pulumi-kubernetes 4.24.0a1753079574__py3-none-any.whl → 4.24.0a1753121506__py3-none-any.whl
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Potentially problematic release.
This version of pulumi-kubernetes might be problematic. Click here for more details.
- pulumi_kubernetes/__init__.py +1 -1
- pulumi_kubernetes/_inputs.py +49 -50
- pulumi_kubernetes/admissionregistration/__init__.py +1 -1
- pulumi_kubernetes/admissionregistration/v1/MutatingWebhookConfiguration.py +25 -26
- pulumi_kubernetes/admissionregistration/v1/MutatingWebhookConfigurationList.py +25 -26
- pulumi_kubernetes/admissionregistration/v1/MutatingWebhookConfigurationPatch.py +25 -26
- pulumi_kubernetes/admissionregistration/v1/ValidatingAdmissionPolicy.py +26 -27
- pulumi_kubernetes/admissionregistration/v1/ValidatingAdmissionPolicyBinding.py +25 -26
- pulumi_kubernetes/admissionregistration/v1/ValidatingAdmissionPolicyBindingList.py +25 -26
- pulumi_kubernetes/admissionregistration/v1/ValidatingAdmissionPolicyBindingPatch.py +25 -26
- pulumi_kubernetes/admissionregistration/v1/ValidatingAdmissionPolicyList.py +25 -26
- pulumi_kubernetes/admissionregistration/v1/ValidatingAdmissionPolicyPatch.py +26 -27
- pulumi_kubernetes/admissionregistration/v1/ValidatingWebhookConfiguration.py +25 -26
- pulumi_kubernetes/admissionregistration/v1/ValidatingWebhookConfigurationList.py +25 -26
- pulumi_kubernetes/admissionregistration/v1/ValidatingWebhookConfigurationPatch.py +25 -26
- pulumi_kubernetes/admissionregistration/v1/__init__.py +1 -1
- pulumi_kubernetes/admissionregistration/v1/_inputs.py +715 -716
- pulumi_kubernetes/admissionregistration/v1/outputs.py +512 -513
- pulumi_kubernetes/admissionregistration/v1alpha1/MutatingAdmissionPolicy.py +25 -26
- pulumi_kubernetes/admissionregistration/v1alpha1/MutatingAdmissionPolicyBinding.py +25 -26
- pulumi_kubernetes/admissionregistration/v1alpha1/MutatingAdmissionPolicyBindingList.py +25 -26
- pulumi_kubernetes/admissionregistration/v1alpha1/MutatingAdmissionPolicyBindingPatch.py +25 -26
- pulumi_kubernetes/admissionregistration/v1alpha1/MutatingAdmissionPolicyList.py +25 -26
- pulumi_kubernetes/admissionregistration/v1alpha1/MutatingAdmissionPolicyPatch.py +25 -26
- pulumi_kubernetes/admissionregistration/v1alpha1/ValidatingAdmissionPolicy.py +26 -27
- pulumi_kubernetes/admissionregistration/v1alpha1/ValidatingAdmissionPolicyBinding.py +25 -26
- pulumi_kubernetes/admissionregistration/v1alpha1/ValidatingAdmissionPolicyBindingList.py +25 -26
- pulumi_kubernetes/admissionregistration/v1alpha1/ValidatingAdmissionPolicyBindingPatch.py +25 -26
- pulumi_kubernetes/admissionregistration/v1alpha1/ValidatingAdmissionPolicyList.py +25 -26
- pulumi_kubernetes/admissionregistration/v1alpha1/ValidatingAdmissionPolicyPatch.py +26 -27
- pulumi_kubernetes/admissionregistration/v1alpha1/__init__.py +1 -1
- pulumi_kubernetes/admissionregistration/v1alpha1/_inputs.py +495 -496
- pulumi_kubernetes/admissionregistration/v1alpha1/outputs.py +364 -365
- pulumi_kubernetes/admissionregistration/v1beta1/MutatingWebhookConfiguration.py +25 -26
- pulumi_kubernetes/admissionregistration/v1beta1/MutatingWebhookConfigurationList.py +25 -26
- pulumi_kubernetes/admissionregistration/v1beta1/MutatingWebhookConfigurationPatch.py +25 -26
- pulumi_kubernetes/admissionregistration/v1beta1/ValidatingAdmissionPolicy.py +26 -27
- pulumi_kubernetes/admissionregistration/v1beta1/ValidatingAdmissionPolicyBinding.py +25 -26
- pulumi_kubernetes/admissionregistration/v1beta1/ValidatingAdmissionPolicyBindingList.py +25 -26
- pulumi_kubernetes/admissionregistration/v1beta1/ValidatingAdmissionPolicyBindingPatch.py +25 -26
- pulumi_kubernetes/admissionregistration/v1beta1/ValidatingAdmissionPolicyList.py +25 -26
- pulumi_kubernetes/admissionregistration/v1beta1/ValidatingAdmissionPolicyPatch.py +26 -27
- pulumi_kubernetes/admissionregistration/v1beta1/ValidatingWebhookConfiguration.py +25 -26
- pulumi_kubernetes/admissionregistration/v1beta1/ValidatingWebhookConfigurationList.py +25 -26
- pulumi_kubernetes/admissionregistration/v1beta1/ValidatingWebhookConfigurationPatch.py +25 -26
- pulumi_kubernetes/admissionregistration/v1beta1/__init__.py +1 -1
- pulumi_kubernetes/admissionregistration/v1beta1/_inputs.py +711 -712
- pulumi_kubernetes/admissionregistration/v1beta1/outputs.py +508 -509
- pulumi_kubernetes/apiextensions/__init__.py +1 -1
- pulumi_kubernetes/apiextensions/v1/CustomResourceDefinition.py +26 -27
- pulumi_kubernetes/apiextensions/v1/CustomResourceDefinitionList.py +25 -26
- pulumi_kubernetes/apiextensions/v1/CustomResourceDefinitionPatch.py +26 -27
- pulumi_kubernetes/apiextensions/v1/__init__.py +1 -1
- pulumi_kubernetes/apiextensions/v1/_inputs.py +906 -907
- pulumi_kubernetes/apiextensions/v1/outputs.py +620 -621
- pulumi_kubernetes/apiextensions/v1beta1/CustomResourceDefinition.py +26 -27
- pulumi_kubernetes/apiextensions/v1beta1/CustomResourceDefinitionList.py +25 -26
- pulumi_kubernetes/apiextensions/v1beta1/CustomResourceDefinitionPatch.py +26 -27
- pulumi_kubernetes/apiextensions/v1beta1/__init__.py +1 -1
- pulumi_kubernetes/apiextensions/v1beta1/_inputs.py +834 -835
- pulumi_kubernetes/apiextensions/v1beta1/outputs.py +572 -573
- pulumi_kubernetes/apiregistration/__init__.py +1 -1
- pulumi_kubernetes/apiregistration/v1/APIService.py +26 -27
- pulumi_kubernetes/apiregistration/v1/APIServiceList.py +25 -26
- pulumi_kubernetes/apiregistration/v1/APIServicePatch.py +26 -27
- pulumi_kubernetes/apiregistration/v1/__init__.py +1 -1
- pulumi_kubernetes/apiregistration/v1/_inputs.py +157 -158
- pulumi_kubernetes/apiregistration/v1/outputs.py +128 -129
- pulumi_kubernetes/apiregistration/v1beta1/APIService.py +26 -27
- pulumi_kubernetes/apiregistration/v1beta1/APIServiceList.py +25 -26
- pulumi_kubernetes/apiregistration/v1beta1/APIServicePatch.py +26 -27
- pulumi_kubernetes/apiregistration/v1beta1/__init__.py +1 -1
- pulumi_kubernetes/apiregistration/v1beta1/_inputs.py +157 -158
- pulumi_kubernetes/apiregistration/v1beta1/outputs.py +128 -129
- pulumi_kubernetes/apps/__init__.py +1 -1
- pulumi_kubernetes/apps/v1/ControllerRevision.py +35 -36
- pulumi_kubernetes/apps/v1/ControllerRevisionList.py +25 -26
- pulumi_kubernetes/apps/v1/ControllerRevisionPatch.py +35 -36
- pulumi_kubernetes/apps/v1/DaemonSet.py +26 -27
- pulumi_kubernetes/apps/v1/DaemonSetList.py +25 -26
- pulumi_kubernetes/apps/v1/DaemonSetPatch.py +26 -27
- pulumi_kubernetes/apps/v1/Deployment.py +26 -27
- pulumi_kubernetes/apps/v1/DeploymentList.py +25 -26
- pulumi_kubernetes/apps/v1/DeploymentPatch.py +26 -27
- pulumi_kubernetes/apps/v1/ReplicaSet.py +26 -27
- pulumi_kubernetes/apps/v1/ReplicaSetList.py +25 -26
- pulumi_kubernetes/apps/v1/ReplicaSetPatch.py +26 -27
- pulumi_kubernetes/apps/v1/StatefulSet.py +26 -27
- pulumi_kubernetes/apps/v1/StatefulSetList.py +25 -26
- pulumi_kubernetes/apps/v1/StatefulSetPatch.py +26 -27
- pulumi_kubernetes/apps/v1/__init__.py +1 -1
- pulumi_kubernetes/apps/v1/_inputs.py +749 -750
- pulumi_kubernetes/apps/v1/outputs.py +713 -714
- pulumi_kubernetes/apps/v1beta1/ControllerRevision.py +35 -36
- pulumi_kubernetes/apps/v1beta1/ControllerRevisionList.py +25 -26
- pulumi_kubernetes/apps/v1beta1/ControllerRevisionPatch.py +35 -36
- pulumi_kubernetes/apps/v1beta1/Deployment.py +26 -27
- pulumi_kubernetes/apps/v1beta1/DeploymentList.py +25 -26
- pulumi_kubernetes/apps/v1beta1/DeploymentPatch.py +26 -27
- pulumi_kubernetes/apps/v1beta1/StatefulSet.py +26 -27
- pulumi_kubernetes/apps/v1beta1/StatefulSetList.py +25 -26
- pulumi_kubernetes/apps/v1beta1/StatefulSetPatch.py +26 -27
- pulumi_kubernetes/apps/v1beta1/__init__.py +1 -1
- pulumi_kubernetes/apps/v1beta1/_inputs.py +409 -410
- pulumi_kubernetes/apps/v1beta1/outputs.py +381 -382
- pulumi_kubernetes/apps/v1beta2/ControllerRevision.py +35 -36
- pulumi_kubernetes/apps/v1beta2/ControllerRevisionList.py +25 -26
- pulumi_kubernetes/apps/v1beta2/ControllerRevisionPatch.py +35 -36
- pulumi_kubernetes/apps/v1beta2/DaemonSet.py +26 -27
- pulumi_kubernetes/apps/v1beta2/DaemonSetList.py +25 -26
- pulumi_kubernetes/apps/v1beta2/DaemonSetPatch.py +26 -27
- pulumi_kubernetes/apps/v1beta2/Deployment.py +26 -27
- pulumi_kubernetes/apps/v1beta2/DeploymentList.py +25 -26
- pulumi_kubernetes/apps/v1beta2/DeploymentPatch.py +26 -27
- pulumi_kubernetes/apps/v1beta2/ReplicaSet.py +26 -27
- pulumi_kubernetes/apps/v1beta2/ReplicaSetList.py +25 -26
- pulumi_kubernetes/apps/v1beta2/ReplicaSetPatch.py +26 -27
- pulumi_kubernetes/apps/v1beta2/StatefulSet.py +26 -27
- pulumi_kubernetes/apps/v1beta2/StatefulSetList.py +25 -26
- pulumi_kubernetes/apps/v1beta2/StatefulSetPatch.py +26 -27
- pulumi_kubernetes/apps/v1beta2/__init__.py +1 -1
- pulumi_kubernetes/apps/v1beta2/_inputs.py +655 -656
- pulumi_kubernetes/apps/v1beta2/outputs.py +645 -646
- pulumi_kubernetes/auditregistration/__init__.py +1 -1
- pulumi_kubernetes/auditregistration/v1alpha1/AuditSink.py +25 -26
- pulumi_kubernetes/auditregistration/v1alpha1/AuditSinkList.py +25 -26
- pulumi_kubernetes/auditregistration/v1alpha1/AuditSinkPatch.py +25 -26
- pulumi_kubernetes/auditregistration/v1alpha1/__init__.py +1 -1
- pulumi_kubernetes/auditregistration/v1alpha1/_inputs.py +145 -146
- pulumi_kubernetes/auditregistration/v1alpha1/outputs.py +101 -102
- pulumi_kubernetes/autoscaling/__init__.py +1 -1
- pulumi_kubernetes/autoscaling/v1/HorizontalPodAutoscaler.py +26 -27
- pulumi_kubernetes/autoscaling/v1/HorizontalPodAutoscalerList.py +25 -26
- pulumi_kubernetes/autoscaling/v1/HorizontalPodAutoscalerPatch.py +26 -27
- pulumi_kubernetes/autoscaling/v1/__init__.py +1 -1
- pulumi_kubernetes/autoscaling/v1/_inputs.py +120 -121
- pulumi_kubernetes/autoscaling/v1/outputs.py +102 -103
- pulumi_kubernetes/autoscaling/v2/HorizontalPodAutoscaler.py +26 -27
- pulumi_kubernetes/autoscaling/v2/HorizontalPodAutoscalerList.py +25 -26
- pulumi_kubernetes/autoscaling/v2/HorizontalPodAutoscalerPatch.py +26 -27
- pulumi_kubernetes/autoscaling/v2/__init__.py +1 -1
- pulumi_kubernetes/autoscaling/v2/_inputs.py +410 -411
- pulumi_kubernetes/autoscaling/v2/outputs.py +374 -375
- pulumi_kubernetes/autoscaling/v2beta1/HorizontalPodAutoscaler.py +26 -27
- pulumi_kubernetes/autoscaling/v2beta1/HorizontalPodAutoscalerList.py +25 -26
- pulumi_kubernetes/autoscaling/v2beta1/HorizontalPodAutoscalerPatch.py +26 -27
- pulumi_kubernetes/autoscaling/v2beta1/__init__.py +1 -1
- pulumi_kubernetes/autoscaling/v2beta1/_inputs.py +451 -452
- pulumi_kubernetes/autoscaling/v2beta1/outputs.py +424 -425
- pulumi_kubernetes/autoscaling/v2beta2/HorizontalPodAutoscaler.py +26 -27
- pulumi_kubernetes/autoscaling/v2beta2/HorizontalPodAutoscalerList.py +25 -26
- pulumi_kubernetes/autoscaling/v2beta2/HorizontalPodAutoscalerPatch.py +26 -27
- pulumi_kubernetes/autoscaling/v2beta2/__init__.py +1 -1
- pulumi_kubernetes/autoscaling/v2beta2/_inputs.py +398 -399
- pulumi_kubernetes/autoscaling/v2beta2/outputs.py +366 -367
- pulumi_kubernetes/batch/__init__.py +1 -1
- pulumi_kubernetes/batch/v1/CronJob.py +26 -27
- pulumi_kubernetes/batch/v1/CronJobList.py +25 -26
- pulumi_kubernetes/batch/v1/CronJobPatch.py +26 -27
- pulumi_kubernetes/batch/v1/Job.py +26 -27
- pulumi_kubernetes/batch/v1/JobList.py +25 -26
- pulumi_kubernetes/batch/v1/JobPatch.py +26 -27
- pulumi_kubernetes/batch/v1/__init__.py +1 -1
- pulumi_kubernetes/batch/v1/_inputs.py +494 -495
- pulumi_kubernetes/batch/v1/outputs.py +419 -420
- pulumi_kubernetes/batch/v1beta1/CronJob.py +26 -27
- pulumi_kubernetes/batch/v1beta1/CronJobList.py +25 -26
- pulumi_kubernetes/batch/v1beta1/CronJobPatch.py +26 -27
- pulumi_kubernetes/batch/v1beta1/__init__.py +1 -1
- pulumi_kubernetes/batch/v1beta1/_inputs.py +101 -102
- pulumi_kubernetes/batch/v1beta1/outputs.py +76 -77
- pulumi_kubernetes/batch/v2alpha1/CronJob.py +26 -27
- pulumi_kubernetes/batch/v2alpha1/CronJobList.py +25 -26
- pulumi_kubernetes/batch/v2alpha1/CronJobPatch.py +26 -27
- pulumi_kubernetes/batch/v2alpha1/__init__.py +1 -1
- pulumi_kubernetes/batch/v2alpha1/_inputs.py +101 -102
- pulumi_kubernetes/batch/v2alpha1/outputs.py +76 -77
- pulumi_kubernetes/certificates/__init__.py +1 -1
- pulumi_kubernetes/certificates/v1/CertificateSigningRequest.py +26 -27
- pulumi_kubernetes/certificates/v1/CertificateSigningRequestList.py +25 -26
- pulumi_kubernetes/certificates/v1/CertificateSigningRequestPatch.py +26 -27
- pulumi_kubernetes/certificates/v1/__init__.py +1 -1
- pulumi_kubernetes/certificates/v1/_inputs.py +155 -156
- pulumi_kubernetes/certificates/v1/outputs.py +134 -135
- pulumi_kubernetes/certificates/v1alpha1/ClusterTrustBundle.py +25 -26
- pulumi_kubernetes/certificates/v1alpha1/ClusterTrustBundleList.py +25 -26
- pulumi_kubernetes/certificates/v1alpha1/ClusterTrustBundlePatch.py +25 -26
- pulumi_kubernetes/certificates/v1alpha1/__init__.py +1 -1
- pulumi_kubernetes/certificates/v1alpha1/_inputs.py +39 -40
- pulumi_kubernetes/certificates/v1alpha1/outputs.py +27 -28
- pulumi_kubernetes/certificates/v1beta1/CertificateSigningRequest.py +26 -27
- pulumi_kubernetes/certificates/v1beta1/CertificateSigningRequestList.py +25 -26
- pulumi_kubernetes/certificates/v1beta1/CertificateSigningRequestPatch.py +26 -27
- pulumi_kubernetes/certificates/v1beta1/ClusterTrustBundle.py +25 -26
- pulumi_kubernetes/certificates/v1beta1/ClusterTrustBundleList.py +25 -26
- pulumi_kubernetes/certificates/v1beta1/ClusterTrustBundlePatch.py +25 -26
- pulumi_kubernetes/certificates/v1beta1/__init__.py +1 -1
- pulumi_kubernetes/certificates/v1beta1/_inputs.py +182 -183
- pulumi_kubernetes/certificates/v1beta1/outputs.py +154 -155
- pulumi_kubernetes/coordination/__init__.py +1 -1
- pulumi_kubernetes/coordination/v1/Lease.py +25 -26
- pulumi_kubernetes/coordination/v1/LeaseList.py +25 -26
- pulumi_kubernetes/coordination/v1/LeasePatch.py +25 -26
- pulumi_kubernetes/coordination/v1/__init__.py +1 -1
- pulumi_kubernetes/coordination/v1/_inputs.py +99 -100
- pulumi_kubernetes/coordination/v1/outputs.py +67 -68
- pulumi_kubernetes/coordination/v1alpha1/LeaseCandidate.py +25 -26
- pulumi_kubernetes/coordination/v1alpha1/LeaseCandidateList.py +25 -26
- pulumi_kubernetes/coordination/v1alpha1/LeaseCandidatePatch.py +25 -26
- pulumi_kubernetes/coordination/v1alpha1/__init__.py +1 -1
- pulumi_kubernetes/coordination/v1alpha1/_inputs.py +87 -88
- pulumi_kubernetes/coordination/v1alpha1/outputs.py +59 -60
- pulumi_kubernetes/coordination/v1alpha2/LeaseCandidate.py +25 -26
- pulumi_kubernetes/coordination/v1alpha2/LeaseCandidateList.py +25 -26
- pulumi_kubernetes/coordination/v1alpha2/LeaseCandidatePatch.py +25 -26
- pulumi_kubernetes/coordination/v1alpha2/__init__.py +1 -1
- pulumi_kubernetes/coordination/v1alpha2/_inputs.py +87 -88
- pulumi_kubernetes/coordination/v1alpha2/outputs.py +59 -60
- pulumi_kubernetes/coordination/v1beta1/Lease.py +25 -26
- pulumi_kubernetes/coordination/v1beta1/LeaseCandidate.py +25 -26
- pulumi_kubernetes/coordination/v1beta1/LeaseCandidateList.py +25 -26
- pulumi_kubernetes/coordination/v1beta1/LeaseCandidatePatch.py +25 -26
- pulumi_kubernetes/coordination/v1beta1/LeaseList.py +25 -26
- pulumi_kubernetes/coordination/v1beta1/LeasePatch.py +25 -26
- pulumi_kubernetes/coordination/v1beta1/__init__.py +1 -1
- pulumi_kubernetes/coordination/v1beta1/_inputs.py +161 -162
- pulumi_kubernetes/coordination/v1beta1/outputs.py +109 -110
- pulumi_kubernetes/core/__init__.py +1 -1
- pulumi_kubernetes/core/v1/Binding.py +25 -26
- pulumi_kubernetes/core/v1/BindingPatch.py +25 -26
- pulumi_kubernetes/core/v1/ConfigMap.py +53 -54
- pulumi_kubernetes/core/v1/ConfigMapList.py +25 -26
- pulumi_kubernetes/core/v1/ConfigMapPatch.py +53 -54
- pulumi_kubernetes/core/v1/Endpoints.py +25 -26
- pulumi_kubernetes/core/v1/EndpointsList.py +25 -26
- pulumi_kubernetes/core/v1/EndpointsPatch.py +25 -26
- pulumi_kubernetes/core/v1/Event.py +131 -132
- pulumi_kubernetes/core/v1/EventList.py +25 -26
- pulumi_kubernetes/core/v1/EventPatch.py +131 -132
- pulumi_kubernetes/core/v1/LimitRange.py +25 -26
- pulumi_kubernetes/core/v1/LimitRangeList.py +25 -26
- pulumi_kubernetes/core/v1/LimitRangePatch.py +25 -26
- pulumi_kubernetes/core/v1/Namespace.py +26 -27
- pulumi_kubernetes/core/v1/NamespaceList.py +25 -26
- pulumi_kubernetes/core/v1/NamespacePatch.py +26 -27
- pulumi_kubernetes/core/v1/Node.py +26 -27
- pulumi_kubernetes/core/v1/NodeList.py +25 -26
- pulumi_kubernetes/core/v1/NodePatch.py +26 -27
- pulumi_kubernetes/core/v1/PersistentVolume.py +26 -27
- pulumi_kubernetes/core/v1/PersistentVolumeClaim.py +26 -27
- pulumi_kubernetes/core/v1/PersistentVolumeClaimList.py +25 -26
- pulumi_kubernetes/core/v1/PersistentVolumeClaimPatch.py +26 -27
- pulumi_kubernetes/core/v1/PersistentVolumeList.py +25 -26
- pulumi_kubernetes/core/v1/PersistentVolumePatch.py +26 -27
- pulumi_kubernetes/core/v1/Pod.py +26 -27
- pulumi_kubernetes/core/v1/PodList.py +25 -26
- pulumi_kubernetes/core/v1/PodPatch.py +26 -27
- pulumi_kubernetes/core/v1/PodTemplate.py +25 -26
- pulumi_kubernetes/core/v1/PodTemplateList.py +25 -26
- pulumi_kubernetes/core/v1/PodTemplatePatch.py +25 -26
- pulumi_kubernetes/core/v1/ReplicationController.py +26 -27
- pulumi_kubernetes/core/v1/ReplicationControllerList.py +25 -26
- pulumi_kubernetes/core/v1/ReplicationControllerPatch.py +26 -27
- pulumi_kubernetes/core/v1/ResourceQuota.py +26 -27
- pulumi_kubernetes/core/v1/ResourceQuotaList.py +25 -26
- pulumi_kubernetes/core/v1/ResourceQuotaPatch.py +26 -27
- pulumi_kubernetes/core/v1/Secret.py +63 -64
- pulumi_kubernetes/core/v1/SecretList.py +25 -26
- pulumi_kubernetes/core/v1/SecretPatch.py +63 -64
- pulumi_kubernetes/core/v1/Service.py +26 -27
- pulumi_kubernetes/core/v1/ServiceAccount.py +37 -38
- pulumi_kubernetes/core/v1/ServiceAccountList.py +25 -26
- pulumi_kubernetes/core/v1/ServiceAccountPatch.py +37 -38
- pulumi_kubernetes/core/v1/ServiceList.py +25 -26
- pulumi_kubernetes/core/v1/ServicePatch.py +26 -27
- pulumi_kubernetes/core/v1/__init__.py +1 -1
- pulumi_kubernetes/core/v1/_enums.py +2 -2
- pulumi_kubernetes/core/v1/_inputs.py +7133 -7134
- pulumi_kubernetes/core/v1/outputs.py +5390 -5391
- pulumi_kubernetes/discovery/__init__.py +1 -1
- pulumi_kubernetes/discovery/v1/EndpointSlice.py +37 -38
- pulumi_kubernetes/discovery/v1/EndpointSliceList.py +25 -26
- pulumi_kubernetes/discovery/v1/EndpointSlicePatch.py +37 -38
- pulumi_kubernetes/discovery/v1/__init__.py +1 -1
- pulumi_kubernetes/discovery/v1/_inputs.py +200 -201
- pulumi_kubernetes/discovery/v1/outputs.py +138 -139
- pulumi_kubernetes/discovery/v1beta1/EndpointSlice.py +37 -38
- pulumi_kubernetes/discovery/v1beta1/EndpointSliceList.py +25 -26
- pulumi_kubernetes/discovery/v1beta1/EndpointSlicePatch.py +37 -38
- pulumi_kubernetes/discovery/v1beta1/__init__.py +1 -1
- pulumi_kubernetes/discovery/v1beta1/_inputs.py +158 -159
- pulumi_kubernetes/discovery/v1beta1/outputs.py +108 -109
- pulumi_kubernetes/events/__init__.py +1 -1
- pulumi_kubernetes/events/v1/Event.py +131 -132
- pulumi_kubernetes/events/v1/EventList.py +25 -26
- pulumi_kubernetes/events/v1/EventPatch.py +131 -132
- pulumi_kubernetes/events/v1/__init__.py +1 -1
- pulumi_kubernetes/events/v1/_inputs.py +102 -103
- pulumi_kubernetes/events/v1/outputs.py +70 -71
- pulumi_kubernetes/events/v1beta1/Event.py +131 -132
- pulumi_kubernetes/events/v1beta1/EventList.py +25 -26
- pulumi_kubernetes/events/v1beta1/EventPatch.py +131 -132
- pulumi_kubernetes/events/v1beta1/__init__.py +1 -1
- pulumi_kubernetes/events/v1beta1/_inputs.py +114 -115
- pulumi_kubernetes/events/v1beta1/outputs.py +78 -79
- pulumi_kubernetes/extensions/__init__.py +1 -1
- pulumi_kubernetes/extensions/v1beta1/DaemonSet.py +26 -27
- pulumi_kubernetes/extensions/v1beta1/DaemonSetList.py +25 -26
- pulumi_kubernetes/extensions/v1beta1/DaemonSetPatch.py +26 -27
- pulumi_kubernetes/extensions/v1beta1/Deployment.py +26 -27
- pulumi_kubernetes/extensions/v1beta1/DeploymentList.py +25 -26
- pulumi_kubernetes/extensions/v1beta1/DeploymentPatch.py +26 -27
- pulumi_kubernetes/extensions/v1beta1/Ingress.py +26 -27
- pulumi_kubernetes/extensions/v1beta1/IngressList.py +25 -26
- pulumi_kubernetes/extensions/v1beta1/IngressPatch.py +26 -27
- pulumi_kubernetes/extensions/v1beta1/NetworkPolicy.py +25 -26
- pulumi_kubernetes/extensions/v1beta1/NetworkPolicyList.py +25 -26
- pulumi_kubernetes/extensions/v1beta1/NetworkPolicyPatch.py +25 -26
- pulumi_kubernetes/extensions/v1beta1/PodSecurityPolicy.py +25 -26
- pulumi_kubernetes/extensions/v1beta1/PodSecurityPolicyList.py +25 -26
- pulumi_kubernetes/extensions/v1beta1/PodSecurityPolicyPatch.py +25 -26
- pulumi_kubernetes/extensions/v1beta1/ReplicaSet.py +26 -27
- pulumi_kubernetes/extensions/v1beta1/ReplicaSetList.py +25 -26
- pulumi_kubernetes/extensions/v1beta1/ReplicaSetPatch.py +26 -27
- pulumi_kubernetes/extensions/v1beta1/__init__.py +1 -1
- pulumi_kubernetes/extensions/v1beta1/_inputs.py +1097 -1098
- pulumi_kubernetes/extensions/v1beta1/outputs.py +899 -900
- pulumi_kubernetes/flowcontrol/__init__.py +1 -1
- pulumi_kubernetes/flowcontrol/v1/FlowSchema.py +26 -27
- pulumi_kubernetes/flowcontrol/v1/FlowSchemaList.py +25 -26
- pulumi_kubernetes/flowcontrol/v1/FlowSchemaPatch.py +26 -27
- pulumi_kubernetes/flowcontrol/v1/PriorityLevelConfiguration.py +26 -27
- pulumi_kubernetes/flowcontrol/v1/PriorityLevelConfigurationList.py +25 -26
- pulumi_kubernetes/flowcontrol/v1/PriorityLevelConfigurationPatch.py +26 -27
- pulumi_kubernetes/flowcontrol/v1/__init__.py +1 -1
- pulumi_kubernetes/flowcontrol/v1/_inputs.py +419 -420
- pulumi_kubernetes/flowcontrol/v1/outputs.py +333 -334
- pulumi_kubernetes/flowcontrol/v1alpha1/FlowSchema.py +26 -27
- pulumi_kubernetes/flowcontrol/v1alpha1/FlowSchemaList.py +25 -26
- pulumi_kubernetes/flowcontrol/v1alpha1/FlowSchemaPatch.py +26 -27
- pulumi_kubernetes/flowcontrol/v1alpha1/PriorityLevelConfiguration.py +26 -27
- pulumi_kubernetes/flowcontrol/v1alpha1/PriorityLevelConfigurationList.py +25 -26
- pulumi_kubernetes/flowcontrol/v1alpha1/PriorityLevelConfigurationPatch.py +26 -27
- pulumi_kubernetes/flowcontrol/v1alpha1/__init__.py +1 -1
- pulumi_kubernetes/flowcontrol/v1alpha1/_inputs.py +369 -370
- pulumi_kubernetes/flowcontrol/v1alpha1/outputs.py +299 -300
- pulumi_kubernetes/flowcontrol/v1beta1/FlowSchema.py +26 -27
- pulumi_kubernetes/flowcontrol/v1beta1/FlowSchemaList.py +25 -26
