@intentius/chant-lexicon-k8s 0.13.0 → 0.14.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -253,6 +253,30 @@ export declare class ClusterRoleList {
253
253
  readonly uid: string;
254
254
  }
255
255
 
256
+ export declare class ClusterTrustBundle {
257
+ constructor(props: {
258
+ /** spec contains the signer (if any) and trust anchors. */
259
+ spec: Record<string, unknown>;
260
+ /** metadata contains the object metadata. */
261
+ metadata?: ObjectMeta;
262
+ });
263
+ readonly name: string;
264
+ readonly namespace: string;
265
+ readonly uid: string;
266
+ }
267
+
268
+ export declare class ClusterTrustBundleList {
269
+ constructor(props: {
270
+ /** items is a collection of ClusterTrustBundle objects */
271
+ items: Record<string, unknown>[];
272
+ /** metadata contains the list metadata. */
273
+ metadata?: Record<string, unknown>;
274
+ });
275
+ readonly name: string;
276
+ readonly namespace: string;
277
+ readonly uid: string;
278
+ }
279
+
256
280
  export declare class CM {
257
281
  constructor(props: {
258
282
  /** BinaryData contains the binary data. Each key must consist of alphanumeric characters, '-', '_' or '.'. BinaryData can contain byte sequences that are not in the UTF-8 range. The keys stored in BinaryData must not overlap with the ones in the Data field, this is enforced during validation process. Using this field will require 1.10+ apiserver and kubelet. */
@@ -372,10 +396,10 @@ export declare class CrdbCluster {
372
396
 
373
397
  export declare class CronJob {
374
398
  constructor(props: {
399
+ /** Specification of the desired behavior of a cron job, including the schedule. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status */
400
+ spec: Record<string, unknown>;
375
401
  /** Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata */
376
402
  metadata?: ObjectMeta;
377
- /** Specification of the desired behavior of a cron job, including the schedule. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status */
378
- spec?: Record<string, unknown>;
379
403
  });
380
404
  readonly name: string;
381
405
  readonly namespace: string;
@@ -612,6 +636,32 @@ export declare class DeviceClassList {
612
636
  readonly uid: string;
613
637
  }
614
638
 
639
+ export declare class DeviceTaintRule {
640
+ constructor(props: {
641
+ /** Spec specifies the selector and one taint.
642
+
643
+ Changing the spec automatically increments the metadata.generation number. */
644
+ spec: Record<string, unknown>;
645
+ /** Standard object metadata */
646
+ metadata?: ObjectMeta;
647
+ });
648
+ readonly name: string;
649
+ readonly namespace: string;
650
+ readonly uid: string;
651
+ }
652
+
653
+ export declare class DeviceTaintRuleList {
654
+ constructor(props: {
655
+ /** Items is the list of DeviceTaintRules. */
656
+ items: Record<string, unknown>[];
657
+ /** Standard list metadata */
658
+ metadata?: Record<string, unknown>;
659
+ });
660
+ readonly name: string;
661
+ readonly namespace: string;
662
+ readonly uid: string;
663
+ }
664
+
615
665
  export declare class DS {
616
666
  constructor(props: {
617
667
  /** Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata */
@@ -638,13 +688,13 @@ export declare class Endpoints {
638
688
 
639
689
  export declare class EndpointSlice {
640
690
  constructor(props: {
641
- /** addressType specifies the type of address carried by this EndpointSlice. All addresses in this slice must be the same type. This field is immutable after creation. The following address types are currently supported: * IPv4: Represents an IPv4 Address. * IPv6: Represents an IPv6 Address. * FQDN: Represents a Fully Qualified Domain Name. */
691
+ /** addressType specifies the type of address carried by this EndpointSlice. All addresses in this slice must be the same type. This field is immutable after creation. The following address types are currently supported: * IPv4: Represents an IPv4 Address. * IPv6: Represents an IPv6 Address. * FQDN: Represents a Fully Qualified Domain Name. (Deprecated) The EndpointSlice controller only generates, and kube-proxy only processes, slices of addressType "IPv4" and "IPv6". No semantics are defined for the "FQDN" type. */
642
692
  addressType: string;
643
693
  /** endpoints is a list of unique endpoints in this slice. Each slice may include a maximum of 1000 endpoints. */
644
- endpoints: Record<string, unknown>[];
694
+ endpoints?: Record<string, unknown>[];
645
695
  /** Standard object's metadata. */
646
696
  metadata?: ObjectMeta;
647
- /** ports specifies the list of network ports exposed by each endpoint in this slice. Each port must have a unique name. When ports is empty, it indicates that there are no defined ports. When a port is defined with a nil port value, it indicates "all ports". Each slice may include a maximum of 100 ports. */
697
+ /** ports specifies the list of network ports exposed by each endpoint in this slice. Each port must have a unique name. Each slice may include a maximum of 100 ports. Services always have at least 1 port, so EndpointSlices generated by the EndpointSlice controller will likewise always have at least 1 port. EndpointSlices used for other purposes may have an empty ports list. */
648
698
  ports?: Record<string, unknown>[];
649
699
  });
650
700
  readonly name: string;
@@ -835,10 +885,10 @@ export declare class GRPCRoute {
835
885
 
836
886
  export declare class HorizontalPodAutoscaler {
837
887
  constructor(props: {
888
+ /** spec is the specification for the behaviour of the autoscaler. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status. */
889
+ spec: Record<string, unknown>;
838
890
  /** metadata is the standard object metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata */
839
891
  metadata?: ObjectMeta;
840
- /** spec is the specification for the behaviour of the autoscaler. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status. */
841
- spec?: Record<string, unknown>;
842
892
  });
843
893
  readonly name: string;
844
894
  readonly namespace: string;
@@ -859,10 +909,10 @@ export declare class HorizontalPodAutoscalerList {
859
909
 
860
910
  export declare class HPA {
861
911
  constructor(props: {
912
+ /** spec is the specification for the behaviour of the autoscaler. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status. */
913
+ spec: Record<string, unknown>;
862
914
  /** metadata is the standard object metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata */
863
915
  metadata?: ObjectMeta;
864
- /** spec is the specification for the behaviour of the autoscaler. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status. */
865
- spec?: Record<string, unknown>;
866
916
  });
867
917
  readonly name: string;
868
918
  readonly namespace: string;
@@ -942,10 +992,10 @@ export declare class IngressList {
942
992
 
943
993
  export declare class IPAddress {
944
994
  constructor(props: {
995
+ /** spec is the desired state of the IPAddress. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status */
996
+ spec: Record<string, unknown>;
945
997
  /** Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata */
946
998
  metadata?: ObjectMeta;
947
- /** spec is the desired state of the IPAddress. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status */
948
- spec?: Record<string, unknown>;
949
999
  });
950
1000
  readonly name: string;
951
1001
  readonly namespace: string;
@@ -1011,6 +1061,30 @@ export declare class Lease {
1011
1061
  readonly uid: string;
1012
1062
  }
1013
1063
 
