From 943d41dfeffe96c767ae941bad5cb107f49ebc11 Mon Sep 17 00:00:00 2001 From: Kubernetes Publisher Date: Fri, 12 Sep 2025 23:12:01 +0000 Subject: [PATCH 1/3] Automated openapi generation from release-1.34 Signed-off-by: Kubernetes Publisher --- .../.openapi-generator/swagger.json.sha256 | 2 +- kubernetes/api/openapi.yaml | 53889 ++++++++++------ .../docs/AdmissionregistrationV1beta1Api.md | 503 +- kubernetes/docs/CertificatesV1alpha1Api.md | 1120 +- ...esourceClaim.md => CoreV1ResourceClaim.md} | 2 +- kubernetes/docs/ResourceV1Api.md | 2914 + ...rceClaim.md => ResourceV1ResourceClaim.md} | 6 +- kubernetes/docs/ResourceV1alpha3Api.md | 3135 +- kubernetes/docs/StorageV1Api.md | 650 +- ...ceStatus.md => V1AllocatedDeviceStatus.md} | 7 +- kubernetes/docs/V1AllocationResult.md | 15 + kubernetes/docs/V1CELDeviceSelector.md | 13 + kubernetes/docs/V1CSIDriverSpec.md | 4 +- kubernetes/docs/V1CapacityRequestPolicy.md | 15 + .../docs/V1CapacityRequestPolicyRange.md | 15 + kubernetes/docs/V1CapacityRequirements.md | 13 + kubernetes/docs/V1Container.md | 5 +- .../V1ContainerExtendedResourceRequest.md | 15 + kubernetes/docs/V1ContainerRestartRule.md | 14 + .../docs/V1ContainerRestartRuleOnExitCodes.md | 14 + .../docs/{V1alpha3Counter.md => V1Counter.md} | 2 +- kubernetes/docs/V1CounterSet.md | 14 + kubernetes/docs/V1Device.md | 24 + ....md => V1DeviceAllocationConfiguration.md} | 4 +- kubernetes/docs/V1DeviceAllocationResult.md | 14 + ...eviceAttribute.md => V1DeviceAttribute.md} | 2 +- kubernetes/docs/V1DeviceCapacity.md | 14 + kubernetes/docs/V1DeviceClaim.md | 15 + ...ation.md => V1DeviceClaimConfiguration.md} | 4 +- ...1alpha3DeviceClass.md => V1DeviceClass.md} | 4 +- ...ation.md => V1DeviceClassConfiguration.md} | 4 +- ...eviceClassList.md => V1DeviceClassList.md} | 4 +- kubernetes/docs/V1DeviceClassSpec.md | 15 + ...iceConstraint.md => V1DeviceConstraint.md} | 3 +- kubernetes/docs/V1DeviceCounterConsumption.md | 14 + kubernetes/docs/V1DeviceRequest.md | 15 + .../docs/V1DeviceRequestAllocationResult.md | 22 + kubernetes/docs/V1DeviceSelector.md | 13 + kubernetes/docs/V1DeviceSubRequest.md | 19 + kubernetes/docs/V1DeviceTaint.md | 16 + ...iceToleration.md => V1DeviceToleration.md} | 2 +- kubernetes/docs/V1EnvFromSource.md | 2 +- kubernetes/docs/V1EnvVar.md | 2 +- kubernetes/docs/V1EnvVarSource.md | 1 + kubernetes/docs/V1EphemeralContainer.md | 5 +- kubernetes/docs/V1ExactDeviceRequest.md | 19 + kubernetes/docs/V1FileKeySelector.md | 16 + kubernetes/docs/V1GlusterfsVolumeSource.md | 2 +- kubernetes/docs/V1JobSpec.md | 4 +- ...rkDeviceData.md => V1NetworkDeviceData.md} | 4 +- kubernetes/docs/V1NetworkPolicySpec.md | 2 +- ...tion.md => V1OpaqueDeviceConfiguration.md} | 2 +- .../docs/V1PersistentVolumeClaimSpec.md | 2 +- .../docs/V1PersistentVolumeClaimStatus.md | 2 +- kubernetes/docs/V1PersistentVolumeSpec.md | 2 +- kubernetes/docs/V1PodAntiAffinity.md | 2 +- kubernetes/docs/V1PodCertificateProjection.md | 18 + .../docs/V1PodExtendedResourceClaimStatus.md | 14 + kubernetes/docs/V1PodSpec.md | 3 +- kubernetes/docs/V1PodStatus.md | 1 + ...md => V1ResourceClaimConsumerReference.md} | 2 +- ...rceClaimList.md => V1ResourceClaimList.md} | 4 +- ...rceClaimSpec.md => V1ResourceClaimSpec.md} | 4 +- kubernetes/docs/V1ResourceClaimStatus.md | 15 + ...Template.md => V1ResourceClaimTemplate.md} | 4 +- ...List.md => V1ResourceClaimTemplateList.md} | 4 +- ...Spec.md => V1ResourceClaimTemplateSpec.md} | 4 +- ...lpha3ResourcePool.md => V1ResourcePool.md} | 2 +- kubernetes/docs/V1ResourceRequirements.md | 2 +- ...ha3ResourceSlice.md => V1ResourceSlice.md} | 4 +- ...rceSliceList.md => V1ResourceSliceList.md} | 4 +- ...rceSliceSpec.md => V1ResourceSliceSpec.md} | 8 +- kubernetes/docs/V1SuccessPolicy.md | 2 +- kubernetes/docs/V1Taint.md | 2 +- kubernetes/docs/V1VolumeAttributesClass.md | 21 + .../docs/V1VolumeAttributesClassList.md | 20 + kubernetes/docs/V1VolumeError.md | 2 +- kubernetes/docs/V1VolumeProjection.md | 1 + ...cy.md => V1alpha1PodCertificateRequest.md} | 8 +- .../docs/V1alpha1PodCertificateRequestList.md | 20 + .../docs/V1alpha1PodCertificateRequestSpec.md | 22 + .../V1alpha1PodCertificateRequestStatus.md | 17 + kubernetes/docs/V1alpha3AllocationResult.md | 14 - kubernetes/docs/V1alpha3BasicDevice.md | 19 - kubernetes/docs/V1alpha3CounterSet.md | 14 - kubernetes/docs/V1alpha3Device.md | 14 - .../docs/V1alpha3DeviceAllocationResult.md | 14 - kubernetes/docs/V1alpha3DeviceClaim.md | 15 - kubernetes/docs/V1alpha3DeviceClassSpec.md | 14 - .../docs/V1alpha3DeviceCounterConsumption.md | 14 - kubernetes/docs/V1alpha3DeviceRequest.md | 20 - .../V1alpha3DeviceRequestAllocationResult.md | 18 - kubernetes/docs/V1alpha3DeviceSubRequest.md | 18 - .../docs/V1alpha3ResourceClaimStatus.md | 15 - .../docs/V1beta1AllocatedDeviceStatus.md | 3 +- kubernetes/docs/V1beta1AllocationResult.md | 1 + kubernetes/docs/V1beta1ApplyConfiguration.md | 13 + kubernetes/docs/V1beta1AuditAnnotation.md | 14 - kubernetes/docs/V1beta1BasicDevice.md | 4 + kubernetes/docs/V1beta1CELDeviceSelector.md | 2 +- .../docs/V1beta1CapacityRequestPolicy.md | 15 + .../docs/V1beta1CapacityRequestPolicyRange.md | 15 + .../docs/V1beta1CapacityRequirements.md | 13 + kubernetes/docs/V1beta1DeviceCapacity.md | 1 + kubernetes/docs/V1beta1DeviceClassSpec.md | 1 + kubernetes/docs/V1beta1DeviceConstraint.md | 1 + kubernetes/docs/V1beta1DeviceRequest.md | 1 + .../V1beta1DeviceRequestAllocationResult.md | 4 + kubernetes/docs/V1beta1DeviceSubRequest.md | 1 + kubernetes/docs/V1beta1ExpressionWarning.md | 14 - kubernetes/docs/V1beta1JSONPatch.md | 13 + .../docs/V1beta1MutatingAdmissionPolicy.md | 20 + .../V1beta1MutatingAdmissionPolicyBinding.md | 20 + ...beta1MutatingAdmissionPolicyBindingList.md | 20 + ...beta1MutatingAdmissionPolicyBindingSpec.md | 15 + .../V1beta1MutatingAdmissionPolicyList.md | 20 + .../V1beta1MutatingAdmissionPolicySpec.md | 19 + kubernetes/docs/V1beta1Mutation.md | 15 + kubernetes/docs/V1beta1TypeChecking.md | 13 - ...V1beta1ValidatingAdmissionPolicyBinding.md | 20 - ...ta1ValidatingAdmissionPolicyBindingList.md | 20 - ...ta1ValidatingAdmissionPolicyBindingSpec.md | 16 - .../V1beta1ValidatingAdmissionPolicyList.md | 20 - .../V1beta1ValidatingAdmissionPolicySpec.md | 19 - .../V1beta1ValidatingAdmissionPolicyStatus.md | 15 - kubernetes/docs/V1beta1Validation.md | 16 - .../docs/V1beta2AllocatedDeviceStatus.md | 3 +- kubernetes/docs/V1beta2AllocationResult.md | 1 + kubernetes/docs/V1beta2CELDeviceSelector.md | 2 +- .../docs/V1beta2CapacityRequestPolicy.md | 15 + .../docs/V1beta2CapacityRequestPolicyRange.md | 15 + .../docs/V1beta2CapacityRequirements.md | 13 + kubernetes/docs/V1beta2Device.md | 4 + kubernetes/docs/V1beta2DeviceCapacity.md | 1 + kubernetes/docs/V1beta2DeviceClassSpec.md | 1 + kubernetes/docs/V1beta2DeviceConstraint.md | 1 + .../V1beta2DeviceRequestAllocationResult.md | 4 + kubernetes/docs/V1beta2DeviceSubRequest.md | 1 + kubernetes/docs/V1beta2ExactDeviceRequest.md | 1 + .../client/openapi/ApiCallback.java | 23 +- .../kubernetes/client/openapi/ApiClient.java | 23 +- .../client/openapi/ApiException.java | 25 +- .../client/openapi/ApiResponse.java | 23 +- .../client/openapi/Configuration.java | 25 +- .../openapi/GzipRequestInterceptor.java | 23 +- .../io/kubernetes/client/openapi/JSON.java | 59 +- .../io/kubernetes/client/openapi/Pair.java | 25 +- .../client/openapi/ProgressRequestBody.java | 23 +- .../client/openapi/ProgressResponseBody.java | 25 +- .../client/openapi/ServerConfiguration.java | 12 - .../client/openapi/ServerVariable.java | 12 - .../kubernetes/client/openapi/StringUtil.java | 25 +- .../apis/AdmissionregistrationApi.java | 31 +- .../apis/AdmissionregistrationV1Api.java | 301 +- .../AdmissionregistrationV1alpha1Api.java | 151 +- .../apis/AdmissionregistrationV1beta1Api.java | 1174 +- .../client/openapi/apis/ApiextensionsApi.java | 31 +- .../openapi/apis/ApiextensionsV1Api.java | 121 +- .../openapi/apis/ApiregistrationApi.java | 31 +- .../openapi/apis/ApiregistrationV1Api.java | 121 +- .../client/openapi/apis/ApisApi.java | 31 +- .../client/openapi/apis/AppsApi.java | 31 +- .../client/openapi/apis/AppsV1Api.java | 693 +- .../openapi/apis/AuthenticationApi.java | 31 +- .../openapi/apis/AuthenticationV1Api.java | 47 +- .../client/openapi/apis/AuthorizationApi.java | 31 +- .../openapi/apis/AuthorizationV1Api.java | 65 +- .../client/openapi/apis/AutoscalingApi.java | 31 +- .../client/openapi/apis/AutoscalingV1Api.java | 149 +- .../client/openapi/apis/AutoscalingV2Api.java | 149 +- .../client/openapi/apis/BatchApi.java | 31 +- .../client/openapi/apis/BatchV1Api.java | 267 +- .../client/openapi/apis/CertificatesApi.java | 31 +- .../openapi/apis/CertificatesV1Api.java | 151 +- .../openapi/apis/CertificatesV1alpha1Api.java | 2439 +- .../openapi/apis/CertificatesV1beta1Api.java | 91 +- .../client/openapi/apis/CoordinationApi.java | 31 +- .../openapi/apis/CoordinationV1Api.java | 113 +- .../openapi/apis/CoordinationV1alpha2Api.java | 113 +- .../openapi/apis/CoordinationV1beta1Api.java | 113 +- .../client/openapi/apis/CoreApi.java | 31 +- .../client/openapi/apis/CoreV1Api.java | 2243 +- .../client/openapi/apis/CustomObjectsApi.java | 471 +- .../client/openapi/apis/DiscoveryApi.java | 31 +- .../client/openapi/apis/DiscoveryV1Api.java | 113 +- .../client/openapi/apis/EventsApi.java | 31 +- .../client/openapi/apis/EventsV1Api.java | 113 +- .../openapi/apis/FlowcontrolApiserverApi.java | 31 +- .../apis/FlowcontrolApiserverV1Api.java | 211 +- .../openapi/apis/InternalApiserverApi.java | 31 +- .../apis/InternalApiserverV1alpha1Api.java | 121 +- .../client/openapi/apis/LogsApi.java | 57 +- .../client/openapi/apis/NetworkingApi.java | 31 +- .../client/openapi/apis/NetworkingV1Api.java | 441 +- .../openapi/apis/NetworkingV1beta1Api.java | 181 +- .../client/openapi/apis/NodeApi.java | 31 +- .../client/openapi/apis/NodeV1Api.java | 91 +- .../client/openapi/apis/OpenidApi.java | 31 +- .../client/openapi/apis/PolicyApi.java | 31 +- .../client/openapi/apis/PolicyV1Api.java | 149 +- .../openapi/apis/RbacAuthorizationApi.java | 31 +- .../openapi/apis/RbacAuthorizationV1Api.java | 315 +- .../client/openapi/apis/ResourceApi.java | 31 +- .../client/openapi/apis/ResourceV1Api.java | 5940 ++ .../openapi/apis/ResourceV1alpha3Api.java | 6626 +- .../openapi/apis/ResourceV1beta1Api.java | 351 +- .../openapi/apis/ResourceV1beta2Api.java | 351 +- .../client/openapi/apis/SchedulingApi.java | 31 +- .../client/openapi/apis/SchedulingV1Api.java | 91 +- .../client/openapi/apis/StorageApi.java | 31 +- .../client/openapi/apis/StorageV1Api.java | 1823 +- .../openapi/apis/StorageV1alpha1Api.java | 91 +- .../openapi/apis/StorageV1beta1Api.java | 91 +- .../openapi/apis/StoragemigrationApi.java | 31 +- .../apis/StoragemigrationV1alpha1Api.java | 121 +- .../client/openapi/apis/VersionApi.java | 31 +- .../client/openapi/apis/WellKnownApi.java | 31 +- .../client/openapi/auth/ApiKeyAuth.java | 25 +- .../client/openapi/auth/Authentication.java | 23 +- .../client/openapi/auth/HttpBasicAuth.java | 23 +- .../client/openapi/auth/HttpBearerAuth.java | 25 +- ...missionregistrationV1ServiceReference.java | 34 +- ...sionregistrationV1WebhookClientConfig.java | 32 +- .../ApiextensionsV1ServiceReference.java | 34 +- .../ApiextensionsV1WebhookClientConfig.java | 32 +- .../ApiregistrationV1ServiceReference.java | 32 +- .../models/AuthenticationV1TokenRequest.java | 36 +- .../openapi/models/CoreV1EndpointPort.java | 34 +- .../client/openapi/models/CoreV1Event.java | 60 +- .../openapi/models/CoreV1EventList.java | 34 +- .../openapi/models/CoreV1EventSeries.java | 30 +- ...rceClaim.java => CoreV1ResourceClaim.java} | 44 +- .../models/DiscoveryV1EndpointPort.java | 34 +- .../client/openapi/models/EventsV1Event.java | 60 +- .../openapi/models/EventsV1EventList.java | 34 +- .../openapi/models/EventsV1EventSeries.java | 30 +- .../openapi/models/FlowcontrolV1Subject.java | 34 +- .../client/openapi/models/RbacV1Subject.java | 34 +- ...laim.java => ResourceV1ResourceClaim.java} | 78 +- .../openapi/models/StorageV1TokenRequest.java | 30 +- .../client/openapi/models/V1APIGroup.java | 38 +- .../client/openapi/models/V1APIGroupList.java | 32 +- .../client/openapi/models/V1APIResource.java | 46 +- .../openapi/models/V1APIResourceList.java | 34 +- .../client/openapi/models/V1APIService.java | 36 +- .../openapi/models/V1APIServiceCondition.java | 36 +- .../openapi/models/V1APIServiceList.java | 34 +- .../openapi/models/V1APIServiceSpec.java | 40 +- .../openapi/models/V1APIServiceStatus.java | 28 +- .../client/openapi/models/V1APIVersions.java | 34 +- .../V1AWSElasticBlockStoreVolumeSource.java | 34 +- .../client/openapi/models/V1Affinity.java | 32 +- .../openapi/models/V1AggregationRule.java | 28 +- ...atus.java => V1AllocatedDeviceStatus.java} | 111 +- .../openapi/models/V1AllocationResult.java | 161 + .../openapi/models/V1AppArmorProfile.java | 30 +- .../openapi/models/V1AttachedVolume.java | 30 +- .../openapi/models/V1AuditAnnotation.java | 30 +- .../models/V1AzureDiskVolumeSource.java | 38 +- .../V1AzureFilePersistentVolumeSource.java | 34 +- .../models/V1AzureFileVolumeSource.java | 32 +- .../client/openapi/models/V1Binding.java | 34 +- .../models/V1BoundObjectReference.java | 34 +- .../openapi/models/V1CELDeviceSelector.java | 99 + .../client/openapi/models/V1CSIDriver.java | 34 +- .../openapi/models/V1CSIDriverList.java | 34 +- .../openapi/models/V1CSIDriverSpec.java | 52 +- .../client/openapi/models/V1CSINode.java | 34 +- .../openapi/models/V1CSINodeDriver.java | 34 +- .../client/openapi/models/V1CSINodeList.java | 34 +- .../client/openapi/models/V1CSINodeSpec.java | 28 +- .../models/V1CSIPersistentVolumeSource.java | 46 +- .../openapi/models/V1CSIStorageCapacity.java | 40 +- .../models/V1CSIStorageCapacityList.java | 34 +- .../openapi/models/V1CSIVolumeSource.java | 36 +- .../client/openapi/models/V1Capabilities.java | 30 +- .../models/V1CapacityRequestPolicy.java | 170 + .../models/V1CapacityRequestPolicyRange.java | 158 + .../models/V1CapacityRequirements.java | 112 + .../V1CephFSPersistentVolumeSource.java | 38 +- .../openapi/models/V1CephFSVolumeSource.java | 38 +- .../models/V1CertificateSigningRequest.java | 36 +- .../V1CertificateSigningRequestCondition.java | 38 +- .../V1CertificateSigningRequestList.java | 34 +- .../V1CertificateSigningRequestSpec.java | 42 +- .../V1CertificateSigningRequestStatus.java | 30 +- .../V1CinderPersistentVolumeSource.java | 34 +- .../openapi/models/V1CinderVolumeSource.java | 34 +- .../openapi/models/V1ClientIPConfig.java | 28 +- .../client/openapi/models/V1ClusterRole.java | 36 +- .../openapi/models/V1ClusterRoleBinding.java | 36 +- .../models/V1ClusterRoleBindingList.java | 34 +- .../openapi/models/V1ClusterRoleList.java | 34 +- .../V1ClusterTrustBundleProjection.java | 36 +- .../openapi/models/V1ComponentCondition.java | 34 +- .../openapi/models/V1ComponentStatus.java | 34 +- .../openapi/models/V1ComponentStatusList.java | 34 +- .../client/openapi/models/V1Condition.java | 38 +- .../client/openapi/models/V1ConfigMap.java | 38 +- .../openapi/models/V1ConfigMapEnvSource.java | 30 +- .../models/V1ConfigMapKeySelector.java | 32 +- .../openapi/models/V1ConfigMapList.java | 34 +- .../models/V1ConfigMapNodeConfigSource.java | 36 +- .../openapi/models/V1ConfigMapProjection.java | 32 +- .../models/V1ConfigMapVolumeSource.java | 34 +- .../client/openapi/models/V1Container.java | 122 +- .../V1ContainerExtendedResourceRequest.java | 155 + .../openapi/models/V1ContainerImage.java | 30 +- .../openapi/models/V1ContainerPort.java | 36 +- .../models/V1ContainerResizePolicy.java | 30 +- .../models/V1ContainerRestartRule.java | 129 + .../V1ContainerRestartRuleOnExitCodes.java | 138 + .../openapi/models/V1ContainerState.java | 32 +- .../models/V1ContainerStateRunning.java | 28 +- .../models/V1ContainerStateTerminated.java | 40 +- .../models/V1ContainerStateWaiting.java | 30 +- .../openapi/models/V1ContainerStatus.java | 56 +- .../openapi/models/V1ContainerUser.java | 28 +- .../openapi/models/V1ControllerRevision.java | 36 +- .../models/V1ControllerRevisionList.java | 34 +- .../{V1alpha3Counter.java => V1Counter.java} | 38 +- ...lpha3CounterSet.java => V1CounterSet.java} | 62 +- .../client/openapi/models/V1CronJob.java | 36 +- .../client/openapi/models/V1CronJobList.java | 34 +- .../client/openapi/models/V1CronJobSpec.java | 42 +- .../openapi/models/V1CronJobStatus.java | 32 +- .../models/V1CrossVersionObjectReference.java | 32 +- .../V1CustomResourceColumnDefinition.java | 38 +- .../models/V1CustomResourceConversion.java | 30 +- .../models/V1CustomResourceDefinition.java | 36 +- .../V1CustomResourceDefinitionCondition.java | 36 +- .../V1CustomResourceDefinitionList.java | 34 +- .../V1CustomResourceDefinitionNames.java | 38 +- .../V1CustomResourceDefinitionSpec.java | 38 +- .../V1CustomResourceDefinitionStatus.java | 32 +- .../V1CustomResourceDefinitionVersion.java | 44 +- .../V1CustomResourceSubresourceScale.java | 32 +- .../models/V1CustomResourceSubresources.java | 30 +- .../models/V1CustomResourceValidation.java | 28 +- .../openapi/models/V1DaemonEndpoint.java | 28 +- .../client/openapi/models/V1DaemonSet.java | 36 +- .../openapi/models/V1DaemonSetCondition.java | 36 +- .../openapi/models/V1DaemonSetList.java | 34 +- .../openapi/models/V1DaemonSetSpec.java | 36 +- .../openapi/models/V1DaemonSetStatus.java | 46 +- .../models/V1DaemonSetUpdateStrategy.java | 30 +- .../openapi/models/V1DeleteOptions.java | 42 +- .../client/openapi/models/V1Deployment.java | 36 +- .../openapi/models/V1DeploymentCondition.java | 38 +- .../openapi/models/V1DeploymentList.java | 34 +- .../openapi/models/V1DeploymentSpec.java | 42 +- .../openapi/models/V1DeploymentStatus.java | 44 +- .../openapi/models/V1DeploymentStrategy.java | 30 +- .../client/openapi/models/V1Device.java | 475 + ...a => V1DeviceAllocationConfiguration.java} | 60 +- ...ult.java => V1DeviceAllocationResult.java} | 64 +- ...eAttribute.java => V1DeviceAttribute.java} | 56 +- .../openapi/models/V1DeviceCapacity.java | 130 + ...ha3DeviceClaim.java => V1DeviceClaim.java} | 80 +- ...n.java => V1DeviceClaimConfiguration.java} | 54 +- ...ha3DeviceClass.java => V1DeviceClass.java} | 64 +- ...n.java => V1DeviceClassConfiguration.java} | 46 +- ...eClassList.java => V1DeviceClassList.java} | 66 +- .../openapi/models/V1DeviceClassSpec.java | 178 + ...onstraint.java => V1DeviceConstraint.java} | 75 +- ...n.java => V1DeviceCounterConsumption.java} | 62 +- .../openapi/models/V1DeviceRequest.java | 169 + .../V1DeviceRequestAllocationResult.java | 395 + .../openapi/models/V1DeviceSelector.java | 101 + ...ubRequest.java => V1DeviceSubRequest.java} | 130 +- .../client/openapi/models/V1DeviceTaint.java | 186 + ...oleration.java => V1DeviceToleration.java} | 62 +- .../models/V1DownwardAPIProjection.java | 28 +- .../models/V1DownwardAPIVolumeFile.java | 34 +- .../models/V1DownwardAPIVolumeSource.java | 30 +- .../models/V1EmptyDirVolumeSource.java | 30 +- .../client/openapi/models/V1Endpoint.java | 42 +- .../openapi/models/V1EndpointAddress.java | 34 +- .../openapi/models/V1EndpointConditions.java | 32 +- .../openapi/models/V1EndpointHints.java | 30 +- .../openapi/models/V1EndpointSlice.java | 38 +- .../openapi/models/V1EndpointSliceList.java | 34 +- .../openapi/models/V1EndpointSubset.java | 32 +- .../client/openapi/models/V1Endpoints.java | 34 +- .../openapi/models/V1EndpointsList.java | 34 +- .../openapi/models/V1EnvFromSource.java | 36 +- .../client/openapi/models/V1EnvVar.java | 36 +- .../client/openapi/models/V1EnvVarSource.java | 66 +- .../openapi/models/V1EphemeralContainer.java | 124 +- .../models/V1EphemeralVolumeSource.java | 28 +- .../client/openapi/models/V1EventSource.java | 30 +- .../client/openapi/models/V1Eviction.java | 34 +- .../openapi/models/V1ExactDeviceRequest.java | 294 + .../client/openapi/models/V1ExecAction.java | 28 +- .../V1ExemptPriorityLevelConfiguration.java | 30 +- .../openapi/models/V1ExpressionWarning.java | 30 +- .../models/V1ExternalDocumentation.java | 30 +- .../openapi/models/V1FCVolumeSource.java | 36 +- .../models/V1FieldSelectorAttributes.java | 30 +- .../models/V1FieldSelectorRequirement.java | 32 +- .../openapi/models/V1FileKeySelector.java | 184 + .../models/V1FlexPersistentVolumeSource.java | 36 +- .../openapi/models/V1FlexVolumeSource.java | 36 +- .../openapi/models/V1FlockerVolumeSource.java | 30 +- .../models/V1FlowDistinguisherMethod.java | 28 +- .../client/openapi/models/V1FlowSchema.java | 36 +- .../openapi/models/V1FlowSchemaCondition.java | 36 +- .../openapi/models/V1FlowSchemaList.java | 34 +- .../openapi/models/V1FlowSchemaSpec.java | 34 +- .../openapi/models/V1FlowSchemaStatus.java | 28 +- .../client/openapi/models/V1ForNode.java | 28 +- .../client/openapi/models/V1ForZone.java | 28 +- .../V1GCEPersistentDiskVolumeSource.java | 34 +- .../client/openapi/models/V1GRPCAction.java | 30 +- .../openapi/models/V1GitRepoVolumeSource.java | 32 +- .../V1GlusterfsPersistentVolumeSource.java | 34 +- .../models/V1GlusterfsVolumeSource.java | 36 +- .../client/openapi/models/V1GroupSubject.java | 28 +- .../models/V1GroupVersionForDiscovery.java | 30 +- .../openapi/models/V1HTTPGetAction.java | 36 +- .../client/openapi/models/V1HTTPHeader.java | 30 +- .../openapi/models/V1HTTPIngressPath.java | 32 +- .../models/V1HTTPIngressRuleValue.java | 28 +- .../models/V1HorizontalPodAutoscaler.java | 36 +- .../models/V1HorizontalPodAutoscalerList.java | 34 +- .../models/V1HorizontalPodAutoscalerSpec.java | 34 +- .../V1HorizontalPodAutoscalerStatus.java | 36 +- .../client/openapi/models/V1HostAlias.java | 30 +- .../client/openapi/models/V1HostIP.java | 28 +- .../models/V1HostPathVolumeSource.java | 30 +- .../client/openapi/models/V1IPAddress.java | 34 +- .../openapi/models/V1IPAddressList.java | 34 +- .../openapi/models/V1IPAddressSpec.java | 28 +- .../client/openapi/models/V1IPBlock.java | 30 +- .../models/V1ISCSIPersistentVolumeSource.java | 48 +- .../openapi/models/V1ISCSIVolumeSource.java | 48 +- .../openapi/models/V1ImageVolumeSource.java | 30 +- .../client/openapi/models/V1Ingress.java | 36 +- .../openapi/models/V1IngressBackend.java | 30 +- .../client/openapi/models/V1IngressClass.java | 34 +- .../openapi/models/V1IngressClassList.java | 34 +- .../V1IngressClassParametersReference.java | 36 +- .../openapi/models/V1IngressClassSpec.java | 30 +- .../client/openapi/models/V1IngressList.java | 34 +- .../models/V1IngressLoadBalancerIngress.java | 32 +- .../models/V1IngressLoadBalancerStatus.java | 28 +- .../openapi/models/V1IngressPortStatus.java | 32 +- .../client/openapi/models/V1IngressRule.java | 30 +- .../models/V1IngressServiceBackend.java | 30 +- .../client/openapi/models/V1IngressSpec.java | 34 +- .../openapi/models/V1IngressStatus.java | 28 +- .../client/openapi/models/V1IngressTLS.java | 30 +- .../openapi/models/V1JSONSchemaProps.java | 114 +- .../client/openapi/models/V1Job.java | 36 +- .../client/openapi/models/V1JobCondition.java | 38 +- .../client/openapi/models/V1JobList.java | 34 +- .../client/openapi/models/V1JobSpec.java | 66 +- .../client/openapi/models/V1JobStatus.java | 48 +- .../openapi/models/V1JobTemplateSpec.java | 30 +- .../client/openapi/models/V1KeyToPath.java | 32 +- .../openapi/models/V1LabelSelector.java | 30 +- .../models/V1LabelSelectorAttributes.java | 30 +- .../models/V1LabelSelectorRequirement.java | 32 +- .../client/openapi/models/V1Lease.java | 34 +- .../client/openapi/models/V1LeaseList.java | 34 +- .../client/openapi/models/V1LeaseSpec.java | 40 +- .../client/openapi/models/V1Lifecycle.java | 32 +- .../openapi/models/V1LifecycleHandler.java | 34 +- .../client/openapi/models/V1LimitRange.java | 34 +- .../openapi/models/V1LimitRangeItem.java | 38 +- .../openapi/models/V1LimitRangeList.java | 34 +- .../openapi/models/V1LimitRangeSpec.java | 28 +- .../openapi/models/V1LimitResponse.java | 30 +- .../V1LimitedPriorityLevelConfiguration.java | 34 +- .../openapi/models/V1LinuxContainerUser.java | 32 +- .../client/openapi/models/V1ListMeta.java | 34 +- .../openapi/models/V1LoadBalancerIngress.java | 34 +- .../openapi/models/V1LoadBalancerStatus.java | 28 +- .../models/V1LocalObjectReference.java | 28 +- .../models/V1LocalSubjectAccessReview.java | 36 +- .../openapi/models/V1LocalVolumeSource.java | 30 +- .../openapi/models/V1ManagedFieldsEntry.java | 40 +- .../openapi/models/V1MatchCondition.java | 30 +- .../openapi/models/V1MatchResources.java | 36 +- .../openapi/models/V1ModifyVolumeStatus.java | 30 +- .../openapi/models/V1MutatingWebhook.java | 50 +- .../V1MutatingWebhookConfiguration.java | 34 +- .../V1MutatingWebhookConfigurationList.java | 34 +- .../openapi/models/V1NFSVolumeSource.java | 32 +- .../models/V1NamedRuleWithOperations.java | 38 +- .../client/openapi/models/V1Namespace.java | 36 +- .../openapi/models/V1NamespaceCondition.java | 36 +- .../openapi/models/V1NamespaceList.java | 34 +- .../openapi/models/V1NamespaceSpec.java | 28 +- .../openapi/models/V1NamespaceStatus.java | 30 +- ...viceData.java => V1NetworkDeviceData.java} | 56 +- .../openapi/models/V1NetworkPolicy.java | 34 +- .../models/V1NetworkPolicyEgressRule.java | 30 +- .../models/V1NetworkPolicyIngressRule.java | 30 +- .../openapi/models/V1NetworkPolicyList.java | 34 +- .../openapi/models/V1NetworkPolicyPeer.java | 32 +- .../openapi/models/V1NetworkPolicyPort.java | 32 +- .../openapi/models/V1NetworkPolicySpec.java | 37 +- .../client/openapi/models/V1Node.java | 36 +- .../client/openapi/models/V1NodeAddress.java | 30 +- .../client/openapi/models/V1NodeAffinity.java | 30 +- .../openapi/models/V1NodeCondition.java | 38 +- .../openapi/models/V1NodeConfigSource.java | 28 +- .../openapi/models/V1NodeConfigStatus.java | 34 +- .../openapi/models/V1NodeDaemonEndpoints.java | 28 +- .../client/openapi/models/V1NodeFeatures.java | 28 +- .../client/openapi/models/V1NodeList.java | 34 +- .../openapi/models/V1NodeRuntimeHandler.java | 30 +- .../models/V1NodeRuntimeHandlerFeatures.java | 30 +- .../client/openapi/models/V1NodeSelector.java | 28 +- .../models/V1NodeSelectorRequirement.java | 32 +- .../openapi/models/V1NodeSelectorTerm.java | 30 +- .../client/openapi/models/V1NodeSpec.java | 40 +- .../client/openapi/models/V1NodeStatus.java | 52 +- .../openapi/models/V1NodeSwapStatus.java | 28 +- .../openapi/models/V1NodeSystemInfo.java | 48 +- .../models/V1NonResourceAttributes.java | 30 +- .../models/V1NonResourcePolicyRule.java | 30 +- .../openapi/models/V1NonResourceRule.java | 30 +- .../openapi/models/V1ObjectFieldSelector.java | 30 +- .../client/openapi/models/V1ObjectMeta.java | 56 +- .../openapi/models/V1ObjectReference.java | 40 +- ....java => V1OpaqueDeviceConfiguration.java} | 44 +- .../client/openapi/models/V1Overhead.java | 28 +- .../openapi/models/V1OwnerReference.java | 38 +- .../client/openapi/models/V1ParamKind.java | 30 +- .../client/openapi/models/V1ParamRef.java | 34 +- .../openapi/models/V1ParentReference.java | 34 +- .../openapi/models/V1PersistentVolume.java | 36 +- .../models/V1PersistentVolumeClaim.java | 36 +- .../V1PersistentVolumeClaimCondition.java | 38 +- .../models/V1PersistentVolumeClaimList.java | 34 +- .../models/V1PersistentVolumeClaimSpec.java | 48 +- .../models/V1PersistentVolumeClaimStatus.java | 46 +- .../V1PersistentVolumeClaimTemplate.java | 30 +- .../V1PersistentVolumeClaimVolumeSource.java | 30 +- .../models/V1PersistentVolumeList.java | 34 +- .../models/V1PersistentVolumeSpec.java | 92 +- .../models/V1PersistentVolumeStatus.java | 34 +- .../V1PhotonPersistentDiskVolumeSource.java | 30 +- .../client/openapi/models/V1Pod.java | 36 +- .../client/openapi/models/V1PodAffinity.java | 30 +- .../openapi/models/V1PodAffinityTerm.java | 38 +- .../openapi/models/V1PodAntiAffinity.java | 34 +- .../models/V1PodCertificateProjection.java | 243 + .../client/openapi/models/V1PodCondition.java | 40 +- .../client/openapi/models/V1PodDNSConfig.java | 32 +- .../openapi/models/V1PodDNSConfigOption.java | 30 +- .../openapi/models/V1PodDisruptionBudget.java | 36 +- .../models/V1PodDisruptionBudgetList.java | 34 +- .../models/V1PodDisruptionBudgetSpec.java | 34 +- .../models/V1PodDisruptionBudgetStatus.java | 40 +- .../V1PodExtendedResourceClaimStatus.java | 135 + .../openapi/models/V1PodFailurePolicy.java | 28 +- ...odFailurePolicyOnExitCodesRequirement.java | 32 +- ...odFailurePolicyOnPodConditionsPattern.java | 30 +- .../models/V1PodFailurePolicyRule.java | 32 +- .../client/openapi/models/V1PodIP.java | 28 +- .../client/openapi/models/V1PodList.java | 34 +- .../client/openapi/models/V1PodOS.java | 28 +- .../openapi/models/V1PodReadinessGate.java | 28 +- .../openapi/models/V1PodResourceClaim.java | 32 +- .../models/V1PodResourceClaimStatus.java | 30 +- .../openapi/models/V1PodSchedulingGate.java | 28 +- .../openapi/models/V1PodSecurityContext.java | 52 +- .../client/openapi/models/V1PodSpec.java | 141 +- .../client/openapi/models/V1PodStatus.java | 92 +- .../client/openapi/models/V1PodTemplate.java | 34 +- .../openapi/models/V1PodTemplateList.java | 34 +- .../openapi/models/V1PodTemplateSpec.java | 30 +- .../client/openapi/models/V1PolicyRule.java | 36 +- .../models/V1PolicyRulesWithSubjects.java | 32 +- .../client/openapi/models/V1PortStatus.java | 32 +- .../models/V1PortworxVolumeSource.java | 32 +- .../openapi/models/V1Preconditions.java | 30 +- .../models/V1PreferredSchedulingTerm.java | 30 +- .../openapi/models/V1PriorityClass.java | 40 +- .../openapi/models/V1PriorityClassList.java | 34 +- .../models/V1PriorityLevelConfiguration.java | 36 +- ...V1PriorityLevelConfigurationCondition.java | 36 +- .../V1PriorityLevelConfigurationList.java | 34 +- ...V1PriorityLevelConfigurationReference.java | 28 +- .../V1PriorityLevelConfigurationSpec.java | 32 +- .../V1PriorityLevelConfigurationStatus.java | 28 +- .../client/openapi/models/V1Probe.java | 46 +- .../models/V1ProjectedVolumeSource.java | 30 +- .../models/V1QueuingConfiguration.java | 32 +- .../openapi/models/V1QuobyteVolumeSource.java | 38 +- .../models/V1RBDPersistentVolumeSource.java | 42 +- .../openapi/models/V1RBDVolumeSource.java | 42 +- .../client/openapi/models/V1ReplicaSet.java | 36 +- .../openapi/models/V1ReplicaSetCondition.java | 36 +- .../openapi/models/V1ReplicaSetList.java | 34 +- .../openapi/models/V1ReplicaSetSpec.java | 34 +- .../openapi/models/V1ReplicaSetStatus.java | 40 +- .../models/V1ReplicationController.java | 36 +- .../V1ReplicationControllerCondition.java | 36 +- .../models/V1ReplicationControllerList.java | 34 +- .../models/V1ReplicationControllerSpec.java | 34 +- .../models/V1ReplicationControllerStatus.java | 38 +- .../openapi/models/V1ResourceAttributes.java | 44 +- ... => V1ResourceClaimConsumerReference.java} | 56 +- ...laimList.java => V1ResourceClaimList.java} | 66 +- ...laimSpec.java => V1ResourceClaimSpec.java} | 46 +- ...Status.java => V1ResourceClaimStatus.java} | 78 +- ...late.java => V1ResourceClaimTemplate.java} | 64 +- ....java => V1ResourceClaimTemplateList.java} | 66 +- ....java => V1ResourceClaimTemplateSpec.java} | 52 +- .../models/V1ResourceFieldSelector.java | 32 +- .../openapi/models/V1ResourceHealth.java | 30 +- .../openapi/models/V1ResourcePolicyRule.java | 36 +- ...3ResourcePool.java => V1ResourcePool.java} | 50 +- .../openapi/models/V1ResourceQuota.java | 36 +- .../openapi/models/V1ResourceQuotaList.java | 34 +- .../openapi/models/V1ResourceQuotaSpec.java | 32 +- .../openapi/models/V1ResourceQuotaStatus.java | 30 +- .../models/V1ResourceRequirements.java | 48 +- .../client/openapi/models/V1ResourceRule.java | 34 +- ...esourceSlice.java => V1ResourceSlice.java} | 64 +- ...liceList.java => V1ResourceSliceList.java} | 66 +- ...liceSpec.java => V1ResourceSliceSpec.java} | 112 +- .../openapi/models/V1ResourceStatus.java | 30 +- .../client/openapi/models/V1Role.java | 34 +- .../client/openapi/models/V1RoleBinding.java | 36 +- .../openapi/models/V1RoleBindingList.java | 34 +- .../client/openapi/models/V1RoleList.java | 34 +- .../client/openapi/models/V1RoleRef.java | 32 +- .../models/V1RollingUpdateDaemonSet.java | 30 +- .../models/V1RollingUpdateDeployment.java | 30 +- .../V1RollingUpdateStatefulSetStrategy.java | 30 +- .../openapi/models/V1RuleWithOperations.java | 36 +- .../client/openapi/models/V1RuntimeClass.java | 38 +- .../openapi/models/V1RuntimeClassList.java | 34 +- .../openapi/models/V1SELinuxOptions.java | 34 +- .../client/openapi/models/V1Scale.java | 36 +- .../V1ScaleIOPersistentVolumeSource.java | 46 +- .../openapi/models/V1ScaleIOVolumeSource.java | 46 +- .../client/openapi/models/V1ScaleSpec.java | 28 +- .../client/openapi/models/V1ScaleStatus.java | 30 +- .../client/openapi/models/V1Scheduling.java | 30 +- .../openapi/models/V1ScopeSelector.java | 28 +- .../V1ScopedResourceSelectorRequirement.java | 32 +- .../openapi/models/V1SeccompProfile.java | 30 +- .../client/openapi/models/V1Secret.java | 43 +- .../openapi/models/V1SecretEnvSource.java | 30 +- .../openapi/models/V1SecretKeySelector.java | 32 +- .../client/openapi/models/V1SecretList.java | 34 +- .../openapi/models/V1SecretProjection.java | 32 +- .../openapi/models/V1SecretReference.java | 30 +- .../openapi/models/V1SecretVolumeSource.java | 34 +- .../openapi/models/V1SecurityContext.java | 50 +- .../openapi/models/V1SelectableField.java | 28 +- .../models/V1SelfSubjectAccessReview.java | 36 +- .../models/V1SelfSubjectAccessReviewSpec.java | 30 +- .../openapi/models/V1SelfSubjectReview.java | 34 +- .../models/V1SelfSubjectReviewStatus.java | 28 +- .../models/V1SelfSubjectRulesReview.java | 36 +- .../models/V1SelfSubjectRulesReviewSpec.java | 28 +- .../models/V1ServerAddressByClientCIDR.java | 30 +- .../client/openapi/models/V1Service.java | 36 +- .../openapi/models/V1ServiceAccount.java | 38 +- .../openapi/models/V1ServiceAccountList.java | 34 +- .../models/V1ServiceAccountSubject.java | 30 +- .../V1ServiceAccountTokenProjection.java | 32 +- .../openapi/models/V1ServiceBackendPort.java | 30 +- .../client/openapi/models/V1ServiceCIDR.java | 36 +- .../openapi/models/V1ServiceCIDRList.java | 34 +- .../openapi/models/V1ServiceCIDRSpec.java | 28 +- .../openapi/models/V1ServiceCIDRStatus.java | 28 +- .../client/openapi/models/V1ServiceList.java | 34 +- .../client/openapi/models/V1ServicePort.java | 38 +- .../client/openapi/models/V1ServiceSpec.java | 66 +- .../openapi/models/V1ServiceStatus.java | 30 +- .../models/V1SessionAffinityConfig.java | 28 +- .../client/openapi/models/V1SleepAction.java | 28 +- .../client/openapi/models/V1StatefulSet.java | 36 +- .../models/V1StatefulSetCondition.java | 36 +- .../openapi/models/V1StatefulSetList.java | 34 +- .../openapi/models/V1StatefulSetOrdinals.java | 28 +- ...tPersistentVolumeClaimRetentionPolicy.java | 30 +- .../openapi/models/V1StatefulSetSpec.java | 48 +- .../openapi/models/V1StatefulSetStatus.java | 46 +- .../models/V1StatefulSetUpdateStrategy.java | 30 +- .../client/openapi/models/V1Status.java | 42 +- .../client/openapi/models/V1StatusCause.java | 32 +- .../openapi/models/V1StatusDetails.java | 38 +- .../client/openapi/models/V1StorageClass.java | 46 +- .../openapi/models/V1StorageClassList.java | 34 +- .../V1StorageOSPersistentVolumeSource.java | 36 +- .../models/V1StorageOSVolumeSource.java | 36 +- .../openapi/models/V1SubjectAccessReview.java | 36 +- .../models/V1SubjectAccessReviewSpec.java | 38 +- .../models/V1SubjectAccessReviewStatus.java | 34 +- .../models/V1SubjectRulesReviewStatus.java | 34 +- .../openapi/models/V1SuccessPolicy.java | 32 +- .../openapi/models/V1SuccessPolicyRule.java | 30 +- .../client/openapi/models/V1Sysctl.java | 30 +- .../openapi/models/V1TCPSocketAction.java | 30 +- .../client/openapi/models/V1Taint.java | 38 +- .../openapi/models/V1TokenRequestSpec.java | 32 +- .../openapi/models/V1TokenRequestStatus.java | 30 +- .../client/openapi/models/V1TokenReview.java | 36 +- .../openapi/models/V1TokenReviewSpec.java | 30 +- .../openapi/models/V1TokenReviewStatus.java | 34 +- .../client/openapi/models/V1Toleration.java | 36 +- .../V1TopologySelectorLabelRequirement.java | 30 +- .../models/V1TopologySelectorTerm.java | 28 +- .../models/V1TopologySpreadConstraint.java | 42 +- .../client/openapi/models/V1TypeChecking.java | 28 +- .../models/V1TypedLocalObjectReference.java | 32 +- .../models/V1TypedObjectReference.java | 34 +- .../models/V1UncountedTerminatedPods.java | 30 +- .../client/openapi/models/V1UserInfo.java | 34 +- .../client/openapi/models/V1UserSubject.java | 28 +- .../models/V1ValidatingAdmissionPolicy.java | 36 +- .../V1ValidatingAdmissionPolicyBinding.java | 34 +- ...1ValidatingAdmissionPolicyBindingList.java | 34 +- ...1ValidatingAdmissionPolicyBindingSpec.java | 34 +- .../V1ValidatingAdmissionPolicyList.java | 34 +- .../V1ValidatingAdmissionPolicySpec.java | 40 +- .../V1ValidatingAdmissionPolicyStatus.java | 32 +- .../openapi/models/V1ValidatingWebhook.java | 48 +- .../V1ValidatingWebhookConfiguration.java | 34 +- .../V1ValidatingWebhookConfigurationList.java | 34 +- .../client/openapi/models/V1Validation.java | 34 +- .../openapi/models/V1ValidationRule.java | 38 +- .../client/openapi/models/V1Variable.java | 30 +- .../client/openapi/models/V1Volume.java | 88 +- .../openapi/models/V1VolumeAttachment.java | 36 +- .../models/V1VolumeAttachmentList.java | 34 +- .../models/V1VolumeAttachmentSource.java | 30 +- .../models/V1VolumeAttachmentSpec.java | 32 +- .../models/V1VolumeAttachmentStatus.java | 34 +- .../models/V1VolumeAttributesClass.java | 227 + .../models/V1VolumeAttributesClassList.java | 195 + .../client/openapi/models/V1VolumeDevice.java | 30 +- .../client/openapi/models/V1VolumeError.java | 36 +- .../client/openapi/models/V1VolumeMount.java | 40 +- .../openapi/models/V1VolumeMountStatus.java | 34 +- .../openapi/models/V1VolumeNodeAffinity.java | 28 +- .../openapi/models/V1VolumeNodeResources.java | 28 +- .../openapi/models/V1VolumeProjection.java | 68 +- .../models/V1VolumeResourceRequirements.java | 30 +- .../V1VsphereVirtualDiskVolumeSource.java | 34 +- .../client/openapi/models/V1WatchEvent.java | 30 +- .../openapi/models/V1WebhookConversion.java | 30 +- .../models/V1WeightedPodAffinityTerm.java | 30 +- .../V1WindowsSecurityContextOptions.java | 34 +- .../models/V1alpha1ApplyConfiguration.java | 28 +- .../models/V1alpha1ClusterTrustBundle.java | 34 +- .../V1alpha1ClusterTrustBundleList.java | 34 +- .../V1alpha1ClusterTrustBundleSpec.java | 30 +- .../models/V1alpha1GroupVersionResource.java | 32 +- .../openapi/models/V1alpha1JSONPatch.java | 28 +- .../models/V1alpha1MatchCondition.java | 30 +- .../models/V1alpha1MatchResources.java | 36 +- .../models/V1alpha1MigrationCondition.java | 36 +- .../V1alpha1MutatingAdmissionPolicy.java | 34 +- ...1alpha1MutatingAdmissionPolicyBinding.java | 34 +- ...ha1MutatingAdmissionPolicyBindingList.java | 34 +- ...ha1MutatingAdmissionPolicyBindingSpec.java | 32 +- .../V1alpha1MutatingAdmissionPolicyList.java | 34 +- .../V1alpha1MutatingAdmissionPolicySpec.java | 40 +- .../openapi/models/V1alpha1Mutation.java | 32 +- .../V1alpha1NamedRuleWithOperations.java | 38 +- .../openapi/models/V1alpha1ParamKind.java | 30 +- .../openapi/models/V1alpha1ParamRef.java | 34 +- ...ava => V1alpha1PodCertificateRequest.java} | 85 +- .../V1alpha1PodCertificateRequestList.java | 195 + .../V1alpha1PodCertificateRequestSpec.java | 352 + .../V1alpha1PodCertificateRequestStatus.java | 228 + .../models/V1alpha1ServerStorageVersion.java | 34 +- .../models/V1alpha1StorageVersion.java | 36 +- .../V1alpha1StorageVersionCondition.java | 38 +- .../models/V1alpha1StorageVersionList.java | 34 +- .../V1alpha1StorageVersionMigration.java | 36 +- .../V1alpha1StorageVersionMigrationList.java | 34 +- .../V1alpha1StorageVersionMigrationSpec.java | 30 +- ...V1alpha1StorageVersionMigrationStatus.java | 30 +- .../models/V1alpha1StorageVersionStatus.java | 32 +- .../openapi/models/V1alpha1Variable.java | 30 +- .../models/V1alpha1VolumeAttributesClass.java | 36 +- .../V1alpha1VolumeAttributesClassList.java | 34 +- .../models/V1alpha2LeaseCandidate.java | 34 +- .../models/V1alpha2LeaseCandidateList.java | 34 +- .../models/V1alpha2LeaseCandidateSpec.java | 38 +- .../models/V1alpha3AllocationResult.java | 129 - .../openapi/models/V1alpha3BasicDevice.java | 313 - .../models/V1alpha3CELDeviceSelector.java | 28 +- .../client/openapi/models/V1alpha3Device.java | 127 - .../models/V1alpha3DeviceClassSpec.java | 147 - .../openapi/models/V1alpha3DeviceRequest.java | 329 - ...V1alpha3DeviceRequestAllocationResult.java | 250 - .../models/V1alpha3DeviceSelector.java | 28 +- .../openapi/models/V1alpha3DeviceTaint.java | 34 +- .../models/V1alpha3DeviceTaintRule.java | 34 +- .../models/V1alpha3DeviceTaintRuleList.java | 34 +- .../models/V1alpha3DeviceTaintRuleSpec.java | 30 +- .../models/V1alpha3DeviceTaintSelector.java | 36 +- .../models/V1beta1AllocatedDeviceStatus.java | 75 +- .../models/V1beta1AllocationResult.java | 64 +- .../models/V1beta1ApplyConfiguration.java | 100 + .../models/V1beta1AuditAnnotation.java | 125 - .../openapi/models/V1beta1BasicDevice.java | 174 +- .../models/V1beta1CELDeviceSelector.java | 32 +- .../models/V1beta1CapacityRequestPolicy.java | 170 + .../V1beta1CapacityRequestPolicyRange.java | 158 + .../models/V1beta1CapacityRequirements.java | 112 + .../models/V1beta1ClusterTrustBundle.java | 34 +- .../models/V1beta1ClusterTrustBundleList.java | 34 +- .../models/V1beta1ClusterTrustBundleSpec.java | 30 +- .../client/openapi/models/V1beta1Counter.java | 28 +- .../openapi/models/V1beta1CounterSet.java | 30 +- .../client/openapi/models/V1beta1Device.java | 30 +- .../V1beta1DeviceAllocationConfiguration.java | 32 +- .../models/V1beta1DeviceAllocationResult.java | 30 +- .../models/V1beta1DeviceAttribute.java | 34 +- .../openapi/models/V1beta1DeviceCapacity.java | 62 +- .../openapi/models/V1beta1DeviceClaim.java | 32 +- .../V1beta1DeviceClaimConfiguration.java | 30 +- .../openapi/models/V1beta1DeviceClass.java | 34 +- .../V1beta1DeviceClassConfiguration.java | 28 +- .../models/V1beta1DeviceClassList.java | 34 +- .../models/V1beta1DeviceClassSpec.java | 61 +- .../models/V1beta1DeviceConstraint.java | 63 +- .../V1beta1DeviceCounterConsumption.java | 30 +- .../openapi/models/V1beta1DeviceRequest.java | 74 +- .../V1beta1DeviceRequestAllocationResult.java | 183 +- .../openapi/models/V1beta1DeviceSelector.java | 28 +- .../models/V1beta1DeviceSubRequest.java | 70 +- .../openapi/models/V1beta1DeviceTaint.java | 34 +- .../models/V1beta1DeviceToleration.java | 36 +- .../models/V1beta1ExpressionWarning.java | 125 - .../openapi/models/V1beta1IPAddress.java | 34 +- .../openapi/models/V1beta1IPAddressList.java | 34 +- .../openapi/models/V1beta1IPAddressSpec.java | 28 +- .../openapi/models/V1beta1JSONPatch.java | 100 + .../openapi/models/V1beta1LeaseCandidate.java | 34 +- .../models/V1beta1LeaseCandidateList.java | 34 +- .../models/V1beta1LeaseCandidateSpec.java | 38 +- .../openapi/models/V1beta1MatchCondition.java | 30 +- .../openapi/models/V1beta1MatchResources.java | 36 +- .../V1beta1MutatingAdmissionPolicy.java | 189 + ...V1beta1MutatingAdmissionPolicyBinding.java | 189 + ...ta1MutatingAdmissionPolicyBindingList.java | 195 + ...ta1MutatingAdmissionPolicyBindingSpec.java | 160 + ...