- pulumi_kubernetes/flowcontrol/v1beta1/FlowSchemaPatch.py +26 -27
- pulumi_kubernetes/flowcontrol/v1beta1/PriorityLevelConfiguration.py +26 -27
- pulumi_kubernetes/flowcontrol/v1beta1/PriorityLevelConfigurationList.py +25 -26
- pulumi_kubernetes/flowcontrol/v1beta1/PriorityLevelConfigurationPatch.py +26 -27
- pulumi_kubernetes/flowcontrol/v1beta1/__init__.py +1 -1
- pulumi_kubernetes/flowcontrol/v1beta1/_inputs.py +369 -370
- pulumi_kubernetes/flowcontrol/v1beta1/outputs.py +299 -300
- pulumi_kubernetes/flowcontrol/v1beta2/FlowSchema.py +26 -27
- pulumi_kubernetes/flowcontrol/v1beta2/FlowSchemaList.py +25 -26
- pulumi_kubernetes/flowcontrol/v1beta2/FlowSchemaPatch.py +26 -27
- pulumi_kubernetes/flowcontrol/v1beta2/PriorityLevelConfiguration.py +26 -27
- pulumi_kubernetes/flowcontrol/v1beta2/PriorityLevelConfigurationList.py +25 -26
- pulumi_kubernetes/flowcontrol/v1beta2/PriorityLevelConfigurationPatch.py +26 -27
- pulumi_kubernetes/flowcontrol/v1beta2/__init__.py +1 -1
- pulumi_kubernetes/flowcontrol/v1beta2/_inputs.py +419 -420
- pulumi_kubernetes/flowcontrol/v1beta2/outputs.py +333 -334
- pulumi_kubernetes/flowcontrol/v1beta3/FlowSchema.py +26 -27
- pulumi_kubernetes/flowcontrol/v1beta3/FlowSchemaList.py +25 -26
- pulumi_kubernetes/flowcontrol/v1beta3/FlowSchemaPatch.py +26 -27
- pulumi_kubernetes/flowcontrol/v1beta3/PriorityLevelConfiguration.py +26 -27
- pulumi_kubernetes/flowcontrol/v1beta3/PriorityLevelConfigurationList.py +25 -26
- pulumi_kubernetes/flowcontrol/v1beta3/PriorityLevelConfigurationPatch.py +26 -27
- pulumi_kubernetes/flowcontrol/v1beta3/__init__.py +1 -1
- pulumi_kubernetes/flowcontrol/v1beta3/_inputs.py +419 -420
- pulumi_kubernetes/flowcontrol/v1beta3/outputs.py +333 -334
- pulumi_kubernetes/helm/__init__.py +1 -1
- pulumi_kubernetes/helm/v3/Release.py +316 -317
- pulumi_kubernetes/helm/v3/__init__.py +1 -1
- pulumi_kubernetes/helm/v3/_inputs.py +37 -38
- pulumi_kubernetes/helm/v3/outputs.py +54 -55
- pulumi_kubernetes/helm/v4/Chart.py +95 -96
- pulumi_kubernetes/helm/v4/__init__.py +1 -1
- pulumi_kubernetes/helm/v4/_inputs.py +34 -35
- pulumi_kubernetes/kustomize/__init__.py +1 -1
- pulumi_kubernetes/kustomize/v2/Directory.py +35 -36
- pulumi_kubernetes/kustomize/v2/__init__.py +1 -1
- pulumi_kubernetes/meta/__init__.py +1 -1
- pulumi_kubernetes/meta/v1/Status.py +57 -58
- pulumi_kubernetes/meta/v1/StatusPatch.py +57 -58
- pulumi_kubernetes/meta/v1/__init__.py +1 -1
- pulumi_kubernetes/meta/v1/_inputs.py +551 -552
- pulumi_kubernetes/meta/v1/outputs.py +395 -396
- pulumi_kubernetes/networking/__init__.py +1 -1
- pulumi_kubernetes/networking/v1/IPAddress.py +25 -26
- pulumi_kubernetes/networking/v1/IPAddressList.py +25 -26
- pulumi_kubernetes/networking/v1/IPAddressPatch.py +25 -26
- pulumi_kubernetes/networking/v1/Ingress.py +26 -27
- pulumi_kubernetes/networking/v1/IngressClass.py +25 -26
- pulumi_kubernetes/networking/v1/IngressClassList.py +25 -26
- pulumi_kubernetes/networking/v1/IngressClassPatch.py +25 -26
- pulumi_kubernetes/networking/v1/IngressList.py +25 -26
- pulumi_kubernetes/networking/v1/IngressPatch.py +26 -27
- pulumi_kubernetes/networking/v1/NetworkPolicy.py +26 -27
- pulumi_kubernetes/networking/v1/NetworkPolicyList.py +25 -26
- pulumi_kubernetes/networking/v1/NetworkPolicyPatch.py +26 -27
- pulumi_kubernetes/networking/v1/ServiceCIDR.py +26 -27
- pulumi_kubernetes/networking/v1/ServiceCIDRList.py +25 -26
- pulumi_kubernetes/networking/v1/ServiceCIDRPatch.py +26 -27
- pulumi_kubernetes/networking/v1/__init__.py +1 -1
- pulumi_kubernetes/networking/v1/_inputs.py +463 -464
- pulumi_kubernetes/networking/v1/outputs.py +350 -351
- pulumi_kubernetes/networking/v1alpha1/ClusterCIDR.py +25 -26
- pulumi_kubernetes/networking/v1alpha1/ClusterCIDRList.py +25 -26
- pulumi_kubernetes/networking/v1alpha1/ClusterCIDRPatch.py +25 -26
- pulumi_kubernetes/networking/v1alpha1/IPAddress.py +25 -26
- pulumi_kubernetes/networking/v1alpha1/IPAddressList.py +25 -26
- pulumi_kubernetes/networking/v1alpha1/IPAddressPatch.py +25 -26
- pulumi_kubernetes/networking/v1alpha1/ServiceCIDR.py +26 -27
- pulumi_kubernetes/networking/v1alpha1/ServiceCIDRList.py +25 -26
- pulumi_kubernetes/networking/v1alpha1/ServiceCIDRPatch.py +26 -27
- pulumi_kubernetes/networking/v1alpha1/__init__.py +1 -1
- pulumi_kubernetes/networking/v1alpha1/_inputs.py +157 -158
- pulumi_kubernetes/networking/v1alpha1/outputs.py +110 -111
- pulumi_kubernetes/networking/v1beta1/IPAddress.py +25 -26
- pulumi_kubernetes/networking/v1beta1/IPAddressList.py +25 -26
- pulumi_kubernetes/networking/v1beta1/IPAddressPatch.py +25 -26
- pulumi_kubernetes/networking/v1beta1/Ingress.py +26 -27
- pulumi_kubernetes/networking/v1beta1/IngressClass.py +25 -26
- pulumi_kubernetes/networking/v1beta1/IngressClassList.py +25 -26
- pulumi_kubernetes/networking/v1beta1/IngressClassPatch.py +25 -26
- pulumi_kubernetes/networking/v1beta1/IngressList.py +25 -26
- pulumi_kubernetes/networking/v1beta1/IngressPatch.py +26 -27
- pulumi_kubernetes/networking/v1beta1/ServiceCIDR.py +26 -27
- pulumi_kubernetes/networking/v1beta1/ServiceCIDRList.py +25 -26
- pulumi_kubernetes/networking/v1beta1/ServiceCIDRPatch.py +26 -27
- pulumi_kubernetes/networking/v1beta1/__init__.py +1 -1
- pulumi_kubernetes/networking/v1beta1/_inputs.py +247 -248
- pulumi_kubernetes/networking/v1beta1/outputs.py +173 -174
- pulumi_kubernetes/node/__init__.py +1 -1
- pulumi_kubernetes/node/v1/RuntimeClass.py +37 -38
- pulumi_kubernetes/node/v1/RuntimeClassList.py +25 -26
- pulumi_kubernetes/node/v1/RuntimeClassPatch.py +37 -38
- pulumi_kubernetes/node/v1/__init__.py +1 -1
- pulumi_kubernetes/node/v1/_inputs.py +48 -49
- pulumi_kubernetes/node/v1/outputs.py +34 -35
- pulumi_kubernetes/node/v1alpha1/RuntimeClass.py +25 -26
- pulumi_kubernetes/node/v1alpha1/RuntimeClassList.py +25 -26
- pulumi_kubernetes/node/v1alpha1/RuntimeClassPatch.py +25 -26
- pulumi_kubernetes/node/v1alpha1/__init__.py +1 -1
- pulumi_kubernetes/node/v1alpha1/_inputs.py +57 -58
- pulumi_kubernetes/node/v1alpha1/outputs.py +41 -42
- pulumi_kubernetes/node/v1beta1/RuntimeClass.py +37 -38
- pulumi_kubernetes/node/v1beta1/RuntimeClassList.py +25 -26
- pulumi_kubernetes/node/v1beta1/RuntimeClassPatch.py +37 -38
- pulumi_kubernetes/node/v1beta1/__init__.py +1 -1
- pulumi_kubernetes/node/v1beta1/_inputs.py +48 -49
- pulumi_kubernetes/node/v1beta1/outputs.py +34 -35
- pulumi_kubernetes/policy/__init__.py +1 -1
- pulumi_kubernetes/policy/v1/PodDisruptionBudget.py +26 -27
- pulumi_kubernetes/policy/v1/PodDisruptionBudgetList.py +25 -26
- pulumi_kubernetes/policy/v1/PodDisruptionBudgetPatch.py +26 -27
- pulumi_kubernetes/policy/v1/__init__.py +1 -1
- pulumi_kubernetes/policy/v1/_inputs.py +91 -92
- pulumi_kubernetes/policy/v1/outputs.py +80 -81
- pulumi_kubernetes/policy/v1beta1/PodDisruptionBudget.py +26 -27
- pulumi_kubernetes/policy/v1beta1/PodDisruptionBudgetList.py +25 -26
- pulumi_kubernetes/policy/v1beta1/PodDisruptionBudgetPatch.py +26 -27
- pulumi_kubernetes/policy/v1beta1/PodSecurityPolicy.py +25 -26
- pulumi_kubernetes/policy/v1beta1/PodSecurityPolicyList.py +25 -26
- pulumi_kubernetes/policy/v1beta1/PodSecurityPolicyPatch.py +25 -26
- pulumi_kubernetes/policy/v1beta1/__init__.py +1 -1
- pulumi_kubernetes/policy/v1beta1/_inputs.py +470 -471
- pulumi_kubernetes/policy/v1beta1/outputs.py +342 -343
- pulumi_kubernetes/provider.py +107 -108
- pulumi_kubernetes/pulumi-plugin.json +1 -1
- pulumi_kubernetes/rbac/__init__.py +1 -1
- pulumi_kubernetes/rbac/v1/ClusterRole.py +27 -28
- pulumi_kubernetes/rbac/v1/ClusterRoleBinding.py +27 -28
- pulumi_kubernetes/rbac/v1/ClusterRoleBindingList.py +25 -26
- pulumi_kubernetes/rbac/v1/ClusterRoleBindingPatch.py +27 -28
- pulumi_kubernetes/rbac/v1/ClusterRoleList.py +25 -26
- pulumi_kubernetes/rbac/v1/ClusterRolePatch.py +27 -28
- pulumi_kubernetes/rbac/v1/Role.py +25 -26
- pulumi_kubernetes/rbac/v1/RoleBinding.py +27 -28
- pulumi_kubernetes/rbac/v1/RoleBindingList.py +25 -26
- pulumi_kubernetes/rbac/v1/RoleBindingPatch.py +27 -28
- pulumi_kubernetes/rbac/v1/RoleList.py +25 -26
- pulumi_kubernetes/rbac/v1/RolePatch.py +25 -26
- pulumi_kubernetes/rbac/v1/__init__.py +1 -1
- pulumi_kubernetes/rbac/v1/_inputs.py +206 -207
- pulumi_kubernetes/rbac/v1/outputs.py +142 -143
- pulumi_kubernetes/rbac/v1alpha1/ClusterRole.py +27 -28
- pulumi_kubernetes/rbac/v1alpha1/ClusterRoleBinding.py +27 -28
- pulumi_kubernetes/rbac/v1alpha1/ClusterRoleBindingList.py +25 -26
- pulumi_kubernetes/rbac/v1alpha1/ClusterRoleBindingPatch.py +27 -28
- pulumi_kubernetes/rbac/v1alpha1/ClusterRoleList.py +25 -26
- pulumi_kubernetes/rbac/v1alpha1/ClusterRolePatch.py +27 -28
- pulumi_kubernetes/rbac/v1alpha1/Role.py +25 -26
- pulumi_kubernetes/rbac/v1alpha1/RoleBinding.py +27 -28
- pulumi_kubernetes/rbac/v1alpha1/RoleBindingList.py +25 -26
- pulumi_kubernetes/rbac/v1alpha1/RoleBindingPatch.py +27 -28
- pulumi_kubernetes/rbac/v1alpha1/RoleList.py +25 -26
- pulumi_kubernetes/rbac/v1alpha1/RolePatch.py +25 -26
- pulumi_kubernetes/rbac/v1alpha1/__init__.py +1 -1
- pulumi_kubernetes/rbac/v1alpha1/_inputs.py +206 -207
- pulumi_kubernetes/rbac/v1alpha1/outputs.py +142 -143
- pulumi_kubernetes/rbac/v1beta1/ClusterRole.py +27 -28
- pulumi_kubernetes/rbac/v1beta1/ClusterRoleBinding.py +27 -28
- pulumi_kubernetes/rbac/v1beta1/ClusterRoleBindingList.py +25 -26
- pulumi_kubernetes/rbac/v1beta1/ClusterRoleBindingPatch.py +27 -28
- pulumi_kubernetes/rbac/v1beta1/ClusterRoleList.py +25 -26
- pulumi_kubernetes/rbac/v1beta1/ClusterRolePatch.py +27 -28
- pulumi_kubernetes/rbac/v1beta1/Role.py +25 -26
- pulumi_kubernetes/rbac/v1beta1/RoleBinding.py +27 -28
- pulumi_kubernetes/rbac/v1beta1/RoleBindingList.py +25 -26
- pulumi_kubernetes/rbac/v1beta1/RoleBindingPatch.py +27 -28
- pulumi_kubernetes/rbac/v1beta1/RoleList.py +25 -26
- pulumi_kubernetes/rbac/v1beta1/RolePatch.py +25 -26
- pulumi_kubernetes/rbac/v1beta1/__init__.py +1 -1
- pulumi_kubernetes/rbac/v1beta1/_inputs.py +206 -207
- pulumi_kubernetes/rbac/v1beta1/outputs.py +142 -143
- pulumi_kubernetes/resource/__init__.py +1 -1
- pulumi_kubernetes/resource/v1alpha1/PodScheduling.py +26 -27
- pulumi_kubernetes/resource/v1alpha1/PodSchedulingList.py +25 -26
- pulumi_kubernetes/resource/v1alpha1/PodSchedulingPatch.py +26 -27
- pulumi_kubernetes/resource/v1alpha1/ResourceClaim.py +26 -27
- pulumi_kubernetes/resource/v1alpha1/ResourceClaimList.py +25 -26
- pulumi_kubernetes/resource/v1alpha1/ResourceClaimPatch.py +26 -27
- pulumi_kubernetes/resource/v1alpha1/ResourceClaimTemplate.py +25 -26
- pulumi_kubernetes/resource/v1alpha1/ResourceClaimTemplateList.py +25 -26
- pulumi_kubernetes/resource/v1alpha1/ResourceClaimTemplatePatch.py +25 -26
- pulumi_kubernetes/resource/v1alpha1/ResourceClass.py +37 -38
- pulumi_kubernetes/resource/v1alpha1/ResourceClassList.py +25 -26
- pulumi_kubernetes/resource/v1alpha1/ResourceClassPatch.py +37 -38
- pulumi_kubernetes/resource/v1alpha1/__init__.py +1 -1
- pulumi_kubernetes/resource/v1alpha1/_inputs.py +268 -269
- pulumi_kubernetes/resource/v1alpha1/outputs.py +230 -231
- pulumi_kubernetes/resource/v1alpha2/PodSchedulingContext.py +26 -27
- pulumi_kubernetes/resource/v1alpha2/PodSchedulingContextList.py +25 -26
- pulumi_kubernetes/resource/v1alpha2/PodSchedulingContextPatch.py +26 -27
- pulumi_kubernetes/resource/v1alpha2/ResourceClaim.py +26 -27
- pulumi_kubernetes/resource/v1alpha2/ResourceClaimList.py +25 -26
- pulumi_kubernetes/resource/v1alpha2/ResourceClaimParameters.py +37 -38
- pulumi_kubernetes/resource/v1alpha2/ResourceClaimParametersList.py +25 -26
- pulumi_kubernetes/resource/v1alpha2/ResourceClaimParametersPatch.py +37 -38
- pulumi_kubernetes/resource/v1alpha2/ResourceClaimPatch.py +26 -27
- pulumi_kubernetes/resource/v1alpha2/ResourceClaimTemplate.py +25 -26
- pulumi_kubernetes/resource/v1alpha2/ResourceClaimTemplateList.py +25 -26
- pulumi_kubernetes/resource/v1alpha2/ResourceClaimTemplatePatch.py +25 -26
- pulumi_kubernetes/resource/v1alpha2/ResourceClass.py +47 -48
- pulumi_kubernetes/resource/v1alpha2/ResourceClassList.py +25 -26
- pulumi_kubernetes/resource/v1alpha2/ResourceClassParameters.py +29 -30
- pulumi_kubernetes/resource/v1alpha2/ResourceClassParametersList.py +25 -26
- pulumi_kubernetes/resource/v1alpha2/ResourceClassParametersPatch.py +29 -30
- pulumi_kubernetes/resource/v1alpha2/ResourceClassPatch.py +47 -48
- pulumi_kubernetes/resource/v1alpha2/ResourceSlice.py +45 -46
- pulumi_kubernetes/resource/v1alpha2/ResourceSliceList.py +25 -26
- pulumi_kubernetes/resource/v1alpha2/ResourceSlicePatch.py +45 -46
- pulumi_kubernetes/resource/v1alpha2/__init__.py +1 -1
- pulumi_kubernetes/resource/v1alpha2/_inputs.py +550 -551
- pulumi_kubernetes/resource/v1alpha2/outputs.py +449 -450
- pulumi_kubernetes/resource/v1alpha3/DeviceClass.py +25 -26
- pulumi_kubernetes/resource/v1alpha3/DeviceClassList.py +25 -26
- pulumi_kubernetes/resource/v1alpha3/DeviceClassPatch.py +25 -26
- pulumi_kubernetes/resource/v1alpha3/DeviceTaintRule.py +25 -26
- pulumi_kubernetes/resource/v1alpha3/DeviceTaintRuleList.py +25 -26
- pulumi_kubernetes/resource/v1alpha3/DeviceTaintRulePatch.py +25 -26
- pulumi_kubernetes/resource/v1alpha3/PodSchedulingContext.py +26 -27
- pulumi_kubernetes/resource/v1alpha3/PodSchedulingContextList.py +25 -26
- pulumi_kubernetes/resource/v1alpha3/PodSchedulingContextPatch.py +26 -27
- pulumi_kubernetes/resource/v1alpha3/ResourceClaim.py +26 -27
- pulumi_kubernetes/resource/v1alpha3/ResourceClaimList.py +25 -26
- pulumi_kubernetes/resource/v1alpha3/ResourceClaimPatch.py +26 -27
- pulumi_kubernetes/resource/v1alpha3/ResourceClaimTemplate.py +25 -26
- pulumi_kubernetes/resource/v1alpha3/ResourceClaimTemplateList.py +25 -26
- pulumi_kubernetes/resource/v1alpha3/ResourceClaimTemplatePatch.py +25 -26
- pulumi_kubernetes/resource/v1alpha3/ResourceSlice.py +25 -26
- pulumi_kubernetes/resource/v1alpha3/ResourceSliceList.py +27 -28
- pulumi_kubernetes/resource/v1alpha3/ResourceSlicePatch.py +25 -26
- pulumi_kubernetes/resource/v1alpha3/__init__.py +1 -1
- pulumi_kubernetes/resource/v1alpha3/_inputs.py +836 -837
- pulumi_kubernetes/resource/v1alpha3/outputs.py +685 -686
- pulumi_kubernetes/resource/v1beta1/DeviceClass.py +25 -26
- pulumi_kubernetes/resource/v1beta1/DeviceClassList.py +25 -26
- pulumi_kubernetes/resource/v1beta1/DeviceClassPatch.py +25 -26
- pulumi_kubernetes/resource/v1beta1/ResourceClaim.py +26 -27
- pulumi_kubernetes/resource/v1beta1/ResourceClaimList.py +25 -26
- pulumi_kubernetes/resource/v1beta1/ResourceClaimPatch.py +26 -27
- pulumi_kubernetes/resource/v1beta1/ResourceClaimTemplate.py +25 -26
- pulumi_kubernetes/resource/v1beta1/ResourceClaimTemplateList.py +25 -26
- pulumi_kubernetes/resource/v1beta1/ResourceClaimTemplatePatch.py +25 -26
- pulumi_kubernetes/resource/v1beta1/ResourceSlice.py +25 -26
- pulumi_kubernetes/resource/v1beta1/ResourceSliceList.py +25 -26
- pulumi_kubernetes/resource/v1beta1/ResourceSlicePatch.py +25 -26
- pulumi_kubernetes/resource/v1beta1/__init__.py +1 -1
- pulumi_kubernetes/resource/v1beta1/_inputs.py +686 -687
- pulumi_kubernetes/resource/v1beta1/outputs.py +564 -565
- pulumi_kubernetes/resource/v1beta2/DeviceClass.py +25 -26
- pulumi_kubernetes/resource/v1beta2/DeviceClassList.py +25 -26
- pulumi_kubernetes/resource/v1beta2/DeviceClassPatch.py +25 -26
- pulumi_kubernetes/resource/v1beta2/ResourceClaim.py +26 -27
- pulumi_kubernetes/resource/v1beta2/ResourceClaimList.py +25 -26
- pulumi_kubernetes/resource/v1beta2/ResourceClaimPatch.py +26 -27
- pulumi_kubernetes/resource/v1beta2/ResourceClaimTemplate.py +25 -26
- pulumi_kubernetes/resource/v1beta2/ResourceClaimTemplateList.py +25 -26
- pulumi_kubernetes/resource/v1beta2/ResourceClaimTemplatePatch.py +25 -26
- pulumi_kubernetes/resource/v1beta2/ResourceSlice.py +25 -26
- pulumi_kubernetes/resource/v1beta2/ResourceSliceList.py +25 -26
- pulumi_kubernetes/resource/v1beta2/ResourceSlicePatch.py +25 -26
- pulumi_kubernetes/resource/v1beta2/__init__.py +1 -1
- pulumi_kubernetes/resource/v1beta2/_inputs.py +686 -687
- pulumi_kubernetes/resource/v1beta2/outputs.py +564 -565
- pulumi_kubernetes/scheduling/__init__.py +1 -1
- pulumi_kubernetes/scheduling/v1/PriorityClass.py +63 -64
- pulumi_kubernetes/scheduling/v1/PriorityClassList.py +25 -26
- pulumi_kubernetes/scheduling/v1/PriorityClassPatch.py +63 -64
- pulumi_kubernetes/scheduling/v1/__init__.py +1 -1
- pulumi_kubernetes/scheduling/v1/_inputs.py +38 -39
- pulumi_kubernetes/scheduling/v1/outputs.py +26 -27
- pulumi_kubernetes/scheduling/v1alpha1/PriorityClass.py +63 -64
- pulumi_kubernetes/scheduling/v1alpha1/PriorityClassList.py +25 -26
- pulumi_kubernetes/scheduling/v1alpha1/PriorityClassPatch.py +63 -64
- pulumi_kubernetes/scheduling/v1alpha1/__init__.py +1 -1
- pulumi_kubernetes/scheduling/v1alpha1/_inputs.py +38 -39
- pulumi_kubernetes/scheduling/v1alpha1/outputs.py +26 -27
- pulumi_kubernetes/scheduling/v1beta1/PriorityClass.py +63 -64
- pulumi_kubernetes/scheduling/v1beta1/PriorityClassList.py +25 -26
- pulumi_kubernetes/scheduling/v1beta1/PriorityClassPatch.py +63 -64
- pulumi_kubernetes/scheduling/v1beta1/__init__.py +1 -1
- pulumi_kubernetes/scheduling/v1beta1/_inputs.py +38 -39
- pulumi_kubernetes/scheduling/v1beta1/outputs.py +26 -27
- pulumi_kubernetes/settings/__init__.py +1 -1
- pulumi_kubernetes/settings/v1alpha1/PodPreset.py +25 -26
- pulumi_kubernetes/settings/v1alpha1/PodPresetList.py +25 -26
- pulumi_kubernetes/settings/v1alpha1/PodPresetPatch.py +25 -26
- pulumi_kubernetes/settings/v1alpha1/__init__.py +1 -1
- pulumi_kubernetes/settings/v1alpha1/_inputs.py +25 -26
- pulumi_kubernetes/settings/v1alpha1/outputs.py +21 -22
- pulumi_kubernetes/storage/__init__.py +1 -1
- pulumi_kubernetes/storage/v1/CSIDriver.py +25 -26
- pulumi_kubernetes/storage/v1/CSIDriverList.py +25 -26
- pulumi_kubernetes/storage/v1/CSIDriverPatch.py +25 -26
- pulumi_kubernetes/storage/v1/CSINode.py +25 -26
- pulumi_kubernetes/storage/v1/CSINodeList.py +25 -26
- pulumi_kubernetes/storage/v1/CSINodePatch.py +25 -26
- pulumi_kubernetes/storage/v1/CSIStorageCapacity.py +55 -56
- pulumi_kubernetes/storage/v1/CSIStorageCapacityList.py +25 -26
- pulumi_kubernetes/storage/v1/CSIStorageCapacityPatch.py +55 -56
- pulumi_kubernetes/storage/v1/StorageClass.py +85 -86
- pulumi_kubernetes/storage/v1/StorageClassList.py +25 -26
- pulumi_kubernetes/storage/v1/StorageClassPatch.py +85 -86
- pulumi_kubernetes/storage/v1/VolumeAttachment.py +26 -27
- pulumi_kubernetes/storage/v1/VolumeAttachmentList.py +25 -26
- pulumi_kubernetes/storage/v1/VolumeAttachmentPatch.py +26 -27
- pulumi_kubernetes/storage/v1/__init__.py +1 -1
- pulumi_kubernetes/storage/v1/_inputs.py +372 -373
- pulumi_kubernetes/storage/v1/outputs.py +278 -279
- pulumi_kubernetes/storage/v1alpha1/VolumeAttachment.py +26 -27
- pulumi_kubernetes/storage/v1alpha1/VolumeAttachmentList.py +25 -26
- pulumi_kubernetes/storage/v1alpha1/VolumeAttachmentPatch.py +26 -27
- pulumi_kubernetes/storage/v1alpha1/VolumeAttributesClass.py +43 -44
- pulumi_kubernetes/storage/v1alpha1/VolumeAttributesClassList.py +25 -26
- pulumi_kubernetes/storage/v1alpha1/VolumeAttributesClassPatch.py +43 -44
- pulumi_kubernetes/storage/v1alpha1/__init__.py +1 -1
- pulumi_kubernetes/storage/v1alpha1/_inputs.py +107 -108
- pulumi_kubernetes/storage/v1alpha1/outputs.py +93 -94
- pulumi_kubernetes/storage/v1beta1/CSIDriver.py +25 -26
- pulumi_kubernetes/storage/v1beta1/CSIDriverList.py +25 -26
- pulumi_kubernetes/storage/v1beta1/CSIDriverPatch.py +25 -26
- pulumi_kubernetes/storage/v1beta1/CSINode.py +25 -26
- pulumi_kubernetes/storage/v1beta1/CSINodeList.py +25 -26
- pulumi_kubernetes/storage/v1beta1/CSINodePatch.py +25 -26
- pulumi_kubernetes/storage/v1beta1/CSIStorageCapacity.py +55 -56
- pulumi_kubernetes/storage/v1beta1/CSIStorageCapacityList.py +25 -26
- pulumi_kubernetes/storage/v1beta1/CSIStorageCapacityPatch.py +55 -56
- pulumi_kubernetes/storage/v1beta1/StorageClass.py +85 -86
- pulumi_kubernetes/storage/v1beta1/StorageClassList.py +25 -26
- pulumi_kubernetes/storage/v1beta1/StorageClassPatch.py +85 -86
- pulumi_kubernetes/storage/v1beta1/VolumeAttachment.py +26 -27
- pulumi_kubernetes/storage/v1beta1/VolumeAttachmentList.py +25 -26
- pulumi_kubernetes/storage/v1beta1/VolumeAttachmentPatch.py +26 -27
- pulumi_kubernetes/storage/v1beta1/VolumeAttributesClass.py +43 -44
- pulumi_kubernetes/storage/v1beta1/VolumeAttributesClassList.py +25 -26
- pulumi_kubernetes/storage/v1beta1/VolumeAttributesClassPatch.py +43 -44
- pulumi_kubernetes/storage/v1beta1/__init__.py +1 -1
- pulumi_kubernetes/storage/v1beta1/_inputs.py +367 -368
- pulumi_kubernetes/storage/v1beta1/outputs.py +271 -272
- pulumi_kubernetes/storagemigration/__init__.py +1 -1
- pulumi_kubernetes/storagemigration/v1alpha1/StorageVersionMigration.py +26 -27
- pulumi_kubernetes/storagemigration/v1alpha1/StorageVersionMigrationList.py +25 -26
- pulumi_kubernetes/storagemigration/v1alpha1/StorageVersionMigrationPatch.py +26 -27
- pulumi_kubernetes/storagemigration/v1alpha1/__init__.py +1 -1
- pulumi_kubernetes/storagemigration/v1alpha1/_inputs.py +103 -104
- pulumi_kubernetes/storagemigration/v1alpha1/outputs.py +96 -97
- pulumi_kubernetes/yaml/__init__.py +1 -1
- pulumi_kubernetes/yaml/v2/ConfigFile.py +26 -27
- pulumi_kubernetes/yaml/v2/ConfigGroup.py +35 -36
- pulumi_kubernetes/yaml/v2/__init__.py +1 -1
- {pulumi_kubernetes-4.24.0a1753079574.dist-info → pulumi_kubernetes-4.24.0a1753121506.dist-info}/METADATA +1 -1
- pulumi_kubernetes-4.24.0a1753121506.dist-info/RECORD +709 -0
- pulumi_kubernetes-4.24.0a1753079574.dist-info/RECORD +0 -709
- {pulumi_kubernetes-4.24.0a1753079574.dist-info → pulumi_kubernetes-4.24.0a1753121506.dist-info}/WHEEL +0 -0
- {pulumi_kubernetes-4.24.0a1753079574.dist-info → pulumi_kubernetes-4.24.0a1753121506.dist-info}/top_level.txt +0 -0
|
@@ -2,8 +2,7 @@
|
|
|
2
2
|
# *** WARNING: this file was generated by pulumigen. ***
|
|
3
3
|
# *** Do not edit by hand unless you're certain you know what you are doing! ***
|
|
4
4
|
|
|
5
|
-
import builtins
|
|
6
|
-
import copy
|
|
5
|
+
import builtins as _builtins
|
|
7
6
|
import warnings
|
|
8
7
|
import sys
|
|
9
8
|
import pulumi
|
|
@@ -85,7 +84,7 @@ if not MYPY:
|
|
|
85
84
|
"""
|
|
86
85
|
AllowedCSIDriver represents a single inline CSI Driver that is allowed to be used.