1064
+ export declare class LeaseCandidate {
1065
+ constructor(props: {
1066
+ /** spec contains the specification of the Lease. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status */
1067
+ spec: Record<string, unknown>;
1068
+ /** More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata */
1069
+ metadata?: ObjectMeta;
1070
+ });
1071
+ readonly name: string;
1072
+ readonly namespace: string;
1073
+ readonly uid: string;
1074
+ }
1075
+
1076
+ export declare class LeaseCandidateList {
1077
+ constructor(props: {
1078
+ /** items is a list of schema objects. */
1079
+ items: Record<string, unknown>[];
1080
+ /** Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata */
1081
+ metadata?: Record<string, unknown>;
1082
+ });
1083
+ readonly name: string;
1084
+ readonly namespace: string;
1085
+ readonly uid: string;
1086
+ }
1087
+
1014
1088
  export declare class LeaseList {
1015
1089
  constructor(props: {
1016
1090
  /** items is a list of schema objects. */
@@ -1049,10 +1123,58 @@ export declare class LimitRangeList {
1049
1123
 
1050
1124
  export declare class LocalSubjectAccessReview {
1051
1125
  constructor(props: {
1052
- /** Spec holds information about the request being evaluated. spec.namespace must be equal to the namespace you made the request against. If empty, it is defaulted. */
1126
+ /** spec holds information about the request being evaluated. spec.namespace must be equal to the namespace you made the request against. If empty, it is defaulted. */
1053
1127
  spec: Record<string, unknown>;
1054
- /** Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata */
1128
+ /** metadata is the standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata */
1129
+ metadata?: ObjectMeta;
1130
+ });
1131
+ readonly name: string;
1132
+ readonly namespace: string;
1133
+ readonly uid: string;
1134
+ }
1135
+
1136
+ export declare class MutatingAdmissionPolicy {
1137
+ constructor(props: {
1138
+ /** metadata is the standard object metadata; More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata. */
1055
1139
  metadata?: ObjectMeta;
1140
+ /** spec defines the desired behavior of the MutatingAdmissionPolicy. */
1141
+ spec?: Record<string, unknown>;
1142
+ });
1143
+ readonly name: string;
1144
+ readonly namespace: string;
1145
+ readonly uid: string;
1146
+ }
1147
+
1148
+ export declare class MutatingAdmissionPolicyBinding {
1149
+ constructor(props: {
1150
+ /** metadata is the standard object metadata; More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata. */
1151
+ metadata?: ObjectMeta;
1152
+ /** spec defines the desired behavior of the MutatingAdmissionPolicyBinding. */
1153
+ spec?: Record<string, unknown>;
1154
+ });
1155
+ readonly name: string;
1156
+ readonly namespace: string;
1157
+ readonly uid: string;
1158
+ }
1159
+
1160
+ export declare class MutatingAdmissionPolicyBindingList {
1161
+ constructor(props: {
1162
+ /** List of PolicyBinding. */
1163
+ items: Record<string, unknown>[];
1164
+ /** metadata is the standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds */
1165
+ metadata?: Record<string, unknown>;
1166
+ });
1167
+ readonly name: string;
1168
+ readonly namespace: string;
1169
+ readonly uid: string;
1170
+ }
1171
+
1172
+ export declare class MutatingAdmissionPolicyList {
1173
+ constructor(props: {
1174
+ /** List of ValidatingAdmissionPolicy. */
1175
+ items: Record<string, unknown>[];
1176
+ /** metadata is the standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds */
1177
+ metadata?: Record<string, unknown>;
1056
1178
  });
1057
1179
  readonly name: string;
1058
1180
  readonly namespace: string;
@@ -1061,9 +1183,9 @@ export declare class LocalSubjectAccessReview {
1061
1183
 
1062
1184
  export declare class MutatingWebhookConfiguration {
1063
1185
  constructor(props: {
1064
- /** Standard object metadata; More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata. */
1186
+ /** metadata is the standard object metadata; More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata. */
1065
1187
  metadata?: ObjectMeta;
1066
- /** Webhooks is a list of webhooks and the affected resources and operations. */
1188
+ /** webhooks is a list of webhooks and the affected resources and operations. */
1067
1189
  webhooks?: Record<string, unknown>[];
1068
1190
  });
1069
1191
  readonly name: string;
@@ -1075,7 +1197,7 @@ export declare class MutatingWebhookConfigurationList {
1075
1197
  constructor(props: {
1076
1198
  /** List of MutatingWebhookConfiguration. */
1077
1199
  items: Record<string, unknown>[];
1078
- /** Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds */
1200
+ /** metadata is the standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds */
1079
1201
  metadata?: Record<string, unknown>;
1080
1202
  });
1081
1203
  readonly name: string;
@@ -1261,6 +1383,30 @@ export declare class Pod {
1261
1383
  readonly uid: string;
1262
1384
  }
1263
1385
 
1386
+ export declare class PodCertificateRequest {
1387
+ constructor(props: {
1388
+ /** spec contains the details about the certificate being requested. */
1389
+ spec: Record<string, unknown>;
1390
+ /** metadata contains the object metadata. */
1391
+ metadata?: ObjectMeta;
1392
+ });
1393
+ readonly name: string;
1394
+ readonly namespace: string;
1395
+ readonly uid: string;
1396
+ }
1397
+
1398
+ export declare class PodCertificateRequestList {
1399
+ constructor(props: {
1400
+ /** items is a collection of PodCertificateRequest objects */
1401
+ items: Record<string, unknown>[];
1402
+ /** metadata contains the list metadata. */
1403
+ metadata?: Record<string, unknown>;
1404
+ });
1405
+ readonly name: string;
1406
+ readonly namespace: string;
1407
+ readonly uid: string;
1408
+ }
1409
+
1264
1410
  export declare class PodDisruptionBudget {
1265
1411
  constructor(props: {
1266
1412
  /** Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata */
@@ -1323,8 +1469,6 @@ export declare class PodTemplateList {
1323
1469
 
1324
1470
  export declare class PriorityClass {
1325
1471
  constructor(props: {
1326
- /** value represents the integer value of this priority class. This is the actual priority that pods receive when they have the name of this class in their pod spec. */
1327
- value: number;
1328
1472
  /** description is an arbitrary string that usually provides guidelines on when this priority class should be used. */
1329
1473
  description?: string;
1330
1474
  /** globalDefault specifies whether this PriorityClass should be considered as the default priority for pods that do not have any priority class. Only one PriorityClass can be marked as `globalDefault`. However, if more than one PriorityClasses exists with their `globalDefault` field set to true, the smallest value of such global default PriorityClasses will be used as the default priority. */
@@ -1333,6 +1477,8 @@ export declare class PriorityClass {
1333
1477
  metadata?: ObjectMeta;
1334
1478
  /** preemptionPolicy is the Policy for preempting pods with lower priority. One of Never, PreemptLowerPriority. Defaults to PreemptLowerPriority if unset. */
1335
1479
  preemptionPolicy?: string;
1480
+ /** value represents the integer value of this priority class. This is the actual priority that pods receive when they have the name of this class in their pod spec. */
1481
+ value?: number;
1336
1482
  });
1337
1483
  readonly name: string;
1338
1484
  readonly namespace: string;
@@ -1465,7 +1611,7 @@ export declare class ReplicaSet {
1465
1611
 
