tencentcloud-sdk-python-tke 3.0.1469__tar.gz → 3.0.1479__tar.gz
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- {tencentcloud-sdk-python-tke-3.0.1469 → tencentcloud-sdk-python-tke-3.0.1479}/PKG-INFO +1 -1
- {tencentcloud-sdk-python-tke-3.0.1469 → tencentcloud-sdk-python-tke-3.0.1479}/setup.py +1 -1
- {tencentcloud-sdk-python-tke-3.0.1469 → tencentcloud-sdk-python-tke-3.0.1479}/tencentcloud/__init__.py +1 -1
- {tencentcloud-sdk-python-tke-3.0.1469 → tencentcloud-sdk-python-tke-3.0.1479}/tencentcloud/tke/v20180525/models.py +171 -30
- {tencentcloud-sdk-python-tke-3.0.1469 → tencentcloud-sdk-python-tke-3.0.1479}/tencentcloud_sdk_python_tke.egg-info/PKG-INFO +1 -1
- tencentcloud-sdk-python-tke-3.0.1479/tencentcloud_sdk_python_tke.egg-info/requires.txt +1 -0
- tencentcloud-sdk-python-tke-3.0.1469/tencentcloud_sdk_python_tke.egg-info/requires.txt +0 -1
- {tencentcloud-sdk-python-tke-3.0.1469 → tencentcloud-sdk-python-tke-3.0.1479}/README.rst +0 -0
- {tencentcloud-sdk-python-tke-3.0.1469 → tencentcloud-sdk-python-tke-3.0.1479}/setup.cfg +0 -0
- {tencentcloud-sdk-python-tke-3.0.1469 → tencentcloud-sdk-python-tke-3.0.1479}/tencentcloud/tke/__init__.py +0 -0
- {tencentcloud-sdk-python-tke-3.0.1469 → tencentcloud-sdk-python-tke-3.0.1479}/tencentcloud/tke/v20180525/__init__.py +0 -0
- {tencentcloud-sdk-python-tke-3.0.1469 → tencentcloud-sdk-python-tke-3.0.1479}/tencentcloud/tke/v20180525/errorcodes.py +0 -0
- {tencentcloud-sdk-python-tke-3.0.1469 → tencentcloud-sdk-python-tke-3.0.1479}/tencentcloud/tke/v20180525/tke_client.py +0 -0
- {tencentcloud-sdk-python-tke-3.0.1469 → tencentcloud-sdk-python-tke-3.0.1479}/tencentcloud/tke/v20220501/__init__.py +0 -0
- {tencentcloud-sdk-python-tke-3.0.1469 → tencentcloud-sdk-python-tke-3.0.1479}/tencentcloud/tke/v20220501/errorcodes.py +0 -0
- {tencentcloud-sdk-python-tke-3.0.1469 → tencentcloud-sdk-python-tke-3.0.1479}/tencentcloud/tke/v20220501/models.py +0 -0
- {tencentcloud-sdk-python-tke-3.0.1469 → tencentcloud-sdk-python-tke-3.0.1479}/tencentcloud/tke/v20220501/tke_client.py +0 -0
- {tencentcloud-sdk-python-tke-3.0.1469 → tencentcloud-sdk-python-tke-3.0.1479}/tencentcloud_sdk_python_tke.egg-info/SOURCES.txt +0 -0
- {tencentcloud-sdk-python-tke-3.0.1469 → tencentcloud-sdk-python-tke-3.0.1479}/tencentcloud_sdk_python_tke.egg-info/dependency_links.txt +0 -0
- {tencentcloud-sdk-python-tke-3.0.1469 → tencentcloud-sdk-python-tke-3.0.1479}/tencentcloud_sdk_python_tke.egg-info/top_level.txt +0 -0
|
@@ -8,7 +8,7 @@ ROOT = os.path.dirname(__file__)
|
|
|
8
8
|
|
|
9
9
|
setup(
|
|
10
10
|
name='tencentcloud-sdk-python-tke',
|
|
11
|
-
install_requires=["tencentcloud-sdk-python-common>=3.0.
