@kilic.dev/pulumi-k8s-crds 4.0.2 → 4.0.4

package/dist/types/input.d.ts

@@ -128814,7 +128814,8 @@ export declare namespace gateway {
          */
         interface EnvoyProxySpecProviderKubernetesEnvoyDaemonSetContainerEnvValueFromConfigMapKeyRef {
             /**
-             * The key to select.
+             * The key to select from the ConfigMap's Data field.
+             * Keys in the BinaryData field are not currently propagated to container env vars.
              */
             key: pulumi.Input<string>;
             /**
@@ -129153,8 +129154,16 @@ export declare namespace gateway {
          */
         interface EnvoyProxySpecProviderKubernetesEnvoyDaemonSetContainerVolumeMounts {
             /**
-             * Path within the container at which the volume should be mounted.  Must
-             * not contain ':'.
+             * bindMountOptions is the list of additional bind mount options to apply when
+             * mounting this volume into the container. Allowed values are noexec,
+             * nodev, and nosuid. These are Linux mount options and have no effect on
+             * Windows nodes.
+             * This field is not supported with image volumes.
+             * This is an alpha field and requires enabling the VolumeBindMountOptions feature gate.
+             */
+            bindMountOptions?: pulumi.Input<pulumi.Input<string>[] | undefined>;
+            /**
+             * Path within the container at which the volume should be mounted.
              */
             mountPath: pulumi.Input<string>;
             /**
@@ -130129,11 +130138,8 @@ export declare namespace gateway {
              * Eligible volumes are in-tree FibreChannel and iSCSI volumes, and all CSI volumes
              * whose CSI driver announces SELinux support by setting spec.seLinuxMount: true in their
              * CSIDriver instance. Other volumes are always re-labelled recursively.
-             * "MountOption" value is allowed only when SELinuxMount feature gate is enabled.
              *
-             * If not specified and SELinuxMount feature gate is enabled, "MountOption" is used.
-             * If not specified and SELinuxMount feature gate is disabled, "MountOption" is used for ReadWriteOncePod volumes
-             * and "Recursive" for all other volumes.
+             * If not specified, "MountOption" is used.
              *
              * This field affects only Pods that have SELinux label set, either in PodSecurityContext or in SecurityContext of all containers.
              *
@@ -130705,6 +130711,12 @@ export declare namespace gateway {
              * mode, like fsGroup, and the result can be other mode bits set.
              */
             defaultMode?: pulumi.Input<number | undefined>;
+            /**
+             * defaultUser is Optional: The owner UID of the created files by default.
+             * The defaultUser field is only used as a fallback when the item-level user field is unset.
+             * (Alpha) This field requires the AtomicWriteVolumeUserFields feature gate to be enabled.
+             */
+            defaultUser?: pulumi.Input<number | undefined>;
             /**
              * items if unspecified, each key-value pair in the Data field of the referenced
              * ConfigMap will be projected into the volume as a file whose name is the
@@ -130752,6 +130764,12 @@ export declare namespace gateway {
              * May not start with the string '..'.
              */
             path: pulumi.Input<string>;
+            /**
+             * user is Optional: The owner UID of the created file.
+             * If specified, the item-level user field takes precedence over defaultUser.
+             * (Alpha) This field requires the AtomicWriteVolumeUserFields feature gate to be enabled.
+             */
+            user?: pulumi.Input<number | undefined>;
         }
         /**
          * csi (Container Storage Interface) represents ephemeral storage that is handled by certain external CSI drivers.
@@ -130814,6 +130832,12 @@ export declare namespace gateway {
              * mode, like fsGroup, and the result can be other mode bits set.
              */
             defaultMode?: pulumi.Input<number | undefined>;
+            /**
+             * defaultUser is Optional: The owner UID of the created files by default.
+             * The defaultUser field is only used as a fallback when the item-level user field is unset.
+             * (Alpha) This field requires the AtomicWriteVolumeUserFields feature gate to be enabled.
