aws-cdk-lib 2.137.0__py3-none-any.whl → 2.139.0__py3-none-any.whl

aws_cdk/aws_batch/__init__.py

@@ -4241,6 +4241,7 @@ class CfnJobDefinition(
                         requests=requests
                     ),
                     security_context=batch.CfnJobDefinition.SecurityContextProperty(
+                        allow_privilege_escalation=False,
                         privileged=False,
                         read_only_root_filesystem=False,
                         run_as_group=123,
@@ -4554,6 +4555,7 @@ class CfnJobDefinition(
                                 requests=requests
                             ),
                             security_context=batch.CfnJobDefinition.SecurityContextProperty(
+                                allow_privilege_escalation=False,
                                 privileged=False,
                                 read_only_root_filesystem=False,
                                 run_as_group=123,
@@ -4568,6 +4570,9 @@ class CfnJobDefinition(
                         )],
                         dns_policy="dnsPolicy",
                         host_network=False,
+                        image_pull_secrets=[batch.CfnJobDefinition.ImagePullSecretProperty(
+                            name="name"
+                        )],
                         init_containers=[batch.CfnJobDefinition.EksContainerProperty(
                             image="image",
                 
@@ -4587,6 +4592,7 @@ class CfnJobDefinition(
                                 requests=requests
                             ),
                             security_context=batch.CfnJobDefinition.SecurityContextProperty(
+                                allow_privilege_escalation=False,
                                 privileged=False,
                                 read_only_root_filesystem=False,
                                 run_as_group=123,
@@ -5286,6 +5292,62 @@ class CfnJobDefinition(
                 k + "=" + repr(v) for k, v in self._values.items()
             )
 