1466
1612
  export declare class ReplicaSetList {
1467
1613
  constructor(props: {
1468
- /** List of ReplicaSets. More info: https://kubernetes.io/docs/concepts/workloads/controllers/replicationcontroller */
1614
+ /** List of ReplicaSets. More info: https://kubernetes.io/docs/concepts/workloads/controllers/replicaset */
1469
1615
  items: Record<string, unknown>[];
1470
1616
  /** Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds */
1471
1617
  metadata?: Record<string, unknown>;
@@ -1756,9 +1902,9 @@ export declare class SecretList {
1756
1902
 
1757
1903
  export declare class SelfSubjectAccessReview {
1758
1904
  constructor(props: {
1759
- /** Spec holds information about the request being evaluated. user and groups must be empty */
1905
+ /** spec holds information about the request being evaluated. user and groups must be empty */
1760
1906
  spec: Record<string, unknown>;
1761
- /** Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata */
1907
+ /** metadata is the standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata */
1762
1908
  metadata?: ObjectMeta;
1763
1909
  });
1764
1910
  readonly name: string;
@@ -1768,7 +1914,7 @@ export declare class SelfSubjectAccessReview {
1768
1914
 
1769
1915
  export declare class SelfSubjectReview {
1770
1916
  constructor(props: {
1771
- /** Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata */
1917
+ /** metadata is standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata */
1772
1918
  metadata?: ObjectMeta;
1773
1919
  });
1774
1920
  readonly name: string;
@@ -1778,9 +1924,9 @@ export declare class SelfSubjectReview {
1778
1924
 
1779
1925
  export declare class SelfSubjectRulesReview {
1780
1926
  constructor(props: {
1781
- /** Spec holds information about the request being evaluated. */
1927
+ /** spec holds information about the request being evaluated. */
1782
1928
  spec: Record<string, unknown>;
1783
- /** Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata */
1929
+ /** metadata is the standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata */
1784
1930
  metadata?: ObjectMeta;
1785
1931
  });
1786
1932
  readonly name: string;
@@ -1954,6 +2100,30 @@ export declare class StorageClassList {
1954
2100
  readonly uid: string;
1955
2101
  }
1956
2102
 
2103
+ export declare class StorageVersionMigration {
2104
+ constructor(props: {
2105
+ /** Standard object metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata */
2106
+ metadata?: ObjectMeta;
2107
+ /** Specification of the migration. */
2108
+ spec?: Record<string, unknown>;
2109
+ });
2110
+ readonly name: string;
2111
+ readonly namespace: string;
2112
+ readonly uid: string;
2113
+ }
2114
+
2115
+ export declare class StorageVersionMigrationList {
2116
+ constructor(props: {
2117
+ /** Items is the list of StorageVersionMigration */
2118
+ items: Record<string, unknown>[];
2119
+ /** Standard list metadata More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata */
2120
+ metadata?: Record<string, unknown>;
2121
+ });
2122
+ readonly name: string;
2123
+ readonly namespace: string;
2124
+ readonly uid: string;
2125
+ }
2126
+
1957
2127
  export declare class STS {
1958
2128
  constructor(props: {
1959
2129
  /** Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata */
@@ -1968,9 +2138,9 @@ export declare class STS {
1968
2138
 
1969
2139
  export declare class SubjectAccessReview {
1970
2140
  constructor(props: {
1971
- /** Spec holds information about the request being evaluated */
2141
+ /** spec holds information about the request being evaluated */
1972
2142
  spec: Record<string, unknown>;
1973
- /** Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata */
2143
+ /** metadata is the standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata */
1974
2144
  metadata?: ObjectMeta;
1975
2145
  });
1976
2146
  readonly name: string;
@@ -1980,10 +2150,10 @@ export declare class SubjectAccessReview {
1980
2150
 
1981
2151
  export declare class TokenRequest {
1982
2152
  constructor(props: {
1983
- /** Spec holds information about the request being evaluated */
1984
- spec: Record<string, unknown>;
1985
- /** Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata */
2153
+ /** metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata */
1986
2154
  metadata?: ObjectMeta;
2155
+ /** spec holds information about the request being evaluated */
2156
+ spec?: Record<string, unknown>;
1987
2157
  });
1988
2158
  readonly name: string;
1989
2159
  readonly namespace: string;
@@ -1992,9 +2162,9 @@ export declare class TokenRequest {
1992
2162
 
1993
2163
  export declare class TokenReview {
1994
2164
  constructor(props: {
1995
- /** Spec holds information about the request being evaluated */
2165
+ /** spec holds information about the request being evaluated */
1996
2166
  spec: Record<string, unknown>;
1997
- /** Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata */
2167
+ /** metadata is the standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata */
1998
2168
  metadata?: ObjectMeta;
1999
2169
  });
2000
2170
  readonly name: string;
@@ -2004,9 +2174,9 @@ export declare class TokenReview {
2004
2174
 
2005
2175
  export declare class ValidatingAdmissionPolicy {
2006
2176
  constructor(props: {
2007
- /** Standard object metadata; More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata. */
2177
+ /** metadata is the standard object metadata; More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata. */
2008
2178
  metadata?: ObjectMeta;
2009
- /** Specification of the desired behavior of the ValidatingAdmissionPolicy. */
2179
+ /** spec defines the desired behavior of the ValidatingAdmissionPolicy. */
2010
2180
  spec?: Record<string, unknown>;
2011
2181
  });
2012
2182
  readonly name: string;
@@ -2016,10 +2186,10 @@ export declare class ValidatingAdmissionPolicy {
2016
2186
 
2017
2187
  export declare class ValidatingAdmissionPolicyBinding {
2018
2188
  constructor(props: {
2019
- /** Standard object metadata; More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata. */
2189
+ /** spec defines the desired behavior of the ValidatingAdmissionPolicyBinding. */
2190
+ spec: Record<string, unknown>;
2191
+ /** metadata is the standard object metadata; More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata. */
2020
2192
  metadata?: ObjectMeta;
2021
- /** Specification of the desired behavior of the ValidatingAdmissionPolicyBinding. */
2022
- spec?: Record<string, unknown>;
2023
2193
  });
2024
2194
  readonly name: string;
2025
2195
  readonly namespace: string;
@@ -2030,7 +2200,7 @@ export declare class ValidatingAdmissionPolicyBindingList {
2030
2200
  constructor(props: {
2031
2201
  /** List of PolicyBinding. */
2032
2202
  items: Record<string, unknown>[];
2033
- /** Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds */
2203
+ /** metadata is the standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds */
2034
2204
  metadata?: Record<string, unknown>;
2035
2205
  });
2036
2206
  readonly name: string;
@@ -2042,7 +2212,7 @@ export declare class ValidatingAdmissionPolicyList {
2042
2212
  constructor(props: {
2043
2213
  /** List of ValidatingAdmissionPolicy. */
2044
2214
  items: Record<string, unknown>[];
2045
- /** Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds */
2215
+ /** metadata is the standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds */
2046
2216
  metadata?: Record<string, unknown>;
2047
2217
  });
2048
2218
  readonly name: string;
@@ -2052,9 +2222,9 @@ export declare class ValidatingAdmissionPolicyList {
2052
2222
 