+             */
+            defaultUser?: pulumi.Input<number | undefined>;
             /**
              * Items is a list of downward API volume file
              */
@@ -130838,6 +130862,12 @@ export declare namespace gateway {
              */
             path: pulumi.Input<string>;
             resourceFieldRef?: pulumi.Input<inputs.gateway.v1alpha1.EnvoyProxySpecProviderKubernetesEnvoyDaemonSetPodVolumesDownwardAPIItemsResourceFieldRef | undefined>;
+            /**
+             * user is Optional: The owner UID of the created file.
+             * If specified, the item-level user field takes precedence over defaultUser.
+             * (Alpha) This field requires the AtomicWriteVolumeUserFields feature gate to be enabled.
+             */
+            user?: pulumi.Input<number | undefined>;
         }
         /**
          * Required: Selects a field of the pod: only annotations, labels, name, namespace and uid are supported.
@@ -130882,6 +130912,17 @@ export declare namespace gateway {
              * More info: https://kubernetes.io/docs/concepts/storage/volumes#emptydir
              */
             medium?: pulumi.Input<string | undefined>;
+            /**
+             * mode specifies the permission bits for the emptyDir directory, in numeric
+             * notation (e.g., 0755, 01777). Must be a value between 0000 and 01777.
+             * If not specified, defaults to 0777.
+             * This might be in conflict with other options that affect the file
+             * mode, like fsGroup. If fsGroup is specified, the fsGroup permissions
+             * will override the mode specified here.
+             * This field has no effect on Windows.
+             * This field is alpha and requires EmptyDirVolumeMode featuregate to be enabled.
+             */
+            mode?: pulumi.Input<number | undefined>;
             /**
              * sizeLimit is the total amount of local storage required for this EmptyDir volume.
              * The size limit is also applicable for memory medium.
@@ -131005,8 +131046,8 @@ export declare namespace gateway {
          * * An existing PVC (PersistentVolumeClaim)
          *   If the provisioner or an external controller can support the specified data source,
          *   it will create a new volume based on the contents of the specified data source.
-         *   When the AnyVolumeDataSource feature gate is enabled, dataSource contents will be copied to dataSourceRef,
-         *   and dataSourceRef contents will be copied to dataSource when dataSourceRef.namespace is not specified.
+         *   dataSource contents will be copied to dataSourceRef, and dataSourceRef contents will be
+         *   copied to dataSource when dataSourceRef.namespace is not specified.
          *   If the namespace is specified, then dataSourceRef will not be copied to dataSource.
          */
         interface EnvoyProxySpecProviderKubernetesEnvoyDaemonSetPodVolumesEphemeralVolumeClaimTemplateSpecDataSource {
@@ -131047,7 +131088,6 @@ export declare namespace gateway {
          *   specified.
          * * While dataSource only allows local objects, dataSourceRef allows objects
          *   in any namespaces.
-         *   (Beta) Using this field requires the AnyVolumeDataSource feature gate to be enabled.
          *   (Alpha) Using the namespace field of dataSourceRef requires the CrossNamespaceVolumeDataSource feature gate to be enabled.
          */
         interface EnvoyProxySpecProviderKubernetesEnvoyDaemonSetPodVolumesEphemeralVolumeClaimTemplateSpecDataSourceRef {
@@ -131521,6 +131561,12 @@ export declare namespace gateway {
              * mode, like fsGroup, and the result can be other mode bits set.
              */
             defaultMode?: pulumi.Input<number | undefined>;
+            /**
+             * defaultUser is Optional: The owner UID of the created files by default.
+             * The defaultUser field is only used as a fallback when the item-level user field is unset.
+             * (Alpha) This field requires the AtomicWriteVolumeUserFields feature gate to be enabled.
+             */
+            defaultUser?: pulumi.Input<number | undefined>;
             /**
              * sources is the list of volume projections. Each entry in this list
              * handles one source.
@@ -131579,6 +131625,12 @@ export declare namespace gateway {
              * ClusterTrustBundles will be unified and deduplicated.