+    @jsii.data_type(
+        jsii_type="aws-cdk-lib.aws_batch.CfnJobDefinition.ImagePullSecretProperty",
+        jsii_struct_bases=[],
+        name_mapping={"name": "name"},
+    )
+    class ImagePullSecretProperty:
+        def __init__(self, *, name: builtins.str) -> None:
+            '''References a Kubernetes secret resource.
+
+            This name of the secret must start and end with an alphanumeric character, is required to be lowercase, can include periods (.) and hyphens (-), and can't contain more than 253 characters.
+
+            :param name: Provides a unique identifier for the ``ImagePullSecret`` . This object is required when ``EksPodProperties$imagePullSecrets`` is used.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-batch-jobdefinition-imagepullsecret.html
+            :exampleMetadata: fixture=_generated
+
+            Example::
+
+                # The code below shows an example of how to instantiate this type.
+                # The values are placeholders you should change.
+                from aws_cdk import aws_batch as batch
+                
+                image_pull_secret_property = batch.CfnJobDefinition.ImagePullSecretProperty(
+                    name="name"
+                )
+            '''
+            if __debug__:
+                type_hints = typing.get_type_hints(_typecheckingstub__510e7e45fa5176303c62970a1bb0161e95eb0fcd2438671b35f8c5a3c506b95a)
+                check_type(argname="argument name", value=name, expected_type=type_hints["name"])
+            self._values: typing.Dict[builtins.str, typing.Any] = {
+                "name": name,
+            }
+
+        @builtins.property
+        def name(self) -> builtins.str:
+            '''Provides a unique identifier for the ``ImagePullSecret`` .
+
+            This object is required when ``EksPodProperties$imagePullSecrets`` is used.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-batch-jobdefinition-imagepullsecret.html#cfn-batch-jobdefinition-imagepullsecret-name
+            '''
+            result = self._values.get("name")
+            assert result is not None, "Required property 'name' is missing"
+            return typing.cast(builtins.str, result)
+
+        def __eq__(self, rhs: typing.Any) -> builtins.bool:
+            return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+        def __ne__(self, rhs: typing.Any) -> builtins.bool:
+            return not (rhs == self)
+
+        def __repr__(self) -> str:
+            return "ImagePullSecretProperty(%s)" % ", ".join(
+                k + "=" + repr(v) for k, v in self._values.items()
+            )
+
     @jsii.data_type(
         jsii_type="aws-cdk-lib.aws_batch.CfnJobDefinition.LinuxParametersProperty",
         jsii_struct_bases=[],
@@ -6453,6 +6515,7 @@ class CfnJobDefinition(
             "containers": "containers",
             "dns_policy": "dnsPolicy",
             "host_network": "hostNetwork",
+            "image_pull_secrets": "imagePullSecrets",
             "init_containers": "initContainers",
             "metadata": "metadata",
             "service_account_name": "serviceAccountName",
@@ -6467,6 +6530,7 @@ class CfnJobDefinition(
             containers: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union["CfnJobDefinition.EksContainerProperty", typing.Dict[builtins.str, typing.Any]]]]]] = None,
             dns_policy: typing.Optional[builtins.str] = None,
             host_network: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
+            image_pull_secrets: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union["CfnJobDefinition.ImagePullSecretProperty", typing.Dict[builtins.str, typing.Any]]]]]] = None,
             init_containers: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union["CfnJobDefinition.EksContainerProperty", typing.Dict[builtins.str, typing.Any]]]]]] = None,
             metadata: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnJobDefinition.MetadataProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
             service_account_name: typing.Optional[builtins.str] = None,
@@ -6478,6 +6542,7 @@ class CfnJobDefinition(
             :param containers: The properties of the container that's used on the Amazon EKS pod.
             :param dns_policy: The DNS policy for the pod. The default value is ``ClusterFirst`` . If the ``hostNetwork`` parameter is not specified, the default is ``ClusterFirstWithHostNet`` . ``ClusterFirst`` indicates that any DNS query that does not match the configured cluster domain suffix is forwarded to the upstream nameserver inherited from the node. For more information, see `Pod's DNS policy <https://docs.aws.amazon.com/https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-s-dns-policy>`_ in the *Kubernetes documentation* . Valid values: ``Default`` | ``ClusterFirst`` | ``ClusterFirstWithHostNet``
             :param host_network: Indicates if the pod uses the hosts' network IP address. The default value is ``true`` . Setting this to ``false`` enables the Kubernetes pod networking model. Most AWS Batch workloads are egress-only and don't require the overhead of IP allocation for each pod for incoming connections. For more information, see `Host namespaces <https://docs.aws.amazon.com/https://kubernetes.io/docs/concepts/security/pod-security-policy/#host-namespaces>`_ and `Pod networking <https://docs.aws.amazon.com/https://kubernetes.io/docs/concepts/workloads/pods/#pod-networking>`_ in the *Kubernetes documentation* .
+            :param image_pull_secrets: 
             :param init_containers: These containers run before application containers, always runs to completion, and must complete successfully before the next container starts. These containers are registered with the Amazon EKS Connector agent and persists the registration information in the Kubernetes backend data store. For more information, see `Init Containers <https://docs.aws.amazon.com/https://kubernetes.io/docs/concepts/workloads/pods/init-containers/>`_ in the *Kubernetes documentation* . .. epigraph:: This object is limited to 10 elements
             :param metadata: Metadata about the Kubernetes pod. For more information, see `Understanding Kubernetes Objects <https://docs.aws.amazon.com/https://kubernetes.io/docs/concepts/overview/working-with-objects/kubernetes-objects/>`_ in the *Kubernetes documentation* .
             :param service_account_name: The name of the service account that's used to run the pod. For more information, see `Kubernetes service accounts <https://docs.aws.amazon.com/eks/latest/userguide/service-accounts.html>`_ and `Configure a Kubernetes service account to assume an IAM role <https://docs.aws.amazon.com/eks/latest/userguide/associate-service-account-role.html>`_ in the *Amazon EKS User Guide* and `Configure service accounts for pods <https://docs.aws.amazon.com/https://kubernetes.io/docs/tasks/configure-pod-container/configure-service-account/>`_ in the *Kubernetes documentation* .
@@ -6517,6 +6582,7 @@ class CfnJobDefinition(
                             requests=requests
                         ),
                         security_context=batch.CfnJobDefinition.SecurityContextProperty(
+                            allow_privilege_escalation=False,
                             privileged=False,
                             read_only_root_filesystem=False,
                             run_as_group=123,
@@ -6531,6 +6597,9 @@ class CfnJobDefinition(
                     )],
                     dns_policy="dnsPolicy",
                     host_network=False,
+                    image_pull_secrets=[batch.CfnJobDefinition.ImagePullSecretProperty(
+                        name="name"
+                    )],
                     init_containers=[batch.CfnJobDefinition.EksContainerProperty(
                         image="image",
                 