|
|
11
|
+
install_requires=["tencentcloud-sdk-python-common>=3.0.1479,<4.0.0"],
|
|
12
12
|
version=tencentcloud.__version__,
|
|
13
13
|
description='Tencent Cloud Tke SDK for Python',
|
|
14
14
|
long_description=open('README.rst').read(),
|
|
@@ -687,7 +687,13 @@ class Addon(AbstractModel):
|
|
|
687
687
|
:type AddonVersion: str
|
|
688
688
|
:param _RawValues: addon的参数,是一个json格式的base64转码后的字符串
|
|
689
689
|
:type RawValues: str
|
|
690
|
-
:param _Phase: addon
|
|
690
|
+
:param _Phase: addon的状态:
|
|
691
|
+
- Installing:安装中
|
|
692
|
+
- Upgrading:升级中
|
|
693
|
+
- Terminating:删除中
|
|
694
|
+
- Succeeded:安装/升级成功
|
|
695
|
+
- InstallFailed:安装失败
|
|
696
|
+
- UpgradFailed:升级失败
|
|
691
697
|
:type Phase: str
|
|
692
698
|
:param _Reason: addon失败的原因
|
|
693
699
|
:type Reason: str
|
|
@@ -736,7 +742,13 @@ class Addon(AbstractModel):
|
|
|
736
742
|
|
|
737
743
|
@property
|
|
738
744
|
def Phase(self):
|
|
739
|
-
r"""addon
|
|
745
|
+
r"""addon的状态:
|
|
746
|
+
- Installing:安装中
|
|
747
|
+
- Upgrading:升级中
|
|
748
|
+
- Terminating:删除中
|
|
749
|
+
- Succeeded:安装/升级成功
|
|
750
|
+
- InstallFailed:安装失败
|
|
751
|
+
- UpgradFailed:升级失败
|
|
740
752
|
:rtype: str
|
|
741
753
|
"""
|
|
742
754
|
return self._Phase
|
|
@@ -9670,12 +9682,16 @@ class CreateReservedInstancesRequest(AbstractModel):
|
|
|
9670
9682
|
:type InstanceName: str
|
|
9671
9683
|
:param _ClientToken: 用于保证请求幂等性的字符串。该字符串由客户生成,需保证不同请求之间唯一,最大值不超过64个ASCII字符。若不指定该参数,则无法保证请求的幂等性。
|
|
9672
9684
|
:type ClientToken: str
|
|
9685
|
+
:param _DryRun: 是否只预检此次请求。
|
|
9686
|
+
true:只预检,不会创建实例。默认值为:false。
|
|
9687
|
+
:type DryRun: bool
|
|
9673
9688
|
"""
|
|
9674
9689
|
self._ReservedInstanceSpec = None
|
|
9675
9690
|
self._InstanceCount = None
|
|
9676
9691
|
self._InstanceChargePrepaid = None
|
|
9677
9692
|
self._InstanceName = None
|
|
9678
9693
|
self._ClientToken = None
|
|
9694
|
+
self._DryRun = None
|
|
9679
9695
|
|
|
9680
9696
|
@property
|
|
9681
9697
|
def ReservedInstanceSpec(self):
|
|
@@ -9732,6 +9748,18 @@ class CreateReservedInstancesRequest(AbstractModel):
|
|
|
9732
9748
|
def ClientToken(self, ClientToken):
|
|
9733
9749
|
self._ClientToken = ClientToken
|
|
9734
9750
|
|
|
9751
|
+
@property
|
|
9752
|
+
def DryRun(self):
|
|
9753
|
+
r"""是否只预检此次请求。
|
|
9754
|
+
true:只预检,不会创建实例。默认值为:false。
|
|
9755
|
+
:rtype: bool
|
|
9756
|
+
"""
|
|
9757
|
+
return self._DryRun
|
|
9758
|
+
|
|
9759
|
+
@DryRun.setter
|
|
9760
|
+
def DryRun(self, DryRun):
|
|
9761
|
+
self._DryRun = DryRun
|
|
9762
|
+
|
|
9735
9763
|
|
|
9736
9764
|
def _deserialize(self, params):
|
|
9737
9765
|
if params.get("ReservedInstanceSpec") is not None:
|
|
@@ -9743,6 +9771,7 @@ class CreateReservedInstancesRequest(AbstractModel):
|
|
|
9743
9771
|
self._InstanceChargePrepaid._deserialize(params.get("InstanceChargePrepaid"))
|
|
9744
9772
|
self._InstanceName = params.get("InstanceName")