              */
             signerName?: pulumi.Input<string | undefined>;
+            /**
+             * user is Optional: The owner UID of the created file.
+             * If specified, the item-level user field takes precedence over defaultUser.
+             * (Alpha) This field requires the AtomicWriteVolumeUserFields feature gate to be enabled.
+             */
+            user?: pulumi.Input<number | undefined>;
         }
         /**
          * Select all ClusterTrustBundles that match this label selector.  Only has
@@ -131673,6 +131725,12 @@ export declare namespace gateway {
              * May not start with the string '..'.
              */
             path: pulumi.Input<string>;
+            /**
+             * user is Optional: The owner UID of the created file.
+             * If specified, the item-level user field takes precedence over defaultUser.
+             * (Alpha) This field requires the AtomicWriteVolumeUserFields feature gate to be enabled.
+             */
+            user?: pulumi.Input<number | undefined>;
         }
         /**
          * downwardAPI information about the downwardAPI data to project
@@ -131702,6 +131760,12 @@ export declare namespace gateway {
              */
             path: pulumi.Input<string>;
             resourceFieldRef?: pulumi.Input<inputs.gateway.v1alpha1.EnvoyProxySpecProviderKubernetesEnvoyDaemonSetPodVolumesProjectedSourcesDownwardAPIItemsResourceFieldRef | undefined>;
+            /**
+             * user is Optional: The owner UID of the created file.
+             * If specified, the item-level user field takes precedence over defaultUser.
+             * (Alpha) This field requires the AtomicWriteVolumeUserFields feature gate to be enabled.
+             */
+            user?: pulumi.Input<number | undefined>;
         }
         /**
          * Required: Selects a field of the pod: only annotations, labels, name, namespace and uid are supported.
@@ -131834,6 +131898,12 @@ export declare namespace gateway {
              * Kubelet's generated CSRs will be addressed to this signer.
              */
             signerName: pulumi.Input<string>;
+            /**
+             * user is Optional: The owner UID of the created file.
+             * If specified, the item-level user field takes precedence over defaultUser.
+             * (Alpha) This field requires the AtomicWriteVolumeUserFields feature gate to be enabled.
+             */
+            user?: pulumi.Input<number | undefined>;
             /**
              * userAnnotations allow pod authors to pass additional information to
              * the signer implementation.  Kubernetes does not restrict or validate this
@@ -131904,6 +131974,12 @@ export declare namespace gateway {
              * May not start with the string '..'.
              */
             path: pulumi.Input<string>;
+            /**
+             * user is Optional: The owner UID of the created file.
+             * If specified, the item-level user field takes precedence over defaultUser.
+             * (Alpha) This field requires the AtomicWriteVolumeUserFields feature gate to be enabled.
+             */
+            user?: pulumi.Input<number | undefined>;
         }
         /**
          * serviceAccountToken is information about the serviceAccountToken data to project
@@ -131930,6 +132006,12 @@ export declare namespace gateway {
              * token into.
              */
             path: pulumi.Input<string>;
+            /**
+             * user is Optional: The owner UID of the created file.
+             * If specified, the item-level user field takes precedence over defaultUser.
+             * (Alpha) This field requires the AtomicWriteVolumeUserFields feature gate to be enabled.
+             */
+            user?: pulumi.Input<number | undefined>;
         }
         /**
          * quobyte represents a Quobyte mount on the host that shares a pod's lifetime.
@@ -132109,6 +132191,12 @@ export declare namespace gateway {
              * mode, like fsGroup, and the result can be other mode bits set.
              */
             defaultMode?: pulumi.Input<number | undefined>;
+            /**
+             * defaultUser is Optional: The owner UID of the created files by default.
+             * The defaultUser field is only used as a fallback when the item-level user field is unset.
+             * (Alpha) This field requires the AtomicWriteVolumeUserFields feature gate to be enabled.