@@ -6550,6 +6619,7 @@ class CfnJobDefinition(
                             requests=requests
                         ),
                         security_context=batch.CfnJobDefinition.SecurityContextProperty(
+                            allow_privilege_escalation=False,
                             privileged=False,
                             read_only_root_filesystem=False,
                             run_as_group=123,
@@ -6592,6 +6662,7 @@ class CfnJobDefinition(
                 check_type(argname="argument containers", value=containers, expected_type=type_hints["containers"])
                 check_type(argname="argument dns_policy", value=dns_policy, expected_type=type_hints["dns_policy"])
                 check_type(argname="argument host_network", value=host_network, expected_type=type_hints["host_network"])
+                check_type(argname="argument image_pull_secrets", value=image_pull_secrets, expected_type=type_hints["image_pull_secrets"])
                 check_type(argname="argument init_containers", value=init_containers, expected_type=type_hints["init_containers"])
                 check_type(argname="argument metadata", value=metadata, expected_type=type_hints["metadata"])
                 check_type(argname="argument service_account_name", value=service_account_name, expected_type=type_hints["service_account_name"])
@@ -6604,6 +6675,8 @@ class CfnJobDefinition(
                 self._values["dns_policy"] = dns_policy
             if host_network is not None:
                 self._values["host_network"] = host_network
+            if image_pull_secrets is not None:
+                self._values["image_pull_secrets"] = image_pull_secrets
             if init_containers is not None:
                 self._values["init_containers"] = init_containers
             if metadata is not None:
@@ -6652,6 +6725,16 @@ class CfnJobDefinition(
             result = self._values.get("host_network")
             return typing.cast(typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]], result)
 
+        @builtins.property
+        def image_pull_secrets(
+            self,
+        ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, "CfnJobDefinition.ImagePullSecretProperty"]]]]:
+            '''
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-batch-jobdefinition-podproperties.html#cfn-batch-jobdefinition-podproperties-imagepullsecrets
+            '''
+            result = self._values.get("image_pull_secrets")
+            return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, "CfnJobDefinition.ImagePullSecretProperty"]]]], result)
+
         @builtins.property
         def init_containers(
             self,
@@ -7214,6 +7297,7 @@ class CfnJobDefinition(
         jsii_type="aws-cdk-lib.aws_batch.CfnJobDefinition.SecurityContextProperty",
         jsii_struct_bases=[],
         name_mapping={
+            "allow_privilege_escalation": "allowPrivilegeEscalation",
             "privileged": "privileged",
             "read_only_root_filesystem": "readOnlyRootFilesystem",
             "run_as_group": "runAsGroup",
@@ -7225,6 +7309,7 @@ class CfnJobDefinition(
         def __init__(
             self,
             *,
+            allow_privilege_escalation: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
             privileged: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
             read_only_root_filesystem: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
             run_as_group: typing.Optional[jsii.Number] = None,
@@ -7232,6 +7317,7 @@ class CfnJobDefinition(
             run_as_user: typing.Optional[jsii.Number] = None,
         ) -> None:
             '''
+            :param allow_privilege_escalation: 
             :param privileged: 
             :param read_only_root_filesystem: 
             :param run_as_group: 
@@ -7248,6 +7334,7 @@ class CfnJobDefinition(
                 from aws_cdk import aws_batch as batch
                 