> V1beta1MutatingAdmissionPolicyList.java} | 70 +- .../V1beta1MutatingAdmissionPolicySpec.java | 305 + .../openapi/models/V1beta1Mutation.java | 159 + .../V1beta1NamedRuleWithOperations.java | 38 +- .../models/V1beta1NetworkDeviceData.java | 32 +- .../V1beta1OpaqueDeviceConfiguration.java | 30 +- .../openapi/models/V1beta1ParamKind.java | 30 +- .../openapi/models/V1beta1ParamRef.java | 34 +- .../models/V1beta1ParentReference.java | 34 +- .../openapi/models/V1beta1ResourceClaim.java | 36 +- ...V1beta1ResourceClaimConsumerReference.java | 34 +- .../models/V1beta1ResourceClaimList.java | 34 +- .../models/V1beta1ResourceClaimSpec.java | 28 +- .../models/V1beta1ResourceClaimStatus.java | 32 +- .../models/V1beta1ResourceClaimTemplate.java | 34 +- .../V1beta1ResourceClaimTemplateList.java | 34 +- .../V1beta1ResourceClaimTemplateSpec.java | 30 +- .../openapi/models/V1beta1ResourcePool.java | 32 +- .../openapi/models/V1beta1ResourceSlice.java | 34 +- .../models/V1beta1ResourceSliceList.java | 34 +- .../models/V1beta1ResourceSliceSpec.java | 42 +- .../openapi/models/V1beta1ServiceCIDR.java | 36 +- .../models/V1beta1ServiceCIDRList.java | 34 +- .../models/V1beta1ServiceCIDRSpec.java | 28 +- .../models/V1beta1ServiceCIDRStatus.java | 28 +- .../openapi/models/V1beta1TypeChecking.java | 109 - ...beta1ValidatingAdmissionPolicyBinding.java | 187 - ...1ValidatingAdmissionPolicyBindingList.java | 193 - ...1ValidatingAdmissionPolicyBindingSpec.java | 197 - .../V1beta1ValidatingAdmissionPolicySpec.java | 312 - ...1beta1ValidatingAdmissionPolicyStatus.java | 168 - .../openapi/models/V1beta1Validation.java | 184 - .../openapi/models/V1beta1Variable.java | 30 +- .../models/V1beta1VolumeAttributesClass.java | 36 +- .../V1beta1VolumeAttributesClassList.java | 34 +- .../models/V1beta2AllocatedDeviceStatus.java | 75 +- .../models/V1beta2AllocationResult.java | 64 +- .../models/V1beta2CELDeviceSelector.java | 32 +- .../models/V1beta2CapacityRequestPolicy.java | 170 + .../V1beta2CapacityRequestPolicyRange.java | 158 + .../models/V1beta2CapacityRequirements.java | 112 + .../client/openapi/models/V1beta2Counter.java | 28 +- .../openapi/models/V1beta2CounterSet.java | 30 +- .../client/openapi/models/V1beta2Device.java | 176 +- .../V1beta2DeviceAllocationConfiguration.java | 32 +- .../models/V1beta2DeviceAllocationResult.java | 30 +- .../models/V1beta2DeviceAttribute.java | 34 +- .../openapi/models/V1beta2DeviceCapacity.java | 62 +- .../openapi/models/V1beta2DeviceClaim.java | 32 +- .../V1beta2DeviceClaimConfiguration.java | 30 +- .../openapi/models/V1beta2DeviceClass.java | 34 +- .../V1beta2DeviceClassConfiguration.java | 28 +- .../models/V1beta2DeviceClassList.java | 34 +- .../models/V1beta2DeviceClassSpec.java | 61 +- .../models/V1beta2DeviceConstraint.java | 63 +- .../V1beta2DeviceCounterConsumption.java | 30 +- .../openapi/models/V1beta2DeviceRequest.java | 32 +- .../V1beta2DeviceRequestAllocationResult.java | 183 +- .../openapi/models/V1beta2DeviceSelector.java | 28 +- .../models/V1beta2DeviceSubRequest.java | 70 +- .../openapi/models/V1beta2DeviceTaint.java | 34 +- .../models/V1beta2DeviceToleration.java | 36 +- .../models/V1beta2ExactDeviceRequest.java | 70 +- .../models/V1beta2NetworkDeviceData.java | 32 +- .../V1beta2OpaqueDeviceConfiguration.java | 30 +- .../openapi/models/V1beta2ResourceClaim.java | 36 +- ...V1beta2ResourceClaimConsumerReference.java | 34 +- .../models/V1beta2ResourceClaimList.java | 34 +- .../models/V1beta2ResourceClaimSpec.java | 28 +- .../models/V1beta2ResourceClaimStatus.java | 32 +- .../models/V1beta2ResourceClaimTemplate.java | 34 +- .../V1beta2ResourceClaimTemplateList.java | 34 +- .../V1beta2ResourceClaimTemplateSpec.java | 30 +- .../openapi/models/V1beta2ResourcePool.java | 32 +- .../openapi/models/V1beta2ResourceSlice.java | 34 +- .../models/V1beta2ResourceSliceList.java | 34 +- .../models/V1beta2ResourceSliceSpec.java | 42 +- .../V2ContainerResourceMetricSource.java | 32 +- .../V2ContainerResourceMetricStatus.java | 32 +- .../models/V2CrossVersionObjectReference.java | 32 +- .../models/V2ExternalMetricSource.java | 30 +- .../models/V2ExternalMetricStatus.java | 30 +- .../openapi/models/V2HPAScalingPolicy.java | 32 +- .../openapi/models/V2HPAScalingRules.java | 34 +- .../models/V2HorizontalPodAutoscaler.java | 36 +- .../V2HorizontalPodAutoscalerBehavior.java | 30 +- .../V2HorizontalPodAutoscalerCondition.java | 36 +- .../models/V2HorizontalPodAutoscalerList.java | 34 +- .../models/V2HorizontalPodAutoscalerSpec.java | 36 +- .../V2HorizontalPodAutoscalerStatus.java | 38 +- .../openapi/models/V2MetricIdentifier.java | 30 +- .../client/openapi/models/V2MetricSpec.java | 38 +- .../client/openapi/models/V2MetricStatus.java | 38 +- .../client/openapi/models/V2MetricTarget.java | 34 +- .../openapi/models/V2MetricValueStatus.java | 32 +- .../openapi/models/V2ObjectMetricSource.java | 32 +- .../openapi/models/V2ObjectMetricStatus.java | 32 +- .../openapi/models/V2PodsMetricSource.java | 30 +- .../openapi/models/V2PodsMetricStatus.java | 30 +- .../models/V2ResourceMetricSource.java | 30 +- .../models/V2ResourceMetricStatus.java | 30 +- .../client/openapi/models/VersionInfo.java | 52 +- kubernetes/swagger.json | 13642 ++-- 954 files changed, 82821 insertions(+), 57480 deletions(-) rename kubernetes/docs/{V1ResourceClaim.md => CoreV1ResourceClaim.md} (96%) create mode 100644 kubernetes/docs/ResourceV1Api.md rename kubernetes/docs/{V1alpha3ResourceClaim.md => ResourceV1ResourceClaim.md} (87%) rename kubernetes/docs/{V1alpha3AllocatedDeviceStatus.md => V1AllocatedDeviceStatus.md} (79%) create mode 100644 kubernetes/docs/V1AllocationResult.md create mode 100644 kubernetes/docs/V1CELDeviceSelector.md create mode 100644 kubernetes/docs/V1CapacityRequestPolicy.md create mode 100644 kubernetes/docs/V1CapacityRequestPolicyRange.md create mode 100644 kubernetes/docs/V1CapacityRequirements.md create mode 100644 kubernetes/docs/V1ContainerExtendedResourceRequest.md create mode 100644 kubernetes/docs/V1ContainerRestartRule.md create mode 100644 kubernetes/docs/V1ContainerRestartRuleOnExitCodes.md rename kubernetes/docs/{V1alpha3Counter.md => V1Counter.md} (99%) create mode 100644 kubernetes/docs/V1CounterSet.md create mode 100644 kubernetes/docs/V1Device.md rename kubernetes/docs/{V1alpha3DeviceAllocationConfiguration.md => V1DeviceAllocationConfiguration.md} (83%) create mode 100644 kubernetes/docs/V1DeviceAllocationResult.md rename kubernetes/docs/{V1alpha3DeviceAttribute.md => V1DeviceAttribute.md} (95%) create mode 100644 kubernetes/docs/V1DeviceCapacity.md create mode 100644 kubernetes/docs/V1DeviceClaim.md rename kubernetes/docs/{V1alpha3DeviceClaimConfiguration.md => V1DeviceClaimConfiguration.md} (80%) rename kubernetes/docs/{V1alpha3DeviceClass.md => V1DeviceClass.md} (92%) rename kubernetes/docs/{V1alpha3DeviceClassConfiguration.md => V1DeviceClassConfiguration.md} (53%) rename kubernetes/docs/{V1alpha3DeviceClassList.md => V1DeviceClassList.md} (87%) create mode 100644 kubernetes/docs/V1DeviceClassSpec.md rename kubernetes/docs/{V1alpha3DeviceConstraint.md => V1DeviceConstraint.md} (69%) create mode 100644 kubernetes/docs/V1DeviceCounterConsumption.md create mode 100644 kubernetes/docs/V1DeviceRequest.md create mode 100644 kubernetes/docs/V1DeviceRequestAllocationResult.md create mode 100644 kubernetes/docs/V1DeviceSelector.md create mode 100644 kubernetes/docs/V1DeviceSubRequest.md create mode 100644 kubernetes/docs/V1DeviceTaint.md rename kubernetes/docs/{V1alpha3DeviceToleration.md => V1DeviceToleration.md} (98%) create mode 100644 kubernetes/docs/V1ExactDeviceRequest.md create mode 100644 kubernetes/docs/V1FileKeySelector.md rename kubernetes/docs/{V1alpha3NetworkDeviceData.md => V1NetworkDeviceData.md} (91%) rename kubernetes/docs/{V1alpha3OpaqueDeviceConfiguration.md => V1OpaqueDeviceConfiguration.md} (96%) create mode 100644 kubernetes/docs/V1PodCertificateProjection.md create mode 100644 kubernetes/docs/V1PodExtendedResourceClaimStatus.md rename kubernetes/docs/{V1alpha3ResourceClaimConsumerReference.md => V1ResourceClaimConsumerReference.md} (95%) rename kubernetes/docs/{V1alpha3ResourceClaimList.md => V1ResourceClaimList.md} (86%) rename kubernetes/docs/{V1alpha3ResourceClaimSpec.md => V1ResourceClaimSpec.md} (65%) create mode 100644 kubernetes/docs/V1ResourceClaimStatus.md rename kubernetes/docs/{V1alpha3ResourceClaimTemplate.md => V1ResourceClaimTemplate.md} (89%) rename kubernetes/docs/{V1alpha3ResourceClaimTemplateList.md => V1ResourceClaimTemplateList.md} (84%) rename kubernetes/docs/{V1alpha3ResourceClaimTemplateSpec.md => V1ResourceClaimTemplateSpec.md} (69%) rename kubernetes/docs/{V1alpha3ResourcePool.md => V1ResourcePool.md} (98%) rename kubernetes/docs/{V1alpha3ResourceSlice.md => V1ResourceSlice.md} (95%) rename kubernetes/docs/{V1alpha3ResourceSliceList.md => V1ResourceSliceList.md} (86%) rename kubernetes/docs/{V1alpha3ResourceSliceSpec.md => V1ResourceSliceSpec.md} (74%) create mode 100644 kubernetes/docs/V1VolumeAttributesClass.md create mode 100644 kubernetes/docs/V1VolumeAttributesClassList.md rename kubernetes/docs/{V1beta1ValidatingAdmissionPolicy.md => V1alpha1PodCertificateRequest.md} (69%) create mode 100644 kubernetes/docs/V1alpha1PodCertificateRequestList.md create mode 100644 kubernetes/docs/V1alpha1PodCertificateRequestSpec.md create mode 100644 kubernetes/docs/V1alpha1PodCertificateRequestStatus.md delete mode 100644 kubernetes/docs/V1alpha3AllocationResult.md delete mode 100644 kubernetes/docs/V1alpha3BasicDevice.md delete mode 100644 kubernetes/docs/V1alpha3CounterSet.md delete mode 100644 kubernetes/docs/V1alpha3Device.md delete mode 100644 kubernetes/docs/V1alpha3DeviceAllocationResult.md delete mode 100644 kubernetes/docs/V1alpha3DeviceClaim.md delete mode 100644 kubernetes/docs/V1alpha3DeviceClassSpec.md delete mode 100644 kubernetes/docs/V1alpha3DeviceCounterConsumption.md delete mode 100644 kubernetes/docs/V1alpha3DeviceRequest.md delete mode 100644 kubernetes/docs/V1alpha3DeviceRequestAllocationResult.md delete mode 100644 kubernetes/docs/V1alpha3DeviceSubRequest.md delete mode 100644 kubernetes/docs/V1alpha3ResourceClaimStatus.md create mode 100644 kubernetes/docs/V1beta1ApplyConfiguration.md delete mode 100644 kubernetes/docs/V1beta1AuditAnnotation.md create mode 100644 kubernetes/docs/V1beta1CapacityRequestPolicy.md create mode 100644 kubernetes/docs/V1beta1CapacityRequestPolicyRange.md create mode 100644 kubernetes/docs/V1beta1CapacityRequirements.md delete mode 100644 kubernetes/docs/V1beta1ExpressionWarning.md create mode 100644 kubernetes/docs/V1beta1JSONPatch.md create mode 100644 kubernetes/docs/V1beta1MutatingAdmissionPolicy.md create mode 100644 kubernetes/docs/V1beta1MutatingAdmissionPolicyBinding.md create mode 100644 kubernetes/docs/V1beta1MutatingAdmissionPolicyBindingList.md create mode 100644 kubernetes/docs/V1beta1MutatingAdmissionPolicyBindingSpec.md create mode 100644 kubernetes/docs/V1beta1MutatingAdmissionPolicyList.md create mode 100644 kubernetes/docs/V1beta1MutatingAdmissionPolicySpec.md create mode 100644 kubernetes/docs/V1beta1Mutation.md delete mode 100644 kubernetes/docs/V1beta1TypeChecking.md delete mode 100644 kubernetes/docs/V1beta1ValidatingAdmissionPolicyBinding.md delete mode 100644 kubernetes/docs/V1beta1ValidatingAdmissionPolicyBindingList.md delete mode 100644 kubernetes/docs/V1beta1ValidatingAdmissionPolicyBindingSpec.md delete mode 100644 kubernetes/docs/V1beta1ValidatingAdmissionPolicyList.md delete mode 100644 kubernetes/docs/V1beta1ValidatingAdmissionPolicySpec.md delete mode 100644 kubernetes/docs/V1beta1ValidatingAdmissionPolicyStatus.md delete mode 100644 kubernetes/docs/V1beta1Validation.md create mode 100644 kubernetes/docs/V1beta2CapacityRequestPolicy.md create mode 100644 kubernetes/docs/V1beta2CapacityRequestPolicyRange.md create mode 100644 kubernetes/docs/V1beta2CapacityRequirements.md create mode 100644 kubernetes/src/main/java/io/kubernetes/client/openapi/apis/ResourceV1Api.java rename kubernetes/src/main/java/io/kubernetes/client/openapi/models/{V1ResourceClaim.java => CoreV1ResourceClaim.java} (75%) rename kubernetes/src/main/java/io/kubernetes/client/openapi/models/{V1alpha3ResourceClaim.java => ResourceV1ResourceClaim.java} (74%) rename kubernetes/src/main/java/io/kubernetes/client/openapi/models/{V1alpha3AllocatedDeviceStatus.java => V1AllocatedDeviceStatus.java} (69%) create mode 100644 kubernetes/src/main/java/io/kubernetes/client/openapi/models/V1AllocationResult.java create mode 100644 kubernetes/src/main/java/io/kubernetes/client/openapi/models/V1CELDeviceSelector.java create mode 100644 kubernetes/src/main/java/io/kubernetes/client/openapi/models/V1CapacityRequestPolicy.java create mode 100644 kubernetes/src/main/java/io/kubernetes/client/openapi/models/V1CapacityRequestPolicyRange.java create mode 100644 kubernetes/src/main/java/io/kubernetes/client/openapi/models/V1CapacityRequirements.java create mode 100644 kubernetes/src/main/java/io/kubernetes/client/openapi/models/V1ContainerExtendedResourceRequest.java create mode 100644 kubernetes/src/main/java/io/kubernetes/client/openapi/models/V1ContainerRestartRule.java create mode 100644 kubernetes/src/main/java/io/kubernetes/client/openapi/models/V1ContainerRestartRuleOnExitCodes.java rename kubernetes/src/main/java/io/kubernetes/client/openapi/models/{V1alpha3Counter.java => V1Counter.java} (89%) rename kubernetes/src/main/java/io/kubernetes/client/openapi/models/{V1alpha3CounterSet.java => V1CounterSet.java} (54%) create mode 100644 kubernetes/src/main/java/io/kubernetes/client/openapi/models/V1Device.java rename kubernetes/src/main/java/io/kubernetes/client/openapi/models/{V1alpha3DeviceAllocationConfiguration.java => V1DeviceAllocationConfiguration.java} (69%) rename kubernetes/src/main/java/io/kubernetes/client/openapi/models/{V1alpha3DeviceAllocationResult.java => V1DeviceAllocationResult.java} (62%) rename kubernetes/src/main/java/io/kubernetes/client/openapi/models/{V1alpha3DeviceAttribute.java => V1DeviceAttribute.java} (74%) create mode 100644 kubernetes/src/main/java/io/kubernetes/client/openapi/models/V1DeviceCapacity.java rename kubernetes/src/main/java/io/kubernetes/client/openapi/models/{V1alpha3DeviceClaim.java => V1DeviceClaim.java} (63%) rename kubernetes/src/main/java/io/kubernetes/client/openapi/models/{V1alpha3DeviceClaimConfiguration.java => V1DeviceClaimConfiguration.java} (67%) rename kubernetes/src/main/java/io/kubernetes/client/openapi/models/{V1alpha3DeviceClass.java => V1DeviceClass.java} (76%) rename kubernetes/src/main/java/io/kubernetes/client/openapi/models/{V1alpha3DeviceClassConfiguration.java => V1DeviceClassConfiguration.java} (57%) rename kubernetes/src/main/java/io/kubernetes/client/openapi/models/{V1alpha3DeviceClassList.java => V1DeviceClassList.java} (73%) create mode 100644 kubernetes/src/main/java/io/kubernetes/client/openapi/models/V1DeviceClassSpec.java rename kubernetes/src/main/java/io/kubernetes/client/openapi/models/{V1alpha3DeviceConstraint.java => V1DeviceConstraint.java} (62%) rename kubernetes/src/main/java/io/kubernetes/client/openapi/models/{V1alpha3DeviceCounterConsumption.java => V1DeviceCounterConsumption.java} (52%) create mode 100644 kubernetes/src/main/java/io/kubernetes/client/openapi/models/V1DeviceRequest.java create mode 100644 kubernetes/src/main/java/io/kubernetes/client/openapi/models/V1DeviceRequestAllocationResult.java create mode 100644 kubernetes/src/main/java/io/kubernetes/client/openapi/models/V1DeviceSelector.java rename kubernetes/src/main/java/io/kubernetes/client/openapi/models/{V1alpha3DeviceSubRequest.java => V1DeviceSubRequest.java} (63%) create mode 100644 kubernetes/src/main/java/io/kubernetes/client/openapi/models/V1DeviceTaint.java rename kubernetes/src/main/java/io/kubernetes/client/openapi/models/{V1alpha3DeviceToleration.java => V1DeviceToleration.java} (81%) create mode 100644 kubernetes/src/main/java/io/kubernetes/client/openapi/models/V1ExactDeviceRequest.java create mode 100644 kubernetes/src/main/java/io/kubernetes/client/openapi/models/V1FileKeySelector.java rename kubernetes/src/main/java/io/kubernetes/client/openapi/models/{V1alpha3NetworkDeviceData.java => V1NetworkDeviceData.java} (75%) rename kubernetes/src/main/java/io/kubernetes/client/openapi/models/{V1alpha3OpaqueDeviceConfiguration.java => V1OpaqueDeviceConfiguration.java} (76%) create mode 100644 kubernetes/src/main/java/io/kubernetes/client/openapi/models/V1PodCertificateProjection.java create mode 100644 kubernetes/src/main/java/io/kubernetes/client/openapi/models/V1PodExtendedResourceClaimStatus.java rename kubernetes/src/main/java/io/kubernetes/client/openapi/models/{V1alpha3ResourceClaimConsumerReference.java => V1ResourceClaimConsumerReference.java} (73%) rename kubernetes/src/main/java/io/kubernetes/client/openapi/models/{V1alpha3ResourceClaimList.java => V1ResourceClaimList.java} (72%) rename kubernetes/src/main/java/io/kubernetes/client/openapi/models/{V1alpha3ResourceClaimSpec.java => V1ResourceClaimSpec.java} (61%) rename kubernetes/src/main/java/io/kubernetes/client/openapi/models/{V1alpha3ResourceClaimStatus.java => V1ResourceClaimStatus.java} (69%) rename kubernetes/src/main/java/io/kubernetes/client/openapi/models/{V1alpha3ResourceClaimTemplate.java => V1ResourceClaimTemplate.java} (73%) rename kubernetes/src/main/java/io/kubernetes/client/openapi/models/{V1alpha3ResourceClaimTemplateList.java => V1ResourceClaimTemplateList.java} (71%) rename kubernetes/src/main/java/io/kubernetes/client/openapi/models/{V1alpha3ResourceClaimTemplateSpec.java => V1ResourceClaimTemplateSpec.java} (63%) rename kubernetes/src/main/java/io/kubernetes/client/openapi/models/{V1alpha3ResourcePool.java => V1ResourcePool.java} (81%) rename kubernetes/src/main/java/io/kubernetes/client/openapi/models/{V1alpha3ResourceSlice.java => V1ResourceSlice.java} (82%) rename kubernetes/src/main/java/io/kubernetes/client/openapi/models/{V1alpha3ResourceSliceList.java => V1ResourceSliceList.java} (72%) rename kubernetes/src/main/java/io/kubernetes/client/openapi/models/{V1alpha3ResourceSliceSpec.java => V1ResourceSliceSpec.java} (75%) create mode 100644 kubernetes/src/main/java/io/kubernetes/client/openapi/models/V1VolumeAttributesClass.java create mode 100644 kubernetes/src/main/java/io/kubernetes/client/openapi/models/V1VolumeAttributesClassList.java rename kubernetes/src/main/java/io/kubernetes/client/openapi/models/{V1beta1ValidatingAdmissionPolicy.java => V1alpha1PodCertificateRequest.java} (64%) create mode 100644 kubernetes/src/main/java/io/kubernetes/client/openapi/models/V1alpha1PodCertificateRequestList.java create mode 100644 kubernetes/src/main/java/io/kubernetes/client/openapi/models/V1alpha1PodCertificateRequestSpec.java create mode 100644 kubernetes/src/main/java/io/kubernetes/client/openapi/models/V1alpha1PodCertificateRequestStatus.java delete mode 100644 kubernetes/src/main/java/io/kubernetes/client/openapi/models/V1alpha3AllocationResult.java delete mode 100644 kubernetes/src/main/java/io/kubernetes/client/openapi/models/V1alpha3BasicDevice.java delete mode 100644 kubernetes/src/main/java/io/kubernetes/client/openapi/models/V1alpha3Device.java delete mode 100644 kubernetes/src/main/java/io/kubernetes/client/openapi/models/V1alpha3DeviceClassSpec.java delete mode 100644 kubernetes/src/main/java/io/kubernetes/client/openapi/models/V1alpha3DeviceRequest.java delete mode 100644 kubernetes/src/main/java/io/kubernetes/client/openapi/models/V1alpha3DeviceRequestAllocationResult.java create mode 100644 kubernetes/src/main/java/io/kubernetes/client/openapi/models/V1beta1ApplyConfiguration.java delete mode 100644 kubernetes/src/main/java/io/kubernetes/client/openapi/models/V1beta1AuditAnnotation.java create mode 100644 kubernetes/src/main/java/io/kubernetes/client/openapi/models/V1beta1CapacityRequestPolicy.java create mode 100644 kubernetes/src/main/java/io/kubernetes/client/openapi/models/V1beta1CapacityRequestPolicyRange.java create mode 100644 kubernetes/src/main/java/io/kubernetes/client/openapi/models/V1beta1CapacityRequirements.java delete mode 100644 kubernetes/src/main/java/io/kubernetes/client/openapi/models/V1beta1ExpressionWarning.java create mode 100644 kubernetes/src/main/java/io/kubernetes/client/openapi/models/V1beta1JSONPatch.java create mode 100644 kubernetes/src/main/java/io/kubernetes/client/openapi/models/V1beta1MutatingAdmissionPolicy.java create mode 100644 kubernetes/src/main/java/io/kubernetes/client/openapi/models/V1beta1MutatingAdmissionPolicyBinding.java create mode 100644 kubernetes/src/main/java/io/kubernetes/client/openapi/models/V1beta1MutatingAdmissionPolicyBindingList.java create mode 100644 kubernetes/src/main/java/io/kubernetes/client/openapi/models/V1beta1MutatingAdmissionPolicyBindingSpec.java rename kubernetes/src/main/java/io/kubernetes/client/openapi/models/{V1beta1ValidatingAdmissionPolicyList.java => V1beta1MutatingAdmissionPolicyList.java} (67%) create mode 100644 kubernetes/src/main/java/io/kubernetes/client/openapi/models/V1beta1MutatingAdmissionPolicySpec.java create mode 100644 kubernetes/src/main/java/io/kubernetes/client/openapi/models/V1beta1Mutation.java delete mode 100644 kubernetes/src/main/java/io/kubernetes/client/openapi/models/V1beta1TypeChecking.java delete mode 100644 kubernetes/src/main/java/io/kubernetes/client/openapi/models/V1beta1ValidatingAdmissionPolicyBinding.java delete mode 100644 kubernetes/src/main/java/io/kubernetes/client/openapi/models/V1beta1ValidatingAdmissionPolicyBindingList.java delete mode 100644 kubernetes/src/main/java/io/kubernetes/client/openapi/models/V1beta1ValidatingAdmissionPolicyBindingSpec.java delete mode 100644 kubernetes/src/main/java/io/kubernetes/client/openapi/models/V1beta1ValidatingAdmissionPolicySpec.java delete mode 100644 kubernetes/src/main/java/io/kubernetes/client/openapi/models/V1beta1ValidatingAdmissionPolicyStatus.java delete mode 100644 kubernetes/src/main/java/io/kubernetes/client/openapi/models/V1beta1Validation.java create mode 100644 kubernetes/src/main/java/io/kubernetes/client/openapi/models/V1beta2CapacityRequestPolicy.java create mode 100644 kubernetes/src/main/java/io/kubernetes/client/openapi/models/V1beta2CapacityRequestPolicyRange.java create mode 100644 kubernetes/src/main/java/io/kubernetes/client/openapi/models/V1beta2CapacityRequirements.java diff --git a/kubernetes/.openapi-generator/swagger.json.sha256 b/kubernetes/.openapi-generator/swagger.json.sha256 index 13c71da64c..b8d404ae1e 100644 --- a/kubernetes/.openapi-generator/swagger.json.sha256 +++ b/kubernetes/.openapi-generator/swagger.json.sha256 @@ -1 +1 @@ -41f7afacdbb6f003accac0a67f01fcf456031d94962f1b3d43d29f6f5921aa24 \ No newline at end of file +44b824826f5738f485c9438677c3b0d4ab5725dbf6317487ac21d4ba5bb55f25 \ No newline at end of file diff --git a/kubernetes/api/openapi.yaml b/kubernetes/api/openapi.yaml index c8190f0e21..af52cc8661 100644 --- a/kubernetes/api/openapi.yaml +++ b/kubernetes/api/openapi.yaml @@ -1,7 +1,7 @@ openapi: 3.0.1 info: title: Kubernetes - version: release-1.33 + version: release-1.34 servers: - url: / security: @@ -24536,10 +24536,10 @@ paths: tags: - admissionregistration_v1beta1 x-accepts: application/json - /apis/admissionregistration.k8s.io/v1beta1/validatingadmissionpolicies: + /apis/admissionregistration.k8s.io/v1beta1/mutatingadmissionpolicies: delete: - description: delete collection of ValidatingAdmissionPolicy - operationId: deleteCollectionValidatingAdmissionPolicy + description: delete collection of MutatingAdmissionPolicy + operationId: deleteCollectionMutatingAdmissionPolicy parameters: - description: If 'true', then the output is pretty printed. Defaults to 'false' unless the user-agent indicates a browser or command-line HTTP tool (curl @@ -24696,14 +24696,14 @@ paths: x-kubernetes-action: deletecollection x-kubernetes-group-version-kind: group: admissionregistration.k8s.io - kind: ValidatingAdmissionPolicy + kind: MutatingAdmissionPolicy version: v1beta1 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json get: - description: list or watch objects of kind ValidatingAdmissionPolicy - operationId: listValidatingAdmissionPolicy + description: list or watch objects of kind MutatingAdmissionPolicy + operationId: listMutatingAdmissionPolicy parameters: - description: If 'true', then the output is pretty printed. Defaults to 'false' unless the user-agent indicates a browser or command-line HTTP tool (curl @@ -24801,25 +24801,25 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1beta1.ValidatingAdmissionPolicyList' + $ref: '#/components/schemas/v1beta1.MutatingAdmissionPolicyList' application/yaml: schema: - $ref: '#/components/schemas/v1beta1.ValidatingAdmissionPolicyList' + $ref: '#/components/schemas/v1beta1.MutatingAdmissionPolicyList' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1beta1.ValidatingAdmissionPolicyList' + $ref: '#/components/schemas/v1beta1.MutatingAdmissionPolicyList' application/cbor: schema: - $ref: '#/components/schemas/v1beta1.ValidatingAdmissionPolicyList' + $ref: '#/components/schemas/v1beta1.MutatingAdmissionPolicyList' application/json;stream=watch: schema: - $ref: '#/components/schemas/v1beta1.ValidatingAdmissionPolicyList' + $ref: '#/components/schemas/v1beta1.MutatingAdmissionPolicyList' application/vnd.kubernetes.protobuf;stream=watch: schema: - $ref: '#/components/schemas/v1beta1.ValidatingAdmissionPolicyList' + $ref: '#/components/schemas/v1beta1.MutatingAdmissionPolicyList' application/cbor-seq: schema: - $ref: '#/components/schemas/v1beta1.ValidatingAdmissionPolicyList' + $ref: '#/components/schemas/v1beta1.MutatingAdmissionPolicyList' description: OK "401": content: {} @@ -24829,12 +24829,12 @@ paths: x-kubernetes-action: list x-kubernetes-group-version-kind: group: admissionregistration.k8s.io - kind: ValidatingAdmissionPolicy + kind: MutatingAdmissionPolicy version: v1beta1 x-accepts: application/json post: - description: create a ValidatingAdmissionPolicy - operationId: createValidatingAdmissionPolicy + description: create a MutatingAdmissionPolicy + operationId: createMutatingAdmissionPolicy parameters: - description: If 'true', then the output is pretty printed. Defaults to 'false' unless the user-agent indicates a browser or command-line HTTP tool (curl @@ -24879,53 +24879,53 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1beta1.ValidatingAdmissionPolicy' + $ref: '#/components/schemas/v1beta1.MutatingAdmissionPolicy' required: true responses: "200": content: application/json: schema: - $ref: '#/components/schemas/v1beta1.ValidatingAdmissionPolicy' + $ref: '#/components/schemas/v1beta1.MutatingAdmissionPolicy' application/yaml: schema: - $ref: '#/components/schemas/v1beta1.ValidatingAdmissionPolicy' + $ref: '#/components/schemas/v1beta1.MutatingAdmissionPolicy' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1beta1.ValidatingAdmissionPolicy' + $ref: '#/components/schemas/v1beta1.MutatingAdmissionPolicy' application/cbor: schema: - $ref: '#/components/schemas/v1beta1.ValidatingAdmissionPolicy' + $ref: '#/components/schemas/v1beta1.MutatingAdmissionPolicy' description: OK "201": content: application/json: schema: - $ref: '#/components/schemas/v1beta1.ValidatingAdmissionPolicy' + $ref: '#/components/schemas/v1beta1.MutatingAdmissionPolicy' application/yaml: schema: - $ref: '#/components/schemas/v1beta1.ValidatingAdmissionPolicy' + $ref: '#/components/schemas/v1beta1.MutatingAdmissionPolicy' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1beta1.ValidatingAdmissionPolicy' + $ref: '#/components/schemas/v1beta1.MutatingAdmissionPolicy' application/cbor: schema: - $ref: '#/components/schemas/v1beta1.ValidatingAdmissionPolicy' + $ref: '#/components/schemas/v1beta1.MutatingAdmissionPolicy' description: Created "202": content: application/json: schema: - $ref: '#/components/schemas/v1beta1.ValidatingAdmissionPolicy' + $ref: '#/components/schemas/v1beta1.MutatingAdmissionPolicy' application/yaml: schema: - $ref: '#/components/schemas/v1beta1.ValidatingAdmissionPolicy' + $ref: '#/components/schemas/v1beta1.MutatingAdmissionPolicy' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1beta1.ValidatingAdmissionPolicy' + $ref: '#/components/schemas/v1beta1.MutatingAdmissionPolicy' application/cbor: schema: - $ref: '#/components/schemas/v1beta1.ValidatingAdmissionPolicy' + $ref: '#/components/schemas/v1beta1.MutatingAdmissionPolicy' description: Accepted "401": content: {} @@ -24935,17 +24935,17 @@ paths: x-kubernetes-action: post x-kubernetes-group-version-kind: group: admissionregistration.k8s.io - kind: ValidatingAdmissionPolicy + kind: MutatingAdmissionPolicy version: v1beta1 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json - /apis/admissionregistration.k8s.io/v1beta1/validatingadmissionpolicies/{name}: + /apis/admissionregistration.k8s.io/v1beta1/mutatingadmissionpolicies/{name}: delete: - description: delete a ValidatingAdmissionPolicy - operationId: deleteValidatingAdmissionPolicy + description: delete a MutatingAdmissionPolicy + operationId: deleteMutatingAdmissionPolicy parameters: - - description: name of the ValidatingAdmissionPolicy + - description: name of the MutatingAdmissionPolicy in: path name: name required: true @@ -25053,268 +25053,16 @@ paths: x-kubernetes-action: delete x-kubernetes-group-version-kind: group: admissionregistration.k8s.io - kind: ValidatingAdmissionPolicy - version: v1beta1 - x-codegen-request-body-name: body - x-contentType: application/json - x-accepts: application/json - get: - description: read the specified ValidatingAdmissionPolicy - operationId: readValidatingAdmissionPolicy - parameters: - - description: name of the ValidatingAdmissionPolicy - in: path - name: name - required: true - schema: - type: string - - description: If 'true', then the output is pretty printed. Defaults to 'false' - unless the user-agent indicates a browser or command-line HTTP tool (curl - and wget). - in: query - name: pretty - schema: - type: string - responses: - "200": - content: - application/json: - schema: - $ref: '#/components/schemas/v1beta1.ValidatingAdmissionPolicy' - application/yaml: - schema: - $ref: '#/components/schemas/v1beta1.ValidatingAdmissionPolicy' - application/vnd.kubernetes.protobuf: - schema: - $ref: '#/components/schemas/v1beta1.ValidatingAdmissionPolicy' - application/cbor: - schema: - $ref: '#/components/schemas/v1beta1.ValidatingAdmissionPolicy' - description: OK - "401": - content: {} - description: Unauthorized - tags: - - admissionregistration_v1beta1 - x-kubernetes-action: get - x-kubernetes-group-version-kind: - group: admissionregistration.k8s.io - kind: ValidatingAdmissionPolicy - version: v1beta1 - x-accepts: application/json - patch: - description: partially update the specified ValidatingAdmissionPolicy - operationId: patchValidatingAdmissionPolicy - parameters: - - description: name of the ValidatingAdmissionPolicy - in: path - name: name - required: true - schema: - type: string - - description: If 'true', then the output is pretty printed. Defaults to 'false' - unless the user-agent indicates a browser or command-line HTTP tool (curl - and wget). - in: query - name: pretty - schema: - type: string - - description: 'When present, indicates that modifications should not be persisted. - An invalid or unrecognized dryRun directive will result in an error response - and no further processing of the request. Valid values are: - All: all dry - run stages will be processed' - in: query - name: dryRun - schema: - type: string - - description: fieldManager is a name associated with the actor or entity that - is making these changes. The value must be less than or 128 characters long, - and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. - This field is required for apply requests (application/apply-patch) but - optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch). - in: query - name: fieldManager - schema: - type: string - - description: 'fieldValidation instructs the server on how to handle objects - in the request (POST/PUT/PATCH) containing unknown or duplicate fields. - Valid values are: - Ignore: This will ignore any unknown fields that are - silently dropped from the object, and will ignore all but the last duplicate - field that the decoder encounters. This is the default behavior prior to - v1.23. - Warn: This will send a warning via the standard warning response - header for each unknown field that is dropped from the object, and for each - duplicate field that is encountered. The request will still succeed if there - are no other errors, and will only persist the last of any duplicate fields. - This is the default in v1.23+ - Strict: This will fail the request with - a BadRequest error if any unknown fields would be dropped from the object, - or if any duplicate fields are present. The error returned from the server - will contain all unknown and duplicate fields encountered.' - in: query - name: fieldValidation - schema: - type: string - - description: Force is going to "force" Apply requests. It means user will - re-acquire conflicting fields owned by other people. Force flag must be - unset for non-apply patch requests. - in: query - name: force - schema: - type: boolean - requestBody: - content: - application/json: - schema: - $ref: '#/components/schemas/v1.Patch' - required: true - responses: - "200": - content: - application/json: - schema: - $ref: '#/components/schemas/v1beta1.ValidatingAdmissionPolicy' - application/yaml: - schema: - $ref: '#/components/schemas/v1beta1.ValidatingAdmissionPolicy' - application/vnd.kubernetes.protobuf: - schema: - $ref: '#/components/schemas/v1beta1.ValidatingAdmissionPolicy' - application/cbor: - schema: - $ref: '#/components/schemas/v1beta1.ValidatingAdmissionPolicy' - description: OK - "201": - content: - application/json: - schema: - $ref: '#/components/schemas/v1beta1.ValidatingAdmissionPolicy' - application/yaml: - schema: - $ref: '#/components/schemas/v1beta1.ValidatingAdmissionPolicy' - application/vnd.kubernetes.protobuf: - schema: - $ref: '#/components/schemas/v1beta1.ValidatingAdmissionPolicy' - application/cbor: - schema: - $ref: '#/components/schemas/v1beta1.ValidatingAdmissionPolicy' - description: Created - "401": - content: {} - description: Unauthorized - tags: - - admissionregistration_v1beta1 - x-kubernetes-action: patch - x-kubernetes-group-version-kind: - group: admissionregistration.k8s.io - kind: ValidatingAdmissionPolicy - version: v1beta1 - x-codegen-request-body-name: body - x-contentType: application/json - x-accepts: application/json - put: - description: replace the specified ValidatingAdmissionPolicy - operationId: replaceValidatingAdmissionPolicy - parameters: - - description: name of the ValidatingAdmissionPolicy - in: path - name: name - required: true - schema: - type: string - - description: If 'true', then the output is pretty printed. Defaults to 'false' - unless the user-agent indicates a browser or command-line HTTP tool (curl - and wget). - in: query - name: pretty - schema: - type: string - - description: 'When present, indicates that modifications should not be persisted. - An invalid or unrecognized dryRun directive will result in an error response - and no further processing of the request. Valid values are: - All: all dry - run stages will be processed' - in: query - name: dryRun - schema: - type: string - - description: fieldManager is a name associated with the actor or entity that - is making these changes. The value must be less than or 128 characters long, - and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. - in: query - name: fieldManager - schema: - type: string - - description: 'fieldValidation instructs the server on how to handle objects - in the request (POST/PUT/PATCH) containing unknown or duplicate fields. - Valid values are: - Ignore: This will ignore any unknown fields that are - silently dropped from the object, and will ignore all but the last duplicate - field that the decoder encounters. This is the default behavior prior to - v1.23. - Warn: This will send a warning via the standard warning response - header for each unknown field that is dropped from the object, and for each - duplicate field that is encountered. The request will still succeed if there - are no other errors, and will only persist the last of any duplicate fields. - This is the default in v1.23+ - Strict: This will fail the request with - a BadRequest error if any unknown fields would be dropped from the object, - or if any duplicate fields are present. The error returned from the server - will contain all unknown and duplicate fields encountered.' - in: query - name: fieldValidation - schema: - type: string - requestBody: - content: - application/json: - schema: - $ref: '#/components/schemas/v1beta1.ValidatingAdmissionPolicy' - required: true - responses: - "200": - content: - application/json: - schema: - $ref: '#/components/schemas/v1beta1.ValidatingAdmissionPolicy' - application/yaml: - schema: - $ref: '#/components/schemas/v1beta1.ValidatingAdmissionPolicy' - application/vnd.kubernetes.protobuf: - schema: - $ref: '#/components/schemas/v1beta1.ValidatingAdmissionPolicy' - application/cbor: - schema: - $ref: '#/components/schemas/v1beta1.ValidatingAdmissionPolicy' - description: OK - "201": - content: - application/json: - schema: - $ref: '#/components/schemas/v1beta1.ValidatingAdmissionPolicy' - application/yaml: - schema: - $ref: '#/components/schemas/v1beta1.ValidatingAdmissionPolicy' - application/vnd.kubernetes.protobuf: - schema: - $ref: '#/components/schemas/v1beta1.ValidatingAdmissionPolicy' - application/cbor: - schema: - $ref: '#/components/schemas/v1beta1.ValidatingAdmissionPolicy' - description: Created - "401": - content: {} - description: Unauthorized - tags: - - admissionregistration_v1beta1 - x-kubernetes-action: put - x-kubernetes-group-version-kind: - group: admissionregistration.k8s.io - kind: ValidatingAdmissionPolicy + kind: MutatingAdmissionPolicy version: v1beta1 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json - /apis/admissionregistration.k8s.io/v1beta1/validatingadmissionpolicies/{name}/status: get: - description: read status of the specified ValidatingAdmissionPolicy - operationId: readValidatingAdmissionPolicyStatus + description: read the specified MutatingAdmissionPolicy + operationId: readMutatingAdmissionPolicy parameters: - - description: name of the ValidatingAdmissionPolicy + - description: name of the MutatingAdmissionPolicy in: path name: name required: true @@ -25332,16 +25080,16 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1beta1.ValidatingAdmissionPolicy' + $ref: '#/components/schemas/v1beta1.MutatingAdmissionPolicy' application/yaml: schema: - $ref: '#/components/schemas/v1beta1.ValidatingAdmissionPolicy' + $ref: '#/components/schemas/v1beta1.MutatingAdmissionPolicy' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1beta1.ValidatingAdmissionPolicy' + $ref: '#/components/schemas/v1beta1.MutatingAdmissionPolicy' application/cbor: schema: - $ref: '#/components/schemas/v1beta1.ValidatingAdmissionPolicy' + $ref: '#/components/schemas/v1beta1.MutatingAdmissionPolicy' description: OK "401": content: {} @@ -25351,14 +25099,14 @@ paths: x-kubernetes-action: get x-kubernetes-group-version-kind: group: admissionregistration.k8s.io - kind: ValidatingAdmissionPolicy + kind: MutatingAdmissionPolicy version: v1beta1 x-accepts: application/json patch: - description: partially update status of the specified ValidatingAdmissionPolicy - operationId: patchValidatingAdmissionPolicyStatus + description: partially update the specified MutatingAdmissionPolicy + operationId: patchMutatingAdmissionPolicy parameters: - - description: name of the ValidatingAdmissionPolicy + - description: name of the MutatingAdmissionPolicy in: path name: name required: true @@ -25423,31 +25171,31 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1beta1.ValidatingAdmissionPolicy' + $ref: '#/components/schemas/v1beta1.MutatingAdmissionPolicy' application/yaml: schema: - $ref: '#/components/schemas/v1beta1.ValidatingAdmissionPolicy' + $ref: '#/components/schemas/v1beta1.MutatingAdmissionPolicy' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1beta1.ValidatingAdmissionPolicy' + $ref: '#/components/schemas/v1beta1.MutatingAdmissionPolicy' application/cbor: schema: - $ref: '#/components/schemas/v1beta1.ValidatingAdmissionPolicy' + $ref: '#/components/schemas/v1beta1.MutatingAdmissionPolicy' description: OK "201": content: application/json: schema: - $ref: '#/components/schemas/v1beta1.ValidatingAdmissionPolicy' + $ref: '#/components/schemas/v1beta1.MutatingAdmissionPolicy' application/yaml: schema: - $ref: '#/components/schemas/v1beta1.ValidatingAdmissionPolicy' + $ref: '#/components/schemas/v1beta1.MutatingAdmissionPolicy' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1beta1.ValidatingAdmissionPolicy' + $ref: '#/components/schemas/v1beta1.MutatingAdmissionPolicy' application/cbor: schema: - $ref: '#/components/schemas/v1beta1.ValidatingAdmissionPolicy' + $ref: '#/components/schemas/v1beta1.MutatingAdmissionPolicy' description: Created "401": content: {} @@ -25457,16 +25205,16 @@ paths: x-kubernetes-action: patch x-kubernetes-group-version-kind: group: admissionregistration.k8s.io - kind: ValidatingAdmissionPolicy + kind: MutatingAdmissionPolicy version: v1beta1 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json put: - description: replace status of the specified ValidatingAdmissionPolicy - operationId: replaceValidatingAdmissionPolicyStatus + description: replace the specified MutatingAdmissionPolicy + operationId: replaceMutatingAdmissionPolicy parameters: - - description: name of the ValidatingAdmissionPolicy + - description: name of the MutatingAdmissionPolicy in: path name: name required: true @@ -25515,38 +25263,38 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1beta1.ValidatingAdmissionPolicy' + $ref: '#/components/schemas/v1beta1.MutatingAdmissionPolicy' required: true responses: "200": content: application/json: schema: - $ref: '#/components/schemas/v1beta1.ValidatingAdmissionPolicy' + $ref: '#/components/schemas/v1beta1.MutatingAdmissionPolicy' application/yaml: schema: - $ref: '#/components/schemas/v1beta1.ValidatingAdmissionPolicy' + $ref: '#/components/schemas/v1beta1.MutatingAdmissionPolicy' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1beta1.ValidatingAdmissionPolicy' + $ref: '#/components/schemas/v1beta1.MutatingAdmissionPolicy' application/cbor: schema: - $ref: '#/components/schemas/v1beta1.ValidatingAdmissionPolicy' + $ref: '#/components/schemas/v1beta1.MutatingAdmissionPolicy' description: OK "201": content: application/json: schema: - $ref: '#/components/schemas/v1beta1.ValidatingAdmissionPolicy' + $ref: '#/components/schemas/v1beta1.MutatingAdmissionPolicy' application/yaml: schema: - $ref: '#/components/schemas/v1beta1.ValidatingAdmissionPolicy' + $ref: '#/components/schemas/v1beta1.MutatingAdmissionPolicy' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1beta1.ValidatingAdmissionPolicy' + $ref: '#/components/schemas/v1beta1.MutatingAdmissionPolicy' application/cbor: schema: - $ref: '#/components/schemas/v1beta1.ValidatingAdmissionPolicy' + $ref: '#/components/schemas/v1beta1.MutatingAdmissionPolicy' description: Created "401": content: {} @@ -25556,15 +25304,15 @@ paths: x-kubernetes-action: put x-kubernetes-group-version-kind: group: admissionregistration.k8s.io - kind: ValidatingAdmissionPolicy + kind: MutatingAdmissionPolicy version: v1beta1 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json - /apis/admissionregistration.k8s.io/v1beta1/validatingadmissionpolicybindings: + /apis/admissionregistration.k8s.io/v1beta1/mutatingadmissionpolicybindings: delete: - description: delete collection of ValidatingAdmissionPolicyBinding - operationId: deleteCollectionValidatingAdmissionPolicyBinding + description: delete collection of MutatingAdmissionPolicyBinding + operationId: deleteCollectionMutatingAdmissionPolicyBinding parameters: - description: If 'true', then the output is pretty printed. Defaults to 'false' unless the user-agent indicates a browser or command-line HTTP tool (curl @@ -25721,14 +25469,14 @@ paths: x-kubernetes-action: deletecollection x-kubernetes-group-version-kind: group: admissionregistration.k8s.io - kind: ValidatingAdmissionPolicyBinding + kind: MutatingAdmissionPolicyBinding version: v1beta1 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json get: - description: list or watch objects of kind ValidatingAdmissionPolicyBinding - operationId: listValidatingAdmissionPolicyBinding + description: list or watch objects of kind MutatingAdmissionPolicyBinding + operationId: listMutatingAdmissionPolicyBinding parameters: - description: If 'true', then the output is pretty printed. Defaults to 'false' unless the user-agent indicates a browser or command-line HTTP tool (curl @@ -25826,25 +25574,25 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1beta1.ValidatingAdmissionPolicyBindingList' + $ref: '#/components/schemas/v1beta1.MutatingAdmissionPolicyBindingList' application/yaml: schema: - $ref: '#/components/schemas/v1beta1.ValidatingAdmissionPolicyBindingList' + $ref: '#/components/schemas/v1beta1.MutatingAdmissionPolicyBindingList' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1beta1.ValidatingAdmissionPolicyBindingList' + $ref: '#/components/schemas/v1beta1.MutatingAdmissionPolicyBindingList' application/cbor: schema: - $ref: '#/components/schemas/v1beta1.ValidatingAdmissionPolicyBindingList' + $ref: '#/components/schemas/v1beta1.MutatingAdmissionPolicyBindingList' application/json;stream=watch: schema: - $ref: '#/components/schemas/v1beta1.ValidatingAdmissionPolicyBindingList' + $ref: '#/components/schemas/v1beta1.MutatingAdmissionPolicyBindingList' application/vnd.kubernetes.protobuf;stream=watch: schema: - $ref: '#/components/schemas/v1beta1.ValidatingAdmissionPolicyBindingList' + $ref: '#/components/schemas/v1beta1.MutatingAdmissionPolicyBindingList' application/cbor-seq: schema: - $ref: '#/components/schemas/v1beta1.ValidatingAdmissionPolicyBindingList' + $ref: '#/components/schemas/v1beta1.MutatingAdmissionPolicyBindingList' description: OK "401": content: {} @@ -25854,12 +25602,12 @@ paths: x-kubernetes-action: list x-kubernetes-group-version-kind: group: admissionregistration.k8s.io - kind: ValidatingAdmissionPolicyBinding + kind: MutatingAdmissionPolicyBinding version: v1beta1 x-accepts: application/json post: - description: create a ValidatingAdmissionPolicyBinding - operationId: createValidatingAdmissionPolicyBinding + description: create a MutatingAdmissionPolicyBinding + operationId: createMutatingAdmissionPolicyBinding parameters: - description: If 'true', then the output is pretty printed. Defaults to 'false' unless the user-agent indicates a browser or command-line HTTP tool (curl @@ -25904,53 +25652,53 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1beta1.ValidatingAdmissionPolicyBinding' + $ref: '#/components/schemas/v1beta1.MutatingAdmissionPolicyBinding' required: true responses: "200": content: application/json: schema: - $ref: '#/components/schemas/v1beta1.ValidatingAdmissionPolicyBinding' + $ref: '#/components/schemas/v1beta1.MutatingAdmissionPolicyBinding' application/yaml: schema: - $ref: '#/components/schemas/v1beta1.ValidatingAdmissionPolicyBinding' + $ref: '#/components/schemas/v1beta1.MutatingAdmissionPolicyBinding' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1beta1.ValidatingAdmissionPolicyBinding' + $ref: '#/components/schemas/v1beta1.MutatingAdmissionPolicyBinding' application/cbor: schema: - $ref: '#/components/schemas/v1beta1.ValidatingAdmissionPolicyBinding' + $ref: '#/components/schemas/v1beta1.MutatingAdmissionPolicyBinding' description: OK "201": content: application/json: schema: - $ref: '#/components/schemas/v1beta1.ValidatingAdmissionPolicyBinding' + $ref: '#/components/schemas/v1beta1.MutatingAdmissionPolicyBinding' application/yaml: schema: - $ref: '#/components/schemas/v1beta1.ValidatingAdmissionPolicyBinding' + $ref: '#/components/schemas/v1beta1.MutatingAdmissionPolicyBinding' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1beta1.ValidatingAdmissionPolicyBinding' + $ref: '#/components/schemas/v1beta1.MutatingAdmissionPolicyBinding' application/cbor: schema: - $ref: '#/components/schemas/v1beta1.ValidatingAdmissionPolicyBinding' + $ref: '#/components/schemas/v1beta1.MutatingAdmissionPolicyBinding' description: Created "202": content: application/json: schema: - $ref: '#/components/schemas/v1beta1.ValidatingAdmissionPolicyBinding' + $ref: '#/components/schemas/v1beta1.MutatingAdmissionPolicyBinding' application/yaml: schema: - $ref: '#/components/schemas/v1beta1.ValidatingAdmissionPolicyBinding' + $ref: '#/components/schemas/v1beta1.MutatingAdmissionPolicyBinding' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1beta1.ValidatingAdmissionPolicyBinding' + $ref: '#/components/schemas/v1beta1.MutatingAdmissionPolicyBinding' application/cbor: schema: - $ref: '#/components/schemas/v1beta1.ValidatingAdmissionPolicyBinding' + $ref: '#/components/schemas/v1beta1.MutatingAdmissionPolicyBinding' description: Accepted "401": content: {} @@ -25960,17 +25708,17 @@ paths: x-kubernetes-action: post x-kubernetes-group-version-kind: group: admissionregistration.k8s.io - kind: ValidatingAdmissionPolicyBinding + kind: MutatingAdmissionPolicyBinding version: v1beta1 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json - /apis/admissionregistration.k8s.io/v1beta1/validatingadmissionpolicybindings/{name}: + /apis/admissionregistration.k8s.io/v1beta1/mutatingadmissionpolicybindings/{name}: delete: - description: delete a ValidatingAdmissionPolicyBinding - operationId: deleteValidatingAdmissionPolicyBinding + description: delete a MutatingAdmissionPolicyBinding + operationId: deleteMutatingAdmissionPolicyBinding parameters: - - description: name of the ValidatingAdmissionPolicyBinding + - description: name of the MutatingAdmissionPolicyBinding in: path name: name required: true @@ -26078,16 +25826,16 @@ paths: x-kubernetes-action: delete x-kubernetes-group-version-kind: group: admissionregistration.k8s.io - kind: ValidatingAdmissionPolicyBinding + kind: MutatingAdmissionPolicyBinding version: v1beta1 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json get: - description: read the specified ValidatingAdmissionPolicyBinding - operationId: readValidatingAdmissionPolicyBinding + description: read the specified MutatingAdmissionPolicyBinding + operationId: readMutatingAdmissionPolicyBinding parameters: - - description: name of the ValidatingAdmissionPolicyBinding + - description: name of the MutatingAdmissionPolicyBinding in: path name: name required: true @@ -26105,16 +25853,16 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1beta1.ValidatingAdmissionPolicyBinding' + $ref: '#/components/schemas/v1beta1.MutatingAdmissionPolicyBinding' application/yaml: schema: - $ref: '#/components/schemas/v1beta1.ValidatingAdmissionPolicyBinding' + $ref: '#/components/schemas/v1beta1.MutatingAdmissionPolicyBinding' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1beta1.ValidatingAdmissionPolicyBinding' + $ref: '#/components/schemas/v1beta1.MutatingAdmissionPolicyBinding' application/cbor: schema: - $ref: '#/components/schemas/v1beta1.ValidatingAdmissionPolicyBinding' + $ref: '#/components/schemas/v1beta1.MutatingAdmissionPolicyBinding' description: OK "401": content: {} @@ -26124,14 +25872,14 @@ paths: x-kubernetes-action: get x-kubernetes-group-version-kind: group: admissionregistration.k8s.io - kind: ValidatingAdmissionPolicyBinding + kind: MutatingAdmissionPolicyBinding version: v1beta1 x-accepts: application/json patch: - description: partially update the specified ValidatingAdmissionPolicyBinding - operationId: patchValidatingAdmissionPolicyBinding + description: partially update the specified MutatingAdmissionPolicyBinding + operationId: patchMutatingAdmissionPolicyBinding parameters: - - description: name of the ValidatingAdmissionPolicyBinding + - description: name of the MutatingAdmissionPolicyBinding in: path name: name required: true @@ -26196,31 +25944,31 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1beta1.ValidatingAdmissionPolicyBinding' + $ref: '#/components/schemas/v1beta1.MutatingAdmissionPolicyBinding' application/yaml: schema: - $ref: '#/components/schemas/v1beta1.ValidatingAdmissionPolicyBinding' + $ref: '#/components/schemas/v1beta1.MutatingAdmissionPolicyBinding' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1beta1.ValidatingAdmissionPolicyBinding' + $ref: '#/components/schemas/v1beta1.MutatingAdmissionPolicyBinding' application/cbor: schema: - $ref: '#/components/schemas/v1beta1.ValidatingAdmissionPolicyBinding' + $ref: '#/components/schemas/v1beta1.MutatingAdmissionPolicyBinding' description: OK "201": content: application/json: schema: - $ref: '#/components/schemas/v1beta1.ValidatingAdmissionPolicyBinding' + $ref: '#/components/schemas/v1beta1.MutatingAdmissionPolicyBinding' application/yaml: schema: - $ref: '#/components/schemas/v1beta1.ValidatingAdmissionPolicyBinding' + $ref: '#/components/schemas/v1beta1.MutatingAdmissionPolicyBinding' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1beta1.ValidatingAdmissionPolicyBinding' + $ref: '#/components/schemas/v1beta1.MutatingAdmissionPolicyBinding' application/cbor: schema: - $ref: '#/components/schemas/v1beta1.ValidatingAdmissionPolicyBinding' + $ref: '#/components/schemas/v1beta1.MutatingAdmissionPolicyBinding' description: Created "401": content: {} @@ -26230,16 +25978,16 @@ paths: x-kubernetes-action: patch x-kubernetes-group-version-kind: group: admissionregistration.k8s.io - kind: ValidatingAdmissionPolicyBinding + kind: MutatingAdmissionPolicyBinding version: v1beta1 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json put: - description: replace the specified ValidatingAdmissionPolicyBinding - operationId: replaceValidatingAdmissionPolicyBinding + description: replace the specified MutatingAdmissionPolicyBinding + operationId: replaceMutatingAdmissionPolicyBinding parameters: - - description: name of the ValidatingAdmissionPolicyBinding + - description: name of the MutatingAdmissionPolicyBinding in: path name: name required: true @@ -26288,38 +26036,38 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1beta1.ValidatingAdmissionPolicyBinding' + $ref: '#/components/schemas/v1beta1.MutatingAdmissionPolicyBinding' required: true responses: "200": content: application/json: schema: - $ref: '#/components/schemas/v1beta1.ValidatingAdmissionPolicyBinding' + $ref: '#/components/schemas/v1beta1.MutatingAdmissionPolicyBinding' application/yaml: schema: - $ref: '#/components/schemas/v1beta1.ValidatingAdmissionPolicyBinding' + $ref: '#/components/schemas/v1beta1.MutatingAdmissionPolicyBinding' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1beta1.ValidatingAdmissionPolicyBinding' + $ref: '#/components/schemas/v1beta1.MutatingAdmissionPolicyBinding' application/cbor: schema: - $ref: '#/components/schemas/v1beta1.ValidatingAdmissionPolicyBinding' + $ref: '#/components/schemas/v1beta1.MutatingAdmissionPolicyBinding' description: OK "201": content: application/json: schema: - $ref: '#/components/schemas/v1beta1.ValidatingAdmissionPolicyBinding' + $ref: '#/components/schemas/v1beta1.MutatingAdmissionPolicyBinding' application/yaml: schema: - $ref: '#/components/schemas/v1beta1.ValidatingAdmissionPolicyBinding' + $ref: '#/components/schemas/v1beta1.MutatingAdmissionPolicyBinding' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1beta1.ValidatingAdmissionPolicyBinding' + $ref: '#/components/schemas/v1beta1.MutatingAdmissionPolicyBinding' application/cbor: schema: - $ref: '#/components/schemas/v1beta1.ValidatingAdmissionPolicyBinding' + $ref: '#/components/schemas/v1beta1.MutatingAdmissionPolicyBinding' description: Created "401": content: {} @@ -26329,15 +26077,15 @@ paths: x-kubernetes-action: put x-kubernetes-group-version-kind: group: admissionregistration.k8s.io - kind: ValidatingAdmissionPolicyBinding + kind: MutatingAdmissionPolicyBinding version: v1beta1 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json - /apis/admissionregistration.k8s.io/v1beta1/watch/validatingadmissionpolicies: {} - /apis/admissionregistration.k8s.io/v1beta1/watch/validatingadmissionpolicies/{name}: {} - /apis/admissionregistration.k8s.io/v1beta1/watch/validatingadmissionpolicybindings: {} - /apis/admissionregistration.k8s.io/v1beta1/watch/validatingadmissionpolicybindings/{name}: {} + /apis/admissionregistration.k8s.io/v1beta1/watch/mutatingadmissionpolicies: {} + /apis/admissionregistration.k8s.io/v1beta1/watch/mutatingadmissionpolicies/{name}: {} + /apis/admissionregistration.k8s.io/v1beta1/watch/mutatingadmissionpolicybindings: {} + /apis/admissionregistration.k8s.io/v1beta1/watch/mutatingadmissionpolicybindings/{name}: {} /apis/apiextensions.k8s.io/: get: description: get information of a group @@ -43068,39 +42816,17 @@ paths: x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json - /apis/certificates.k8s.io/v1alpha1/watch/clustertrustbundles: {} - /apis/certificates.k8s.io/v1alpha1/watch/clustertrustbundles/{name}: {} - /apis/certificates.k8s.io/v1beta1/: - get: - description: get available resources - operationId: getAPIResources - responses: - "200": - content: - application/json: - schema: - $ref: '#/components/schemas/v1.APIResourceList' - application/yaml: - schema: - $ref: '#/components/schemas/v1.APIResourceList' - application/vnd.kubernetes.protobuf: - schema: - $ref: '#/components/schemas/v1.APIResourceList' - application/cbor: - schema: - $ref: '#/components/schemas/v1.APIResourceList' - description: OK - "401": - content: {} - description: Unauthorized - tags: - - certificates_v1beta1 - x-accepts: application/json - /apis/certificates.k8s.io/v1beta1/clustertrustbundles: + /apis/certificates.k8s.io/v1alpha1/namespaces/{namespace}/podcertificaterequests: delete: - description: delete collection of ClusterTrustBundle - operationId: deleteCollectionClusterTrustBundle + description: delete collection of PodCertificateRequest + operationId: deleteCollectionNamespacedPodCertificateRequest parameters: + - description: object name and auth scope, such