+             */
+            defaultUser?: pulumi.Input<number | undefined>;
             /**
              * items If unspecified, each key-value pair in the Data field of the referenced
              * Secret will be projected into the volume as a file whose name is the
@@ -132153,6 +132241,12 @@ export declare namespace gateway {
              * May not start with the string '..'.
              */
             path: pulumi.Input<string>;
+            /**
+             * user is Optional: The owner UID of the created file.
+             * If specified, the item-level user field takes precedence over defaultUser.
+             * (Alpha) This field requires the AtomicWriteVolumeUserFields feature gate to be enabled.
+             */
+            user?: pulumi.Input<number | undefined>;
         }
         /**
          * storageOS represents a StorageOS volume attached and mounted on Kubernetes nodes.
@@ -132368,7 +132462,8 @@ export declare namespace gateway {
          */
         interface EnvoyProxySpecProviderKubernetesEnvoyDeploymentContainerEnvValueFromConfigMapKeyRef {
             /**
-             * The key to select.
+             * The key to select from the ConfigMap's Data field.
+             * Keys in the BinaryData field are not currently propagated to container env vars.
              */
             key: pulumi.Input<string>;
             /**
@@ -132707,8 +132802,16 @@ export declare namespace gateway {
          */
         interface EnvoyProxySpecProviderKubernetesEnvoyDeploymentContainerVolumeMounts {
             /**
-             * Path within the container at which the volume should be mounted.  Must
-             * not contain ':'.
+             * bindMountOptions is the list of additional bind mount options to apply when
+             * mounting this volume into the container. Allowed values are noexec,
+             * nodev, and nosuid. These are Linux mount options and have no effect on
+             * Windows nodes.
+             * This field is not supported with image volumes.
+             * This is an alpha field and requires enabling the VolumeBindMountOptions feature gate.
+             */
+            bindMountOptions?: pulumi.Input<pulumi.Input<string>[] | undefined>;
+            /**
+             * Path within the container at which the volume should be mounted.
              */
             mountPath: pulumi.Input<string>;
             /**
@@ -133017,7 +133120,8 @@ export declare namespace gateway {
          */
         interface EnvoyProxySpecProviderKubernetesEnvoyDeploymentInitContainersEnvValueFromConfigMapKeyRef {
             /**
-             * The key to select.
+             * The key to select from the ConfigMap's Data field.
+             * Keys in the BinaryData field are not currently propagated to container env vars.
              */
             key: pulumi.Input<string>;
             /**
@@ -133179,6 +133283,11 @@ export declare namespace gateway {
              * Name must be an IANA_SVC_NAME.
              */
             port: pulumi.Input<number | string>;
+            /**
+             * Protocol selects the wire protocol for the probe connection.
+             * Nil defaults to HTTP/1.1.
+             */
+            protocol?: pulumi.Input<string | undefined>;
             /**
              * Scheme to use for connecting to the host.
              * Defaults to HTTP.
@@ -133278,6 +133387,11 @@ export declare namespace gateway {
              * Name must be an IANA_SVC_NAME.
              */
             port: pulumi.Input<number | string>;
+            /**
+             * Protocol selects the wire protocol for the probe connection.
+             * Nil defaults to HTTP/1.1.
+             */
+            protocol?: pulumi.Input<string | undefined>;
             /**
              * Scheme to use for connecting to the host.
              * Defaults to HTTP.
@@ -133392,6 +133506,13 @@ export declare namespace gateway {
          * GRPC specifies a GRPC HealthCheckRequest.
          */
         interface EnvoyProxySpecProviderKubernetesEnvoyDeploymentInitContainersLivenessProbeGrpc {
+            /**
+             * mode specifies the connection mode for the gRPC health probe.
+             * Set to "TLS" to use TLS without certificate verification.
+             * Set to "Plaintext" to use a plaintext (insecure) connection explicitly.
+             * If not specified, the probe uses a plaintext (insecure) connection.
+             */
+            mode?: pulumi.Input<string | undefined>;
             /**
              * Port number of the gRPC service. Number must be in the range 1 to 65535.