|
|
9745
9773
|
self._ClientToken = params.get("ClientToken")
|
|
9774
|
+
self._DryRun = params.get("DryRun")
|
|
9746
9775
|
memeber_set = set(params.keys())
|
|
9747
9776
|
for name, value in vars(self).items():
|
|
9748
9777
|
property_name = name[1:]
|
|
@@ -10371,9 +10400,9 @@ class DeleteAddonRequest(AbstractModel):
|
|
|
10371
10400
|
|
|
10372
10401
|
def __init__(self):
|
|
10373
10402
|
r"""
|
|
10374
|
-
:param _ClusterId: 集群ID
|
|
10403
|
+
:param _ClusterId: 集群ID,请从容器服务控制台集群列表中获取(https://console.cloud.tencent.com/tke2/cluster)。
|
|
10375
10404
|
:type ClusterId: str
|
|
10376
|
-
:param _AddonName: addon
|
|
10405
|
+
:param _AddonName: addon名称,请从容器服务控制台进入集群详情页后,在组件管理页面中获取。
|
|
10377
10406
|
:type AddonName: str
|
|
10378
10407
|
"""
|
|
10379
10408
|
self._ClusterId = None
|
|
@@ -10381,7 +10410,7 @@ class DeleteAddonRequest(AbstractModel):
|
|
|
10381
10410
|
|
|
10382
10411
|
@property
|
|
10383
10412
|
def ClusterId(self):
|
|
10384
|
-
r"""集群ID
|
|
10413
|
+
r"""集群ID,请从容器服务控制台集群列表中获取(https://console.cloud.tencent.com/tke2/cluster)。
|
|
10385
10414
|
:rtype: str
|
|
10386
10415
|
"""
|
|
10387
10416
|
return self._ClusterId
|
|
@@ -10392,7 +10421,7 @@ class DeleteAddonRequest(AbstractModel):
|
|
|
10392
10421
|
|
|
10393
10422
|
@property
|
|
10394
10423
|
def AddonName(self):
|
|
10395
|
-
r"""addon
|
|
10424
|
+
r"""addon名称,请从容器服务控制台进入集群详情页后,在组件管理页面中获取。
|
|
10396
10425
|
:rtype: str
|
|
10397
10426
|
"""
|
|
10398
10427
|
return self._AddonName
|
|
@@ -12932,7 +12961,7 @@ class DescribeAddonRequest(AbstractModel):
|
|
|
12932
12961
|
|
|
12933
12962
|
def __init__(self):
|
|
12934
12963
|
r"""
|
|
12935
|
-
:param _ClusterId: 集群ID
|
|
12964
|
+
:param _ClusterId: 集群ID,请从容器服务控制台集群列表中获取(https://console.cloud.tencent.com/tke2/cluster)。
|
|
12936
12965
|
:type ClusterId: str
|
|
12937
12966
|
:param _AddonName: addon名称(不传时会返回集群下全部的addon)
|
|
12938
12967
|
:type AddonName: str
|
|
@@ -12942,7 +12971,7 @@ class DescribeAddonRequest(AbstractModel):
|
|
|
12942
12971
|
|
|
12943
12972
|
@property
|
|
12944
12973
|
def ClusterId(self):
|
|
12945
|
-
r"""集群ID
|
|
12974
|
+
r"""集群ID,请从容器服务控制台集群列表中获取(https://console.cloud.tencent.com/tke2/cluster)。
|
|
12946
12975
|
:rtype: str
|
|
12947
12976
|
"""
|
|
12948
12977
|
return self._ClusterId
|
|
@@ -13031,9 +13060,9 @@ class DescribeAddonValuesRequest(AbstractModel):
|
|
|
13031
13060
|
|
|
13032
13061
|
def __init__(self):
|
|
13033
13062
|
r"""
|
|
13034
|
-
:param _ClusterId: 集群ID
|
|
13063
|
+
:param _ClusterId: 集群ID,请从容器服务控制台集群列表中获取(https://console.cloud.tencent.com/tke2/cluster)。
|
|
13035
13064
|
:type ClusterId: str
|
|
13036
|
-
:param _AddonName: addon
|
|
13065
|
+
:param _AddonName: addon名称,请从容器服务控制台进入集群详情页后,在组件管理页面中获取。
|
|
13037
13066
|
:type AddonName: str
|
|
13038
13067
|
"""
|
|
13039
13068
|
self._ClusterId = None
|
|