|
|
87
86
|
"""
|
|
88
|
-
name: NotRequired[pulumi.Input[
|
|
87
|
+
name: NotRequired[pulumi.Input[_builtins.str]]
|
|
89
88
|
"""
|
|
90
89
|
Name is the registered name of the CSI driver
|
|
91
90
|
"""
|
|
@@ -95,24 +94,24 @@ elif False:
|
|
|
95
94
|
@pulumi.input_type
|
|
96
95
|
class AllowedCSIDriverPatchArgs:
|
|
97
96
|
def __init__(__self__, *,
|
|
98
|
-
name: Optional[pulumi.Input[
|
|
97
|
+
name: Optional[pulumi.Input[_builtins.str]] = None):
|
|
99
98
|
"""
|
|
100
99
|
AllowedCSIDriver represents a single inline CSI Driver that is allowed to be used.
|
|
101
|
-
:param pulumi.Input[
|
|
100
|
+
:param pulumi.Input[_builtins.str] name: Name is the registered name of the CSI driver
|
|
102
101
|
"""
|
|
103
102
|
if name is not None:
|
|
104
103
|
pulumi.set(__self__, "name", name)
|
|
105
104
|
|
|
106
|
-
@property
|
|
105
|
+
@_builtins.property
|
|
107
106
|
@pulumi.getter
|
|
108
|
-
def name(self) -> Optional[pulumi.Input[
|
|
107
|
+
def name(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
109
108
|
"""
|
|
110
109
|
Name is the registered name of the CSI driver
|
|
111
110
|
"""
|
|
112
111
|
return pulumi.get(self, "name")
|
|
113
112
|
|
|
114
113
|
@name.setter
|
|
115
|
-
def name(self, value: Optional[pulumi.Input[
|
|
114
|
+
def name(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
116
115
|
pulumi.set(self, "name", value)
|
|
117
116
|
|
|
118
117
|
|
|
@@ -121,7 +120,7 @@ if not MYPY:
|
|
|
121
120
|
"""
|
|
122
121
|
AllowedCSIDriver represents a single inline CSI Driver that is allowed to be used.
|
|
123
122
|
"""
|
|
124
|
-
name: pulumi.Input[
|
|
123
|
+
name: pulumi.Input[_builtins.str]
|
|
125
124
|
"""
|
|
126
125
|
Name is the registered name of the CSI driver
|
|
127
126
|
"""
|
|
@@ -131,23 +130,23 @@ elif False:
|
|
|
131
130
|
@pulumi.input_type
|
|
132
131
|
class AllowedCSIDriverArgs:
|
|
133
132
|
def __init__(__self__, *,
|
|
134
|
-
name: pulumi.Input[
|
|
133
|
+
name: pulumi.Input[_builtins.str]):
|
|
135
134
|
"""
|
|
136
135
|
AllowedCSIDriver represents a single inline CSI Driver that is allowed to be used.
|
|
137
|
-
:param pulumi.Input[
|
|
136
|
+
:param pulumi.Input[_builtins.str] name: Name is the registered name of the CSI driver
|
|
138
137
|
"""
|
|
139
138
|
pulumi.set(__self__, "name", name)
|
|
140
139
|
|
|
141
|
-
@property
|
|
140
|
+
@_builtins.property
|
|
142
141
|
@pulumi.getter
|
|
143
|
-
def name(self) -> pulumi.Input[
|
|
142
|
+
def name(self) -> pulumi.Input[_builtins.str]:
|
|
144
143
|
"""
|
|
145
144
|
Name is the registered name of the CSI driver
|
|
146
145
|
"""
|
|
147
146
|
return pulumi.get(self, "name")
|
|
148
147
|
|
|
149
148
|
@name.setter
|
|
150
|
-
def name(self, value: pulumi.Input[
|
|
149
|
+
def name(self, value: pulumi.Input[_builtins.str]):
|
|
151
150
|
pulumi.set(self, "name", value)
|
|
152
151
|
|
|
153
152
|
|
|
@@ -156,7 +155,7 @@ if not MYPY:
|
|
|
156
155
|
"""
|
|
157
156
|
AllowedFlexVolume represents a single Flexvolume that is allowed to be used.
|
|
158
157
|
"""
|
|
159
|
-
driver: NotRequired[pulumi.Input[
|
|
158
|
+
driver: NotRequired[pulumi.Input[_builtins.str]]
|
|
160
159
|
"""
|
|
161
160
|
driver is the name of the Flexvolume driver.
|
|
162
161
|
"""
|
|
@@ -166,24 +165,24 @@ elif False:
|
|
|
166
165
|
@pulumi.input_type
|
|
167
166
|
class AllowedFlexVolumePatchArgs:
|
|
168
167
|
def __init__(__self__, *,
|
|
169
|
-
driver: Optional[pulumi.Input[
|
|
168
|
+
driver: Optional[pulumi.Input[_builtins.str]] = None):
|
|
170
169
|
"""
|
|
171
170
|
AllowedFlexVolume represents a single Flexvolume that is allowed to be used.
|
|
172
|
-
:param pulumi.Input[
|
|
171
|
+
:param pulumi.Input[_builtins.str] driver: driver is the name of the Flexvolume driver.
|
|
173
172
|
"""
|
|
174
173
|
if driver is not None:
|
|
175
174
|
pulumi.set(__self__, "driver", driver)
|
|
176
175
|
|
|
177
|
-
@property
|
|
176
|
+
@_builtins.property
|
|
178
177
|
@pulumi.getter
|
|
179
|
-
def driver(self) -> Optional[pulumi.Input[
|
|
178
|
+
def driver(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
180
179
|
"""
|
|
181
180
|
driver is the name of the Flexvolume driver.
|
|
182
181
|
"""
|
|
183
182
|
return pulumi.get(self, "driver")
|
|
184
183
|
|
|
185
184
|
@driver.setter
|
|
186
|
-
def driver(self, value: Optional[pulumi.Input[
|
|
185
|
+
def driver(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
187
186
|
pulumi.set(self, "driver", value)
|
|
188
187
|
|
|
189
188
|
|
|
@@ -192,7 +191,7 @@ if not MYPY:
|
|
|
192
191
|
"""
|
|
193
192
|
AllowedFlexVolume represents a single Flexvolume that is allowed to be used.
|
|
194
193
|
"""
|
|
195
|
-
driver: pulumi.Input[
|
|
194
|
+
driver: pulumi.Input[_builtins.str]
|
|
196
195
|
"""
|
|
197
196
|
driver is the name of the Flexvolume driver.
|
|
198
197
|
"""
|
|
@@ -202,23 +201,23 @@ elif False:
|
|
|
202
201
|
@pulumi.input_type
|
|
203
202
|
class AllowedFlexVolumeArgs:
|
|
204
203
|
def __init__(__self__, *,
|
|
205
|
-
driver: pulumi.Input[
|
|
204
|
+
driver: pulumi.Input[_builtins.str]):
|
|
206
205
|
"""
|
|
207
206
|
AllowedFlexVolume represents a single Flexvolume that is allowed to be used.
|
|
208
|
-
:param pulumi.Input[
|
|
207
|
+
:param pulumi.Input[_builtins.str] driver: driver is the name of the Flexvolume driver.
|
|
209
208
|
"""
|
|
210
209
|
pulumi.set(__self__, "driver", driver)
|
|
211
210
|
|
|
212
|
-
@property
|
|
211
|
+
@_builtins.property
|
|
213
212
|
@pulumi.getter
|
|
214
|
-
def driver(self) -> pulumi.Input[
|
|
213
|
+
def driver(self) -> pulumi.Input[_builtins.str]:
|
|
215
214
|
"""
|
|
216
215
|
driver is the name of the Flexvolume driver.
|
|
217
216
|
"""
|
|
218
217
|
return pulumi.get(self, "driver")
|
|
219
218
|
|
|
220
219
|
@driver.setter
|
|
221
|
-
def driver(self, value: pulumi.Input[
|
|
220
|
+
def driver(self, value: pulumi.Input[_builtins.str]):
|
|
222
221
|
pulumi.set(self, "driver", value)
|
|
223
222
|
|
|
224
223
|
|
|
@@ -227,13 +226,13 @@ if not MYPY:
|
|
|
227
226
|
"""
|
|
228
227
|
AllowedHostPath defines the host volume conditions that will be enabled by a policy for pods to use. It requires the path prefix to be defined.
|
|
229
228
|
"""
|
|
230
|
-
path_prefix: NotRequired[pulumi.Input[
|
|
229
|
+
path_prefix: NotRequired[pulumi.Input[_builtins.str]]
|
|
231
230
|
"""
|
|
232
231
|
pathPrefix is the path prefix that the host volume must match. It does not support `*`. Trailing slashes are trimmed when validating the path prefix with a host path.
|
|
233
232
|
|
|
234
233
|
Examples: `/foo` would allow `/foo`, `/foo/` and `/foo/bar` `/foo` would not allow `/food` or `/etc/foo`
|
|
235
234
|
"""
|
|
236
|
-
read_only: NotRequired[pulumi.Input[
|
|
235
|
+
read_only: NotRequired[pulumi.Input[_builtins.bool]]
|
|
237
236
|
"""
|
|
238
237
|
when set to true, will allow host volumes matching the pathPrefix only if all volume mounts are readOnly.
|
|
239
238
|
"""
|
|
@@ -243,23 +242,23 @@ elif False:
|
|
|
243
242
|
@pulumi.input_type
|
|
244
243
|
class AllowedHostPathPatchArgs:
|
|
245
244
|
def __init__(__self__, *,
|
|
246
|
-
path_prefix: Optional[pulumi.Input[
|
|
247
|
-
read_only: Optional[pulumi.Input[
|
|
245
|
+
path_prefix: Optional[pulumi.Input[_builtins.str]] = None,
|
|
246
|
+
read_only: Optional[pulumi.Input[_builtins.bool]] = None):
|
|
248
247
|
"""
|
|
249
248
|
AllowedHostPath defines the host volume conditions that will be enabled by a policy for pods to use. It requires the path prefix to be defined.
|
|
250
|
-
:param pulumi.Input[
|
|
249
|
+
:param pulumi.Input[_builtins.str] path_prefix: pathPrefix is the path prefix that the host volume must match. It does not support `*`. Trailing slashes are trimmed when validating the path prefix with a host path.
|
|
251
250
|
|
|
252
251
|
Examples: `/foo` would allow `/foo`, `/foo/` and `/foo/bar` `/foo` would not allow `/food` or `/etc/foo`
|
|
253
|
-
:param pulumi.Input[
|
|
252
|
+
:param pulumi.Input[_builtins.bool] read_only: when set to true, will allow host volumes matching the pathPrefix only if all volume mounts are readOnly.
|
|
254
253
|
"""
|
|
255
254
|
if path_prefix is not None:
|
|
256
255
|
pulumi.set(__self__, "path_prefix", path_prefix)
|
|
257
256
|
if read_only is not None:
|
|
258
257
|
pulumi.set(__self__, "read_only", read_only)
|
|
259
258
|
|
|
260
|
-
@property
|
|
259
|
+
@_builtins.property
|
|
261
260
|
@pulumi.getter(name="pathPrefix")
|
|
262
|
-
def path_prefix(self) -> Optional[pulumi.Input[
|
|
261
|
+
def path_prefix(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
263
262
|
"""
|
|
264
263
|
pathPrefix is the path prefix that the host volume must match. It does not support `*`. Trailing slashes are trimmed when validating the path prefix with a host path.
|
|
265
264
|
|
|
@@ -268,19 +267,19 @@ class AllowedHostPathPatchArgs:
|
|
|
268
267
|
return pulumi.get(self, "path_prefix")
|
|
269
268
|
|
|
270
269
|
@path_prefix.setter
|
|
271
|
-
def path_prefix(self, value: Optional[pulumi.Input[
|
|
270
|
+
def path_prefix(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
272
271
|
pulumi.set(self, "path_prefix", value)
|
|
273
272
|
|
|
274
|
-
@property
|
|
273
|
+
@_builtins.property
|
|
275
274
|
@pulumi.getter(name="readOnly")
|
|
276
|
-
def read_only(self) -> Optional[pulumi.Input[
|
|
275
|
+
def read_only(self) -> Optional[pulumi.Input[_builtins.bool]]:
|
|
277
276
|
"""
|
|
278
277
|
when set to true, will allow host volumes matching the pathPrefix only if all volume mounts are readOnly.
|
|
279
278
|
"""
|
|
280
279
|
return pulumi.get(self, "read_only")
|
|
281
280
|
|
|
282
281
|
@read_only.setter
|
|
283
|
-
def read_only(self, value: Optional[pulumi.Input[
|
|
282
|
+
def read_only(self, value: Optional[pulumi.Input[_builtins.bool]]):
|
|
284
283
|
pulumi.set(self, "read_only", value)
|
|
285
284
|
|
|
286
285
|
|
|
@@ -289,13 +288,13 @@ if not MYPY:
|
|
|
289
288
|
"""
|
|
290
289
|
AllowedHostPath defines the host volume conditions that will be enabled by a policy for pods to use. It requires the path prefix to be defined.
|
|
291
290
|
"""
|
|
292
|
-
path_prefix: NotRequired[pulumi.Input[
|
|
291
|
+
path_prefix: NotRequired[pulumi.Input[_builtins.str]]
|
|
293
292
|
"""
|
|
294
293
|
pathPrefix is the path prefix that the host volume must match. It does not support `*`. Trailing slashes are trimmed when validating the path prefix with a host path.
|
|
295
294
|
|
|
296
295
|
Examples: `/foo` would allow `/foo`, `/foo/` and `/foo/bar` `/foo` would not allow `/food` or `/etc/foo`
|
|
297
296
|
"""
|
|
298
|
-
read_only: NotRequired[pulumi.Input[
|
|
297
|
+
read_only: NotRequired[pulumi.Input[_builtins.bool]]
|
|
299
298
|
"""
|
|
300
299
|
when set to true, will allow host volumes matching the pathPrefix only if all volume mounts are readOnly.
|
|
301
300
|
"""
|
|
@@ -305,23 +304,23 @@ elif False:
|
|
|
305
304
|
@pulumi.input_type
|
|
306
305
|
class AllowedHostPathArgs:
|
|
307
306
|
def __init__(__self__, *,
|
|
308
|
-
path_prefix: Optional[pulumi.Input[
|
|
309
|
-
read_only: Optional[pulumi.Input[
|
|
307
|
+
path_prefix: Optional[pulumi.Input[_builtins.str]] = None,
|
|
308
|
+
read_only: Optional[pulumi.Input[_builtins.bool]] = None):
|
|
310
309
|
"""
|
|
311
310
|
AllowedHostPath defines the host volume conditions that will be enabled by a policy for pods to use. It requires the path prefix to be defined.
|
|
312
|
-
:param pulumi.Input[
|
|
311
|
+
:param pulumi.Input[_builtins.str] path_prefix: pathPrefix is the path prefix that the host volume must match. It does not support `*`. Trailing slashes are trimmed when validating the path prefix with a host path.
|
|
313
312
|
|
|
314
313
|
Examples: `/foo` would allow `/foo`, `/foo/` and `/foo/bar` `/foo` would not allow `/food` or `/etc/foo`
|
|
315
|
-
:param pulumi.Input[
|
|
314
|
+
:param pulumi.Input[_builtins.bool] read_only: when set to true, will allow host volumes matching the pathPrefix only if all volume mounts are readOnly.
|
|
316
315
|
"""
|
|
317
316
|
if path_prefix is not None:
|
|
318
317
|
pulumi.set(__self__, "path_prefix", path_prefix)
|
|
319
318
|
if read_only is not None:
|
|
320
319
|
pulumi.set(__self__, "read_only", read_only)
|
|
321
320
|
|
|
322
|
-
@property
|
|
321
|
+
@_builtins.property
|
|
323
322
|
@pulumi.getter(name="pathPrefix")
|
|
324
|
-
def path_prefix(self) -> Optional[pulumi.Input[
|
|
323
|
+
def path_prefix(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
325
324
|
"""
|
|
326
325
|
pathPrefix is the path prefix that the host volume must match. It does not support `*`. Trailing slashes are trimmed when validating the path prefix with a host path.
|
|
327
326
|
|
|
@@ -330,19 +329,19 @@ class AllowedHostPathArgs:
|
|
|
330
329
|
return pulumi.get(self, "path_prefix")
|
|
331
330
|
|
|
332
331
|
@path_prefix.setter
|
|
333
|
-
def path_prefix(self, value: Optional[pulumi.Input[
|
|
332
|
+
def path_prefix(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
334
333
|
pulumi.set(self, "path_prefix", value)
|
|
335
334
|
|
|
336
|
-
@property
|
|
335
|
+
@_builtins.property
|
|
337
336
|
@pulumi.getter(name="readOnly")
|
|
338
|
-
def read_only(self) -> Optional[pulumi.Input[
|
|
337
|
+
def read_only(self) -> Optional[pulumi.Input[_builtins.bool]]:
|
|
339
338
|
"""
|
|
340
339
|
when set to true, will allow host volumes matching the pathPrefix only if all volume mounts are readOnly.
|
|
341
340
|
"""
|
|
342
341
|
return pulumi.get(self, "read_only")
|
|
343
342
|
|
|
344
343
|
@read_only.setter
|
|
345
|
-
def read_only(self, value: Optional[pulumi.Input[
|
|
344
|
+
def read_only(self, value: Optional[pulumi.Input[_builtins.bool]]):
|
|
346
345
|
pulumi.set(self, "read_only", value)
|
|
347
346
|
|
|
348
347
|
|
|
@@ -355,7 +354,7 @@ if not MYPY:
|
|
|
355
354
|
"""
|
|
356
355
|
ranges are the allowed ranges of fs groups. If you would like to force a single fs group then supply a single range with the same start and end. Required for MustRunAs.
|
|
357
356
|
"""
|
|
358
|
-
rule: NotRequired[pulumi.Input[
|
|
357
|
+
rule: NotRequired[pulumi.Input[_builtins.str]]
|
|
359
358
|
"""
|
|
360
359
|
rule is the strategy that will dictate what FSGroup is used in the SecurityContext.
|
|
361
360
|
"""
|
|
@@ -366,18 +365,18 @@ elif False:
|
|
|
366
365
|
class FSGroupStrategyOptionsPatchArgs:
|
|
367
366
|
def __init__(__self__, *,
|
|
368
367
|
ranges: Optional[pulumi.Input[Sequence[pulumi.Input['IDRangePatchArgs']]]] = None,
|
|
369
|
-
rule: Optional[pulumi.Input[
|
|
368
|
+
rule: Optional[pulumi.Input[_builtins.str]] = None):
|
|
370
369
|
"""
|
|
371
370
|
FSGroupStrategyOptions defines the strategy type and options used to create the strategy.
|
|
372
371
|
:param pulumi.Input[Sequence[pulumi.Input['IDRangePatchArgs']]] ranges: ranges are the allowed ranges of fs groups. If you would like to force a single fs group then supply a single range with the same start and end. Required for MustRunAs.
|
|
373
|
-
:param pulumi.Input[
|
|
372
|
+
:param pulumi.Input[_builtins.str] rule: rule is the strategy that will dictate what FSGroup is used in the SecurityContext.
|
|
374
373
|
"""
|
|
375
374
|
if ranges is not None:
|
|
376
375
|
pulumi.set(__self__, "ranges", ranges)
|
|
377
376
|
if rule is not None:
|
|
378
377
|
pulumi.set(__self__, "rule", rule)
|
|
379
378
|
|
|
380
|
-
@property
|
|
379
|
+
@_builtins.property
|
|
381
380
|
@pulumi.getter
|
|
382
381
|
def ranges(self) -> Optional[pulumi.Input[Sequence[pulumi.Input['IDRangePatchArgs']]]]:
|
|
383
382
|
"""
|
|
@@ -389,16 +388,16 @@ class FSGroupStrategyOptionsPatchArgs:
|
|
|
389
388
|
def ranges(self, value: Optional[pulumi.Input[Sequence[pulumi.Input['IDRangePatchArgs']]]]):
|
|
390
389
|
pulumi.set(self, "ranges", value)
|
|
391
390
|
|
|
392
|
-
@property
|
|
391
|
+
@_builtins.property
|
|
393
392
|
@pulumi.getter
|
|
394
|
-
def rule(self) -> Optional[pulumi.Input[
|
|
393
|
+
def rule(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
395
394
|
"""
|
|
396
395
|
rule is the strategy that will dictate what FSGroup is used in the SecurityContext.
|
|
397
396
|
"""
|
|
398
397
|
return pulumi.get(self, "rule")
|
|
399
398
|
|
|
400
399
|
@rule.setter
|
|
401
|
-
def rule(self, value: Optional[pulumi.Input[
|
|
400
|
+
def rule(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
402
401
|
pulumi.set(self, "rule", value)
|
|
403
402
|
|
|
404
403
|
|
|
@@ -411,7 +410,7 @@ if not MYPY:
|
|
|
411
410
|
"""
|
|
412
411
|
ranges are the allowed ranges of fs groups. If you would like to force a single fs group then supply a single range with the same start and end. Required for MustRunAs.
|
|
413
412
|
"""
|
|
414
|
-
rule: NotRequired[pulumi.Input[
|
|
413
|
+
rule: NotRequired[pulumi.Input[_builtins.str]]
|
|
415
414
|
"""
|
|
416
415
|
rule is the strategy that will dictate what FSGroup is used in the SecurityContext.
|
|
417
416
|
"""
|
|
@@ -422,18 +421,18 @@ elif False:
|
|
|
422
421
|
class FSGroupStrategyOptionsArgs:
|
|
423
422
|
def __init__(__self__, *,
|
|
424
423
|
ranges: Optional[pulumi.Input[Sequence[pulumi.Input['IDRangeArgs']]]] = None,
|
|
425
|
-
rule: Optional[pulumi.Input[
|
|
424
|
+
rule: Optional[pulumi.Input[_builtins.str]] = None):
|
|
426
425
|
"""
|
|
427
426
|
FSGroupStrategyOptions defines the strategy type and options used to create the strategy.
|
|
428
427
|
:param pulumi.Input[Sequence[pulumi.Input['IDRangeArgs']]] ranges: ranges are the allowed ranges of fs groups. If you would like to force a single fs group then supply a single range with the same start and end. Required for MustRunAs.
|
|
429
|
-
:param pulumi.Input[
|
|
428
|
+
:param pulumi.Input[_builtins.str] rule: rule is the strategy that will dictate what FSGroup is used in the SecurityContext.
|
|
430
429
|
"""
|
|
431
430
|
if ranges is not None:
|
|
432
431
|
pulumi.set(__self__, "ranges", ranges)
|
|
433
432
|
if rule is not None:
|
|
434
433
|
pulumi.set(__self__, "rule", rule)
|
|
435
434
|
|
|
436
|
-
@property
|
|
435
|
+
@_builtins.property
|
|
437
436
|
@pulumi.getter
|
|
438
437
|
def ranges(self) -> Optional[pulumi.Input[Sequence[pulumi.Input['IDRangeArgs']]]]:
|
|
439
438
|
"""
|
|
@@ -445,16 +444,16 @@ class FSGroupStrategyOptionsArgs:
|
|
|
445
444
|
def ranges(self, value: Optional[pulumi.Input[Sequence[pulumi.Input['IDRangeArgs']]]]):
|
|
446
445
|
pulumi.set(self, "ranges", value)
|
|
447
446
|
|
|
448
|
-
@property
|
|
447
|
+
@_builtins.property
|
|
449
448
|
@pulumi.getter
|
|
450
|
-
def rule(self) -> Optional[pulumi.Input[
|
|
449
|
+
def rule(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
451
450
|
"""
|
|
452
451
|
rule is the strategy that will dictate what FSGroup is used in the SecurityContext.
|
|
453
452
|
"""
|
|
454
453
|
return pulumi.get(self, "rule")
|
|
455
454
|
|
|
456
455
|
@rule.setter
|
|
457
|
-
def rule(self, value: Optional[pulumi.Input[
|
|
456
|
+
def rule(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
458
457
|
pulumi.set(self, "rule", value)
|
|
459
458
|
|
|
460
459
|
|
|
@@ -463,11 +462,11 @@ if not MYPY:
|
|
|
463
462
|
"""
|
|
464
463
|
HostPortRange defines a range of host ports that will be enabled by a policy for pods to use. It requires both the start and end to be defined.
|
|
465
464
|
"""
|
|
466
|
-
max: NotRequired[pulumi.Input[
|
|
465
|
+
max: NotRequired[pulumi.Input[_builtins.int]]
|
|
467
466
|
"""
|
|
468
467
|
max is the end of the range, inclusive.
|
|
469
468
|
"""
|
|
470
|
-
min: NotRequired[pulumi.Input[
|
|
469
|
+
min: NotRequired[pulumi.Input[_builtins.int]]
|
|
471
470
|
"""
|
|
472
471
|
min is the start of the range, inclusive.
|
|
473
472
|
"""
|
|
@@ -477,40 +476,40 @@ elif False:
|
|
|
477
476
|
@pulumi.input_type
|
|
478
477
|
class HostPortRangePatchArgs:
|
|
479
478
|
def __init__(__self__, *,
|
|
480
|
-
max: Optional[pulumi.Input[
|
|
481
|
-
min: Optional[pulumi.Input[
|
|
479
|
+
max: Optional[pulumi.Input[_builtins.int]] = None,
|
|
480
|
+
min: Optional[pulumi.Input[_builtins.int]] = None):
|
|
482
481
|
"""
|
|
483
482
|
HostPortRange defines a range of host ports that will be enabled by a policy for pods to use. It requires both the start and end to be defined.
|
|
484
|
-
:param pulumi.Input[
|
|
485
|
-
:param pulumi.Input[
|
|
483
|
+
:param pulumi.Input[_builtins.int] max: max is the end of the range, inclusive.
|
|
484
|
+
:param pulumi.Input[_builtins.int] min: min is the start of the range, inclusive.
|
|
486
485
|
"""
|
|
487
486
|
if max is not None:
|
|
488
487
|
pulumi.set(__self__, "max", max)
|
|
489
488
|
if min is not None:
|
|
490
489
|
pulumi.set(__self__, "min", min)
|
|
491
490
|
|
|
492
|
-
@property
|
|
491
|
+
@_builtins.property
|
|
493
492
|
@pulumi.getter
|
|
494
|
-
def max(self) -> Optional[pulumi.Input[
|
|
493
|
+
def max(self) -> Optional[pulumi.Input[_builtins.int]]:
|
|
495
494
|
"""
|
|
496
495
|
max is the end of the range, inclusive.
|
|
497
496
|
"""
|
|
498
497
|
return pulumi.get(self, "max")
|
|
499
498
|
|
|
500
499
|
@max.setter
|
|
501
|
-
def max(self, value: Optional[pulumi.Input[
|
|
500
|
+
def max(self, value: Optional[pulumi.Input[_builtins.int]]):
|
|
502
501
|
pulumi.set(self, "max", value)
|
|
503
502
|
|
|
504
|
-
@property
|
|
503
|
+
@_builtins.property
|
|
505
504
|
@pulumi.getter
|
|
506
|
-
def min(self) -> Optional[pulumi.Input[
|
|
505
|
+
def min(self) -> Optional[pulumi.Input[_builtins.int]]:
|
|
507
506
|
"""
|
|
508
507
|
min is the start of the range, inclusive.
|
|
509
508
|
"""
|
|
510
509
|
return pulumi.get(self, "min")
|
|
511
510
|
|
|
512
511
|
@min.setter
|
|
513
|
-
def min(self, value: Optional[pulumi.Input[
|
|
512
|
+
def min(self, value: Optional[pulumi.Input[_builtins.int]]):
|
|
514
513
|
pulumi.set(self, "min", value)
|
|
515
514
|
|
|
516
515
|
|
|
@@ -519,11 +518,11 @@ if not MYPY:
|
|
|
519
518
|
"""
|
|
520
519
|
HostPortRange defines a range of host ports that will be enabled by a policy for pods to use. It requires both the start and end to be defined.
|
|
521
520
|
"""
|
|
522
|
-
max: pulumi.Input[
|
|
521
|
+
max: pulumi.Input[_builtins.int]
|
|
523
522
|
"""
|
|
524
523
|
max is the end of the range, inclusive.
|
|
525
524
|
"""
|
|
526
|
-
min: pulumi.Input[
|
|
525
|
+
min: pulumi.Input[_builtins.int]
|
|
527
526
|
"""
|
|
528
527
|
min is the start of the range, inclusive.
|
|
529
528
|
"""
|
|
@@ -533,38 +532,38 @@ elif False:
|
|
|
533
532
|
@pulumi.input_type
|
|
534
533
|
class HostPortRangeArgs:
|
|
535
534
|
def __init__(__self__, *,
|
|
536
|
-
max: pulumi.Input[
|
|
537
|
-
min: pulumi.Input[
|
|
535
|
+
max: pulumi.Input[_builtins.int],
|
|
536
|
+
min: pulumi.Input[_builtins.int]):
|
|
538
537
|
"""
|
|
539
538
|
HostPortRange defines a range of host ports that will be enabled by a policy for pods to use. It requires both the start and end to be defined.
|
|
540
|
-
:param pulumi.Input[
|
|
541
|
-
:param pulumi.Input[
|
|
539
|
+
:param pulumi.Input[_builtins.int] max: max is the end of the range, inclusive.
|
|
540
|
+
:param pulumi.Input[_builtins.int] min: min is the start of the range, inclusive.
|
|
542
541
|
"""
|
|
543
542
|
pulumi.set(__self__, "max", max)
|
|
544
543
|
pulumi.set(__self__, "min", min)
|
|
545
544
|
|
|
546
|
-
@property
|
|
545
|
+
@_builtins.property
|
|
547
546
|
@pulumi.getter
|
|
548
|
-
def max(self) -> pulumi.Input[
|
|
547
|
+
def max(self) -> pulumi.Input[_builtins.int]:
|
|
549
548
|
"""
|
|
550
549
|
max is the end of the range, inclusive.
|
|
551
550
|
"""
|
|
552
551
|
return pulumi.get(self, "max")
|
|
553
552
|
|
|
554
553
|
@max.setter
|
|
555
|
-
def max(self, value: pulumi.Input[
|
|
554
|
+
def max(self, value: pulumi.Input[_builtins.int]):
|
|
556
555
|
pulumi.set(self, "max", value)
|
|
557
556
|
|
|
558
|
-
@property
|
|
557
|
+
@_builtins.property
|
|
559
558
|
@pulumi.getter
|
|
560
|
-
def min(self) -> pulumi.Input[
|
|
559
|
+
def min(self) -> pulumi.Input[_builtins.int]:
|
|
561
560
|
"""
|
|
562
561
|
min is the start of the range, inclusive.
|
|
563
562
|
"""
|
|
564
563
|
return pulumi.get(self, "min")
|
|
565
564
|
|
|
566
565
|
@min.setter
|
|
567
|
-
def min(self, value: pulumi.Input[
|
|
566
|
+
def min(self, value: pulumi.Input[_builtins.int]):
|
|
568
567
|
pulumi.set(self, "min", value)
|
|
569
568
|
|
|
570
569
|
|
|
@@ -573,11 +572,11 @@ if not MYPY:
|
|
|
573
572
|
"""
|
|
574
573
|
IDRange provides a min/max of an allowed range of IDs.
|
|
575
574
|
"""
|
|
576
|
-
max: NotRequired[pulumi.Input[
|
|
575
|
+
max: NotRequired[pulumi.Input[_builtins.int]]
|
|
577
576
|
"""
|
|
578
577
|
max is the end of the range, inclusive.
|
|
579
578
|
"""
|
|
580
|
-
min: NotRequired[pulumi.Input[
|
|
579
|
+
min: NotRequired[pulumi.Input[_builtins.int]]
|
|
581
580
|
"""
|
|
582
581
|
min is the start of the range, inclusive.