as for teams and projects + in: path + name: namespace + required: true + schema: + type: string - description: If 'true', then the output is pretty printed. Defaults to 'false' unless the user-agent indicates a browser or command-line HTTP tool (curl and wget). @@ -43252,19 +42978,25 @@ paths: content: {} description: Unauthorized tags: - - certificates_v1beta1 + - certificates_v1alpha1 x-kubernetes-action: deletecollection x-kubernetes-group-version-kind: group: certificates.k8s.io - kind: ClusterTrustBundle - version: v1beta1 + kind: PodCertificateRequest + version: v1alpha1 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json get: - description: list or watch objects of kind ClusterTrustBundle - operationId: listClusterTrustBundle + description: list or watch objects of kind PodCertificateRequest + operationId: listNamespacedPodCertificateRequest parameters: + - description: object name and auth scope, such as for teams and projects + in: path + name: namespace + required: true + schema: + type: string - description: If 'true', then the output is pretty printed. Defaults to 'false' unless the user-agent indicates a browser or command-line HTTP tool (curl and wget). @@ -43361,41 +43093,47 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1beta1.ClusterTrustBundleList' + $ref: '#/components/schemas/v1alpha1.PodCertificateRequestList' application/yaml: schema: - $ref: '#/components/schemas/v1beta1.ClusterTrustBundleList' + $ref: '#/components/schemas/v1alpha1.PodCertificateRequestList' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1beta1.ClusterTrustBundleList' + $ref: '#/components/schemas/v1alpha1.PodCertificateRequestList' application/cbor: schema: - $ref: '#/components/schemas/v1beta1.ClusterTrustBundleList' + $ref: '#/components/schemas/v1alpha1.PodCertificateRequestList' application/json;stream=watch: schema: - $ref: '#/components/schemas/v1beta1.ClusterTrustBundleList' + $ref: '#/components/schemas/v1alpha1.PodCertificateRequestList' application/vnd.kubernetes.protobuf;stream=watch: schema: - $ref: '#/components/schemas/v1beta1.ClusterTrustBundleList' + $ref: '#/components/schemas/v1alpha1.PodCertificateRequestList' application/cbor-seq: schema: - $ref: '#/components/schemas/v1beta1.ClusterTrustBundleList' + $ref: '#/components/schemas/v1alpha1.PodCertificateRequestList' description: OK "401": content: {} description: Unauthorized tags: - - certificates_v1beta1 + - certificates_v1alpha1 x-kubernetes-action: list x-kubernetes-group-version-kind: group: certificates.k8s.io - kind: ClusterTrustBundle - version: v1beta1 + kind: PodCertificateRequest + version: v1alpha1 x-accepts: application/json post: - description: create a ClusterTrustBundle - operationId: createClusterTrustBundle + description: create a PodCertificateRequest + operationId: createNamespacedPodCertificateRequest parameters: + - description: object name and auth scope, such as for teams and projects + in: path + name: namespace + required: true + schema: + type: string - description: If 'true', then the output is pretty printed. Defaults to 'false' unless the user-agent indicates a browser or command-line HTTP tool (curl and wget). @@ -43439,78 +43177,84 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1beta1.ClusterTrustBundle' + $ref: '#/components/schemas/v1alpha1.PodCertificateRequest' required: true responses: "200": content: application/json: schema: - $ref: '#/components/schemas/v1beta1.ClusterTrustBundle' + $ref: '#/components/schemas/v1alpha1.PodCertificateRequest' application/yaml: schema: - $ref: '#/components/schemas/v1beta1.ClusterTrustBundle' + $ref: '#/components/schemas/v1alpha1.PodCertificateRequest' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1beta1.ClusterTrustBundle' + $ref: '#/components/schemas/v1alpha1.PodCertificateRequest' application/cbor: schema: - $ref: '#/components/schemas/v1beta1.ClusterTrustBundle' + $ref: '#/components/schemas/v1alpha1.PodCertificateRequest' description: OK "201": content: application/json: schema: - $ref: '#/components/schemas/v1beta1.ClusterTrustBundle' + $ref: '#/components/schemas/v1alpha1.PodCertificateRequest' application/yaml: schema: - $ref: '#/components/schemas/v1beta1.ClusterTrustBundle' + $ref: '#/components/schemas/v1alpha1.PodCertificateRequest' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1beta1.ClusterTrustBundle' + $ref: '#/components/schemas/v1alpha1.PodCertificateRequest' application/cbor: schema: - $ref: '#/components/schemas/v1beta1.ClusterTrustBundle' + $ref: '#/components/schemas/v1alpha1.PodCertificateRequest' description: Created "202": content: application/json: schema: - $ref: '#/components/schemas/v1beta1.ClusterTrustBundle' + $ref: '#/components/schemas/v1alpha1.PodCertificateRequest' application/yaml: schema: - $ref: '#/components/schemas/v1beta1.ClusterTrustBundle' + $ref: '#/components/schemas/v1alpha1.PodCertificateRequest' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1beta1.ClusterTrustBundle' + $ref: '#/components/schemas/v1alpha1.PodCertificateRequest' application/cbor: schema: - $ref: '#/components/schemas/v1beta1.ClusterTrustBundle' + $ref: '#/components/schemas/v1alpha1.PodCertificateRequest' description: Accepted "401": content: {} description: Unauthorized tags: - - certificates_v1beta1 + - certificates_v1alpha1 x-kubernetes-action: post x-kubernetes-group-version-kind: group: certificates.k8s.io - kind: ClusterTrustBundle - version: v1beta1 + kind: PodCertificateRequest + version: v1alpha1 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json - /apis/certificates.k8s.io/v1beta1/clustertrustbundles/{name}: + /apis/certificates.k8s.io/v1alpha1/namespaces/{namespace}/podcertificaterequests/{name}: delete: - description: delete a ClusterTrustBundle - operationId: deleteClusterTrustBundle + description: delete a PodCertificateRequest + operationId: deleteNamespacedPodCertificateRequest parameters: - - description: name of the ClusterTrustBundle + - description: name of the PodCertificateRequest in: path name: name required: true schema: type: string + - description: object name and auth scope, such as for teams and projects + in: path + name: namespace + required: true + schema: + type: string - description: If 'true', then the output is pretty printed. Defaults to 'false' unless the user-agent indicates a browser or command-line HTTP tool (curl and wget). @@ -43609,25 +43353,31 @@ paths: content: {} description: Unauthorized tags: - - certificates_v1beta1 + - certificates_v1alpha1 x-kubernetes-action: delete x-kubernetes-group-version-kind: group: certificates.k8s.io - kind: ClusterTrustBundle - version: v1beta1 + kind: PodCertificateRequest + version: v1alpha1 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json get: - description: read the specified ClusterTrustBundle - operationId: readClusterTrustBundle + description: read the specified PodCertificateRequest + operationId: readNamespacedPodCertificateRequest parameters: - - description: name of the ClusterTrustBundle + - description: name of the PodCertificateRequest in: path name: name required: true schema: type: string + - description: object name and auth scope, such as for teams and projects + in: path + name: namespace + required: true + schema: + type: string - description: If 'true', then the output is pretty printed. Defaults to 'false' unless the user-agent indicates a browser or command-line HTTP tool (curl and wget). @@ -43640,143 +43390,41 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1beta1.ClusterTrustBundle' + $ref: '#/components/schemas/v1alpha1.PodCertificateRequest' application/yaml: schema: - $ref: '#/components/schemas/v1beta1.ClusterTrustBundle' + $ref: '#/components/schemas/v1alpha1.PodCertificateRequest' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1beta1.ClusterTrustBundle' + $ref: '#/components/schemas/v1alpha1.PodCertificateRequest' application/cbor: schema: - $ref: '#/components/schemas/v1beta1.ClusterTrustBundle' + $ref: '#/components/schemas/v1alpha1.PodCertificateRequest' description: OK "401": content: {} description: Unauthorized tags: - - certificates_v1beta1 + - certificates_v1alpha1 x-kubernetes-action: get x-kubernetes-group-version-kind: group: certificates.k8s.io - kind: ClusterTrustBundle - version: v1beta1 + kind: PodCertificateRequest + version: v1alpha1 x-accepts: application/json patch: - description: partially update the specified ClusterTrustBundle - operationId: patchClusterTrustBundle + description: partially update the specified PodCertificateRequest + operationId: patchNamespacedPodCertificateRequest parameters: - - description: name of the ClusterTrustBundle + - description: name of the PodCertificateRequest in: path name: name required: true schema: type: string - - description: If 'true', then the output is pretty printed. Defaults to 'false' - unless the user-agent indicates a browser or command-line HTTP tool (curl - and wget). - in: query - name: pretty - schema: - type: string - - description: 'When present, indicates that modifications should not be persisted. - An invalid or unrecognized dryRun directive will result in an error response - and no further processing of the request. Valid values are: - All: all dry - run stages will be processed' - in: query - name: dryRun - schema: - type: string - - description: fieldManager is a name associated with the actor or entity that - is making these changes. The value must be less than or 128 characters long, - and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. - This field is required for apply requests (application/apply-patch) but - optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch). - in: query - name: fieldManager - schema: - type: string - - description: 'fieldValidation instructs the server on how to handle objects - in the request (POST/PUT/PATCH) containing unknown or duplicate fields. - Valid values are: - Ignore: This will ignore any unknown fields that are - silently dropped from the object, and will ignore all but the last duplicate - field that the decoder encounters. This is the default behavior prior to - v1.23. - Warn: This will send a warning via the standard warning response - header for each unknown field that is dropped from the object, and for each - duplicate field that is encountered. The request will still succeed if there - are no other errors, and will only persist the last of any duplicate fields. - This is the default in v1.23+ - Strict: This will fail the request with - a BadRequest error if any unknown fields would be dropped from the object, - or if any duplicate fields are present. The error returned from the server - will contain all unknown and duplicate fields encountered.' - in: query - name: fieldValidation - schema: - type: string - - description: Force is going to "force" Apply requests. It means user will - re-acquire conflicting fields owned by other people. Force flag must be - unset for non-apply patch requests. - in: query - name: force - schema: - type: boolean - requestBody: - content: - application/json: - schema: - $ref: '#/components/schemas/v1.Patch' - required: true - responses: - "200": - content: - application/json: - schema: - $ref: '#/components/schemas/v1beta1.ClusterTrustBundle' - application/yaml: - schema: - $ref: '#/components/schemas/v1beta1.ClusterTrustBundle' - application/vnd.kubernetes.protobuf: - schema: - $ref: '#/components/schemas/v1beta1.ClusterTrustBundle' - application/cbor: - schema: - $ref: '#/components/schemas/v1beta1.ClusterTrustBundle' - description: OK - "201": - content: - application/json: - schema: - $ref: '#/components/schemas/v1beta1.ClusterTrustBundle' - application/yaml: - schema: - $ref: '#/components/schemas/v1beta1.ClusterTrustBundle' - application/vnd.kubernetes.protobuf: - schema: - $ref: '#/components/schemas/v1beta1.ClusterTrustBundle' - application/cbor: - schema: - $ref: '#/components/schemas/v1beta1.ClusterTrustBundle' - description: Created - "401": - content: {} - description: Unauthorized - tags: - - certificates_v1beta1 - x-kubernetes-action: patch - x-kubernetes-group-version-kind: - group: certificates.k8s.io - kind: ClusterTrustBundle - version: v1beta1 - x-codegen-request-body-name: body - x-contentType: application/json - x-accepts: application/json - put: - description: replace the specified ClusterTrustBundle - operationId: replaceClusterTrustBundle - parameters: - - description: name of the ClusterTrustBundle + - description: object name and auth scope, such as for teams and projects in: path - name: name + name: namespace required: true schema: type: string @@ -43798,6 +43446,8 @@ paths: - description: fieldManager is a name associated with the actor or entity that is making these changes. The value must be less than or 128 characters long, and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. + This field is required for apply requests (application/apply-patch) but + optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch). in: query name: fieldManager schema: @@ -43819,111 +43469,442 @@ paths: name: fieldValidation schema: type: string + - description: Force is going to "force" Apply requests. It means user will + re-acquire conflicting fields owned by other people. Force flag must be + unset for non-apply patch requests. + in: query + name: force + schema: + type: boolean requestBody: content: application/json: schema: - $ref: '#/components/schemas/v1beta1.ClusterTrustBundle' + $ref: '#/components/schemas/v1.Patch' required: true responses: "200": content: application/json: schema: - $ref: '#/components/schemas/v1beta1.ClusterTrustBundle' + $ref: '#/components/schemas/v1alpha1.PodCertificateRequest' application/yaml: schema: - $ref: '#/components/schemas/v1beta1.ClusterTrustBundle' + $ref: '#/components/schemas/v1alpha1.PodCertificateRequest' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1beta1.ClusterTrustBundle' + $ref: '#/components/schemas/v1alpha1.PodCertificateRequest' application/cbor: schema: - $ref: '#/components/schemas/v1beta1.ClusterTrustBundle' + $ref: '#/components/schemas/v1alpha1.PodCertificateRequest' description: OK "201": content: application/json: schema: - $ref: '#/components/schemas/v1beta1.ClusterTrustBundle' + $ref: '#/components/schemas/v1alpha1.PodCertificateRequest' application/yaml: schema: - $ref: '#/components/schemas/v1beta1.ClusterTrustBundle' + $ref: '#/components/schemas/v1alpha1.PodCertificateRequest' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1beta1.ClusterTrustBundle' + $ref: '#/components/schemas/v1alpha1.PodCertificateRequest' application/cbor: schema: - $ref: '#/components/schemas/v1beta1.ClusterTrustBundle' + $ref: '#/components/schemas/v1alpha1.PodCertificateRequest' description: Created "401": content: {} description: Unauthorized tags: - - certificates_v1beta1 + - certificates_v1alpha1 + x-kubernetes-action: patch + x-kubernetes-group-version-kind: + group: certificates.k8s.io + kind: PodCertificateRequest + version: v1alpha1 + x-codegen-request-body-name: body + x-contentType: application/json + x-accepts: application/json + put: + description: replace the specified PodCertificateRequest + operationId: replaceNamespacedPodCertificateRequest + parameters: + - description: name of the PodCertificateRequest + in: path + name: name + required: true + schema: + type: string + - description: object name and auth scope, such as for teams and projects + in: path + name: namespace + required: true + schema: + type: string + - description: If 'true', then the output is pretty printed. Defaults to 'false' + unless the user-agent indicates a browser or command-line HTTP tool (curl + and wget). + in: query + name: pretty + schema: + type: string + - description: 'When present, indicates that modifications should not be persisted. + An invalid or unrecognized dryRun directive will result in an error response + and no further processing of the request. Valid values are: - All: all dry + run stages will be processed' + in: query + name: dryRun + schema: + type: string + - description: fieldManager is a name associated with the actor or entity that + is making these changes. The value must be less than or 128 characters long, + and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. + in: query + name: fieldManager + schema: + type: string + - description: 'fieldValidation instructs the server on how to handle objects + in the request (POST/PUT/PATCH) containing unknown or duplicate fields. + Valid values are: - Ignore: This will ignore any unknown fields that are + silently dropped from the object, and will ignore all but the last duplicate + field that the decoder encounters. This is the default behavior prior to + v1.23. - Warn: This will send a warning via the standard warning response + header for each unknown field that is dropped from the object, and for each + duplicate field that is encountered. The request will still succeed if there + are no other errors, and will only persist the last of any duplicate fields. + This is the default in v1.23+ - Strict: This will fail the request with + a BadRequest error if any unknown fields would be dropped from the object, + or if any duplicate fields are present. The error returned from the server + will contain all unknown and duplicate fields encountered.' + in: query + name: fieldValidation + schema: + type: string + requestBody: + content: + application/json: + schema: + $ref: '#/components/schemas/v1alpha1.PodCertificateRequest' + required: true + responses: + "200": + content: + application/json: + schema: + $ref: '#/components/schemas/v1alpha1.PodCertificateRequest' + application/yaml: + schema: + $ref: '#/components/schemas/v1alpha1.PodCertificateRequest' + application/vnd.kubernetes.protobuf: + schema: + $ref: '#/components/schemas/v1alpha1.PodCertificateRequest' + application/cbor: + schema: + $ref: '#/components/schemas/v1alpha1.PodCertificateRequest' + description: OK + "201": + content: + application/json: + schema: + $ref: '#/components/schemas/v1alpha1.PodCertificateRequest' + application/yaml: + schema: + $ref: '#/components/schemas/v1alpha1.PodCertificateRequest' + application/vnd.kubernetes.protobuf: + schema: + $ref: '#/components/schemas/v1alpha1.PodCertificateRequest' + application/cbor: + schema: + $ref: '#/components/schemas/v1alpha1.PodCertificateRequest' + description: Created + "401": + content: {} + description: Unauthorized + tags: + - certificates_v1alpha1 x-kubernetes-action: put x-kubernetes-group-version-kind: group: certificates.k8s.io - kind: ClusterTrustBundle - version: v1beta1 + kind: PodCertificateRequest + version: v1alpha1 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json - /apis/certificates.k8s.io/v1beta1/watch/clustertrustbundles: {} - /apis/certificates.k8s.io/v1beta1/watch/clustertrustbundles/{name}: {} - /apis/coordination.k8s.io/: + /apis/certificates.k8s.io/v1alpha1/namespaces/{namespace}/podcertificaterequests/{name}/status: get: - description: get information of a group - operationId: getAPIGroup + description: read status of the specified PodCertificateRequest + operationId: readNamespacedPodCertificateRequestStatus + parameters: + - description: name of the PodCertificateRequest + in: path + name: name + required: true + schema: + type: string + - description: object name and auth scope, such as for teams and projects + in: path + name: namespace + required: true + schema: + type: string + - description: If 'true', then the output is pretty printed. Defaults to 'false' + unless the user-agent indicates a browser or command-line HTTP tool (curl + and wget). + in: query + name: pretty + schema: + type: string responses: "200": content: application/json: schema: - $ref: '#/components/schemas/v1.APIGroup' + $ref: '#/components/schemas/v1alpha1.PodCertificateRequest' application/yaml: schema: - $ref: '#/components/schemas/v1.APIGroup' + $ref: '#/components/schemas/v1alpha1.PodCertificateRequest' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1.APIGroup' + $ref: '#/components/schemas/v1alpha1.PodCertificateRequest' + application/cbor: + schema: + $ref: '#/components/schemas/v1alpha1.PodCertificateRequest' description: OK "401": content: {} description: Unauthorized tags: - - coordination + - certificates_v1alpha1 + x-kubernetes-action: get + x-kubernetes-group-version-kind: + group: certificates.k8s.io + kind: PodCertificateRequest + version: v1alpha1 x-accepts: application/json - /apis/coordination.k8s.io/v1/: - get: - description: get available resources - operationId: getAPIResources + patch: + description: partially update status of the specified PodCertificateRequest + operationId: patchNamespacedPodCertificateRequestStatus + parameters: + - description: name of the PodCertificateRequest + in: path + name: name + required: true + schema: + type: string + - description: object name and auth scope, such as for teams and projects + in: path + name: namespace + required: true + schema: + type: string + - description: If 'true', then the output is pretty printed. Defaults to 'false' + unless the user-agent indicates a browser or command-line HTTP tool (curl + and wget). + in: query + name: pretty + schema: + type: string + - description: 'When present, indicates that modifications should not be persisted. + An invalid or unrecognized dryRun directive will result in an error response + and no further processing of the request. Valid values are: - All: all dry + run stages will be processed' + in: query + name: dryRun + schema: + type: string + - description: fieldManager is a name associated with the actor or entity that + is making these changes. The value must be less than or 128 characters long, + and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. + This field is required for apply requests (application/apply-patch) but + optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch). + in: query + name: fieldManager + schema: + type: string + - description: 'fieldValidation instructs the server on how to handle objects + in the request (POST/PUT/PATCH) containing unknown or duplicate fields. + Valid values are: - Ignore: This will ignore any unknown fields that are + silently dropped from the object, and will ignore all but the last duplicate + field that the decoder encounters. This is the default behavior prior to + v1.23. - Warn: This will send a warning via the standard warning response + header for each unknown field that is dropped from the object, and for each + duplicate field that is encountered. The request will still succeed if there + are no other errors, and will only persist the last of any duplicate fields. + This is the default in v1.23+ - Strict: This will fail the request with + a BadRequest error if any unknown fields would be dropped from the object, + or if any duplicate fields are present. The error returned from the server + will contain all unknown and duplicate fields encountered.' + in: query + name: fieldValidation + schema: + type: string + - description: Force is going to "force" Apply requests. It means user will + re-acquire conflicting fields owned by other people. Force flag must be + unset for non-apply patch requests. + in: query + name: force + schema: + type: boolean + requestBody: + content: + application/json: + schema: + $ref: '#/components/schemas/v1.Patch' + required: true responses: "200": content: application/json: schema: - $ref: '#/components/schemas/v1.APIResourceList' + $ref: '#/components/schemas/v1alpha1.PodCertificateRequest' application/yaml: schema: - $ref: '#/components/schemas/v1.APIResourceList' + $ref: '#/components/schemas/v1alpha1.PodCertificateRequest' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1.APIResourceList' + $ref: '#/components/schemas/v1alpha1.PodCertificateRequest' application/cbor: schema: - $ref: '#/components/schemas/v1.APIResourceList' + $ref: '#/components/schemas/v1alpha1.PodCertificateRequest' description: OK + "201": + content: + application/json: + schema: + $ref: '#/components/schemas/v1alpha1.PodCertificateRequest' + application/yaml: + schema: + $ref: '#/components/schemas/v1alpha1.PodCertificateRequest' + application/vnd.kubernetes.protobuf: + schema: + $ref: '#/components/schemas/v1alpha1.PodCertificateRequest' + application/cbor: + schema: + $ref: '#/components/schemas/v1alpha1.PodCertificateRequest' + description: Created "401": content: {} description: Unauthorized tags: - - coordination_v1 + - certificates_v1alpha1 + x-kubernetes-action: patch + x-kubernetes-group-version-kind: + group: certificates.k8s.io + kind: PodCertificateRequest + version: v1alpha1 + x-codegen-request-body-name: body + x-contentType: application/json x-accepts: application/json - /apis/coordination.k8s.io/v1/leases: + put: + description: replace status of the specified PodCertificateRequest + operationId: replaceNamespacedPodCertificateRequestStatus + parameters: + - description: name of the PodCertificateRequest + in: path + name: name + required: true + schema: + type: string + - description: object name and auth scope, such as for teams and projects + in: path + name: namespace + required: true + schema: + type: string + - description: If 'true', then the output is pretty printed. Defaults to 'false' + unless the user-agent indicates a browser or command-line HTTP tool (curl + and wget). + in: query + name: pretty + schema: + type: string + - description: 'When present, indicates that modifications should not be persisted. + An invalid or unrecognized dryRun directive will result in an error response + and no further processing of the request. Valid values are: - All: all dry + run stages will be processed' + in: query + name: dryRun + schema: + type: string + - description: fieldManager is a name associated with the actor or entity that + is making these changes. The value must be less than or 128 characters long, + and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. + in: query + name: fieldManager + schema: + type: string + - description: 'fieldValidation instructs the server on how to handle objects + in the request (POST/PUT/PATCH) containing unknown or duplicate fields. + Valid values are: - Ignore: This will ignore any unknown fields that are + silently dropped from the object, and will ignore all but the last duplicate + field that the decoder encounters. This is the default behavior prior to + v1.23. - Warn: This will send a warning via the standard warning response + header for each unknown field that is dropped from the object, and for each + duplicate field that is encountered. The request will still succeed if there + are no other errors, and will only persist the last of any duplicate fields. + This is the default in v1.23+ - Strict: This will fail the request with + a BadRequest error if any unknown fields would be dropped from the object, + or if any duplicate fields are present. The error returned from the server + will contain all unknown and duplicate fields encountered.' + in: query + name: fieldValidation + schema: + type: string + requestBody: + content: + application/json: + schema: + $ref: '#/components/schemas/v1alpha1.PodCertificateRequest' + required: true + responses: + "200": + content: + application/json: + schema: + $ref: '#/components/schemas/v1alpha1.PodCertificateRequest' + application/yaml: + schema: + $ref: '#/components/schemas/v1alpha1.PodCertificateRequest' + application/vnd.kubernetes.protobuf: + schema: + $ref: '#/components/schemas/v1alpha1.PodCertificateRequest' + application/cbor: + schema: + $ref: '#/components/schemas/v1alpha1.PodCertificateRequest' + description: OK + "201": + content: + application/json: + schema: + $ref: '#/components/schemas/v1alpha1.PodCertificateRequest' + application/yaml: + schema: + $ref: '#/components/schemas/v1alpha1.PodCertificateRequest' + application/vnd.kubernetes.protobuf: + schema: + $ref: '#/components/schemas/v1alpha1.PodCertificateRequest' + application/cbor: + schema: + $ref: '#/components/schemas/v1alpha1.PodCertificateRequest' + description: Created + "401": + content: {} + description: Unauthorized + tags: + - certificates_v1alpha1 + x-kubernetes-action: put + x-kubernetes-group-version-kind: + group: certificates.k8s.io + kind: PodCertificateRequest + version: v1alpha1 + x-codegen-request-body-name: body + x-contentType: application/json + x-accepts: application/json + /apis/certificates.k8s.io/v1alpha1/podcertificaterequests: get: - description: list or watch objects of kind Lease - operationId: listLeaseForAllNamespaces + description: list or watch objects of kind PodCertificateRequest + operationId: listPodCertificateRequestForAllNamespaces parameters: - description: allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks @@ -44021,48 +44002,73 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1.LeaseList' + $ref: '#/components/schemas/v1alpha1.PodCertificateRequestList' application/yaml: schema: - $ref: '#/components/schemas/v1.LeaseList' + $ref: '#/components/schemas/v1alpha1.PodCertificateRequestList' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1.LeaseList' + $ref: '#/components/schemas/v1alpha1.PodCertificateRequestList' application/cbor: schema: - $ref: '#/components/schemas/v1.LeaseList' + $ref: '#/components/schemas/v1alpha1.PodCertificateRequestList' application/json;stream=watch: schema: - $ref: '#/components/schemas/v1.LeaseList' + $ref: '#/components/schemas/v1alpha1.PodCertificateRequestList' application/vnd.kubernetes.protobuf;stream=watch: schema: - $ref: '#/components/schemas/v1.LeaseList' + $ref: '#/components/schemas/v1alpha1.PodCertificateRequestList' application/cbor-seq: schema: - $ref: '#/components/schemas/v1.LeaseList' + $ref: '#/components/schemas/v1alpha1.PodCertificateRequestList' description: OK "401": content: {} description: Unauthorized tags: - - coordination_v1 + - certificates_v1alpha1 x-kubernetes-action: list x-kubernetes-group-version-kind: - group: coordination.k8s.io - kind: Lease - version: v1 + group: certificates.k8s.io + kind: PodCertificateRequest + version: v1alpha1 x-accepts: application/json - /apis/coordination.k8s.io/v1/namespaces/{namespace}/leases: + /apis/certificates.k8s.io/v1alpha1/watch/clustertrustbundles: {} + /apis/certificates.k8s.io/v1alpha1/watch/clustertrustbundles/{name}: {} + /apis/certificates.k8s.io/v1alpha1/watch/namespaces/{namespace}/podcertificaterequests: {} + /apis/certificates.k8s.io/v1alpha1/watch/namespaces/{namespace}/podcertificaterequests/{name}: {} + /apis/certificates.k8s.io/v1alpha1/watch/podcertificaterequests: {} + /apis/certificates.k8s.io/v1beta1/: + get: + description: get available resources + operationId: getAPIResources + responses: + "200": + content: + application/json: + schema: + $ref: '#/components/schemas/v1.APIResourceList' + application/yaml: + schema: + $ref: '#/components/schemas/v1.APIResourceList' + application/vnd.kubernetes.protobuf: + schema: + $ref: '#/components/schemas/v1.APIResourceList' + application/cbor: + schema: + $ref: '#/components/schemas/v1.APIResourceList' + description: OK + "401": + content: {} + description: Unauthorized + tags: + - certificates_v1beta1 + x-accepts: application/json + /apis/certificates.k8s.io/v1beta1/clustertrustbundles: delete: - description: delete collection of Lease - operationId: deleteCollectionNamespacedLease + description: delete collection of ClusterTrustBundle + operationId: deleteCollectionClusterTrustBundle parameters: - - description: object name and auth scope, such as for teams and projects - in: path - name: namespace - required: true - schema: - type: string - description: If 'true', then the output is pretty printed. Defaults to 'false' unless the user-agent indicates a browser or command-line HTTP tool (curl and wget). @@ -44214,25 +44220,19 @@ paths: content: {} description: Unauthorized tags: - - coordination_v1 + - certificates_v1beta1 x-kubernetes-action: deletecollection x-kubernetes-group-version-kind: - group: coordination.k8s.io - kind: Lease - version: v1 + group: certificates.k8s.io + kind: ClusterTrustBundle + version: v1beta1 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json get: - description: list or watch objects of kind Lease - operationId: listNamespacedLease + description: list or watch objects of kind ClusterTrustBundle + operationId: listClusterTrustBundle parameters: - - description: object name and auth scope, such as for teams and projects - in: path - name: namespace - required: true - schema: - type: string - description: If 'true', then the output is pretty printed. Defaults to 'false' unless the user-agent indicates a browser or command-line HTTP tool (curl and wget). @@ -44329,47 +44329,41 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1.LeaseList' + $ref: '#/components/schemas/v1beta1.ClusterTrustBundleList' application/yaml: schema: - $ref: '#/components/schemas/v1.LeaseList' + $ref: '#/components/schemas/v1beta1.ClusterTrustBundleList' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1.LeaseList' + $ref: '#/components/schemas/v1beta1.ClusterTrustBundleList' application/cbor: schema: - $ref: '#/components/schemas/v1.LeaseList' + $ref: '#/components/schemas/v1beta1.ClusterTrustBundleList' application/json;stream=watch: schema: - $ref: '#/components/schemas/v1.LeaseList' + $ref: '#/components/schemas/v1beta1.ClusterTrustBundleList' application/vnd.kubernetes.protobuf;stream=watch: schema: - $ref: '#/components/schemas/v1.LeaseList' + $ref: '#/components/schemas/v1beta1.ClusterTrustBundleList' application/cbor-seq: schema: - $ref: '#/components/schemas/v1.LeaseList' + $ref: '#/components/schemas/v1beta1.ClusterTrustBundleList' description: OK "401": content: {} description: Unauthorized tags: - - coordination_v1 + - certificates_v1beta1 x-kubernetes-action: list x-kubernetes-group-version-kind: - group: coordination.k8s.io - kind: Lease - version: v1 + group: certificates.k8s.io + kind: ClusterTrustBundle + version: v1beta1 x-accepts: application/json post: - description: create a Lease - operationId: createNamespacedLease + description: create a ClusterTrustBundle + operationId: createClusterTrustBundle parameters: - - description: object name and auth scope, such as for teams and projects - in: path - name: namespace - required: true - schema: - type: string - description: If 'true', then the output is pretty printed. Defaults to 'false' unless the user-agent indicates a browser or command-line HTTP tool (curl and wget). @@ -44413,84 +44407,78 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1.Lease' + $ref: '#/components/schemas/v1beta1.ClusterTrustBundle' required: true responses: "200": content: application/json: schema: - $ref: '#/components/schemas/v1.Lease' + $ref: '#/components/schemas/v1beta1.ClusterTrustBundle' application/yaml: schema: - $ref: '#/components/schemas/v1.Lease' + $ref: '#/components/schemas/v1beta1.ClusterTrustBundle' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1.Lease' + $ref: '#/components/schemas/v1beta1.ClusterTrustBundle' application/cbor: schema: - $ref: '#/components/schemas/v1.Lease' + $ref: '#/components/schemas/v1beta1.ClusterTrustBundle' description: OK "201": content: application/json: schema: - $ref: '#/components/schemas/v1.Lease' + $ref: '#/components/schemas/v1beta1.ClusterTrustBundle' application/yaml: schema: - $ref: '#/components/schemas/v1.Lease' + $ref: '#/components/schemas/v1beta1.ClusterTrustBundle' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1.Lease' + $ref: '#/components/schemas/v1beta1.ClusterTrustBundle' application/cbor: schema: - $ref: '#/components/schemas/v1.Lease' + $ref: '#/components/schemas/v1beta1.ClusterTrustBundle' description: Created "202": content: application/json: schema: - $ref: '#/components/schemas/v1.Lease' + $ref: '#/components/schemas/v1beta1.ClusterTrustBundle' application/yaml: schema: - $ref: '#/components/schemas/v1.Lease' + $ref: '#/components/schemas/v1beta1.ClusterTrustBundle' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1.Lease' + $ref: '#/components/schemas/v1beta1.ClusterTrustBundle' application/cbor: schema: - $ref: '#/components/schemas/v1.Lease' + $ref: '#/components/schemas/v1beta1.ClusterTrustBundle' description: Accepted "401": content: {} description: Unauthorized tags: - - coordination_v1 + - certificates_v1beta1 x-kubernetes-action: post x-kubernetes-group-version-kind: - group: coordination.k8s.io - kind: Lease - version: v1 + group: certificates.k8s.io + kind: ClusterTrustBundle + version: v1beta1 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json - /apis/coordination.k8s.io/v1/namespaces/{namespace}/leases/{name}: + /apis/certificates.k8s.io/v1beta1/clustertrustbundles/{name}: delete: - description: delete a Lease - operationId: deleteNamespacedLease + description: delete a ClusterTrustBundle + operationId: deleteClusterTrustBundle parameters: - - description: name of the Lease + - description: name of the ClusterTrustBundle in: path name: name required: true schema: type: string - - description: object name and auth scope, such as for teams and projects - in: path - name: namespace - required: true - schema: - type: string - description: If 'true', then the output is pretty printed. Defaults to 'false' unless the user-agent indicates a browser or command-line HTTP tool (curl and wget). @@ -44589,31 +44577,25 @@ paths: content: {} description: Unauthorized tags: - - coordination_v1 + - certificates_v1beta1 x-kubernetes-action: delete x-kubernetes-group-version-kind: - group: coordination.k8s.io - kind: Lease - version: v1 + group: certificates.k8s.io + kind: ClusterTrustBundle + version: v1beta1 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json get: - description: read the specified Lease - operationId: readNamespacedLease + description: read the specified ClusterTrustBundle + operationId: readClusterTrustBundle parameters: - - description: name of the Lease + - description: name of the ClusterTrustBundle in: path name: name required: true schema: type: string - - description: object name and auth scope, such as for teams and projects - in: path - name: namespace - required: true - schema: - type: string - description: If 'true', then the output is pretty printed. Defaults to 'false' unless the user-agent indicates a browser or command-line HTTP tool (curl and wget). @@ -44626,44 +44608,38 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1.Lease' + $ref: '#/components/schemas/v1beta1.ClusterTrustBundle' application/yaml: schema: - $ref: '#/components/schemas/v1.Lease' + $ref: '#/components/schemas/v1beta1.ClusterTrustBundle' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1.Lease' + $ref: '#/components/schemas/v1beta1.ClusterTrustBundle' application/cbor: schema: - $ref: '#/components/schemas/v1.Lease' + $ref: '#/components/schemas/v1beta1.ClusterTrustBundle' description: OK "401": content: {} description: Unauthorized tags: - - coordination_v1 + - certificates_v1beta1 x-kubernetes-action: get x-kubernetes-group-version-kind: - group: coordination.k8s.io - kind: Lease - version: v1 + group: certificates.k8s.io + kind: ClusterTrustBundle + version: v1beta1 x-accepts: application/json patch: - description: partially update the specified Lease - operationId: patchNamespacedLease + description: partially update the specified ClusterTrustBundle + operationId: patchClusterTrustBundle parameters: - - description: name of the Lease + - description: name of the ClusterTrustBundle in: path name: name required: true schema: type: string - - description: object name and auth scope, such as for teams and projects - in: path - name: namespace - required: true - schema: - type: string - description: If 'true', then the output is pretty printed. Defaults to 'false' unless the user-agent indicates a browser or command-line HTTP tool (curl and wget). @@ -44723,61 +44699,55 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1.Lease' + $ref: '#/components/schemas/v1beta1.ClusterTrustBundle' application/yaml: schema: - $ref: '#/components/schemas/v1.Lease' + $ref: '#/components/schemas/v1beta1.ClusterTrustBundle' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1.Lease' + $ref: '#/components/schemas/v1beta1.ClusterTrustBundle' application/cbor: schema: - $ref: '#/components/schemas/v1.Lease' + $ref: '#/components/schemas/v1beta1.ClusterTrustBundle' description: OK "201": content: application/json: schema: - $ref: '#/components/schemas/v1.Lease' + $ref: '#/components/schemas/v1beta1.ClusterTrustBundle' application/yaml: schema: - $ref: '#/components/schemas/v1.Lease' + $ref: '#/components/schemas/v1beta1.ClusterTrustBundle' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1.Lease' + $ref: '#/components/schemas/v1beta1.ClusterTrustBundle' application/cbor: schema: - $ref: '#/components/schemas/v1.Lease' + $ref: '#/components/schemas/v1beta1.ClusterTrustBundle' description: Created "401": content: {} description: Unauthorized tags: - - coordination_v1 + - certificates_v1beta1 x-kubernetes-action: patch x-kubernetes-group-version-kind: - group: coordination.k8s.io - kind: Lease - version: v1 + group: certificates.k8s.io + kind: ClusterTrustBundle + version: v1beta1 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json put: - description: replace the specified Lease - operationId: replaceNamespacedLease + description: replace the specified ClusterTrustBundle + operationId: replaceClusterTrustBundle parameters: - - description: name of the Lease + - description: name of the ClusterTrustBundle in: path name: name required: true schema: type: string - - description: object name and auth scope, such as for teams and projects - in: path - name: namespace - required: true - schema: - type: string - description: If 'true', then the output is pretty printed. Defaults to 'false' unless the user-agent indicates a browser or command-line HTTP tool (curl and wget). @@ -44821,56 +44791,78 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1.Lease' + $ref: '#/components/schemas/v1beta1.ClusterTrustBundle' required: true responses: "200": content: application/json: schema: - $ref: '#/components/schemas/v1.Lease' + $ref: '#/components/schemas/v1beta1.ClusterTrustBundle' application/yaml: schema: - $ref: '#/components/schemas/v1.Lease' + $ref: '#/components/schemas/v1beta1.ClusterTrustBundle' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1.Lease' + $ref: '#/components/schemas/v1beta1.ClusterTrustBundle' application/cbor: schema: - $ref: '#/components/schemas/v1.Lease' + $ref: '#/components/schemas/v1beta1.ClusterTrustBundle' description: OK "201": content: application/json: schema: - $ref: '#/components/schemas/v1.Lease' + $ref: '#/components/schemas/v1beta1.ClusterTrustBundle' application/yaml: schema: - $ref: '#/components/schemas/v1.Lease' + $ref: '#/components/schemas/v1beta1.ClusterTrustBundle' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1.Lease' + $ref: '#/components/schemas/v1beta1.ClusterTrustBundle' application/cbor: schema: - $ref: '#/components/schemas/v1.Lease' + $ref: '#/components/schemas/v1beta1.ClusterTrustBundle' description: Created "401": content: {} description: Unauthorized tags: - - coordination_v1 + - certificates_v1beta1 x-kubernetes-action: put x-kubernetes-group-version-kind: - group: coordination.k8s.io - kind: Lease - version: v1 + group: certificates.k8s.io + kind: ClusterTrustBundle + version: v1beta1 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json - /apis/coordination.k8s.io/v1/watch/leases: {} - /apis/coordination.k8s.io/v1/watch/namespaces/{namespace}/leases: {} - /apis/coordination.k8s.io/v1/watch/namespaces/{namespace}/leases/{name}: {} - /apis/coordination.k8s.io/v1alpha2/: + /apis/certificates.k8s.io/v1beta1/watch/clustertrustbundles: {} + /apis/certificates.k8s.io/v1beta1/watch/clustertrustbundles/{name}: {} + /apis/coordination.k8s.io/: + get: + description: get information of a group + operationId: getAPIGroup + responses: + "200": + content: + application/json: + schema: + $ref: '#/components/schemas/v1.APIGroup' + application/yaml: + schema: + $ref: '#/components/schemas/v1.APIGroup' + application/vnd.kubernetes.protobuf: + schema: + $ref: '#/components/schemas/v1.APIGroup' + description: OK + "401": + content: {} + description: Unauthorized + tags: + - coordination + x-accepts: application/json + /apis/coordination.k8s.io/v1/: get: description: get available resources operationId: getAPIResources @@ -44894,12 +44886,12 @@ paths: content: {} description: Unauthorized tags: - - coordination_v1alpha2 + - coordination_v1 x-accepts: application/json - /apis/coordination.k8s.io/v1alpha2/leasecandidates: + /apis/coordination.k8s.io/v1/leases: get: - description: list or watch objects of kind LeaseCandidate - operationId: listLeaseCandidateForAllNamespaces + description: list or watch objects of kind Lease + operationId: listLeaseForAllNamespaces parameters: - description: allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks @@ -44997,41 +44989,41 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1alpha2.LeaseCandidateList' + $ref: '#/components/schemas/v1.LeaseList' application/yaml: schema: - $ref: '#/components/schemas/v1alpha2.LeaseCandidateList' + $ref: '#/components/schemas/v1.LeaseList' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1alpha2.LeaseCandidateList' + $ref: '#/components/schemas/v1.LeaseList' application/cbor: schema: - $ref: '#/components/schemas/v1alpha2.LeaseCandidateList' + $ref: '#/components/schemas/v1.LeaseList' application/json;stream=watch: schema: - $ref: '#/components/schemas/v1alpha2.LeaseCandidateList' + $ref: '#/components/schemas/v1.LeaseList' application/vnd.kubernetes.protobuf;stream=watch: schema: - $ref: '#/components/schemas/v1alpha2.LeaseCandidateList' + $ref: '#/components/schemas/v1.LeaseList' application/cbor-seq: schema: - $ref: '#/components/schemas/v1alpha2.LeaseCandidateList' + $ref: '#/components/schemas/v1.LeaseList' description: OK "401": content: {} description: Unauthorized tags: - - coordination_v1alpha2 + - coordination_v1 x-kubernetes-action: list x-kubernetes-group-version-kind: group: coordination.k8s.io - kind: LeaseCandidate - version: v1alpha2 + kind: Lease + version: v1 x-accepts: application/json - /apis/coordination.k8s.io/v1alpha2/namespaces/{namespace}/leasecandidates: + /apis/coordination.k8s.io/v1/namespaces/{namespace}/leases: delete: - description: delete collection of LeaseCandidate - operationId: deleteCollectionNamespacedLeaseCandidate + description: delete collection of Lease + operationId: deleteCollectionNamespacedLease parameters: - description: object name and auth scope, such as for teams and projects in: path @@ -45190,18 +45182,18 @@ paths: content: {} description: Unauthorized tags: - - coordination_v1alpha2 + - coordination_v1 x-kubernetes-action: deletecollection x-kubernetes-group-version-kind: group: coordination.k8s.io - kind: LeaseCandidate - version: v1alpha2 + kind: Lease + version: v1 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json get: - description: list or watch objects of kind LeaseCandidate - operationId: listNamespacedLeaseCandidate + description: list or watch objects of kind Lease + operationId: listNamespacedLease parameters: - description: object name and auth scope, such as for teams and projects in: path @@ -45305,40 +45297,40 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1alpha2.LeaseCandidateList' + $ref: '#/components/schemas/v1.LeaseList' application/yaml: schema: - $ref: '#/components/schemas/v1alpha2.LeaseCandidateList' + $ref: '#/components/schemas/v1.LeaseList' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1alpha2.LeaseCandidateList' + $ref: '#/components/schemas/v1.LeaseList' application/cbor: schema: - $ref: '#/components/schemas/v1alpha2.LeaseCandidateList' + $ref: '#/components/schemas/v1.LeaseList' application/json;stream=watch: schema: - $ref: '#/components/schemas/v1alpha2.LeaseCandidateList' + $ref: '#/components/schemas/v1.LeaseList' application/vnd.kubernetes.protobuf;stream=watch: schema: - $ref: '#/components/schemas/v1alpha2.LeaseCandidateList' + $ref: '#/components/schemas/v1.LeaseList' application/cbor-seq: schema: - $ref: '#/components/schemas/v1alpha2.LeaseCandidateList' + $ref: '#/components/schemas/v1.LeaseList' description: OK "401": content: {} description: Unauthorized tags: - - coordination_v1alpha2 + - coordination_v1 x-kubernetes-action: list x-kubernetes-group-version-kind: group: coordination.k8s.io - kind: LeaseCandidate - version: v1alpha2 + kind: Lease + version: v1 x-accepts: application/json post: - description: create a LeaseCandidate - operationId: createNamespacedLeaseCandidate + description: create a Lease + operationId: createNamespacedLease parameters: - description: object name and auth scope, such as for teams and projects in: path @@ -45389,73 +45381,73 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1alpha2.LeaseCandidate' + $ref: '#/components/schemas/v1.Lease' required: true responses: "200": content: application/json: schema: - $ref: '#/components/schemas/v1alpha2.LeaseCandidate' + $ref: '#/components/schemas/v1.Lease' application/yaml: schema: - $ref: '#/components/schemas/v1alpha2.LeaseCandidate' + $ref: '#/components/schemas/v1.Lease' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1alpha2.LeaseCandidate' + $ref: '#/components/schemas/v1.Lease' application/cbor: schema: - $ref: '#/components/schemas/v1alpha2.LeaseCandidate' + $ref: '#/components/schemas/v1.Lease' description: OK "201": content: application/json: schema: - $ref: '#/components/schemas/v1alpha2.LeaseCandidate' + $ref: '#/components/schemas/v1.Lease' application/yaml: schema: - $ref: '#/components/schemas/v1alpha2.LeaseCandidate' + $ref: '#/components/schemas/v1.Lease' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1alpha2.LeaseCandidate' + $ref: '#/components/schemas/v1.Lease' application/cbor: schema: - $ref: '#/components/schemas/v1alpha2.LeaseCandidate' + $ref: '#/components/schemas/v1.Lease' description: Created "202": content: application/json: schema: - $ref: '#/components/schemas/v1alpha2.LeaseCandidate' + $ref: '#/components/schemas/v1.Lease' application/yaml: schema: - $ref: '#/components/schemas/v1alpha2.LeaseCandidate' + $ref: '#/components/schemas/v1.Lease' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1alpha2.LeaseCandidate' + $ref: '#/components/schemas/v1.Lease' application/cbor: schema: - $ref: '#/components/schemas/v1alpha2.LeaseCandidate' + $ref: '#/components/schemas/v1.Lease' description: Accepted "401": content: {} description: Unauthorized tags: - - coordination_v1alpha2 + - coordination_v1 x-kubernetes-action: post x-kubernetes-group-version-kind: group: coordination.k8s.io - kind: LeaseCandidate - version: v1alpha2 + kind: Lease + version: v1 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json - /apis/coordination.k8s.io/v1alpha2/namespaces/{namespace}/leasecandidates/{name}: + /apis/coordination.k8s.io/v1/namespaces/{namespace}/leases/{name}: delete: - description: delete a LeaseCandidate - operationId: deleteNamespacedLeaseCandidate + description: delete a Lease + operationId: deleteNamespacedLease parameters: - - description: name of the LeaseCandidate + - description: name of the Lease in: path name: name required: true @@ -45565,20 +45557,20 @@ paths: content: {} description: Unauthorized tags: - - coordination_v1alpha2 + - coordination_v1 x-kubernetes-action: delete x-kubernetes-group-version-kind: group: coordination.k8s.io - kind: LeaseCandidate - version: v1alpha2 + kind: Lease + version: v1 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json get: - description: read the specified LeaseCandidate - operationId: readNamespacedLeaseCandidate + description: read the specified Lease + operationId: readNamespacedLease parameters: - - description: name of the LeaseCandidate + - description: name of the Lease in: path name: name required: true @@ -45602,33 +45594,33 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1alpha2.LeaseCandidate' + $ref: '#/components/schemas/v1.Lease' application/yaml: schema: - $ref: '#/components/schemas/v1alpha2.LeaseCandidate' + $ref: '#/components/schemas/v1.Lease' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1alpha2.LeaseCandidate' + $ref: '#/components/schemas/v1.Lease' application/cbor: schema: - $ref: '#/components/schemas/v1alpha2.LeaseCandidate' + $ref: '#/components/schemas/v1.Lease' description: OK "401": content: {} description: Unauthorized tags: - - coordination_v1alpha2 + - coordination_v1 x-kubernetes-action: get x-kubernetes-group-version-kind: group: coordination.k8s.io - kind: LeaseCandidate - version: v1alpha2 + kind: Lease + version: v1 x-accepts: application/json patch: - description: partially update the specified LeaseCandidate - operationId: patchNamespacedLeaseCandidate + description: partially update the specified Lease + operationId: patchNamespacedLease parameters: - - description: name of the LeaseCandidate + - description: name of the Lease in: path name: name required: true @@ -45699,50 +45691,50 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1alpha2.LeaseCandidate' + $ref: '#/components/schemas/v1.Lease' application/yaml: schema: - $ref: '#/components/schemas/v1alpha2.LeaseCandidate' + $ref: '#/components/schemas/v1.Lease' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1alpha2.LeaseCandidate' + $ref: '#/components/schemas/v1.Lease' application/cbor: schema: - $ref: '#/components/schemas/v1alpha2.LeaseCandidate' + $ref: '#/components/schemas/v1.Lease' description: OK "201": content: application/json: schema: - $ref: '#/components/schemas/v1alpha2.LeaseCandidate' + $ref: '#/components/schemas/v1.Lease' application/yaml: schema: - $ref: '#/components/schemas/v1alpha2.LeaseCandidate' + $ref: '#/components/schemas/v1.Lease' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1alpha2.LeaseCandidate' + $ref: '#/components/schemas/v1.Lease' application/cbor: schema: - $ref: '#/components/schemas/v1alpha2.LeaseCandidate' + $ref: '#/components/schemas/v1.Lease' description: Created "401": content: {} description: Unauthorized tags: - - coordination_v1alpha2 + - coordination_v1 x-kubernetes-action: patch x-kubernetes-group-version-kind: group: coordination.k8s.io - kind: LeaseCandidate - version: v1alpha2 + kind: Lease + version: v1 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json put: - description: replace the specified LeaseCandidate - operationId: replaceNamespacedLeaseCandidate + description: replace the specified Lease + operationId: replaceNamespacedLease parameters: - - description: name of the LeaseCandidate + - description: name of the Lease in: path name: name required: true @@ -45797,56 +45789,56 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1alpha2.LeaseCandidate' + $ref: '#/components/schemas/v1.Lease' required: true responses: "200": content: application/json: schema: - $ref: '#/components/schemas/v1alpha2.LeaseCandidate' + $ref: '#/components/schemas/v1.Lease' application/yaml: schema: - $ref: '#/components/schemas/v1alpha2.LeaseCandidate' + $ref: '#/components/schemas/v1.Lease' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1alpha2.LeaseCandidate' + $ref: '#/components/schemas/v1.Lease' application/cbor: schema: - $ref: '#/components/schemas/v1alpha2.LeaseCandidate' + $ref: '#/components/schemas/v1.Lease' description: OK "201": content: application/json: schema: - $ref: '#/components/schemas/v1alpha2.LeaseCandidate' + $ref: '#/components/schemas/v1.Lease' application/yaml: schema: - $ref: '#/components/schemas/v1alpha2.LeaseCandidate' + $ref: '#/components/schemas/v1.Lease' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1alpha2.LeaseCandidate' + $ref: '#/components/schemas/v1.Lease' application/cbor: schema: - $ref: '#/components/schemas/v1alpha2.LeaseCandidate' + $ref: '#/components/schemas/v1.Lease' description: Created "401": content: {} description: Unauthorized tags: - - coordination_v1alpha2 + - coordination_v1 x-kubernetes-action: put x-kubernetes-group-version-kind: group: coordination.k8s.io - kind: LeaseCandidate - version: v1alpha2 + kind: Lease + version: v1 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json - /apis/coordination.k8s.io/v1alpha2/watch/leasecandidates: {} - /apis/coordination.k8s.io/v1alpha2/watch/namespaces/{namespace}/leasecandidates: {} - /apis/coordination.k8s.io/v1alpha2/watch/namespaces/{namespace}/leasecandidates/{name}: {} - /apis/coordination.k8s.io/v1beta1/: + /apis/coordination.k8s.io/v1/watch/leases: {} + /apis/coordination.k8s.io/v1/watch/namespaces/{namespace}/leases: {} + /apis/coordination.k8s.io/v1/watch/namespaces/{namespace}/leases/{name}: {} + /apis/coordination.k8s.io/v1alpha2/: get: description: get available resources operationId: getAPIResources @@ -45870,9 +45862,9 @@ paths: content: {} description: Unauthorized tags: - - coordination_v1beta1 + - coordination_v1alpha2 x-accepts: application/json - /apis/coordination.k8s.io/v1beta1/leasecandidates: + /apis/coordination.k8s.io/v1alpha2/leasecandidates: get: description: list or watch objects of kind LeaseCandidate operationId: listLeaseCandidateForAllNamespaces @@ -45973,38 +45965,38 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1beta1.LeaseCandidateList' + $ref: '#/components/schemas/v1alpha2.LeaseCandidateList' application/yaml: schema: - $ref: '#/components/schemas/v1beta1.LeaseCandidateList' + $ref: '#/components/schemas/v1alpha2.LeaseCandidateList' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1beta1.LeaseCandidateList' + $ref: '#/components/schemas/v1alpha2.LeaseCandidateList' application/cbor: schema: - $ref: '#/components/schemas/v1beta1.LeaseCandidateList' + $ref: '#/components/schemas/v1alpha2.LeaseCandidateList' application/json;stream=watch: schema: - $ref: '#/components/schemas/v1beta1.LeaseCandidateList' + $ref: '#/components/schemas/v1alpha2.LeaseCandidateList' application/vnd.kubernetes.protobuf;stream=watch: schema: - $ref: '#/components/schemas/v1beta1.LeaseCandidateList' + $ref: '#/components/schemas/v1alpha2.LeaseCandidateList' application/cbor-seq: schema: - $ref: '#/components/schemas/v1beta1.LeaseCandidateList' + $ref: '#/components/schemas/v1alpha2.LeaseCandidateList' description: OK "401": content: {} description: Unauthorized tags: - - coordination_v1beta1 + - coordination_v1alpha2 x-kubernetes-action: list x-kubernetes-group-version-kind: group: coordination.k8s.io kind: LeaseCandidate - version: v1beta1 + version: v1alpha2 x-accepts: application/json - /apis/coordination.k8s.io/v1beta1/namespaces/{namespace}/leasecandidates: + /apis/coordination.k8s.io/v1alpha2/namespaces/{namespace}/leasecandidates: delete: description: delete collection of LeaseCandidate operationId: deleteCollectionNamespacedLeaseCandidate @@ -46166,12 +46158,12 @@ paths: content: {} description: Unauthorized tags: - - coordination_v1beta1 + - coordination_v1alpha2 x-kubernetes-action: deletecollection x-kubernetes-group-version-kind: group: coordination.k8s.io kind: LeaseCandidate - version: v1beta1 + version: v1alpha2 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json @@ -46281,36 +46273,36 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1beta1.LeaseCandidateList' + $ref: '#/components/schemas/v1alpha2.LeaseCandidateList' application/yaml: schema: - $ref: '#/components/schemas/v1beta1.LeaseCandidateList' + $ref: '#/components/schemas/v1alpha2.LeaseCandidateList' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1beta1.LeaseCandidateList' + $ref: '#/components/schemas/v1alpha2.LeaseCandidateList' application/cbor: schema: - $ref: '#/components/schemas/v1beta1.LeaseCandidateList' + $ref: '#/components/schemas/v1alpha2.LeaseCandidateList' application/json;stream=watch: schema: - $ref: '#/components/schemas/v1beta1.LeaseCandidateList' + $ref: '#/components/schemas/v1alpha2.LeaseCandidateList' application/vnd.kubernetes.protobuf;stream=watch: schema: - $ref: '#/components/schemas/v1beta1.LeaseCandidateList' + $ref: '#/components/schemas/v1alpha2.LeaseCandidateList' application/cbor-seq: schema: - $ref: '#/components/schemas/v1beta1.LeaseCandidateList' + $ref: '#/components/schemas/v1alpha2.LeaseCandidateList' description: OK "401": content: {} description: Unauthorized tags: - - coordination_v1beta1 + - coordination_v1alpha2 x-kubernetes-action: list x-kubernetes-group-version-kind: group: coordination.k8s.io kind: LeaseCandidate - version: v1beta1 + version: v1alpha2 x-accepts: application/json post: description: create a LeaseCandidate @@ -46365,68 +46357,68 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1beta1.LeaseCandidate' + $ref: '#/components/schemas/v1alpha2.LeaseCandidate' required: true responses: "200": content: application/json: schema: - $ref: '#/components/schemas/v1beta1.LeaseCandidate' + $ref: '#/components/schemas/v1alpha2.LeaseCandidate' application/yaml: schema: - $ref: '#/components/schemas/v1beta1.LeaseCandidate' + $ref: '#/components/schemas/v1alpha2.LeaseCandidate' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1beta1.LeaseCandidate' + $ref: '#/components/schemas/v1alpha2.LeaseCandidate' application/cbor: schema: - $ref: '#/components/schemas/v1beta1.LeaseCandidate' + $ref: '#/components/schemas/v1alpha2.LeaseCandidate' description: OK "201": content: application/json: schema: - $ref: '#/components/schemas/v1beta1.LeaseCandidate' + $ref: '#/components/schemas/v1alpha2.LeaseCandidate' application/yaml: schema: - $ref: '#/components/schemas/v1beta1.LeaseCandidate' + $ref: '#/components/schemas/v1alpha2.LeaseCandidate' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1beta1.LeaseCandidate' + $ref: '#/components/schemas/v1alpha2.LeaseCandidate' application/cbor: schema: - $ref: '#/components/schemas/v1beta1.LeaseCandidate' + $ref: '#/components/schemas/v1alpha2.LeaseCandidate' description: Created "202": content: application/json: schema: - $ref: '#/components/schemas/v1beta1.LeaseCandidate' + $ref: '#/components/schemas/v1alpha2.LeaseCandidate' application/yaml: schema: - $ref: '#/components/schemas/v1beta1.LeaseCandidate' + $ref: '#/components/schemas/v1alpha2.LeaseCandidate' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1beta1.LeaseCandidate' + $ref: '#/components/schemas/v1alpha2.LeaseCandidate' application/cbor: schema: - $ref: '#/components/schemas/v1beta1.LeaseCandidate' + $ref: '#/components/schemas/v1alpha2.LeaseCandidate' description: Accepted "401": content: {} description: Unauthorized tags: - - coordination_v1beta1 + - coordination_v1alpha2 x-kubernetes-action: post x-kubernetes-group-version-kind: group: coordination.k8s.io kind: LeaseCandidate - version: v1beta1 + version: v1alpha2 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json - /apis/coordination.k8s.io/v1beta1/namespaces/{namespace}/leasecandidates/{name}: + /apis/coordination.k8s.io/v1alpha2/namespaces/{namespace}/leasecandidates/{name}: delete: description: delete a LeaseCandidate operationId: deleteNamespacedLeaseCandidate @@ -46541,12 +46533,12 @@ paths: content: {} description: Unauthorized tags: - - coordination_v1beta1 + - coordination_v1alpha2 x-kubernetes-action: delete x-kubernetes-group-version-kind: group: coordination.k8s.io kind: LeaseCandidate - version: v1beta1 + version: v1alpha2 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json @@ -46578,27 +46570,27 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1beta1.LeaseCandidate' + $ref: '#/components/schemas/v1alpha2.LeaseCandidate' application/yaml: schema: - $ref: '#/components/schemas/v1beta1.LeaseCandidate' + $ref: '#/components/schemas/v1alpha2.LeaseCandidate' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1beta1.LeaseCandidate' + $ref: '#/components/schemas/v1alpha2.LeaseCandidate' application/cbor: schema: - $ref: '#/components/schemas/v1beta1.LeaseCandidate' + $ref: '#/components/schemas/v1alpha2.LeaseCandidate' description: OK "401": content: {} description: Unauthorized tags: - - coordination_v1beta1 + - coordination_v1alpha2 x-kubernetes-action: get x-kubernetes-group-version-kind: group: coordination.k8s.io kind: LeaseCandidate - version: v1beta1 + version: v1alpha2 x-accepts: application/json patch: description: partially update the specified LeaseCandidate @@ -46675,42 +46667,42 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1beta1.LeaseCandidate' + $ref: '#/components/schemas/v1alpha2.LeaseCandidate' application/yaml: schema: - $ref: '#/components/schemas/v1beta1.LeaseCandidate' + $ref: '#/components/schemas/v1alpha2.LeaseCandidate' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1beta1.LeaseCandidate' + $ref: '#/components/schemas/v1alpha2.LeaseCandidate' application/cbor: schema: - $ref: '#/components/schemas/v1beta1.LeaseCandidate' + $ref: '#/components/schemas/v1alpha2.LeaseCandidate' description: OK "201": content: application/json: schema: - $ref: '#/components/schemas/v1beta1.LeaseCandidate' + $ref: '#/components/schemas/v1alpha2.LeaseCandidate' application/yaml: schema: - $ref: '#/components/schemas/v1beta1.LeaseCandidate' + $ref: '#/components/schemas/v1alpha2.LeaseCandidate' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1beta1.LeaseCandidate' + $ref: '#/components/schemas/v1alpha2.LeaseCandidate' application/cbor: schema: - $ref: '#/components/schemas/v1beta1.LeaseCandidate' + $ref: '#/components/schemas/v1alpha2.LeaseCandidate' description: Created "401": content: {} description: Unauthorized tags: - - coordination_v1beta1 + - coordination_v1alpha2 x-kubernetes-action: patch x-kubernetes-group-version-kind: group: coordination.k8s.io kind: LeaseCandidate - version: v1beta1 + version: v1alpha2 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json @@ -46773,79 +46765,56 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1beta1.LeaseCandidate' + $ref: '#/components/schemas/v1alpha2.LeaseCandidate' required: true responses: "200": content: application/json: schema: - $ref: '#/components/schemas/v1beta1.LeaseCandidate' + $ref: '#/components/schemas/v1alpha2.LeaseCandidate' application/yaml: schema: - $ref: '#/components/schemas/v1beta1.LeaseCandidate' + $ref: '#/components/schemas/v1alpha2.LeaseCandidate' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1beta1.LeaseCandidate' + $ref: '#/components/schemas/v1alpha2.LeaseCandidate' application/cbor: schema: - $ref: '#/components/schemas/v1beta1.LeaseCandidate' + $ref: '#/components/schemas/v1alpha2.LeaseCandidate' description: OK "201": content: application/json: schema: - $ref: '#/components/schemas/v1beta1.LeaseCandidate' + $ref: '#/components/schemas/v1alpha2.LeaseCandidate' application/yaml: schema: - $ref: '#/components/schemas/v1beta1.LeaseCandidate' + $ref: '#/components/schemas/v1alpha2.LeaseCandidate' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1beta1.LeaseCandidate' + $ref: '#/components/schemas/v1alpha2.LeaseCandidate' application/cbor: schema: - $ref: '#/components/schemas/v1beta1.LeaseCandidate' + $ref: '#/components/schemas/v1alpha2.LeaseCandidate' description: Created "401": content: {} description: Unauthorized tags: - - coordination_v1beta1 + - coordination_v1alpha2 x-kubernetes-action: put x-kubernetes-group-version-kind: group: coordination.k8s.io kind: LeaseCandidate - version: v1beta1 + version: v1alpha2 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json - /apis/coordination.k8s.io/v1beta1/watch/leasecandidates: {} - /apis/coordination.k8s.io/v1beta1/watch/namespaces/{namespace}/leasecandidates: {} - /apis/coordination.k8s.io/v1beta1/watch/namespaces/{namespace}/leasecandidates/{name}: {} - /apis/discovery.k8s.io/: - get: - description: get information of a group - operationId: getAPIGroup - responses: - "200": - content: - application/json: - schema: - $ref: '#/components/schemas/v1.APIGroup' - application/yaml: - schema: - $ref: '#/components/schemas/v1.APIGroup' - application/vnd.kubernetes.protobuf: - schema: - $ref: '#/components/schemas/v1.APIGroup' - description: OK - "401": - content: {} - description: Unauthorized - tags: - - discovery - x-accepts: application/json - /apis/discovery.k8s.io/v1/: + /apis/coordination.k8s.io/v1alpha2/watch/leasecandidates: {} + /apis/coordination.k8s.io/v1alpha2/watch/namespaces/{namespace}/leasecandidates: {} + /apis/coordination.k8s.io/v1alpha2/watch/namespaces/{namespace}/leasecandidates/{name}: {} + /apis/coordination.k8s.io/v1beta1/: get: description: get available resources operationId: getAPIResources @@ -46869,12 +46838,12 @@ paths: content: {} description: Unauthorized tags: - - discovery_v1 + - coordination_v1beta1 x-accepts: application/json - /apis/discovery.k8s.io/v1/endpointslices: + /apis/coordination.k8s.io/v1beta1/leasecandidates: get: - description: list or watch objects of kind EndpointSlice - operationId: listEndpointSliceForAllNamespaces + description: list or watch objects of kind LeaseCandidate + operationId: listLeaseCandidateForAllNamespaces parameters: - description: allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks @@ -46972,41 +46941,41 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1.EndpointSliceList' + $ref: '#/components/schemas/v1beta1.LeaseCandidateList' application/yaml: schema: - $ref: '#/components/schemas/v1.EndpointSliceList' + $ref: '#/components/schemas/v1beta1.LeaseCandidateList' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1.EndpointSliceList' + $ref: '#/components/schemas/v1beta1.LeaseCandidateList' application/cbor: schema: - $ref: '#/components/schemas/v1.EndpointSliceList' + $ref: '#/components/schemas/v1beta1.LeaseCandidateList' application/json;stream=watch: schema: - $ref: '#/components/schemas/v1.EndpointSliceList' + $ref: '#/components/schemas/v1beta1.LeaseCandidateList' application/vnd.kubernetes.protobuf;stream=watch: schema: - $ref: '#/components/schemas/v1.EndpointSliceList' + $ref: '#/components/schemas/v1beta1.LeaseCandidateList' application/cbor-seq: schema: - $ref: '#/components/schemas/v1.EndpointSliceList' + $ref: '#/components/schemas/v1beta1.LeaseCandidateList' description: OK "401": content: {} description: Unauthorized tags: - - discovery_v1 + - coordination_v1beta1 x-kubernetes-action: list x-kubernetes-group-version-kind: - group: discovery.k8s.io - kind: EndpointSlice - version: v1 + group: coordination.k8s.io + kind: LeaseCandidate + version: v1beta1 x-accepts: application/json - /apis/discovery.k8s.io/v1/namespaces/{namespace}/endpointslices: + /apis/coordination.k8s.io/v1beta1/namespaces/{namespace}/leasecandidates: delete: - description: delete collection of EndpointSlice - operationId: deleteCollectionNamespacedEndpointSlice + description: delete collection of LeaseCandidate + operationId: deleteCollectionNamespacedLeaseCandidate parameters: - description: object name and auth scope, such as for teams and projects in: path @@ -47165,18 +47134,18 @@ paths: content: {} description: Unauthorized tags: - - discovery_v1 + - coordination_v1beta1 x-kubernetes-action: deletecollection x-kubernetes-group-version-kind: - group: discovery.k8s.io - kind: EndpointSlice - version: v1 + group: coordination.k8s.io + kind: LeaseCandidate + version: v1beta1 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json get: - description: list or watch objects of kind EndpointSlice - operationId: listNamespacedEndpointSlice + description: list or watch objects of kind LeaseCandidate + operationId: listNamespacedLeaseCandidate parameters: - description: object name and auth scope, such as for teams and projects in: path @@ -47280,40 +47249,40 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1.EndpointSliceList' + $ref: '#/components/schemas/v1beta1.LeaseCandidateList' application/yaml: schema: - $ref: '#/components/schemas/v1.EndpointSliceList' + $ref: '#/components/schemas/v1beta1.LeaseCandidateList' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1.EndpointSliceList' + $ref: '#/components/schemas/v1beta1.LeaseCandidateList' application/cbor: schema: - $ref: '#/components/schemas/v1.EndpointSliceList' + $ref: '#/components/schemas/v1beta1.LeaseCandidateList' application/json;stream=watch: schema: - $ref: '#/components/schemas/v1.EndpointSliceList' + $ref: '#/components/schemas/v1beta1.LeaseCandidateList' application/vnd.kubernetes.protobuf;stream=watch: schema: - $ref: '#/components/schemas/v1.EndpointSliceList' + $ref: '#/components/schemas/v1beta1.LeaseCandidateList' application/cbor-seq: schema: - $ref: '#/components/schemas/v1.EndpointSliceList' + $ref: '#/components/schemas/v1beta1.LeaseCandidateList' description: OK "401": content: {} description: Unauthorized tags: - - discovery_v1 + - coordination_v1beta1 x-kubernetes-action: list x-kubernetes-group-version-kind: - group: discovery.k8s.io - kind: EndpointSlice - version: v1 + group: coordination.k8s.io + kind: LeaseCandidate + version: v1beta1 x-accepts: application/json post: - description: create an EndpointSlice - operationId: createNamespacedEndpointSlice + description: create a LeaseCandidate + operationId: createNamespacedLeaseCandidate parameters: - description: object name and auth scope, such as for teams and projects in: path @@ -47364,73 +47333,73 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1.EndpointSlice' + $ref: '#/components/schemas/v1beta1.LeaseCandidate' required: true responses: "200": content: application/json: schema: - $ref: '#/components/schemas/v1.EndpointSlice' + $ref: '#/components/schemas/v1beta1.LeaseCandidate' application/yaml: schema: - $ref: '#/components/schemas/v1.EndpointSlice' + $ref: '#/components/schemas/v1beta1.LeaseCandidate' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1.EndpointSlice' + $ref: '#/components/schemas/v1beta1.LeaseCandidate' application/cbor: schema: - $ref: '#/components/schemas/v1.EndpointSlice' + $ref: '#/components/schemas/v1beta1.LeaseCandidate' description: OK "201": content: application/json: schema: - $ref: '#/components/schemas/v1.EndpointSlice' + $ref: '#/components/schemas/v1beta1.LeaseCandidate' application/yaml: schema: - $ref: '#/components/schemas/v1.EndpointSlice' + $ref: '#/components/schemas/v1beta1.LeaseCandidate' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1.EndpointSlice' + $ref: '#/components/schemas/v1beta1.LeaseCandidate' application/cbor: schema: - $ref: '#/components/schemas/v1.EndpointSlice' + $ref: '#/components/schemas/v1beta1.LeaseCandidate' description: Created "202": content: application/json: schema: - $ref: '#/components/schemas/v1.EndpointSlice' + $ref: '#/components/schemas/v1beta1.LeaseCandidate' application/yaml: schema: - $ref: '#/components/schemas/v1.EndpointSlice' + $ref: '#/components/schemas/v1beta1.LeaseCandidate' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1.EndpointSlice' + $ref: '#/components/schemas/v1beta1.LeaseCandidate' application/cbor: schema: - $ref: '#/components/schemas/v1.EndpointSlice' + $ref: '#/components/schemas/v1beta1.LeaseCandidate' description: Accepted "401": content: {} description: Unauthorized tags: - - discovery_v1 + - coordination_v1beta1 x-kubernetes-action: post x-kubernetes-group-version-kind: - group: discovery.k8s.io - kind: EndpointSlice - version: v1 + group: coordination.k8s.io + kind: LeaseCandidate + version: v1beta1 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json - /apis/discovery.k8s.io/v1/namespaces/{namespace}/endpointslices/{name}: + /apis/coordination.k8s.io/v1beta1/namespaces/{namespace}/leasecandidates/{name}: delete: - description: delete an EndpointSlice - operationId: deleteNamespacedEndpointSlice + description: delete a LeaseCandidate + operationId: deleteNamespacedLeaseCandidate parameters: - - description: name of the EndpointSlice + - description: name of the LeaseCandidate in: path name: name required: true @@ -47540,20 +47509,20 @@ paths: content: {} description: Unauthorized tags: - - discovery_v1 + - coordination_v1beta1 x-kubernetes-action: delete x-kubernetes-group-version-kind: - group: discovery.k8s.io - kind: EndpointSlice - version: v1 + group: coordination.k8s.io + kind: LeaseCandidate + version: v1beta1 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json get: - description: read the specified EndpointSlice - operationId: readNamespacedEndpointSlice + description: read the specified LeaseCandidate + operationId: readNamespacedLeaseCandidate parameters: - - description: name of the EndpointSlice + - description: name of the LeaseCandidate in: path name: name required: true @@ -47577,33 +47546,33 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1.EndpointSlice' + $ref: '#/components/schemas/v1beta1.LeaseCandidate' application/yaml: schema: - $ref: '#/components/schemas/v1.EndpointSlice' + $ref: '#/components/schemas/v1beta1.LeaseCandidate' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1.EndpointSlice' + $ref: '#/components/schemas/v1beta1.LeaseCandidate' application/cbor: schema: - $ref: '#/components/schemas/v1.EndpointSlice' + $ref: '#/components/schemas/v1beta1.LeaseCandidate' description: OK "401": content: {} description: Unauthorized tags: - - discovery_v1 + - coordination_v1beta1 x-kubernetes-action: get x-kubernetes-group-version-kind: - group: discovery.k8s.io - kind: EndpointSlice - version: v1 + group: coordination.k8s.io + kind: LeaseCandidate + version: v1beta1 x-accepts: application/json patch: - description: partially update the specified EndpointSlice - operationId: patchNamespacedEndpointSlice + description: partially update the specified LeaseCandidate + operationId: patchNamespacedLeaseCandidate parameters: - - description: name of the EndpointSlice + - description: name of the LeaseCandidate in: path name: name required: true @@ -47674,50 +47643,50 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1.EndpointSlice' + $ref: '#/components/schemas/v1beta1.LeaseCandidate' application/yaml: schema: - $ref: '#/components/schemas/v1.EndpointSlice' + $ref: '#/components/schemas/v1beta1.LeaseCandidate' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1.EndpointSlice' + $ref: '#/components/schemas/v1beta1.LeaseCandidate' application/cbor: schema: - $ref: '#/components/schemas/v1.EndpointSlice' + $ref: '#/components/schemas/v1beta1.LeaseCandidate' description: OK "201": content: application/json: schema: - $ref: '#/components/schemas/v1.EndpointSlice' + $ref: '#/components/schemas/v1beta1.LeaseCandidate' application/yaml: schema: - $ref: '#/components/schemas/v1.EndpointSlice' + $ref: '#/components/schemas/v1beta1.LeaseCandidate' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1.EndpointSlice' + $ref: '#/components/schemas/v1beta1.LeaseCandidate' application/cbor: schema: - $ref: '#/components/schemas/v1.EndpointSlice' + $ref: '#/components/schemas/v1beta1.LeaseCandidate' description: Created "401": content: {} description: Unauthorized tags: - - discovery_v1 + - coordination_v1beta1 x-kubernetes-action: patch x-kubernetes-group-version-kind: - group: discovery.k8s.io - kind: EndpointSlice - version: v1 + group: coordination.k8s.io + kind: LeaseCandidate + version: v1beta1 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json put: - description: replace the specified EndpointSlice - operationId: replaceNamespacedEndpointSlice + description: replace the specified LeaseCandidate + operationId: replaceNamespacedLeaseCandidate parameters: - - description: name of the EndpointSlice + - description: name of the LeaseCandidate in: path name: name required: true @@ -47772,56 +47741,56 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1.EndpointSlice' + $ref: '#/components/schemas/v1beta1.LeaseCandidate' required: true responses: "200": content: application/json: schema: - $ref: '#/components/schemas/v1.EndpointSlice' + $ref: '#/components/schemas/v1beta1.LeaseCandidate' application/yaml: schema: - $ref: '#/components/schemas/v1.EndpointSlice' + $ref: '#/components/schemas/v1beta1.LeaseCandidate' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1.EndpointSlice' + $ref: '#/components/schemas/v1beta1.LeaseCandidate' application/cbor: schema: - $ref: '#/components/schemas/v1.EndpointSlice' + $ref: '#/components/schemas/v1beta1.LeaseCandidate' description: OK "201": content: application/json: schema: - $ref: '#/components/schemas/v1.EndpointSlice' + $ref: '#/components/schemas/v1beta1.LeaseCandidate' application/yaml: schema: - $ref: '#/components/schemas/v1.EndpointSlice' + $ref: '#/components/schemas/v1beta1.LeaseCandidate' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1.EndpointSlice' + $ref: '#/components/schemas/v1beta1.LeaseCandidate' application/cbor: schema: - $ref: '#/components/schemas/v1.EndpointSlice' + $ref: '#/components/schemas/v1beta1.LeaseCandidate' description: Created "401": content: {} description: Unauthorized tags: - - discovery_v1 + - coordination_v1beta1 x-kubernetes-action: put x-kubernetes-group-version-kind: - group: discovery.k8s.io - kind: EndpointSlice - version: v1 + group: coordination.k8s.io + kind: LeaseCandidate + version: v1beta1 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json - /apis/discovery.k8s.io/v1/watch/endpointslices: {} - /apis/discovery.k8s.io/v1/watch/namespaces/{namespace}/endpointslices: {} - /apis/discovery.k8s.io/v1/watch/namespaces/{namespace}/endpointslices/{name}: {} - /apis/events.k8s.io/: + /apis/coordination.k8s.io/v1beta1/watch/leasecandidates: {} + /apis/coordination.k8s.io/v1beta1/watch/namespaces/{namespace}/leasecandidates: {} + /apis/coordination.k8s.io/v1beta1/watch/namespaces/{namespace}/leasecandidates/{name}: {} + /apis/discovery.k8s.io/: get: description: get information of a group operationId: getAPIGroup @@ -47842,9 +47811,9 @@ paths: content: {} description: Unauthorized tags: - - events + - discovery x-accepts: application/json - /apis/events.k8s.io/v1/: + /apis/discovery.k8s.io/v1/: get: description: get available resources operationId: getAPIResources @@ -47868,12 +47837,12 @@ paths: content: {} description: Unauthorized tags: - - events_v1 + - discovery_v1 x-accepts: application/json - /apis/events.k8s.io/v1/events: + /apis/discovery.k8s.io/v1/endpointslices: get: - description: list or watch objects of kind Event - operationId: listEventForAllNamespaces + description: list or watch objects of kind EndpointSlice + operationId: listEndpointSliceForAllNamespaces parameters: - description: allowWatchBookmarks requests watch events with type "BOOKMARK". Servers that do not implement bookmarks may ignore this flag and bookmarks @@ -47971,41 +47940,41 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/events.v1.EventList' + $ref: '#/components/schemas/v1.EndpointSliceList' application/yaml: schema: - $ref: '#/components/schemas/events.v1.EventList' + $ref: '#/components/schemas/v1.EndpointSliceList' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/events.v1.EventList' + $ref: '#/components/schemas/v1.EndpointSliceList' application/cbor: schema: - $ref: '#/components/schemas/events.v1.EventList' + $ref: '#/components/schemas/v1.EndpointSliceList' application/json;stream=watch: schema: - $ref: '#/components/schemas/events.v1.EventList' + $ref: '#/components/schemas/v1.EndpointSliceList' application/vnd.kubernetes.protobuf;stream=watch: schema: - $ref: '#/components/schemas/events.v1.EventList' + $ref: '#/components/schemas/v1.EndpointSliceList' application/cbor-seq: schema: - $ref: '#/components/schemas/events.v1.EventList' + $ref: '#/components/schemas/v1.EndpointSliceList' description: OK "401": content: {} description: Unauthorized tags: - - events_v1 + - discovery_v1 x-kubernetes-action: list x-kubernetes-group-version-kind: - group: events.k8s.io - kind: Event + group: discovery.k8s.io + kind: EndpointSlice version: v1 x-accepts: application/json - /apis/events.k8s.io/v1/namespaces/{namespace}/events: + /apis/discovery.k8s.io/v1/namespaces/{namespace}/endpointslices: delete: - description: delete collection of Event - operationId: deleteCollectionNamespacedEvent + description: delete collection of EndpointSlice + operationId: deleteCollectionNamespacedEndpointSlice parameters: - description: object name and auth scope, such as for teams and projects in: path @@ -48164,18 +48133,18 @@ paths: content: {} description: Unauthorized tags: - - events_v1 + - discovery_v1 x-kubernetes-action: deletecollection x-kubernetes-group-version-kind: - group: events.k8s.io - kind: Event + group: discovery.k8s.io + kind: EndpointSlice version: v1 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json get: - description: list or watch objects of kind Event - operationId: listNamespacedEvent + description: list or watch objects of kind EndpointSlice + operationId: listNamespacedEndpointSlice parameters: - description: object name and auth scope, such as for teams and projects in: path @@ -48279,40 +48248,40 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/events.v1.EventList' + $ref: '#/components/schemas/v1.EndpointSliceList' application/yaml: schema: - $ref: '#/components/schemas/events.v1.EventList' + $ref: '#/components/schemas/v1.EndpointSliceList' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/events.v1.EventList' + $ref: '#/components/schemas/v1.EndpointSliceList' application/cbor: schema: - $ref: '#/components/schemas/events.v1.EventList' + $ref: '#/components/schemas/v1.EndpointSliceList' application/json;stream=watch: schema: - $ref: '#/components/schemas/events.v1.EventList' + $ref: '#/components/schemas/v1.EndpointSliceList' application/vnd.kubernetes.protobuf;stream=watch: schema: - $ref: '#/components/schemas/events.v1.EventList' + $ref: '#/components/schemas/v1.EndpointSliceList' application/cbor-seq: schema: - $ref: '#/components/schemas/events.v1.EventList' + $ref: '#/components/schemas/v1.EndpointSliceList' description: OK "401": content: {} description: Unauthorized tags: - - events_v1 + - discovery_v1 x-kubernetes-action: list x-kubernetes-group-version-kind: - group: events.k8s.io - kind: Event + group: discovery.k8s.io + kind: EndpointSlice version: v1 x-accepts: application/json post: - description: create an Event - operationId: createNamespacedEvent + description: create an EndpointSlice + operationId: createNamespacedEndpointSlice parameters: - description: object name and auth scope, such as for teams and projects in: path @@ -48363,73 +48332,73 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/events.v1.Event' + $ref: '#/components/schemas/v1.EndpointSlice' required: true responses: "200": content: application/json: schema: - $ref: '#/components/schemas/events.v1.Event' + $ref: '#/components/schemas/v1.EndpointSlice' application/yaml: schema: - $ref: '#/components/schemas/events.v1.Event' + $ref: '#/components/schemas/v1.EndpointSlice' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/events.v1.Event' + $ref: '#/components/schemas/v1.EndpointSlice' application/cbor: schema: - $ref: '#/components/schemas/events.v1.Event' + $ref: '#/components/schemas/v1.EndpointSlice' description: OK "201": content: application/json: schema: - $ref: '#/components/schemas/events.v1.Event' + $ref: '#/components/schemas/v1.EndpointSlice' application/yaml: schema: - $ref: '#/components/schemas/events.v1.Event' + $ref: '#/components/schemas/v1.EndpointSlice' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/events.v1.Event' + $ref: '#/components/schemas/v1.EndpointSlice' application/cbor: schema: - $ref: '#/components/schemas/events.v1.Event' + $ref: '#/components/schemas/v1.EndpointSlice' description: Created "202": content: application/json: schema: - $ref: '#/components/schemas/events.v1.Event' + $ref: '#/components/schemas/v1.EndpointSlice' application/yaml: schema: - $ref: '#/components/schemas/events.v1.Event' + $ref: '#/components/schemas/v1.EndpointSlice' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/events.v1.Event' + $ref: '#/components/schemas/v1.EndpointSlice' application/cbor: schema: - $ref: '#/components/schemas/events.v1.Event' + $ref: '#/components/schemas/v1.EndpointSlice' description: Accepted "401": content: {} description: Unauthorized tags: - - events_v1 + - discovery_v1 x-kubernetes-action: post x-kubernetes-group-version-kind: - group: events.k8s.io - kind: Event + group: discovery.k8s.io + kind: EndpointSlice version: v1 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json - /apis/events.k8s.io/v1/namespaces/{namespace}/events/{name}: + /apis/discovery.k8s.io/v1/namespaces/{namespace}/endpointslices/{name}: delete: - description: delete an Event - operationId: deleteNamespacedEvent + description: delete an EndpointSlice + operationId: deleteNamespacedEndpointSlice parameters: - - description: name of the Event + - description: name of the EndpointSlice in: path name: name required: true @@ -48539,20 +48508,20 @@ paths: content: {} description: Unauthorized tags: - - events_v1 + - discovery_v1 x-kubernetes-action: delete x-kubernetes-group-version-kind: - group: events.k8s.io - kind: Event + group: discovery.k8s.io + kind: EndpointSlice version: v1 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json get: - description: read the specified Event - operationId: readNamespacedEvent + description: read the specified EndpointSlice + operationId: readNamespacedEndpointSlice parameters: - - description: name of the Event + - description: name of the EndpointSlice in: path name: name required: true @@ -48576,33 +48545,33 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/events.v1.Event' + $ref: '#/components/schemas/v1.EndpointSlice' application/yaml: schema: - $ref: '#/components/schemas/events.v1.Event' + $ref: '#/components/schemas/v1.EndpointSlice' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/events.v1.Event' + $ref: '#/components/schemas/v1.EndpointSlice' application/cbor: schema: - $ref: '#/components/schemas/events.v1.Event' + $ref: '#/components/schemas/v1.EndpointSlice' description: OK "401": content: {} description: Unauthorized tags: - - events_v1 + - discovery_v1 x-kubernetes-action: get x-kubernetes-group-version-kind: - group: events.k8s.io - kind: Event + group: discovery.k8s.io + kind: EndpointSlice version: v1 x-accepts: application/json patch: - description: partially update the specified Event - operationId: patchNamespacedEvent + description: partially update the specified EndpointSlice + operationId: patchNamespacedEndpointSlice parameters: - - description: name of the Event + - description: name of the EndpointSlice in: path name: name required: true @@ -48673,50 +48642,50 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/events.v1.Event' + $ref: '#/components/schemas/v1.EndpointSlice' application/yaml: schema: - $ref: '#/components/schemas/events.v1.Event' + $ref: '#/components/schemas/v1.EndpointSlice' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/events.v1.Event' + $ref: '#/components/schemas/v1.EndpointSlice' application/cbor: schema: - $ref: '#/components/schemas/events.v1.Event' + $ref: '#/components/schemas/v1.EndpointSlice' description: OK "201": content: application/json: schema: - $ref: '#/components/schemas/events.v1.Event' + $ref: '#/components/schemas/v1.EndpointSlice' application/yaml: schema: - $ref: '#/components/schemas/events.v1.Event' + $ref: '#/components/schemas/v1.EndpointSlice' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/events.v1.Event' + $ref: '#/components/schemas/v1.EndpointSlice' application/cbor: schema: - $ref: '#/components/schemas/events.v1.Event' + $ref: '#/components/schemas/v1.EndpointSlice' description: Created "401": content: {} description: Unauthorized tags: - - events_v1 + - discovery_v1 x-kubernetes-action: patch x-kubernetes-group-version-kind: - group: events.k8s.io - kind: Event + group: discovery.k8s.io + kind: EndpointSlice version: v1 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json put: - description: replace the specified Event - operationId: replaceNamespacedEvent + description: replace the specified EndpointSlice + operationId: replaceNamespacedEndpointSlice parameters: - - description: name of the Event + - description: name of the EndpointSlice in: path name: name required: true @@ -48771,56 +48740,56 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/events.v1.Event' + $ref: '#/components/schemas/v1.EndpointSlice' required: true responses: "200": content: application/json: schema: - $ref: '#/components/schemas/events.v1.Event' + $ref: '#/components/schemas/v1.EndpointSlice' application/yaml: schema: - $ref: '#/components/schemas/events.v1.Event' + $ref: '#/components/schemas/v1.EndpointSlice' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/events.v1.Event' + $ref: '#/components/schemas/v1.EndpointSlice' application/cbor: schema: - $ref: '#/components/schemas/events.v1.Event' + $ref: '#/components/schemas/v1.EndpointSlice' description: OK "201": content: application/json: schema: - $ref: '#/components/schemas/events.v1.Event' + $ref: '#/components/schemas/v1.EndpointSlice' application/yaml: schema: - $ref: '#/components/schemas/events.v1.Event' + $ref: '#/components/schemas/v1.EndpointSlice' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/events.v1.Event' + $ref: '#/components/schemas/v1.EndpointSlice' application/cbor: schema: - $ref: '#/components/schemas/events.v1.Event' + $ref: '#/components/schemas/v1.EndpointSlice' description: Created "401": content: {} description: Unauthorized tags: - - events_v1 + - discovery_v1 x-kubernetes-action: put x-kubernetes-group-version-kind: - group: events.k8s.io - kind: Event + group: discovery.k8s.io + kind: EndpointSlice version: v1 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json - /apis/events.k8s.io/v1/watch/events: {} - /apis/events.k8s.io/v1/watch/namespaces/{namespace}/events: {} - /apis/events.k8s.io/v1/watch/namespaces/{namespace}/events/{name}: {} - /apis/flowcontrol.apiserver.k8s.io/: + /apis/discovery.k8s.io/v1/watch/endpointslices: {} + /apis/discovery.k8s.io/v1/watch/namespaces/{namespace}/endpointslices: {} + /apis/discovery.k8s.io/v1/watch/namespaces/{namespace}/endpointslices/{name}: {} + /apis/events.k8s.io/: get: description: get information of a group operationId: getAPIGroup @@ -48841,9 +48810,9 @@ paths: content: {} description: Unauthorized tags: - - flowcontrolApiserver + - events x-accepts: application/json - /apis/flowcontrol.apiserver.k8s.io/v1/: + /apis/events.k8s.io/v1/: get: description: get available resources operationId: getAPIResources @@ -48867,20 +48836,23 @@ paths: content: {} description: Unauthorized tags: - - flowcontrolApiserver_v1 + - events_v1 x-accepts: application/json - /apis/flowcontrol.apiserver.k8s.io/v1/flowschemas: - delete: - description: delete collection of FlowSchema - operationId: deleteCollectionFlowSchema + /apis/events.k8s.io/v1/events: + get: + description: list or watch objects of kind Event + operationId: listEventForAllNamespaces parameters: - - description: If 'true', then the output is pretty printed. Defaults to 'false' - unless the user-agent indicates a browser or command-line HTTP tool (curl - and wget). + - description: allowWatchBookmarks requests watch events with type "BOOKMARK". + Servers that do not implement bookmarks may ignore this flag and bookmarks + are sent at the server's discretion. Clients should not assume bookmarks + are returned at any specific interval, nor may they assume the server will + send any BOOKMARK event during a session. If this is not a watch, this field + is ignored. in: query - name: pretty + name: allowWatchBookmarks schema: - type: string + type: boolean - description: |- The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". @@ -48889,43 +48861,12 @@ paths: name: continue schema: type: string - - description: 'When present, indicates that modifications should not be persisted. - An invalid or unrecognized dryRun directive will result in an error response - and no further processing of the request. Valid values are: - All: all dry - run stages will be processed' - in: query - name: dryRun - schema: - type: string - description: A selector to restrict the list of returned objects by their fields. Defaults to everything. in: query name: fieldSelector schema: type: string - - description: The duration in seconds before the object should be deleted. - Value must be non-negative integer. The value zero indicates delete immediately. - If this value is nil, the default grace period for the specified type will - be used. Defaults to a per object value if not specified. zero means delete - immediately. - in: query - name: gracePeriodSeconds - schema: - type: integer - - description: 'if set to true, it will trigger an unsafe deletion of the resource - in case the normal deletion flow fails with a corrupt object error. A resource - is considered corrupt if it can not be retrieved from the underlying storage - successfully because of a) its data can not be transformed e.g. decryption - failure, or b) it fails to decode into an object. NOTE: unsafe deletion - ignores finalizer constraints, skips precondition checks, and removes the - object from the storage. WARNING: This may potentially break the cluster - if the workload associated with the resource being unsafe-deleted relies - on normal deletion flow. Use only if you REALLY know what you are doing. - The default value is false, and the user must opt in to enable it' - in: query - name: ignoreStoreReadErrorWithClusterBreakingPotential - schema: - type: boolean - description: A selector to restrict the list of returned objects by their labels. Defaults to everything. in: query @@ -48940,23 +48881,189 @@ paths: name: limit schema: type: integer - - description: 'Deprecated: please use the PropagationPolicy, this field will - be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, - the "orphan" finalizer will be added to/removed from the object''s finalizers - list. Either this field or PropagationPolicy may be set, but not both.' - in: query - name: orphanDependents - schema: - type: boolean - - description: 'Whether and how garbage collection will be performed. Either - this field or OrphanDependents may be set, but not both. The default policy - is decided by the existing finalizer set in the metadata.finalizers and - the resource-specific default policy. Acceptable values are: ''Orphan'' - - orphan the dependents; ''Background'' - allow the garbage collector to - delete the dependents in the background; ''Foreground'' - a cascading policy - that deletes all dependents in the foreground.' + - description: If 'true', then the output is pretty printed. Defaults to 'false' + unless the user-agent indicates a browser or command-line HTTP tool (curl + and wget). in: query - name: propagationPolicy + name: pretty + schema: + type: string + - description: |- + resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + + Defaults to unset + in: query + name: resourceVersion + schema: + type: string + - description: |- + resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + + Defaults to unset + in: query + name: resourceVersionMatch + schema: + type: string + - description: |- + `sendInitialEvents=true` may be set together with `watch=true`. In that case, the watch stream will begin with synthetic events to produce the current state of objects in the collection. Once all such events have been sent, a synthetic "Bookmark" event will be sent. The bookmark will report the ResourceVersion (RV) corresponding to the set of objects, and be marked with `"k8s.io/initial-events-end": "true"` annotation. Afterwards, the watch stream will proceed as usual, sending watch events corresponding to changes (subsequent to the RV) to objects watched. + + When `sendInitialEvents` option is set, we require `resourceVersionMatch` option to also be set. The semantic of the watch request is as following: - `resourceVersionMatch` = NotOlderThan + is interpreted as "data at least as new as the provided `resourceVersion`" + and the bookmark event is send when the state is synced + to a `resourceVersion` at least as fresh as the one provided by the ListOptions. + If `resourceVersion` is unset, this is interpreted as "consistent read" and the + bookmark event is send when the state is synced at least to the moment + when request started being processed. + - `resourceVersionMatch` set to any other value or unset + Invalid error is returned. + + Defaults to true if `resourceVersion=""` or `resourceVersion="0"` (for backward compatibility reasons) and to false otherwise. + in: query + name: sendInitialEvents + schema: + type: boolean + - description: Timeout for the list/watch call. This limits the duration of + the call, regardless of any activity or inactivity. + in: query + name: timeoutSeconds + schema: + type: integer + - description: Watch for changes to the described resources and return them + as a stream of add, update, and remove notifications. Specify resourceVersion. + in: query + name: watch + schema: + type: boolean + responses: + "200": + content: + application/json: + schema: + $ref: '#/components/schemas/events.v1.EventList' + application/yaml: + schema: + $ref: '#/components/schemas/events.v1.EventList' + application/vnd.kubernetes.protobuf: + schema: + $ref: '#/components/schemas/events.v1.EventList' + application/cbor: + schema: + $ref: '#/components/schemas/events.v1.EventList' + application/json;stream=watch: + schema: + $ref: '#/components/schemas/events.v1.EventList' + application/vnd.kubernetes.protobuf;stream=watch: + schema: + $ref: '#/components/schemas/events.v1.EventList' + application/cbor-seq: + schema: + $ref: '#/components/schemas/events.v1.EventList' + description: OK + "401": + content: {} + description: Unauthorized + tags: + - events_v1 + x-kubernetes-action: list + x-kubernetes-group-version-kind: + group: events.k8s.io + kind: Event + version: v1 + x-accepts: application/json + /apis/events.k8s.io/v1/namespaces/{namespace}/events: + delete: + description: delete collection of Event + operationId: deleteCollectionNamespacedEvent + parameters: + - description: object name and auth scope, such as for teams and projects + in: path + name: namespace + required: true + schema: + type: string + - description: If 'true', then the output is pretty printed. Defaults to 'false' + unless the user-agent indicates a browser or command-line HTTP tool (curl + and wget). + in: query + name: pretty + schema: + type: string + - description: |- + The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + + This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications. + in: query + name: continue + schema: + type: string + - description: 'When present, indicates that modifications should not be persisted. + An invalid or unrecognized dryRun directive will result in an error response + and no further processing of the request. Valid values are: - All: all dry + run stages will be processed' + in: query + name: dryRun + schema: + type: string + - description: A selector to restrict the list of returned objects by their + fields. Defaults to everything. + in: query + name: fieldSelector + schema: + type: string + - description: The duration in seconds before the object should be deleted. + Value must be non-negative integer. The value zero indicates delete immediately. + If this value is nil, the default grace period for the specified type will + be used. Defaults to a per object value if not specified. zero means delete + immediately. + in: query + name: gracePeriodSeconds + schema: + type: integer + - description: 'if set to true, it will trigger an unsafe deletion of the resource + in case the normal deletion flow fails with a corrupt object error. A resource + is considered corrupt if it can not be retrieved from the underlying storage + successfully because of a) its data can not be transformed e.g. decryption + failure, or b) it fails to decode into an object. NOTE: unsafe deletion + ignores finalizer constraints, skips precondition checks, and removes the + object from the storage. WARNING: This may potentially break the cluster + if the workload associated with the resource being unsafe-deleted relies + on normal deletion flow. Use only if you REALLY know what you are doing. + The default value is false, and the user must opt in to enable it' + in: query + name: ignoreStoreReadErrorWithClusterBreakingPotential + schema: + type: boolean + - description: A selector to restrict the list of returned objects by their + labels. Defaults to everything. + in: query + name: labelSelector + schema: + type: string + - description: |- + limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + + The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned. + in: query + name: limit + schema: + type: integer + - description: 'Deprecated: please use the PropagationPolicy, this field will + be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, + the "orphan" finalizer will be added to/removed from the object''s finalizers + list. Either this field or PropagationPolicy may be set, but not both.' + in: query + name: orphanDependents + schema: + type: boolean + - description: 'Whether and how garbage collection will be performed. Either + this field or OrphanDependents may be set, but not both. The default policy + is decided by the existing finalizer set in the metadata.finalizers and + the resource-specific default policy. Acceptable values are: ''Orphan'' + - orphan the dependents; ''Background'' - allow the garbage collector to + delete the dependents in the background; ''Foreground'' - a cascading policy + that deletes all dependents in the foreground.' + in: query + name: propagationPolicy schema: type: string - description: |- @@ -49025,19 +49132,25 @@ paths: content: {} description: Unauthorized tags: - - flowcontrolApiserver_v1 + - events_v1 x-kubernetes-action: deletecollection x-kubernetes-group-version-kind: - group: flowcontrol.apiserver.k8s.io - kind: FlowSchema + group: events.k8s.io + kind: Event version: v1 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json get: - description: list or watch objects of kind FlowSchema - operationId: listFlowSchema + description: list or watch objects of kind Event + operationId: listNamespacedEvent parameters: + - description: object name and auth scope, such as for teams and projects + in: path + name: namespace + required: true + schema: + type: string - description: If 'true', then the output is pretty printed. Defaults to 'false' unless the user-agent indicates a browser or command-line HTTP tool (curl and wget). @@ -49134,41 +49247,47 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1.FlowSchemaList' + $ref: '#/components/schemas/events.v1.EventList' application/yaml: schema: - $ref: '#/components/schemas/v1.FlowSchemaList' + $ref: '#/components/schemas/events.v1.EventList' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1.FlowSchemaList' + $ref: '#/components/schemas/events.v1.EventList' application/cbor: schema: - $ref: '#/components/schemas/v1.FlowSchemaList' + $ref: '#/components/schemas/events.v1.EventList' application/json;stream=watch: schema: - $ref: '#/components/schemas/v1.FlowSchemaList' + $ref: '#/components/schemas/events.v1.EventList' application/vnd.kubernetes.protobuf;stream=watch: schema: - $ref: '#/components/schemas/v1.FlowSchemaList' + $ref: '#/components/schemas/events.v1.EventList' application/cbor-seq: schema: - $ref: '#/components/schemas/v1.FlowSchemaList' + $ref: '#/components/schemas/events.v1.EventList' description: OK "401": content: {} description: Unauthorized tags: - - flowcontrolApiserver_v1 + - events_v1 x-kubernetes-action: list x-kubernetes-group-version-kind: - group: flowcontrol.apiserver.k8s.io - kind: FlowSchema + group: events.k8s.io + kind: Event version: v1 x-accepts: application/json post: - description: create a FlowSchema - operationId: createFlowSchema + description: create an Event + operationId: createNamespacedEvent parameters: + - description: object name and auth scope, such as for teams and projects + in: path + name: namespace + required: true + schema: + type: string - description: If 'true', then the output is pretty printed. Defaults to 'false' unless the user-agent indicates a browser or command-line HTTP tool (curl and wget). @@ -49212,78 +49331,84 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1.FlowSchema' + $ref: '#/components/schemas/events.v1.Event' required: true responses: "200": content: application/json: schema: - $ref: '#/components/schemas/v1.FlowSchema' + $ref: '#/components/schemas/events.v1.Event' application/yaml: schema: - $ref: '#/components/schemas/v1.FlowSchema' + $ref: '#/components/schemas/events.v1.Event' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1.FlowSchema' + $ref: '#/components/schemas/events.v1.Event' application/cbor: schema: - $ref: '#/components/schemas/v1.FlowSchema' + $ref: '#/components/schemas/events.v1.Event' description: OK "201": content: application/json: schema: - $ref: '#/components/schemas/v1.FlowSchema' + $ref: '#/components/schemas/events.v1.Event' application/yaml: schema: - $ref: '#/components/schemas/v1.FlowSchema' + $ref: '#/components/schemas/events.v1.Event' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1.FlowSchema' + $ref: '#/components/schemas/events.v1.Event' application/cbor: schema: - $ref: '#/components/schemas/v1.FlowSchema' + $ref: '#/components/schemas/events.v1.Event' description: Created "202": content: application/json: schema: - $ref: '#/components/schemas/v1.FlowSchema' + $ref: '#/components/schemas/events.v1.Event' application/yaml: schema: - $ref: '#/components/schemas/v1.FlowSchema' + $ref: '#/components/schemas/events.v1.Event' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1.FlowSchema' + $ref: '#/components/schemas/events.v1.Event' application/cbor: schema: - $ref: '#/components/schemas/v1.FlowSchema' + $ref: '#/components/schemas/events.v1.Event' description: Accepted "401": content: {} description: Unauthorized tags: - - flowcontrolApiserver_v1 + - events_v1 x-kubernetes-action: post x-kubernetes-group-version-kind: - group: flowcontrol.apiserver.k8s.io - kind: FlowSchema + group: events.k8s.io + kind: Event version: v1 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json - /apis/flowcontrol.apiserver.k8s.io/v1/flowschemas/{name}: + /apis/events.k8s.io/v1/namespaces/{namespace}/events/{name}: delete: - description: delete a FlowSchema - operationId: deleteFlowSchema + description: delete an Event + operationId: deleteNamespacedEvent parameters: - - description: name of the FlowSchema + - description: name of the Event in: path name: name required: true schema: type: string + - description: object name and auth scope, such as for teams and projects + in: path + name: namespace + required: true + schema: + type: string - description: If 'true', then the output is pretty printed. Defaults to 'false' unless the user-agent indicates a browser or command-line HTTP tool (curl and wget). @@ -49382,25 +49507,31 @@ paths: content: {} description: Unauthorized tags: - - flowcontrolApiserver_v1 + - events_v1 x-kubernetes-action: delete x-kubernetes-group-version-kind: - group: flowcontrol.apiserver.k8s.io - kind: FlowSchema + group: events.k8s.io + kind: Event version: v1 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json get: - description: read the specified FlowSchema - operationId: readFlowSchema + description: read the specified Event + operationId: readNamespacedEvent parameters: - - description: name of the FlowSchema + - description: name of the Event in: path name: name required: true schema: type: string + - description: object name and auth scope, such as for teams and projects + in: path + name: namespace + required: true + schema: + type: string - description: If 'true', then the output is pretty printed. Defaults to 'false' unless the user-agent indicates a browser or command-line HTTP tool (curl and wget). @@ -49413,38 +49544,44 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1.FlowSchema' + $ref: '#/components/schemas/events.v1.Event' application/yaml: schema: - $ref: '#/components/schemas/v1.FlowSchema' + $ref: '#/components/schemas/events.v1.Event' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1.FlowSchema' + $ref: '#/components/schemas/events.v1.Event' application/cbor: schema: - $ref: '#/components/schemas/v1.FlowSchema' + $ref: '#/components/schemas/events.v1.Event' description: OK "401": content: {} description: Unauthorized tags: - - flowcontrolApiserver_v1 + - events_v1 x-kubernetes-action: get x-kubernetes-group-version-kind: - group: flowcontrol.apiserver.k8s.io - kind: FlowSchema + group: events.k8s.io + kind: Event version: v1 x-accepts: application/json patch: - description: partially update the specified FlowSchema - operationId: patchFlowSchema + description: partially update the specified Event + operationId: patchNamespacedEvent parameters: - - description: name of the FlowSchema + - description: name of the Event in: path name: name required: true schema: type: string + - description: object name and auth scope, such as for teams and projects + in: path + name: namespace + required: true + schema: + type: string - description: If 'true', then the output is pretty printed. Defaults to 'false' unless the user-agent indicates a browser or command-line HTTP tool (curl and wget). @@ -49504,55 +49641,61 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1.FlowSchema' + $ref: '#/components/schemas/events.v1.Event' application/yaml: schema: - $ref: '#/components/schemas/v1.FlowSchema' + $ref: '#/components/schemas/events.v1.Event' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1.FlowSchema' + $ref: '#/components/schemas/events.v1.Event' application/cbor: schema: - $ref: '#/components/schemas/v1.FlowSchema' + $ref: '#/components/schemas/events.v1.Event' description: OK "201": content: application/json: schema: - $ref: '#/components/schemas/v1.FlowSchema' + $ref: '#/components/schemas/events.v1.Event' application/yaml: schema: - $ref: '#/components/schemas/v1.FlowSchema' + $ref: '#/components/schemas/events.v1.Event' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1.FlowSchema' + $ref: '#/components/schemas/events.v1.Event' application/cbor: schema: - $ref: '#/components/schemas/v1.FlowSchema' + $ref: '#/components/schemas/events.v1.Event' description: Created "401": content: {} description: Unauthorized tags: - - flowcontrolApiserver_v1 + - events_v1 x-kubernetes-action: patch x-kubernetes-group-version-kind: - group: flowcontrol.apiserver.k8s.io - kind: FlowSchema + group: events.k8s.io + kind: Event version: v1 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json put: - description: replace the specified FlowSchema - operationId: replaceFlowSchema + description: replace the specified Event + operationId: replaceNamespacedEvent parameters: - - description: name of the FlowSchema + - description: name of the Event in: path name: name required: true schema: type: string + - description: object name and auth scope, such as for teams and projects + in: path + name: namespace + required: true + schema: + type: string - description: If 'true', then the output is pretty printed. Defaults to 'false' unless the user-agent indicates a browser or command-line HTTP tool (curl and wget). @@ -49596,308 +49739,108 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1.FlowSchema' + $ref: '#/components/schemas/events.v1.Event' required: true responses: "200": content: application/json: schema: - $ref: '#/components/schemas/v1.FlowSchema' + $ref: '#/components/schemas/events.v1.Event' application/yaml: schema: - $ref: '#/components/schemas/v1.FlowSchema' + $ref: '#/components/schemas/events.v1.Event' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1.FlowSchema' + $ref: '#/components/schemas/events.v1.Event' application/cbor: schema: - $ref: '#/components/schemas/v1.FlowSchema' + $ref: '#/components/schemas/events.v1.Event' description: OK "201": content: application/json: schema: - $ref: '#/components/schemas/v1.FlowSchema' + $ref: '#/components/schemas/events.v1.Event' application/yaml: schema: - $ref: '#/components/schemas/v1.FlowSchema' + $ref: '#/components/schemas/events.v1.Event' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1.FlowSchema' + $ref: '#/components/schemas/events.v1.Event' application/cbor: schema: - $ref: '#/components/schemas/v1.FlowSchema' + $ref: '#/components/schemas/events.v1.Event' description: Created "401": content: {} description: Unauthorized tags: - - flowcontrolApiserver_v1 + - events_v1 x-kubernetes-action: put x-kubernetes-group-version-kind: - group: flowcontrol.apiserver.k8s.io - kind: FlowSchema + group: events.k8s.io + kind: Event version: v1 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json - /apis/flowcontrol.apiserver.k8s.io/v1/flowschemas/{name}/status: + /apis/events.k8s.io/v1/watch/events: {} + /apis/events.k8s.io/v1/watch/namespaces/{namespace}/events: {} + /apis/events.k8s.io/v1/watch/namespaces/{namespace}/events/{name}: {} + /apis/flowcontrol.apiserver.k8s.io/: get: - description: read status of the specified FlowSchema - operationId: readFlowSchemaStatus - parameters: - - description: name of the FlowSchema - in: path - name: name - required: true - schema: - type: string - - description: If 'true', then the output is pretty printed. Defaults to 'false' - unless the user-agent indicates a browser or command-line HTTP tool (curl - and wget). - in: query - name: pretty - schema: - type: string - responses: - "200": - content: - application/json: - schema: - $ref: '#/components/schemas/v1.FlowSchema' - application/yaml: - schema: - $ref: '#/components/schemas/v1.FlowSchema' - application/vnd.kubernetes.protobuf: - schema: - $ref: '#/components/schemas/v1.FlowSchema' - application/cbor: - schema: - $ref: '#/components/schemas/v1.FlowSchema' - description: OK - "401": - content: {} - description: Unauthorized - tags: - - flowcontrolApiserver_v1 - x-kubernetes-action: get - x-kubernetes-group-version-kind: - group: flowcontrol.apiserver.k8s.io - kind: FlowSchema - version: v1 - x-accepts: application/json - patch: - description: partially update status of the specified FlowSchema - operationId: patchFlowSchemaStatus - parameters: - - description: name of the FlowSchema - in: path - name: name - required: true - schema: - type: string - - description: If 'true', then the output is pretty printed. Defaults to 'false' - unless the user-agent indicates a browser or command-line HTTP tool (curl - and wget). - in: query - name: pretty - schema: - type: string - - description: 'When present, indicates that modifications should not be persisted. - An invalid or unrecognized dryRun directive will result in an error response - and no further processing of the request. Valid values are: - All: all dry - run stages will be processed' - in: query - name: dryRun - schema: - type: string - - description: fieldManager is a name associated with the actor or entity that - is making these changes. The value must be less than or 128 characters long, - and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. - This field is required for apply requests (application/apply-patch) but - optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch). - in: query - name: fieldManager - schema: - type: string - - description: 'fieldValidation instructs the server on how to handle objects - in the request (POST/PUT/PATCH) containing unknown or duplicate fields. - Valid values are: - Ignore: This will ignore any unknown fields that are - silently dropped from the object, and will ignore all but the last duplicate - field that the decoder encounters. This is the default behavior prior to - v1.23. - Warn: This will send a warning via the standard warning response - header for each unknown field that is dropped from the object, and for each - duplicate field that is encountered. The request will still succeed if there - are no other errors, and will only persist the last of any duplicate fields. - This is the default in v1.23+ - Strict: This will fail the request with - a BadRequest error if any unknown fields would be dropped from the object, - or if any duplicate fields are present. The error returned from the server - will contain all unknown and duplicate fields encountered.' - in: query - name: fieldValidation - schema: - type: string - - description: Force is going to "force" Apply requests. It means user will - re-acquire conflicting fields owned by other people. Force flag must be - unset for non-apply patch requests. - in: query - name: force - schema: - type: boolean - requestBody: - content: - application/json: - schema: - $ref: '#/components/schemas/v1.Patch' - required: true + description: get information of a group + operationId: getAPIGroup responses: "200": content: application/json: schema: - $ref: '#/components/schemas/v1.FlowSchema' + $ref: '#/components/schemas/v1.APIGroup' application/yaml: schema: - $ref: '#/components/schemas/v1.FlowSchema' + $ref: '#/components/schemas/v1.APIGroup' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1.FlowSchema' - application/cbor: - schema: - $ref: '#/components/schemas/v1.FlowSchema' + $ref: '#/components/schemas/v1.APIGroup' description: OK - "201": - content: - application/json: - schema: - $ref: '#/components/schemas/v1.FlowSchema' - application/yaml: - schema: - $ref: '#/components/schemas/v1.FlowSchema' - application/vnd.kubernetes.protobuf: - schema: - $ref: '#/components/schemas/v1.FlowSchema' - application/cbor: - schema: - $ref: '#/components/schemas/v1.FlowSchema' - description: Created "401": content: {} description: Unauthorized tags: - - flowcontrolApiserver_v1 - x-kubernetes-action: patch - x-kubernetes-group-version-kind: - group: flowcontrol.apiserver.k8s.io - kind: FlowSchema - version: v1 - x-codegen-request-body-name: body - x-contentType: application/json + - flowcontrolApiserver x-accepts: application/json - put: - description: replace status of the specified FlowSchema - operationId: replaceFlowSchemaStatus - parameters: - - description: name of the FlowSchema - in: path - name: name - required: true - schema: - type: string - - description: If 'true', then the output is pretty printed. Defaults to 'false' - unless the user-agent indicates a browser or command-line HTTP tool (curl - and wget). - in: query - name: pretty - schema: - type: string - - description: 'When present, indicates that modifications should not be persisted. - An invalid or unrecognized dryRun directive will result in an error response - and no further processing of the request. Valid values are: - All: all dry - run stages will be processed' - in: query - name: dryRun - schema: - type: string - - description: fieldManager is a name associated with the actor or entity that - is making these changes. The value must be less than or 128 characters long, - and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. - in: query - name: fieldManager - schema: - type: string - - description: 'fieldValidation instructs the server on how to handle objects - in the request (POST/PUT/PATCH) containing unknown or duplicate fields. - Valid values are: - Ignore: This will ignore any unknown fields that are - silently dropped from the object, and will ignore all but the last duplicate - field that the decoder encounters. This is the default behavior prior to - v1.23. - Warn: This will send a warning via the standard warning response - header for each unknown field that is dropped from the object, and for each - duplicate field that is encountered. The request will still succeed if there - are no other errors, and will only persist the last of any duplicate fields. - This is the default in v1.23+ - Strict: This will fail the request with - a BadRequest error if any unknown fields would be dropped from the object, - or if any duplicate fields are present. The error returned from the server - will contain all unknown and duplicate fields encountered.' - in: query - name: fieldValidation - schema: - type: string - requestBody: - content: - application/json: - schema: - $ref: '#/components/schemas/v1.FlowSchema' - required: true + /apis/flowcontrol.apiserver.k8s.io/v1/: + get: + description: get available resources + operationId: getAPIResources responses: "200": content: application/json: schema: - $ref: '#/components/schemas/v1.FlowSchema' + $ref: '#/components/schemas/v1.APIResourceList' application/yaml: schema: - $ref: '#/components/schemas/v1.FlowSchema' + $ref: '#/components/schemas/v1.APIResourceList' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1.FlowSchema' + $ref: '#/components/schemas/v1.APIResourceList' application/cbor: schema: - $ref: '#/components/schemas/v1.FlowSchema' + $ref: '#/components/schemas/v1.APIResourceList' description: OK - "201": - content: - application/json: - schema: - $ref: '#/components/schemas/v1.FlowSchema' - application/yaml: - schema: - $ref: '#/components/schemas/v1.FlowSchema' - application/vnd.kubernetes.protobuf: - schema: - $ref: '#/components/schemas/v1.FlowSchema' - application/cbor: - schema: - $ref: '#/components/schemas/v1.FlowSchema' - description: Created "401": content: {} description: Unauthorized tags: - flowcontrolApiserver_v1 - x-kubernetes-action: put - x-kubernetes-group-version-kind: - group: flowcontrol.apiserver.k8s.io - kind: FlowSchema - version: v1 - x-codegen-request-body-name: body - x-contentType: application/json x-accepts: application/json - /apis/flowcontrol.apiserver.k8s.io/v1/prioritylevelconfigurations: + /apis/flowcontrol.apiserver.k8s.io/v1/flowschemas: delete: - description: delete collection of PriorityLevelConfiguration - operationId: deleteCollectionPriorityLevelConfiguration + description: delete collection of FlowSchema + operationId: deleteCollectionFlowSchema parameters: - description: If 'true', then the output is pretty printed. Defaults to 'false' unless the user-agent indicates a browser or command-line HTTP tool (curl @@ -50054,14 +49997,14 @@ paths: x-kubernetes-action: deletecollection x-kubernetes-group-version-kind: group: flowcontrol.apiserver.k8s.io - kind: PriorityLevelConfiguration + kind: FlowSchema version: v1 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json get: - description: list or watch objects of kind PriorityLevelConfiguration - operationId: listPriorityLevelConfiguration + description: list or watch objects of kind FlowSchema + operationId: listFlowSchema parameters: - description: If 'true', then the output is pretty printed. Defaults to 'false' unless the user-agent indicates a browser or command-line HTTP tool (curl @@ -50159,25 +50102,25 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1.PriorityLevelConfigurationList' + $ref: '#/components/schemas/v1.FlowSchemaList' application/yaml: schema: - $ref: '#/components/schemas/v1.PriorityLevelConfigurationList' + $ref: '#/components/schemas/v1.FlowSchemaList' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1.PriorityLevelConfigurationList' + $ref: '#/components/schemas/v1.FlowSchemaList' application/cbor: schema: - $ref: '#/components/schemas/v1.PriorityLevelConfigurationList' + $ref: '#/components/schemas/v1.FlowSchemaList' application/json;stream=watch: schema: - $ref: '#/components/schemas/v1.PriorityLevelConfigurationList' + $ref: '#/components/schemas/v1.FlowSchemaList' application/vnd.kubernetes.protobuf;stream=watch: schema: - $ref: '#/components/schemas/v1.PriorityLevelConfigurationList' + $ref: '#/components/schemas/v1.FlowSchemaList' application/cbor-seq: schema: - $ref: '#/components/schemas/v1.PriorityLevelConfigurationList' + $ref: '#/components/schemas/v1.FlowSchemaList' description: OK "401": content: {} @@ -50187,12 +50130,12 @@ paths: x-kubernetes-action: list x-kubernetes-group-version-kind: group: flowcontrol.apiserver.k8s.io - kind: PriorityLevelConfiguration + kind: FlowSchema version: v1 x-accepts: application/json post: - description: create a PriorityLevelConfiguration - operationId: createPriorityLevelConfiguration + description: create a FlowSchema + operationId: createFlowSchema parameters: - description: If 'true', then the output is pretty printed. Defaults to 'false' unless the user-agent indicates a browser or command-line HTTP tool (curl @@ -50237,53 +50180,53 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1.PriorityLevelConfiguration' + $ref: '#/components/schemas/v1.FlowSchema' required: true responses: "200": content: application/json: schema: - $ref: '#/components/schemas/v1.PriorityLevelConfiguration' + $ref: '#/components/schemas/v1.FlowSchema' application/yaml: schema: - $ref: '#/components/schemas/v1.PriorityLevelConfiguration' + $ref: '#/components/schemas/v1.FlowSchema' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1.PriorityLevelConfiguration' + $ref: '#/components/schemas/v1.FlowSchema' application/cbor: schema: - $ref: '#/components/schemas/v1.PriorityLevelConfiguration' + $ref: '#/components/schemas/v1.FlowSchema' description: OK "201": content: application/json: schema: - $ref: '#/components/schemas/v1.PriorityLevelConfiguration' + $ref: '#/components/schemas/v1.FlowSchema' application/yaml: schema: - $ref: '#/components/schemas/v1.PriorityLevelConfiguration' + $ref: '#/components/schemas/v1.FlowSchema' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1.PriorityLevelConfiguration' + $ref: '#/components/schemas/v1.FlowSchema' application/cbor: schema: - $ref: '#/components/schemas/v1.PriorityLevelConfiguration' + $ref: '#/components/schemas/v1.FlowSchema' description: Created "202": content: application/json: schema: - $ref: '#/components/schemas/v1.PriorityLevelConfiguration' + $ref: '#/components/schemas/v1.FlowSchema' application/yaml: schema: - $ref: '#/components/schemas/v1.PriorityLevelConfiguration' + $ref: '#/components/schemas/v1.FlowSchema' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1.PriorityLevelConfiguration' + $ref: '#/components/schemas/v1.FlowSchema' application/cbor: schema: - $ref: '#/components/schemas/v1.PriorityLevelConfiguration' + $ref: '#/components/schemas/v1.FlowSchema' description: Accepted "401": content: {} @@ -50293,17 +50236,17 @@ paths: x-kubernetes-action: post x-kubernetes-group-version-kind: group: flowcontrol.apiserver.k8s.io - kind: PriorityLevelConfiguration + kind: FlowSchema version: v1 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json - /apis/flowcontrol.apiserver.k8s.io/v1/prioritylevelconfigurations/{name}: + /apis/flowcontrol.apiserver.k8s.io/v1/flowschemas/{name}: delete: - description: delete a PriorityLevelConfiguration - operationId: deletePriorityLevelConfiguration + description: delete a FlowSchema + operationId: deleteFlowSchema parameters: - - description: name of the PriorityLevelConfiguration + - description: name of the FlowSchema in: path name: name required: true @@ -50411,16 +50354,16 @@ paths: x-kubernetes-action: delete x-kubernetes-group-version-kind: group: flowcontrol.apiserver.k8s.io - kind: PriorityLevelConfiguration + kind: FlowSchema version: v1 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json get: - description: read the specified PriorityLevelConfiguration - operationId: readPriorityLevelConfiguration + description: read the specified FlowSchema + operationId: readFlowSchema parameters: - - description: name of the PriorityLevelConfiguration + - description: name of the FlowSchema in: path name: name required: true @@ -50438,16 +50381,16 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1.PriorityLevelConfiguration' + $ref: '#/components/schemas/v1.FlowSchema' application/yaml: schema: - $ref: '#/components/schemas/v1.PriorityLevelConfiguration' + $ref: '#/components/schemas/v1.FlowSchema' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1.PriorityLevelConfiguration' + $ref: '#/components/schemas/v1.FlowSchema' application/cbor: schema: - $ref: '#/components/schemas/v1.PriorityLevelConfiguration' + $ref: '#/components/schemas/v1.FlowSchema' description: OK "401": content: {} @@ -50457,14 +50400,14 @@ paths: x-kubernetes-action: get x-kubernetes-group-version-kind: group: flowcontrol.apiserver.k8s.io - kind: PriorityLevelConfiguration + kind: FlowSchema version: v1 x-accepts: application/json patch: - description: partially update the specified PriorityLevelConfiguration - operationId: patchPriorityLevelConfiguration + description: partially update the specified FlowSchema + operationId: patchFlowSchema parameters: - - description: name of the PriorityLevelConfiguration + - description: name of the FlowSchema in: path name: name required: true @@ -50529,31 +50472,31 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1.PriorityLevelConfiguration' + $ref: '#/components/schemas/v1.FlowSchema' application/yaml: schema: - $ref: '#/components/schemas/v1.PriorityLevelConfiguration' + $ref: '#/components/schemas/v1.FlowSchema' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1.PriorityLevelConfiguration' + $ref: '#/components/schemas/v1.FlowSchema' application/cbor: schema: - $ref: '#/components/schemas/v1.PriorityLevelConfiguration' + $ref: '#/components/schemas/v1.FlowSchema' description: OK "201": content: application/json: schema: - $ref: '#/components/schemas/v1.PriorityLevelConfiguration' + $ref: '#/components/schemas/v1.FlowSchema' application/yaml: schema: - $ref: '#/components/schemas/v1.PriorityLevelConfiguration' + $ref: '#/components/schemas/v1.FlowSchema' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1.PriorityLevelConfiguration' + $ref: '#/components/schemas/v1.FlowSchema' application/cbor: schema: - $ref: '#/components/schemas/v1.PriorityLevelConfiguration' + $ref: '#/components/schemas/v1.FlowSchema' description: Created "401": content: {} @@ -50563,16 +50506,16 @@ paths: x-kubernetes-action: patch x-kubernetes-group-version-kind: group: flowcontrol.apiserver.k8s.io - kind: PriorityLevelConfiguration + kind: FlowSchema version: v1 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json put: - description: replace the specified PriorityLevelConfiguration - operationId: replacePriorityLevelConfiguration + description: replace the specified FlowSchema + operationId: replaceFlowSchema parameters: - - description: name of the PriorityLevelConfiguration + - description: name of the FlowSchema in: path name: name required: true @@ -50621,38 +50564,38 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1.PriorityLevelConfiguration' + $ref: '#/components/schemas/v1.FlowSchema' required: true responses: "200": content: application/json: schema: - $ref: '#/components/schemas/v1.PriorityLevelConfiguration' + $ref: '#/components/schemas/v1.FlowSchema' application/yaml: schema: - $ref: '#/components/schemas/v1.PriorityLevelConfiguration' + $ref: '#/components/schemas/v1.FlowSchema' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1.PriorityLevelConfiguration' + $ref: '#/components/schemas/v1.FlowSchema' application/cbor: schema: - $ref: '#/components/schemas/v1.PriorityLevelConfiguration' + $ref: '#/components/schemas/v1.FlowSchema' description: OK "201": content: application/json: schema: - $ref: '#/components/schemas/v1.PriorityLevelConfiguration' + $ref: '#/components/schemas/v1.FlowSchema' application/yaml: schema: - $ref: '#/components/schemas/v1.PriorityLevelConfiguration' + $ref: '#/components/schemas/v1.FlowSchema' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1.PriorityLevelConfiguration' + $ref: '#/components/schemas/v1.FlowSchema' application/cbor: schema: - $ref: '#/components/schemas/v1.PriorityLevelConfiguration' + $ref: '#/components/schemas/v1.FlowSchema' description: Created "401": content: {} @@ -50662,17 +50605,17 @@ paths: x-kubernetes-action: put x-kubernetes-group-version-kind: group: flowcontrol.apiserver.k8s.io - kind: PriorityLevelConfiguration + kind: FlowSchema version: v1 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json - /apis/flowcontrol.apiserver.k8s.io/v1/prioritylevelconfigurations/{name}/status: + /apis/flowcontrol.apiserver.k8s.io/v1/flowschemas/{name}/status: get: - description: read status of the specified PriorityLevelConfiguration - operationId: readPriorityLevelConfigurationStatus + description: read status of the specified FlowSchema + operationId: readFlowSchemaStatus parameters: - - description: name of the PriorityLevelConfiguration + - description: name of the FlowSchema in: path name: name required: true @@ -50690,16 +50633,16 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1.PriorityLevelConfiguration' + $ref: '#/components/schemas/v1.FlowSchema' application/yaml: schema: - $ref: '#/components/schemas/v1.PriorityLevelConfiguration' + $ref: '#/components/schemas/v1.FlowSchema' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1.PriorityLevelConfiguration' + $ref: '#/components/schemas/v1.FlowSchema' application/cbor: schema: - $ref: '#/components/schemas/v1.PriorityLevelConfiguration' + $ref: '#/components/schemas/v1.FlowSchema' description: OK "401": content: {} @@ -50709,14 +50652,14 @@ paths: x-kubernetes-action: get x-kubernetes-group-version-kind: group: flowcontrol.apiserver.k8s.io - kind: PriorityLevelConfiguration + kind: FlowSchema version: v1 x-accepts: application/json patch: - description: partially update status of the specified PriorityLevelConfiguration - operationId: patchPriorityLevelConfigurationStatus + description: partially update status of the specified FlowSchema + operationId: patchFlowSchemaStatus parameters: - - description: name of the PriorityLevelConfiguration + - description: name of the FlowSchema in: path name: name required: true @@ -50781,31 +50724,31 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1.PriorityLevelConfiguration' + $ref: '#/components/schemas/v1.FlowSchema' application/yaml: schema: - $ref: '#/components/schemas/v1.PriorityLevelConfiguration' + $ref: '#/components/schemas/v1.FlowSchema' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1.PriorityLevelConfiguration' + $ref: '#/components/schemas/v1.FlowSchema' application/cbor: schema: - $ref: '#/components/schemas/v1.PriorityLevelConfiguration' + $ref: '#/components/schemas/v1.FlowSchema' description: OK "201": content: application/json: schema: - $ref: '#/components/schemas/v1.PriorityLevelConfiguration' + $ref: '#/components/schemas/v1.FlowSchema' application/yaml: schema: - $ref: '#/components/schemas/v1.PriorityLevelConfiguration' + $ref: '#/components/schemas/v1.FlowSchema' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1.PriorityLevelConfiguration' + $ref: '#/components/schemas/v1.FlowSchema' application/cbor: schema: - $ref: '#/components/schemas/v1.PriorityLevelConfiguration' + $ref: '#/components/schemas/v1.FlowSchema' description: Created "401": content: {} @@ -50815,16 +50758,16 @@ paths: x-kubernetes-action: patch x-kubernetes-group-version-kind: group: flowcontrol.apiserver.k8s.io - kind: PriorityLevelConfiguration + kind: FlowSchema version: v1 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json put: - description: replace status of the specified PriorityLevelConfiguration - operationId: replacePriorityLevelConfigurationStatus + description: replace status of the specified FlowSchema + operationId: replaceFlowSchemaStatus parameters: - - description: name of the PriorityLevelConfiguration + - description: name of the FlowSchema in: path name: name required: true @@ -50873,38 +50816,38 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1.PriorityLevelConfiguration' + $ref: '#/components/schemas/v1.FlowSchema' required: true responses: "200": content: application/json: schema: - $ref: '#/components/schemas/v1.PriorityLevelConfiguration' + $ref: '#/components/schemas/v1.FlowSchema' application/yaml: schema: - $ref: '#/components/schemas/v1.PriorityLevelConfiguration' + $ref: '#/components/schemas/v1.FlowSchema' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1.PriorityLevelConfiguration' + $ref: '#/components/schemas/v1.FlowSchema' application/cbor: schema: - $ref: '#/components/schemas/v1.PriorityLevelConfiguration' + $ref: '#/components/schemas/v1.FlowSchema' description: OK "201": content: application/json: schema: - $ref: '#/components/schemas/v1.PriorityLevelConfiguration' + $ref: '#/components/schemas/v1.FlowSchema' application/yaml: schema: - $ref: '#/components/schemas/v1.PriorityLevelConfiguration' + $ref: '#/components/schemas/v1.FlowSchema' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1.PriorityLevelConfiguration' + $ref: '#/components/schemas/v1.FlowSchema' application/cbor: schema: - $ref: '#/components/schemas/v1.PriorityLevelConfiguration' + $ref: '#/components/schemas/v1.FlowSchema' description: Created "401": content: {} @@ -50914,68 +50857,15 @@ paths: x-kubernetes-action: put x-kubernetes-group-version-kind: group: flowcontrol.apiserver.k8s.io - kind: PriorityLevelConfiguration + kind: FlowSchema version: v1 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json - /apis/flowcontrol.apiserver.k8s.io/v1/watch/flowschemas: {} - /apis/flowcontrol.apiserver.k8s.io/v1/watch/flowschemas/{name}: {} - /apis/flowcontrol.apiserver.k8s.io/v1/watch/prioritylevelconfigurations: {} - /apis/flowcontrol.apiserver.k8s.io/v1/watch/prioritylevelconfigurations/{name}: {} - /apis/internal.apiserver.k8s.io/: - get: - description: get information of a group - operationId: getAPIGroup - responses: - "200": - content: - application/json: - schema: - $ref: '#/components/schemas/v1.APIGroup' - application/yaml: - schema: - $ref: '#/components/schemas/v1.APIGroup' - application/vnd.kubernetes.protobuf: - schema: - $ref: '#/components/schemas/v1.APIGroup' - description: OK - "401": - content: {} - description: Unauthorized - tags: - - internalApiserver - x-accepts: application/json - /apis/internal.apiserver.k8s.io/v1alpha1/: - get: - description: get available resources - operationId: getAPIResources - responses: - "200": - content: - application/json: - schema: - $ref: '#/components/schemas/v1.APIResourceList' - application/yaml: - schema: - $ref: '#/components/schemas/v1.APIResourceList' - application/vnd.kubernetes.protobuf: - schema: - $ref: '#/components/schemas/v1.APIResourceList' - application/cbor: - schema: - $ref: '#/components/schemas/v1.APIResourceList' - description: OK - "401": - content: {} - description: Unauthorized - tags: - - internalApiserver_v1alpha1 - x-accepts: application/json - /apis/internal.apiserver.k8s.io/v1alpha1/storageversions: + /apis/flowcontrol.apiserver.k8s.io/v1/prioritylevelconfigurations: delete: - description: delete collection of StorageVersion - operationId: deleteCollectionStorageVersion + description: delete collection of PriorityLevelConfiguration + operationId: deleteCollectionPriorityLevelConfiguration parameters: - description: If 'true', then the output is pretty printed. Defaults to 'false' unless the user-agent indicates a browser or command-line HTTP tool (curl @@ -51128,18 +51018,18 @@ paths: content: {} description: Unauthorized tags: - - internalApiserver_v1alpha1 + - flowcontrolApiserver_v1 x-kubernetes-action: deletecollection x-kubernetes-group-version-kind: - group: internal.apiserver.k8s.io - kind: StorageVersion - version: v1alpha1 + group: flowcontrol.apiserver.k8s.io + kind: PriorityLevelConfiguration + version: v1 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json get: - description: list or watch objects of kind StorageVersion - operationId: listStorageVersion + description: list or watch objects of kind PriorityLevelConfiguration + operationId: listPriorityLevelConfiguration parameters: - description: If 'true', then the output is pretty printed. Defaults to 'false' unless the user-agent indicates a browser or command-line HTTP tool (curl @@ -51237,40 +51127,40 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1alpha1.StorageVersionList' + $ref: '#/components/schemas/v1.PriorityLevelConfigurationList' application/yaml: schema: - $ref: '#/components/schemas/v1alpha1.StorageVersionList' + $ref: '#/components/schemas/v1.PriorityLevelConfigurationList' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1alpha1.StorageVersionList' + $ref: '#/components/schemas/v1.PriorityLevelConfigurationList' application/cbor: schema: - $ref: '#/components/schemas/v1alpha1.StorageVersionList' + $ref: '#/components/schemas/v1.PriorityLevelConfigurationList' application/json;stream=watch: schema: - $ref: '#/components/schemas/v1alpha1.StorageVersionList' + $ref: '#/components/schemas/v1.PriorityLevelConfigurationList' application/vnd.kubernetes.protobuf;stream=watch: schema: - $ref: '#/components/schemas/v1alpha1.StorageVersionList' + $ref: '#/components/schemas/v1.PriorityLevelConfigurationList' application/cbor-seq: schema: - $ref: '#/components/schemas/v1alpha1.StorageVersionList' + $ref: '#/components/schemas/v1.PriorityLevelConfigurationList' description: OK "401": content: {} description: Unauthorized tags: - - internalApiserver_v1alpha1 + - flowcontrolApiserver_v1 x-kubernetes-action: list x-kubernetes-group-version-kind: - group: internal.apiserver.k8s.io - kind: StorageVersion - version: v1alpha1 + group: flowcontrol.apiserver.k8s.io + kind: PriorityLevelConfiguration + version: v1 x-accepts: application/json post: - description: create a StorageVersion - operationId: createStorageVersion + description: create a PriorityLevelConfiguration + operationId: createPriorityLevelConfiguration parameters: - description: If 'true', then the output is pretty printed. Defaults to 'false' unless the user-agent indicates a browser or command-line HTTP tool (curl @@ -51315,73 +51205,73 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1alpha1.StorageVersion' + $ref: '#/components/schemas/v1.PriorityLevelConfiguration' required: true responses: "200": content: application/json: schema: - $ref: '#/components/schemas/v1alpha1.StorageVersion' + $ref: '#/components/schemas/v1.PriorityLevelConfiguration' application/yaml: schema: - $ref: '#/components/schemas/v1alpha1.StorageVersion' + $ref: '#/components/schemas/v1.PriorityLevelConfiguration' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1alpha1.StorageVersion' + $ref: '#/components/schemas/v1.PriorityLevelConfiguration' application/cbor: schema: - $ref: '#/components/schemas/v1alpha1.StorageVersion' + $ref: '#/components/schemas/v1.PriorityLevelConfiguration' description: OK "201": content: application/json: schema: - $ref: '#/components/schemas/v1alpha1.StorageVersion' + $ref: '#/components/schemas/v1.PriorityLevelConfiguration' application/yaml: schema: - $ref: '#/components/schemas/v1alpha1.StorageVersion' + $ref: '#/components/schemas/v1.PriorityLevelConfiguration' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1alpha1.StorageVersion' + $ref: '#/components/schemas/v1.PriorityLevelConfiguration' application/cbor: schema: - $ref: '#/components/schemas/v1alpha1.StorageVersion' + $ref: '#/components/schemas/v1.PriorityLevelConfiguration' description: Created "202": content: application/json: schema: - $ref: '#/components/schemas/v1alpha1.StorageVersion' + $ref: '#/components/schemas/v1.PriorityLevelConfiguration' application/yaml: schema: - $ref: '#/components/schemas/v1alpha1.StorageVersion' + $ref: '#/components/schemas/v1.PriorityLevelConfiguration' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1alpha1.StorageVersion' + $ref: '#/components/schemas/v1.PriorityLevelConfiguration' application/cbor: schema: - $ref: '#/components/schemas/v1alpha1.StorageVersion' + $ref: '#/components/schemas/v1.PriorityLevelConfiguration' description: Accepted "401": content: {} description: Unauthorized tags: - - internalApiserver_v1alpha1 + - flowcontrolApiserver_v1 x-kubernetes-action: post x-kubernetes-group-version-kind: - group: internal.apiserver.k8s.io - kind: StorageVersion - version: v1alpha1 + group: flowcontrol.apiserver.k8s.io + kind: PriorityLevelConfiguration + version: v1 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json - /apis/internal.apiserver.k8s.io/v1alpha1/storageversions/{name}: + /apis/flowcontrol.apiserver.k8s.io/v1/prioritylevelconfigurations/{name}: delete: - description: delete a StorageVersion - operationId: deleteStorageVersion + description: delete a PriorityLevelConfiguration + operationId: deletePriorityLevelConfiguration parameters: - - description: name of the StorageVersion + - description: name of the PriorityLevelConfiguration in: path name: name required: true @@ -51485,20 +51375,20 @@ paths: content: {} description: Unauthorized tags: - - internalApiserver_v1alpha1 + - flowcontrolApiserver_v1 x-kubernetes-action: delete x-kubernetes-group-version-kind: - group: internal.apiserver.k8s.io - kind: StorageVersion - version: v1alpha1 + group: flowcontrol.apiserver.k8s.io + kind: PriorityLevelConfiguration + version: v1 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json get: - description: read the specified StorageVersion - operationId: readStorageVersion + description: read the specified PriorityLevelConfiguration + operationId: readPriorityLevelConfiguration parameters: - - description: name of the StorageVersion + - description: name of the PriorityLevelConfiguration in: path name: name required: true @@ -51516,33 +51406,33 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1alpha1.StorageVersion' + $ref: '#/components/schemas/v1.PriorityLevelConfiguration' application/yaml: schema: - $ref: '#/components/schemas/v1alpha1.StorageVersion' + $ref: '#/components/schemas/v1.PriorityLevelConfiguration' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1alpha1.StorageVersion' + $ref: '#/components/schemas/v1.PriorityLevelConfiguration' application/cbor: schema: - $ref: '#/components/schemas/v1alpha1.StorageVersion' + $ref: '#/components/schemas/v1.PriorityLevelConfiguration' description: OK "401": content: {} description: Unauthorized tags: - - internalApiserver_v1alpha1 + - flowcontrolApiserver_v1 x-kubernetes-action: get x-kubernetes-group-version-kind: - group: internal.apiserver.k8s.io - kind: StorageVersion - version: v1alpha1 + group: flowcontrol.apiserver.k8s.io + kind: PriorityLevelConfiguration + version: v1 x-accepts: application/json patch: - description: partially update the specified StorageVersion - operationId: patchStorageVersion + description: partially update the specified PriorityLevelConfiguration + operationId: patchPriorityLevelConfiguration parameters: - - description: name of the StorageVersion + - description: name of the PriorityLevelConfiguration in: path name: name required: true @@ -51607,50 +51497,50 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1alpha1.StorageVersion' + $ref: '#/components/schemas/v1.PriorityLevelConfiguration' application/yaml: schema: - $ref: '#/components/schemas/v1alpha1.StorageVersion' + $ref: '#/components/schemas/v1.PriorityLevelConfiguration' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1alpha1.StorageVersion' + $ref: '#/components/schemas/v1.PriorityLevelConfiguration' application/cbor: schema: - $ref: '#/components/schemas/v1alpha1.StorageVersion' + $ref: '#/components/schemas/v1.PriorityLevelConfiguration' description: OK "201": content: application/json: schema: - $ref: '#/components/schemas/v1alpha1.StorageVersion' + $ref: '#/components/schemas/v1.PriorityLevelConfiguration' application/yaml: schema: - $ref: '#/components/schemas/v1alpha1.StorageVersion' + $ref: '#/components/schemas/v1.PriorityLevelConfiguration' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1alpha1.StorageVersion' + $ref: '#/components/schemas/v1.PriorityLevelConfiguration' application/cbor: schema: - $ref: '#/components/schemas/v1alpha1.StorageVersion' + $ref: '#/components/schemas/v1.PriorityLevelConfiguration' description: Created "401": content: {} description: Unauthorized tags: - - internalApiserver_v1alpha1 + - flowcontrolApiserver_v1 x-kubernetes-action: patch x-kubernetes-group-version-kind: - group: internal.apiserver.k8s.io - kind: StorageVersion - version: v1alpha1 + group: flowcontrol.apiserver.k8s.io + kind: PriorityLevelConfiguration + version: v1 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json put: - description: replace the specified StorageVersion - operationId: replaceStorageVersion + description: replace the specified PriorityLevelConfiguration + operationId: replacePriorityLevelConfiguration parameters: - - description: name of the StorageVersion + - description: name of the PriorityLevelConfiguration in: path name: name required: true @@ -51699,58 +51589,58 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1alpha1.StorageVersion' + $ref: '#/components/schemas/v1.PriorityLevelConfiguration' required: true responses: "200": content: application/json: schema: - $ref: '#/components/schemas/v1alpha1.StorageVersion' + $ref: '#/components/schemas/v1.PriorityLevelConfiguration' application/yaml: schema: - $ref: '#/components/schemas/v1alpha1.StorageVersion' + $ref: '#/components/schemas/v1.PriorityLevelConfiguration' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1alpha1.StorageVersion' + $ref: '#/components/schemas/v1.PriorityLevelConfiguration' application/cbor: schema: - $ref: '#/components/schemas/v1alpha1.StorageVersion' + $ref: '#/components/schemas/v1.PriorityLevelConfiguration' description: OK "201": content: application/json: schema: - $ref: '#/components/schemas/v1alpha1.StorageVersion' + $ref: '#/components/schemas/v1.PriorityLevelConfiguration' application/yaml: schema: - $ref: '#/components/schemas/v1alpha1.StorageVersion' + $ref: '#/components/schemas/v1.PriorityLevelConfiguration' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1alpha1.StorageVersion' + $ref: '#/components/schemas/v1.PriorityLevelConfiguration' application/cbor: schema: - $ref: '#/components/schemas/v1alpha1.StorageVersion' + $ref: '#/components/schemas/v1.PriorityLevelConfiguration' description: Created "401": content: {} description: Unauthorized tags: - - internalApiserver_v1alpha1 + - flowcontrolApiserver_v1 x-kubernetes-action: put x-kubernetes-group-version-kind: - group: internal.apiserver.k8s.io - kind: StorageVersion - version: v1alpha1 + group: flowcontrol.apiserver.k8s.io + kind: PriorityLevelConfiguration + version: v1 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json - /apis/internal.apiserver.k8s.io/v1alpha1/storageversions/{name}/status: + /apis/flowcontrol.apiserver.k8s.io/v1/prioritylevelconfigurations/{name}/status: get: - description: read status of the specified StorageVersion - operationId: readStorageVersionStatus + description: read status of the specified PriorityLevelConfiguration + operationId: readPriorityLevelConfigurationStatus parameters: - - description: name of the StorageVersion + - description: name of the PriorityLevelConfiguration in: path name: name required: true @@ -51768,33 +51658,33 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1alpha1.StorageVersion' + $ref: '#/components/schemas/v1.PriorityLevelConfiguration' application/yaml: schema: - $ref: '#/components/schemas/v1alpha1.StorageVersion' + $ref: '#/components/schemas/v1.PriorityLevelConfiguration' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1alpha1.StorageVersion' + $ref: '#/components/schemas/v1.PriorityLevelConfiguration' application/cbor: schema: - $ref: '#/components/schemas/v1alpha1.StorageVersion' + $ref: '#/components/schemas/v1.PriorityLevelConfiguration' description: OK "401": content: {} description: Unauthorized tags: - - internalApiserver_v1alpha1 + - flowcontrolApiserver_v1 x-kubernetes-action: get x-kubernetes-group-version-kind: - group: internal.apiserver.k8s.io - kind: StorageVersion - version: v1alpha1 + group: flowcontrol.apiserver.k8s.io + kind: PriorityLevelConfiguration + version: v1 x-accepts: application/json patch: - description: partially update status of the specified StorageVersion - operationId: patchStorageVersionStatus + description: partially update status of the specified PriorityLevelConfiguration + operationId: patchPriorityLevelConfigurationStatus parameters: - - description: name of the StorageVersion + - description: name of the PriorityLevelConfiguration in: path name: name required: true @@ -51859,50 +51749,50 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1alpha1.StorageVersion' + $ref: '#/components/schemas/v1.PriorityLevelConfiguration' application/yaml: schema: - $ref: '#/components/schemas/v1alpha1.StorageVersion' + $ref: '#/components/schemas/v1.PriorityLevelConfiguration' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1alpha1.StorageVersion' + $ref: '#/components/schemas/v1.PriorityLevelConfiguration' application/cbor: schema: - $ref: '#/components/schemas/v1alpha1.StorageVersion' + $ref: '#/components/schemas/v1.PriorityLevelConfiguration' description: OK "201": content: application/json: schema: - $ref: '#/components/schemas/v1alpha1.StorageVersion' + $ref: '#/components/schemas/v1.PriorityLevelConfiguration' application/yaml: schema: - $ref: '#/components/schemas/v1alpha1.StorageVersion' + $ref: '#/components/schemas/v1.PriorityLevelConfiguration' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1alpha1.StorageVersion' + $ref: '#/components/schemas/v1.PriorityLevelConfiguration' application/cbor: schema: - $ref: '#/components/schemas/v1alpha1.StorageVersion' + $ref: '#/components/schemas/v1.PriorityLevelConfiguration' description: Created "401": content: {} description: Unauthorized tags: - - internalApiserver_v1alpha1 + - flowcontrolApiserver_v1 x-kubernetes-action: patch x-kubernetes-group-version-kind: - group: internal.apiserver.k8s.io - kind: StorageVersion - version: v1alpha1 + group: flowcontrol.apiserver.k8s.io + kind: PriorityLevelConfiguration + version: v1 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json put: - description: replace status of the specified StorageVersion - operationId: replaceStorageVersionStatus + description: replace status of the specified PriorityLevelConfiguration + operationId: replacePriorityLevelConfigurationStatus parameters: - - description: name of the StorageVersion + - description: name of the PriorityLevelConfiguration in: path name: name required: true @@ -51951,55 +51841,57 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1alpha1.StorageVersion' + $ref: '#/components/schemas/v1.PriorityLevelConfiguration' required: true responses: "200": content: application/json: schema: - $ref: '#/components/schemas/v1alpha1.StorageVersion' + $ref: '#/components/schemas/v1.PriorityLevelConfiguration' application/yaml: schema: - $ref: '#/components/schemas/v1alpha1.StorageVersion' + $ref: '#/components/schemas/v1.PriorityLevelConfiguration' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1alpha1.StorageVersion' + $ref: '#/components/schemas/v1.PriorityLevelConfiguration' application/cbor: schema: - $ref: '#/components/schemas/v1alpha1.StorageVersion' + $ref: '#/components/schemas/v1.PriorityLevelConfiguration' description: OK "201": content: application/json: schema: - $ref: '#/components/schemas/v1alpha1.StorageVersion' + $ref: '#/components/schemas/v1.PriorityLevelConfiguration' application/yaml: schema: - $ref: '#/components/schemas/v1alpha1.StorageVersion' + $ref: '#/components/schemas/v1.PriorityLevelConfiguration' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1alpha1.StorageVersion' + $ref: '#/components/schemas/v1.PriorityLevelConfiguration' application/cbor: schema: - $ref: '#/components/schemas/v1alpha1.StorageVersion' + $ref: '#/components/schemas/v1.PriorityLevelConfiguration' description: Created "401": content: {} description: Unauthorized tags: - - internalApiserver_v1alpha1 + - flowcontrolApiserver_v1 x-kubernetes-action: put x-kubernetes-group-version-kind: - group: internal.apiserver.k8s.io - kind: StorageVersion - version: v1alpha1 + group: flowcontrol.apiserver.k8s.io + kind: PriorityLevelConfiguration + version: v1 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json - /apis/internal.apiserver.k8s.io/v1alpha1/watch/storageversions: {} - /apis/internal.apiserver.k8s.io/v1alpha1/watch/storageversions/{name}: {} - /apis/networking.k8s.io/: + /apis/flowcontrol.apiserver.k8s.io/v1/watch/flowschemas: {} + /apis/flowcontrol.apiserver.k8s.io/v1/watch/flowschemas/{name}: {} + /apis/flowcontrol.apiserver.k8s.io/v1/watch/prioritylevelconfigurations: {} + /apis/flowcontrol.apiserver.k8s.io/v1/watch/prioritylevelconfigurations/{name}: {} + /apis/internal.apiserver.k8s.io/: get: description: get information of a group operationId: getAPIGroup @@ -52020,9 +51912,9 @@ paths: content: {} description: Unauthorized tags: - - networking + - internalApiserver x-accepts: application/json - /apis/networking.k8s.io/v1/: + /apis/internal.apiserver.k8s.io/v1alpha1/: get: description: get available resources operationId: getAPIResources @@ -52046,12 +51938,12 @@ paths: content: {} description: Unauthorized tags: - - networking_v1 + - internalApiserver_v1alpha1 x-accepts: application/json - /apis/networking.k8s.io/v1/ingressclasses: + /apis/internal.apiserver.k8s.io/v1alpha1/storageversions: delete: - description: delete collection of IngressClass - operationId: deleteCollectionIngressClass + description: delete collection of StorageVersion + operationId: deleteCollectionStorageVersion parameters: - description: If 'true', then the output is pretty printed. Defaults to 'false' unless the user-agent indicates a browser or command-line HTTP tool (curl @@ -52204,18 +52096,18 @@ paths: content: {} description: Unauthorized tags: - - networking_v1 + - internalApiserver_v1alpha1 x-kubernetes-action: deletecollection x-kubernetes-group-version-kind: - group: networking.k8s.io - kind: IngressClass - version: v1 + group: internal.apiserver.k8s.io + kind: StorageVersion + version: v1alpha1 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json get: - description: list or watch objects of kind IngressClass - operationId: listIngressClass + description: list or watch objects of kind StorageVersion + operationId: listStorageVersion parameters: - description: If 'true', then the output is pretty printed. Defaults to 'false' unless the user-agent indicates a browser or command-line HTTP tool (curl @@ -52313,40 +52205,40 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1.IngressClassList' + $ref: '#/components/schemas/v1alpha1.StorageVersionList' application/yaml: schema: - $ref: '#/components/schemas/v1.IngressClassList' + $ref: '#/components/schemas/v1alpha1.StorageVersionList' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1.IngressClassList' + $ref: '#/components/schemas/v1alpha1.StorageVersionList' application/cbor: schema: - $ref: '#/components/schemas/v1.IngressClassList' + $ref: '#/components/schemas/v1alpha1.StorageVersionList' application/json;stream=watch: schema: - $ref: '#/components/schemas/v1.IngressClassList' + $ref: '#/components/schemas/v1alpha1.StorageVersionList' application/vnd.kubernetes.protobuf;stream=watch: schema: - $ref: '#/components/schemas/v1.IngressClassList' + $ref: '#/components/schemas/v1alpha1.StorageVersionList' application/cbor-seq: schema: - $ref: '#/components/schemas/v1.IngressClassList' + $ref: '#/components/schemas/v1alpha1.StorageVersionList' description: OK "401": content: {} description: Unauthorized tags: - - networking_v1 + - internalApiserver_v1alpha1 x-kubernetes-action: list x-kubernetes-group-version-kind: - group: networking.k8s.io - kind: IngressClass - version: v1 + group: internal.apiserver.k8s.io + kind: StorageVersion + version: v1alpha1 x-accepts: application/json post: - description: create an IngressClass - operationId: createIngressClass + description: create a StorageVersion + operationId: createStorageVersion parameters: - description: If 'true', then the output is pretty printed. Defaults to 'false' unless the user-agent indicates a browser or command-line HTTP tool (curl @@ -52391,73 +52283,73 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1.IngressClass' + $ref: '#/components/schemas/v1alpha1.StorageVersion' required: true responses: "200": content: application/json: schema: - $ref: '#/components/schemas/v1.IngressClass' + $ref: '#/components/schemas/v1alpha1.StorageVersion' application/yaml: schema: - $ref: '#/components/schemas/v1.IngressClass' + $ref: '#/components/schemas/v1alpha1.StorageVersion' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1.IngressClass' + $ref: '#/components/schemas/v1alpha1.StorageVersion' application/cbor: schema: - $ref: '#/components/schemas/v1.IngressClass' + $ref: '#/components/schemas/v1alpha1.StorageVersion' description: OK "201": content: application/json: schema: - $ref: '#/components/schemas/v1.IngressClass' + $ref: '#/components/schemas/v1alpha1.StorageVersion' application/yaml: schema: - $ref: '#/components/schemas/v1.IngressClass' + $ref: '#/components/schemas/v1alpha1.StorageVersion' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1.IngressClass' + $ref: '#/components/schemas/v1alpha1.StorageVersion' application/cbor: schema: - $ref: '#/components/schemas/v1.IngressClass' + $ref: '#/components/schemas/v1alpha1.StorageVersion' description: Created "202": content: application/json: schema: - $ref: '#/components/schemas/v1.IngressClass' + $ref: '#/components/schemas/v1alpha1.StorageVersion' application/yaml: schema: - $ref: '#/components/schemas/v1.IngressClass' + $ref: '#/components/schemas/v1alpha1.StorageVersion' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1.IngressClass' + $ref: '#/components/schemas/v1alpha1.StorageVersion' application/cbor: schema: - $ref: '#/components/schemas/v1.IngressClass' + $ref: '#/components/schemas/v1alpha1.StorageVersion' description: Accepted "401": content: {} description: Unauthorized tags: - - networking_v1 + - internalApiserver_v1alpha1 x-kubernetes-action: post x-kubernetes-group-version-kind: - group: networking.k8s.io - kind: IngressClass - version: v1 + group: internal.apiserver.k8s.io + kind: StorageVersion + version: v1alpha1 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json - /apis/networking.k8s.io/v1/ingressclasses/{name}: + /apis/internal.apiserver.k8s.io/v1alpha1/storageversions/{name}: delete: - description: delete an IngressClass - operationId: deleteIngressClass + description: delete a StorageVersion + operationId: deleteStorageVersion parameters: - - description: name of the IngressClass + - description: name of the StorageVersion in: path name: name required: true @@ -52561,20 +52453,20 @@ paths: content: {} description: Unauthorized tags: - - networking_v1 + - internalApiserver_v1alpha1 x-kubernetes-action: delete x-kubernetes-group-version-kind: - group: networking.k8s.io - kind: IngressClass - version: v1 + group: internal.apiserver.k8s.io + kind: StorageVersion + version: v1alpha1 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json get: - description: read the specified IngressClass - operationId: readIngressClass + description: read the specified StorageVersion + operationId: readStorageVersion parameters: - - description: name of the IngressClass + - description: name of the StorageVersion in: path name: name required: true @@ -52592,33 +52484,33 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1.IngressClass' + $ref: '#/components/schemas/v1alpha1.StorageVersion' application/yaml: schema: - $ref: '#/components/schemas/v1.IngressClass' + $ref: '#/components/schemas/v1alpha1.StorageVersion' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1.IngressClass' + $ref: '#/components/schemas/v1alpha1.StorageVersion' application/cbor: schema: - $ref: '#/components/schemas/v1.IngressClass' + $ref: '#/components/schemas/v1alpha1.StorageVersion' description: OK "401": content: {} description: Unauthorized tags: - - networking_v1 + - internalApiserver_v1alpha1 x-kubernetes-action: get x-kubernetes-group-version-kind: - group: networking.k8s.io - kind: IngressClass - version: v1 + group: internal.apiserver.k8s.io + kind: StorageVersion + version: v1alpha1 x-accepts: application/json patch: - description: partially update the specified IngressClass - operationId: patchIngressClass + description: partially update the specified StorageVersion + operationId: patchStorageVersion parameters: - - description: name of the IngressClass + - description: name of the StorageVersion in: path name: name required: true @@ -52683,50 +52575,50 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1.IngressClass' + $ref: '#/components/schemas/v1alpha1.StorageVersion' application/yaml: schema: - $ref: '#/components/schemas/v1.IngressClass' + $ref: '#/components/schemas/v1alpha1.StorageVersion' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1.IngressClass' + $ref: '#/components/schemas/v1alpha1.StorageVersion' application/cbor: schema: - $ref: '#/components/schemas/v1.IngressClass' + $ref: '#/components/schemas/v1alpha1.StorageVersion' description: OK "201": content: application/json: schema: - $ref: '#/components/schemas/v1.IngressClass' + $ref: '#/components/schemas/v1alpha1.StorageVersion' application/yaml: schema: - $ref: '#/components/schemas/v1.IngressClass' + $ref: '#/components/schemas/v1alpha1.StorageVersion' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1.IngressClass' + $ref: '#/components/schemas/v1alpha1.StorageVersion' application/cbor: schema: - $ref: '#/components/schemas/v1.IngressClass' + $ref: '#/components/schemas/v1alpha1.StorageVersion' description: Created "401": content: {} description: Unauthorized tags: - - networking_v1 + - internalApiserver_v1alpha1 x-kubernetes-action: patch x-kubernetes-group-version-kind: - group: networking.k8s.io - kind: IngressClass - version: v1 + group: internal.apiserver.k8s.io + kind: StorageVersion + version: v1alpha1 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json put: - description: replace the specified IngressClass - operationId: replaceIngressClass + description: replace the specified StorageVersion + operationId: replaceStorageVersion parameters: - - description: name of the IngressClass + - description: name of the StorageVersion in: path name: name required: true @@ -52775,95 +52667,215 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1.IngressClass' + $ref: '#/components/schemas/v1alpha1.StorageVersion' required: true responses: "200": content: application/json: schema: - $ref: '#/components/schemas/v1.IngressClass' + $ref: '#/components/schemas/v1alpha1.StorageVersion' application/yaml: schema: - $ref: '#/components/schemas/v1.IngressClass' + $ref: '#/components/schemas/v1alpha1.StorageVersion' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1.IngressClass' + $ref: '#/components/schemas/v1alpha1.StorageVersion' application/cbor: schema: - $ref: '#/components/schemas/v1.IngressClass' + $ref: '#/components/schemas/v1alpha1.StorageVersion' description: OK "201": content: application/json: schema: - $ref: '#/components/schemas/v1.IngressClass' + $ref: '#/components/schemas/v1alpha1.StorageVersion' application/yaml: schema: - $ref: '#/components/schemas/v1.IngressClass' + $ref: '#/components/schemas/v1alpha1.StorageVersion' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1.IngressClass' + $ref: '#/components/schemas/v1alpha1.StorageVersion' application/cbor: schema: - $ref: '#/components/schemas/v1.IngressClass' + $ref: '#/components/schemas/v1alpha1.StorageVersion' description: Created "401": content: {} description: Unauthorized tags: - - networking_v1 + - internalApiserver_v1alpha1 x-kubernetes-action: put x-kubernetes-group-version-kind: - group: networking.k8s.io - kind: IngressClass - version: v1 + group: internal.apiserver.k8s.io + kind: StorageVersion + version: v1alpha1 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json - /apis/networking.k8s.io/v1/ingresses: + /apis/internal.apiserver.k8s.io/v1alpha1/storageversions/{name}/status: get: - description: list or watch objects of kind Ingress - operationId: listIngressForAllNamespaces + description: read status of the specified StorageVersion + operationId: readStorageVersionStatus parameters: - - description: allowWatchBookmarks requests watch events with type "BOOKMARK". - Servers that do not implement bookmarks may ignore this flag and bookmarks - are sent at the server's discretion. Clients should not assume bookmarks - are returned at any specific interval, nor may they assume the server will - send any BOOKMARK event during a session. If this is not a watch, this field - is ignored. + - description: name of the StorageVersion + in: path + name: name + required: true + schema: + type: string + - description: If 'true', then the output is pretty printed. Defaults to 'false' + unless the user-agent indicates a browser or command-line HTTP tool (curl + and wget). in: query - name: allowWatchBookmarks + name: pretty schema: - type: boolean - - description: |- - The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". - - This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications. + type: string + responses: + "200": + content: + application/json: + schema: + $ref: '#/components/schemas/v1alpha1.StorageVersion' + application/yaml: + schema: + $ref: '#/components/schemas/v1alpha1.StorageVersion' + application/vnd.kubernetes.protobuf: + schema: + $ref: '#/components/schemas/v1alpha1.StorageVersion' + application/cbor: + schema: + $ref: '#/components/schemas/v1alpha1.StorageVersion' + description: OK + "401": + content: {} + description: Unauthorized + tags: + - internalApiserver_v1alpha1 + x-kubernetes-action: get + x-kubernetes-group-version-kind: + group: internal.apiserver.k8s.io + kind: StorageVersion + version: v1alpha1 + x-accepts: application/json + patch: + description: partially update status of the specified StorageVersion + operationId: patchStorageVersionStatus + parameters: + - description: name of the StorageVersion + in: path + name: name + required: true + schema: + type: string + - description: If 'true', then the output is pretty printed. Defaults to 'false' + unless the user-agent indicates a browser or command-line HTTP tool (curl + and wget). in: query - name: continue + name: pretty schema: type: string - - description: A selector to restrict the list of returned objects by their - fields. Defaults to everything. + - description: 'When present, indicates that modifications should not be persisted. + An invalid or unrecognized dryRun directive will result in an error response + and no further processing of the request. Valid values are: - All: all dry + run stages will be processed' in: query - name: fieldSelector + name: dryRun schema: type: string - - description: A selector to restrict the list of returned objects by their - labels. Defaults to everything. + - description: fieldManager is a name associated with the actor or entity that + is making these changes. The value must be less than or 128 characters long, + and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. + This field is required for apply requests (application/apply-patch) but + optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch). in: query - name: labelSelector + name: fieldManager schema: type: string - - description: |- - limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. - - The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned. + - description: 'fieldValidation instructs the server on how to handle objects + in the request (POST/PUT/PATCH) containing unknown or duplicate fields. + Valid values are: - Ignore: This will ignore any unknown fields that are + silently dropped from the object, and will ignore all but the last duplicate + field that the decoder encounters. This is the default behavior prior to + v1.23. - Warn: This will send a warning via the standard warning response + header for each unknown field that is dropped from the object, and for each + duplicate field that is encountered. The request will still succeed if there + are no other errors, and will only persist the last of any duplicate fields. + This is the default in v1.23+ - Strict: This will fail the request with + a BadRequest error if any unknown fields would be dropped from the object, + or if any duplicate fields are present. The error returned from the server + will contain all unknown and duplicate fields encountered.' in: query - name: limit + name: fieldValidation schema: - type: integer + type: string + - description: Force is going to "force" Apply requests. It means user will + re-acquire conflicting fields owned by other people. Force flag must be + unset for non-apply patch requests. + in: query + name: force + schema: + type: boolean + requestBody: + content: + application/json: + schema: + $ref: '#/components/schemas/v1.Patch' + required: true + responses: + "200": + content: + application/json: + schema: + $ref: '#/components/schemas/v1alpha1.StorageVersion' + application/yaml: + schema: + $ref: '#/components/schemas/v1alpha1.StorageVersion' + application/vnd.kubernetes.protobuf: + schema: + $ref: '#/components/schemas/v1alpha1.StorageVersion' + application/cbor: + schema: + $ref: '#/components/schemas/v1alpha1.StorageVersion' + description: OK + "201": + content: + application/json: + schema: + $ref: '#/components/schemas/v1alpha1.StorageVersion' + application/yaml: + schema: + $ref: '#/components/schemas/v1alpha1.StorageVersion' + application/vnd.kubernetes.protobuf: + schema: + $ref: '#/components/schemas/v1alpha1.StorageVersion' + application/cbor: + schema: + $ref: '#/components/schemas/v1alpha1.StorageVersion' + description: Created + "401": + content: {} + description: Unauthorized + tags: + - internalApiserver_v1alpha1 + x-kubernetes-action: patch + x-kubernetes-group-version-kind: + group: internal.apiserver.k8s.io + kind: StorageVersion + version: v1alpha1 + x-codegen-request-body-name: body + x-contentType: application/json + x-accepts: application/json + put: + description: replace status of the specified StorageVersion + operationId: replaceStorageVersionStatus + parameters: + - description: name of the StorageVersion + in: path + name: name + required: true + schema: + type: string - description: If 'true', then the output is pretty printed. Defaults to 'false' unless the user-agent indicates a browser or command-line HTTP tool (curl and wget). @@ -52871,92 +52883,143 @@ paths: name: pretty schema: type: string - - description: |- - resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. - - Defaults to unset + - description: 'When present, indicates that modifications should not be persisted. + An invalid or unrecognized dryRun directive will result in an error response + and no further processing of the request. Valid values are: - All: all dry + run stages will be processed' in: query - name: resourceVersion + name: dryRun schema: type: string - - description: |- - resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. - - Defaults to unset + - description: fieldManager is a name associated with the actor or entity that + is making these changes. The value must be less than or 128 characters long, + and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. in: query - name: resourceVersionMatch + name: fieldManager schema: type: string - - description: |- - `sendInitialEvents=true` may be set together with `watch=true`. In that case, the watch stream will begin with synthetic events to produce the current state of objects in the collection. Once all such events have been sent, a synthetic "Bookmark" event will be sent. The bookmark will report the ResourceVersion (RV) corresponding to the set of objects, and be marked with `"k8s.io/initial-events-end": "true"` annotation. Afterwards, the watch stream will proceed as usual, sending watch events corresponding to changes (subsequent to the RV) to objects watched. - - When `sendInitialEvents` option is set, we require `resourceVersionMatch` option to also be set. The semantic of the watch request is as following: - `resourceVersionMatch` = NotOlderThan - is interpreted as "data at least as new as the provided `resourceVersion`" - and the bookmark event is send when the state is synced - to a `resourceVersion` at least as fresh as the one provided by the ListOptions. - If `resourceVersion` is unset, this is interpreted as "consistent read" and the - bookmark event is send when the state is synced at least to the moment - when request started being processed. - - `resourceVersionMatch` set to any other value or unset - Invalid error is returned. - - Defaults to true if `resourceVersion=""` or `resourceVersion="0"` (for backward compatibility reasons) and to false otherwise. - in: query - name: sendInitialEvents - schema: - type: boolean - - description: Timeout for the list/watch call. This limits the duration of - the call, regardless of any activity or inactivity. - in: query - name: timeoutSeconds - schema: - type: integer - - description: Watch for changes to the described resources and return them - as a stream of add, update, and remove notifications. Specify resourceVersion. + - description: 'fieldValidation instructs the server on how to handle objects + in the request (POST/PUT/PATCH) containing unknown or duplicate fields. + Valid values are: - Ignore: This will ignore any unknown fields that are + silently dropped from the object, and will ignore all but the last duplicate + field that the decoder encounters. This is the default behavior prior to + v1.23. - Warn: This will send a warning via the standard warning response + header for each unknown field that is dropped from the object, and for each + duplicate field that is encountered. The request will still succeed if there + are no other errors, and will only persist the last of any duplicate fields. + This is the default in v1.23+ - Strict: This will fail the request with + a BadRequest error if any unknown fields would be dropped from the object, + or if any duplicate fields are present. The error returned from the server + will contain all unknown and duplicate fields encountered.' in: query - name: watch + name: fieldValidation schema: - type: boolean + type: string + requestBody: + content: + application/json: + schema: + $ref: '#/components/schemas/v1alpha1.StorageVersion' + required: true responses: "200": content: application/json: schema: - $ref: '#/components/schemas/v1.IngressList' + $ref: '#/components/schemas/v1alpha1.StorageVersion' application/yaml: schema: - $ref: '#/components/schemas/v1.IngressList' + $ref: '#/components/schemas/v1alpha1.StorageVersion' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1.IngressList' + $ref: '#/components/schemas/v1alpha1.StorageVersion' application/cbor: schema: - $ref: '#/components/schemas/v1.IngressList' - application/json;stream=watch: + $ref: '#/components/schemas/v1alpha1.StorageVersion' + description: OK + "201": + content: + application/json: schema: - $ref: '#/components/schemas/v1.IngressList' - application/vnd.kubernetes.protobuf;stream=watch: + $ref: '#/components/schemas/v1alpha1.StorageVersion' + application/yaml: schema: - $ref: '#/components/schemas/v1.IngressList' - application/cbor-seq: + $ref: '#/components/schemas/v1alpha1.StorageVersion' + application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1.IngressList' + $ref: '#/components/schemas/v1alpha1.StorageVersion' + application/cbor: + schema: + $ref: '#/components/schemas/v1alpha1.StorageVersion' + description: Created + "401": + content: {} + description: Unauthorized + tags: + - internalApiserver_v1alpha1 + x-kubernetes-action: put + x-kubernetes-group-version-kind: + group: internal.apiserver.k8s.io + kind: StorageVersion + version: v1alpha1 + x-codegen-request-body-name: body + x-contentType: application/json + x-accepts: application/json + /apis/internal.apiserver.k8s.io/v1alpha1/watch/storageversions: {} + /apis/internal.apiserver.k8s.io/v1alpha1/watch/storageversions/{name}: {} + /apis/networking.k8s.io/: + get: + description: get information of a group + operationId: getAPIGroup + responses: + "200": + content: + application/json: + schema: + $ref: '#/components/schemas/v1.APIGroup' + application/yaml: + schema: + $ref: '#/components/schemas/v1.APIGroup' + application/vnd.kubernetes.protobuf: + schema: + $ref: '#/components/schemas/v1.APIGroup' + description: OK + "401": + content: {} + description: Unauthorized + tags: + - networking + x-accepts: application/json + /apis/networking.k8s.io/v1/: + get: + description: get available resources + operationId: getAPIResources + responses: + "200": + content: + application/json: + schema: + $ref: '#/components/schemas/v1.APIResourceList' + application/yaml: + schema: + $ref: '#/components/schemas/v1.APIResourceList' + application/vnd.kubernetes.protobuf: + schema: + $ref: '#/components/schemas/v1.APIResourceList' + application/cbor: + schema: + $ref: '#/components/schemas/v1.APIResourceList' description: OK "401": content: {} description: Unauthorized tags: - networking_v1 - x-kubernetes-action: list - x-kubernetes-group-version-kind: - group: networking.k8s.io - kind: Ingress - version: v1 x-accepts: application/json - /apis/networking.k8s.io/v1/ipaddresses: + /apis/networking.k8s.io/v1/ingressclasses: delete: - description: delete collection of IPAddress - operationId: deleteCollectionIPAddress + description: delete collection of IngressClass + operationId: deleteCollectionIngressClass parameters: - description: If 'true', then the output is pretty printed. Defaults to 'false' unless the user-agent indicates a browser or command-line HTTP tool (curl @@ -53113,14 +53176,14 @@ paths: x-kubernetes-action: deletecollection x-kubernetes-group-version-kind: group: networking.k8s.io - kind: IPAddress + kind: IngressClass version: v1 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json get: - description: list or watch objects of kind IPAddress - operationId: listIPAddress + description: list or watch objects of kind IngressClass + operationId: listIngressClass parameters: - description: If 'true', then the output is pretty printed. Defaults to 'false' unless the user-agent indicates a browser or command-line HTTP tool (curl @@ -53218,25 +53281,25 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1.IPAddressList' + $ref: '#/components/schemas/v1.IngressClassList' application/yaml: schema: - $ref: '#/components/schemas/v1.IPAddressList' + $ref: '#/components/schemas/v1.IngressClassList' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1.IPAddressList' + $ref: '#/components/schemas/v1.IngressClassList' application/cbor: schema: - $ref: '#/components/schemas/v1.IPAddressList' + $ref: '#/components/schemas/v1.IngressClassList' application/json;stream=watch: schema: - $ref: '#/components/schemas/v1.IPAddressList' + $ref: '#/components/schemas/v1.IngressClassList' application/vnd.kubernetes.protobuf;stream=watch: schema: - $ref: '#/components/schemas/v1.IPAddressList' + $ref: '#/components/schemas/v1.IngressClassList' application/cbor-seq: schema: - $ref: '#/components/schemas/v1.IPAddressList' + $ref: '#/components/schemas/v1.IngressClassList' description: OK "401": content: {} @@ -53246,12 +53309,12 @@ paths: x-kubernetes-action: list x-kubernetes-group-version-kind: group: networking.k8s.io - kind: IPAddress + kind: IngressClass version: v1 x-accepts: application/json post: - description: create an IPAddress - operationId: createIPAddress + description: create an IngressClass + operationId: createIngressClass parameters: - description: If 'true', then the output is pretty printed. Defaults to 'false' unless the user-agent indicates a browser or command-line HTTP tool (curl @@ -53296,53 +53359,53 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1.IPAddress' + $ref: '#/components/schemas/v1.IngressClass' required: true responses: "200": content: application/json: schema: - $ref: '#/components/schemas/v1.IPAddress' + $ref: '#/components/schemas/v1.IngressClass' application/yaml: schema: - $ref: '#/components/schemas/v1.IPAddress' + $ref: '#/components/schemas/v1.IngressClass' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1.IPAddress' + $ref: '#/components/schemas/v1.IngressClass' application/cbor: schema: - $ref: '#/components/schemas/v1.IPAddress' + $ref: '#/components/schemas/v1.IngressClass' description: OK "201": content: application/json: schema: - $ref: '#/components/schemas/v1.IPAddress' + $ref: '#/components/schemas/v1.IngressClass' application/yaml: schema: - $ref: '#/components/schemas/v1.IPAddress' + $ref: '#/components/schemas/v1.IngressClass' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1.IPAddress' + $ref: '#/components/schemas/v1.IngressClass' application/cbor: schema: - $ref: '#/components/schemas/v1.IPAddress' + $ref: '#/components/schemas/v1.IngressClass' description: Created "202": content: application/json: schema: - $ref: '#/components/schemas/v1.IPAddress' + $ref: '#/components/schemas/v1.IngressClass' application/yaml: schema: - $ref: '#/components/schemas/v1.IPAddress' + $ref: '#/components/schemas/v1.IngressClass' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1.IPAddress' + $ref: '#/components/schemas/v1.IngressClass' application/cbor: schema: - $ref: '#/components/schemas/v1.IPAddress' + $ref: '#/components/schemas/v1.IngressClass' description: Accepted "401": content: {} @@ -53352,17 +53415,17 @@ paths: x-kubernetes-action: post x-kubernetes-group-version-kind: group: networking.k8s.io - kind: IPAddress + kind: IngressClass version: v1 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json - /apis/networking.k8s.io/v1/ipaddresses/{name}: + /apis/networking.k8s.io/v1/ingressclasses/{name}: delete: - description: delete an IPAddress - operationId: deleteIPAddress + description: delete an IngressClass + operationId: deleteIngressClass parameters: - - description: name of the IPAddress + - description: name of the IngressClass in: path name: name required: true @@ -53470,16 +53533,16 @@ paths: x-kubernetes-action: delete x-kubernetes-group-version-kind: group: networking.k8s.io - kind: IPAddress + kind: IngressClass version: v1 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json get: - description: read the specified IPAddress - operationId: readIPAddress + description: read the specified IngressClass + operationId: readIngressClass parameters: - - description: name of the IPAddress + - description: name of the IngressClass in: path name: name required: true @@ -53497,16 +53560,16 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1.IPAddress' + $ref: '#/components/schemas/v1.IngressClass' application/yaml: schema: - $ref: '#/components/schemas/v1.IPAddress' + $ref: '#/components/schemas/v1.IngressClass' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1.IPAddress' + $ref: '#/components/schemas/v1.IngressClass' application/cbor: schema: - $ref: '#/components/schemas/v1.IPAddress' + $ref: '#/components/schemas/v1.IngressClass' description: OK "401": content: {} @@ -53516,14 +53579,14 @@ paths: x-kubernetes-action: get x-kubernetes-group-version-kind: group: networking.k8s.io - kind: IPAddress + kind: IngressClass version: v1 x-accepts: application/json patch: - description: partially update the specified IPAddress - operationId: patchIPAddress + description: partially update the specified IngressClass + operationId: patchIngressClass parameters: - - description: name of the IPAddress + - description: name of the IngressClass in: path name: name required: true @@ -53588,31 +53651,31 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1.IPAddress' + $ref: '#/components/schemas/v1.IngressClass' application/yaml: schema: - $ref: '#/components/schemas/v1.IPAddress' + $ref: '#/components/schemas/v1.IngressClass' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1.IPAddress' + $ref: '#/components/schemas/v1.IngressClass' application/cbor: schema: - $ref: '#/components/schemas/v1.IPAddress' + $ref: '#/components/schemas/v1.IngressClass' description: OK "201": content: application/json: schema: - $ref: '#/components/schemas/v1.IPAddress' + $ref: '#/components/schemas/v1.IngressClass' application/yaml: schema: - $ref: '#/components/schemas/v1.IPAddress' + $ref: '#/components/schemas/v1.IngressClass' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1.IPAddress' + $ref: '#/components/schemas/v1.IngressClass' application/cbor: schema: - $ref: '#/components/schemas/v1.IPAddress' + $ref: '#/components/schemas/v1.IngressClass' description: Created "401": content: {} @@ -53622,16 +53685,16 @@ paths: x-kubernetes-action: patch x-kubernetes-group-version-kind: group: networking.k8s.io - kind: IPAddress + kind: IngressClass version: v1 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json put: - description: replace the specified IPAddress - operationId: replaceIPAddress + description: replace the specified IngressClass + operationId: replaceIngressClass parameters: - - description: name of the IPAddress + - description: name of the IngressClass in: path name: name required: true @@ -53680,38 +53743,38 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1.IPAddress' + $ref: '#/components/schemas/v1.IngressClass' required: true responses: "200": content: application/json: schema: - $ref: '#/components/schemas/v1.IPAddress' + $ref: '#/components/schemas/v1.IngressClass' application/yaml: schema: - $ref: '#/components/schemas/v1.IPAddress' + $ref: '#/components/schemas/v1.IngressClass' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1.IPAddress' + $ref: '#/components/schemas/v1.IngressClass' application/cbor: schema: - $ref: '#/components/schemas/v1.IPAddress' + $ref: '#/components/schemas/v1.IngressClass' description: OK "201": content: application/json: schema: - $ref: '#/components/schemas/v1.IPAddress' + $ref: '#/components/schemas/v1.IngressClass' application/yaml: schema: - $ref: '#/components/schemas/v1.IPAddress' + $ref: '#/components/schemas/v1.IngressClass' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1.IPAddress' + $ref: '#/components/schemas/v1.IngressClass' application/cbor: schema: - $ref: '#/components/schemas/v1.IPAddress' + $ref: '#/components/schemas/v1.IngressClass' description: Created "401": content: {} @@ -53721,22 +53784,148 @@ paths: x-kubernetes-action: put x-kubernetes-group-version-kind: group: networking.k8s.io - kind: IPAddress + kind: IngressClass version: v1 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json - /apis/networking.k8s.io/v1/namespaces/{namespace}/ingresses: - delete: - description: delete collection of Ingress - operationId: deleteCollectionNamespacedIngress + /apis/networking.k8s.io/v1/ingresses: + get: + description: list or watch objects of kind Ingress + operationId: listIngressForAllNamespaces parameters: - - description: object name and auth scope, such as for teams and projects - in: path - name: namespace - required: true + - description: allowWatchBookmarks requests watch events with type "BOOKMARK". + Servers that do not implement bookmarks may ignore this flag and bookmarks + are sent at the server's discretion. Clients should not assume bookmarks + are returned at any specific interval, nor may they assume the server will + send any BOOKMARK event during a session. If this is not a watch, this field + is ignored. + in: query + name: allowWatchBookmarks + schema: + type: boolean + - description: |- + The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + + This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications. + in: query + name: continue schema: type: string + - description: A selector to restrict the list of returned objects by their + fields. Defaults to everything. + in: query + name: fieldSelector + schema: + type: string + - description: A selector to restrict the list of returned objects by their + labels. Defaults to everything. + in: query + name: labelSelector + schema: + type: string + - description: |- + limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + + The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned. + in: query + name: limit + schema: + type: integer + - description: If 'true', then the output is pretty printed. Defaults to 'false' + unless the user-agent indicates a browser or command-line HTTP tool (curl + and wget). + in: query + name: pretty + schema: + type: string + - description: |- + resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + + Defaults to unset + in: query + name: resourceVersion + schema: + type: string + - description: |- + resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + + Defaults to unset + in: query + name: resourceVersionMatch + schema: + type: string + - description: |- + `sendInitialEvents=true` may be set together with `watch=true`. In that case, the watch stream will begin with synthetic events to produce the current state of objects in the collection. Once all such events have been sent, a synthetic "Bookmark" event will be sent. The bookmark will report the ResourceVersion (RV) corresponding to the set of objects, and be marked with `"k8s.io/initial-events-end": "true"` annotation. Afterwards, the watch stream will proceed as usual, sending watch events corresponding to changes (subsequent to the RV) to objects watched. + + When `sendInitialEvents` option is set, we require `resourceVersionMatch` option to also be set. The semantic of the watch request is as following: - `resourceVersionMatch` = NotOlderThan + is interpreted as "data at least as new as the provided `resourceVersion`" + and the bookmark event is send when the state is synced + to a `resourceVersion` at least as fresh as the one provided by the ListOptions. + If `resourceVersion` is unset, this is interpreted as "consistent read" and the + bookmark event is send when the state is synced at least to the moment + when request started being processed. + - `resourceVersionMatch` set to any other value or unset + Invalid error is returned. + + Defaults to true if `resourceVersion=""` or `resourceVersion="0"` (for backward compatibility reasons) and to false otherwise. + in: query + name: sendInitialEvents + schema: + type: boolean + - description: Timeout for the list/watch call. This limits the duration of + the call, regardless of any activity or inactivity. + in: query + name: timeoutSeconds + schema: + type: integer + - description: Watch for changes to the described resources and return them + as a stream of add, update, and remove notifications. Specify resourceVersion. + in: query + name: watch + schema: + type: boolean + responses: + "200": + content: + application/json: + schema: + $ref: '#/components/schemas/v1.IngressList' + application/yaml: + schema: + $ref: '#/components/schemas/v1.IngressList' + application/vnd.kubernetes.protobuf: + schema: + $ref: '#/components/schemas/v1.IngressList' + application/cbor: + schema: + $ref: '#/components/schemas/v1.IngressList' + application/json;stream=watch: + schema: + $ref: '#/components/schemas/v1.IngressList' + application/vnd.kubernetes.protobuf;stream=watch: + schema: + $ref: '#/components/schemas/v1.IngressList' + application/cbor-seq: + schema: + $ref: '#/components/schemas/v1.IngressList' + description: OK + "401": + content: {} + description: Unauthorized + tags: + - networking_v1 + x-kubernetes-action: list + x-kubernetes-group-version-kind: + group: networking.k8s.io + kind: Ingress + version: v1 + x-accepts: application/json + /apis/networking.k8s.io/v1/ipaddresses: + delete: + description: delete collection of IPAddress + operationId: deleteCollectionIPAddress + parameters: - description: If 'true', then the output is pretty printed. Defaults to 'false' unless the user-agent indicates a browser or command-line HTTP tool (curl and wget). @@ -53892,21 +54081,15 @@ paths: x-kubernetes-action: deletecollection x-kubernetes-group-version-kind: group: networking.k8s.io - kind: Ingress + kind: IPAddress version: v1 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json get: - description: list or watch objects of kind Ingress - operationId: listNamespacedIngress + description: list or watch objects of kind IPAddress + operationId: listIPAddress parameters: - - description: object name and auth scope, such as for teams and projects - in: path - name: namespace - required: true - schema: - type: string - description: If 'true', then the output is pretty printed. Defaults to 'false' unless the user-agent indicates a browser or command-line HTTP tool (curl and wget). @@ -54003,25 +54186,25 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1.IngressList' + $ref: '#/components/schemas/v1.IPAddressList' application/yaml: schema: - $ref: '#/components/schemas/v1.IngressList' + $ref: '#/components/schemas/v1.IPAddressList' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1.IngressList' + $ref: '#/components/schemas/v1.IPAddressList' application/cbor: schema: - $ref: '#/components/schemas/v1.IngressList' + $ref: '#/components/schemas/v1.IPAddressList' application/json;stream=watch: schema: - $ref: '#/components/schemas/v1.IngressList' + $ref: '#/components/schemas/v1.IPAddressList' application/vnd.kubernetes.protobuf;stream=watch: schema: - $ref: '#/components/schemas/v1.IngressList' + $ref: '#/components/schemas/v1.IPAddressList' application/cbor-seq: schema: - $ref: '#/components/schemas/v1.IngressList' + $ref: '#/components/schemas/v1.IPAddressList' description: OK "401": content: {} @@ -54031,19 +54214,13 @@ paths: x-kubernetes-action: list x-kubernetes-group-version-kind: group: networking.k8s.io - kind: Ingress + kind: IPAddress version: v1 x-accepts: application/json post: - description: create an Ingress - operationId: createNamespacedIngress + description: create an IPAddress + operationId: createIPAddress parameters: - - description: object name and auth scope, such as for teams and projects - in: path - name: namespace - required: true - schema: - type: string - description: If 'true', then the output is pretty printed. Defaults to 'false' unless the user-agent indicates a browser or command-line HTTP tool (curl and wget). @@ -54087,53 +54264,53 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1.Ingress' + $ref: '#/components/schemas/v1.IPAddress' required: true responses: "200": content: application/json: schema: - $ref: '#/components/schemas/v1.Ingress' + $ref: '#/components/schemas/v1.IPAddress' application/yaml: schema: - $ref: '#/components/schemas/v1.Ingress' + $ref: '#/components/schemas/v1.IPAddress' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1.Ingress' + $ref: '#/components/schemas/v1.IPAddress' application/cbor: schema: - $ref: '#/components/schemas/v1.Ingress' + $ref: '#/components/schemas/v1.IPAddress' description: OK "201": content: application/json: schema: - $ref: '#/components/schemas/v1.Ingress' + $ref: '#/components/schemas/v1.IPAddress' application/yaml: schema: - $ref: '#/components/schemas/v1.Ingress' + $ref: '#/components/schemas/v1.IPAddress' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1.Ingress' + $ref: '#/components/schemas/v1.IPAddress' application/cbor: schema: - $ref: '#/components/schemas/v1.Ingress' + $ref: '#/components/schemas/v1.IPAddress' description: Created "202": content: application/json: schema: - $ref: '#/components/schemas/v1.Ingress' + $ref: '#/components/schemas/v1.IPAddress' application/yaml: schema: - $ref: '#/components/schemas/v1.Ingress' + $ref: '#/components/schemas/v1.IPAddress' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1.Ingress' + $ref: '#/components/schemas/v1.IPAddress' application/cbor: schema: - $ref: '#/components/schemas/v1.Ingress' + $ref: '#/components/schemas/v1.IPAddress' description: Accepted "401": content: {} @@ -54143,28 +54320,22 @@ paths: x-kubernetes-action: post x-kubernetes-group-version-kind: group: networking.k8s.io - kind: Ingress + kind: IPAddress version: v1 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json - /apis/networking.k8s.io/v1/namespaces/{namespace}/ingresses/{name}: + /apis/networking.k8s.io/v1/ipaddresses/{name}: delete: - description: delete an Ingress - operationId: deleteNamespacedIngress + description: delete an IPAddress + operationId: deleteIPAddress parameters: - - description: name of the Ingress + - description: name of the IPAddress in: path name: name required: true schema: type: string - - description: object name and auth scope, such as for teams and projects - in: path - name: namespace - required: true - schema: - type: string - description: If 'true', then the output is pretty printed. Defaults to 'false' unless the user-agent indicates a browser or command-line HTTP tool (curl and wget). @@ -54267,27 +54438,21 @@ paths: x-kubernetes-action: delete x-kubernetes-group-version-kind: group: networking.k8s.io - kind: Ingress + kind: IPAddress version: v1 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json get: - description: read the specified Ingress - operationId: readNamespacedIngress + description: read the specified IPAddress + operationId: readIPAddress parameters: - - description: name of the Ingress + - description: name of the IPAddress in: path name: name required: true schema: type: string - - description: object name and auth scope, such as for teams and projects - in: path - name: namespace - required: true - schema: - type: string - description: If 'true', then the output is pretty printed. Defaults to 'false' unless the user-agent indicates a browser or command-line HTTP tool (curl and wget). @@ -54300,16 +54465,16 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1.Ingress' + $ref: '#/components/schemas/v1.IPAddress' application/yaml: schema: - $ref: '#/components/schemas/v1.Ingress' + $ref: '#/components/schemas/v1.IPAddress' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1.Ingress' + $ref: '#/components/schemas/v1.IPAddress' application/cbor: schema: - $ref: '#/components/schemas/v1.Ingress' + $ref: '#/components/schemas/v1.IPAddress' description: OK "401": content: {} @@ -54319,25 +54484,19 @@ paths: x-kubernetes-action: get x-kubernetes-group-version-kind: group: networking.k8s.io - kind: Ingress + kind: IPAddress version: v1 x-accepts: application/json patch: - description: partially update the specified Ingress - operationId: patchNamespacedIngress + description: partially update the specified IPAddress + operationId: patchIPAddress parameters: - - description: name of the Ingress + - description: name of the IPAddress in: path name: name required: true schema: type: string - - description: object name and auth scope, such as for teams and projects - in: path - name: namespace - required: true - schema: - type: string - description: If 'true', then the output is pretty printed. Defaults to 'false' unless the user-agent indicates a browser or command-line HTTP tool (curl and wget). @@ -54397,301 +54556,31 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1.Ingress' - application/yaml: - schema: - $ref: '#/components/schemas/v1.Ingress' - application/vnd.kubernetes.protobuf: - schema: - $ref: '#/components/schemas/v1.Ingress' - application/cbor: - schema: - $ref: '#/components/schemas/v1.Ingress' - description: OK - "201": - content: - application/json: - schema: - $ref: '#/components/schemas/v1.Ingress' - application/yaml: - schema: - $ref: '#/components/schemas/v1.Ingress' - application/vnd.kubernetes.protobuf: - schema: - $ref: '#/components/schemas/v1.Ingress' - application/cbor: - schema: - $ref: '#/components/schemas/v1.Ingress' - description: Created - "401": - content: {} - description: Unauthorized - tags: - - networking_v1 - x-kubernetes-action: patch - x-kubernetes-group-version-kind: - group: networking.k8s.io - kind: Ingress - version: v1 - x-codegen-request-body-name: body - x-contentType: application/json - x-accepts: application/json - put: - description: replace the specified Ingress - operationId: replaceNamespacedIngress - parameters: - - description: name of the Ingress - in: path - name: name - required: true - schema: - type: string - - description: object name and auth scope, such as for teams and projects - in: path - name: namespace - required: true - schema: - type: string - - description: If 'true', then the output is pretty printed. Defaults to 'false' - unless the user-agent indicates a browser or command-line HTTP tool (curl - and wget). - in: query - name: pretty - schema: - type: string - - description: 'When present, indicates that modifications should not be persisted. - An invalid or unrecognized dryRun directive will result in an error response - and no further processing of the request. Valid values are: - All: all dry - run stages will be processed' - in: query - name: dryRun - schema: - type: string - - description: fieldManager is a name associated with the actor or entity that - is making these changes. The value must be less than or 128 characters long, - and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. - in: query - name: fieldManager - schema: - type: string - - description: 'fieldValidation instructs the server on how to handle objects - in the request (POST/PUT/PATCH) containing unknown or duplicate fields. - Valid values are: - Ignore: This will ignore any unknown fields that are - silently dropped from the object, and will ignore all but the last duplicate - field that the decoder encounters. This is the default behavior prior to - v1.23. - Warn: This will send a warning via the standard warning response - header for each unknown field that is dropped from the object, and for each - duplicate field that is encountered. The request will still succeed if there - are no other errors, and will only persist the last of any duplicate fields. - This is the default in v1.23+ - Strict: This will fail the request with - a BadRequest error if any unknown fields would be dropped from the object, - or if any duplicate fields are present. The error returned from the server - will contain all unknown and duplicate fields encountered.' - in: query - name: fieldValidation - schema: - type: string - requestBody: - content: - application/json: - schema: - $ref: '#/components/schemas/v1.Ingress' - required: true - responses: - "200": - content: - application/json: - schema: - $ref: '#/components/schemas/v1.Ingress' - application/yaml: - schema: - $ref: '#/components/schemas/v1.Ingress' - application/vnd.kubernetes.protobuf: - schema: - $ref: '#/components/schemas/v1.Ingress' - application/cbor: - schema: - $ref: '#/components/schemas/v1.Ingress' - description: OK - "201": - content: - application/json: - schema: - $ref: '#/components/schemas/v1.Ingress' - application/yaml: - schema: - $ref: '#/components/schemas/v1.Ingress' - application/vnd.kubernetes.protobuf: - schema: - $ref: '#/components/schemas/v1.Ingress' - application/cbor: - schema: - $ref: '#/components/schemas/v1.Ingress' - description: Created - "401": - content: {} - description: Unauthorized - tags: - - networking_v1 - x-kubernetes-action: put - x-kubernetes-group-version-kind: - group: networking.k8s.io - kind: Ingress - version: v1 - x-codegen-request-body-name: body - x-contentType: application/json - x-accepts: application/json - /apis/networking.k8s.io/v1/namespaces/{namespace}/ingresses/{name}/status: - get: - description: read status of the specified Ingress - operationId: readNamespacedIngressStatus - parameters: - - description: name of the Ingress - in: path - name: name - required: true - schema: - type: string - - description: object name and auth scope, such as for teams and projects - in: path - name: namespace - required: true - schema: - type: string - - description: If 'true', then the output is pretty printed. Defaults to 'false' - unless the user-agent indicates a browser or command-line HTTP tool (curl - and wget). - in: query - name: pretty - schema: - type: string - responses: - "200": - content: - application/json: - schema: - $ref: '#/components/schemas/v1.Ingress' - application/yaml: - schema: - $ref: '#/components/schemas/v1.Ingress' - application/vnd.kubernetes.protobuf: - schema: - $ref: '#/components/schemas/v1.Ingress' - application/cbor: - schema: - $ref: '#/components/schemas/v1.Ingress' - description: OK - "401": - content: {} - description: Unauthorized - tags: - - networking_v1 - x-kubernetes-action: get - x-kubernetes-group-version-kind: - group: networking.k8s.io - kind: Ingress - version: v1 - x-accepts: application/json - patch: - description: partially update status of the specified Ingress - operationId: patchNamespacedIngressStatus - parameters: - - description: name of the Ingress - in: path - name: name - required: true - schema: - type: string - - description: object name and auth scope, such as for teams and projects - in: path - name: namespace - required: true - schema: - type: string - - description: If 'true', then the output is pretty printed. Defaults to 'false' - unless the user-agent indicates a browser or command-line HTTP tool (curl - and wget). - in: query - name: pretty - schema: - type: string - - description: 'When present, indicates that modifications should not be persisted. - An invalid or unrecognized dryRun directive will result in an error response - and no further processing of the request. Valid values are: - All: all dry - run stages will be processed' - in: query - name: dryRun - schema: - type: string - - description: fieldManager is a name associated with the actor or entity that - is making these changes. The value must be less than or 128 characters long, - and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. - This field is required for apply requests (application/apply-patch) but - optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch). - in: query - name: fieldManager - schema: - type: string - - description: 'fieldValidation instructs the server on how to handle objects - in the request (POST/PUT/PATCH) containing unknown or duplicate fields. - Valid values are: - Ignore: This will ignore any unknown fields that are - silently dropped from the object, and will ignore all but the last duplicate - field that the decoder encounters. This is the default behavior prior to - v1.23. - Warn: This will send a warning via the standard warning response - header for each unknown field that is dropped from the object, and for each - duplicate field that is encountered. The request will still succeed if there - are no other errors, and will only persist the last of any duplicate fields. - This is the default in v1.23+ - Strict: This will fail the request with - a BadRequest error if any unknown fields would be dropped from the object, - or if any duplicate fields are present. The error returned from the server - will contain all unknown and duplicate fields encountered.' - in: query - name: fieldValidation - schema: - type: string - - description: Force is going to "force" Apply requests. It means user will - re-acquire conflicting fields owned by other people. Force flag must be - unset for non-apply patch requests. - in: query - name: force - schema: - type: boolean - requestBody: - content: - application/json: - schema: - $ref: '#/components/schemas/v1.Patch' - required: true - responses: - "200": - content: - application/json: - schema: - $ref: '#/components/schemas/v1.Ingress' + $ref: '#/components/schemas/v1.IPAddress' application/yaml: schema: - $ref: '#/components/schemas/v1.Ingress' + $ref: '#/components/schemas/v1.IPAddress' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1.Ingress' + $ref: '#/components/schemas/v1.IPAddress' application/cbor: schema: - $ref: '#/components/schemas/v1.Ingress' + $ref: '#/components/schemas/v1.IPAddress' description: OK "201": content: application/json: schema: - $ref: '#/components/schemas/v1.Ingress' + $ref: '#/components/schemas/v1.IPAddress' application/yaml: schema: - $ref: '#/components/schemas/v1.Ingress' + $ref: '#/components/schemas/v1.IPAddress' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1.Ingress' + $ref: '#/components/schemas/v1.IPAddress' application/cbor: schema: - $ref: '#/components/schemas/v1.Ingress' + $ref: '#/components/schemas/v1.IPAddress' description: Created "401": content: {} @@ -54701,27 +54590,21 @@ paths: x-kubernetes-action: patch x-kubernetes-group-version-kind: group: networking.k8s.io - kind: Ingress + kind: IPAddress version: v1 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json put: - description: replace status of the specified Ingress - operationId: replaceNamespacedIngressStatus + description: replace the specified IPAddress + operationId: replaceIPAddress parameters: - - description: name of the Ingress + - description: name of the IPAddress in: path name: name required: true schema: type: string - - description: object name and auth scope, such as for teams and projects - in: path - name: namespace - required: true - schema: - type: string - description: If 'true', then the output is pretty printed. Defaults to 'false' unless the user-agent indicates a browser or command-line HTTP tool (curl and wget). @@ -54765,38 +54648,38 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1.Ingress' + $ref: '#/components/schemas/v1.IPAddress' required: true responses: "200": content: application/json: schema: - $ref: '#/components/schemas/v1.Ingress' + $ref: '#/components/schemas/v1.IPAddress' application/yaml: schema: - $ref: '#/components/schemas/v1.Ingress' + $ref: '#/components/schemas/v1.IPAddress' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1.Ingress' + $ref: '#/components/schemas/v1.IPAddress' application/cbor: schema: - $ref: '#/components/schemas/v1.Ingress' + $ref: '#/components/schemas/v1.IPAddress' description: OK "201": content: application/json: schema: - $ref: '#/components/schemas/v1.Ingress' + $ref: '#/components/schemas/v1.IPAddress' application/yaml: schema: - $ref: '#/components/schemas/v1.Ingress' + $ref: '#/components/schemas/v1.IPAddress' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1.Ingress' + $ref: '#/components/schemas/v1.IPAddress' application/cbor: schema: - $ref: '#/components/schemas/v1.Ingress' + $ref: '#/components/schemas/v1.IPAddress' description: Created "401": content: {} @@ -54806,15 +54689,15 @@ paths: x-kubernetes-action: put x-kubernetes-group-version-kind: group: networking.k8s.io - kind: Ingress + kind: IPAddress version: v1 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json - /apis/networking.k8s.io/v1/namespaces/{namespace}/networkpolicies: + /apis/networking.k8s.io/v1/namespaces/{namespace}/ingresses: delete: - description: delete collection of NetworkPolicy - operationId: deleteCollectionNamespacedNetworkPolicy + description: delete collection of Ingress + operationId: deleteCollectionNamespacedIngress parameters: - description: object name and auth scope, such as for teams and projects in: path @@ -54977,14 +54860,14 @@ paths: x-kubernetes-action: deletecollection x-kubernetes-group-version-kind: group: networking.k8s.io - kind: NetworkPolicy + kind: Ingress version: v1 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json get: - description: list or watch objects of kind NetworkPolicy - operationId: listNamespacedNetworkPolicy + description: list or watch objects of kind Ingress + operationId: listNamespacedIngress parameters: - description: object name and auth scope, such as for teams and projects in: path @@ -55088,25 +54971,25 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1.NetworkPolicyList' + $ref: '#/components/schemas/v1.IngressList' application/yaml: schema: - $ref: '#/components/schemas/v1.NetworkPolicyList' + $ref: '#/components/schemas/v1.IngressList' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1.NetworkPolicyList' + $ref: '#/components/schemas/v1.IngressList' application/cbor: schema: - $ref: '#/components/schemas/v1.NetworkPolicyList' + $ref: '#/components/schemas/v1.IngressList' application/json;stream=watch: schema: - $ref: '#/components/schemas/v1.NetworkPolicyList' + $ref: '#/components/schemas/v1.IngressList' application/vnd.kubernetes.protobuf;stream=watch: schema: - $ref: '#/components/schemas/v1.NetworkPolicyList' + $ref: '#/components/schemas/v1.IngressList' application/cbor-seq: schema: - $ref: '#/components/schemas/v1.NetworkPolicyList' + $ref: '#/components/schemas/v1.IngressList' description: OK "401": content: {} @@ -55116,12 +54999,12 @@ paths: x-kubernetes-action: list x-kubernetes-group-version-kind: group: networking.k8s.io - kind: NetworkPolicy + kind: Ingress version: v1 x-accepts: application/json post: - description: create a NetworkPolicy - operationId: createNamespacedNetworkPolicy + description: create an Ingress + operationId: createNamespacedIngress parameters: - description: object name and auth scope, such as for teams and projects in: path @@ -55172,53 +55055,53 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1.NetworkPolicy' + $ref: '#/components/schemas/v1.Ingress' required: true responses: "200": content: application/json: schema: - $ref: '#/components/schemas/v1.NetworkPolicy' + $ref: '#/components/schemas/v1.Ingress' application/yaml: schema: - $ref: '#/components/schemas/v1.NetworkPolicy' + $ref: '#/components/schemas/v1.Ingress' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1.NetworkPolicy' + $ref: '#/components/schemas/v1.Ingress' application/cbor: schema: - $ref: '#/components/schemas/v1.NetworkPolicy' + $ref: '#/components/schemas/v1.Ingress' description: OK "201": content: application/json: schema: - $ref: '#/components/schemas/v1.NetworkPolicy' + $ref: '#/components/schemas/v1.Ingress' application/yaml: schema: - $ref: '#/components/schemas/v1.NetworkPolicy' + $ref: '#/components/schemas/v1.Ingress' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1.NetworkPolicy' + $ref: '#/components/schemas/v1.Ingress' application/cbor: schema: - $ref: '#/components/schemas/v1.NetworkPolicy' + $ref: '#/components/schemas/v1.Ingress' description: Created "202": content: application/json: schema: - $ref: '#/components/schemas/v1.NetworkPolicy' + $ref: '#/components/schemas/v1.Ingress' application/yaml: schema: - $ref: '#/components/schemas/v1.NetworkPolicy' + $ref: '#/components/schemas/v1.Ingress' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1.NetworkPolicy' + $ref: '#/components/schemas/v1.Ingress' application/cbor: schema: - $ref: '#/components/schemas/v1.NetworkPolicy' + $ref: '#/components/schemas/v1.Ingress' description: Accepted "401": content: {} @@ -55228,17 +55111,17 @@ paths: x-kubernetes-action: post x-kubernetes-group-version-kind: group: networking.k8s.io - kind: NetworkPolicy + kind: Ingress version: v1 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json - /apis/networking.k8s.io/v1/namespaces/{namespace}/networkpolicies/{name}: + /apis/networking.k8s.io/v1/namespaces/{namespace}/ingresses/{name}: delete: - description: delete a NetworkPolicy - operationId: deleteNamespacedNetworkPolicy + description: delete an Ingress + operationId: deleteNamespacedIngress parameters: - - description: name of the NetworkPolicy + - description: name of the Ingress in: path name: name required: true @@ -55352,16 +55235,16 @@ paths: x-kubernetes-action: delete x-kubernetes-group-version-kind: group: networking.k8s.io - kind: NetworkPolicy + kind: Ingress version: v1 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json get: - description: read the specified NetworkPolicy - operationId: readNamespacedNetworkPolicy + description: read the specified Ingress + operationId: readNamespacedIngress parameters: - - description: name of the NetworkPolicy + - description: name of the Ingress in: path name: name required: true @@ -55385,16 +55268,16 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1.NetworkPolicy' + $ref: '#/components/schemas/v1.Ingress' application/yaml: schema: - $ref: '#/components/schemas/v1.NetworkPolicy' + $ref: '#/components/schemas/v1.Ingress' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1.NetworkPolicy' + $ref: '#/components/schemas/v1.Ingress' application/cbor: schema: - $ref: '#/components/schemas/v1.NetworkPolicy' + $ref: '#/components/schemas/v1.Ingress' description: OK "401": content: {} @@ -55404,14 +55287,14 @@ paths: x-kubernetes-action: get x-kubernetes-group-version-kind: group: networking.k8s.io - kind: NetworkPolicy + kind: Ingress version: v1 x-accepts: application/json patch: - description: partially update the specified NetworkPolicy - operationId: patchNamespacedNetworkPolicy + description: partially update the specified Ingress + operationId: patchNamespacedIngress parameters: - - description: name of the NetworkPolicy + - description: name of the Ingress in: path name: name required: true @@ -55482,31 +55365,31 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1.NetworkPolicy' + $ref: '#/components/schemas/v1.Ingress' application/yaml: schema: - $ref: '#/components/schemas/v1.NetworkPolicy' + $ref: '#/components/schemas/v1.Ingress' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1.NetworkPolicy' + $ref: '#/components/schemas/v1.Ingress' application/cbor: schema: - $ref: '#/components/schemas/v1.NetworkPolicy' + $ref: '#/components/schemas/v1.Ingress' description: OK "201": content: application/json: schema: - $ref: '#/components/schemas/v1.NetworkPolicy' + $ref: '#/components/schemas/v1.Ingress' application/yaml: schema: - $ref: '#/components/schemas/v1.NetworkPolicy' + $ref: '#/components/schemas/v1.Ingress' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1.NetworkPolicy' + $ref: '#/components/schemas/v1.Ingress' application/cbor: schema: - $ref: '#/components/schemas/v1.NetworkPolicy' + $ref: '#/components/schemas/v1.Ingress' description: Created "401": content: {} @@ -55516,16 +55399,16 @@ paths: x-kubernetes-action: patch x-kubernetes-group-version-kind: group: networking.k8s.io - kind: NetworkPolicy + kind: Ingress version: v1 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json put: - description: replace the specified NetworkPolicy - operationId: replaceNamespacedNetworkPolicy + description: replace the specified Ingress + operationId: replaceNamespacedIngress parameters: - - description: name of the NetworkPolicy + - description: name of the Ingress in: path name: name required: true @@ -55580,38 +55463,38 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1.NetworkPolicy' + $ref: '#/components/schemas/v1.Ingress' required: true responses: "200": content: application/json: schema: - $ref: '#/components/schemas/v1.NetworkPolicy' + $ref: '#/components/schemas/v1.Ingress' application/yaml: schema: - $ref: '#/components/schemas/v1.NetworkPolicy' + $ref: '#/components/schemas/v1.Ingress' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1.NetworkPolicy' + $ref: '#/components/schemas/v1.Ingress' application/cbor: schema: - $ref: '#/components/schemas/v1.NetworkPolicy' + $ref: '#/components/schemas/v1.Ingress' description: OK "201": content: application/json: schema: - $ref: '#/components/schemas/v1.NetworkPolicy' + $ref: '#/components/schemas/v1.Ingress' application/yaml: schema: - $ref: '#/components/schemas/v1.NetworkPolicy' + $ref: '#/components/schemas/v1.Ingress' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1.NetworkPolicy' + $ref: '#/components/schemas/v1.Ingress' application/cbor: schema: - $ref: '#/components/schemas/v1.NetworkPolicy' + $ref: '#/components/schemas/v1.Ingress' description: Created "401": content: {} @@ -55621,54 +55504,78 @@ paths: x-kubernetes-action: put x-kubernetes-group-version-kind: group: networking.k8s.io - kind: NetworkPolicy + kind: Ingress version: v1 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json - /apis/networking.k8s.io/v1/networkpolicies: + /apis/networking.k8s.io/v1/namespaces/{namespace}/ingresses/{name}/status: get: - description: list or watch objects of kind NetworkPolicy - operationId: listNetworkPolicyForAllNamespaces + description: read status of the specified Ingress + operationId: readNamespacedIngressStatus parameters: - - description: allowWatchBookmarks requests watch events with type "BOOKMARK". - Servers that do not implement bookmarks may ignore this flag and bookmarks - are sent at the server's discretion. Clients should not assume bookmarks - are returned at any specific interval, nor may they assume the server will - send any BOOKMARK event during a session. If this is not a watch, this field - is ignored. - in: query - name: allowWatchBookmarks + - description: name of the Ingress + in: path + name: name + required: true schema: - type: boolean - - description: |- - The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". - - This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications. - in: query - name: continue + type: string + - description: object name and auth scope, such as for teams and projects + in: path + name: namespace + required: true schema: type: string - - description: A selector to restrict the list of returned objects by their - fields. Defaults to everything. + - description: If 'true', then the output is pretty printed. Defaults to 'false' + unless the user-agent indicates a browser or command-line HTTP tool (curl + and wget). in: query - name: fieldSelector + name: pretty schema: type: string - - description: A selector to restrict the list of returned objects by their - labels. Defaults to everything. - in: query - name: labelSelector + responses: + "200": + content: + application/json: + schema: + $ref: '#/components/schemas/v1.Ingress' + application/yaml: + schema: + $ref: '#/components/schemas/v1.Ingress' + application/vnd.kubernetes.protobuf: + schema: + $ref: '#/components/schemas/v1.Ingress' + application/cbor: + schema: + $ref: '#/components/schemas/v1.Ingress' + description: OK + "401": + content: {} + description: Unauthorized + tags: + - networking_v1 + x-kubernetes-action: get + x-kubernetes-group-version-kind: + group: networking.k8s.io + kind: Ingress + version: v1 + x-accepts: application/json + patch: + description: partially update status of the specified Ingress + operationId: patchNamespacedIngressStatus + parameters: + - description: name of the Ingress + in: path + name: name + required: true schema: type: string - - description: |- - limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. - - The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned. - in: query - name: limit + - description: object name and auth scope, such as for teams and projects + in: path + name: namespace + required: true schema: - type: integer + type: string - description: If 'true', then the output is pretty printed. Defaults to 'false' unless the user-agent indicates a browser or command-line HTTP tool (curl and wget). @@ -55676,93 +55583,213 @@ paths: name: pretty schema: type: string - - description: |- - resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. - - Defaults to unset + - description: 'When present, indicates that modifications should not be persisted. + An invalid or unrecognized dryRun directive will result in an error response + and no further processing of the request. Valid values are: - All: all dry + run stages will be processed' in: query - name: resourceVersion + name: dryRun schema: type: string - - description: |- - resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. - - Defaults to unset + - description: fieldManager is a name associated with the actor or entity that + is making these changes. The value must be less than or 128 characters long, + and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. + This field is required for apply requests (application/apply-patch) but + optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch). in: query - name: resourceVersionMatch + name: fieldManager schema: type: string - - description: |- - `sendInitialEvents=true` may be set together with `watch=true`. In that case, the watch stream will begin with synthetic events to produce the current state of objects in the collection. Once all such events have been sent, a synthetic "Bookmark" event will be sent. The bookmark will report the ResourceVersion (RV) corresponding to the set of objects, and be marked with `"k8s.io/initial-events-end": "true"` annotation. Afterwards, the watch stream will proceed as usual, sending watch events corresponding to changes (subsequent to the RV) to objects watched. - - When `sendInitialEvents` option is set, we require `resourceVersionMatch` option to also be set. The semantic of the watch request is as following: - `resourceVersionMatch` = NotOlderThan - is interpreted as "data at least as new as the provided `resourceVersion`" - and the bookmark event is send when the state is synced - to a `resourceVersion` at least as fresh as the one provided by the ListOptions. - If `resourceVersion` is unset, this is interpreted as "consistent read" and the - bookmark event is send when the state is synced at least to the moment - when request started being processed. - - `resourceVersionMatch` set to any other value or unset - Invalid error is returned. - - Defaults to true if `resourceVersion=""` or `resourceVersion="0"` (for backward compatibility reasons) and to false otherwise. + - description: 'fieldValidation instructs the server on how to handle objects + in the request (POST/PUT/PATCH) containing unknown or duplicate fields. + Valid values are: - Ignore: This will ignore any unknown fields that are + silently dropped from the object, and will ignore all but the last duplicate + field that the decoder encounters. This is the default behavior prior to + v1.23. - Warn: This will send a warning via the standard warning response + header for each unknown field that is dropped from the object, and for each + duplicate field that is encountered. The request will still succeed if there + are no other errors, and will only persist the last of any duplicate fields. + This is the default in v1.23+ - Strict: This will fail the request with + a BadRequest error if any unknown fields would be dropped from the object, + or if any duplicate fields are present. The error returned from the server + will contain all unknown and duplicate fields encountered.' in: query - name: sendInitialEvents + name: fieldValidation + schema: + type: string + - description: Force is going to "force" Apply requests. It means user will + re-acquire conflicting fields owned by other people. Force flag must be + unset for non-apply patch requests. + in: query + name: force schema: type: boolean - - description: Timeout for the list/watch call. This limits the duration of - the call, regardless of any activity or inactivity. + requestBody: + content: + application/json: + schema: + $ref: '#/components/schemas/v1.Patch' + required: true + responses: + "200": + content: + application/json: + schema: + $ref: '#/components/schemas/v1.Ingress' + application/yaml: + schema: + $ref: '#/components/schemas/v1.Ingress' + application/vnd.kubernetes.protobuf: + schema: + $ref: '#/components/schemas/v1.Ingress' + application/cbor: + schema: + $ref: '#/components/schemas/v1.Ingress' + description: OK + "201": + content: + application/json: + schema: + $ref: '#/components/schemas/v1.Ingress' + application/yaml: + schema: + $ref: '#/components/schemas/v1.Ingress' + application/vnd.kubernetes.protobuf: + schema: + $ref: '#/components/schemas/v1.Ingress' + application/cbor: + schema: + $ref: '#/components/schemas/v1.Ingress' + description: Created + "401": + content: {} + description: Unauthorized + tags: + - networking_v1 + x-kubernetes-action: patch + x-kubernetes-group-version-kind: + group: networking.k8s.io + kind: Ingress + version: v1 + x-codegen-request-body-name: body + x-contentType: application/json + x-accepts: application/json + put: + description: replace status of the specified Ingress + operationId: replaceNamespacedIngressStatus + parameters: + - description: name of the Ingress + in: path + name: name + required: true + schema: + type: string + - description: object name and auth scope, such as for teams and projects + in: path + name: namespace + required: true + schema: + type: string + - description: If 'true', then the output is pretty printed. Defaults to 'false' + unless the user-agent indicates a browser or command-line HTTP tool (curl + and wget). in: query - name: timeoutSeconds + name: pretty schema: - type: integer - - description: Watch for changes to the described resources and return them - as a stream of add, update, and remove notifications. Specify resourceVersion. + type: string + - description: 'When present, indicates that modifications should not be persisted. + An invalid or unrecognized dryRun directive will result in an error response + and no further processing of the request. Valid values are: - All: all dry + run stages will be processed' in: query - name: watch + name: dryRun schema: - type: boolean + type: string + - description: fieldManager is a name associated with the actor or entity that + is making these changes. The value must be less than or 128 characters long, + and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. + in: query + name: fieldManager + schema: + type: string + - description: 'fieldValidation instructs the server on how to handle objects + in the request (POST/PUT/PATCH) containing unknown or duplicate fields. + Valid values are: - Ignore: This will ignore any unknown fields that are + silently dropped from the object, and will ignore all but the last duplicate + field that the decoder encounters. This is the default behavior prior to + v1.23. - Warn: This will send a warning via the standard warning response + header for each unknown field that is dropped from the object, and for each + duplicate field that is encountered. The request will still succeed if there + are no other errors, and will only persist the last of any duplicate fields. + This is the default in v1.23+ - Strict: This will fail the request with + a BadRequest error if any unknown fields would be dropped from the object, + or if any duplicate fields are present. The error returned from the server + will contain all unknown and duplicate fields encountered.' + in: query + name: fieldValidation + schema: + type: string + requestBody: + content: + application/json: + schema: + $ref: '#/components/schemas/v1.Ingress' + required: true responses: "200": content: application/json: schema: - $ref: '#/components/schemas/v1.NetworkPolicyList' + $ref: '#/components/schemas/v1.Ingress' application/yaml: schema: - $ref: '#/components/schemas/v1.NetworkPolicyList' + $ref: '#/components/schemas/v1.Ingress' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1.NetworkPolicyList' + $ref: '#/components/schemas/v1.Ingress' application/cbor: schema: - $ref: '#/components/schemas/v1.NetworkPolicyList' - application/json;stream=watch: + $ref: '#/components/schemas/v1.Ingress' + description: OK + "201": + content: + application/json: schema: - $ref: '#/components/schemas/v1.NetworkPolicyList' - application/vnd.kubernetes.protobuf;stream=watch: + $ref: '#/components/schemas/v1.Ingress' + application/yaml: schema: - $ref: '#/components/schemas/v1.NetworkPolicyList' - application/cbor-seq: + $ref: '#/components/schemas/v1.Ingress' + application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1.NetworkPolicyList' - description: OK + $ref: '#/components/schemas/v1.Ingress' + application/cbor: + schema: + $ref: '#/components/schemas/v1.Ingress' + description: Created "401": content: {} description: Unauthorized tags: - networking_v1 - x-kubernetes-action: list + x-kubernetes-action: put x-kubernetes-group-version-kind: group: networking.k8s.io - kind: NetworkPolicy + kind: Ingress version: v1 + x-codegen-request-body-name: body + x-contentType: application/json x-accepts: application/json - /apis/networking.k8s.io/v1/servicecidrs: + /apis/networking.k8s.io/v1/namespaces/{namespace}/networkpolicies: delete: - description: delete collection of ServiceCIDR - operationId: deleteCollectionServiceCIDR + description: delete collection of NetworkPolicy + operationId: deleteCollectionNamespacedNetworkPolicy parameters: + - description: object name and auth scope, such as for teams and projects + in: path + name: namespace + required: true + schema: + type: string - description: If 'true', then the output is pretty printed. Defaults to 'false' unless the user-agent indicates a browser or command-line HTTP tool (curl and wget). @@ -55918,15 +55945,21 @@ paths: x-kubernetes-action: deletecollection x-kubernetes-group-version-kind: group: networking.k8s.io - kind: ServiceCIDR + kind: NetworkPolicy version: v1 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json get: - description: list or watch objects of kind ServiceCIDR - operationId: listServiceCIDR + description: list or watch objects of kind NetworkPolicy + operationId: listNamespacedNetworkPolicy parameters: + - description: object name and auth scope, such as for teams and projects + in: path + name: namespace + required: true + schema: + type: string - description: If 'true', then the output is pretty printed. Defaults to 'false' unless the user-agent indicates a browser or command-line HTTP tool (curl and wget). @@ -56023,25 +56056,25 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1.ServiceCIDRList' + $ref: '#/components/schemas/v1.NetworkPolicyList' application/yaml: schema: - $ref: '#/components/schemas/v1.ServiceCIDRList' + $ref: '#/components/schemas/v1.NetworkPolicyList' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1.ServiceCIDRList' + $ref: '#/components/schemas/v1.NetworkPolicyList' application/cbor: schema: - $ref: '#/components/schemas/v1.ServiceCIDRList' + $ref: '#/components/schemas/v1.NetworkPolicyList' application/json;stream=watch: schema: - $ref: '#/components/schemas/v1.ServiceCIDRList' + $ref: '#/components/schemas/v1.NetworkPolicyList' application/vnd.kubernetes.protobuf;stream=watch: schema: - $ref: '#/components/schemas/v1.ServiceCIDRList' + $ref: '#/components/schemas/v1.NetworkPolicyList' application/cbor-seq: schema: - $ref: '#/components/schemas/v1.ServiceCIDRList' + $ref: '#/components/schemas/v1.NetworkPolicyList' description: OK "401": content: {} @@ -56051,13 +56084,19 @@ paths: x-kubernetes-action: list x-kubernetes-group-version-kind: group: networking.k8s.io - kind: ServiceCIDR + kind: NetworkPolicy version: v1 x-accepts: application/json post: - description: create a ServiceCIDR - operationId: createServiceCIDR + description: create a NetworkPolicy + operationId: createNamespacedNetworkPolicy parameters: + - description: object name and auth scope, such as for teams and projects + in: path + name: namespace + required: true + schema: + type: string - description: If 'true', then the output is pretty printed. Defaults to 'false' unless the user-agent indicates a browser or command-line HTTP tool (curl and wget). @@ -56101,53 +56140,53 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1.ServiceCIDR' + $ref: '#/components/schemas/v1.NetworkPolicy' required: true responses: "200": content: application/json: schema: - $ref: '#/components/schemas/v1.ServiceCIDR' + $ref: '#/components/schemas/v1.NetworkPolicy' application/yaml: schema: - $ref: '#/components/schemas/v1.ServiceCIDR' + $ref: '#/components/schemas/v1.NetworkPolicy' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1.ServiceCIDR' + $ref: '#/components/schemas/v1.NetworkPolicy' application/cbor: schema: - $ref: '#/components/schemas/v1.ServiceCIDR' + $ref: '#/components/schemas/v1.NetworkPolicy' description: OK "201": content: application/json: schema: - $ref: '#/components/schemas/v1.ServiceCIDR' + $ref: '#/components/schemas/v1.NetworkPolicy' application/yaml: schema: - $ref: '#/components/schemas/v1.ServiceCIDR' + $ref: '#/components/schemas/v1.NetworkPolicy' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1.ServiceCIDR' + $ref: '#/components/schemas/v1.NetworkPolicy' application/cbor: schema: - $ref: '#/components/schemas/v1.ServiceCIDR' + $ref: '#/components/schemas/v1.NetworkPolicy' description: Created "202": content: application/json: schema: - $ref: '#/components/schemas/v1.ServiceCIDR' + $ref: '#/components/schemas/v1.NetworkPolicy' application/yaml: schema: - $ref: '#/components/schemas/v1.ServiceCIDR' + $ref: '#/components/schemas/v1.NetworkPolicy' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1.ServiceCIDR' + $ref: '#/components/schemas/v1.NetworkPolicy' application/cbor: schema: - $ref: '#/components/schemas/v1.ServiceCIDR' + $ref: '#/components/schemas/v1.NetworkPolicy' description: Accepted "401": content: {} @@ -56157,22 +56196,28 @@ paths: x-kubernetes-action: post x-kubernetes-group-version-kind: group: networking.k8s.io - kind: ServiceCIDR + kind: NetworkPolicy version: v1 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json - /apis/networking.k8s.io/v1/servicecidrs/{name}: + /apis/networking.k8s.io/v1/namespaces/{namespace}/networkpolicies/{name}: delete: - description: delete a ServiceCIDR - operationId: deleteServiceCIDR + description: delete a NetworkPolicy + operationId: deleteNamespacedNetworkPolicy parameters: - - description: name of the ServiceCIDR + - description: name of the NetworkPolicy in: path name: name required: true schema: type: string + - description: object name and auth scope, such as for teams and projects + in: path + name: namespace + required: true + schema: + type: string - description: If 'true', then the output is pretty printed. Defaults to 'false' unless the user-agent indicates a browser or command-line HTTP tool (curl and wget). @@ -56275,21 +56320,27 @@ paths: x-kubernetes-action: delete x-kubernetes-group-version-kind: group: networking.k8s.io - kind: ServiceCIDR + kind: NetworkPolicy version: v1 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json get: - description: read the specified ServiceCIDR - operationId: readServiceCIDR + description: read the specified NetworkPolicy + operationId: readNamespacedNetworkPolicy parameters: - - description: name of the ServiceCIDR + - description: name of the NetworkPolicy in: path name: name required: true schema: type: string + - description: object name and auth scope, such as for teams and projects + in: path + name: namespace + required: true + schema: + type: string - description: If 'true', then the output is pretty printed. Defaults to 'false' unless the user-agent indicates a browser or command-line HTTP tool (curl and wget). @@ -56302,16 +56353,16 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1.ServiceCIDR' + $ref: '#/components/schemas/v1.NetworkPolicy' application/yaml: schema: - $ref: '#/components/schemas/v1.ServiceCIDR' + $ref: '#/components/schemas/v1.NetworkPolicy' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1.ServiceCIDR' + $ref: '#/components/schemas/v1.NetworkPolicy' application/cbor: schema: - $ref: '#/components/schemas/v1.ServiceCIDR' + $ref: '#/components/schemas/v1.NetworkPolicy' description: OK "401": content: {} @@ -56321,19 +56372,25 @@ paths: x-kubernetes-action: get x-kubernetes-group-version-kind: group: networking.k8s.io - kind: ServiceCIDR + kind: NetworkPolicy version: v1 x-accepts: application/json patch: - description: partially update the specified ServiceCIDR - operationId: patchServiceCIDR + description: partially update the specified NetworkPolicy + operationId: patchNamespacedNetworkPolicy parameters: - - description: name of the ServiceCIDR + - description: name of the NetworkPolicy in: path name: name required: true schema: type: string + - description: object name and auth scope, such as for teams and projects + in: path + name: namespace + required: true + schema: + type: string - description: If 'true', then the output is pretty printed. Defaults to 'false' unless the user-agent indicates a browser or command-line HTTP tool (curl and wget). @@ -56393,31 +56450,31 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1.ServiceCIDR' + $ref: '#/components/schemas/v1.NetworkPolicy' application/yaml: schema: - $ref: '#/components/schemas/v1.ServiceCIDR' + $ref: '#/components/schemas/v1.NetworkPolicy' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1.ServiceCIDR' + $ref: '#/components/schemas/v1.NetworkPolicy' application/cbor: schema: - $ref: '#/components/schemas/v1.ServiceCIDR' + $ref: '#/components/schemas/v1.NetworkPolicy' description: OK "201": content: application/json: schema: - $ref: '#/components/schemas/v1.ServiceCIDR' + $ref: '#/components/schemas/v1.NetworkPolicy' application/yaml: schema: - $ref: '#/components/schemas/v1.ServiceCIDR' + $ref: '#/components/schemas/v1.NetworkPolicy' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1.ServiceCIDR' + $ref: '#/components/schemas/v1.NetworkPolicy' application/cbor: schema: - $ref: '#/components/schemas/v1.ServiceCIDR' + $ref: '#/components/schemas/v1.NetworkPolicy' description: Created "401": content: {} @@ -56427,21 +56484,27 @@ paths: x-kubernetes-action: patch x-kubernetes-group-version-kind: group: networking.k8s.io - kind: ServiceCIDR + kind: NetworkPolicy version: v1 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json put: - description: replace the specified ServiceCIDR - operationId: replaceServiceCIDR + description: replace the specified NetworkPolicy + operationId: replaceNamespacedNetworkPolicy parameters: - - description: name of the ServiceCIDR + - description: name of the NetworkPolicy in: path name: name required: true schema: type: string + - description: object name and auth scope, such as for teams and projects + in: path + name: namespace + required: true + schema: + type: string - description: If 'true', then the output is pretty printed. Defaults to 'false' unless the user-agent indicates a browser or command-line HTTP tool (curl and wget). @@ -56485,38 +56548,38 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1.ServiceCIDR' + $ref: '#/components/schemas/v1.NetworkPolicy' required: true responses: "200": content: application/json: schema: - $ref: '#/components/schemas/v1.ServiceCIDR' + $ref: '#/components/schemas/v1.NetworkPolicy' application/yaml: schema: - $ref: '#/components/schemas/v1.ServiceCIDR' + $ref: '#/components/schemas/v1.NetworkPolicy' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1.ServiceCIDR' + $ref: '#/components/schemas/v1.NetworkPolicy' application/cbor: schema: - $ref: '#/components/schemas/v1.ServiceCIDR' + $ref: '#/components/schemas/v1.NetworkPolicy' description: OK "201": content: application/json: schema: - $ref: '#/components/schemas/v1.ServiceCIDR' + $ref: '#/components/schemas/v1.NetworkPolicy' application/yaml: schema: - $ref: '#/components/schemas/v1.ServiceCIDR' + $ref: '#/components/schemas/v1.NetworkPolicy' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1.ServiceCIDR' + $ref: '#/components/schemas/v1.NetworkPolicy' application/cbor: schema: - $ref: '#/components/schemas/v1.ServiceCIDR' + $ref: '#/components/schemas/v1.NetworkPolicy' description: Created "401": content: {} @@ -56526,174 +56589,54 @@ paths: x-kubernetes-action: put x-kubernetes-group-version-kind: group: networking.k8s.io - kind: ServiceCIDR + kind: NetworkPolicy version: v1 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json - /apis/networking.k8s.io/v1/servicecidrs/{name}/status: + /apis/networking.k8s.io/v1/networkpolicies: get: - description: read status of the specified ServiceCIDR - operationId: readServiceCIDRStatus - parameters: - - description: name of the ServiceCIDR - in: path - name: name - required: true - schema: - type: string - - description: If 'true', then the output is pretty printed. Defaults to 'false' - unless the user-agent indicates a browser or command-line HTTP tool (curl - and wget). - in: query - name: pretty - schema: - type: string - responses: - "200": - content: - application/json: - schema: - $ref: '#/components/schemas/v1.ServiceCIDR' - application/yaml: - schema: - $ref: '#/components/schemas/v1.ServiceCIDR' - application/vnd.kubernetes.protobuf: - schema: - $ref: '#/components/schemas/v1.ServiceCIDR' - application/cbor: - schema: - $ref: '#/components/schemas/v1.ServiceCIDR' - description: OK - "401": - content: {} - description: Unauthorized - tags: - - networking_v1 - x-kubernetes-action: get - x-kubernetes-group-version-kind: - group: networking.k8s.io - kind: ServiceCIDR - version: v1 - x-accepts: application/json - patch: - description: partially update status of the specified ServiceCIDR - operationId: patchServiceCIDRStatus + description: list or watch objects of kind NetworkPolicy + operationId: listNetworkPolicyForAllNamespaces parameters: - - description: name of the ServiceCIDR - in: path - name: name - required: true - schema: - type: string - - description: If 'true', then the output is pretty printed. Defaults to 'false' - unless the user-agent indicates a browser or command-line HTTP tool (curl - and wget). + - description: allowWatchBookmarks requests watch events with type "BOOKMARK". + Servers that do not implement bookmarks may ignore this flag and bookmarks + are sent at the server's discretion. Clients should not assume bookmarks + are returned at any specific interval, nor may they assume the server will + send any BOOKMARK event during a session. If this is not a watch, this field + is ignored. in: query - name: pretty + name: allowWatchBookmarks schema: - type: string - - description: 'When present, indicates that modifications should not be persisted. - An invalid or unrecognized dryRun directive will result in an error response - and no further processing of the request. Valid values are: - All: all dry - run stages will be processed' + type: boolean + - description: |- + The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + + This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications. in: query - name: dryRun + name: continue schema: type: string - - description: fieldManager is a name associated with the actor or entity that - is making these changes. The value must be less than or 128 characters long, - and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. - This field is required for apply requests (application/apply-patch) but - optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch). + - description: A selector to restrict the list of returned objects by their + fields. Defaults to everything. in: query - name: fieldManager + name: fieldSelector schema: type: string - - description: 'fieldValidation instructs the server on how