@@ -13041,7 +13070,7 @@ class DescribeAddonValuesRequest(AbstractModel):
|
|
|
13041
13070
|
|
|
13042
13071
|
@property
|
|
13043
13072
|
def ClusterId(self):
|
|
13044
|
-
r"""集群ID
|
|
13073
|
+
r"""集群ID,请从容器服务控制台集群列表中获取(https://console.cloud.tencent.com/tke2/cluster)。
|
|
13045
13074
|
:rtype: str
|
|
13046
13075
|
"""
|
|
13047
13076
|
return self._ClusterId
|
|
@@ -13052,7 +13081,7 @@ class DescribeAddonValuesRequest(AbstractModel):
|
|
|
13052
13081
|
|
|
13053
13082
|
@property
|
|
13054
13083
|
def AddonName(self):
|
|
13055
|
-
r"""addon
|
|
13084
|
+
r"""addon名称,请从容器服务控制台进入集群详情页后,在组件管理页面中获取。
|
|
13056
13085
|
:rtype: str
|
|
13057
13086
|
"""
|
|
13058
13087
|
return self._AddonName
|
|
@@ -30706,15 +30735,15 @@ class InstallAddonRequest(AbstractModel):
|
|
|
30706
30735
|
|
|
30707
30736
|
def __init__(self):
|
|
30708
30737
|
r"""
|
|
30709
|
-
:param _ClusterId: 集群ID(仅支持标准tke
|
|
30738
|
+
:param _ClusterId: 集群ID(仅支持标准tke集群),请从容器服务控制台集群列表中获取(https://console.cloud.tencent.com/tke2/cluster)。
|
|
30710
30739
|
:type ClusterId: str
|
|
30711
|
-
:param _AddonName: addon
|
|
30740
|
+
:param _AddonName: addon名称,请从容器服务控制台进入集群详情页后,在组件管理页面中获取。
|
|
30712
30741
|
:type AddonName: str
|
|
30713
30742
|
:param _AddonVersion: addon版本(不传默认安装最新版本)
|
|
30714
30743
|
:type AddonVersion: str
|
|
30715
30744
|
:param _RawValues: addon的参数,是一个json格式的base64转码后的字符串(addon参数由DescribeAddonValues获取)
|
|
30716
30745
|
:type RawValues: str
|
|
30717
|
-
:param _DryRun: 是否仅做安装检查,设置为true
|
|
30746
|
+
:param _DryRun: 是否仅做安装检查,设置为true时仅做检查,不会安装组件。默认值为 false。
|
|
30718
30747
|
:type DryRun: bool
|
|
30719
30748
|
"""
|
|
30720
30749
|
self._ClusterId = None
|
|
@@ -30725,7 +30754,7 @@ class InstallAddonRequest(AbstractModel):
|
|
|
30725
30754
|
|
|
30726
30755
|
@property
|
|
30727
30756
|
def ClusterId(self):
|
|
30728
|
-
r"""集群ID(仅支持标准tke
|
|
30757
|
+
r"""集群ID(仅支持标准tke集群),请从容器服务控制台集群列表中获取(https://console.cloud.tencent.com/tke2/cluster)。
|
|
30729
30758
|
:rtype: str
|
|
30730
30759
|
"""
|
|
30731
30760
|
return self._ClusterId
|
|
@@ -30736,7 +30765,7 @@ class InstallAddonRequest(AbstractModel):
|
|
|
30736
30765
|
|
|
30737
30766
|
@property
|
|
30738
30767
|
def AddonName(self):
|
|
30739
|
-
r"""addon
|
|
30768
|
+
r"""addon名称,请从容器服务控制台进入集群详情页后,在组件管理页面中获取。
|
|
30740
30769
|
:rtype: str
|
|
30741
30770
|
"""
|
|
30742
30771
|
return self._AddonName
|
|
@@ -30769,7 +30798,7 @@ class InstallAddonRequest(AbstractModel):
|
|
|
30769
30798
|
|
|
30770
30799
|
@property
|
|
30771
30800
|
def DryRun(self):
|
|
30772
|
-
r"""是否仅做安装检查,设置为true
|
|
30801
|
+
r"""是否仅做安装检查,设置为true时仅做检查,不会安装组件。默认值为 false。
|
|
30773
30802
|
:rtype: bool
|
|
30774
30803
|
"""
|
|
30775
30804
|
return self._DryRun
|
|
@@ -35066,7 +35095,7 @@ class ModifyOpenPolicyListRequest(AbstractModel):
|
|
|
35066
35095
|
|
|
35067
35096
|
def __init__(self):
|
|
35068
35097