|
|
583
582
|
"""
|
|
@@ -587,40 +586,40 @@ elif False:
|
|
|
587
586
|
@pulumi.input_type
|
|
588
587
|
class IDRangePatchArgs:
|
|
589
588
|
def __init__(__self__, *,
|
|
590
|
-
max: Optional[pulumi.Input[
|
|
591
|
-
min: Optional[pulumi.Input[
|
|
589
|
+
max: Optional[pulumi.Input[_builtins.int]] = None,
|
|
590
|
+
min: Optional[pulumi.Input[_builtins.int]] = None):
|
|
592
591
|
"""
|
|
593
592
|
IDRange provides a min/max of an allowed range of IDs.
|
|
594
|
-
:param pulumi.Input[
|
|
595
|
-
:param pulumi.Input[
|
|
593
|
+
:param pulumi.Input[_builtins.int] max: max is the end of the range, inclusive.
|
|
594
|
+
:param pulumi.Input[_builtins.int] min: min is the start of the range, inclusive.
|
|
596
595
|
"""
|
|
597
596
|
if max is not None:
|
|
598
597
|
pulumi.set(__self__, "max", max)
|
|
599
598
|
if min is not None:
|
|
600
599
|
pulumi.set(__self__, "min", min)
|
|
601
600
|
|
|
602
|
-
@property
|
|
601
|
+
@_builtins.property
|
|
603
602
|
@pulumi.getter
|
|
604
|
-
def max(self) -> Optional[pulumi.Input[
|
|
603
|
+
def max(self) -> Optional[pulumi.Input[_builtins.int]]:
|
|
605
604
|
"""
|
|
606
605
|
max is the end of the range, inclusive.
|
|
607
606
|
"""
|
|
608
607
|
return pulumi.get(self, "max")
|
|
609
608
|
|
|
610
609
|
@max.setter
|
|
611
|
-
def max(self, value: Optional[pulumi.Input[
|
|
610
|
+
def max(self, value: Optional[pulumi.Input[_builtins.int]]):
|
|
612
611
|
pulumi.set(self, "max", value)
|
|
613
612
|
|
|
614
|
-
@property
|
|
613
|
+
@_builtins.property
|
|
615
614
|
@pulumi.getter
|
|
616
|
-
def min(self) -> Optional[pulumi.Input[
|
|
615
|
+
def min(self) -> Optional[pulumi.Input[_builtins.int]]:
|
|
617
616
|
"""
|
|
618
617
|
min is the start of the range, inclusive.
|
|
619
618
|
"""
|
|
620
619
|
return pulumi.get(self, "min")
|
|
621
620
|
|
|
622
621
|
@min.setter
|
|
623
|
-
def min(self, value: Optional[pulumi.Input[
|
|
622
|
+
def min(self, value: Optional[pulumi.Input[_builtins.int]]):
|
|
624
623
|
pulumi.set(self, "min", value)
|
|
625
624
|
|
|
626
625
|
|
|
@@ -629,11 +628,11 @@ if not MYPY:
|
|
|
629
628
|
"""
|
|
630
629
|
IDRange provides a min/max of an allowed range of IDs.
|
|
631
630
|
"""
|
|
632
|
-
max: pulumi.Input[
|
|
631
|
+
max: pulumi.Input[_builtins.int]
|
|
633
632
|
"""
|
|
634
633
|
max is the end of the range, inclusive.
|
|
635
634
|
"""
|
|
636
|
-
min: pulumi.Input[
|
|
635
|
+
min: pulumi.Input[_builtins.int]
|
|
637
636
|
"""
|
|
638
637
|
min is the start of the range, inclusive.
|
|
639
638
|
"""
|
|
@@ -643,38 +642,38 @@ elif False:
|
|
|
643
642
|
@pulumi.input_type
|
|
644
643
|
class IDRangeArgs:
|
|
645
644
|
def __init__(__self__, *,
|
|
646
|
-
max: pulumi.Input[
|
|
647
|
-
min: pulumi.Input[
|
|
645
|
+
max: pulumi.Input[_builtins.int],
|
|
646
|
+
min: pulumi.Input[_builtins.int]):
|
|
648
647
|
"""
|
|
649
648
|
IDRange provides a min/max of an allowed range of IDs.
|
|
650
|
-
:param pulumi.Input[
|
|
651
|
-
:param pulumi.Input[
|
|
649
|
+
:param pulumi.Input[_builtins.int] max: max is the end of the range, inclusive.
|
|
650
|
+
:param pulumi.Input[_builtins.int] min: min is the start of the range, inclusive.
|
|
652
651
|
"""
|
|
653
652
|
pulumi.set(__self__, "max", max)
|
|
654
653
|
pulumi.set(__self__, "min", min)
|
|
655
654
|
|
|
656
|
-
@property
|
|
655
|
+
@_builtins.property
|
|
657
656
|
@pulumi.getter
|
|
658
|
-
def max(self) -> pulumi.Input[
|
|
657
|
+
def max(self) -> pulumi.Input[_builtins.int]:
|
|
659
658
|
"""
|
|
660
659
|
max is the end of the range, inclusive.
|
|
661
660
|
"""
|
|
662
661
|
return pulumi.get(self, "max")
|
|
663
662
|
|
|
664
663
|
@max.setter
|
|
665
|
-
def max(self, value: pulumi.Input[
|
|
664
|
+
def max(self, value: pulumi.Input[_builtins.int]):
|
|
666
665
|
pulumi.set(self, "max", value)
|
|
667
666
|
|
|
668
|
-
@property
|
|
667
|
+
@_builtins.property
|
|
669
668
|
@pulumi.getter
|
|
670
|
-
def min(self) -> pulumi.Input[
|
|
669
|
+
def min(self) -> pulumi.Input[_builtins.int]:
|
|
671
670
|
"""
|
|
672
671
|
min is the start of the range, inclusive.
|
|
673
672
|
"""
|
|
674
673
|
return pulumi.get(self, "min")
|
|
675
674
|
|
|
676
675
|
@min.setter
|
|
677
|
-
def min(self, value: pulumi.Input[
|
|
676
|
+
def min(self, value: pulumi.Input[_builtins.int]):
|
|
678
677
|
pulumi.set(self, "min", value)
|
|
679
678
|
|
|
680
679
|
|
|
@@ -683,11 +682,11 @@ if not MYPY:
|
|
|
683
682
|
"""
|
|
684
683
|
PodDisruptionBudgetSpec is a description of a PodDisruptionBudget.
|
|
685
684
|
"""
|
|
686
|
-
max_unavailable: NotRequired[pulumi.Input[Union[
|
|
685
|
+
max_unavailable: NotRequired[pulumi.Input[Union[_builtins.int, _builtins.str]]]
|
|
687
686
|
"""
|
|
688
687
|
An eviction is allowed if at most "maxUnavailable" pods selected by "selector" are unavailable after the eviction, i.e. even in absence of the evicted pod. For example, one can prevent all voluntary evictions by specifying 0. This is a mutually exclusive setting with "minAvailable".
|
|
689
688
|
"""
|
|
690
|
-
min_available: NotRequired[pulumi.Input[Union[
|
|
689
|
+
min_available: NotRequired[pulumi.Input[Union[_builtins.int, _builtins.str]]]
|
|
691
690
|
"""
|
|
692
691
|
An eviction is allowed if at least "minAvailable" pods selected by "selector" will still be available after the eviction, i.e. even in the absence of the evicted pod. So for example you can prevent all voluntary evictions by specifying "100%".
|
|
693
692
|
"""
|
|
@@ -701,13 +700,13 @@ elif False:
|
|
|
701
700
|
@pulumi.input_type
|
|
702
701
|
class PodDisruptionBudgetSpecPatchArgs:
|
|
703
702
|
def __init__(__self__, *,
|
|
704
|
-
max_unavailable: Optional[pulumi.Input[Union[
|
|
705
|
-
min_available: Optional[pulumi.Input[Union[
|
|
703
|
+
max_unavailable: Optional[pulumi.Input[Union[_builtins.int, _builtins.str]]] = None,
|
|
704
|
+
min_available: Optional[pulumi.Input[Union[_builtins.int, _builtins.str]]] = None,
|
|
706
705
|
selector: Optional[pulumi.Input['_meta.v1.LabelSelectorPatchArgs']] = None):
|
|
707
706
|
"""
|
|
708
707
|
PodDisruptionBudgetSpec is a description of a PodDisruptionBudget.
|
|
709
|
-
:param pulumi.Input[Union[
|
|
710
|
-
:param pulumi.Input[Union[
|
|
708
|
+
:param pulumi.Input[Union[_builtins.int, _builtins.str]] max_unavailable: An eviction is allowed if at most "maxUnavailable" pods selected by "selector" are unavailable after the eviction, i.e. even in absence of the evicted pod. For example, one can prevent all voluntary evictions by specifying 0. This is a mutually exclusive setting with "minAvailable".
|
|
709
|
+
:param pulumi.Input[Union[_builtins.int, _builtins.str]] min_available: An eviction is allowed if at least "minAvailable" pods selected by "selector" will still be available after the eviction, i.e. even in the absence of the evicted pod. So for example you can prevent all voluntary evictions by specifying "100%".
|
|
711
710
|
:param pulumi.Input['_meta.v1.LabelSelectorPatchArgs'] selector: Label query over pods whose evictions are managed by the disruption budget.
|
|
712
711
|
"""
|
|
713
712
|
if max_unavailable is not None:
|
|
@@ -717,31 +716,31 @@ class PodDisruptionBudgetSpecPatchArgs:
|
|
|
717
716
|
if selector is not None:
|
|
718
717
|
pulumi.set(__self__, "selector", selector)
|
|
719
718
|
|
|
720
|
-
@property
|
|
719
|
+
@_builtins.property
|
|
721
720
|
@pulumi.getter(name="maxUnavailable")
|
|
722
|
-
def max_unavailable(self) -> Optional[pulumi.Input[Union[
|
|
721
|
+
def max_unavailable(self) -> Optional[pulumi.Input[Union[_builtins.int, _builtins.str]]]:
|
|
723
722
|
"""
|
|
724
723
|
An eviction is allowed if at most "maxUnavailable" pods selected by "selector" are unavailable after the eviction, i.e. even in absence of the evicted pod. For example, one can prevent all voluntary evictions by specifying 0. This is a mutually exclusive setting with "minAvailable".
|
|
725
724
|
"""
|
|
726
725
|
return pulumi.get(self, "max_unavailable")
|
|
727
726
|
|
|
728
727
|
@max_unavailable.setter
|
|
729
|
-
def max_unavailable(self, value: Optional[pulumi.Input[Union[
|
|
728
|
+
def max_unavailable(self, value: Optional[pulumi.Input[Union[_builtins.int, _builtins.str]]]):
|
|
730
729
|
pulumi.set(self, "max_unavailable", value)
|
|
731
730
|
|
|
732
|
-
@property
|
|
731
|
+
@_builtins.property
|
|
733
732
|
@pulumi.getter(name="minAvailable")
|
|
734
|
-
def min_available(self) -> Optional[pulumi.Input[Union[
|
|
733
|
+
def min_available(self) -> Optional[pulumi.Input[Union[_builtins.int, _builtins.str]]]:
|
|
735
734
|
"""
|
|
736
735
|
An eviction is allowed if at least "minAvailable" pods selected by "selector" will still be available after the eviction, i.e. even in the absence of the evicted pod. So for example you can prevent all voluntary evictions by specifying "100%".
|
|
737
736
|
"""
|
|
738
737
|
return pulumi.get(self, "min_available")
|
|
739
738
|
|
|
740
739
|
@min_available.setter
|
|
741
|
-
def min_available(self, value: Optional[pulumi.Input[Union[
|
|
740
|
+
def min_available(self, value: Optional[pulumi.Input[Union[_builtins.int, _builtins.str]]]):
|
|
742
741
|
pulumi.set(self, "min_available", value)
|
|
743
742
|
|
|
744
|
-
@property
|
|
743
|
+
@_builtins.property
|
|
745
744
|
@pulumi.getter
|
|
746
745
|
def selector(self) -> Optional[pulumi.Input['_meta.v1.LabelSelectorPatchArgs']]:
|
|
747
746
|
"""
|
|
@@ -759,11 +758,11 @@ if not MYPY:
|
|
|
759
758
|
"""
|
|
760
759
|
PodDisruptionBudgetSpec is a description of a PodDisruptionBudget.
|
|
761
760
|
"""
|
|
762
|
-
max_unavailable: NotRequired[pulumi.Input[Union[
|
|
761
|
+
max_unavailable: NotRequired[pulumi.Input[Union[_builtins.int, _builtins.str]]]
|
|
763
762
|
"""
|
|
764
763
|
An eviction is allowed if at most "maxUnavailable" pods selected by "selector" are unavailable after the eviction, i.e. even in absence of the evicted pod. For example, one can prevent all voluntary evictions by specifying 0. This is a mutually exclusive setting with "minAvailable".
|
|
765
764
|
"""
|
|
766
|
-
min_available: NotRequired[pulumi.Input[Union[
|
|
765
|
+
min_available: NotRequired[pulumi.Input[Union[_builtins.int, _builtins.str]]]
|
|
767
766
|
"""
|
|
768
767
|
An eviction is allowed if at least "minAvailable" pods selected by "selector" will still be available after the eviction, i.e. even in the absence of the evicted pod. So for example you can prevent all voluntary evictions by specifying "100%".
|
|
769
768
|
"""
|
|
@@ -777,13 +776,13 @@ elif False:
|
|
|
777
776
|
@pulumi.input_type
|
|
778
777
|
class PodDisruptionBudgetSpecArgs:
|
|
779
778
|
def __init__(__self__, *,
|
|
780
|
-
max_unavailable: Optional[pulumi.Input[Union[
|
|
781
|
-
min_available: Optional[pulumi.Input[Union[
|
|
779
|
+
max_unavailable: Optional[pulumi.Input[Union[_builtins.int, _builtins.str]]] = None,
|
|
780
|
+
min_available: Optional[pulumi.Input[Union[_builtins.int, _builtins.str]]] = None,
|
|
782
781
|
selector: Optional[pulumi.Input['_meta.v1.LabelSelectorArgs']] = None):
|
|
783
782
|
"""
|
|
784
783
|
PodDisruptionBudgetSpec is a description of a PodDisruptionBudget.
|
|
785
|
-
:param pulumi.Input[Union[
|
|
786
|
-
:param pulumi.Input[Union[
|
|
784
|
+
:param pulumi.Input[Union[_builtins.int, _builtins.str]] max_unavailable: An eviction is allowed if at most "maxUnavailable" pods selected by "selector" are unavailable after the eviction, i.e. even in absence of the evicted pod. For example, one can prevent all voluntary evictions by specifying 0. This is a mutually exclusive setting with "minAvailable".
|
|
785
|
+
:param pulumi.Input[Union[_builtins.int, _builtins.str]] min_available: An eviction is allowed if at least "minAvailable" pods selected by "selector" will still be available after the eviction, i.e. even in the absence of the evicted pod. So for example you can prevent all voluntary evictions by specifying "100%".
|
|
787
786
|
:param pulumi.Input['_meta.v1.LabelSelectorArgs'] selector: Label query over pods whose evictions are managed by the disruption budget.
|
|
788
787
|
"""
|
|
789
788
|
if max_unavailable is not None:
|
|
@@ -793,31 +792,31 @@ class PodDisruptionBudgetSpecArgs:
|
|
|
793
792
|
if selector is not None:
|
|
794
793
|
pulumi.set(__self__, "selector", selector)
|
|
795
794
|
|
|
796
|
-
@property
|
|
795
|
+
@_builtins.property
|
|
797
796
|
@pulumi.getter(name="maxUnavailable")
|
|
798
|
-
def max_unavailable(self) -> Optional[pulumi.Input[Union[
|
|
797
|
+
def max_unavailable(self) -> Optional[pulumi.Input[Union[_builtins.int, _builtins.str]]]:
|
|
799
798
|
"""
|
|
800
799
|
An eviction is allowed if at most "maxUnavailable" pods selected by "selector" are unavailable after the eviction, i.e. even in absence of the evicted pod. For example, one can prevent all voluntary evictions by specifying 0. This is a mutually exclusive setting with "minAvailable".
|
|
801
800
|
"""
|
|
802
801
|
return pulumi.get(self, "max_unavailable")
|
|
803
802
|
|
|
804
803
|
@max_unavailable.setter
|
|
805
|
-
def max_unavailable(self, value: Optional[pulumi.Input[Union[
|
|
804
|
+
def max_unavailable(self, value: Optional[pulumi.Input[Union[_builtins.int, _builtins.str]]]):
|
|
806
805
|
pulumi.set(self, "max_unavailable", value)
|
|
807
806
|
|
|
808
|
-
@property
|
|
807
|
+
@_builtins.property
|
|
809
808
|
@pulumi.getter(name="minAvailable")
|
|
810
|
-
def min_available(self) -> Optional[pulumi.Input[Union[
|
|
809
|
+
def min_available(self) -> Optional[pulumi.Input[Union[_builtins.int, _builtins.str]]]:
|
|
811
810
|
"""
|
|
812
811
|
An eviction is allowed if at least "minAvailable" pods selected by "selector" will still be available after the eviction, i.e. even in the absence of the evicted pod. So for example you can prevent all voluntary evictions by specifying "100%".
|
|
813
812
|
"""
|
|
814
813
|
return pulumi.get(self, "min_available")
|
|
815
814
|
|
|
816
815
|
@min_available.setter
|
|
817
|
-
def min_available(self, value: Optional[pulumi.Input[Union[
|
|
816
|
+
def min_available(self, value: Optional[pulumi.Input[Union[_builtins.int, _builtins.str]]]):
|
|
818
817
|
pulumi.set(self, "min_available", value)
|
|
819
818
|
|
|
820
|
-
@property
|
|
819
|
+
@_builtins.property
|
|
821
820
|
@pulumi.getter
|
|
822
821
|
def selector(self) -> Optional[pulumi.Input['_meta.v1.LabelSelectorArgs']]:
|
|
823
822
|
"""
|
|
@@ -835,27 +834,27 @@ if not MYPY:
|
|
|
835
834
|
"""
|
|
836
835
|
PodDisruptionBudgetStatus represents information about the status of a PodDisruptionBudget. Status may trail the actual state of a system.
|
|
837
836
|
"""
|
|
838
|
-
current_healthy: pulumi.Input[
|
|
837
|
+
current_healthy: pulumi.Input[_builtins.int]
|
|
839
838
|
"""
|
|
840
839
|
current number of healthy pods
|
|
841
840
|
"""
|
|
842
|
-
desired_healthy: pulumi.Input[
|
|
841
|
+
desired_healthy: pulumi.Input[_builtins.int]
|
|
843
842
|
"""
|
|
844
843
|
minimum desired number of healthy pods
|
|
845
844
|
"""
|
|
846
|
-
disruptions_allowed: pulumi.Input[
|
|
845
|
+
disruptions_allowed: pulumi.Input[_builtins.int]
|
|
847
846
|
"""
|
|
848
847
|
Number of pod disruptions that are currently allowed.
|
|
849
848
|
"""
|
|
850
|
-
expected_pods: pulumi.Input[
|
|
849
|
+
expected_pods: pulumi.Input[_builtins.int]
|
|
851
850
|
"""
|
|
852
851
|
total number of pods counted by this disruption budget
|
|
853
852
|
"""
|
|
854
|
-
disrupted_pods: NotRequired[pulumi.Input[Mapping[str, pulumi.Input[
|
|
853
|
+
disrupted_pods: NotRequired[pulumi.Input[Mapping[str, pulumi.Input[_builtins.str]]]]
|
|
855
854
|
"""
|
|
856
855
|
DisruptedPods contains information about pods whose eviction was processed by the API server eviction subresource handler but has not yet been observed by the PodDisruptionBudget controller. A pod will be in this map from the time when the API server processed the eviction request to the time when the pod is seen by PDB controller as having been marked for deletion (or after a timeout). The key in the map is the name of the pod and the value is the time when the API server processed the eviction request. If the deletion didn't occur and a pod is still there it will be removed from the list automatically by PodDisruptionBudget controller after some time. If everything goes smooth this map should be empty for the most of the time. Large number of entries in the map may indicate problems with pod deletions.
|
|
857
856
|
"""
|
|
858
|
-
observed_generation: NotRequired[pulumi.Input[
|
|
857
|
+
observed_generation: NotRequired[pulumi.Input[_builtins.int]]
|
|
859
858
|
"""
|
|
860
859
|
Most recent generation observed when updating this PDB status. PodDisruptionsAllowed and other status information is valid only if observedGeneration equals to PDB's object generation.
|
|
861
860
|
"""
|
|
@@ -865,20 +864,20 @@ elif False:
|
|
|
865
864
|
@pulumi.input_type
|
|
866
865
|
class PodDisruptionBudgetStatusArgs:
|
|
867
866
|
def __init__(__self__, *,
|
|
868
|
-
current_healthy: pulumi.Input[
|
|
869
|
-
desired_healthy: pulumi.Input[
|
|
870
|
-
disruptions_allowed: pulumi.Input[
|
|
871
|
-
expected_pods: pulumi.Input[
|
|
872
|
-
disrupted_pods: Optional[pulumi.Input[Mapping[str, pulumi.Input[
|
|
873
|
-
observed_generation: Optional[pulumi.Input[
|
|
867
|
+
current_healthy: pulumi.Input[_builtins.int],
|
|
868
|
+
desired_healthy: pulumi.Input[_builtins.int],
|
|
869
|
+
disruptions_allowed: pulumi.Input[_builtins.int],
|
|
870
|
+
expected_pods: pulumi.Input[_builtins.int],
|
|
871
|
+
disrupted_pods: Optional[pulumi.Input[Mapping[str, pulumi.Input[_builtins.str]]]] = None,
|
|
872
|
+
observed_generation: Optional[pulumi.Input[_builtins.int]] = None):
|
|
874
873
|
"""
|
|
875
874
|
PodDisruptionBudgetStatus represents information about the status of a PodDisruptionBudget. Status may trail the actual state of a system.
|
|
876
|
-
:param pulumi.Input[
|
|
877
|
-
:param pulumi.Input[
|
|
878
|
-
:param pulumi.Input[
|
|
879
|
-
:param pulumi.Input[
|
|
880
|
-
:param pulumi.Input[Mapping[str, pulumi.Input[
|
|
881
|
-
:param pulumi.Input[
|
|
875
|
+
:param pulumi.Input[_builtins.int] current_healthy: current number of healthy pods
|
|
876
|
+
:param pulumi.Input[_builtins.int] desired_healthy: minimum desired number of healthy pods
|
|
877
|
+
:param pulumi.Input[_builtins.int] disruptions_allowed: Number of pod disruptions that are currently allowed.
|
|
878
|
+
:param pulumi.Input[_builtins.int] expected_pods: total number of pods counted by this disruption budget
|
|
879
|
+
:param pulumi.Input[Mapping[str, pulumi.Input[_builtins.str]]] disrupted_pods: DisruptedPods contains information about pods whose eviction was processed by the API server eviction subresource handler but has not yet been observed by the PodDisruptionBudget controller. A pod will be in this map from the time when the API server processed the eviction request to the time when the pod is seen by PDB controller as having been marked for deletion (or after a timeout). The key in the map is the name of the pod and the value is the time when the API server processed the eviction request. If the deletion didn't occur and a pod is still there it will be removed from the list automatically by PodDisruptionBudget controller after some time. If everything goes smooth this map should be empty for the most of the time. Large number of entries in the map may indicate problems with pod deletions.
|
|
880
|
+
:param pulumi.Input[_builtins.int] observed_generation: Most recent generation observed when updating this PDB status. PodDisruptionsAllowed and other status information is valid only if observedGeneration equals to PDB's object generation.
|
|
882
881
|
"""
|
|
883
882
|
pulumi.set(__self__, "current_healthy", current_healthy)
|
|
884
883
|
pulumi.set(__self__, "desired_healthy", desired_healthy)
|
|
@@ -889,76 +888,76 @@ class PodDisruptionBudgetStatusArgs:
|
|
|
889
888
|
if observed_generation is not None:
|
|
890
889
|
pulumi.set(__self__, "observed_generation", observed_generation)
|
|
891
890
|
|
|
892
|
-
@property
|
|
891
|
+
@_builtins.property
|
|
893
892
|
@pulumi.getter(name="currentHealthy")
|
|
894
|
-
def current_healthy(self) -> pulumi.Input[
|
|
893
|
+
def current_healthy(self) -> pulumi.Input[_builtins.int]:
|
|
895
894
|
"""
|
|
896
895
|
current number of healthy pods
|
|
897
896
|
"""
|
|
898
897
|
return pulumi.get(self, "current_healthy")
|
|
899
898
|
|
|
900
899
|
@current_healthy.setter
|
|
901
|
-
def current_healthy(self, value: pulumi.Input[
|
|
900
|
+
def current_healthy(self, value: pulumi.Input[_builtins.int]):
|
|
902
901
|
pulumi.set(self, "current_healthy", value)
|
|
903
902
|
|
|
904
|
-
@property
|
|
903
|
+
@_builtins.property
|
|
905
904
|
@pulumi.getter(name="desiredHealthy")
|
|
906
|
-
def desired_healthy(self) -> pulumi.Input[
|
|
905
|
+
def desired_healthy(self) -> pulumi.Input[_builtins.int]:
|
|
907
906
|
"""
|
|
908
907
|
minimum desired number of healthy pods
|
|
909
908
|
"""
|
|
910
909
|
return pulumi.get(self, "desired_healthy")
|
|
911
910
|
|
|
912
911
|
@desired_healthy.setter
|
|
913
|
-
def desired_healthy(self, value: pulumi.Input[
|
|
912
|
+
def desired_healthy(self, value: pulumi.Input[_builtins.int]):
|
|
914
913
|
pulumi.set(self, "desired_healthy", value)
|
|
915
914
|
|
|
916
|
-
@property
|
|
915
|
+
@_builtins.property
|
|
917
916
|
@pulumi.getter(name="disruptionsAllowed")
|
|
918
|
-
def disruptions_allowed(self) -> pulumi.Input[
|
|
917
|
+
def disruptions_allowed(self) -> pulumi.Input[_builtins.int]:
|
|
919
918
|
"""
|
|
920
919
|
Number of pod disruptions that are currently allowed.
|
|
921
920
|
"""
|
|
922
921
|
return pulumi.get(self, "disruptions_allowed")
|
|
923
922
|
|
|
924
923
|
@disruptions_allowed.setter
|
|
925
|
-
def disruptions_allowed(self, value: pulumi.Input[
|
|
924
|
+
def disruptions_allowed(self, value: pulumi.Input[_builtins.int]):
|
|
926
925
|
pulumi.set(self, "disruptions_allowed", value)
|
|
927
926
|
|
|
928
|
-
@property
|
|
927
|
+
@_builtins.property
|
|
929
928
|
@pulumi.getter(name="expectedPods")
|
|
930
|
-
def expected_pods(self) -> pulumi.Input[
|
|
929
|
+
def expected_pods(self) -> pulumi.Input[_builtins.int]:
|
|
931
930
|
"""
|
|
932
931
|
total number of pods counted by this disruption budget
|
|
933
932
|
"""
|
|
934
933
|
return pulumi.get(self, "expected_pods")
|
|
935
934
|
|
|
936
935
|
@expected_pods.setter
|
|
937
|
-
def expected_pods(self, value: pulumi.Input[
|
|
936
|
+
def expected_pods(self, value: pulumi.Input[_builtins.int]):
|
|
938
937
|
pulumi.set(self, "expected_pods", value)
|
|
939
938
|
|
|
940
|
-
@property
|
|
939
|
+
@_builtins.property
|
|
941
940
|
@pulumi.getter(name="disruptedPods")
|
|
942
|
-
def disrupted_pods(self) -> Optional[pulumi.Input[Mapping[str, pulumi.Input[
|
|
941
|
+
def disrupted_pods(self) -> Optional[pulumi.Input[Mapping[str, pulumi.Input[_builtins.str]]]]:
|
|
943
942
|
"""
|
|
944
943
|
DisruptedPods contains information about pods whose eviction was processed by the API server eviction subresource handler but has not yet been observed by the PodDisruptionBudget controller. A pod will be in this map from the time when the API server processed the eviction request to the time when the pod is seen by PDB controller as having been marked for deletion (or after a timeout). The key in the map is the name of the pod and the value is the time when the API server processed the eviction request. If the deletion didn't occur and a pod is still there it will be removed from the list automatically by PodDisruptionBudget controller after some time. If everything goes smooth this map should be empty for the most of the time. Large number of entries in the map may indicate problems with pod deletions.
|
|
945
944
|
"""
|
|
946
945
|
return pulumi.get(self, "disrupted_pods")
|
|
947
946
|
|
|
948
947
|
@disrupted_pods.setter
|
|
949
|
-
def disrupted_pods(self, value: Optional[pulumi.Input[Mapping[str, pulumi.Input[
|
|
948
|
+
def disrupted_pods(self, value: Optional[pulumi.Input[Mapping[str, pulumi.Input[_builtins.str]]]]):
|
|
950
949
|
pulumi.set(self, "disrupted_pods", value)
|
|
951
950
|
|
|
952
|
-
@property
|
|
951
|
+
@_builtins.property
|
|
953
952
|
@pulumi.getter(name="observedGeneration")
|
|
954
|
-
def observed_generation(self) -> Optional[pulumi.Input[
|
|
953
|
+
def observed_generation(self) -> Optional[pulumi.Input[_builtins.int]]:
|
|
955
954
|
"""
|
|
956
955
|
Most recent generation observed when updating this PDB status. PodDisruptionsAllowed and other status information is valid only if observedGeneration equals to PDB's object generation.
|
|
957
956
|
"""
|
|
958
957
|
return pulumi.get(self, "observed_generation")
|
|
959
958
|
|
|
960
959
|
@observed_generation.setter
|
|
961
|
-
def observed_generation(self, value: Optional[pulumi.Input[
|
|
960
|
+
def observed_generation(self, value: Optional[pulumi.Input[_builtins.int]]):
|
|
962
961
|
pulumi.set(self, "observed_generation", value)
|
|
963
962
|
|
|
964
963
|
|
|
@@ -967,11 +966,11 @@ if not MYPY:
|
|
|
967
966
|
"""
|
|
968
967
|
PodDisruptionBudget is an object to define the max disruption that can be caused to a collection of pods
|
|
969
968
|
"""
|
|
970
|
-
api_version: NotRequired[pulumi.Input[
|
|
969
|
+
api_version: NotRequired[pulumi.Input[_builtins.str]]
|
|
971
970
|
"""
|
|
972
971
|
APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
|
|
973
972
|
"""
|
|
974
|
-
kind: NotRequired[pulumi.Input[
|
|
973
|
+
kind: NotRequired[pulumi.Input[_builtins.str]]
|
|
975
974
|
"""
|
|
976
975
|
Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
|
|
977
976
|
"""
|
|
@@ -990,15 +989,15 @@ elif False:
|
|
|
990
989
|
@pulumi.input_type
|
|
991
990
|
class PodDisruptionBudgetArgs:
|
|
992
991
|
def __init__(__self__, *,
|
|
993
|
-
api_version: Optional[pulumi.Input[
|
|
994
|
-
kind: Optional[pulumi.Input[
|
|
992
|
+
api_version: Optional[pulumi.Input[_builtins.str]] = None,
|
|
993
|
+
kind: Optional[pulumi.Input[_builtins.str]] = None,
|
|
995
994
|
metadata: Optional[pulumi.Input['_meta.v1.ObjectMetaArgs']] = None,
|
|
996
995
|
spec: Optional[pulumi.Input['PodDisruptionBudgetSpecArgs']] = None,
|
|
997
996
|
status: Optional[pulumi.Input['PodDisruptionBudgetStatusArgs']] = None):
|
|
998
997
|
"""
|
|
999
998
|
PodDisruptionBudget is an object to define the max disruption that can be caused to a collection of pods
|
|
1000
|
-
:param pulumi.Input[
|
|
1001
|
-
:param pulumi.Input[
|
|
999
|
+
:param pulumi.Input[_builtins.str] api_version: APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
|
|
1000
|
+
:param pulumi.Input[_builtins.str] kind: Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
|
|
1002
1001
|
:param pulumi.Input['PodDisruptionBudgetSpecArgs'] spec: Specification of the desired behavior of the PodDisruptionBudget.