2053
2223
  export declare class ValidatingWebhookConfiguration {
2054
2224
  constructor(props: {
2055
- /** Standard object metadata; More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata. */
2225
+ /** metadata is the standard object metadata; More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata. */
2056
2226
  metadata?: ObjectMeta;
2057
- /** Webhooks is a list of webhooks and the affected resources and operations. */
2227
+ /** webhooks is a list of webhooks and the affected resources and operations. */
2058
2228
  webhooks?: Record<string, unknown>[];
2059
2229
  });
2060
2230
  readonly name: string;
@@ -2066,7 +2236,7 @@ export declare class ValidatingWebhookConfigurationList {
2066
2236
  constructor(props: {
2067
2237
  /** List of ValidatingWebhookConfiguration. */
2068
2238
  items: Record<string, unknown>[];
2069
- /** Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds */
2239
+ /** metadata is the standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds */
2070
2240
  metadata?: Record<string, unknown>;
2071
2241
  });
2072
2242
  readonly name: string;
@@ -2184,7 +2354,7 @@ export declare class Container {
2184
2354
  command?: string[];
2185
2355
  /** List of environment variables to set in the container. Cannot be updated. */
2186
2356
  env?: EnvVar[];
2187
- /** List of sources to populate environment variables in the container. The keys defined within a source must be a C_IDENTIFIER. All invalid keys will be reported as an event when the container is starting. When a key exists in multiple sources, the value associated with the last source will take precedence. Values defined by an Env with a duplicate key will take precedence. Cannot be updated. */
2357
+ /** List of sources to populate environment variables in the container. The keys defined within a source may consist of any printable ASCII characters except '='. When a key exists in multiple sources, the value associated with the last source will take precedence. Values defined by an Env with a duplicate key will take precedence. Cannot be updated. */
2188
2358
  envFrom?: EnvFromSource[];
2189
2359
  /** Container image name. More info: https://kubernetes.io/docs/concepts/containers/images This field is optional to allow higher level config management to default or override container images in workload controllers like Deployments and StatefulSets. */
2190
2360
  image?: string;
@@ -2198,12 +2368,14 @@ export declare class Container {
2198
2368
  ports?: ContainerPort[];
2199
2369
  /** Periodic probe of container service readiness. Container will be removed from service endpoints if the probe fails. Cannot be updated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes */
2200
2370
  readinessProbe?: Probe;
2201
- /** Resources resize policy for the container. */
2371
+ /** Resources resize policy for the container. This field cannot be set on ephemeral containers. */
2202
2372
  resizePolicy?: Record<string, unknown>[];
2203
2373
  /** Compute Resources required by this container. Cannot be updated. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/ */
2204
2374
  resources?: ResourceRequirements;
2205
- /** RestartPolicy defines the restart behavior of individual containers in a pod. This field may only be set for init containers, and the only allowed value is "Always". For non-init containers or when this field is not specified, the restart behavior is defined by the Pod's restart policy and the container type. Setting the RestartPolicy as "Always" for the init container will have the following effect: this init container will be continually restarted on exit until all regular containers have terminated. Once all regular containers have completed, all init containers with restartPolicy "Always" will be shut down. This lifecycle differs from normal init containers and is often referred to as a "sidecar" container. Although this init container still starts in the init container sequence, it does not wait for the container to complete before proceeding to the next init container. Instead, the next init container starts immediately after this init container is started, or after any startupProbe has successfully completed. */
2375
+ /** RestartPolicy defines the restart behavior of individual containers in a pod. This overrides the pod-level restart policy. When this field is not specified, the restart behavior is defined by the Pod's restart policy and the container type. Additionally, setting the RestartPolicy as "Always" for the init container will have the following effect: this init container will be continually restarted on exit until all regular containers have terminated. Once all regular containers have completed, all init containers with restartPolicy "Always" will be shut down. This lifecycle differs from normal init containers and is often referred to as a "sidecar" container. Although this init container still starts in the init container sequence, it does not wait for the container to complete before proceeding to the next init container. Instead, the next init container starts immediately after this init container is started, or after any startupProbe has successfully completed. */
2206
2376
  restartPolicy?: string;
2377
+ /** Represents a list of rules to be checked to determine if the container should be restarted on exit. The rules are evaluated in order. Once a rule matches a container exit condition, the remaining rules are ignored. If no rule matches the container exit condition, the Container-level restart policy determines the whether the container is restarted or not. Constraints on the rules: - At most 20 rules are allowed. - Rules can have the same action. - Identical rules are not forbidden in validations. When rules are specified, container MUST set RestartPolicy explicitly even it if matches the Pod's RestartPolicy. */
2378
+ restartPolicyRules?: Record<string, unknown>[];
2207
2379
  /** SecurityContext defines the security options the container should be run with. If set, the fields of SecurityContext override the equivalent fields of PodSecurityContext. More info: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ */
2208
2380
  securityContext?: SecurityContext;
2209
2381
  /** StartupProbe indicates that the Pod has successfully initialized. If specified, no other probes are executed until this completes successfully. If this probe fails, the Pod will be restarted, just as if the livenessProbe failed. This can be used to provide different probe parameters at the beginning of a Pod's lifecycle, when it might take a long time to load data or warm a cache, than during steady-state operation. This cannot be updated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes */
@@ -2255,7 +2427,7 @@ export declare class EnvFromSource {
2255
2427
  constructor(props: {
2256
2428
  /** The ConfigMap to select from */
2257
2429
  configMapRef?: Record<string, unknown>;
2258
- /** An optional identifier to prepend to each key in the ConfigMap. Must be a C_IDENTIFIER. */
2430
+ /** Optional text to prepend to the name of each environment variable. May consist of any printable ASCII characters except '='. */
2259
2431
  prefix?: string;
2260
2432
  /** The Secret to select from */
2261
2433
  secretRef?: Record<string, unknown>;
@@ -2264,7 +2436,7 @@ export declare class EnvFromSource {
2264
2436
 