|
r"""
|
|
35069
|
-
:param _ClusterId: 集群ID
|
|
35098
|
+
:param _ClusterId: 集群ID,请从容器服务集群控制台获取(https://console.cloud.tencent.com/tke2/cluster)。
|
|
35070
35099
|
:type ClusterId: str
|
|
35071
35100
|
:param _OpenPolicyInfoList: 修改的策略列表,目前仅支持修改EnforcementAction字段
|
|
35072
35101
|
:type OpenPolicyInfoList: list of OpenPolicySwitch
|
|
@@ -35079,7 +35108,7 @@ class ModifyOpenPolicyListRequest(AbstractModel):
|
|
|
35079
35108
|
|
|
35080
35109
|
@property
|
|
35081
35110
|
def ClusterId(self):
|
|
35082
|
-
r"""集群ID
|
|
35111
|
+
r"""集群ID,请从容器服务集群控制台获取(https://console.cloud.tencent.com/tke2/cluster)。
|
|
35083
35112
|
:rtype: str
|
|
35084
35113
|
"""
|
|
35085
35114
|
return self._ClusterId
|
|
@@ -37216,7 +37245,63 @@ class OpenPolicySwitch(AbstractModel):
|
|
|
37216
37245
|
:type EnforcementAction: str
|
|
37217
37246
|
:param _Name: 策略英文名称
|
|
37218
37247
|
:type Name: str
|
|
37219
|
-
:param _Kind:
|
|
37248
|
+
:param _Kind: 策略模板类型,可选值:
|
|
37249
|
+
优选策略:
|
|
37250
|
+
blocknamespacedeletion:存在pod的命名空间不允许删除
|
|
37251
|
+
blockcrddeletion:存在cr的crd不允许删除
|
|
37252
|
+
blockmountablevolumetype:禁止挂载指定的volume类型
|
|
37253
|
+
disallowalwayspullimage:禁止镜像拉取策略使用Always
|
|
37254
|
+
tkeallowedrepos:容器镜像来源限制
|
|
37255
|
+
blockunknowndaemonset:禁止未知的DaemonSet部署
|
|
37256
|
+
blockpvdeletion:PV处于绑定状态则不允许删除
|
|
37257
|
+
corednsprotect:CoreDNS组件删除保护
|
|
37258
|
+
blockschedulablenodedelete:非封锁状态的Node不允许删除
|
|
37259
|
+
resourcesdeletionprotection:资源删除保护
|
|
37260
|
+
tkeenirequest:弹性网卡资源配置限制
|
|
37261
|
+
blockworkloadcrossversionupgrade:工作负载镜像版本升级策略管控
|
|
37262
|
+
blockserviceaccountgranthighprivilegepermission:ServiceAccount权限管控
|
|
37263
|
+
blockclusteripserviceexist:不允许Service为ClusterIP类型
|
|
37264
|
+
blockinternetaccess:禁止公网访问
|
|
37265
|
+
assign:禁止访问Metadata Server
|
|
37266
|
+
blockhostnetworkpod:禁止创建HostNetwork类型Pod
|
|
37267
|
+
|
|
37268
|
+
可选策略:
|
|
37269
|
+
blockvolumemountpath:禁止容器挂载指定的目录
|
|
37270
|
+
k8sallowedrepos:容器镜像必须以指定字符串列表中的字符串开头
|
|
37271
|
+
k8sblockendpointeditdefaultrole:禁止默认ClusterRole修改Endpoints
|
|
37272
|
+
k8sblockloadbalancer:不允许Service为LoadBalancer类型
|
|
37273
|
+
k8sblocknodeport:不允许Service为NodePort类型
|
|
37274
|
+
k8sblockwildcardingress:禁止ingress配置空白或通配符类型的hostname
|
|
37275
|
+
k8scontainerlimits:限制容器必须设置CPU和内存Limit
|
|
37276
|
+
k8scontainerratios:限制CPU和内存的Request与Limit的最大比率
|
|
37277
|
+
k8scontainerrequests:限制CPU和内存的Request必须设置且小于配置的最大值
|
|
37278
|
+
k8srequiredresources:必须配置内存的Limit,CPU和内存的Request
|
|
37279
|
+
k8sdisallowanonymous:不允许将白名单以外的ClusterRole和Role关联到system:anonymous User和system:unauthenticated Group
|
|
37280
|
+
k8sdisallowedtags:约束容器镜像tag
|
|
37281
|
+
k8sexternalips:限制服务externalIP仅为允许的IP地址列表
|
|
37282
|
+
k8simagedigests:容器镜像必须包含digest
|
|
37283
|
+
noupdateserviceaccount:拒绝白名单外的资源更新ServiceAccount
|
|
37284
|
+
k8sreplicalimits:要求具有spec.replicas字段的对象(Deployments、ReplicaSets等)在定义的范围内