|
|
1003
1002
|
:param pulumi.Input['PodDisruptionBudgetStatusArgs'] status: Most recently observed status of the PodDisruptionBudget.
|
|
1004
1003
|
"""
|
|
@@ -1013,31 +1012,31 @@ class PodDisruptionBudgetArgs:
|
|
|
1013
1012
|
if status is not None:
|
|
1014
1013
|
pulumi.set(__self__, "status", status)
|
|
1015
1014
|
|
|
1016
|
-
@property
|
|
1015
|
+
@_builtins.property
|
|
1017
1016
|
@pulumi.getter(name="apiVersion")
|
|
1018
|
-
def api_version(self) -> Optional[pulumi.Input[
|
|
1017
|
+
def api_version(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
1019
1018
|
"""
|
|
1020
1019
|
APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
|
|
1021
1020
|
"""
|
|
1022
1021
|
return pulumi.get(self, "api_version")
|
|
1023
1022
|
|
|
1024
1023
|
@api_version.setter
|
|
1025
|
-
def api_version(self, value: Optional[pulumi.Input[
|
|
1024
|
+
def api_version(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
1026
1025
|
pulumi.set(self, "api_version", value)
|
|
1027
1026
|
|
|
1028
|
-
@property
|
|
1027
|
+
@_builtins.property
|
|
1029
1028
|
@pulumi.getter
|
|
1030
|
-
def kind(self) -> Optional[pulumi.Input[
|
|
1029
|
+
def kind(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
1031
1030
|
"""
|
|
1032
1031
|
Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
|
|
1033
1032
|
"""
|
|
1034
1033
|
return pulumi.get(self, "kind")
|
|
1035
1034
|
|
|
1036
1035
|
@kind.setter
|
|
1037
|
-
def kind(self, value: Optional[pulumi.Input[
|
|
1036
|
+
def kind(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
1038
1037
|
pulumi.set(self, "kind", value)
|
|
1039
1038
|
|
|
1040
|
-
@property
|
|
1039
|
+
@_builtins.property
|
|
1041
1040
|
@pulumi.getter
|
|
1042
1041
|
def metadata(self) -> Optional[pulumi.Input['_meta.v1.ObjectMetaArgs']]:
|
|
1043
1042
|
return pulumi.get(self, "metadata")
|
|
@@ -1046,7 +1045,7 @@ class PodDisruptionBudgetArgs:
|
|
|
1046
1045
|
def metadata(self, value: Optional[pulumi.Input['_meta.v1.ObjectMetaArgs']]):
|
|
1047
1046
|
pulumi.set(self, "metadata", value)
|
|
1048
1047
|
|
|
1049
|
-
@property
|
|
1048
|
+
@_builtins.property
|
|
1050
1049
|
@pulumi.getter
|
|
1051
1050
|
def spec(self) -> Optional[pulumi.Input['PodDisruptionBudgetSpecArgs']]:
|
|
1052
1051
|
"""
|
|
@@ -1058,7 +1057,7 @@ class PodDisruptionBudgetArgs:
|
|
|
1058
1057
|
def spec(self, value: Optional[pulumi.Input['PodDisruptionBudgetSpecArgs']]):
|
|
1059
1058
|
pulumi.set(self, "spec", value)
|
|
1060
1059
|
|
|
1061
|
-
@property
|
|
1060
|
+
@_builtins.property
|
|
1062
1061
|
@pulumi.getter
|
|
1063
1062
|
def status(self) -> Optional[pulumi.Input['PodDisruptionBudgetStatusArgs']]:
|
|
1064
1063
|
"""
|
|
@@ -1076,7 +1075,7 @@ if not MYPY:
|
|
|
1076
1075
|
"""
|
|
1077
1076
|
PodSecurityPolicySpec defines the policy enforced.
|
|
1078
1077
|
"""
|
|
1079
|
-
allow_privilege_escalation: NotRequired[pulumi.Input[
|
|
1078
|
+
allow_privilege_escalation: NotRequired[pulumi.Input[_builtins.bool]]
|
|
1080
1079
|
"""
|
|
1081
1080
|
allowPrivilegeEscalation determines if a pod can request to allow privilege escalation. If unspecified, defaults to true.
|
|
1082
1081
|
"""
|
|
@@ -1084,7 +1083,7 @@ if not MYPY:
|
|
|
1084
1083
|
"""
|
|
1085
1084
|
AllowedCSIDrivers is a whitelist of inline CSI drivers that must be explicitly set to be embedded within a pod spec. An empty value indicates that any CSI driver can be used for inline ephemeral volumes. This is an alpha field, and is only honored if the API server enables the CSIInlineVolume feature gate.
|
|
1086
1085
|
"""
|
|
1087
|
-
allowed_capabilities: NotRequired[pulumi.Input[Sequence[pulumi.Input[
|
|
1086
|
+
allowed_capabilities: NotRequired[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]
|
|
1088
1087
|
"""
|
|
1089
1088
|
allowedCapabilities is a list of capabilities that can be requested to add to the container. Capabilities in this field may be added at the pod author's discretion. You must not list a capability in both allowedCapabilities and requiredDropCapabilities.
|
|
1090
1089
|
"""
|
|
@@ -1096,25 +1095,25 @@ if not MYPY:
|
|
|
1096
1095
|
"""
|
|
1097
1096
|
allowedHostPaths is a white list of allowed host paths. Empty indicates that all host paths may be used.
|
|
1098
1097
|
"""
|
|
1099
|
-
allowed_proc_mount_types: NotRequired[pulumi.Input[Sequence[pulumi.Input[
|
|
1098
|
+
allowed_proc_mount_types: NotRequired[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]
|
|
1100
1099
|
"""
|
|
1101
1100
|
AllowedProcMountTypes is a whitelist of allowed ProcMountTypes. Empty or nil indicates that only the DefaultProcMountType may be used. This requires the ProcMountType feature flag to be enabled.
|
|
1102
1101
|
"""
|
|
1103
|
-
allowed_unsafe_sysctls: NotRequired[pulumi.Input[Sequence[pulumi.Input[
|
|
1102
|
+
allowed_unsafe_sysctls: NotRequired[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]
|
|
1104
1103
|
"""
|
|
1105
1104
|
allowedUnsafeSysctls is a list of explicitly allowed unsafe sysctls, defaults to none. Each entry is either a plain sysctl name or ends in "*" in which case it is considered as a prefix of allowed sysctls. Single * means all unsafe sysctls are allowed. Kubelet has to whitelist all allowed unsafe sysctls explicitly to avoid rejection.
|
|
1106
1105
|
|
|
1107
1106
|
Examples: e.g. "foo/*" allows "foo/bar", "foo/baz", etc. e.g. "foo.*" allows "foo.bar", "foo.baz", etc.
|
|
1108
1107
|
"""
|
|
1109
|
-
default_add_capabilities: NotRequired[pulumi.Input[Sequence[pulumi.Input[
|
|
1108
|
+
default_add_capabilities: NotRequired[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]
|
|
1110
1109
|
"""
|
|
1111
1110
|
defaultAddCapabilities is the default set of capabilities that will be added to the container unless the pod spec specifically drops the capability. You may not list a capability in both defaultAddCapabilities and requiredDropCapabilities. Capabilities added here are implicitly allowed, and need not be included in the allowedCapabilities list.
|
|
1112
1111
|
"""
|
|
1113
|
-
default_allow_privilege_escalation: NotRequired[pulumi.Input[
|
|
1112
|
+
default_allow_privilege_escalation: NotRequired[pulumi.Input[_builtins.bool]]
|
|
1114
1113
|
"""
|
|
1115
1114
|
defaultAllowPrivilegeEscalation controls the default setting for whether a process can gain more privileges than its parent process.
|
|
1116
1115
|
"""
|
|
1117
|
-
forbidden_sysctls: NotRequired[pulumi.Input[Sequence[pulumi.Input[
|
|
1116
|
+
forbidden_sysctls: NotRequired[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]
|
|
1118
1117
|
"""
|
|
1119
1118
|
forbiddenSysctls is a list of explicitly forbidden sysctls, defaults to none. Each entry is either a plain sysctl name or ends in "*" in which case it is considered as a prefix of forbidden sysctls. Single * means all sysctls are forbidden.
|
|
1120
1119
|
|
|
@@ -1124,15 +1123,15 @@ if not MYPY:
|
|
|
1124
1123
|
"""
|
|
1125
1124
|
fsGroup is the strategy that will dictate what fs group is used by the SecurityContext.
|
|
1126
1125
|
"""
|
|
1127
|
-
host_ipc: NotRequired[pulumi.Input[
|
|
1126
|
+
host_ipc: NotRequired[pulumi.Input[_builtins.bool]]
|
|
1128
1127
|
"""
|
|
1129
1128
|
hostIPC determines if the policy allows the use of HostIPC in the pod spec.
|
|
1130
1129
|
"""
|
|
1131
|
-
host_network: NotRequired[pulumi.Input[
|
|
1130
|
+
host_network: NotRequired[pulumi.Input[_builtins.bool]]
|
|
1132
1131
|
"""
|
|
1133
1132
|
hostNetwork determines if the policy allows the use of HostNetwork in the pod spec.
|
|
1134
1133
|
"""
|
|
1135
|
-
host_pid: NotRequired[pulumi.Input[
|
|
1134
|
+
host_pid: NotRequired[pulumi.Input[_builtins.bool]]
|
|
1136
1135
|
"""
|
|
1137
1136
|
hostPID determines if the policy allows the use of HostPID in the pod spec.
|
|
1138
1137
|
"""
|
|
@@ -1140,15 +1139,15 @@ if not MYPY:
|
|
|
1140
1139
|
"""
|
|
1141
1140
|
hostPorts determines which host port ranges are allowed to be exposed.
|
|
1142
1141
|
"""
|
|
1143
|
-
privileged: NotRequired[pulumi.Input[
|
|
1142
|
+
privileged: NotRequired[pulumi.Input[_builtins.bool]]
|
|
1144
1143
|
"""
|
|
1145
1144
|
privileged determines if a pod can request to be run as privileged.
|
|
1146
1145
|
"""
|
|
1147
|
-
read_only_root_filesystem: NotRequired[pulumi.Input[
|
|
1146
|
+
read_only_root_filesystem: NotRequired[pulumi.Input[_builtins.bool]]
|
|
1148
1147
|
"""
|
|
1149
1148
|
readOnlyRootFilesystem when set to true will force containers to run with a read only root file system. If the container specifically requests to run with a non-read only root file system the PSP should deny the pod. If set to false the container may run with a read only root file system if it wishes but it will not be forced to.
|
|
1150
1149
|
"""
|
|
1151
|
-
required_drop_capabilities: NotRequired[pulumi.Input[Sequence[pulumi.Input[
|
|
1150
|
+
required_drop_capabilities: NotRequired[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]
|
|
1152
1151
|
"""
|
|
1153
1152
|
requiredDropCapabilities are the capabilities that will be dropped from the container. These are required to be dropped and cannot be added.
|
|
1154
1153
|
"""
|
|
@@ -1172,7 +1171,7 @@ if not MYPY:
|
|
|
1172
1171
|
"""
|
|
1173
1172
|
supplementalGroups is the strategy that will dictate what supplemental groups are used by the SecurityContext.
|
|
1174
1173
|
"""
|
|
1175
|
-
volumes: NotRequired[pulumi.Input[Sequence[pulumi.Input[
|
|
1174
|
+
volumes: NotRequired[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]
|
|
1176
1175
|
"""
|
|
1177
1176
|
volumes is a white list of allowed volume plugins. Empty indicates that no volumes may be used. To allow all volumes you may use '*'.
|
|
1178
1177
|
"""
|
|
@@ -1182,60 +1181,60 @@ elif False:
|
|
|
1182
1181
|
@pulumi.input_type
|
|
1183
1182
|
class PodSecurityPolicySpecPatchArgs:
|
|
1184
1183
|
def __init__(__self__, *,
|
|
1185
|
-
allow_privilege_escalation: Optional[pulumi.Input[
|
|
1184
|
+
allow_privilege_escalation: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
1186
1185
|
allowed_csi_drivers: Optional[pulumi.Input[Sequence[pulumi.Input['AllowedCSIDriverPatchArgs']]]] = None,
|
|
1187
|
-
allowed_capabilities: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
1186
|
+
allowed_capabilities: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
1188
1187
|
allowed_flex_volumes: Optional[pulumi.Input[Sequence[pulumi.Input['AllowedFlexVolumePatchArgs']]]] = None,
|
|
1189
1188
|
allowed_host_paths: Optional[pulumi.Input[Sequence[pulumi.Input['AllowedHostPathPatchArgs']]]] = None,
|
|
1190
|
-
allowed_proc_mount_types: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
1191
|
-
allowed_unsafe_sysctls: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
1192
|
-
default_add_capabilities: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
1193
|
-
default_allow_privilege_escalation: Optional[pulumi.Input[
|
|
1194
|
-
forbidden_sysctls: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
1189
|
+
allowed_proc_mount_types: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
1190
|
+
allowed_unsafe_sysctls: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
1191
|
+
default_add_capabilities: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
1192
|
+
default_allow_privilege_escalation: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
1193
|
+
forbidden_sysctls: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
1195
1194
|
fs_group: Optional[pulumi.Input['FSGroupStrategyOptionsPatchArgs']] = None,
|
|
1196
|
-
host_ipc: Optional[pulumi.Input[
|
|
1197
|
-
host_network: Optional[pulumi.Input[
|
|
1198
|
-
host_pid: Optional[pulumi.Input[
|
|
1195
|
+
host_ipc: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
1196
|
+
host_network: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
1197
|
+
host_pid: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
1199
1198
|
host_ports: Optional[pulumi.Input[Sequence[pulumi.Input['HostPortRangePatchArgs']]]] = None,
|
|
1200
|
-
privileged: Optional[pulumi.Input[
|
|
1201
|
-
read_only_root_filesystem: Optional[pulumi.Input[
|
|
1202
|
-
required_drop_capabilities: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
1199
|
+
privileged: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
1200
|
+
read_only_root_filesystem: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
1201
|
+
required_drop_capabilities: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
1203
1202
|
run_as_group: Optional[pulumi.Input['RunAsGroupStrategyOptionsPatchArgs']] = None,
|
|
1204
1203
|
run_as_user: Optional[pulumi.Input['RunAsUserStrategyOptionsPatchArgs']] = None,
|
|
1205
1204
|
runtime_class: Optional[pulumi.Input['RuntimeClassStrategyOptionsPatchArgs']] = None,
|
|
1206
1205
|
se_linux: Optional[pulumi.Input['SELinuxStrategyOptionsPatchArgs']] = None,
|
|
1207
1206
|
supplemental_groups: Optional[pulumi.Input['SupplementalGroupsStrategyOptionsPatchArgs']] = None,
|
|
1208
|
-
volumes: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
1207
|
+
volumes: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None):
|
|
1209
1208
|
"""
|
|
1210
1209
|
PodSecurityPolicySpec defines the policy enforced.
|
|
1211
|
-
:param pulumi.Input[
|
|
1210
|
+
:param pulumi.Input[_builtins.bool] allow_privilege_escalation: allowPrivilegeEscalation determines if a pod can request to allow privilege escalation. If unspecified, defaults to true.
|
|
1212
1211
|
:param pulumi.Input[Sequence[pulumi.Input['AllowedCSIDriverPatchArgs']]] allowed_csi_drivers: AllowedCSIDrivers is a whitelist of inline CSI drivers that must be explicitly set to be embedded within a pod spec. An empty value indicates that any CSI driver can be used for inline ephemeral volumes. This is an alpha field, and is only honored if the API server enables the CSIInlineVolume feature gate.
|
|
1213
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
1212
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] allowed_capabilities: allowedCapabilities is a list of capabilities that can be requested to add to the container. Capabilities in this field may be added at the pod author's discretion. You must not list a capability in both allowedCapabilities and requiredDropCapabilities.
|
|
1214
1213
|
:param pulumi.Input[Sequence[pulumi.Input['AllowedFlexVolumePatchArgs']]] allowed_flex_volumes: allowedFlexVolumes is a whitelist of allowed Flexvolumes. Empty or nil indicates that all Flexvolumes may be used. This parameter is effective only when the usage of the Flexvolumes is allowed in the "volumes" field.
|
|
1215
1214
|
:param pulumi.Input[Sequence[pulumi.Input['AllowedHostPathPatchArgs']]] allowed_host_paths: allowedHostPaths is a white list of allowed host paths. Empty indicates that all host paths may be used.
|
|
1216
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
1217
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
1215
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] allowed_proc_mount_types: AllowedProcMountTypes is a whitelist of allowed ProcMountTypes. Empty or nil indicates that only the DefaultProcMountType may be used. This requires the ProcMountType feature flag to be enabled.
|
|
1216
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] allowed_unsafe_sysctls: allowedUnsafeSysctls is a list of explicitly allowed unsafe sysctls, defaults to none. Each entry is either a plain sysctl name or ends in "*" in which case it is considered as a prefix of allowed sysctls. Single * means all unsafe sysctls are allowed. Kubelet has to whitelist all allowed unsafe sysctls explicitly to avoid rejection.
|
|
1218
1217
|
|
|
1219
1218
|
Examples: e.g. "foo/*" allows "foo/bar", "foo/baz", etc. e.g. "foo.*" allows "foo.bar", "foo.baz", etc.
|
|
1220
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
1221
|
-
:param pulumi.Input[
|
|
1222
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
1219
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] default_add_capabilities: defaultAddCapabilities is the default set of capabilities that will be added to the container unless the pod spec specifically drops the capability. You may not list a capability in both defaultAddCapabilities and requiredDropCapabilities. Capabilities added here are implicitly allowed, and need not be included in the allowedCapabilities list.
|
|
1220
|
+
:param pulumi.Input[_builtins.bool] default_allow_privilege_escalation: defaultAllowPrivilegeEscalation controls the default setting for whether a process can gain more privileges than its parent process.
|
|
1221
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] forbidden_sysctls: forbiddenSysctls is a list of explicitly forbidden sysctls, defaults to none. Each entry is either a plain sysctl name or ends in "*" in which case it is considered as a prefix of forbidden sysctls. Single * means all sysctls are forbidden.
|
|
1223
1222
|
|
|
1224
1223
|
Examples: e.g. "foo/*" forbids "foo/bar", "foo/baz", etc. e.g. "foo.*" forbids "foo.bar", "foo.baz", etc.
|
|
1225
1224
|
:param pulumi.Input['FSGroupStrategyOptionsPatchArgs'] fs_group: fsGroup is the strategy that will dictate what fs group is used by the SecurityContext.
|
|
1226
|
-
:param pulumi.Input[
|
|
1227
|
-
:param pulumi.Input[
|
|
1228
|
-
:param pulumi.Input[
|
|
1225
|
+
:param pulumi.Input[_builtins.bool] host_ipc: hostIPC determines if the policy allows the use of HostIPC in the pod spec.
|
|
1226
|
+
:param pulumi.Input[_builtins.bool] host_network: hostNetwork determines if the policy allows the use of HostNetwork in the pod spec.
|
|
1227
|
+
:param pulumi.Input[_builtins.bool] host_pid: hostPID determines if the policy allows the use of HostPID in the pod spec.
|
|
1229
1228
|
:param pulumi.Input[Sequence[pulumi.Input['HostPortRangePatchArgs']]] host_ports: hostPorts determines which host port ranges are allowed to be exposed.
|
|
1230
|
-
:param pulumi.Input[
|
|
1231
|
-
:param pulumi.Input[
|
|
1232
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
1229
|
+
:param pulumi.Input[_builtins.bool] privileged: privileged determines if a pod can request to be run as privileged.
|
|
1230
|
+
:param pulumi.Input[_builtins.bool] read_only_root_filesystem: readOnlyRootFilesystem when set to true will force containers to run with a read only root file system. If the container specifically requests to run with a non-read only root file system the PSP should deny the pod. If set to false the container may run with a read only root file system if it wishes but it will not be forced to.
|
|
1231
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] required_drop_capabilities: requiredDropCapabilities are the capabilities that will be dropped from the container. These are required to be dropped and cannot be added.
|
|
1233
1232
|
:param pulumi.Input['RunAsGroupStrategyOptionsPatchArgs'] run_as_group: RunAsGroup is the strategy that will dictate the allowable RunAsGroup values that may be set. If this field is omitted, the pod's RunAsGroup can take any value. This field requires the RunAsGroup feature gate to be enabled.
|
|
1234
1233
|
:param pulumi.Input['RunAsUserStrategyOptionsPatchArgs'] run_as_user: runAsUser is the strategy that will dictate the allowable RunAsUser values that may be set.
|
|
1235
1234
|
:param pulumi.Input['RuntimeClassStrategyOptionsPatchArgs'] runtime_class: runtimeClass is the strategy that will dictate the allowable RuntimeClasses for a pod. If this field is omitted, the pod's runtimeClassName field is unrestricted. Enforcement of this field depends on the RuntimeClass feature gate being enabled.
|
|
1236
1235
|
:param pulumi.Input['SELinuxStrategyOptionsPatchArgs'] se_linux: seLinux is the strategy that will dictate the allowable labels that may be set.
|
|
1237
1236
|
:param pulumi.Input['SupplementalGroupsStrategyOptionsPatchArgs'] supplemental_groups: supplementalGroups is the strategy that will dictate what supplemental groups are used by the SecurityContext.
|
|
1238
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
1237
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] volumes: volumes is a white list of allowed volume plugins. Empty indicates that no volumes may be used. To allow all volumes you may use '*'.
|
|
1239
1238
|
"""
|
|
1240
1239
|
if allow_privilege_escalation is not None:
|
|
1241
1240
|
pulumi.set(__self__, "allow_privilege_escalation", allow_privilege_escalation)
|
|
@@ -1286,19 +1285,19 @@ class PodSecurityPolicySpecPatchArgs:
|
|
|
1286
1285
|
if volumes is not None:
|
|
1287
1286
|
pulumi.set(__self__, "volumes", volumes)
|
|
1288
1287
|
|
|
1289
|
-
@property
|
|
1288
|
+
@_builtins.property
|
|
1290
1289
|
@pulumi.getter(name="allowPrivilegeEscalation")
|
|
1291
|
-
def allow_privilege_escalation(self) -> Optional[pulumi.Input[
|
|
1290
|
+
def allow_privilege_escalation(self) -> Optional[pulumi.Input[_builtins.bool]]:
|
|
1292
1291
|
"""
|
|
1293
1292
|
allowPrivilegeEscalation determines if a pod can request to allow privilege escalation. If unspecified, defaults to true.
|
|
1294
1293
|
"""
|
|
1295
1294
|
return pulumi.get(self, "allow_privilege_escalation")
|
|
1296
1295
|
|
|
1297
1296
|
@allow_privilege_escalation.setter
|
|
1298
|
-
def allow_privilege_escalation(self, value: Optional[pulumi.Input[
|
|
1297
|
+
def allow_privilege_escalation(self, value: Optional[pulumi.Input[_builtins.bool]]):
|
|
1299
1298
|
pulumi.set(self, "allow_privilege_escalation", value)
|
|
1300
1299
|
|
|
1301
|
-
@property
|
|
1300
|
+
@_builtins.property
|
|
1302
1301
|
@pulumi.getter(name="allowedCSIDrivers")
|
|
1303
1302
|
def allowed_csi_drivers(self) -> Optional[pulumi.Input[Sequence[pulumi.Input['AllowedCSIDriverPatchArgs']]]]:
|
|
1304
1303
|
"""
|
|
@@ -1310,19 +1309,19 @@ class PodSecurityPolicySpecPatchArgs:
|
|
|
1310
1309
|
def allowed_csi_drivers(self, value: Optional[pulumi.Input[Sequence[pulumi.Input['AllowedCSIDriverPatchArgs']]]]):
|
|
1311
1310
|
pulumi.set(self, "allowed_csi_drivers", value)
|
|
1312
1311
|
|
|
1313
|
-
@property
|
|
1312
|
+
@_builtins.property
|
|
1314
1313
|
@pulumi.getter(name="allowedCapabilities")
|
|
1315
|
-
def allowed_capabilities(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
1314
|
+
def allowed_capabilities(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
|
1316
1315
|
"""
|
|
1317
1316
|
allowedCapabilities is a list of capabilities that can be requested to add to the container. Capabilities in this field may be added at the pod author's discretion. You must not list a capability in both allowedCapabilities and requiredDropCapabilities.
|
|
1318
1317
|
"""
|
|
1319
1318
|
return pulumi.get(self, "allowed_capabilities")
|
|
1320
1319
|
|
|
1321
1320
|
@allowed_capabilities.setter
|
|
1322
|
-
def allowed_capabilities(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
1321
|
+
def allowed_capabilities(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
|
1323
1322
|
pulumi.set(self, "allowed_capabilities", value)
|
|
1324
1323
|
|
|
1325
|
-
@property
|
|
1324
|
+
@_builtins.property
|
|
1326
1325
|
@pulumi.getter(name="allowedFlexVolumes")
|
|
1327
1326
|
def allowed_flex_volumes(self) -> Optional[pulumi.Input[Sequence[pulumi.Input['AllowedFlexVolumePatchArgs']]]]:
|
|
1328
1327
|
"""
|
|
@@ -1334,7 +1333,7 @@ class PodSecurityPolicySpecPatchArgs:
|
|
|
1334
1333
|
def allowed_flex_volumes(self, value: Optional[pulumi.Input[Sequence[pulumi.Input['AllowedFlexVolumePatchArgs']]]]):
|
|
1335
1334
|
pulumi.set(self, "allowed_flex_volumes", value)
|
|
1336
1335
|
|
|
1337
|
-
@property
|
|
1336
|
+
@_builtins.property
|
|
1338
1337
|
@pulumi.getter(name="allowedHostPaths")
|
|
1339
1338
|
def allowed_host_paths(self) -> Optional[pulumi.Input[Sequence[pulumi.Input['AllowedHostPathPatchArgs']]]]:
|
|
1340
1339
|
"""
|
|
@@ -1346,21 +1345,21 @@ class PodSecurityPolicySpecPatchArgs:
|
|
|
1346
1345
|
def allowed_host_paths(self, value: Optional[pulumi.Input[Sequence[pulumi.Input['AllowedHostPathPatchArgs']]]]):
|
|
1347
1346
|
pulumi.set(self, "allowed_host_paths", value)
|
|
1348
1347
|
|
|
1349
|
-
@property
|
|
1348
|
+
@_builtins.property
|
|
1350
1349
|
@pulumi.getter(name="allowedProcMountTypes")
|
|
1351
|
-
def allowed_proc_mount_types(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
1350
|
+
def allowed_proc_mount_types(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
|
1352
1351
|
"""
|
|
1353
1352
|
AllowedProcMountTypes is a whitelist of allowed ProcMountTypes. Empty or nil indicates that only the DefaultProcMountType may be used. This requires the ProcMountType feature flag to be enabled.
|
|
1354
1353
|
"""
|
|
1355
1354
|
return pulumi.get(self, "allowed_proc_mount_types")
|
|
1356
1355
|
|
|
1357
1356
|
@allowed_proc_mount_types.setter
|
|
1358
|
-
def allowed_proc_mount_types(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
1357
|
+
def allowed_proc_mount_types(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
|
1359
1358
|
pulumi.set(self, "allowed_proc_mount_types", value)
|
|
1360
1359
|
|
|
1361
|
-
@property
|
|
1360
|
+
@_builtins.property
|
|
1362
1361
|
@pulumi.getter(name="allowedUnsafeSysctls")
|
|
1363
|
-
def allowed_unsafe_sysctls(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
1362
|
+
def allowed_unsafe_sysctls(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
|
1364
1363
|
"""
|
|
1365
1364
|
allowedUnsafeSysctls is a list of explicitly allowed unsafe sysctls, defaults to none. Each entry is either a plain sysctl name or ends in "*" in which case it is considered as a prefix of allowed sysctls. Single * means all unsafe sysctls are allowed. Kubelet has to whitelist all allowed unsafe sysctls explicitly to avoid rejection.
|
|
1366
1365
|
|
|
@@ -1369,36 +1368,36 @@ class PodSecurityPolicySpecPatchArgs:
|
|
|
1369
1368
|
return pulumi.get(self, "allowed_unsafe_sysctls")
|
|
1370
1369
|
|
|
1371
1370
|
@allowed_unsafe_sysctls.setter
|
|
1372
|
-
def allowed_unsafe_sysctls(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
1371
|
+
def allowed_unsafe_sysctls(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
|
1373
1372
|
pulumi.set(self, "allowed_unsafe_sysctls", value)
|
|
1374
1373
|
|
|
1375
|
-
@property
|
|
1374
|
+
@_builtins.property
|
|
1376
1375
|
@pulumi.getter(name="defaultAddCapabilities")
|
|
1377
|
-
def default_add_capabilities(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
1376
|
+
def default_add_capabilities(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
|
1378
1377
|
"""
|
|
1379
1378
|
defaultAddCapabilities is the default set of capabilities that will be added to the container unless the pod spec specifically drops the capability. You may not list a capability in both defaultAddCapabilities and requiredDropCapabilities. Capabilities added here are implicitly allowed, and need not be included in the allowedCapabilities list.
|
|
1380
1379
|
"""
|
|
1381
1380
|
return pulumi.get(self, "default_add_capabilities")
|
|
1382
1381
|
|
|
1383
1382
|
@default_add_capabilities.setter
|
|
1384
|
-
def default_add_capabilities(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
1383
|
+
def default_add_capabilities(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
|
1385
1384
|
pulumi.set(self, "default_add_capabilities", value)
|
|
1386
1385
|
|
|
1387
|
-
@property
|
|
1386
|
+
@_builtins.property
|
|
1388
1387
|
@pulumi.getter(name="defaultAllowPrivilegeEscalation")
|
|
1389
|
-
def default_allow_privilege_escalation(self) -> Optional[pulumi.Input[
|
|
1388
|
+
def default_allow_privilege_escalation(self) -> Optional[pulumi.Input[_builtins.bool]]:
|
|
1390
1389
|
"""
|
|
1391
1390
|
defaultAllowPrivilegeEscalation controls the default setting for whether a process can gain more privileges than its parent process.