2265
2437
  export declare class EnvVar {
2266
2438
  constructor(props: {
2267
- /** Name of the environment variable. Must be a C_IDENTIFIER. */
2439
+ /** Name of the environment variable. May consist of any printable ASCII characters except '='. */
2268
2440
  name: string;
2269
2441
  /** Variable references $(VAR_NAME) are expanded using the previously defined environment variables in the container and any service environment variables. If a variable cannot be resolved, the reference in the input string will be unchanged. Double $$ are reduced to a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. "$$(VAR_NAME)" will produce the string literal "$(VAR_NAME)". Escaped references will never be expanded, regardless of whether the variable exists or not. Defaults to "". */
2270
2442
  value?: string;
@@ -2279,6 +2451,8 @@ export declare class EnvVarSource {
2279
2451
  configMapKeyRef?: ConfigMapKeySelector;
2280
2452
  /** Selects a field of the pod: supports metadata.name, metadata.namespace, `metadata.labels['<KEY>']`, `metadata.annotations['<KEY>']`, spec.nodeName, spec.serviceAccountName, status.hostIP, status.podIP, status.podIPs. */
2281
2453
  fieldRef?: Record<string, unknown>;
2454
+ /** FileKeyRef selects a key of the env file. Requires the EnvFiles feature gate to be enabled. */
2455
+ fileKeyRef?: Record<string, unknown>;
2282
2456
  /** Selects a resource of the container: only resources limits and requests (limits.cpu, limits.memory, limits.ephemeral-storage, requests.cpu, requests.memory and requests.ephemeral-storage) are currently supported. */
2283
2457
  resourceFieldRef?: Record<string, unknown>;
2284
2458
  /** Selects a key of a secret in the pod's namespace */
@@ -2296,7 +2470,7 @@ export declare class EphemeralContainer {
2296
2470
  command?: string[];
2297
2471
  /** List of environment variables to set in the container. Cannot be updated. */
2298
2472
  env?: EnvVar[];
2299
- /** List of sources to populate environment variables in the container. The keys defined within a source must be a C_IDENTIFIER. All invalid keys will be reported as an event when the container is starting. When a key exists in multiple sources, the value associated with the last source will take precedence. Values defined by an Env with a duplicate key will take precedence. Cannot be updated. */
2473
+ /** List of sources to populate environment variables in the container. The keys defined within a source may consist of any printable ASCII characters except '='. When a key exists in multiple sources, the value associated with the last source will take precedence. Values defined by an Env with a duplicate key will take precedence. Cannot be updated. */
2300
2474
  envFrom?: EnvFromSource[];
2301
2475
  /** Container image name. More info: https://kubernetes.io/docs/concepts/containers/images */
2302
2476
  image?: string;
@@ -2314,8 +2488,10 @@ export declare class EphemeralContainer {
2314
2488
  resizePolicy?: Record<string, unknown>[];
2315
2489
  /** Resources are not allowed for ephemeral containers. Ephemeral containers use spare resources already allocated to the pod. */
2316
2490
  resources?: ResourceRequirements;
2317
- /** Restart policy for the container to manage the restart behavior of each container within a pod. This may only be set for init containers. You cannot set this field on ephemeral containers. */
2491
+ /** Restart policy for the container to manage the restart behavior of each container within a pod. You cannot set this field on ephemeral containers. */
2318
2492
  restartPolicy?: string;
2493
+ /** Represents a list of rules to be checked to determine if the container should be restarted on exit. You cannot set this field on ephemeral containers. */
2494
+ restartPolicyRules?: Record<string, unknown>[];
2319
2495
  /** Optional: SecurityContext defines the security options the ephemeral container should be run with. If set, the fields of SecurityContext override the equivalent fields of PodSecurityContext. */
2320
2496
  securityContext?: SecurityContext;
2321
2497
  /** Probes are not allowed for ephemeral containers. */
@@ -2631,13 +2807,13 @@ export declare class PersistentVolumeClaimSpec {
2631
2807
  in any namespaces.
2632
2808
  (Beta) Using this field requires the AnyVolumeDataSource feature gate to be enabled. (Alpha) Using the namespace field of dataSourceRef requires the CrossNamespaceVolumeDataSource feature gate to be enabled. */
2633
2809
  dataSourceRef?: Record<string, unknown>;
2634
- /** resources represents the minimum resources the volume should have. If RecoverVolumeExpansionFailure feature is enabled users are allowed to specify resource requirements that are lower than previous value but must still be higher than capacity recorded in the status field of the claim. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#resources */
2810
+ /** resources represents the minimum resources the volume should have. Users are allowed to specify resource requirements that are lower than previous value but must still be higher than capacity recorded in the status field of the claim. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#resources */
2635
2811
  resources?: Record<string, unknown>;
2636
2812
  /** selector is a label query over volumes to consider for binding. */
2637
2813
  selector?: LabelSelector;
2638
2814
  /** storageClassName is the name of the StorageClass required by the claim. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#class-1 */
2639
2815
  storageClassName?: string;
2640
- /** volumeAttributesClassName may be used to set the VolumeAttributesClass used by this claim. If specified, the CSI driver will create or update the volume with the attributes defined in the corresponding VolumeAttributesClass. This has a different purpose than storageClassName, it can be changed after the claim is created. An empty string value means that no VolumeAttributesClass will be applied to the claim but it's not allowed to reset this field to empty string once it is set. If unspecified and the PersistentVolumeClaim is unbound, the default VolumeAttributesClass will be set by the persistentvolume controller if it exists. If the resource referred to by volumeAttributesClass does not exist, this PersistentVolumeClaim will be set to a Pending state, as reflected by the modifyVolumeStatus field, until such as a resource exists. More info: https://kubernetes.io/docs/concepts/storage/volume-attributes-classes/ (Beta) Using this field requires the VolumeAttributesClass feature gate to be enabled (off by default). */
2816
+ /** volumeAttributesClassName may be used to set the VolumeAttributesClass used by this claim. If specified, the CSI driver will create or update the volume with the attributes defined in the corresponding VolumeAttributesClass. This has a different purpose than storageClassName, it can be changed after the claim is created. An empty string or nil value indicates that no VolumeAttributesClass will be applied to the claim. If the claim enters an Infeasible error state, this field can be reset to its previous value (including nil) to cancel the modification. If the resource referred to by volumeAttributesClass does not exist, this PersistentVolumeClaim will be set to a Pending state, as reflected by the modifyVolumeStatus field, until such as a resource exists. More info: https://kubernetes.io/docs/concepts/storage/volume-attributes-classes/ */
2641
2817
  volumeAttributesClassName?: string;
2642
2818
  /** volumeMode defines what type of volume is required by the claim. Value of Filesystem is implied when not included in claim spec. */
2643
2819
  volumeMode?: string;
@@ -2662,9 +2838,7 @@ IfHealthyBudget policy means that running pods (status.phase="Running"), but not
2662
2838
 
2663
2839
  AlwaysAllow policy means that all running pods (status.phase="Running"), but not yet healthy are considered disrupted and can be evicted regardless of whether the criteria in a PDB is met. This means perspective running pods of a disrupted application might not get a chance to become healthy. Healthy pods will be subject to the PDB for eviction.
2664
2840
 