|
|
37285
|
+
k8srequiredannotations:要求资源包含指定的annotations,其值与提供的正则表达式匹配
|
|
37286
|
+
k8srequiredlabels:要求资源包含指定的标签,其值与提供的正则表达式匹配
|
|
37287
|
+
k8srequiredprobes:要求Pod具有Readiness或Liveness Probe
|
|
37288
|
+
k8spspautomountserviceaccounttokenpod:约束容器不能设置automountServiceAccountToken为true
|
|
37289
|
+
k8spspallowprivilegeescalationcontainer:约束PodSecurityPolicy中的allowPrivilegeEscalation字段为false
|
|
37290
|
+
k8spspapparmor:约束AppArmor字段列表
|
|
37291
|
+
k8spspcapabilities:限制PodSecurityPolicy中的allowedCapabilities和requiredDropCapabilities字段
|
|
37292
|
+
k8spspflexvolumes:约束PodSecurityPolicy中的allowedFlexVolumes字段类型
|
|
37293
|
+
k8spspforbiddensysctls:约束PodSecurityPolicy中的sysctls字段不能使用的name
|
|
37294
|
+
k8spspfsgroup:控制PodSecurityPolicy中的fsGroup字段在限制范围内
|
|
37295
|
+
k8spsphostfilesystem:约束PodSecurityPolicy中的hostPath字段的参数
|
|
37296
|
+
k8spsphostnamespace:限制PodSecurityPolicy中的hostPID和hostIPC字段
|
|
37297
|
+
k8spsphostnetworkingports:约束PodSecurityPolicy中的hostNetwork和hostPorts字段
|
|
37298
|
+
k8spspprivilegedcontainer:禁止PodSecurityPolicy中的privileged字段为true
|
|
37299
|
+
k8spspprocmount:约束PodSecurityPolicy中的allowedProcMountTypes字段
|
|
37300
|
+
k8spspreadonlyrootfilesystem:约束PodSecurityPolicy中的readOnlyRootFilesystem字段
|
|
37301
|
+
k8spspseccomp:约束PodSecurityPolicy上的seccomp.security.alpha.kubernetes.io/allowedProfileNames注解
|
|
37302
|
+
k8spspselinuxv2:约束Pod定义SELinux配置的允许列表
|
|
37303
|
+
k8spspallowedusers:约束PodSecurityPolicy中的runAsUser、runAsGroup、supplementalGroups和fsGroup字段
|
|
37304
|
+
k8spspvolumetypes:约束PodSecurityPolicy中的volumes字段类型
|
|
37220
37305
|
:type Kind: str
|
|
37221
37306
|
:param _EnabledStatus: 策略开关状态:open打开,close关闭
|
|
37222
37307
|
:type EnabledStatus: str
|
|
@@ -37253,7 +37338,63 @@ class OpenPolicySwitch(AbstractModel):
|
|
|
37253
37338
|
|
|
37254
37339
|
@property
|
|
37255
37340
|
def Kind(self):
|
|
37256
|
-
r"""
|
|
37341
|
+
r"""策略模板类型,可选值:
|
|
37342
|
+
优选策略:
|
|
37343
|
+
blocknamespacedeletion:存在pod的命名空间不允许删除
|
|
37344
|
+
blockcrddeletion:存在cr的crd不允许删除
|
|
37345
|
+
blockmountablevolumetype:禁止挂载指定的volume类型
|
|
37346
|
+
disallowalwayspullimage:禁止镜像拉取策略使用Always
|
|
37347
|
+
tkeallowedrepos:容器镜像来源限制
|
|
37348
|
+
blockunknowndaemonset:禁止未知的DaemonSet部署
|
|
37349
|
+
blockpvdeletion:PV处于绑定状态则不允许删除
|
|
37350
|
+
corednsprotect:CoreDNS组件删除保护
|
|
37351
|
+
blockschedulablenodedelete:非封锁状态的Node不允许删除
|
|
37352
|
+
resourcesdeletionprotection:资源删除保护
|
|
37353
|
+
tkeenirequest:弹性网卡资源配置限制
|
|
37354
|
+
blockworkloadcrossversionupgrade:工作负载镜像版本升级策略管控
|
|
37355
|
+
blockserviceaccountgranthighprivilegepermission:ServiceAccount权限管控
|
|
37356
|
+
blockclusteripserviceexist:不允许Service为ClusterIP类型
|
|
37357
|
+
blockinternetaccess:禁止公网访问
|
|
37358
|
+
assign:禁止访问Metadata Server
|
|
37359
|
+
blockhostnetworkpod:禁止创建HostNetwork类型Pod
|
|
37360
|
+
|
|
37361
|
+
可选策略:
|
|