                 security_context_property = batch.CfnJobDefinition.SecurityContextProperty(
+                    allow_privilege_escalation=False,
                     privileged=False,
                     read_only_root_filesystem=False,
                     run_as_group=123,
@@ -7257,12 +7344,15 @@ class CfnJobDefinition(
             '''
             if __debug__:
                 type_hints = typing.get_type_hints(_typecheckingstub__ecf4bfd8ece80e1bc3ee0536353fc145f3c5b08f62a604a53b62e7d2526f9d0e)
+                check_type(argname="argument allow_privilege_escalation", value=allow_privilege_escalation, expected_type=type_hints["allow_privilege_escalation"])
                 check_type(argname="argument privileged", value=privileged, expected_type=type_hints["privileged"])
                 check_type(argname="argument read_only_root_filesystem", value=read_only_root_filesystem, expected_type=type_hints["read_only_root_filesystem"])
                 check_type(argname="argument run_as_group", value=run_as_group, expected_type=type_hints["run_as_group"])
                 check_type(argname="argument run_as_non_root", value=run_as_non_root, expected_type=type_hints["run_as_non_root"])
                 check_type(argname="argument run_as_user", value=run_as_user, expected_type=type_hints["run_as_user"])
             self._values: typing.Dict[builtins.str, typing.Any] = {}
+            if allow_privilege_escalation is not None:
+                self._values["allow_privilege_escalation"] = allow_privilege_escalation
             if privileged is not None:
                 self._values["privileged"] = privileged
             if read_only_root_filesystem is not None:
@@ -7274,6 +7364,16 @@ class CfnJobDefinition(
             if run_as_user is not None:
                 self._values["run_as_user"] = run_as_user
 
+        @builtins.property
+        def allow_privilege_escalation(
+            self,
+        ) -> typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]]:
+            '''
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-batch-jobdefinition-securitycontext.html#cfn-batch-jobdefinition-securitycontext-allowprivilegeescalation
+            '''
+            result = self._values.get("allow_privilege_escalation")
+            return typing.cast(typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]], result)
+
         @builtins.property
         def privileged(
             self,
@@ -23118,6 +23218,13 @@ def _typecheckingstub__2bf55e035d36507c507c0ff620eda0a3096496a2cd5226656fc5e4af4
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__510e7e45fa5176303c62970a1bb0161e95eb0fcd2438671b35f8c5a3c506b95a(
+    *,
+    name: builtins.str,
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__46c01503a14b135de04e03e8a183177fbaa4f728ed5853b4de848d62c1f248ae(
     *,
     devices: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union[CfnJobDefinition.DeviceProperty, typing.Dict[builtins.str, typing.Any]]]]]] = None,
@@ -23186,6 +23293,7 @@ def _typecheckingstub__75127ae5a1697c34be5f24dcb69fa5c36a3498e1b2c284babc814c444
     containers: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union[CfnJobDefinition.EksContainerProperty, typing.Dict[builtins.str, typing.Any]]]]]] = None,
     dns_policy: typing.Optional[builtins.str] = None,
     host_network: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
+    image_pull_secrets: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union[CfnJobDefinition.ImagePullSecretProperty, typing.Dict[builtins.str, typing.Any]]]]]] = None,
     init_containers: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union[CfnJobDefinition.EksContainerProperty, typing.Dict[builtins.str, typing.Any]]]]]] = None,
     metadata: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnJobDefinition.MetadataProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
     service_account_name: typing.Optional[builtins.str] = None,
@@ -23244,6 +23352,7 @@ def _typecheckingstub__627c25c89399f4c648455cf23b1833f2f5961be5393bea72498980b6d
 
 def _typecheckingstub__ecf4bfd8ece80e1bc3ee0536353fc145f3c5b08f62a604a53b62e7d2526f9d0e(
     *,
+    allow_privilege_escalation: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
     privileged: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
     read_only_root_filesystem: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
     run_as_group: typing.Optional[jsii.Number] = None,