|
|
1392
1391
|
"""
|
|
1393
1392
|
return pulumi.get(self, "default_allow_privilege_escalation")
|
|
1394
1393
|
|
|
1395
1394
|
@default_allow_privilege_escalation.setter
|
|
1396
|
-
def default_allow_privilege_escalation(self, value: Optional[pulumi.Input[
|
|
1395
|
+
def default_allow_privilege_escalation(self, value: Optional[pulumi.Input[_builtins.bool]]):
|
|
1397
1396
|
pulumi.set(self, "default_allow_privilege_escalation", value)
|
|
1398
1397
|
|
|
1399
|
-
@property
|
|
1398
|
+
@_builtins.property
|
|
1400
1399
|
@pulumi.getter(name="forbiddenSysctls")
|
|
1401
|
-
def forbidden_sysctls(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
1400
|
+
def forbidden_sysctls(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
|
1402
1401
|
"""
|
|
1403
1402
|
forbiddenSysctls is a list of explicitly forbidden sysctls, defaults to none. Each entry is either a plain sysctl name or ends in "*" in which case it is considered as a prefix of forbidden sysctls. Single * means all sysctls are forbidden.
|
|
1404
1403
|
|
|
@@ -1407,10 +1406,10 @@ class PodSecurityPolicySpecPatchArgs:
|
|
|
1407
1406
|
return pulumi.get(self, "forbidden_sysctls")
|
|
1408
1407
|
|
|
1409
1408
|
@forbidden_sysctls.setter
|
|
1410
|
-
def forbidden_sysctls(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
1409
|
+
def forbidden_sysctls(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
|
1411
1410
|
pulumi.set(self, "forbidden_sysctls", value)
|
|
1412
1411
|
|
|
1413
|
-
@property
|
|
1412
|
+
@_builtins.property
|
|
1414
1413
|
@pulumi.getter(name="fsGroup")
|
|
1415
1414
|
def fs_group(self) -> Optional[pulumi.Input['FSGroupStrategyOptionsPatchArgs']]:
|
|
1416
1415
|
"""
|
|
@@ -1422,43 +1421,43 @@ class PodSecurityPolicySpecPatchArgs:
|
|
|
1422
1421
|
def fs_group(self, value: Optional[pulumi.Input['FSGroupStrategyOptionsPatchArgs']]):
|
|
1423
1422
|
pulumi.set(self, "fs_group", value)
|
|
1424
1423
|
|
|
1425
|
-
@property
|
|
1424
|
+
@_builtins.property
|
|
1426
1425
|
@pulumi.getter(name="hostIPC")
|
|
1427
|
-
def host_ipc(self) -> Optional[pulumi.Input[
|
|
1426
|
+
def host_ipc(self) -> Optional[pulumi.Input[_builtins.bool]]:
|
|
1428
1427
|
"""
|
|
1429
1428
|
hostIPC determines if the policy allows the use of HostIPC in the pod spec.
|
|
1430
1429
|
"""
|
|
1431
1430
|
return pulumi.get(self, "host_ipc")
|
|
1432
1431
|
|
|
1433
1432
|
@host_ipc.setter
|
|
1434
|
-
def host_ipc(self, value: Optional[pulumi.Input[
|
|
1433
|
+
def host_ipc(self, value: Optional[pulumi.Input[_builtins.bool]]):
|
|
1435
1434
|
pulumi.set(self, "host_ipc", value)
|
|
1436
1435
|
|
|
1437
|
-
@property
|
|
1436
|
+
@_builtins.property
|
|
1438
1437
|
@pulumi.getter(name="hostNetwork")
|
|
1439
|
-
def host_network(self) -> Optional[pulumi.Input[
|
|
1438
|
+
def host_network(self) -> Optional[pulumi.Input[_builtins.bool]]:
|
|
1440
1439
|
"""
|
|
1441
1440
|
hostNetwork determines if the policy allows the use of HostNetwork in the pod spec.
|
|
1442
1441
|
"""
|
|
1443
1442
|
return pulumi.get(self, "host_network")
|
|
1444
1443
|
|
|
1445
1444
|
@host_network.setter
|
|
1446
|
-
def host_network(self, value: Optional[pulumi.Input[
|
|
1445
|
+
def host_network(self, value: Optional[pulumi.Input[_builtins.bool]]):
|
|
1447
1446
|
pulumi.set(self, "host_network", value)
|
|
1448
1447
|
|
|
1449
|
-
@property
|
|
1448
|
+
@_builtins.property
|
|
1450
1449
|
@pulumi.getter(name="hostPID")
|
|
1451
|
-
def host_pid(self) -> Optional[pulumi.Input[
|
|
1450
|
+
def host_pid(self) -> Optional[pulumi.Input[_builtins.bool]]:
|
|
1452
1451
|
"""
|
|
1453
1452
|
hostPID determines if the policy allows the use of HostPID in the pod spec.
|
|
1454
1453
|
"""
|
|
1455
1454
|
return pulumi.get(self, "host_pid")
|
|
1456
1455
|
|
|
1457
1456
|
@host_pid.setter
|
|
1458
|
-
def host_pid(self, value: Optional[pulumi.Input[
|
|
1457
|
+
def host_pid(self, value: Optional[pulumi.Input[_builtins.bool]]):
|
|
1459
1458
|
pulumi.set(self, "host_pid", value)
|
|
1460
1459
|
|
|
1461
|
-
@property
|
|
1460
|
+
@_builtins.property
|
|
1462
1461
|
@pulumi.getter(name="hostPorts")
|
|
1463
1462
|
def host_ports(self) -> Optional[pulumi.Input[Sequence[pulumi.Input['HostPortRangePatchArgs']]]]:
|
|
1464
1463
|
"""
|
|
@@ -1470,43 +1469,43 @@ class PodSecurityPolicySpecPatchArgs:
|
|
|
1470
1469
|
def host_ports(self, value: Optional[pulumi.Input[Sequence[pulumi.Input['HostPortRangePatchArgs']]]]):
|
|
1471
1470
|
pulumi.set(self, "host_ports", value)
|
|
1472
1471
|
|
|
1473
|
-
@property
|
|
1472
|
+
@_builtins.property
|
|
1474
1473
|
@pulumi.getter
|
|
1475
|
-
def privileged(self) -> Optional[pulumi.Input[
|
|
1474
|
+
def privileged(self) -> Optional[pulumi.Input[_builtins.bool]]:
|
|
1476
1475
|
"""
|
|
1477
1476
|
privileged determines if a pod can request to be run as privileged.
|
|
1478
1477
|
"""
|
|
1479
1478
|
return pulumi.get(self, "privileged")
|
|
1480
1479
|
|
|
1481
1480
|
@privileged.setter
|
|
1482
|
-
def privileged(self, value: Optional[pulumi.Input[
|
|
1481
|
+
def privileged(self, value: Optional[pulumi.Input[_builtins.bool]]):
|
|
1483
1482
|
pulumi.set(self, "privileged", value)
|
|
1484
1483
|
|
|
1485
|
-
@property
|
|
1484
|
+
@_builtins.property
|
|
1486
1485
|
@pulumi.getter(name="readOnlyRootFilesystem")
|
|
1487
|
-
def read_only_root_filesystem(self) -> Optional[pulumi.Input[
|
|
1486
|
+
def read_only_root_filesystem(self) -> Optional[pulumi.Input[_builtins.bool]]:
|
|
1488
1487
|
"""
|
|
1489
1488
|
readOnlyRootFilesystem when set to true will force containers to run with a read only root file system. If the container specifically requests to run with a non-read only root file system the PSP should deny the pod. If set to false the container may run with a read only root file system if it wishes but it will not be forced to.
|
|
1490
1489
|
"""
|
|
1491
1490
|
return pulumi.get(self, "read_only_root_filesystem")
|
|
1492
1491
|
|
|
1493
1492
|
@read_only_root_filesystem.setter
|
|
1494
|
-
def read_only_root_filesystem(self, value: Optional[pulumi.Input[
|
|
1493
|
+
def read_only_root_filesystem(self, value: Optional[pulumi.Input[_builtins.bool]]):
|
|
1495
1494
|
pulumi.set(self, "read_only_root_filesystem", value)
|
|
1496
1495
|
|
|
1497
|
-
@property
|
|
1496
|
+
@_builtins.property
|
|
1498
1497
|
@pulumi.getter(name="requiredDropCapabilities")
|
|
1499
|
-
def required_drop_capabilities(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
1498
|
+
def required_drop_capabilities(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
|
1500
1499
|
"""
|
|
1501
1500
|
requiredDropCapabilities are the capabilities that will be dropped from the container. These are required to be dropped and cannot be added.
|
|
1502
1501
|
"""
|
|
1503
1502
|
return pulumi.get(self, "required_drop_capabilities")
|
|
1504
1503
|
|
|
1505
1504
|
@required_drop_capabilities.setter
|
|
1506
|
-
def required_drop_capabilities(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
1505
|
+
def required_drop_capabilities(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
|
1507
1506
|
pulumi.set(self, "required_drop_capabilities", value)
|
|
1508
1507
|
|
|
1509
|
-
@property
|
|
1508
|
+
@_builtins.property
|
|
1510
1509
|
@pulumi.getter(name="runAsGroup")
|
|
1511
1510
|
def run_as_group(self) -> Optional[pulumi.Input['RunAsGroupStrategyOptionsPatchArgs']]:
|
|
1512
1511
|
"""
|
|
@@ -1518,7 +1517,7 @@ class PodSecurityPolicySpecPatchArgs:
|
|
|
1518
1517
|
def run_as_group(self, value: Optional[pulumi.Input['RunAsGroupStrategyOptionsPatchArgs']]):
|
|
1519
1518
|
pulumi.set(self, "run_as_group", value)
|
|
1520
1519
|
|
|
1521
|
-
@property
|
|
1520
|
+
@_builtins.property
|
|
1522
1521
|
@pulumi.getter(name="runAsUser")
|
|
1523
1522
|
def run_as_user(self) -> Optional[pulumi.Input['RunAsUserStrategyOptionsPatchArgs']]:
|
|
1524
1523
|
"""
|
|
@@ -1530,7 +1529,7 @@ class PodSecurityPolicySpecPatchArgs:
|
|
|
1530
1529
|
def run_as_user(self, value: Optional[pulumi.Input['RunAsUserStrategyOptionsPatchArgs']]):
|
|
1531
1530
|
pulumi.set(self, "run_as_user", value)
|
|
1532
1531
|
|
|
1533
|
-
@property
|
|
1532
|
+
@_builtins.property
|
|
1534
1533
|
@pulumi.getter(name="runtimeClass")
|
|
1535
1534
|
def runtime_class(self) -> Optional[pulumi.Input['RuntimeClassStrategyOptionsPatchArgs']]:
|
|
1536
1535
|
"""
|
|
@@ -1542,7 +1541,7 @@ class PodSecurityPolicySpecPatchArgs:
|
|
|
1542
1541
|
def runtime_class(self, value: Optional[pulumi.Input['RuntimeClassStrategyOptionsPatchArgs']]):
|
|
1543
1542
|
pulumi.set(self, "runtime_class", value)
|
|
1544
1543
|
|
|
1545
|
-
@property
|
|
1544
|
+
@_builtins.property
|
|
1546
1545
|
@pulumi.getter(name="seLinux")
|
|
1547
1546
|
def se_linux(self) -> Optional[pulumi.Input['SELinuxStrategyOptionsPatchArgs']]:
|
|
1548
1547
|
"""
|
|
@@ -1554,7 +1553,7 @@ class PodSecurityPolicySpecPatchArgs:
|
|
|
1554
1553
|
def se_linux(self, value: Optional[pulumi.Input['SELinuxStrategyOptionsPatchArgs']]):
|
|
1555
1554
|
pulumi.set(self, "se_linux", value)
|
|
1556
1555
|
|
|
1557
|
-
@property
|
|
1556
|
+
@_builtins.property
|
|
1558
1557
|
@pulumi.getter(name="supplementalGroups")
|
|
1559
1558
|
def supplemental_groups(self) -> Optional[pulumi.Input['SupplementalGroupsStrategyOptionsPatchArgs']]:
|
|
1560
1559
|
"""
|
|
@@ -1566,16 +1565,16 @@ class PodSecurityPolicySpecPatchArgs:
|
|
|
1566
1565
|
def supplemental_groups(self, value: Optional[pulumi.Input['SupplementalGroupsStrategyOptionsPatchArgs']]):
|
|
1567
1566
|
pulumi.set(self, "supplemental_groups", value)
|
|
1568
1567
|
|
|
1569
|
-
@property
|
|
1568
|
+
@_builtins.property
|
|
1570
1569
|
@pulumi.getter
|
|
1571
|
-
def volumes(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
1570
|
+
def volumes(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
|
1572
1571
|
"""
|
|
1573
1572
|
volumes is a white list of allowed volume plugins. Empty indicates that no volumes may be used. To allow all volumes you may use '*'.
|
|
1574
1573
|
"""
|
|
1575
1574
|
return pulumi.get(self, "volumes")
|
|
1576
1575
|
|
|
1577
1576
|
@volumes.setter
|
|
1578
|
-
def volumes(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
1577
|
+
def volumes(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
|
1579
1578
|
pulumi.set(self, "volumes", value)
|
|
1580
1579
|
|
|
1581
1580
|
|
|
@@ -1600,7 +1599,7 @@ if not MYPY:
|
|
|
1600
1599
|
"""
|
|
1601
1600
|
supplementalGroups is the strategy that will dictate what supplemental groups are used by the SecurityContext.
|
|
1602
1601
|
"""
|
|
1603
|
-
allow_privilege_escalation: NotRequired[pulumi.Input[
|
|
1602
|
+
allow_privilege_escalation: NotRequired[pulumi.Input[_builtins.bool]]
|
|
1604
1603
|
"""
|
|
1605
1604
|
allowPrivilegeEscalation determines if a pod can request to allow privilege escalation. If unspecified, defaults to true.
|
|
1606
1605
|
"""
|
|
@@ -1608,7 +1607,7 @@ if not MYPY:
|
|
|
1608
1607
|
"""
|
|
1609
1608
|
AllowedCSIDrivers is a whitelist of inline CSI drivers that must be explicitly set to be embedded within a pod spec. An empty value indicates that any CSI driver can be used for inline ephemeral volumes. This is an alpha field, and is only honored if the API server enables the CSIInlineVolume feature gate.
|
|
1610
1609
|
"""
|
|
1611
|
-
allowed_capabilities: NotRequired[pulumi.Input[Sequence[pulumi.Input[
|
|
1610
|
+
allowed_capabilities: NotRequired[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]
|
|
1612
1611
|
"""
|
|
1613
1612
|
allowedCapabilities is a list of capabilities that can be requested to add to the container. Capabilities in this field may be added at the pod author's discretion. You must not list a capability in both allowedCapabilities and requiredDropCapabilities.
|
|
1614
1613
|
"""
|
|
@@ -1620,39 +1619,39 @@ if not MYPY:
|
|
|
1620
1619
|
"""
|
|
1621
1620
|
allowedHostPaths is a white list of allowed host paths. Empty indicates that all host paths may be used.
|
|
1622
1621
|
"""
|
|
1623
|
-
allowed_proc_mount_types: NotRequired[pulumi.Input[Sequence[pulumi.Input[
|
|
1622
|
+
allowed_proc_mount_types: NotRequired[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]
|
|
1624
1623
|
"""
|
|
1625
1624
|
AllowedProcMountTypes is a whitelist of allowed ProcMountTypes. Empty or nil indicates that only the DefaultProcMountType may be used. This requires the ProcMountType feature flag to be enabled.
|
|
1626
1625
|
"""
|
|
1627
|
-
allowed_unsafe_sysctls: NotRequired[pulumi.Input[Sequence[pulumi.Input[
|
|
1626
|
+
allowed_unsafe_sysctls: NotRequired[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]
|
|
1628
1627
|
"""
|
|
1629
1628
|
allowedUnsafeSysctls is a list of explicitly allowed unsafe sysctls, defaults to none. Each entry is either a plain sysctl name or ends in "*" in which case it is considered as a prefix of allowed sysctls. Single * means all unsafe sysctls are allowed. Kubelet has to whitelist all allowed unsafe sysctls explicitly to avoid rejection.
|
|
1630
1629
|
|
|
1631
1630
|
Examples: e.g. "foo/*" allows "foo/bar", "foo/baz", etc. e.g. "foo.*" allows "foo.bar", "foo.baz", etc.
|
|
1632
1631
|
"""
|
|
1633
|
-
default_add_capabilities: NotRequired[pulumi.Input[Sequence[pulumi.Input[
|
|
1632
|
+
default_add_capabilities: NotRequired[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]
|
|
1634
1633
|
"""
|
|
1635
1634
|
defaultAddCapabilities is the default set of capabilities that will be added to the container unless the pod spec specifically drops the capability. You may not list a capability in both defaultAddCapabilities and requiredDropCapabilities. Capabilities added here are implicitly allowed, and need not be included in the allowedCapabilities list.
|
|
1636
1635
|
"""
|
|
1637
|
-
default_allow_privilege_escalation: NotRequired[pulumi.Input[
|
|
1636
|
+
default_allow_privilege_escalation: NotRequired[pulumi.Input[_builtins.bool]]
|
|
1638
1637
|
"""
|
|
1639
1638
|
defaultAllowPrivilegeEscalation controls the default setting for whether a process can gain more privileges than its parent process.
|
|
1640
1639
|
"""
|
|
1641
|
-
forbidden_sysctls: NotRequired[pulumi.Input[Sequence[pulumi.Input[
|
|
1640
|
+
forbidden_sysctls: NotRequired[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]
|
|
1642
1641
|
"""
|
|
1643
1642
|
forbiddenSysctls is a list of explicitly forbidden sysctls, defaults to none. Each entry is either a plain sysctl name or ends in "*" in which case it is considered as a prefix of forbidden sysctls. Single * means all sysctls are forbidden.
|
|
1644
1643
|
|
|
1645
1644
|
Examples: e.g. "foo/*" forbids "foo/bar", "foo/baz", etc. e.g. "foo.*" forbids "foo.bar", "foo.baz", etc.
|
|
1646
1645
|
"""
|
|
1647
|
-
host_ipc: NotRequired[pulumi.Input[
|
|
1646
|
+
host_ipc: NotRequired[pulumi.Input[_builtins.bool]]
|
|
1648
1647
|
"""
|
|
1649
1648
|
hostIPC determines if the policy allows the use of HostIPC in the pod spec.
|
|
1650
1649
|
"""
|
|
1651
|
-
host_network: NotRequired[pulumi.Input[
|
|
1650
|
+
host_network: NotRequired[pulumi.Input[_builtins.bool]]
|
|
1652
1651
|
"""
|
|
1653
1652
|
hostNetwork determines if the policy allows the use of HostNetwork in the pod spec.
|
|
1654
1653
|
"""
|
|
1655
|
-
host_pid: NotRequired[pulumi.Input[
|
|
1654
|
+
host_pid: NotRequired[pulumi.Input[_builtins.bool]]
|
|
1656
1655
|
"""
|
|
1657
1656
|
hostPID determines if the policy allows the use of HostPID in the pod spec.
|
|
1658
1657
|
"""
|
|
@@ -1660,15 +1659,15 @@ if not MYPY:
|
|
|
1660
1659
|
"""
|
|
1661
1660
|
hostPorts determines which host port ranges are allowed to be exposed.
|
|
1662
1661
|
"""
|
|
1663
|
-
privileged: NotRequired[pulumi.Input[
|
|
1662
|
+
privileged: NotRequired[pulumi.Input[_builtins.bool]]
|
|
1664
1663
|
"""
|
|
1665
1664
|
privileged determines if a pod can request to be run as privileged.
|
|
1666
1665
|
"""
|
|
1667
|
-
read_only_root_filesystem: NotRequired[pulumi.Input[
|
|
1666
|
+
read_only_root_filesystem: NotRequired[pulumi.Input[_builtins.bool]]
|
|
1668
1667
|
"""
|
|
1669
1668
|
readOnlyRootFilesystem when set to true will force containers to run with a read only root file system. If the container specifically requests to run with a non-read only root file system the PSP should deny the pod. If set to false the container may run with a read only root file system if it wishes but it will not be forced to.
|
|
1670
1669
|
"""
|
|
1671
|
-
required_drop_capabilities: NotRequired[pulumi.Input[Sequence[pulumi.Input[
|
|
1670
|
+
required_drop_capabilities: NotRequired[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]
|
|
1672
1671
|
"""
|
|
1673
1672
|
requiredDropCapabilities are the capabilities that will be dropped from the container. These are required to be dropped and cannot be added.
|
|
1674
1673
|
"""
|
|
@@ -1680,7 +1679,7 @@ if not MYPY:
|
|
|
1680
1679
|
"""
|
|
1681
1680
|
runtimeClass is the strategy that will dictate the allowable RuntimeClasses for a pod. If this field is omitted, the pod's runtimeClassName field is unrestricted. Enforcement of this field depends on the RuntimeClass feature gate being enabled.
|
|
1682
1681
|
"""
|
|
1683
|
-
volumes: NotRequired[pulumi.Input[Sequence[pulumi.Input[
|
|
1682
|
+
volumes: NotRequired[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]
|
|
1684
1683
|
"""
|
|
1685
1684
|
volumes is a white list of allowed volume plugins. Empty indicates that no volumes may be used. To allow all volumes you may use '*'.
|
|
1686
1685
|
"""
|
|
@@ -1694,56 +1693,56 @@ class PodSecurityPolicySpecArgs:
|
|
|
1694
1693
|
run_as_user: pulumi.Input['RunAsUserStrategyOptionsArgs'],
|
|
1695
1694
|
se_linux: pulumi.Input['SELinuxStrategyOptionsArgs'],
|
|
1696
1695
|
supplemental_groups: pulumi.Input['SupplementalGroupsStrategyOptionsArgs'],
|
|
1697
|
-
allow_privilege_escalation: Optional[pulumi.Input[
|
|
1696
|
+
allow_privilege_escalation: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
1698
1697
|
allowed_csi_drivers: Optional[pulumi.Input[Sequence[pulumi.Input['AllowedCSIDriverArgs']]]] = None,
|
|
1699
|
-
allowed_capabilities: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
1698
|
+
allowed_capabilities: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
1700
1699
|
allowed_flex_volumes: Optional[pulumi.Input[Sequence[pulumi.Input['AllowedFlexVolumeArgs']]]] = None,
|
|
1701
1700
|
allowed_host_paths: Optional[pulumi.Input[Sequence[pulumi.Input['AllowedHostPathArgs']]]] = None,
|
|
1702
|
-
allowed_proc_mount_types: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
1703
|
-
allowed_unsafe_sysctls: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
1704
|
-
default_add_capabilities: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
1705
|
-
default_allow_privilege_escalation: Optional[pulumi.Input[
|
|
1706
|
-
forbidden_sysctls: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
1707
|
-
host_ipc: Optional[pulumi.Input[
|
|
1708
|
-
host_network: Optional[pulumi.Input[
|
|
1709
|
-
host_pid: Optional[pulumi.Input[
|
|
1701
|
+
allowed_proc_mount_types: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
1702
|
+
allowed_unsafe_sysctls: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
1703
|
+
default_add_capabilities: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
1704
|
+
default_allow_privilege_escalation: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
1705
|
+
forbidden_sysctls: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
1706
|
+
host_ipc: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
1707
|
+
host_network: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
1708
|
+
host_pid: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
1710
1709
|
host_ports: Optional[pulumi.Input[Sequence[pulumi.Input['HostPortRangeArgs']]]] = None,
|
|
1711
|
-
privileged: Optional[pulumi.Input[
|
|
1712
|
-
read_only_root_filesystem: Optional[pulumi.Input[
|
|
1713
|
-
required_drop_capabilities: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
1710
|
+
privileged: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
1711
|
+
read_only_root_filesystem: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
1712
|
+
required_drop_capabilities: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
1714
1713
|
run_as_group: Optional[pulumi.Input['RunAsGroupStrategyOptionsArgs']] = None,
|
|
1715
1714
|
runtime_class: Optional[pulumi.Input['RuntimeClassStrategyOptionsArgs']] = None,
|
|
1716
|
-
volumes: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
1715
|
+
volumes: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None):
|
|
1717
1716
|
"""
|
|
1718
1717
|
PodSecurityPolicySpec defines the policy enforced.
|
|
1719
1718
|
:param pulumi.Input['FSGroupStrategyOptionsArgs'] fs_group: fsGroup is the strategy that will dictate what fs group is used by the SecurityContext.
|
|
1720
1719
|
:param pulumi.Input['RunAsUserStrategyOptionsArgs'] run_as_user: runAsUser is the strategy that will dictate the allowable RunAsUser values that may be set.
|
|
1721
1720
|
:param pulumi.Input['SELinuxStrategyOptionsArgs'] se_linux: seLinux is the strategy that will dictate the allowable labels that may be set.
|
|
1722
1721
|
:param pulumi.Input['SupplementalGroupsStrategyOptionsArgs'] supplemental_groups: supplementalGroups is the strategy that will dictate what supplemental groups are used by the SecurityContext.
|
|
1723
|
-
:param pulumi.Input[
|
|
1722
|
+
:param pulumi.Input[_builtins.bool] allow_privilege_escalation: allowPrivilegeEscalation determines if a pod can request to allow privilege escalation. If unspecified, defaults to true.
|
|
1724
1723
|
:param pulumi.Input[Sequence[pulumi.Input['AllowedCSIDriverArgs']]] allowed_csi_drivers: AllowedCSIDrivers is a whitelist of inline CSI drivers that must be explicitly set to be embedded within a pod spec. An empty value indicates that any CSI driver can be used for inline ephemeral volumes. This is an alpha field, and is only honored if the API server enables the CSIInlineVolume feature gate.
|
|
1725
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
1724
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] allowed_capabilities: allowedCapabilities is a list of capabilities that can be requested to add to the container. Capabilities in this field may be added at the pod author's discretion. You must not list a capability in both allowedCapabilities and requiredDropCapabilities.
|
|
1726
1725
|
:param pulumi.Input[Sequence[pulumi.Input['AllowedFlexVolumeArgs']]] allowed_flex_volumes: allowedFlexVolumes is a whitelist of allowed Flexvolumes. Empty or nil indicates that all Flexvolumes may be used. This parameter is effective only when the usage of the Flexvolumes is allowed in the "volumes" field.
|
|
1727
1726
|
:param pulumi.Input[Sequence[pulumi.Input['AllowedHostPathArgs']]] allowed_host_paths: allowedHostPaths is a white list of allowed host paths. Empty indicates that all host paths may be used.
|
|
1728
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
1729
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
1727
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] allowed_proc_mount_types: AllowedProcMountTypes is a whitelist of allowed ProcMountTypes. Empty or nil indicates that only the DefaultProcMountType may be used. This requires the ProcMountType feature flag to be enabled.
|
|
1728
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] allowed_unsafe_sysctls: allowedUnsafeSysctls is a list of explicitly allowed unsafe sysctls, defaults to none. Each entry is either a plain sysctl name or ends in "*" in which case it is considered as a prefix of allowed sysctls. Single * means all unsafe sysctls are allowed. Kubelet has to whitelist all allowed unsafe sysctls explicitly to avoid rejection.
|
|
1730
1729
|
|
|
1731
1730
|
Examples: e.g. "foo/*" allows "foo/bar", "foo/baz", etc. e.g. "foo.*" allows "foo.bar", "foo.baz", etc.
|
|
1732
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
1733
|
-
:param pulumi.Input[
|
|
1734
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
1731
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] default_add_capabilities: defaultAddCapabilities is the default set of capabilities that will be added to the container unless the pod spec specifically drops the capability. You may not list a capability in both defaultAddCapabilities and requiredDropCapabilities. Capabilities added here are implicitly allowed, and need not be included in the allowedCapabilities list.
|
|
1732
|
+
:param pulumi.Input[_builtins.bool] default_allow_privilege_escalation: defaultAllowPrivilegeEscalation controls the default setting for whether a process can gain more privileges than its parent process.
|
|
1733
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] forbidden_sysctls: forbiddenSysctls is a list of explicitly forbidden sysctls, defaults to none. Each entry is either a plain sysctl name or ends in "*" in which case it is considered as a prefix of forbidden sysctls. Single * means all sysctls are forbidden.
|
|
1735
1734
|
|
|
1736
1735
|
Examples: e.g. "foo/*" forbids "foo/bar", "foo/baz", etc. e.g. "foo.*" forbids "foo.bar", "foo.baz", etc.
|
|
1737
|
-
:param pulumi.Input[
|
|
1738
|
-
:param pulumi.Input[
|
|
1739
|
-
:param pulumi.Input[
|
|
1736
|
+
:param pulumi.Input[_builtins.bool] host_ipc: hostIPC determines if the policy allows the use of HostIPC in the pod spec.
|
|
1737
|
+
:param pulumi.Input[_builtins.bool] host_network: hostNetwork determines if the policy allows the use of HostNetwork in the pod spec.
|
|
1738
|
+
:param pulumi.Input[_builtins.bool] host_pid: hostPID determines if the policy allows the use of HostPID in the pod spec.
|
|
1740
1739
|
:param pulumi.Input[Sequence[pulumi.Input['HostPortRangeArgs']]] host_ports: hostPorts determines which host port ranges are allowed to be exposed.
|
|
1741
|
-
:param pulumi.Input[
|
|
1742
|
-
:param pulumi.Input[
|
|
1743
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
1740
|
+
:param pulumi.Input[_builtins.bool] privileged: privileged determines if a pod can request to be run as privileged.
|
|
1741
|
+
:param pulumi.Input[_builtins.bool] read_only_root_filesystem: readOnlyRootFilesystem when set to true will force containers to run with a read only root file system. If the container specifically requests to run with a non-read only root file system the PSP should deny the pod. If set to false the container may run with a read only root file system if it wishes but it will not be forced to.
|
|
1742
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] required_drop_capabilities: requiredDropCapabilities are the capabilities that will be dropped from the container. These are required to be dropped and cannot be added.
|
|
1744
1743
|
:param pulumi.Input['RunAsGroupStrategyOptionsArgs'] run_as_group: RunAsGroup is the strategy that will dictate the allowable RunAsGroup values that may be set. If this field is omitted, the pod's RunAsGroup can take any value. This field requires the RunAsGroup feature gate to be enabled.
|
|
1745
1744
|
:param pulumi.Input['RuntimeClassStrategyOptionsArgs'] runtime_class: runtimeClass is the strategy that will dictate the allowable RuntimeClasses for a pod. If this field is omitted, the pod's runtimeClassName field is unrestricted. Enforcement of this field depends on the RuntimeClass feature gate being enabled.
|
|
1746
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
1745
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] volumes: volumes is a white list of allowed volume plugins. Empty indicates that no volumes may be used. To allow all volumes you may use '*'.