37362
|
+
blockvolumemountpath:禁止容器挂载指定的目录
|
|
37363
|
+
k8sallowedrepos:容器镜像必须以指定字符串列表中的字符串开头
|
|
37364
|
+
k8sblockendpointeditdefaultrole:禁止默认ClusterRole修改Endpoints
|
|
37365
|
+
k8sblockloadbalancer:不允许Service为LoadBalancer类型
|
|
37366
|
+
k8sblocknodeport:不允许Service为NodePort类型
|
|
37367
|
+
k8sblockwildcardingress:禁止ingress配置空白或通配符类型的hostname
|
|
37368
|
+
k8scontainerlimits:限制容器必须设置CPU和内存Limit
|
|
37369
|
+
k8scontainerratios:限制CPU和内存的Request与Limit的最大比率
|
|
37370
|
+
k8scontainerrequests:限制CPU和内存的Request必须设置且小于配置的最大值
|
|
37371
|
+
k8srequiredresources:必须配置内存的Limit,CPU和内存的Request
|
|
37372
|
+
k8sdisallowanonymous:不允许将白名单以外的ClusterRole和Role关联到system:anonymous User和system:unauthenticated Group
|
|
37373
|
+
k8sdisallowedtags:约束容器镜像tag
|
|
37374
|
+
k8sexternalips:限制服务externalIP仅为允许的IP地址列表
|
|
37375
|
+
k8simagedigests:容器镜像必须包含digest
|
|
37376
|
+
noupdateserviceaccount:拒绝白名单外的资源更新ServiceAccount
|
|
37377
|
+
k8sreplicalimits:要求具有spec.replicas字段的对象(Deployments、ReplicaSets等)在定义的范围内
|
|
37378
|
+
k8srequiredannotations:要求资源包含指定的annotations,其值与提供的正则表达式匹配
|
|
37379
|
+
k8srequiredlabels:要求资源包含指定的标签,其值与提供的正则表达式匹配
|
|
37380
|
+
k8srequiredprobes:要求Pod具有Readiness或Liveness Probe
|
|
37381
|
+
k8spspautomountserviceaccounttokenpod:约束容器不能设置automountServiceAccountToken为true
|
|
37382
|
+
k8spspallowprivilegeescalationcontainer:约束PodSecurityPolicy中的allowPrivilegeEscalation字段为false
|
|
37383
|
+
k8spspapparmor:约束AppArmor字段列表
|
|
37384
|
+
k8spspcapabilities:限制PodSecurityPolicy中的allowedCapabilities和requiredDropCapabilities字段
|
|
37385
|
+
k8spspflexvolumes:约束PodSecurityPolicy中的allowedFlexVolumes字段类型
|
|
37386
|
+
k8spspforbiddensysctls:约束PodSecurityPolicy中的sysctls字段不能使用的name
|
|
37387
|
+
k8spspfsgroup:控制PodSecurityPolicy中的fsGroup字段在限制范围内
|
|
37388
|
+
k8spsphostfilesystem:约束PodSecurityPolicy中的hostPath字段的参数
|
|
37389
|
+
k8spsphostnamespace:限制PodSecurityPolicy中的hostPID和hostIPC字段
|
|
37390
|
+
k8spsphostnetworkingports:约束PodSecurityPolicy中的hostNetwork和hostPorts字段
|
|
37391
|
+
k8spspprivilegedcontainer:禁止PodSecurityPolicy中的privileged字段为true
|
|
37392
|
+
k8spspprocmount:约束PodSecurityPolicy中的allowedProcMountTypes字段
|
|
37393
|
+
k8spspreadonlyrootfilesystem:约束PodSecurityPolicy中的readOnlyRootFilesystem字段
|
|
37394
|
+
k8spspseccomp:约束PodSecurityPolicy上的seccomp.security.alpha.kubernetes.io/allowedProfileNames注解
|
|
37395
|
+
k8spspselinuxv2:约束Pod定义SELinux配置的允许列表
|
|
37396
|
+
k8spspallowedusers:约束PodSecurityPolicy中的runAsUser、runAsGroup、supplementalGroups和fsGroup字段
|
|
37397
|
+
k8spspvolumetypes:约束PodSecurityPolicy中的volumes字段类型
|
|
37257
37398
|
:rtype: str
|
|
37258
37399
|
"""
|
|
37259
37400
|
return self._Kind
|
|
@@ -46395,17 +46536,17 @@ class UpdateAddonRequest(AbstractModel):
|
|
|
46395
46536
|
|
|
46396
46537
|
def __init__(self):
|
|
46397
46538
|
r"""
|
|
46398
|
-
:param _ClusterId: 集群ID
|
|
46539
|
+