2665
- Additional policies may be added in the future. Clients making eviction decisions should disallow eviction of unhealthy pods if they encounter an unrecognized policy in this field.
2666
-
2667
- This field is beta-level. The eviction API uses this field when the feature gate PDBUnhealthyPodEvictionPolicy is enabled (enabled by default). */
2841
+ Additional policies may be added in the future. Clients making eviction decisions should disallow eviction of unhealthy pods if they encounter an unrecognized policy in this field. */
2668
2842
  unhealthyPodEvictionPolicy?: string;
2669
2843
  });
2670
2844
  }
@@ -2738,15 +2912,19 @@ export declare class PodSpec {
2738
2912
  hostIPC?: boolean;
2739
2913
  /** Specifies the hostname of the Pod If not specified, the pod's hostname will be set to a system-defined value. */
2740
2914
  hostname?: string;
2741
- /** Host networking requested for this pod. Use the host's network namespace. If this option is set, the ports that will be used must be specified. Default to false. */
2915
+ /** HostnameOverride specifies an explicit override for the pod's hostname as perceived by the pod. This field only specifies the pod's hostname and does not affect its DNS records. When this field is set to a non-empty string: - It takes precedence over the values set in `hostname` and `subdomain`. - The Pod's hostname will be set to this value. - `setHostnameAsFQDN` must be nil or set to false. - `hostNetwork` must be set to false.
2916
+
2917
+ This field must be a valid DNS subdomain as defined in RFC 1123 and contain at most 64 characters. Requires the HostnameOverride feature gate to be enabled. */
2918
+ hostnameOverride?: string;
2919
+ /** Host networking requested for this pod. Use the host's network namespace. When using HostNetwork you should specify ports so the scheduler is aware. When `hostNetwork` is true, specified `hostPort` fields in port definitions must match `containerPort`, and unspecified `hostPort` fields in port definitions are defaulted to match `containerPort`. Default to false. */
2742
2920
  hostNetwork?: boolean;
2743
2921
  /** Use the host's pid namespace. Optional: Default to false. */
2744
2922
  hostPID?: boolean;
2745
- /** Use the host's user namespace. Optional: Default to true. If set to true or not present, the pod will be run in the host user namespace, useful for when the pod needs a feature only available to the host user namespace, such as loading a kernel module with CAP_SYS_MODULE. When set to false, a new userns is created for the pod. Setting false is useful for mitigating container breakout vulnerabilities even allowing users to run their containers as root without actually having root privileges on the host. This field is alpha-level and is only honored by servers that enable the UserNamespacesSupport feature. */
2923
+ /** Use the host's user namespace. Optional: Default to true. If set to true or not present, the pod will be run in the host user namespace, useful for when the pod needs a feature only available to the host user namespace, such as loading a kernel module with CAP_SYS_MODULE. When set to false, a new userns is created for the pod. Setting false is useful for mitigating container breakout vulnerabilities even allowing users to run their containers as root without actually having root privileges on the host. */
2746
2924
  hostUsers?: boolean;
2747
2925
  /** ImagePullSecrets is an optional list of references to secrets in the same namespace to use for pulling any of the images used by this PodSpec. If specified, these secrets will be passed to individual puller implementations for them to use. More info: https://kubernetes.io/docs/concepts/containers/images#specifying-imagepullsecrets-on-a-pod */
2748
2926
  imagePullSecrets?: LocalObjectReference[];
2749
- /** List of initialization containers belonging to the pod. Init containers are executed in order prior to containers being started. If any init container fails, the pod is considered to have failed and is handled according to its restartPolicy. The name for an init container or normal container must be unique among all containers. Init containers may not have Lifecycle actions, Readiness probes, Liveness probes, or Startup probes. The resourceRequirements of an init container are taken into account during scheduling by finding the highest request/limit for each resource type, and then using the max of of that value or the sum of the normal containers. Limits are applied to init containers in a similar fashion. Init containers cannot currently be added or removed. Cannot be updated. More info: https://kubernetes.io/docs/concepts/workloads/pods/init-containers/ */
2927
+ /** List of initialization containers belonging to the pod. Init containers are executed in order prior to containers being started. If any init container fails, the pod is considered to have failed and is handled according to its restartPolicy. The name for an init container or normal container must be unique among all containers. Init containers may not have Lifecycle actions, Readiness probes, Liveness probes, or Startup probes. The resourceRequirements of an init container are taken into account during scheduling by finding the highest request/limit for each resource type, and then using the max of that value or the sum of the normal containers. Limits are applied to init containers in a similar fashion. Init containers cannot currently be added or removed. Cannot be updated. More info: https://kubernetes.io/docs/concepts/workloads/pods/init-containers/ */
2750
2928
  initContainers?: Container[];
2751
2929
  /** NodeName indicates in which node this pod is scheduled. If empty, this pod is a candidate for scheduling by the scheduler defined in schedulerName. Once this field is set, the kubelet for this node becomes responsible for the lifecycle of this pod. This field should not be used to express a desire for the pod to be scheduled on a specific node. https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#nodename */
2752
2930
  nodeName?: string;
@@ -2756,7 +2934,7 @@ export declare class PodSpec {
2756
2934
 
2757
2935
  If the OS field is set to linux, the following fields must be unset: -securityContext.windowsOptions
2758
2936
 
2759
- If the OS field is set to windows, following fields must be unset: - spec.hostPID - spec.hostIPC - spec.hostUsers - spec.securityContext.appArmorProfile - spec.securityContext.seLinuxOptions - spec.securityContext.seccompProfile - spec.securityContext.fsGroup - spec.securityContext.fsGroupChangePolicy - spec.securityContext.sysctls - spec.shareProcessNamespace - spec.securityContext.runAsUser - spec.securityContext.runAsGroup - spec.securityContext.supplementalGroups - spec.securityContext.supplementalGroupsPolicy - spec.containers[*].securityContext.appArmorProfile - spec.containers[*].securityContext.seLinuxOptions - spec.containers[*].securityContext.seccompProfile - spec.containers[*].securityContext.capabilities - spec.containers[*].securityContext.readOnlyRootFilesystem - spec.containers[*].securityContext.privileged - spec.containers[*].securityContext.allowPrivilegeEscalation - spec.containers[*].securityContext.procMount - spec.containers[*].securityContext.runAsUser - spec.containers[*].securityContext.runAsGroup */
2937
+ If the OS field is set to windows, following fields must be unset: - spec.hostPID - spec.hostIPC - spec.hostUsers - spec.resources - spec.securityContext.appArmorProfile - spec.securityContext.seLinuxOptions - spec.securityContext.seccompProfile - spec.securityContext.fsGroup - spec.securityContext.fsGroupChangePolicy - spec.securityContext.sysctls - spec.shareProcessNamespace - spec.securityContext.runAsUser - spec.securityContext.runAsGroup - spec.securityContext.supplementalGroups - spec.securityContext.supplementalGroupsPolicy - spec.containers[*].securityContext.appArmorProfile - spec.containers[*].securityContext.seLinuxOptions - spec.containers[*].securityContext.seccompProfile - spec.containers[*].securityContext.capabilities - spec.containers[*].securityContext.readOnlyRootFilesystem - spec.containers[*].securityContext.privileged - spec.containers[*].securityContext.allowPrivilegeEscalation - spec.containers[*].securityContext.procMount - spec.containers[*].securityContext.runAsUser - spec.containers[*].securityContext.runAsGroup */
2760
2938
  os?: Record<string, unknown>;
2761
2939
  /** Overhead represents the resource overhead associated with running a pod for a given RuntimeClass. This field will be autopopulated at admission time by the RuntimeClass admission controller. If the RuntimeClass admission controller is enabled, overhead must not be set in Pod create requests. The RuntimeClass admission controller will reject Pod create requests which have the overhead already set. If RuntimeClass is configured and selected in the PodSpec, Overhead will be set to the value defined in the corresponding RuntimeClass, otherwise it will remain unset and treated as zero. More info: https://git.k8s.io/enhancements/keps/sig-node/688-pod-overhead/README.md */
2762
2940
  overhead?: Record<string, string>;
@@ -2770,11 +2948,11 @@ If the OS field is set to windows, following fields must be unset: - spec.hostPI
2770
2948
  readinessGates?: Record<string, unknown>[];
2771
2949
  /** ResourceClaims defines which ResourceClaims must be allocated and reserved before the Pod is allowed to start. The resources will be made available to those containers which consume them by name.
2772
2950
 