|
|
1747
1746
|
"""
|
|
1748
1747
|
pulumi.set(__self__, "fs_group", fs_group)
|
|
1749
1748
|
pulumi.set(__self__, "run_as_user", run_as_user)
|
|
@@ -1790,7 +1789,7 @@ class PodSecurityPolicySpecArgs:
|
|
|
1790
1789
|
if volumes is not None:
|
|
1791
1790
|
pulumi.set(__self__, "volumes", volumes)
|
|
1792
1791
|
|
|
1793
|
-
@property
|
|
1792
|
+
@_builtins.property
|
|
1794
1793
|
@pulumi.getter(name="fsGroup")
|
|
1795
1794
|
def fs_group(self) -> pulumi.Input['FSGroupStrategyOptionsArgs']:
|
|
1796
1795
|
"""
|
|
@@ -1802,7 +1801,7 @@ class PodSecurityPolicySpecArgs:
|
|
|
1802
1801
|
def fs_group(self, value: pulumi.Input['FSGroupStrategyOptionsArgs']):
|
|
1803
1802
|
pulumi.set(self, "fs_group", value)
|
|
1804
1803
|
|
|
1805
|
-
@property
|
|
1804
|
+
@_builtins.property
|
|
1806
1805
|
@pulumi.getter(name="runAsUser")
|
|
1807
1806
|
def run_as_user(self) -> pulumi.Input['RunAsUserStrategyOptionsArgs']:
|
|
1808
1807
|
"""
|
|
@@ -1814,7 +1813,7 @@ class PodSecurityPolicySpecArgs:
|
|
|
1814
1813
|
def run_as_user(self, value: pulumi.Input['RunAsUserStrategyOptionsArgs']):
|
|
1815
1814
|
pulumi.set(self, "run_as_user", value)
|
|
1816
1815
|
|
|
1817
|
-
@property
|
|
1816
|
+
@_builtins.property
|
|
1818
1817
|
@pulumi.getter(name="seLinux")
|
|
1819
1818
|
def se_linux(self) -> pulumi.Input['SELinuxStrategyOptionsArgs']:
|
|
1820
1819
|
"""
|
|
@@ -1826,7 +1825,7 @@ class PodSecurityPolicySpecArgs:
|
|
|
1826
1825
|
def se_linux(self, value: pulumi.Input['SELinuxStrategyOptionsArgs']):
|
|
1827
1826
|
pulumi.set(self, "se_linux", value)
|
|
1828
1827
|
|
|
1829
|
-
@property
|
|
1828
|
+
@_builtins.property
|
|
1830
1829
|
@pulumi.getter(name="supplementalGroups")
|
|
1831
1830
|
def supplemental_groups(self) -> pulumi.Input['SupplementalGroupsStrategyOptionsArgs']:
|
|
1832
1831
|
"""
|
|
@@ -1838,19 +1837,19 @@ class PodSecurityPolicySpecArgs:
|
|
|
1838
1837
|
def supplemental_groups(self, value: pulumi.Input['SupplementalGroupsStrategyOptionsArgs']):
|
|
1839
1838
|
pulumi.set(self, "supplemental_groups", value)
|
|
1840
1839
|
|
|
1841
|
-
@property
|
|
1840
|
+
@_builtins.property
|
|
1842
1841
|
@pulumi.getter(name="allowPrivilegeEscalation")
|
|
1843
|
-
def allow_privilege_escalation(self) -> Optional[pulumi.Input[
|
|
1842
|
+
def allow_privilege_escalation(self) -> Optional[pulumi.Input[_builtins.bool]]:
|
|
1844
1843
|
"""
|
|
1845
1844
|
allowPrivilegeEscalation determines if a pod can request to allow privilege escalation. If unspecified, defaults to true.
|
|
1846
1845
|
"""
|
|
1847
1846
|
return pulumi.get(self, "allow_privilege_escalation")
|
|
1848
1847
|
|
|
1849
1848
|
@allow_privilege_escalation.setter
|
|
1850
|
-
def allow_privilege_escalation(self, value: Optional[pulumi.Input[
|
|
1849
|
+
def allow_privilege_escalation(self, value: Optional[pulumi.Input[_builtins.bool]]):
|
|
1851
1850
|
pulumi.set(self, "allow_privilege_escalation", value)
|
|
1852
1851
|
|
|
1853
|
-
@property
|
|
1852
|
+
@_builtins.property
|
|
1854
1853
|
@pulumi.getter(name="allowedCSIDrivers")
|
|
1855
1854
|
def allowed_csi_drivers(self) -> Optional[pulumi.Input[Sequence[pulumi.Input['AllowedCSIDriverArgs']]]]:
|
|
1856
1855
|
"""
|
|
@@ -1862,19 +1861,19 @@ class PodSecurityPolicySpecArgs:
|
|
|
1862
1861
|
def allowed_csi_drivers(self, value: Optional[pulumi.Input[Sequence[pulumi.Input['AllowedCSIDriverArgs']]]]):
|
|
1863
1862
|
pulumi.set(self, "allowed_csi_drivers", value)
|
|
1864
1863
|
|
|
1865
|
-
@property
|
|
1864
|
+
@_builtins.property
|
|
1866
1865
|
@pulumi.getter(name="allowedCapabilities")
|
|
1867
|
-
def allowed_capabilities(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
1866
|
+
def allowed_capabilities(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
|
1868
1867
|
"""
|
|
1869
1868
|
allowedCapabilities is a list of capabilities that can be requested to add to the container. Capabilities in this field may be added at the pod author's discretion. You must not list a capability in both allowedCapabilities and requiredDropCapabilities.
|
|
1870
1869
|
"""
|
|
1871
1870
|
return pulumi.get(self, "allowed_capabilities")
|
|
1872
1871
|
|
|
1873
1872
|
@allowed_capabilities.setter
|
|
1874
|
-
def allowed_capabilities(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
1873
|
+
def allowed_capabilities(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
|
1875
1874
|
pulumi.set(self, "allowed_capabilities", value)
|
|
1876
1875
|
|
|
1877
|
-
@property
|
|
1876
|
+
@_builtins.property
|
|
1878
1877
|
@pulumi.getter(name="allowedFlexVolumes")
|
|
1879
1878
|
def allowed_flex_volumes(self) -> Optional[pulumi.Input[Sequence[pulumi.Input['AllowedFlexVolumeArgs']]]]:
|
|
1880
1879
|
"""
|
|
@@ -1886,7 +1885,7 @@ class PodSecurityPolicySpecArgs:
|
|
|
1886
1885
|
def allowed_flex_volumes(self, value: Optional[pulumi.Input[Sequence[pulumi.Input['AllowedFlexVolumeArgs']]]]):
|
|
1887
1886
|
pulumi.set(self, "allowed_flex_volumes", value)
|
|
1888
1887
|
|
|
1889
|
-
@property
|
|
1888
|
+
@_builtins.property
|
|
1890
1889
|
@pulumi.getter(name="allowedHostPaths")
|
|
1891
1890
|
def allowed_host_paths(self) -> Optional[pulumi.Input[Sequence[pulumi.Input['AllowedHostPathArgs']]]]:
|
|
1892
1891
|
"""
|
|
@@ -1898,21 +1897,21 @@ class PodSecurityPolicySpecArgs:
|
|
|
1898
1897
|
def allowed_host_paths(self, value: Optional[pulumi.Input[Sequence[pulumi.Input['AllowedHostPathArgs']]]]):
|
|
1899
1898
|
pulumi.set(self, "allowed_host_paths", value)
|
|
1900
1899
|
|
|
1901
|
-
@property
|
|
1900
|
+
@_builtins.property
|
|
1902
1901
|
@pulumi.getter(name="allowedProcMountTypes")
|
|
1903
|
-
def allowed_proc_mount_types(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
1902
|
+
def allowed_proc_mount_types(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
|
1904
1903
|
"""
|
|
1905
1904
|
AllowedProcMountTypes is a whitelist of allowed ProcMountTypes. Empty or nil indicates that only the DefaultProcMountType may be used. This requires the ProcMountType feature flag to be enabled.
|
|
1906
1905
|
"""
|
|
1907
1906
|
return pulumi.get(self, "allowed_proc_mount_types")
|
|
1908
1907
|
|
|
1909
1908
|
@allowed_proc_mount_types.setter
|
|
1910
|
-
def allowed_proc_mount_types(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
1909
|
+
def allowed_proc_mount_types(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
|
1911
1910
|
pulumi.set(self, "allowed_proc_mount_types", value)
|
|
1912
1911
|
|
|
1913
|
-
@property
|
|
1912
|
+
@_builtins.property
|
|
1914
1913
|
@pulumi.getter(name="allowedUnsafeSysctls")
|
|
1915
|
-
def allowed_unsafe_sysctls(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
1914
|
+
def allowed_unsafe_sysctls(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
|
1916
1915
|
"""
|
|
1917
1916
|
allowedUnsafeSysctls is a list of explicitly allowed unsafe sysctls, defaults to none. Each entry is either a plain sysctl name or ends in "*" in which case it is considered as a prefix of allowed sysctls. Single * means all unsafe sysctls are allowed. Kubelet has to whitelist all allowed unsafe sysctls explicitly to avoid rejection.
|
|
1918
1917
|
|
|
@@ -1921,36 +1920,36 @@ class PodSecurityPolicySpecArgs:
|
|
|
1921
1920
|
return pulumi.get(self, "allowed_unsafe_sysctls")
|
|
1922
1921
|
|
|
1923
1922
|
@allowed_unsafe_sysctls.setter
|
|
1924
|
-
def allowed_unsafe_sysctls(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
1923
|
+
def allowed_unsafe_sysctls(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
|
1925
1924
|
pulumi.set(self, "allowed_unsafe_sysctls", value)
|
|
1926
1925
|
|
|
1927
|
-
@property
|
|
1926
|
+
@_builtins.property
|
|
1928
1927
|
@pulumi.getter(name="defaultAddCapabilities")
|
|
1929
|
-
def default_add_capabilities(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
1928
|
+
def default_add_capabilities(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
|
1930
1929
|
"""
|
|
1931
1930
|
defaultAddCapabilities is the default set of capabilities that will be added to the container unless the pod spec specifically drops the capability. You may not list a capability in both defaultAddCapabilities and requiredDropCapabilities. Capabilities added here are implicitly allowed, and need not be included in the allowedCapabilities list.
|
|
1932
1931
|
"""
|
|
1933
1932
|
return pulumi.get(self, "default_add_capabilities")
|
|
1934
1933
|
|
|
1935
1934
|
@default_add_capabilities.setter
|
|
1936
|
-
def default_add_capabilities(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
1935
|
+
def default_add_capabilities(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
|
1937
1936
|
pulumi.set(self, "default_add_capabilities", value)
|
|
1938
1937
|
|
|
1939
|
-
@property
|
|
1938
|
+
@_builtins.property
|
|
1940
1939
|
@pulumi.getter(name="defaultAllowPrivilegeEscalation")
|
|
1941
|
-
def default_allow_privilege_escalation(self) -> Optional[pulumi.Input[
|
|
1940
|
+
def default_allow_privilege_escalation(self) -> Optional[pulumi.Input[_builtins.bool]]:
|
|
1942
1941
|
"""
|
|
1943
1942
|
defaultAllowPrivilegeEscalation controls the default setting for whether a process can gain more privileges than its parent process.
|
|
1944
1943
|
"""
|
|
1945
1944
|
return pulumi.get(self, "default_allow_privilege_escalation")
|
|
1946
1945
|
|
|
1947
1946
|
@default_allow_privilege_escalation.setter
|
|
1948
|
-
def default_allow_privilege_escalation(self, value: Optional[pulumi.Input[
|
|
1947
|
+
def default_allow_privilege_escalation(self, value: Optional[pulumi.Input[_builtins.bool]]):
|
|
1949
1948
|
pulumi.set(self, "default_allow_privilege_escalation", value)
|
|
1950
1949
|
|
|
1951
|
-
@property
|
|
1950
|
+
@_builtins.property
|
|
1952
1951
|
@pulumi.getter(name="forbiddenSysctls")
|
|
1953
|
-
def forbidden_sysctls(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
1952
|
+
def forbidden_sysctls(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
|
1954
1953
|
"""
|
|
1955
1954
|
forbiddenSysctls is a list of explicitly forbidden sysctls, defaults to none. Each entry is either a plain sysctl name or ends in "*" in which case it is considered as a prefix of forbidden sysctls. Single * means all sysctls are forbidden.
|
|
1956
1955
|
|
|
@@ -1959,46 +1958,46 @@ class PodSecurityPolicySpecArgs:
|
|
|
1959
1958
|
return pulumi.get(self, "forbidden_sysctls")
|
|
1960
1959
|
|
|
1961
1960
|
@forbidden_sysctls.setter
|
|
1962
|
-
def forbidden_sysctls(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
1961
|
+
def forbidden_sysctls(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
|
1963
1962
|
pulumi.set(self, "forbidden_sysctls", value)
|
|
1964
1963
|
|
|
1965
|
-
@property
|
|
1964
|
+
@_builtins.property
|
|
1966
1965
|
@pulumi.getter(name="hostIPC")
|
|
1967
|
-
def host_ipc(self) -> Optional[pulumi.Input[
|
|
1966
|
+
def host_ipc(self) -> Optional[pulumi.Input[_builtins.bool]]:
|
|
1968
1967
|
"""
|
|
1969
1968
|
hostIPC determines if the policy allows the use of HostIPC in the pod spec.
|
|
1970
1969
|
"""
|
|
1971
1970
|
return pulumi.get(self, "host_ipc")
|
|
1972
1971
|
|
|
1973
1972
|
@host_ipc.setter
|
|
1974
|
-
def host_ipc(self, value: Optional[pulumi.Input[
|
|
1973
|
+
def host_ipc(self, value: Optional[pulumi.Input[_builtins.bool]]):
|
|
1975
1974
|
pulumi.set(self, "host_ipc", value)
|
|
1976
1975
|
|
|
1977
|
-
@property
|
|
1976
|
+
@_builtins.property
|
|
1978
1977
|
@pulumi.getter(name="hostNetwork")
|
|
1979
|
-
def host_network(self) -> Optional[pulumi.Input[
|
|
1978
|
+
def host_network(self) -> Optional[pulumi.Input[_builtins.bool]]:
|
|
1980
1979
|
"""
|
|
1981
1980
|
hostNetwork determines if the policy allows the use of HostNetwork in the pod spec.
|
|
1982
1981
|
"""
|
|
1983
1982
|
return pulumi.get(self, "host_network")
|
|
1984
1983
|
|
|
1985
1984
|
@host_network.setter
|
|
1986
|
-
def host_network(self, value: Optional[pulumi.Input[
|
|
1985
|
+
def host_network(self, value: Optional[pulumi.Input[_builtins.bool]]):
|
|
1987
1986
|
pulumi.set(self, "host_network", value)
|
|
1988
1987
|
|
|
1989
|
-
@property
|
|
1988
|
+
@_builtins.property
|
|
1990
1989
|
@pulumi.getter(name="hostPID")
|
|
1991
|
-
def host_pid(self) -> Optional[pulumi.Input[
|
|
1990
|
+
def host_pid(self) -> Optional[pulumi.Input[_builtins.bool]]:
|
|
1992
1991
|
"""
|
|
1993
1992
|
hostPID determines if the policy allows the use of HostPID in the pod spec.
|
|
1994
1993
|
"""
|
|
1995
1994
|
return pulumi.get(self, "host_pid")
|
|
1996
1995
|
|
|
1997
1996
|
@host_pid.setter
|
|
1998
|
-
def host_pid(self, value: Optional[pulumi.Input[
|
|
1997
|
+
def host_pid(self, value: Optional[pulumi.Input[_builtins.bool]]):
|
|
1999
1998
|
pulumi.set(self, "host_pid", value)
|
|
2000
1999
|
|
|
2001
|
-
@property
|
|
2000
|
+
@_builtins.property
|
|
2002
2001
|
@pulumi.getter(name="hostPorts")
|
|
2003
2002
|
def host_ports(self) -> Optional[pulumi.Input[Sequence[pulumi.Input['HostPortRangeArgs']]]]:
|
|
2004
2003
|
"""
|
|
@@ -2010,43 +2009,43 @@ class PodSecurityPolicySpecArgs:
|
|
|
2010
2009
|
def host_ports(self, value: Optional[pulumi.Input[Sequence[pulumi.Input['HostPortRangeArgs']]]]):
|
|
2011
2010
|
pulumi.set(self, "host_ports", value)
|
|
2012
2011
|
|
|
2013
|
-
@property
|
|
2012
|
+
@_builtins.property
|
|
2014
2013
|
@pulumi.getter
|
|
2015
|
-
def privileged(self) -> Optional[pulumi.Input[
|
|
2014
|
+
def privileged(self) -> Optional[pulumi.Input[_builtins.bool]]:
|
|
2016
2015
|
"""
|
|
2017
2016
|
privileged determines if a pod can request to be run as privileged.
|
|
2018
2017
|
"""
|
|
2019
2018
|
return pulumi.get(self, "privileged")
|
|
2020
2019
|
|
|
2021
2020
|
@privileged.setter
|
|
2022
|
-
def privileged(self, value: Optional[pulumi.Input[
|
|
2021
|
+
def privileged(self, value: Optional[pulumi.Input[_builtins.bool]]):
|
|
2023
2022
|
pulumi.set(self, "privileged", value)
|
|
2024
2023
|
|
|
2025
|
-
@property
|
|
2024
|
+
@_builtins.property
|
|
2026
2025
|
@pulumi.getter(name="readOnlyRootFilesystem")
|
|
2027
|
-
def read_only_root_filesystem(self) -> Optional[pulumi.Input[
|
|
2026
|
+
def read_only_root_filesystem(self) -> Optional[pulumi.Input[_builtins.bool]]:
|
|
2028
2027
|
"""
|
|
2029
2028
|
readOnlyRootFilesystem when set to true will force containers to run with a read only root file system. If the container specifically requests to run with a non-read only root file system the PSP should deny the pod. If set to false the container may run with a read only root file system if it wishes but it will not be forced to.
|
|
2030
2029
|
"""
|
|
2031
2030
|
return pulumi.get(self, "read_only_root_filesystem")
|
|
2032
2031
|
|
|
2033
2032
|
@read_only_root_filesystem.setter
|
|
2034
|
-
def read_only_root_filesystem(self, value: Optional[pulumi.Input[
|
|
2033
|
+
def read_only_root_filesystem(self, value: Optional[pulumi.Input[_builtins.bool]]):
|
|
2035
2034
|
pulumi.set(self, "read_only_root_filesystem", value)
|
|
2036
2035
|
|
|
2037
|
-
@property
|
|
2036
|
+
@_builtins.property
|
|
2038
2037
|
@pulumi.getter(name="requiredDropCapabilities")
|
|
2039
|
-
def required_drop_capabilities(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
2038
|
+
def required_drop_capabilities(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
|
2040
2039
|
"""
|
|
2041
2040
|
requiredDropCapabilities are the capabilities that will be dropped from the container. These are required to be dropped and cannot be added.
|
|
2042
2041
|
"""
|
|
2043
2042
|
return pulumi.get(self, "required_drop_capabilities")
|
|
2044
2043
|
|
|
2045
2044
|
@required_drop_capabilities.setter
|
|
2046
|
-
def required_drop_capabilities(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
2045
|
+
def required_drop_capabilities(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
|
2047
2046
|
pulumi.set(self, "required_drop_capabilities", value)
|
|
2048
2047
|
|
|
2049
|
-
@property
|
|
2048
|
+
@_builtins.property
|
|
2050
2049
|
@pulumi.getter(name="runAsGroup")
|
|
2051
2050
|
def run_as_group(self) -> Optional[pulumi.Input['RunAsGroupStrategyOptionsArgs']]:
|
|
2052
2051
|
"""
|
|
@@ -2058,7 +2057,7 @@ class PodSecurityPolicySpecArgs:
|
|
|
2058
2057
|
def run_as_group(self, value: Optional[pulumi.Input['RunAsGroupStrategyOptionsArgs']]):
|
|
2059
2058
|
pulumi.set(self, "run_as_group", value)
|
|
2060
2059
|
|
|
2061
|
-
@property
|
|
2060
|
+
@_builtins.property
|
|
2062
2061
|
@pulumi.getter(name="runtimeClass")
|
|
2063
2062
|
def runtime_class(self) -> Optional[pulumi.Input['RuntimeClassStrategyOptionsArgs']]:
|
|
2064
2063
|
"""
|
|
@@ -2070,16 +2069,16 @@ class PodSecurityPolicySpecArgs:
|
|
|
2070
2069
|
def runtime_class(self, value: Optional[pulumi.Input['RuntimeClassStrategyOptionsArgs']]):
|
|
2071
2070
|
pulumi.set(self, "runtime_class", value)
|
|
2072
2071
|
|
|
2073
|
-
@property
|
|
2072
|
+
@_builtins.property
|
|
2074
2073
|
@pulumi.getter
|
|
2075
|
-
def volumes(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
2074
|
+
def volumes(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
|
2076
2075
|
"""
|
|
2077
2076
|
volumes is a white list of allowed volume plugins. Empty indicates that no volumes may be used. To allow all volumes you may use '*'.
|
|
2078
2077
|
"""
|
|
2079
2078
|
return pulumi.get(self, "volumes")
|
|
2080
2079
|
|
|
2081
2080
|
@volumes.setter
|
|
2082
|
-
def volumes(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
2081
|
+
def volumes(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
|
2083
2082
|
pulumi.set(self, "volumes", value)
|
|
2084
2083
|
|
|
2085
2084
|
|
|
@@ -2088,11 +2087,11 @@ if not MYPY:
|
|
|
2088
2087
|
"""
|
|
2089
2088
|
PodSecurityPolicy governs the ability to make requests that affect the Security Context that will be applied to a pod and container.
|
|
2090
2089
|
"""
|
|
2091
|
-
api_version: NotRequired[pulumi.Input[
|
|
2090
|
+
api_version: NotRequired[pulumi.Input[_builtins.str]]
|
|
2092
2091
|
"""
|
|
2093
2092
|
APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
|
|
2094
2093
|
"""
|
|
2095
|
-
kind: NotRequired[pulumi.Input[
|
|
2094
|
+
kind: NotRequired[pulumi.Input[_builtins.str]]
|
|
2096
2095
|
"""
|
|
2097
2096
|
Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
|
|
2098
2097
|
"""
|
|
@@ -2110,14 +2109,14 @@ elif False:
|
|
|
2110
2109
|
@pulumi.input_type
|
|
2111
2110
|
class PodSecurityPolicyArgs:
|
|
2112
2111
|
def __init__(__self__, *,
|
|
2113
|
-
api_version: Optional[pulumi.Input[
|
|
2114
|
-
kind: Optional[pulumi.Input[
|
|
2112
|
+
api_version: Optional[pulumi.Input[_builtins.str]] = None,
|
|
2113
|
+
kind: Optional[pulumi.Input[_builtins.str]] = None,
|
|
2115
2114
|
metadata: Optional[pulumi.Input['_meta.v1.ObjectMetaArgs']] = None,
|
|
2116
2115
|
spec: Optional[pulumi.Input['PodSecurityPolicySpecArgs']] = None):
|
|
2117
2116
|
"""
|
|
2118
2117
|
PodSecurityPolicy governs the ability to make requests that affect the Security Context that will be applied to a pod and container.
|
|
2119
|
-
:param pulumi.Input[
|
|
2120
|
-
:param pulumi.Input[
|
|
2118
|
+
:param pulumi.Input[_builtins.str] api_version: APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
|
|
2119
|
+
:param pulumi.Input[_builtins.str] kind: Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
|
|
2121
2120
|
:param pulumi.Input['_meta.v1.ObjectMetaArgs'] metadata: Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
|
|
2122
2121
|
:param pulumi.Input['PodSecurityPolicySpecArgs'] spec: spec defines the policy enforced.
|
|
2123
2122
|
"""
|
|
@@ -2130,31 +2129,31 @@ class PodSecurityPolicyArgs:
|
|
|
2130
2129
|
if spec is not None:
|
|
2131
2130
|
pulumi.set(__self__, "spec", spec)
|
|
2132
2131
|
|
|
2133
|
-
@property
|
|
2132
|
+
@_builtins.property
|
|
2134
2133
|
@pulumi.getter(name="apiVersion")
|
|
2135
|
-
def api_version(self) -> Optional[pulumi.Input[
|
|
2134
|
+
def api_version(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
2136
2135
|
"""
|
|
2137
2136
|
APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
|
|
2138
2137
|
"""
|
|
2139
2138
|
return pulumi.get(self, "api_version")
|
|
2140
2139
|
|
|
2141
2140
|
@api_version.setter
|
|
2142
|
-
def api_version(self, value: Optional[pulumi.Input[
|
|
2141
|
+
def api_version(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
2143
2142
|
pulumi.set(self, "api_version", value)
|
|
2144
2143
|
|
|
2145
|
-
@property
|
|
2144
|
+
@_builtins.property
|
|
2146
2145
|
@pulumi.getter
|
|
2147
|
-
def kind(self) -> Optional[pulumi.Input[
|
|
2146
|
+
def kind(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
2148
2147
|
"""
|
|
2149
2148
|
Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
|
|
2150
2149
|
"""
|
|
2151
2150
|
return pulumi.get(self, "kind")
|
|
2152
2151
|
|
|
2153
2152
|
@kind.setter
|
|
2154
|
-
def kind(self, value: Optional[pulumi.Input[
|
|
2153
|
+
def kind(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
2155
2154
|
pulumi.set(self, "kind", value)
|
|
2156
2155
|
|
|
2157
|
-
@property
|
|
2156
|
+
@_builtins.property
|
|
2158
2157
|
@pulumi.getter
|
|
2159
2158
|
def metadata(self) -> Optional[pulumi.Input['_meta.v1.ObjectMetaArgs']]:
|
|
2160
2159
|
"""
|
|
@@ -2166,7 +2165,7 @@ class PodSecurityPolicyArgs:
|
|
|
2166
2165
|
def metadata(self, value: Optional[pulumi.Input['_meta.v1.ObjectMetaArgs']]):
|
|
2167
2166
|
pulumi.set(self, "metadata", value)
|
|
2168
2167
|
|
|
2169
|
-
@property
|
|
2168
|
+
@_builtins.property
|
|
2170
2169
|
@pulumi.getter
|
|
2171
2170
|
def spec(self) -> Optional[pulumi.Input['PodSecurityPolicySpecArgs']]:
|
|
2172
2171
|
"""
|
|
@@ -2188,7 +2187,7 @@ if not MYPY:
|
|
|
2188
2187
|
"""
|
|
2189
2188
|
ranges are the allowed ranges of gids that may be used. If you would like to force a single gid then supply a single range with the same start and end. Required for MustRunAs.
|
|
2190
2189
|
"""
|
|
2191
|
-
rule: NotRequired[pulumi.Input[
|
|
2190
|
+
rule: NotRequired[pulumi.Input[_builtins.str]]
|
|
2192
2191
|
"""
|
|
2193
2192
|
rule is the strategy that will dictate the allowable RunAsGroup values that may be set.
|
|
2194
2193
|
"""
|
|
@@ -2199,18 +2198,18 @@ elif False:
|
|
|
2199
2198
|
class RunAsGroupStrategyOptionsPatchArgs:
|
|
2200
2199
|
def __init__(__self__, *,
|
|
2201
2200
|
ranges: Optional[pulumi.Input[Sequence[pulumi.Input['IDRangePatchArgs']]]] = None,
|
|
2202
|
-
rule: Optional[pulumi.Input[
|
|
2201
|
+
rule: Optional[pulumi.Input[_builtins.str]] = None):
|
|
2203
2202
|
"""
|
|
2204
2203
|
RunAsGroupStrategyOptions defines the strategy type and any options used to create the strategy.
|
|
2205
2204
|
:param pulumi.Input[Sequence[pulumi.Input['IDRangePatchArgs']]] ranges: ranges are the allowed ranges of gids that may be used. If you would like to force a single gid then supply a single range with the same start and end. Required for MustRunAs.
|
|
2206
|
-
:param pulumi.Input[
|
|
2205
|
+
:param pulumi.Input[_builtins.str] rule: rule is the strategy that will dictate the allowable RunAsGroup values that may be set.
|
|
2207
2206
|
"""
|
|
2208
2207
|
if ranges is not None:
|
|
2209
2208
|
pulumi.set(__self__, "ranges", ranges)
|
|
2210
2209
|
if rule is not None:
|
|
2211
2210
|
pulumi.set(__self__, "rule", rule)
|
|
2212
2211
|
|
|
2213
|
-
@property
|
|
2212
|
+
@_builtins.property
|
|
2214
2213
|
@pulumi.getter
|
|
2215
2214
|
def ranges(self) -> Optional[pulumi.Input[Sequence[pulumi.Input['IDRangePatchArgs']]]]:
|
|
2216
2215
|
"""
|
|
@@ -2222,16 +2221,16 @@ class RunAsGroupStrategyOptionsPatchArgs:
|
|
|
2222
2221
|
def ranges(self, value: Optional[pulumi.Input[Sequence[pulumi.Input['IDRangePatchArgs']]]]):
|
|
2223
2222
|
pulumi.set(self, "ranges", value)
|
|
2224
2223
|
|
|
2225
|
-
@property
|
|
2224
|
+
@_builtins.property
|
|
2226
2225
|
@pulumi.getter
|
|
2227
|
-
def rule(self) -> Optional[pulumi.Input[
|
|
2226
|
+
def rule(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
2228
2227
|
"""
|
|
2229
2228
|
rule is the strategy that will dictate the allowable RunAsGroup values that may be set.
|
|
2230
2229
|
"""
|
|
2231
2230
|
return pulumi.get(self, "rule")
|
|
2232
2231
|
|
|
2233
2232
|
@rule.setter
|
|
2234
|
-
def rule(self, value: Optional[pulumi.Input[
|
|
2233
|
+
def rule(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
2235
2234
|
pulumi.set(self, "rule", value)
|
|
2236
2235
|
|
|
2237
2236
|
|
|
@@ -2240,7 +2239,7 @@ if not MYPY:
|
|
|
2240
2239
|
"""
|
|
2241
2240
|
RunAsGroupStrategyOptions defines the strategy type and any options used to create the strategy.
|
|
2242
2241
|
"""
|
|
2243
|
-
rule: pulumi.Input[
|
|
2242
|
+
rule: pulumi.Input[_builtins.str]
|
|
2244
2243
|
"""
|
|
2245
2244
|
rule is the strategy that will dictate the allowable RunAsGroup values that may be set.
|
|
2246
2245
|
"""
|
|
@@ -2254,30 +2253,30 @@ elif False:
|
|
|
2254
2253
|
@pulumi.input_type
|
|
2255
2254
|
class RunAsGroupStrategyOptionsArgs:
|
|
2256
2255
|
def __init__(__self__, *,
|
|
2257
|
-
rule: pulumi.Input[
|
|
2256
|
+
rule: pulumi.Input[_builtins.str],
|
|
2258
2257
|
ranges: Optional[pulumi.Input[Sequence[pulumi.Input['IDRangeArgs']]]] = None):
|
|
2259
2258
|
"""
|
|
2260
2259
|
RunAsGroupStrategyOptions defines the strategy type and any options used to create the strategy.
|
|
2261
|
-
:param pulumi.Input[
|
|
2260
|
+
:param pulumi.Input[_builtins.str] rule: rule is the strategy that will dictate the allowable RunAsGroup values that may be set.
|
|
2262
2261
|
:param pulumi.Input[Sequence[pulumi.Input['IDRangeArgs']]] ranges: ranges are the allowed ranges of gids that may be used. If you would like to force a single gid then supply a single range with the same start and end. Required for MustRunAs.
|
|
2263
2262
|
"""
|
|
2264
2263
|
pulumi.set(__self__, "rule", rule)
|
|
2265
2264
|
if ranges is not None:
|
|
2266
2265
|
pulumi.set(__self__, "ranges", ranges)
|
|
2267
2266
|
|
|
2268
|
-
@property
|
|
2267
|
+
@_builtins.property
|
|
2269
2268
|
@pulumi.getter
|
|
2270
|
-
def rule(self) -> pulumi.Input[
|
|
2269
|
+
def rule(self) -> pulumi.Input[_builtins.str]:
|
|
2271
2270
|
"""
|
|
2272
2271
|
rule is the strategy that will dictate the allowable RunAsGroup values that may be set.