              */
@@ -133427,6 +133548,11 @@ export declare namespace gateway {
              * Name must be an IANA_SVC_NAME.
              */
             port: pulumi.Input<number | string>;
+            /**
+             * Protocol selects the wire protocol for the probe connection.
+             * Nil defaults to HTTP/1.1.
+             */
+            protocol?: pulumi.Input<string | undefined>;
             /**
              * Scheme to use for connecting to the host.
              * Defaults to HTTP.
@@ -133562,6 +133688,13 @@ export declare namespace gateway {
          * GRPC specifies a GRPC HealthCheckRequest.
          */
         interface EnvoyProxySpecProviderKubernetesEnvoyDeploymentInitContainersReadinessProbeGrpc {
+            /**
+             * mode specifies the connection mode for the gRPC health probe.
+             * Set to "TLS" to use TLS without certificate verification.
+             * Set to "Plaintext" to use a plaintext (insecure) connection explicitly.
+             * If not specified, the probe uses a plaintext (insecure) connection.
+             */
+            mode?: pulumi.Input<string | undefined>;
             /**
              * Port number of the gRPC service. Number must be in the range 1 to 65535.
              */
@@ -133597,6 +133730,11 @@ export declare namespace gateway {
              * Name must be an IANA_SVC_NAME.
              */
             port: pulumi.Input<number | string>;
+            /**
+             * Protocol selects the wire protocol for the probe connection.
+             * Nil defaults to HTTP/1.1.
+             */
+            protocol?: pulumi.Input<string | undefined>;
             /**
              * Scheme to use for connecting to the host.
              * Defaults to HTTP.
@@ -133984,6 +134122,13 @@ export declare namespace gateway {
          * GRPC specifies a GRPC HealthCheckRequest.
          */
         interface EnvoyProxySpecProviderKubernetesEnvoyDeploymentInitContainersStartupProbeGrpc {
+            /**
+             * mode specifies the connection mode for the gRPC health probe.
+             * Set to "TLS" to use TLS without certificate verification.
+             * Set to "Plaintext" to use a plaintext (insecure) connection explicitly.
+             * If not specified, the probe uses a plaintext (insecure) connection.
+             */
+            mode?: pulumi.Input<string | undefined>;
             /**
              * Port number of the gRPC service. Number must be in the range 1 to 65535.
              */
@@ -134019,6 +134164,11 @@ export declare namespace gateway {
              * Name must be an IANA_SVC_NAME.
              */
             port: pulumi.Input<number | string>;
+            /**
+             * Protocol selects the wire protocol for the probe connection.
+             * Nil defaults to HTTP/1.1.
+             */
+            protocol?: pulumi.Input<string | undefined>;
             /**
              * Scheme to use for connecting to the host.
              * Defaults to HTTP.
@@ -134072,8 +134222,16 @@ export declare namespace gateway {
          */
         interface EnvoyProxySpecProviderKubernetesEnvoyDeploymentInitContainersVolumeMounts {
             /**
-             * Path within the container at which the volume should be mounted.  Must
-             * not contain ':'.
+             * bindMountOptions is the list of additional bind mount options to apply when
+             * mounting this volume into the container. Allowed values are noexec,
+             * nodev, and nosuid. These are Linux mount options and have no effect on
+             * Windows nodes.
+             * This field is not supported with image volumes.
+             * This is an alpha field and requires enabling the VolumeBindMountOptions feature gate.
+             */
+            bindMountOptions?: pulumi.Input<pulumi.Input<string>[] | undefined>;
+            /**
+             * Path within the container at which the volume should be mounted.
              */
             mountPath: pulumi.Input<string>;
             /**
@@ -135048,11 +135206,8 @@ export declare namespace gateway {
              * Eligible volumes are in-tree FibreChannel and iSCSI volumes, and all CSI volumes
              * whose CSI driver announces SELinux support by setting spec.seLinuxMount: true in their
              * CSIDriver instance. Other volumes are always re-labelled recursively.