2773
- This is an alpha field and requires enabling the DynamicResourceAllocation feature gate.
2951
+ This is a stable field but requires that the DynamicResourceAllocation feature gate is enabled.
2774
2952
 
2775
2953
  This field is immutable. */
2776
2954
  resourceClaims?: Record<string, unknown>[];
2777
- /** Resources is the total amount of CPU and Memory resources required by all containers in the pod. It supports specifying Requests and Limits for "cpu" and "memory" resource names only. ResourceClaims are not supported.
2955
+ /** Resources is the total amount of CPU and Memory resources required by all containers in the pod. It supports specifying Requests and Limits for "cpu", "memory" and "hugepages-" resource names only. ResourceClaims are not supported.
2778
2956
 
2779
2957
  This field enables fine-grained control over resource allocation for the entire pod, allowing resource sharing among containers in a pod.
2780
2958
 
@@ -2790,6 +2968,8 @@ This is an alpha field and requires enabling the PodLevelResources feature gate.
2790
2968
 
2791
2969
  SchedulingGates can only be set at pod creation time, and be removed only afterwards. */
2792
2970
  schedulingGates?: Record<string, unknown>[];
2971
+ /** SchedulingGroup provides a reference to the immediate scheduling runtime grouping object that this Pod belongs to. This field is used by the scheduler to identify the group and apply the correct group scheduling policies. The association with a group also impacts other lifecycle aspects of a Pod that are relevant in a wider context of scheduling like preemption, resource attachment, etc. If not specified, the Pod is treated as a single unit in all of these aspects. The group object referenced by this field may not exist at the time the Pod is created. This field is immutable, but a group object with the same name may be recreated with different policies. Doing this during pod scheduling may result in the placement not conforming to the expected policies. */
2972
+ schedulingGroup?: Record<string, unknown>;
2793
2973
  /** SecurityContext holds pod-level security attributes and common container settings. Optional: Defaults to empty. See type description for default values of each field. */
2794
2974
  securityContext?: PodSecurityContext;
2795
2975
  /** DeprecatedServiceAccount is a deprecated alias for ServiceAccountName. Deprecated: Use serviceAccountName instead. */
@@ -2866,7 +3046,7 @@ export declare class ResourceRequirements {
2866
3046
  constructor(props: {
2867
3047
  /** Claims lists the names of resources, defined in spec.resourceClaims, that are used by this container.
2868
3048
 
2869
- This is an alpha field and requires enabling the DynamicResourceAllocation feature gate.
3049
+ This field depends on the DynamicResourceAllocation feature gate.
2870
3050
 
2871
3051
  This field is immutable. It can only be set for containers. */
2872
3052
  claims?: Record<string, unknown>[];
@@ -2879,12 +3059,12 @@ This field is immutable. It can only be set for containers. */
2879
3059
 
2880
3060
  export declare class RoleRef {
2881
3061
  constructor(props: {
2882
- /** APIGroup is the group for the resource being referenced */
2883
- apiGroup: string;
2884
3062
  /** Kind is the type of resource being referenced */
2885
3063
  kind: string;
2886
3064
  /** Name is the name of resource being referenced */
2887
3065
  name: string;
3066
+ /** APIGroup is the group for the resource being referenced */
3067
+ apiGroup?: string;
2888
3068
  });
2889
3069
  }
2890
3070
 
@@ -2918,7 +3098,7 @@ export declare class SecurityContext {
2918
3098
  capabilities?: Capabilities;
2919
3099
  /** Run container in privileged mode. Processes in privileged containers are essentially equivalent to root on the host. Defaults to false. Note that this field cannot be set when spec.os.name is windows. */
2920
3100
  privileged?: boolean;
2921
- /** procMount denotes the type of proc mount to use for the containers. The default value is Default which uses the container runtime defaults for readonly paths and masked paths. This requires the ProcMountType feature flag to be enabled. Note that this field cannot be set when spec.os.name is windows. */
3101
+ /** procMount denotes the type of proc mount to use for the containers. The default value is Default which uses the container runtime defaults for readonly paths and masked paths. Note that this field cannot be set when spec.os.name is windows. */
2922
3102
  procMount?: string;
2923
3103
  /** Whether this container has a read-only root filesystem. Default is false. Note that this field cannot be set when spec.os.name is windows. */
2924
3104
  readOnlyRootFilesystem?: boolean;
@@ -3000,7 +3180,7 @@ export declare class Toleration {
3000
3180
  effect?: string;
3001
3181
  /** Key is the taint key that the toleration applies to. Empty means match all taint keys. If the key is empty, operator must be Exists; this combination means to match all values and all keys. */
3002
3182
  key?: string;
3003
- /** Operator represents a key's relationship to the value. Valid operators are Exists and Equal. Defaults to Equal. Exists is equivalent to wildcard for value, so that a pod can tolerate all taints of a particular category. */
3183
+ /** Operator represents a key's relationship to the value. Valid operators are Exists, Equal, Lt, and Gt. Defaults to Equal. Exists is equivalent to wildcard for value, so that a pod can tolerate all taints of a particular category. Lt and Gt perform numeric comparisons (requires feature gate TaintTolerationComparisonOperators). */
3004
3184
  operator?: string;
3005
3185
  /** TolerationSeconds represents the period of time the toleration (which must be of effect NoExecute, otherwise this field is ignored) tolerates the taint. By default, it is not set, which means tolerate the taint forever (do not evict). Zero and negative values will be treated as 0 (evict immediately) by the system. */
3006
3186
  tolerationSeconds?: number;
@@ -3032,11 +3212,11 @@ For example, in a 3-zone cluster, MaxSkew is set to 2, MinDomains is set to 5 an
3032
3212
  minDomains?: number;
3033
3213
  /** NodeAffinityPolicy indicates how we will treat Pod's nodeAffinity/nodeSelector when calculating pod topology spread skew. Options are: - Honor: only nodes matching nodeAffinity/nodeSelector are included in the calculations. - Ignore: nodeAffinity/nodeSelector are ignored. All nodes are included in the calculations.
3034
3214
 