:param _ClusterId: 集群ID,请从容器服务控制台集群列表中获取(https://console.cloud.tencent.com/tke2/cluster)。
|
|
46399
46540
|
:type ClusterId: str
|
|
46400
|
-
:param _AddonName: addon
|
|
46541
|
+
:param _AddonName: addon名称,请从容器服务控制台进入集群详情页后,在组件管理页面中获取。
|
|
46401
46542
|
:type AddonName: str
|
|
46402
46543
|
:param _AddonVersion: addon版本(不传默认不更新,不传AddonVersion时RawValues必传)
|
|
46403
46544
|
:type AddonVersion: str
|
|
46404
|
-
:param _RawValues: addon的参数,是一个json格式的base64转码后的字符串(addon参数由DescribeAddonValues获取,不传RawValues时AddonVersion
|
|
46545
|
+
:param _RawValues: addon的参数,是一个json格式的base64转码后的字符串(addon参数由DescribeAddonValues获取,不传RawValues时AddonVersion必传)。
|
|
46405
46546
|
:type RawValues: str
|
|
46406
46547
|
:param _UpdateStrategy: addon参数的更新策略,支持replace和merge两种策略,默认值为merge,兼容旧版本API。replace:使用新RawValues全量替换addon原RawValues,merge:根据新RawValues新增或更新addon原RawValues中对应参数。
|
|
46407
46548
|
:type UpdateStrategy: str
|
|
46408
|
-
:param _DryRun: 是否仅做更新检查,设置为true
|
|
46549
|
+
:param _DryRun: 是否仅做更新检查,设置为true时仅做检查,不会更新组件。默认值为 false。
|
|
46409
46550
|
:type DryRun: bool
|
|
46410
46551
|
"""
|
|
46411
46552
|
self._ClusterId = None
|
|
@@ -46417,7 +46558,7 @@ class UpdateAddonRequest(AbstractModel):
|
|
|
46417
46558
|
|
|
46418
46559
|
@property
|
|
46419
46560
|
def ClusterId(self):
|
|
46420
|
-
r"""集群ID
|
|
46561
|
+
r"""集群ID,请从容器服务控制台集群列表中获取(https://console.cloud.tencent.com/tke2/cluster)。
|
|
46421
46562
|
:rtype: str
|
|
46422
46563
|
"""
|
|
46423
46564
|
return self._ClusterId
|
|
@@ -46428,7 +46569,7 @@ class UpdateAddonRequest(AbstractModel):
|
|
|
46428
46569
|
|
|
46429
46570
|
@property
|
|
46430
46571
|
def AddonName(self):
|
|
46431
|
-
r"""addon
|
|
46572
|
+
r"""addon名称,请从容器服务控制台进入集群详情页后,在组件管理页面中获取。
|
|
46432
46573
|
:rtype: str
|
|
46433
46574
|
"""
|
|
46434
46575
|
return self._AddonName
|
|
@@ -46450,7 +46591,7 @@ class UpdateAddonRequest(AbstractModel):
|
|
|
46450
46591
|
|
|
46451
46592
|
@property
|
|
46452
46593
|
def RawValues(self):
|
|
46453
|
-
r"""addon的参数,是一个json格式的base64转码后的字符串(addon参数由DescribeAddonValues获取,不传RawValues时AddonVersion
|
|
46594
|
+
r"""addon的参数,是一个json格式的base64转码后的字符串(addon参数由DescribeAddonValues获取,不传RawValues时AddonVersion必传)。
|
|
46454
46595
|
:rtype: str
|
|
46455
46596
|
"""
|
|
46456
46597
|
return self._RawValues
|
|
@@ -46472,7 +46613,7 @@ class UpdateAddonRequest(AbstractModel):
|
|
|
46472
46613
|
|
|
46473
46614
|
@property
|
|
46474
46615
|
def DryRun(self):
|
|
46475
|
-
r"""是否仅做更新检查,设置为true
|
|
46616
|
+
r"""是否仅做更新检查,设置为true时仅做检查,不会更新组件。默认值为 false。
|
|
46476
46617
|
:rtype: bool
|
|
46477
46618
|
"""
|
|
46478
46619
|
return self._DryRun
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
tencentcloud-sdk-python-common<4.0.0,>=3.0.1479
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
tencentcloud-sdk-python-common<4.0.0,>=3.0.1469
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|