-             * "MountOption" value is allowed only when SELinuxMount feature gate is enabled.
              *
-             * If not specified and SELinuxMount feature gate is enabled, "MountOption" is used.
-             * If not specified and SELinuxMount feature gate is disabled, "MountOption" is used for ReadWriteOncePod volumes
-             * and "Recursive" for all other volumes.
+             * If not specified, "MountOption" is used.
              *
              * This field affects only Pods that have SELinux label set, either in PodSecurityContext or in SecurityContext of all containers.
              *
@@ -135624,6 +135779,12 @@ export declare namespace gateway {
              * mode, like fsGroup, and the result can be other mode bits set.
              */
             defaultMode?: pulumi.Input<number | undefined>;
+            /**
+             * defaultUser is Optional: The owner UID of the created files by default.
+             * The defaultUser field is only used as a fallback when the item-level user field is unset.
+             * (Alpha) This field requires the AtomicWriteVolumeUserFields feature gate to be enabled.
+             */
+            defaultUser?: pulumi.Input<number | undefined>;
             /**
              * items if unspecified, each key-value pair in the Data field of the referenced
              * ConfigMap will be projected into the volume as a file whose name is the
@@ -135671,6 +135832,12 @@ export declare namespace gateway {
              * May not start with the string '..'.
              */
             path: pulumi.Input<string>;
+            /**
+             * user is Optional: The owner UID of the created file.
+             * If specified, the item-level user field takes precedence over defaultUser.
+             * (Alpha) This field requires the AtomicWriteVolumeUserFields feature gate to be enabled.
+             */
+            user?: pulumi.Input<number | undefined>;
         }
         /**
          * csi (Container Storage Interface) represents ephemeral storage that is handled by certain external CSI drivers.
@@ -135733,6 +135900,12 @@ export declare namespace gateway {
              * mode, like fsGroup, and the result can be other mode bits set.
              */
             defaultMode?: pulumi.Input<number | undefined>;
+            /**
+             * defaultUser is Optional: The owner UID of the created files by default.
+             * The defaultUser field is only used as a fallback when the item-level user field is unset.
+             * (Alpha) This field requires the AtomicWriteVolumeUserFields feature gate to be enabled.
+             */
+            defaultUser?: pulumi.Input<number | undefined>;
             /**
              * Items is a list of downward API volume file
              */
@@ -135757,6 +135930,12 @@ export declare namespace gateway {
              */
             path: pulumi.Input<string>;
             resourceFieldRef?: pulumi.Input<inputs.gateway.v1alpha1.EnvoyProxySpecProviderKubernetesEnvoyDeploymentPodVolumesDownwardAPIItemsResourceFieldRef | undefined>;
+            /**
+             * user is Optional: The owner UID of the created file.
+             * If specified, the item-level user field takes precedence over defaultUser.
+             * (Alpha) This field requires the AtomicWriteVolumeUserFields feature gate to be enabled.
+             */
+            user?: pulumi.Input<number | undefined>;
         }
         /**
          * Required: Selects a field of the pod: only annotations, labels, name, namespace and uid are supported.
@@ -135801,6 +135980,17 @@ export declare namespace gateway {
              * More info: https://kubernetes.io/docs/concepts/storage/volumes#emptydir
              */
             medium?: pulumi.Input<string | undefined>;
+            /**
+             * mode specifies the permission bits for the emptyDir directory, in numeric
+             * notation (e.g., 0755, 01777). Must be a value between 0000 and 01777.
+             * If not specified, defaults to 0777.
+             * This might be in conflict with other options that affect the file
+             * mode, like fsGroup. If fsGroup is specified, the fsGroup permissions
+             * will override the mode specified here.
+             * This field has no effect on Windows.
+             * This field is alpha and requires EmptyDirVolumeMode featuregate to be enabled.
+             */
+            mode?: pulumi.Input<number | undefined>;
             /**
              * sizeLimit is the total amount of local storage required for this EmptyDir volume.