|
|
2273
2272
|
"""
|
|
2274
2273
|
return pulumi.get(self, "rule")
|
|
2275
2274
|
|
|
2276
2275
|
@rule.setter
|
|
2277
|
-
def rule(self, value: pulumi.Input[
|
|
2276
|
+
def rule(self, value: pulumi.Input[_builtins.str]):
|
|
2278
2277
|
pulumi.set(self, "rule", value)
|
|
2279
2278
|
|
|
2280
|
-
@property
|
|
2279
|
+
@_builtins.property
|
|
2281
2280
|
@pulumi.getter
|
|
2282
2281
|
def ranges(self) -> Optional[pulumi.Input[Sequence[pulumi.Input['IDRangeArgs']]]]:
|
|
2283
2282
|
"""
|
|
@@ -2299,7 +2298,7 @@ if not MYPY:
|
|
|
2299
2298
|
"""
|
|
2300
2299
|
ranges are the allowed ranges of uids that may be used. If you would like to force a single uid then supply a single range with the same start and end. Required for MustRunAs.
|
|
2301
2300
|
"""
|
|
2302
|
-
rule: NotRequired[pulumi.Input[
|
|
2301
|
+
rule: NotRequired[pulumi.Input[_builtins.str]]
|
|
2303
2302
|
"""
|
|
2304
2303
|
rule is the strategy that will dictate the allowable RunAsUser values that may be set.
|
|
2305
2304
|
"""
|
|
@@ -2310,18 +2309,18 @@ elif False:
|
|
|
2310
2309
|
class RunAsUserStrategyOptionsPatchArgs:
|
|
2311
2310
|
def __init__(__self__, *,
|
|
2312
2311
|
ranges: Optional[pulumi.Input[Sequence[pulumi.Input['IDRangePatchArgs']]]] = None,
|
|
2313
|
-
rule: Optional[pulumi.Input[
|
|
2312
|
+
rule: Optional[pulumi.Input[_builtins.str]] = None):
|
|
2314
2313
|
"""
|
|
2315
2314
|
RunAsUserStrategyOptions defines the strategy type and any options used to create the strategy.
|
|
2316
2315
|
:param pulumi.Input[Sequence[pulumi.Input['IDRangePatchArgs']]] ranges: ranges are the allowed ranges of uids that may be used. If you would like to force a single uid then supply a single range with the same start and end. Required for MustRunAs.
|
|
2317
|
-
:param pulumi.Input[
|
|
2316
|
+
:param pulumi.Input[_builtins.str] rule: rule is the strategy that will dictate the allowable RunAsUser values that may be set.
|
|
2318
2317
|
"""
|
|
2319
2318
|
if ranges is not None:
|
|
2320
2319
|
pulumi.set(__self__, "ranges", ranges)
|
|
2321
2320
|
if rule is not None:
|
|
2322
2321
|
pulumi.set(__self__, "rule", rule)
|
|
2323
2322
|
|
|
2324
|
-
@property
|
|
2323
|
+
@_builtins.property
|
|
2325
2324
|
@pulumi.getter
|
|
2326
2325
|
def ranges(self) -> Optional[pulumi.Input[Sequence[pulumi.Input['IDRangePatchArgs']]]]:
|
|
2327
2326
|
"""
|
|
@@ -2333,16 +2332,16 @@ class RunAsUserStrategyOptionsPatchArgs:
|
|
|
2333
2332
|
def ranges(self, value: Optional[pulumi.Input[Sequence[pulumi.Input['IDRangePatchArgs']]]]):
|
|
2334
2333
|
pulumi.set(self, "ranges", value)
|
|
2335
2334
|
|
|
2336
|
-
@property
|
|
2335
|
+
@_builtins.property
|
|
2337
2336
|
@pulumi.getter
|
|
2338
|
-
def rule(self) -> Optional[pulumi.Input[
|
|
2337
|
+
def rule(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
2339
2338
|
"""
|
|
2340
2339
|
rule is the strategy that will dictate the allowable RunAsUser values that may be set.
|
|
2341
2340
|
"""
|
|
2342
2341
|
return pulumi.get(self, "rule")
|
|
2343
2342
|
|
|
2344
2343
|
@rule.setter
|
|
2345
|
-
def rule(self, value: Optional[pulumi.Input[
|
|
2344
|
+
def rule(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
2346
2345
|
pulumi.set(self, "rule", value)
|
|
2347
2346
|
|
|
2348
2347
|
|
|
@@ -2351,7 +2350,7 @@ if not MYPY:
|
|
|
2351
2350
|
"""
|
|
2352
2351
|
RunAsUserStrategyOptions defines the strategy type and any options used to create the strategy.
|
|
2353
2352
|
"""
|
|
2354
|
-
rule: pulumi.Input[
|
|
2353
|
+
rule: pulumi.Input[_builtins.str]
|
|
2355
2354
|
"""
|
|
2356
2355
|
rule is the strategy that will dictate the allowable RunAsUser values that may be set.
|
|
2357
2356
|
"""
|
|
@@ -2365,30 +2364,30 @@ elif False:
|
|
|
2365
2364
|
@pulumi.input_type
|
|
2366
2365
|
class RunAsUserStrategyOptionsArgs:
|
|
2367
2366
|
def __init__(__self__, *,
|
|
2368
|
-
rule: pulumi.Input[
|
|
2367
|
+
rule: pulumi.Input[_builtins.str],
|
|
2369
2368
|
ranges: Optional[pulumi.Input[Sequence[pulumi.Input['IDRangeArgs']]]] = None):
|
|
2370
2369
|
"""
|
|
2371
2370
|
RunAsUserStrategyOptions defines the strategy type and any options used to create the strategy.
|
|
2372
|
-
:param pulumi.Input[
|
|
2371
|
+
:param pulumi.Input[_builtins.str] rule: rule is the strategy that will dictate the allowable RunAsUser values that may be set.
|
|
2373
2372
|
:param pulumi.Input[Sequence[pulumi.Input['IDRangeArgs']]] ranges: ranges are the allowed ranges of uids that may be used. If you would like to force a single uid then supply a single range with the same start and end. Required for MustRunAs.
|
|
2374
2373
|
"""
|
|
2375
2374
|
pulumi.set(__self__, "rule", rule)
|
|
2376
2375
|
if ranges is not None:
|
|
2377
2376
|
pulumi.set(__self__, "ranges", ranges)
|
|
2378
2377
|
|
|
2379
|
-
@property
|
|
2378
|
+
@_builtins.property
|
|
2380
2379
|
@pulumi.getter
|
|
2381
|
-
def rule(self) -> pulumi.Input[
|
|
2380
|
+
def rule(self) -> pulumi.Input[_builtins.str]:
|
|
2382
2381
|
"""
|
|
2383
2382
|
rule is the strategy that will dictate the allowable RunAsUser values that may be set.
|
|
2384
2383
|
"""
|
|
2385
2384
|
return pulumi.get(self, "rule")
|
|
2386
2385
|
|
|
2387
2386
|
@rule.setter
|
|
2388
|
-
def rule(self, value: pulumi.Input[
|
|
2387
|
+
def rule(self, value: pulumi.Input[_builtins.str]):
|
|
2389
2388
|
pulumi.set(self, "rule", value)
|
|
2390
2389
|
|
|
2391
|
-
@property
|
|
2390
|
+
@_builtins.property
|
|
2392
2391
|
@pulumi.getter
|
|
2393
2392
|
def ranges(self) -> Optional[pulumi.Input[Sequence[pulumi.Input['IDRangeArgs']]]]:
|
|
2394
2393
|
"""
|
|
@@ -2406,11 +2405,11 @@ if not MYPY:
|
|
|
2406
2405
|
"""
|
|
2407
2406
|
RuntimeClassStrategyOptions define the strategy that will dictate the allowable RuntimeClasses for a pod.
|
|
2408
2407
|
"""
|
|
2409
|
-
allowed_runtime_class_names: NotRequired[pulumi.Input[Sequence[pulumi.Input[
|
|
2408
|
+
allowed_runtime_class_names: NotRequired[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]
|
|
2410
2409
|
"""
|
|
2411
2410
|
allowedRuntimeClassNames is a whitelist of RuntimeClass names that may be specified on a pod. A value of "*" means that any RuntimeClass name is allowed, and must be the only item in the list. An empty list requires the RuntimeClassName field to be unset.
|
|
2412
2411
|
"""
|
|
2413
|
-
default_runtime_class_name: NotRequired[pulumi.Input[
|
|
2412
|
+
default_runtime_class_name: NotRequired[pulumi.Input[_builtins.str]]
|
|
2414
2413
|
"""
|
|
2415
2414
|
defaultRuntimeClassName is the default RuntimeClassName to set on the pod. The default MUST be allowed by the allowedRuntimeClassNames list. A value of nil does not mutate the Pod.
|
|
2416
2415
|
"""
|
|
@@ -2420,40 +2419,40 @@ elif False:
|
|
|
2420
2419
|
@pulumi.input_type
|
|
2421
2420
|
class RuntimeClassStrategyOptionsPatchArgs:
|
|
2422
2421
|
def __init__(__self__, *,
|
|
2423
|
-
allowed_runtime_class_names: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
2424
|
-
default_runtime_class_name: Optional[pulumi.Input[
|
|
2422
|
+
allowed_runtime_class_names: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
2423
|
+
default_runtime_class_name: Optional[pulumi.Input[_builtins.str]] = None):
|
|
2425
2424
|
"""
|
|
2426
2425
|
RuntimeClassStrategyOptions define the strategy that will dictate the allowable RuntimeClasses for a pod.
|
|
2427
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
2428
|
-
:param pulumi.Input[
|
|
2426
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] allowed_runtime_class_names: allowedRuntimeClassNames is a whitelist of RuntimeClass names that may be specified on a pod. A value of "*" means that any RuntimeClass name is allowed, and must be the only item in the list. An empty list requires the RuntimeClassName field to be unset.
|
|
2427
|
+
:param pulumi.Input[_builtins.str] default_runtime_class_name: defaultRuntimeClassName is the default RuntimeClassName to set on the pod. The default MUST be allowed by the allowedRuntimeClassNames list. A value of nil does not mutate the Pod.
|
|
2429
2428
|
"""
|
|
2430
2429
|
if allowed_runtime_class_names is not None:
|
|
2431
2430
|
pulumi.set(__self__, "allowed_runtime_class_names", allowed_runtime_class_names)
|
|
2432
2431
|
if default_runtime_class_name is not None:
|
|
2433
2432
|
pulumi.set(__self__, "default_runtime_class_name", default_runtime_class_name)
|
|
2434
2433
|
|
|
2435
|
-
@property
|
|
2434
|
+
@_builtins.property
|
|
2436
2435
|
@pulumi.getter(name="allowedRuntimeClassNames")
|
|
2437
|
-
def allowed_runtime_class_names(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
2436
|
+
def allowed_runtime_class_names(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
|
2438
2437
|
"""
|
|
2439
2438
|
allowedRuntimeClassNames is a whitelist of RuntimeClass names that may be specified on a pod. A value of "*" means that any RuntimeClass name is allowed, and must be the only item in the list. An empty list requires the RuntimeClassName field to be unset.
|
|
2440
2439
|
"""
|
|
2441
2440
|
return pulumi.get(self, "allowed_runtime_class_names")
|
|
2442
2441
|
|
|
2443
2442
|
@allowed_runtime_class_names.setter
|
|
2444
|
-
def allowed_runtime_class_names(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
2443
|
+
def allowed_runtime_class_names(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
|
2445
2444
|
pulumi.set(self, "allowed_runtime_class_names", value)
|
|
2446
2445
|
|
|
2447
|
-
@property
|
|
2446
|
+
@_builtins.property
|
|
2448
2447
|
@pulumi.getter(name="defaultRuntimeClassName")
|
|
2449
|
-
def default_runtime_class_name(self) -> Optional[pulumi.Input[
|
|
2448
|
+
def default_runtime_class_name(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
2450
2449
|
"""
|
|
2451
2450
|
defaultRuntimeClassName is the default RuntimeClassName to set on the pod. The default MUST be allowed by the allowedRuntimeClassNames list. A value of nil does not mutate the Pod.
|
|
2452
2451
|
"""
|
|
2453
2452
|
return pulumi.get(self, "default_runtime_class_name")
|
|
2454
2453
|
|
|
2455
2454
|
@default_runtime_class_name.setter
|
|
2456
|
-
def default_runtime_class_name(self, value: Optional[pulumi.Input[
|
|
2455
|
+
def default_runtime_class_name(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
2457
2456
|
pulumi.set(self, "default_runtime_class_name", value)
|
|
2458
2457
|
|
|
2459
2458
|
|
|
@@ -2462,11 +2461,11 @@ if not MYPY:
|
|
|
2462
2461
|
"""
|
|
2463
2462
|
RuntimeClassStrategyOptions define the strategy that will dictate the allowable RuntimeClasses for a pod.
|
|
2464
2463
|
"""
|
|
2465
|
-
allowed_runtime_class_names: pulumi.Input[Sequence[pulumi.Input[
|
|
2464
|
+
allowed_runtime_class_names: pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]
|
|
2466
2465
|
"""
|
|
2467
2466
|
allowedRuntimeClassNames is a whitelist of RuntimeClass names that may be specified on a pod. A value of "*" means that any RuntimeClass name is allowed, and must be the only item in the list. An empty list requires the RuntimeClassName field to be unset.
|
|
2468
2467
|
"""
|
|
2469
|
-
default_runtime_class_name: NotRequired[pulumi.Input[
|
|
2468
|
+
default_runtime_class_name: NotRequired[pulumi.Input[_builtins.str]]
|
|
2470
2469
|
"""
|
|
2471
2470
|
defaultRuntimeClassName is the default RuntimeClassName to set on the pod. The default MUST be allowed by the allowedRuntimeClassNames list. A value of nil does not mutate the Pod.
|
|
2472
2471
|
"""
|
|
@@ -2476,39 +2475,39 @@ elif False:
|
|
|
2476
2475
|
@pulumi.input_type
|
|
2477
2476
|
class RuntimeClassStrategyOptionsArgs:
|
|
2478
2477
|
def __init__(__self__, *,
|
|
2479
|
-
allowed_runtime_class_names: pulumi.Input[Sequence[pulumi.Input[
|
|
2480
|
-
default_runtime_class_name: Optional[pulumi.Input[
|
|
2478
|
+
allowed_runtime_class_names: pulumi.Input[Sequence[pulumi.Input[_builtins.str]]],
|
|
2479
|
+
default_runtime_class_name: Optional[pulumi.Input[_builtins.str]] = None):
|
|
2481
2480
|
"""
|
|
2482
2481
|
RuntimeClassStrategyOptions define the strategy that will dictate the allowable RuntimeClasses for a pod.
|
|
2483
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
2484
|
-
:param pulumi.Input[
|
|
2482
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] allowed_runtime_class_names: allowedRuntimeClassNames is a whitelist of RuntimeClass names that may be specified on a pod. A value of "*" means that any RuntimeClass name is allowed, and must be the only item in the list. An empty list requires the RuntimeClassName field to be unset.
|
|
2483
|
+
:param pulumi.Input[_builtins.str] default_runtime_class_name: defaultRuntimeClassName is the default RuntimeClassName to set on the pod. The default MUST be allowed by the allowedRuntimeClassNames list. A value of nil does not mutate the Pod.
|
|
2485
2484
|
"""
|
|
2486
2485
|
pulumi.set(__self__, "allowed_runtime_class_names", allowed_runtime_class_names)
|
|
2487
2486
|
if default_runtime_class_name is not None:
|
|
2488
2487
|
pulumi.set(__self__, "default_runtime_class_name", default_runtime_class_name)
|
|
2489
2488
|
|
|
2490
|
-
@property
|
|
2489
|
+
@_builtins.property
|
|
2491
2490
|
@pulumi.getter(name="allowedRuntimeClassNames")
|
|
2492
|
-
def allowed_runtime_class_names(self) -> pulumi.Input[Sequence[pulumi.Input[
|
|
2491
|
+
def allowed_runtime_class_names(self) -> pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]:
|
|
2493
2492
|
"""
|
|
2494
2493
|
allowedRuntimeClassNames is a whitelist of RuntimeClass names that may be specified on a pod. A value of "*" means that any RuntimeClass name is allowed, and must be the only item in the list. An empty list requires the RuntimeClassName field to be unset.
|
|
2495
2494
|
"""
|
|
2496
2495
|
return pulumi.get(self, "allowed_runtime_class_names")
|
|
2497
2496
|
|
|
2498
2497
|
@allowed_runtime_class_names.setter
|
|
2499
|
-
def allowed_runtime_class_names(self, value: pulumi.Input[Sequence[pulumi.Input[
|
|
2498
|
+
def allowed_runtime_class_names(self, value: pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]):
|
|
2500
2499
|
pulumi.set(self, "allowed_runtime_class_names", value)
|
|
2501
2500
|
|
|
2502
|
-
@property
|
|
2501
|
+
@_builtins.property
|
|
2503
2502
|
@pulumi.getter(name="defaultRuntimeClassName")
|
|
2504
|
-
def default_runtime_class_name(self) -> Optional[pulumi.Input[
|
|
2503
|
+
def default_runtime_class_name(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
2505
2504
|
"""
|
|
2506
2505
|
defaultRuntimeClassName is the default RuntimeClassName to set on the pod. The default MUST be allowed by the allowedRuntimeClassNames list. A value of nil does not mutate the Pod.
|
|
2507
2506
|
"""
|
|
2508
2507
|
return pulumi.get(self, "default_runtime_class_name")
|
|
2509
2508
|
|
|
2510
2509
|
@default_runtime_class_name.setter
|
|
2511
|
-
def default_runtime_class_name(self, value: Optional[pulumi.Input[
|
|
2510
|
+
def default_runtime_class_name(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
2512
2511
|
pulumi.set(self, "default_runtime_class_name", value)
|
|
2513
2512
|
|
|
2514
2513
|
|
|
@@ -2517,7 +2516,7 @@ if not MYPY:
|
|
|
2517
2516
|
"""
|
|
2518
2517
|
SELinuxStrategyOptions defines the strategy type and any options used to create the strategy.
|
|
2519
2518
|
"""
|
|
2520
|
-
rule: NotRequired[pulumi.Input[
|
|
2519
|
+
rule: NotRequired[pulumi.Input[_builtins.str]]
|
|
2521
2520
|
"""
|
|
2522
2521
|
rule is the strategy that will dictate the allowable labels that may be set.
|
|
2523
2522
|
"""
|
|
@@ -2531,11 +2530,11 @@ elif False:
|
|
|
2531
2530
|
@pulumi.input_type
|
|
2532
2531
|
class SELinuxStrategyOptionsPatchArgs:
|
|
2533
2532
|
def __init__(__self__, *,
|
|
2534
|
-
rule: Optional[pulumi.Input[
|
|
2533
|
+
rule: Optional[pulumi.Input[_builtins.str]] = None,
|
|
2535
2534
|
se_linux_options: Optional[pulumi.Input['_core.v1.SELinuxOptionsPatchArgs']] = None):
|
|
2536
2535
|
"""
|
|
2537
2536
|
SELinuxStrategyOptions defines the strategy type and any options used to create the strategy.
|
|
2538
|
-
:param pulumi.Input[
|
|
2537
|
+
:param pulumi.Input[_builtins.str] rule: rule is the strategy that will dictate the allowable labels that may be set.
|
|
2539
2538
|
:param pulumi.Input['_core.v1.SELinuxOptionsPatchArgs'] se_linux_options: seLinuxOptions required to run as; required for MustRunAs More info: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/
|
|
2540
2539
|
"""
|
|
2541
2540
|
if rule is not None:
|
|
@@ -2543,19 +2542,19 @@ class SELinuxStrategyOptionsPatchArgs:
|
|
|
2543
2542
|
if se_linux_options is not None:
|
|
2544
2543
|
pulumi.set(__self__, "se_linux_options", se_linux_options)
|
|
2545
2544
|
|
|
2546
|
-
@property
|
|
2545
|
+
@_builtins.property
|
|
2547
2546
|
@pulumi.getter
|
|
2548
|
-
def rule(self) -> Optional[pulumi.Input[
|
|
2547
|
+
def rule(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
2549
2548
|
"""
|
|
2550
2549
|
rule is the strategy that will dictate the allowable labels that may be set.
|
|
2551
2550
|
"""
|
|
2552
2551
|
return pulumi.get(self, "rule")
|
|
2553
2552
|
|
|
2554
2553
|
@rule.setter
|
|
2555
|
-
def rule(self, value: Optional[pulumi.Input[
|
|
2554
|
+
def rule(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
2556
2555
|
pulumi.set(self, "rule", value)
|
|
2557
2556
|
|
|
2558
|
-
@property
|
|
2557
|
+
@_builtins.property
|
|
2559
2558
|
@pulumi.getter(name="seLinuxOptions")
|
|
2560
2559
|
def se_linux_options(self) -> Optional[pulumi.Input['_core.v1.SELinuxOptionsPatchArgs']]:
|
|
2561
2560
|
"""
|
|
@@ -2573,7 +2572,7 @@ if not MYPY:
|
|
|
2573
2572
|
"""
|
|
2574
2573
|
SELinuxStrategyOptions defines the strategy type and any options used to create the strategy.
|
|
2575
2574
|
"""
|
|
2576
|
-
rule: pulumi.Input[
|
|
2575
|
+
rule: pulumi.Input[_builtins.str]
|
|
2577
2576
|
"""
|
|
2578
2577
|
rule is the strategy that will dictate the allowable labels that may be set.
|
|
2579
2578
|
"""
|
|
@@ -2587,30 +2586,30 @@ elif False:
|
|
|
2587
2586
|
@pulumi.input_type
|
|
2588
2587
|
class SELinuxStrategyOptionsArgs:
|
|
2589
2588
|
def __init__(__self__, *,
|
|
2590
|
-
rule: pulumi.Input[
|
|
2589
|
+
rule: pulumi.Input[_builtins.str],
|
|
2591
2590
|
se_linux_options: Optional[pulumi.Input['_core.v1.SELinuxOptionsArgs']] = None):
|
|
2592
2591
|
"""
|
|
2593
2592
|
SELinuxStrategyOptions defines the strategy type and any options used to create the strategy.
|
|
2594
|
-
:param pulumi.Input[
|
|
2593
|
+
:param pulumi.Input[_builtins.str] rule: rule is the strategy that will dictate the allowable labels that may be set.
|
|
2595
2594
|
:param pulumi.Input['_core.v1.SELinuxOptionsArgs'] se_linux_options: seLinuxOptions required to run as; required for MustRunAs More info: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/
|
|
2596
2595
|
"""
|
|
2597
2596
|
pulumi.set(__self__, "rule", rule)
|
|
2598
2597
|
if se_linux_options is not None:
|
|
2599
2598
|
pulumi.set(__self__, "se_linux_options", se_linux_options)
|
|
2600
2599
|
|
|
2601
|
-
@property
|
|
2600
|
+
@_builtins.property
|
|
2602
2601
|
@pulumi.getter
|
|
2603
|
-
def rule(self) -> pulumi.Input[
|
|
2602
|
+
def rule(self) -> pulumi.Input[_builtins.str]:
|
|
2604
2603
|
"""
|
|
2605
2604
|
rule is the strategy that will dictate the allowable labels that may be set.
|
|
2606
2605
|
"""
|
|
2607
2606
|
return pulumi.get(self, "rule")
|
|
2608
2607
|
|
|
2609
2608
|
@rule.setter
|
|
2610
|
-
def rule(self, value: pulumi.Input[
|
|
2609
|
+
def rule(self, value: pulumi.Input[_builtins.str]):
|
|
2611
2610
|
pulumi.set(self, "rule", value)
|
|
2612
2611
|
|
|
2613
|
-
@property
|
|
2612
|
+
@_builtins.property
|
|
2614
2613
|
@pulumi.getter(name="seLinuxOptions")
|
|
2615
2614
|
def se_linux_options(self) -> Optional[pulumi.Input['_core.v1.SELinuxOptionsArgs']]:
|
|
2616
2615
|
"""
|
|
@@ -2632,7 +2631,7 @@ if not MYPY:
|
|
|
2632
2631
|
"""
|
|
2633
2632
|
ranges are the allowed ranges of supplemental groups. If you would like to force a single supplemental group then supply a single range with the same start and end. Required for MustRunAs.
|
|
2634
2633
|
"""
|
|
2635
|
-
rule: NotRequired[pulumi.Input[
|
|
2634
|
+
rule: NotRequired[pulumi.Input[_builtins.str]]
|
|
2636
2635
|
"""
|
|
2637
2636
|
rule is the strategy that will dictate what supplemental groups is used in the SecurityContext.
|
|
2638
2637
|
"""
|
|
@@ -2643,18 +2642,18 @@ elif False:
|
|
|
2643
2642
|
class SupplementalGroupsStrategyOptionsPatchArgs:
|
|
2644
2643
|
def __init__(__self__, *,
|
|
2645
2644
|
ranges: Optional[pulumi.Input[Sequence[pulumi.Input['IDRangePatchArgs']]]] = None,
|
|
2646
|
-
rule: Optional[pulumi.Input[
|
|
2645
|
+
rule: Optional[pulumi.Input[_builtins.str]] = None):
|
|
2647
2646
|
"""
|
|
2648
2647
|
SupplementalGroupsStrategyOptions defines the strategy type and options used to create the strategy.
|
|
2649
2648
|
:param pulumi.Input[Sequence[pulumi.Input['IDRangePatchArgs']]] ranges: ranges are the allowed ranges of supplemental groups. If you would like to force a single supplemental group then supply a single range with the same start and end. Required for MustRunAs.
|
|
2650
|
-
:param pulumi.Input[
|
|
2649
|
+
:param pulumi.Input[_builtins.str] rule: rule is the strategy that will dictate what supplemental groups is used in the SecurityContext.
|
|
2651
2650
|
"""
|
|
2652
2651
|
if ranges is not None:
|
|
2653
2652
|
pulumi.set(__self__, "ranges", ranges)
|
|
2654
2653
|
if rule is not None:
|
|
2655
2654
|
pulumi.set(__self__, "rule", rule)
|
|
2656
2655
|
|
|
2657
|
-
@property
|
|
2656
|
+
@_builtins.property
|
|
2658
2657
|
@pulumi.getter
|
|
2659
2658
|
def ranges(self) -> Optional[pulumi.Input[Sequence[pulumi.Input['IDRangePatchArgs']]]]:
|
|
2660
2659
|
"""
|
|
@@ -2666,16 +2665,16 @@ class SupplementalGroupsStrategyOptionsPatchArgs:
|
|
|
2666
2665
|
def ranges(self, value: Optional[pulumi.Input[Sequence[pulumi.Input['IDRangePatchArgs']]]]):
|
|
2667
2666
|
pulumi.set(self, "ranges", value)
|
|
2668
2667
|
|
|
2669
|
-
@property
|
|
2668
|
+
@_builtins.property
|
|
2670
2669
|
@pulumi.getter
|
|
2671
|
-
def rule(self) -> Optional[pulumi.Input[
|
|
2670
|
+
def rule(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
2672
2671
|
"""
|
|
2673
2672
|
rule is the strategy that will dictate what supplemental groups is used in the SecurityContext.
|
|
2674
2673
|
"""
|
|
2675
2674
|
return pulumi.get(self, "rule")
|
|
2676
2675
|
|
|
2677
2676
|
@rule.setter
|
|
2678
|
-
def rule(self, value: Optional[pulumi.Input[
|
|
2677
|
+
def rule(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
2679
2678
|
pulumi.set(self, "rule", value)
|
|
2680
2679
|
|
|
2681
2680
|
|
|
@@ -2688,7 +2687,7 @@ if not MYPY:
|
|
|
2688
2687
|
"""
|
|
2689
2688
|
ranges are the allowed ranges of supplemental groups. If you would like to force a single supplemental group then supply a single range with the same start and end. Required for MustRunAs.
|
|
2690
2689
|
"""
|
|
2691
|
-
rule: NotRequired[pulumi.Input[
|
|
2690
|
+
rule: NotRequired[pulumi.Input[_builtins.str]]
|
|
2692
2691
|
"""
|
|
2693
2692
|
rule is the strategy that will dictate what supplemental groups is used in the SecurityContext.
|
|
2694
2693
|
"""
|
|
@@ -2699,18 +2698,18 @@ elif False:
|
|
|
2699
2698
|
class SupplementalGroupsStrategyOptionsArgs:
|
|
2700
2699
|
def __init__(__self__, *,
|
|
2701
2700
|
ranges: Optional[pulumi.Input[Sequence[pulumi.Input['IDRangeArgs']]]] = None,
|
|
2702
|
-
rule: Optional[pulumi.Input[
|
|
2701
|
+
rule: Optional[pulumi.Input[_builtins.str]] = None):
|
|
2703
2702
|
"""
|
|
2704
2703
|
SupplementalGroupsStrategyOptions defines the strategy type and options used to create the strategy.
|
|
2705
2704
|
:param pulumi.Input[Sequence[pulumi.Input['IDRangeArgs']]] ranges: ranges are the allowed ranges of supplemental groups. If you would like to force a single supplemental group then supply a single range with the same start and end. Required for MustRunAs.
|
|
2706
|
-
:param pulumi.Input[
|
|
2705
|
+
:param pulumi.Input[_builtins.str] rule: rule is the strategy that will dictate what supplemental groups is used in the SecurityContext.
|
|
2707
2706
|
"""
|
|
2708
2707
|
if ranges is not None:
|
|
2709
2708
|
pulumi.set(__self__, "ranges", ranges)
|
|
2710
2709
|
if rule is not None:
|
|
2711
2710
|
pulumi.set(__self__, "rule", rule)
|
|
2712
2711
|
|
|
2713
|
-
@property
|
|
2712
|
+
@_builtins.property
|
|
2714
2713
|
@pulumi.getter
|
|
2715
2714
|
def ranges(self) -> Optional[pulumi.Input[Sequence[pulumi.Input['IDRangeArgs']]]]:
|
|
2716
2715
|
"""
|
|
@@ -2722,16 +2721,16 @@ class SupplementalGroupsStrategyOptionsArgs:
|
|
|
2722
2721
|
def ranges(self, value: Optional[pulumi.Input[Sequence[pulumi.Input['IDRangeArgs']]]]):
|
|
2723
2722
|
pulumi.set(self, "ranges", value)
|
|
2724
2723
|
|
|
2725
|
-
@property
|
|
2724
|
+
@_builtins.property
|
|
2726
2725
|
@pulumi.getter
|
|
2727
|
-
def rule(self) -> Optional[pulumi.Input[
|
|
2726
|
+
def rule(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
2728
2727
|
"""
|
|
2729
2728
|
rule is the strategy that will dictate what supplemental groups is used in the SecurityContext.
|
|
2730
2729
|
"""
|
|
2731
2730
|
return pulumi.get(self, "rule")
|
|
2732
2731
|
|
|
2733
2732
|
@rule.setter
|
|
2734
|
-
def rule(self, value: Optional[pulumi.Input[
|
|
2733
|
+
def rule(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
2735
2734
|
pulumi.set(self, "rule", value)
|
|
2736
2735
|
|
|
2737
2736
|
|