3035
- If this value is nil, the behavior is equivalent to the Honor policy. This is a beta-level feature default enabled by the NodeInclusionPolicyInPodTopologySpread feature flag. */
3215
+ If this value is nil, the behavior is equivalent to the Honor policy. */
3036
3216
  nodeAffinityPolicy?: string;
3037
3217
  /** NodeTaintsPolicy indicates how we will treat node taints when calculating pod topology spread skew. Options are: - Honor: nodes without taints, along with tainted nodes for which the incoming pod has a toleration, are included. - Ignore: node taints are ignored. All nodes are included.
3038
3218
 
3039
- If this value is nil, the behavior is equivalent to the Ignore policy. This is a beta-level feature default enabled by the NodeInclusionPolicyInPodTopologySpread feature flag. */
3219
+ If this value is nil, the behavior is equivalent to the Ignore policy. */
3040
3220
  nodeTaintsPolicy?: string;
3041
3221
  });
3042
3222
  }
@@ -3088,7 +3268,7 @@ A pod can use both types of ephemeral volumes and persistent volumes at the same
3088
3268
  gcePersistentDisk?: Record<string, unknown>;
3089
3269
  /** gitRepo represents a git repository at a particular revision. Deprecated: GitRepo is deprecated. To provision a container with a git repo, mount an EmptyDir into an InitContainer that clones the repo using git, then mount the EmptyDir into the Pod's container. */
3090
3270
  gitRepo?: Record<string, unknown>;
3091
- /** glusterfs represents a Glusterfs mount on the host that shares a pod's lifetime. Deprecated: Glusterfs is deprecated and the in-tree glusterfs type is no longer supported. More info: https://examples.k8s.io/volumes/glusterfs/README.md */
3271
+ /** glusterfs represents a Glusterfs mount on the host that shares a pod's lifetime. Deprecated: Glusterfs is deprecated and the in-tree glusterfs type is no longer supported. */
3092
3272
  glusterfs?: Record<string, unknown>;
3093
3273
  /** hostPath represents a pre-existing file or directory on the host machine that is directly exposed to the container. This is generally used for system agents or other privileged things that are allowed to see the host machine. Most containers will NOT need this. More info: https://kubernetes.io/docs/concepts/storage/volumes#hostpath */
3094
3274
  hostPath?: Record<string, unknown>;
@@ -3096,9 +3276,9 @@ A pod can use both types of ephemeral volumes and persistent volumes at the same
3096
3276
 
3097
3277
  - Always: the kubelet always attempts to pull the reference. Container creation will fail If the pull fails. - Never: the kubelet never pulls the reference and only uses a local image or artifact. Container creation will fail if the reference isn't present. - IfNotPresent: the kubelet pulls if the reference isn't already present on disk. Container creation will fail if the reference isn't present and the pull fails.
3098
3278
 
3099
- The volume gets re-resolved if the pod gets deleted and recreated, which means that new remote content will become available on pod recreation. A failure to resolve or pull the image during pod startup will block containers from starting and may add significant latency. Failures will be retried using normal volume backoff and will be reported on the pod reason and message. The types of objects that may be mounted by this volume are defined by the container runtime implementation on a host machine and at minimum must include all valid types supported by the container image field. The OCI object gets mounted in a single directory (spec.containers[*].volumeMounts.mountPath) by merging the manifest layers in the same way as for container images. The volume will be mounted read-only (ro) and non-executable files (noexec). Sub path mounts for containers are not supported (spec.containers[*].volumeMounts.subpath). The field spec.securityContext.fsGroupChangePolicy has no effect on this volume type. */
3279
+ The volume gets re-resolved if the pod gets deleted and recreated, which means that new remote content will become available on pod recreation. A failure to resolve or pull the image during pod startup will block containers from starting and may add significant latency. Failures will be retried using normal volume backoff and will be reported on the pod reason and message. The types of objects that may be mounted by this volume are defined by the container runtime implementation on a host machine and at minimum must include all valid types supported by the container image field. The OCI object gets mounted in a single directory (spec.containers[*].volumeMounts.mountPath) by merging the manifest layers in the same way as for container images. The volume will be mounted read-only (ro). Sub path mounts for containers are not supported (spec.containers[*].volumeMounts.subpath) before 1.33. The field spec.securityContext.fsGroupChangePolicy has no effect on this volume type. */
3100
3280
  image?: Record<string, unknown>;
3101
- /** iscsi represents an ISCSI Disk resource that is attached to a kubelet's host machine and then exposed to the pod. More info: https://examples.k8s.io/volumes/iscsi/README.md */
3281
+ /** iscsi represents an ISCSI Disk resource that is attached to a kubelet's host machine and then exposed to the pod. More info: https://kubernetes.io/docs/concepts/storage/volumes/#iscsi */
3102
3282
  iscsi?: Record<string, unknown>;
3103
3283
  /** nfs represents an NFS mount on the host that shares a pod's lifetime More info: https://kubernetes.io/docs/concepts/storage/volumes#nfs */
3104
3284
  nfs?: Record<string, unknown>;
@@ -3106,13 +3286,13 @@ The volume gets re-resolved if the pod gets deleted and recreated, which means t
3106
3286
  persistentVolumeClaim?: Record<string, unknown>;
3107
3287
  /** photonPersistentDisk represents a PhotonController persistent disk attached and mounted on kubelets host machine. Deprecated: PhotonPersistentDisk is deprecated and the in-tree photonPersistentDisk type is no longer supported. */
3108
3288
  photonPersistentDisk?: Record<string, unknown>;
3109
- /** portworxVolume represents a portworx volume attached and mounted on kubelets host machine. Deprecated: PortworxVolume is deprecated. All operations for the in-tree portworxVolume type are redirected to the pxd.portworx.com CSI driver when the CSIMigrationPortworx feature-gate is on. */
3289
+ /** portworxVolume represents a portworx volume attached and mounted on kubelets host machine. Deprecated: PortworxVolume is deprecated. All operations for the in-tree portworxVolume type are redirected to the pxd.portworx.com CSI driver. */
3110
3290
  portworxVolume?: Record<string, unknown>;
3111
3291
  /** projected items for all in one resources secrets, configmaps, and downward API */
3112
3292
  projected?: Record<string, unknown>;
3113
3293
  /** quobyte represents a Quobyte mount on the host that shares a pod's lifetime. Deprecated: Quobyte is deprecated and the in-tree quobyte type is no longer supported. */
3114
3294
  quobyte?: Record<string, unknown>;
3115
- /** rbd represents a Rados Block Device mount on the host that shares a pod's lifetime. Deprecated: RBD is deprecated and the in-tree rbd type is no longer supported. More info: https://examples.k8s.io/volumes/rbd/README.md */
3295
+ /** rbd represents a Rados Block Device mount on the host that shares a pod's lifetime. Deprecated: RBD is deprecated and the in-tree rbd type is no longer supported. */
3116
3296
  rbd?: Record<string, unknown>;
3117
3297
  /** scaleIO represents a ScaleIO persistent volume attached and mounted on Kubernetes nodes. Deprecated: ScaleIO is deprecated and the in-tree scaleIO type is no longer supported. */
3118
3298
  scaleIO?: Record<string, unknown>;