              * The size limit is also applicable for memory medium.
@@ -135924,8 +136114,8 @@ export declare namespace gateway {
          * * An existing PVC (PersistentVolumeClaim)
          *   If the provisioner or an external controller can support the specified data source,
          *   it will create a new volume based on the contents of the specified data source.
-         *   When the AnyVolumeDataSource feature gate is enabled, dataSource contents will be copied to dataSourceRef,
-         *   and dataSourceRef contents will be copied to dataSource when dataSourceRef.namespace is not specified.
+         *   dataSource contents will be copied to dataSourceRef, and dataSourceRef contents will be
+         *   copied to dataSource when dataSourceRef.namespace is not specified.
          *   If the namespace is specified, then dataSourceRef will not be copied to dataSource.
          */
         interface EnvoyProxySpecProviderKubernetesEnvoyDeploymentPodVolumesEphemeralVolumeClaimTemplateSpecDataSource {
@@ -135966,7 +136156,6 @@ export declare namespace gateway {
          *   specified.
          * * While dataSource only allows local objects, dataSourceRef allows objects
          *   in any namespaces.
-         *   (Beta) Using this field requires the AnyVolumeDataSource feature gate to be enabled.
          *   (Alpha) Using the namespace field of dataSourceRef requires the CrossNamespaceVolumeDataSource feature gate to be enabled.
          */
         interface EnvoyProxySpecProviderKubernetesEnvoyDeploymentPodVolumesEphemeralVolumeClaimTemplateSpecDataSourceRef {
@@ -136440,6 +136629,12 @@ export declare namespace gateway {
              * mode, like fsGroup, and the result can be other mode bits set.
              */
             defaultMode?: pulumi.Input<number | undefined>;
+            /**
+             * defaultUser is Optional: The owner UID of the created files by default.
+             * The defaultUser field is only used as a fallback when the item-level user field is unset.
+             * (Alpha) This field requires the AtomicWriteVolumeUserFields feature gate to be enabled.
+             */
+            defaultUser?: pulumi.Input<number | undefined>;
             /**
              * sources is the list of volume projections. Each entry in this list
              * handles one source.
@@ -136498,6 +136693,12 @@ export declare namespace gateway {
              * ClusterTrustBundles will be unified and deduplicated.
              */
             signerName?: pulumi.Input<string | undefined>;
+            /**
+             * user is Optional: The owner UID of the created file.
+             * If specified, the item-level user field takes precedence over defaultUser.
+             * (Alpha) This field requires the AtomicWriteVolumeUserFields feature gate to be enabled.
+             */
+            user?: pulumi.Input<number | undefined>;
         }
         /**
          * Select all ClusterTrustBundles that match this label selector.  Only has
@@ -136592,6 +136793,12 @@ export declare namespace gateway {
              * May not start with the string '..'.
              */
             path: pulumi.Input<string>;
+            /**
+             * user is Optional: The owner UID of the created file.
+             * If specified, the item-level user field takes precedence over defaultUser.
+             * (Alpha) This field requires the AtomicWriteVolumeUserFields feature gate to be enabled.
+             */
+            user?: pulumi.Input<number | undefined>;
         }
         /**
          * downwardAPI information about the downwardAPI data to project
@@ -136621,6 +136828,12 @@ export declare namespace gateway {
              */
             path: pulumi.Input<string>;
             resourceFieldRef?: pulumi.Input<inputs.gateway.v1alpha1.EnvoyProxySpecProviderKubernetesEnvoyDeploymentPodVolumesProjectedSourcesDownwardAPIItemsResourceFieldRef | undefined>;
+            /**
+             * user is Optional: The owner UID of the created file.
+             * If specified, the item-level user field takes precedence over defaultUser.
+             * (Alpha) This field requires the AtomicWriteVolumeUserFields feature gate to be enabled.
+             */
+            user?: pulumi.Input<number | undefined>;
         }
         /**
          * Required: Selects a field of the pod: only annotations, labels, name, namespace and uid are supported.
