory (spec.containers[*].volumeMounts.mountPath) by merging the manifest layers in the same way as for container images. The volume will be mounted read-only (ro). Sub path mounts for containers are not supported (spec.containers[*].volumeMounts.subpath) before 1.33. The field spec.securityContext.fsGroupChangePolicy has no effect on this volume type. */
|
|
3100
3280
|
image?: Record<string, unknown>;
|
|
3101
|
-
/** iscsi represents an ISCSI Disk resource that is attached to a kubelet's host machine and then exposed to the pod. More info: https://
|
|
3281
|
+
/** iscsi represents an ISCSI Disk resource that is attached to a kubelet's host machine and then exposed to the pod. More info: https://kubernetes.io/docs/concepts/storage/volumes/#iscsi */
|
|
3102
3282
|
iscsi?: Record<string, unknown>;
|
|
3103
3283
|
/** nfs represents an NFS mount on the host that shares a pod's lifetime More info: https://kubernetes.io/docs/concepts/storage/volumes#nfs */
|
|
3104
3284
|
nfs?: Record<string, unknown>;
|
|
@@ -3106,13 +3286,13 @@ The volume gets re-resolved if the pod gets deleted and recreated, which means t
|
|
|
3106
3286
|
persistentVolumeClaim?: Record<string, unknown>;
|
|
3107
3287
|
/** photonPersistentDisk represents a PhotonController persistent disk attached and mounted on kubelets host machine. Deprecated: PhotonPersistentDisk is deprecated and the in-tree photonPersistentDisk type is no longer supported. */
|
|
3108
3288
|
photonPersistentDisk?: Record<string, unknown>;
|
|
3109
|
-
/** portworxVolume represents a portworx volume attached and mounted on kubelets host machine. Deprecated: PortworxVolume is deprecated. All operations for the in-tree portworxVolume type are redirected to the pxd.portworx.com CSI driver
|
|
3289
|
+
/** portworxVolume represents a portworx volume attached and mounted on kubelets host machine. Deprecated: PortworxVolume is deprecated. All operations for the in-tree portworxVolume type are redirected to the pxd.portworx.com CSI driver. */
|
|
3110
3290
|
portworxVolume?: Record<string, unknown>;
|
|
3111
3291
|
/** projected items for all in one resources secrets, configmaps, and downward API */
|
|
3112
3292
|
projected?: Record<string, unknown>;
|
|
3113
3293
|
/** quobyte represents a Quobyte mount on the host that shares a pod's lifetime. Deprecated: Quobyte is deprecated and the in-tree quobyte type is no longer supported. */
|
|
3114
3294
|
quobyte?: Record<string, unknown>;
|
|
3115
|
-
/** rbd represents a Rados Block Device mount on the host that shares a pod's lifetime. Deprecated: RBD is deprecated and the in-tree rbd type is no longer supported.
|
|
3295
|
+
/** rbd represents a Rados Block Device mount on the host that shares a pod's lifetime. Deprecated: RBD is deprecated and the in-tree rbd type is no longer supported. */
|
|
3116
3296
|
rbd?: Record<string, unknown>;
|
|
3117
3297
|
/** scaleIO represents a ScaleIO persistent volume attached and mounted on Kubernetes nodes. Deprecated: ScaleIO is deprecated and the in-tree scaleIO type is no longer supported. */
|
|
3118
3298
|
scaleIO?: Record<string, unknown>;
|