@@ -136753,6 +136966,12 @@ export declare namespace gateway {
              * Kubelet's generated CSRs will be addressed to this signer.
              */
             signerName: pulumi.Input<string>;
+            /**
+             * user is Optional: The owner UID of the created file.
+             * If specified, the item-level user field takes precedence over defaultUser.
+             * (Alpha) This field requires the AtomicWriteVolumeUserFields feature gate to be enabled.
+             */
+            user?: pulumi.Input<number | undefined>;
             /**
              * userAnnotations allow pod authors to pass additional information to
              * the signer implementation.  Kubernetes does not restrict or validate this
@@ -136823,6 +137042,12 @@ export declare namespace gateway {
              * May not start with the string '..'.
              */
             path: pulumi.Input<string>;
+            /**
+             * user is Optional: The owner UID of the created file.
+             * If specified, the item-level user field takes precedence over defaultUser.
+             * (Alpha) This field requires the AtomicWriteVolumeUserFields feature gate to be enabled.
+             */
+            user?: pulumi.Input<number | undefined>;
         }
         /**
          * serviceAccountToken is information about the serviceAccountToken data to project
@@ -136849,6 +137074,12 @@ export declare namespace gateway {
              * token into.
              */
             path: pulumi.Input<string>;
+            /**
+             * user is Optional: The owner UID of the created file.
+             * If specified, the item-level user field takes precedence over defaultUser.
+             * (Alpha) This field requires the AtomicWriteVolumeUserFields feature gate to be enabled.
+             */
+            user?: pulumi.Input<number | undefined>;
         }
         /**
          * quobyte represents a Quobyte mount on the host that shares a pod's lifetime.
@@ -137028,6 +137259,12 @@ export declare namespace gateway {
              * mode, like fsGroup, and the result can be other mode bits set.
              */
             defaultMode?: pulumi.Input<number | undefined>;
+            /**
+             * defaultUser is Optional: The owner UID of the created files by default.
+             * The defaultUser field is only used as a fallback when the item-level user field is unset.
+             * (Alpha) This field requires the AtomicWriteVolumeUserFields feature gate to be enabled.
+             */
+            defaultUser?: pulumi.Input<number | undefined>;
             /**
              * items If unspecified, each key-value pair in the Data field of the referenced
              * Secret will be projected into the volume as a file whose name is the
@@ -137072,6 +137309,12 @@ export declare namespace gateway {
              * May not start with the string '..'.
              */
             path: pulumi.Input<string>;
+            /**
+             * user is Optional: The owner UID of the created file.
+             * If specified, the item-level user field takes precedence over defaultUser.
+             * (Alpha) This field requires the AtomicWriteVolumeUserFields feature gate to be enabled.
+             */
+            user?: pulumi.Input<number | undefined>;
         }
         /**
          * storageOS represents a StorageOS volume attached and mounted on Kubernetes nodes.
@@ -137266,9 +137509,6 @@ export declare namespace gateway {
              * For example, if autoscaling is configured with a memory consumption target of 100Mi,
              * and scale-down and scale-up tolerances of 5% and 1% respectively, scaling will be
              * triggered when the actual consumption falls below 95Mi or exceeds 101Mi.
-             *
-             * This is an beta field and requires the HPAConfigurableTolerance feature
-             * gate to be enabled.
              */
             tolerance?: pulumi.Input<number | string | undefined>;
         }
@@ -137329,9 +137569,6 @@ export declare namespace gateway {
              * For example, if autoscaling is configured with a memory consumption target of 100Mi,
              * and scale-down and scale-up tolerances of 5% and 1% respectively, scaling will be
              * triggered when the actual consumption falls below 95Mi or exceeds 101Mi.
-             *
-             * This is an beta field and requires the HPAConfigurableTolerance feature
-             * gate to be enabled.
              */
             tolerance?: pulumi.Input<number | string | undefined>;
         }