to handle objects - in the request (POST/PUT/PATCH) containing unknown or duplicate fields. - Valid values are: - Ignore: This will ignore any unknown fields that are - silently dropped from the object, and will ignore all but the last duplicate - field that the decoder encounters. This is the default behavior prior to - v1.23. - Warn: This will send a warning via the standard warning response - header for each unknown field that is dropped from the object, and for each - duplicate field that is encountered. The request will still succeed if there - are no other errors, and will only persist the last of any duplicate fields. - This is the default in v1.23+ - Strict: This will fail the request with - a BadRequest error if any unknown fields would be dropped from the object, - or if any duplicate fields are present. The error returned from the server - will contain all unknown and duplicate fields encountered.' + - description: A selector to restrict the list of returned objects by their + labels. Defaults to everything. in: query - name: fieldValidation + name: labelSelector schema: type: string - - description: Force is going to "force" Apply requests. It means user will - re-acquire conflicting fields owned by other people. Force flag must be - unset for non-apply patch requests. + - description: |- + limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + + The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned. in: query - name: force - schema: - type: boolean - requestBody: - content: - application/json: - schema: - $ref: '#/components/schemas/v1.Patch' - required: true - responses: - "200": - content: - application/json: - schema: - $ref: '#/components/schemas/v1.ServiceCIDR' - application/yaml: - schema: - $ref: '#/components/schemas/v1.ServiceCIDR' - application/vnd.kubernetes.protobuf: - schema: - $ref: '#/components/schemas/v1.ServiceCIDR' - application/cbor: - schema: - $ref: '#/components/schemas/v1.ServiceCIDR' - description: OK - "201": - content: - application/json: - schema: - $ref: '#/components/schemas/v1.ServiceCIDR' - application/yaml: - schema: - $ref: '#/components/schemas/v1.ServiceCIDR' - application/vnd.kubernetes.protobuf: - schema: - $ref: '#/components/schemas/v1.ServiceCIDR' - application/cbor: - schema: - $ref: '#/components/schemas/v1.ServiceCIDR' - description: Created - "401": - content: {} - description: Unauthorized - tags: - - networking_v1 - x-kubernetes-action: patch - x-kubernetes-group-version-kind: - group: networking.k8s.io - kind: ServiceCIDR - version: v1 - x-codegen-request-body-name: body - x-contentType: application/json - x-accepts: application/json - put: - description: replace status of the specified ServiceCIDR - operationId: replaceServiceCIDRStatus - parameters: - - description: name of the ServiceCIDR - in: path - name: name - required: true + name: limit schema: - type: string + type: integer - description: If 'true', then the output is pretty printed. Defaults to 'false' unless the user-agent indicates a browser or command-line HTTP tool (curl and wget). @@ -56701,130 +56644,92 @@ paths: name: pretty schema: type: string - - description: 'When present, indicates that modifications should not be persisted. - An invalid or unrecognized dryRun directive will result in an error response - and no further processing of the request. Valid values are: - All: all dry - run stages will be processed' + - description: |- + resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + + Defaults to unset in: query - name: dryRun + name: resourceVersion schema: type: string - - description: fieldManager is a name associated with the actor or entity that - is making these changes. The value must be less than or 128 characters long, - and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. + - description: |- + resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + + Defaults to unset in: query - name: fieldManager + name: resourceVersionMatch schema: type: string - - description: 'fieldValidation instructs the server on how to handle objects - in the request (POST/PUT/PATCH) containing unknown or duplicate fields. - Valid values are: - Ignore: This will ignore any unknown fields that are - silently dropped from the object, and will ignore all but the last duplicate - field that the decoder encounters. This is the default behavior prior to - v1.23. - Warn: This will send a warning via the standard warning response - header for each unknown field that is dropped from the object, and for each - duplicate field that is encountered. The request will still succeed if there - are no other errors, and will only persist the last of any duplicate fields. - This is the default in v1.23+ - Strict: This will fail the request with - a BadRequest error if any unknown fields would be dropped from the object, - or if any duplicate fields are present. The error returned from the server - will contain all unknown and duplicate fields encountered.' + - description: |- + `sendInitialEvents=true` may be set together with `watch=true`. In that case, the watch stream will begin with synthetic events to produce the current state of objects in the collection. Once all such events have been sent, a synthetic "Bookmark" event will be sent. The bookmark will report the ResourceVersion (RV) corresponding to the set of objects, and be marked with `"k8s.io/initial-events-end": "true"` annotation. Afterwards, the watch stream will proceed as usual, sending watch events corresponding to changes (subsequent to the RV) to objects watched. + + When `sendInitialEvents` option is set, we require `resourceVersionMatch` option to also be set. The semantic of the watch request is as following: - `resourceVersionMatch` = NotOlderThan + is interpreted as "data at least as new as the provided `resourceVersion`" + and the bookmark event is send when the state is synced + to a `resourceVersion` at least as fresh as the one provided by the ListOptions. + If `resourceVersion` is unset, this is interpreted as "consistent read" and the + bookmark event is send when the state is synced at least to the moment + when request started being processed. + - `resourceVersionMatch` set to any other value or unset + Invalid error is returned. + + Defaults to true if `resourceVersion=""` or `resourceVersion="0"` (for backward compatibility reasons) and to false otherwise. in: query - name: fieldValidation + name: sendInitialEvents schema: - type: string - requestBody: - content: - application/json: - schema: - $ref: '#/components/schemas/v1.ServiceCIDR' - required: true + type: boolean + - description: Timeout for the list/watch call. This limits the duration of + the call, regardless of any activity or inactivity. + in: query + name: timeoutSeconds + schema: + type: integer + - description: Watch for changes to the described resources and return them + as a stream of add, update, and remove notifications. Specify resourceVersion. + in: query + name: watch + schema: + type: boolean responses: "200": content: application/json: schema: - $ref: '#/components/schemas/v1.ServiceCIDR' + $ref: '#/components/schemas/v1.NetworkPolicyList' application/yaml: schema: - $ref: '#/components/schemas/v1.ServiceCIDR' + $ref: '#/components/schemas/v1.NetworkPolicyList' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1.ServiceCIDR' + $ref: '#/components/schemas/v1.NetworkPolicyList' application/cbor: schema: - $ref: '#/components/schemas/v1.ServiceCIDR' - description: OK - "201": - content: - application/json: - schema: - $ref: '#/components/schemas/v1.ServiceCIDR' - application/yaml: + $ref: '#/components/schemas/v1.NetworkPolicyList' + application/json;stream=watch: schema: - $ref: '#/components/schemas/v1.ServiceCIDR' - application/vnd.kubernetes.protobuf: + $ref: '#/components/schemas/v1.NetworkPolicyList' + application/vnd.kubernetes.protobuf;stream=watch: schema: - $ref: '#/components/schemas/v1.ServiceCIDR' - application/cbor: + $ref: '#/components/schemas/v1.NetworkPolicyList' + application/cbor-seq: schema: - $ref: '#/components/schemas/v1.ServiceCIDR' - description: Created + $ref: '#/components/schemas/v1.NetworkPolicyList' + description: OK "401": content: {} description: Unauthorized tags: - networking_v1 - x-kubernetes-action: put + x-kubernetes-action: list x-kubernetes-group-version-kind: group: networking.k8s.io - kind: ServiceCIDR + kind: NetworkPolicy version: v1 - x-codegen-request-body-name: body - x-contentType: application/json - x-accepts: application/json - /apis/networking.k8s.io/v1/watch/ingressclasses: {} - /apis/networking.k8s.io/v1/watch/ingressclasses/{name}: {} - /apis/networking.k8s.io/v1/watch/ingresses: {} - /apis/networking.k8s.io/v1/watch/ipaddresses: {} - /apis/networking.k8s.io/v1/watch/ipaddresses/{name}: {} - /apis/networking.k8s.io/v1/watch/namespaces/{namespace}/ingresses: {} - /apis/networking.k8s.io/v1/watch/namespaces/{namespace}/ingresses/{name}: {} - /apis/networking.k8s.io/v1/watch/namespaces/{namespace}/networkpolicies: {} - /apis/networking.k8s.io/v1/watch/namespaces/{namespace}/networkpolicies/{name}: {} - /apis/networking.k8s.io/v1/watch/networkpolicies: {} - /apis/networking.k8s.io/v1/watch/servicecidrs: {} - /apis/networking.k8s.io/v1/watch/servicecidrs/{name}: {} - /apis/networking.k8s.io/v1beta1/: - get: - description: get available resources - operationId: getAPIResources - responses: - "200": - content: - application/json: - schema: - $ref: '#/components/schemas/v1.APIResourceList' - application/yaml: - schema: - $ref: '#/components/schemas/v1.APIResourceList' - application/vnd.kubernetes.protobuf: - schema: - $ref: '#/components/schemas/v1.APIResourceList' - application/cbor: - schema: - $ref: '#/components/schemas/v1.APIResourceList' - description: OK - "401": - content: {} - description: Unauthorized - tags: - - networking_v1beta1 x-accepts: application/json - /apis/networking.k8s.io/v1beta1/ipaddresses: + /apis/networking.k8s.io/v1/servicecidrs: delete: - description: delete collection of IPAddress - operationId: deleteCollectionIPAddress + description: delete collection of ServiceCIDR + operationId: deleteCollectionServiceCIDR parameters: - description: If 'true', then the output is pretty printed. Defaults to 'false' unless the user-agent indicates a browser or command-line HTTP tool (curl @@ -56977,18 +56882,18 @@ paths: content: {} description: Unauthorized tags: - - networking_v1beta1 + - networking_v1 x-kubernetes-action: deletecollection x-kubernetes-group-version-kind: group: networking.k8s.io - kind: IPAddress - version: v1beta1 + kind: ServiceCIDR + version: v1 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json get: - description: list or watch objects of kind IPAddress - operationId: listIPAddress + description: list or watch objects of kind ServiceCIDR + operationId: listServiceCIDR parameters: - description: If 'true', then the output is pretty printed. Defaults to 'false' unless the user-agent indicates a browser or command-line HTTP tool (curl @@ -57086,40 +56991,40 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1beta1.IPAddressList' + $ref: '#/components/schemas/v1.ServiceCIDRList' application/yaml: schema: - $ref: '#/components/schemas/v1beta1.IPAddressList' + $ref: '#/components/schemas/v1.ServiceCIDRList' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1beta1.IPAddressList' + $ref: '#/components/schemas/v1.ServiceCIDRList' application/cbor: schema: - $ref: '#/components/schemas/v1beta1.IPAddressList' + $ref: '#/components/schemas/v1.ServiceCIDRList' application/json;stream=watch: schema: - $ref: '#/components/schemas/v1beta1.IPAddressList' + $ref: '#/components/schemas/v1.ServiceCIDRList' application/vnd.kubernetes.protobuf;stream=watch: schema: - $ref: '#/components/schemas/v1beta1.IPAddressList' + $ref: '#/components/schemas/v1.ServiceCIDRList' application/cbor-seq: schema: - $ref: '#/components/schemas/v1beta1.IPAddressList' + $ref: '#/components/schemas/v1.ServiceCIDRList' description: OK "401": content: {} description: Unauthorized tags: - - networking_v1beta1 + - networking_v1 x-kubernetes-action: list x-kubernetes-group-version-kind: group: networking.k8s.io - kind: IPAddress - version: v1beta1 + kind: ServiceCIDR + version: v1 x-accepts: application/json post: - description: create an IPAddress - operationId: createIPAddress + description: create a ServiceCIDR + operationId: createServiceCIDR parameters: - description: If 'true', then the output is pretty printed. Defaults to 'false' unless the user-agent indicates a browser or command-line HTTP tool (curl @@ -57164,73 +57069,73 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1beta1.IPAddress' + $ref: '#/components/schemas/v1.ServiceCIDR' required: true responses: "200": content: application/json: schema: - $ref: '#/components/schemas/v1beta1.IPAddress' + $ref: '#/components/schemas/v1.ServiceCIDR' application/yaml: schema: - $ref: '#/components/schemas/v1beta1.IPAddress' + $ref: '#/components/schemas/v1.ServiceCIDR' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1beta1.IPAddress' + $ref: '#/components/schemas/v1.ServiceCIDR' application/cbor: schema: - $ref: '#/components/schemas/v1beta1.IPAddress' + $ref: '#/components/schemas/v1.ServiceCIDR' description: OK "201": content: application/json: schema: - $ref: '#/components/schemas/v1beta1.IPAddress' + $ref: '#/components/schemas/v1.ServiceCIDR' application/yaml: schema: - $ref: '#/components/schemas/v1beta1.IPAddress' + $ref: '#/components/schemas/v1.ServiceCIDR' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1beta1.IPAddress' + $ref: '#/components/schemas/v1.ServiceCIDR' application/cbor: schema: - $ref: '#/components/schemas/v1beta1.IPAddress' + $ref: '#/components/schemas/v1.ServiceCIDR' description: Created "202": content: application/json: schema: - $ref: '#/components/schemas/v1beta1.IPAddress' + $ref: '#/components/schemas/v1.ServiceCIDR' application/yaml: schema: - $ref: '#/components/schemas/v1beta1.IPAddress' + $ref: '#/components/schemas/v1.ServiceCIDR' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1beta1.IPAddress' + $ref: '#/components/schemas/v1.ServiceCIDR' application/cbor: schema: - $ref: '#/components/schemas/v1beta1.IPAddress' + $ref: '#/components/schemas/v1.ServiceCIDR' description: Accepted "401": content: {} description: Unauthorized tags: - - networking_v1beta1 + - networking_v1 x-kubernetes-action: post x-kubernetes-group-version-kind: group: networking.k8s.io - kind: IPAddress - version: v1beta1 + kind: ServiceCIDR + version: v1 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json - /apis/networking.k8s.io/v1beta1/ipaddresses/{name}: + /apis/networking.k8s.io/v1/servicecidrs/{name}: delete: - description: delete an IPAddress - operationId: deleteIPAddress + description: delete a ServiceCIDR + operationId: deleteServiceCIDR parameters: - - description: name of the IPAddress + - description: name of the ServiceCIDR in: path name: name required: true @@ -57334,20 +57239,20 @@ paths: content: {} description: Unauthorized tags: - - networking_v1beta1 + - networking_v1 x-kubernetes-action: delete x-kubernetes-group-version-kind: group: networking.k8s.io - kind: IPAddress - version: v1beta1 + kind: ServiceCIDR + version: v1 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json get: - description: read the specified IPAddress - operationId: readIPAddress + description: read the specified ServiceCIDR + operationId: readServiceCIDR parameters: - - description: name of the IPAddress + - description: name of the ServiceCIDR in: path name: name required: true @@ -57365,33 +57270,33 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1beta1.IPAddress' + $ref: '#/components/schemas/v1.ServiceCIDR' application/yaml: schema: - $ref: '#/components/schemas/v1beta1.IPAddress' + $ref: '#/components/schemas/v1.ServiceCIDR' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1beta1.IPAddress' + $ref: '#/components/schemas/v1.ServiceCIDR' application/cbor: schema: - $ref: '#/components/schemas/v1beta1.IPAddress' + $ref: '#/components/schemas/v1.ServiceCIDR' description: OK "401": content: {} description: Unauthorized tags: - - networking_v1beta1 + - networking_v1 x-kubernetes-action: get x-kubernetes-group-version-kind: group: networking.k8s.io - kind: IPAddress - version: v1beta1 + kind: ServiceCIDR + version: v1 x-accepts: application/json patch: - description: partially update the specified IPAddress - operationId: patchIPAddress + description: partially update the specified ServiceCIDR + operationId: patchServiceCIDR parameters: - - description: name of the IPAddress + - description: name of the ServiceCIDR in: path name: name required: true @@ -57456,50 +57361,50 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1beta1.IPAddress' + $ref: '#/components/schemas/v1.ServiceCIDR' application/yaml: schema: - $ref: '#/components/schemas/v1beta1.IPAddress' + $ref: '#/components/schemas/v1.ServiceCIDR' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1beta1.IPAddress' + $ref: '#/components/schemas/v1.ServiceCIDR' application/cbor: schema: - $ref: '#/components/schemas/v1beta1.IPAddress' + $ref: '#/components/schemas/v1.ServiceCIDR' description: OK "201": content: application/json: schema: - $ref: '#/components/schemas/v1beta1.IPAddress' + $ref: '#/components/schemas/v1.ServiceCIDR' application/yaml: schema: - $ref: '#/components/schemas/v1beta1.IPAddress' + $ref: '#/components/schemas/v1.ServiceCIDR' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1beta1.IPAddress' + $ref: '#/components/schemas/v1.ServiceCIDR' application/cbor: schema: - $ref: '#/components/schemas/v1beta1.IPAddress' + $ref: '#/components/schemas/v1.ServiceCIDR' description: Created "401": content: {} description: Unauthorized tags: - - networking_v1beta1 + - networking_v1 x-kubernetes-action: patch x-kubernetes-group-version-kind: group: networking.k8s.io - kind: IPAddress - version: v1beta1 + kind: ServiceCIDR + version: v1 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json put: - description: replace the specified IPAddress - operationId: replaceIPAddress + description: replace the specified ServiceCIDR + operationId: replaceServiceCIDR parameters: - - description: name of the IPAddress + - description: name of the ServiceCIDR in: path name: name required: true @@ -57548,56 +57453,346 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1beta1.IPAddress' + $ref: '#/components/schemas/v1.ServiceCIDR' required: true responses: "200": content: application/json: schema: - $ref: '#/components/schemas/v1beta1.IPAddress' + $ref: '#/components/schemas/v1.ServiceCIDR' application/yaml: schema: - $ref: '#/components/schemas/v1beta1.IPAddress' + $ref: '#/components/schemas/v1.ServiceCIDR' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1beta1.IPAddress' + $ref: '#/components/schemas/v1.ServiceCIDR' application/cbor: schema: - $ref: '#/components/schemas/v1beta1.IPAddress' + $ref: '#/components/schemas/v1.ServiceCIDR' description: OK "201": content: application/json: schema: - $ref: '#/components/schemas/v1beta1.IPAddress' + $ref: '#/components/schemas/v1.ServiceCIDR' application/yaml: schema: - $ref: '#/components/schemas/v1beta1.IPAddress' + $ref: '#/components/schemas/v1.ServiceCIDR' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1beta1.IPAddress' + $ref: '#/components/schemas/v1.ServiceCIDR' application/cbor: schema: - $ref: '#/components/schemas/v1beta1.IPAddress' + $ref: '#/components/schemas/v1.ServiceCIDR' description: Created "401": content: {} description: Unauthorized tags: - - networking_v1beta1 + - networking_v1 x-kubernetes-action: put x-kubernetes-group-version-kind: group: networking.k8s.io - kind: IPAddress - version: v1beta1 + kind: ServiceCIDR + version: v1 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json - /apis/networking.k8s.io/v1beta1/servicecidrs: + /apis/networking.k8s.io/v1/servicecidrs/{name}/status: + get: + description: read status of the specified ServiceCIDR + operationId: readServiceCIDRStatus + parameters: + - description: name of the ServiceCIDR + in: path + name: name + required: true + schema: + type: string + - description: If 'true', then the output is pretty printed. Defaults to 'false' + unless the user-agent indicates a browser or command-line HTTP tool (curl + and wget). + in: query + name: pretty + schema: + type: string + responses: + "200": + content: + application/json: + schema: + $ref: '#/components/schemas/v1.ServiceCIDR' + application/yaml: + schema: + $ref: '#/components/schemas/v1.ServiceCIDR' + application/vnd.kubernetes.protobuf: + schema: + $ref: '#/components/schemas/v1.ServiceCIDR' + application/cbor: + schema: + $ref: '#/components/schemas/v1.ServiceCIDR' + description: OK + "401": + content: {} + description: Unauthorized + tags: + - networking_v1 + x-kubernetes-action: get + x-kubernetes-group-version-kind: + group: networking.k8s.io + kind: ServiceCIDR + version: v1 + x-accepts: application/json + patch: + description: partially update status of the specified ServiceCIDR + operationId: patchServiceCIDRStatus + parameters: + - description: name of the ServiceCIDR + in: path + name: name + required: true + schema: + type: string + - description: If 'true', then the output is pretty printed. Defaults to 'false' + unless the user-agent indicates a browser or command-line HTTP tool (curl + and wget). + in: query + name: pretty + schema: + type: string + - description: 'When present, indicates that modifications should not be persisted. + An invalid or unrecognized dryRun directive will result in an error response + and no further processing of the request. Valid values are: - All: all dry + run stages will be processed' + in: query + name: dryRun + schema: + type: string + - description: fieldManager is a name associated with the actor or entity that + is making these changes. The value must be less than or 128 characters long, + and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. + This field is required for apply requests (application/apply-patch) but + optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch). + in: query + name: fieldManager + schema: + type: string + - description: 'fieldValidation instructs the server on how to handle objects + in the request (POST/PUT/PATCH) containing unknown or duplicate fields. + Valid values are: - Ignore: This will ignore any unknown fields that are + silently dropped from the object, and will ignore all but the last duplicate + field that the decoder encounters. This is the default behavior prior to + v1.23. - Warn: This will send a warning via the standard warning response + header for each unknown field that is dropped from the object, and for each + duplicate field that is encountered. The request will still succeed if there + are no other errors, and will only persist the last of any duplicate fields. + This is the default in v1.23+ - Strict: This will fail the request with + a BadRequest error if any unknown fields would be dropped from the object, + or if any duplicate fields are present. The error returned from the server + will contain all unknown and duplicate fields encountered.' + in: query + name: fieldValidation + schema: + type: string + - description: Force is going to "force" Apply requests. It means user will + re-acquire conflicting fields owned by other people. Force flag must be + unset for non-apply patch requests. + in: query + name: force + schema: + type: boolean + requestBody: + content: + application/json: + schema: + $ref: '#/components/schemas/v1.Patch' + required: true + responses: + "200": + content: + application/json: + schema: + $ref: '#/components/schemas/v1.ServiceCIDR' + application/yaml: + schema: + $ref: '#/components/schemas/v1.ServiceCIDR' + application/vnd.kubernetes.protobuf: + schema: + $ref: '#/components/schemas/v1.ServiceCIDR' + application/cbor: + schema: + $ref: '#/components/schemas/v1.ServiceCIDR' + description: OK + "201": + content: + application/json: + schema: + $ref: '#/components/schemas/v1.ServiceCIDR' + application/yaml: + schema: + $ref: '#/components/schemas/v1.ServiceCIDR' + application/vnd.kubernetes.protobuf: + schema: + $ref: '#/components/schemas/v1.ServiceCIDR' + application/cbor: + schema: + $ref: '#/components/schemas/v1.ServiceCIDR' + description: Created + "401": + content: {} + description: Unauthorized + tags: + - networking_v1 + x-kubernetes-action: patch + x-kubernetes-group-version-kind: + group: networking.k8s.io + kind: ServiceCIDR + version: v1 + x-codegen-request-body-name: body + x-contentType: application/json + x-accepts: application/json + put: + description: replace status of the specified ServiceCIDR + operationId: replaceServiceCIDRStatus + parameters: + - description: name of the ServiceCIDR + in: path + name: name + required: true + schema: + type: string + - description: If 'true', then the output is pretty printed. Defaults to 'false' + unless the user-agent indicates a browser or command-line HTTP tool (curl + and wget). + in: query + name: pretty + schema: + type: string + - description: 'When present, indicates that modifications should not be persisted. + An invalid or unrecognized dryRun directive will result in an error response + and no further processing of the request. Valid values are: - All: all dry + run stages will be processed' + in: query + name: dryRun + schema: + type: string + - description: fieldManager is a name associated with the actor or entity that + is making these changes. The value must be less than or 128 characters long, + and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. + in: query + name: fieldManager + schema: + type: string + - description: 'fieldValidation instructs the server on how to handle objects + in the request (POST/PUT/PATCH) containing unknown or duplicate fields. + Valid values are: - Ignore: This will ignore any unknown fields that are + silently dropped from the object, and will ignore all but the last duplicate + field that the decoder encounters. This is the default behavior prior to + v1.23. - Warn: This will send a warning via the standard warning response + header for each unknown field that is dropped from the object, and for each + duplicate field that is encountered. The request will still succeed if there + are no other errors, and will only persist the last of any duplicate fields. + This is the default in v1.23+ - Strict: This will fail the request with + a BadRequest error if any unknown fields would be dropped from the object, + or if any duplicate fields are present. The error returned from the server + will contain all unknown and duplicate fields encountered.' + in: query + name: fieldValidation + schema: + type: string + requestBody: + content: + application/json: + schema: + $ref: '#/components/schemas/v1.ServiceCIDR' + required: true + responses: + "200": + content: + application/json: + schema: + $ref: '#/components/schemas/v1.ServiceCIDR' + application/yaml: + schema: + $ref: '#/components/schemas/v1.ServiceCIDR' + application/vnd.kubernetes.protobuf: + schema: + $ref: '#/components/schemas/v1.ServiceCIDR' + application/cbor: + schema: + $ref: '#/components/schemas/v1.ServiceCIDR' + description: OK + "201": + content: + application/json: + schema: + $ref: '#/components/schemas/v1.ServiceCIDR' + application/yaml: + schema: + $ref: '#/components/schemas/v1.ServiceCIDR' + application/vnd.kubernetes.protobuf: + schema: + $ref: '#/components/schemas/v1.ServiceCIDR' + application/cbor: + schema: + $ref: '#/components/schemas/v1.ServiceCIDR' + description: Created + "401": + content: {} + description: Unauthorized + tags: + - networking_v1 + x-kubernetes-action: put + x-kubernetes-group-version-kind: + group: networking.k8s.io + kind: ServiceCIDR + version: v1 + x-codegen-request-body-name: body + x-contentType: application/json + x-accepts: application/json + /apis/networking.k8s.io/v1/watch/ingressclasses: {} + /apis/networking.k8s.io/v1/watch/ingressclasses/{name}: {} + /apis/networking.k8s.io/v1/watch/ingresses: {} + /apis/networking.k8s.io/v1/watch/ipaddresses: {} + /apis/networking.k8s.io/v1/watch/ipaddresses/{name}: {} + /apis/networking.k8s.io/v1/watch/namespaces/{namespace}/ingresses: {} + /apis/networking.k8s.io/v1/watch/namespaces/{namespace}/ingresses/{name}: {} + /apis/networking.k8s.io/v1/watch/namespaces/{namespace}/networkpolicies: {} + /apis/networking.k8s.io/v1/watch/namespaces/{namespace}/networkpolicies/{name}: {} + /apis/networking.k8s.io/v1/watch/networkpolicies: {} + /apis/networking.k8s.io/v1/watch/servicecidrs: {} + /apis/networking.k8s.io/v1/watch/servicecidrs/{name}: {} + /apis/networking.k8s.io/v1beta1/: + get: + description: get available resources + operationId: getAPIResources + responses: + "200": + content: + application/json: + schema: + $ref: '#/components/schemas/v1.APIResourceList' + application/yaml: + schema: + $ref: '#/components/schemas/v1.APIResourceList' + application/vnd.kubernetes.protobuf: + schema: + $ref: '#/components/schemas/v1.APIResourceList' + application/cbor: + schema: + $ref: '#/components/schemas/v1.APIResourceList' + description: OK + "401": + content: {} + description: Unauthorized + tags: + - networking_v1beta1 + x-accepts: application/json + /apis/networking.k8s.io/v1beta1/ipaddresses: delete: - description: delete collection of ServiceCIDR - operationId: deleteCollectionServiceCIDR + description: delete collection of IPAddress + operationId: deleteCollectionIPAddress parameters: - description: If 'true', then the output is pretty printed. Defaults to 'false' unless the user-agent indicates a browser or command-line HTTP tool (curl @@ -57754,14 +57949,14 @@ paths: x-kubernetes-action: deletecollection x-kubernetes-group-version-kind: group: networking.k8s.io - kind: ServiceCIDR + kind: IPAddress version: v1beta1 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json get: - description: list or watch objects of kind ServiceCIDR - operationId: listServiceCIDR + description: list or watch objects of kind IPAddress + operationId: listIPAddress parameters: - description: If 'true', then the output is pretty printed. Defaults to 'false' unless the user-agent indicates a browser or command-line HTTP tool (curl @@ -57859,25 +58054,25 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1beta1.ServiceCIDRList' + $ref: '#/components/schemas/v1beta1.IPAddressList' application/yaml: schema: - $ref: '#/components/schemas/v1beta1.ServiceCIDRList' + $ref: '#/components/schemas/v1beta1.IPAddressList' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1beta1.ServiceCIDRList' + $ref: '#/components/schemas/v1beta1.IPAddressList' application/cbor: schema: - $ref: '#/components/schemas/v1beta1.ServiceCIDRList' + $ref: '#/components/schemas/v1beta1.IPAddressList' application/json;stream=watch: schema: - $ref: '#/components/schemas/v1beta1.ServiceCIDRList' + $ref: '#/components/schemas/v1beta1.IPAddressList' application/vnd.kubernetes.protobuf;stream=watch: schema: - $ref: '#/components/schemas/v1beta1.ServiceCIDRList' + $ref: '#/components/schemas/v1beta1.IPAddressList' application/cbor-seq: schema: - $ref: '#/components/schemas/v1beta1.ServiceCIDRList' + $ref: '#/components/schemas/v1beta1.IPAddressList' description: OK "401": content: {} @@ -57887,12 +58082,12 @@ paths: x-kubernetes-action: list x-kubernetes-group-version-kind: group: networking.k8s.io - kind: ServiceCIDR + kind: IPAddress version: v1beta1 x-accepts: application/json post: - description: create a ServiceCIDR - operationId: createServiceCIDR + description: create an IPAddress + operationId: createIPAddress parameters: - description: If 'true', then the output is pretty printed. Defaults to 'false' unless the user-agent indicates a browser or command-line HTTP tool (curl @@ -57937,53 +58132,53 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1beta1.ServiceCIDR' + $ref: '#/components/schemas/v1beta1.IPAddress' required: true responses: "200": content: application/json: schema: - $ref: '#/components/schemas/v1beta1.ServiceCIDR' + $ref: '#/components/schemas/v1beta1.IPAddress' application/yaml: schema: - $ref: '#/components/schemas/v1beta1.ServiceCIDR' + $ref: '#/components/schemas/v1beta1.IPAddress' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1beta1.ServiceCIDR' + $ref: '#/components/schemas/v1beta1.IPAddress' application/cbor: schema: - $ref: '#/components/schemas/v1beta1.ServiceCIDR' + $ref: '#/components/schemas/v1beta1.IPAddress' description: OK "201": content: application/json: schema: - $ref: '#/components/schemas/v1beta1.ServiceCIDR' + $ref: '#/components/schemas/v1beta1.IPAddress' application/yaml: schema: - $ref: '#/components/schemas/v1beta1.ServiceCIDR' + $ref: '#/components/schemas/v1beta1.IPAddress' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1beta1.ServiceCIDR' + $ref: '#/components/schemas/v1beta1.IPAddress' application/cbor: schema: - $ref: '#/components/schemas/v1beta1.ServiceCIDR' + $ref: '#/components/schemas/v1beta1.IPAddress' description: Created "202": content: application/json: schema: - $ref: '#/components/schemas/v1beta1.ServiceCIDR' + $ref: '#/components/schemas/v1beta1.IPAddress' application/yaml: schema: - $ref: '#/components/schemas/v1beta1.ServiceCIDR' + $ref: '#/components/schemas/v1beta1.IPAddress' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1beta1.ServiceCIDR' + $ref: '#/components/schemas/v1beta1.IPAddress' application/cbor: schema: - $ref: '#/components/schemas/v1beta1.ServiceCIDR' + $ref: '#/components/schemas/v1beta1.IPAddress' description: Accepted "401": content: {} @@ -57993,17 +58188,17 @@ paths: x-kubernetes-action: post x-kubernetes-group-version-kind: group: networking.k8s.io - kind: ServiceCIDR + kind: IPAddress version: v1beta1 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json - /apis/networking.k8s.io/v1beta1/servicecidrs/{name}: + /apis/networking.k8s.io/v1beta1/ipaddresses/{name}: delete: - description: delete a ServiceCIDR - operationId: deleteServiceCIDR + description: delete an IPAddress + operationId: deleteIPAddress parameters: - - description: name of the ServiceCIDR + - description: name of the IPAddress in: path name: name required: true @@ -58111,268 +58306,16 @@ paths: x-kubernetes-action: delete x-kubernetes-group-version-kind: group: networking.k8s.io - kind: ServiceCIDR - version: v1beta1 - x-codegen-request-body-name: body - x-contentType: application/json - x-accepts: application/json - get: - description: read the specified ServiceCIDR - operationId: readServiceCIDR - parameters: - - description: name of the ServiceCIDR - in: path - name: name - required: true - schema: - type: string - - description: If 'true', then the output is pretty printed. Defaults to 'false' - unless the user-agent indicates a browser or command-line HTTP tool (curl - and wget). - in: query - name: pretty - schema: - type: string - responses: - "200": - content: - application/json: - schema: - $ref: '#/components/schemas/v1beta1.ServiceCIDR' - application/yaml: - schema: - $ref: '#/components/schemas/v1beta1.ServiceCIDR' - application/vnd.kubernetes.protobuf: - schema: - $ref: '#/components/schemas/v1beta1.ServiceCIDR' - application/cbor: - schema: - $ref: '#/components/schemas/v1beta1.ServiceCIDR' - description: OK - "401": - content: {} - description: Unauthorized - tags: - - networking_v1beta1 - x-kubernetes-action: get - x-kubernetes-group-version-kind: - group: networking.k8s.io - kind: ServiceCIDR - version: v1beta1 - x-accepts: application/json - patch: - description: partially update the specified ServiceCIDR - operationId: patchServiceCIDR - parameters: - - description: name of the ServiceCIDR - in: path - name: name - required: true - schema: - type: string - - description: If 'true', then the output is pretty printed. Defaults to 'false' - unless the user-agent indicates a browser or command-line HTTP tool (curl - and wget). - in: query - name: pretty - schema: - type: string - - description: 'When present, indicates that modifications should not be persisted. - An invalid or unrecognized dryRun directive will result in an error response - and no further processing of the request. Valid values are: - All: all dry - run stages will be processed' - in: query - name: dryRun - schema: - type: string - - description: fieldManager is a name associated with the actor or entity that - is making these changes. The value must be less than or 128 characters long, - and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. - This field is required for apply requests (application/apply-patch) but - optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch). - in: query - name: fieldManager - schema: - type: string - - description: 'fieldValidation instructs the server on how to handle objects - in the request (POST/PUT/PATCH) containing unknown or duplicate fields. - Valid values are: - Ignore: This will ignore any unknown fields that are - silently dropped from the object, and will ignore all but the last duplicate - field that the decoder encounters. This is the default behavior prior to - v1.23. - Warn: This will send a warning via the standard warning response - header for each unknown field that is dropped from the object, and for each - duplicate field that is encountered. The request will still succeed if there - are no other errors, and will only persist the last of any duplicate fields. - This is the default in v1.23+ - Strict: This will fail the request with - a BadRequest error if any unknown fields would be dropped from the object, - or if any duplicate fields are present. The error returned from the server - will contain all unknown and duplicate fields encountered.' - in: query - name: fieldValidation - schema: - type: string - - description: Force is going to "force" Apply requests. It means user will - re-acquire conflicting fields owned by other people. Force flag must be - unset for non-apply patch requests. - in: query - name: force - schema: - type: boolean - requestBody: - content: - application/json: - schema: - $ref: '#/components/schemas/v1.Patch' - required: true - responses: - "200": - content: - application/json: - schema: - $ref: '#/components/schemas/v1beta1.ServiceCIDR' - application/yaml: - schema: - $ref: '#/components/schemas/v1beta1.ServiceCIDR' - application/vnd.kubernetes.protobuf: - schema: - $ref: '#/components/schemas/v1beta1.ServiceCIDR' - application/cbor: - schema: - $ref: '#/components/schemas/v1beta1.ServiceCIDR' - description: OK - "201": - content: - application/json: - schema: - $ref: '#/components/schemas/v1beta1.ServiceCIDR' - application/yaml: - schema: - $ref: '#/components/schemas/v1beta1.ServiceCIDR' - application/vnd.kubernetes.protobuf: - schema: - $ref: '#/components/schemas/v1beta1.ServiceCIDR' - application/cbor: - schema: - $ref: '#/components/schemas/v1beta1.ServiceCIDR' - description: Created - "401": - content: {} - description: Unauthorized - tags: - - networking_v1beta1 - x-kubernetes-action: patch - x-kubernetes-group-version-kind: - group: networking.k8s.io - kind: ServiceCIDR - version: v1beta1 - x-codegen-request-body-name: body - x-contentType: application/json - x-accepts: application/json - put: - description: replace the specified ServiceCIDR - operationId: replaceServiceCIDR - parameters: - - description: name of the ServiceCIDR - in: path - name: name - required: true - schema: - type: string - - description: If 'true', then the output is pretty printed. Defaults to 'false' - unless the user-agent indicates a browser or command-line HTTP tool (curl - and wget). - in: query - name: pretty - schema: - type: string - - description: 'When present, indicates that modifications should not be persisted. - An invalid or unrecognized dryRun directive will result in an error response - and no further processing of the request. Valid values are: - All: all dry - run stages will be processed' - in: query - name: dryRun - schema: - type: string - - description: fieldManager is a name associated with the actor or entity that - is making these changes. The value must be less than or 128 characters long, - and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. - in: query - name: fieldManager - schema: - type: string - - description: 'fieldValidation instructs the server on how to handle objects - in the request (POST/PUT/PATCH) containing unknown or duplicate fields. - Valid values are: - Ignore: This will ignore any unknown fields that are - silently dropped from the object, and will ignore all but the last duplicate - field that the decoder encounters. This is the default behavior prior to - v1.23. - Warn: This will send a warning via the standard warning response - header for each unknown field that is dropped from the object, and for each - duplicate field that is encountered. The request will still succeed if there - are no other errors, and will only persist the last of any duplicate fields. - This is the default in v1.23+ - Strict: This will fail the request with - a BadRequest error if any unknown fields would be dropped from the object, - or if any duplicate fields are present. The error returned from the server - will contain all unknown and duplicate fields encountered.' - in: query - name: fieldValidation - schema: - type: string - requestBody: - content: - application/json: - schema: - $ref: '#/components/schemas/v1beta1.ServiceCIDR' - required: true - responses: - "200": - content: - application/json: - schema: - $ref: '#/components/schemas/v1beta1.ServiceCIDR' - application/yaml: - schema: - $ref: '#/components/schemas/v1beta1.ServiceCIDR' - application/vnd.kubernetes.protobuf: - schema: - $ref: '#/components/schemas/v1beta1.ServiceCIDR' - application/cbor: - schema: - $ref: '#/components/schemas/v1beta1.ServiceCIDR' - description: OK - "201": - content: - application/json: - schema: - $ref: '#/components/schemas/v1beta1.ServiceCIDR' - application/yaml: - schema: - $ref: '#/components/schemas/v1beta1.ServiceCIDR' - application/vnd.kubernetes.protobuf: - schema: - $ref: '#/components/schemas/v1beta1.ServiceCIDR' - application/cbor: - schema: - $ref: '#/components/schemas/v1beta1.ServiceCIDR' - description: Created - "401": - content: {} - description: Unauthorized - tags: - - networking_v1beta1 - x-kubernetes-action: put - x-kubernetes-group-version-kind: - group: networking.k8s.io - kind: ServiceCIDR + kind: IPAddress version: v1beta1 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json - /apis/networking.k8s.io/v1beta1/servicecidrs/{name}/status: get: - description: read status of the specified ServiceCIDR - operationId: readServiceCIDRStatus + description: read the specified IPAddress + operationId: readIPAddress parameters: - - description: name of the ServiceCIDR + - description: name of the IPAddress in: path name: name required: true @@ -58390,16 +58333,16 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1beta1.ServiceCIDR' + $ref: '#/components/schemas/v1beta1.IPAddress' application/yaml: schema: - $ref: '#/components/schemas/v1beta1.ServiceCIDR' + $ref: '#/components/schemas/v1beta1.IPAddress' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1beta1.ServiceCIDR' + $ref: '#/components/schemas/v1beta1.IPAddress' application/cbor: schema: - $ref: '#/components/schemas/v1beta1.ServiceCIDR' + $ref: '#/components/schemas/v1beta1.IPAddress' description: OK "401": content: {} @@ -58409,14 +58352,14 @@ paths: x-kubernetes-action: get x-kubernetes-group-version-kind: group: networking.k8s.io - kind: ServiceCIDR + kind: IPAddress version: v1beta1 x-accepts: application/json patch: - description: partially update status of the specified ServiceCIDR - operationId: patchServiceCIDRStatus + description: partially update the specified IPAddress + operationId: patchIPAddress parameters: - - description: name of the ServiceCIDR + - description: name of the IPAddress in: path name: name required: true @@ -58481,31 +58424,31 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1beta1.ServiceCIDR' + $ref: '#/components/schemas/v1beta1.IPAddress' application/yaml: schema: - $ref: '#/components/schemas/v1beta1.ServiceCIDR' + $ref: '#/components/schemas/v1beta1.IPAddress' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1beta1.ServiceCIDR' + $ref: '#/components/schemas/v1beta1.IPAddress' application/cbor: schema: - $ref: '#/components/schemas/v1beta1.ServiceCIDR' + $ref: '#/components/schemas/v1beta1.IPAddress' description: OK "201": content: application/json: schema: - $ref: '#/components/schemas/v1beta1.ServiceCIDR' + $ref: '#/components/schemas/v1beta1.IPAddress' application/yaml: schema: - $ref: '#/components/schemas/v1beta1.ServiceCIDR' + $ref: '#/components/schemas/v1beta1.IPAddress' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1beta1.ServiceCIDR' + $ref: '#/components/schemas/v1beta1.IPAddress' application/cbor: schema: - $ref: '#/components/schemas/v1beta1.ServiceCIDR' + $ref: '#/components/schemas/v1beta1.IPAddress' description: Created "401": content: {} @@ -58515,16 +58458,16 @@ paths: x-kubernetes-action: patch x-kubernetes-group-version-kind: group: networking.k8s.io - kind: ServiceCIDR + kind: IPAddress version: v1beta1 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json put: - description: replace status of the specified ServiceCIDR - operationId: replaceServiceCIDRStatus + description: replace the specified IPAddress + operationId: replaceIPAddress parameters: - - description: name of the ServiceCIDR + - description: name of the IPAddress in: path name: name required: true @@ -58573,38 +58516,38 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1beta1.ServiceCIDR' + $ref: '#/components/schemas/v1beta1.IPAddress' required: true responses: "200": content: application/json: schema: - $ref: '#/components/schemas/v1beta1.ServiceCIDR' + $ref: '#/components/schemas/v1beta1.IPAddress' application/yaml: schema: - $ref: '#/components/schemas/v1beta1.ServiceCIDR' + $ref: '#/components/schemas/v1beta1.IPAddress' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1beta1.ServiceCIDR' + $ref: '#/components/schemas/v1beta1.IPAddress' application/cbor: schema: - $ref: '#/components/schemas/v1beta1.ServiceCIDR' + $ref: '#/components/schemas/v1beta1.IPAddress' description: OK "201": content: application/json: schema: - $ref: '#/components/schemas/v1beta1.ServiceCIDR' + $ref: '#/components/schemas/v1beta1.IPAddress' application/yaml: schema: - $ref: '#/components/schemas/v1beta1.ServiceCIDR' + $ref: '#/components/schemas/v1beta1.IPAddress' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1beta1.ServiceCIDR' + $ref: '#/components/schemas/v1beta1.IPAddress' application/cbor: schema: - $ref: '#/components/schemas/v1beta1.ServiceCIDR' + $ref: '#/components/schemas/v1beta1.IPAddress' description: Created "401": content: {} @@ -58614,68 +58557,15 @@ paths: x-kubernetes-action: put x-kubernetes-group-version-kind: group: networking.k8s.io - kind: ServiceCIDR + kind: IPAddress version: v1beta1 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json - /apis/networking.k8s.io/v1beta1/watch/ipaddresses: {} - /apis/networking.k8s.io/v1beta1/watch/ipaddresses/{name}: {} - /apis/networking.k8s.io/v1beta1/watch/servicecidrs: {} - /apis/networking.k8s.io/v1beta1/watch/servicecidrs/{name}: {} - /apis/node.k8s.io/: - get: - description: get information of a group - operationId: getAPIGroup - responses: - "200": - content: - application/json: - schema: - $ref: '#/components/schemas/v1.APIGroup' - application/yaml: - schema: - $ref: '#/components/schemas/v1.APIGroup' - application/vnd.kubernetes.protobuf: - schema: - $ref: '#/components/schemas/v1.APIGroup' - description: OK - "401": - content: {} - description: Unauthorized - tags: - - node - x-accepts: application/json - /apis/node.k8s.io/v1/: - get: - description: get available resources - operationId: getAPIResources - responses: - "200": - content: - application/json: - schema: - $ref: '#/components/schemas/v1.APIResourceList' - application/yaml: - schema: - $ref: '#/components/schemas/v1.APIResourceList' - application/vnd.kubernetes.protobuf: - schema: - $ref: '#/components/schemas/v1.APIResourceList' - application/cbor: - schema: - $ref: '#/components/schemas/v1.APIResourceList' - description: OK - "401": - content: {} - description: Unauthorized - tags: - - node_v1 - x-accepts: application/json - /apis/node.k8s.io/v1/runtimeclasses: + /apis/networking.k8s.io/v1beta1/servicecidrs: delete: - description: delete collection of RuntimeClass - operationId: deleteCollectionRuntimeClass + description: delete collection of ServiceCIDR + operationId: deleteCollectionServiceCIDR parameters: - description: If 'true', then the output is pretty printed. Defaults to 'false' unless the user-agent indicates a browser or command-line HTTP tool (curl @@ -58828,18 +58718,18 @@ paths: content: {} description: Unauthorized tags: - - node_v1 + - networking_v1beta1 x-kubernetes-action: deletecollection x-kubernetes-group-version-kind: - group: node.k8s.io - kind: RuntimeClass - version: v1 + group: networking.k8s.io + kind: ServiceCIDR + version: v1beta1 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json get: - description: list or watch objects of kind RuntimeClass - operationId: listRuntimeClass + description: list or watch objects of kind ServiceCIDR + operationId: listServiceCIDR parameters: - description: If 'true', then the output is pretty printed. Defaults to 'false' unless the user-agent indicates a browser or command-line HTTP tool (curl @@ -58937,40 +58827,40 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1.RuntimeClassList' + $ref: '#/components/schemas/v1beta1.ServiceCIDRList' application/yaml: schema: - $ref: '#/components/schemas/v1.RuntimeClassList' + $ref: '#/components/schemas/v1beta1.ServiceCIDRList' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1.RuntimeClassList' + $ref: '#/components/schemas/v1beta1.ServiceCIDRList' application/cbor: schema: - $ref: '#/components/schemas/v1.RuntimeClassList' + $ref: '#/components/schemas/v1beta1.ServiceCIDRList' application/json;stream=watch: schema: - $ref: '#/components/schemas/v1.RuntimeClassList' + $ref: '#/components/schemas/v1beta1.ServiceCIDRList' application/vnd.kubernetes.protobuf;stream=watch: schema: - $ref: '#/components/schemas/v1.RuntimeClassList' + $ref: '#/components/schemas/v1beta1.ServiceCIDRList' application/cbor-seq: schema: - $ref: '#/components/schemas/v1.RuntimeClassList' + $ref: '#/components/schemas/v1beta1.ServiceCIDRList' description: OK "401": content: {} description: Unauthorized tags: - - node_v1 + - networking_v1beta1 x-kubernetes-action: list x-kubernetes-group-version-kind: - group: node.k8s.io - kind: RuntimeClass - version: v1 + group: networking.k8s.io + kind: ServiceCIDR + version: v1beta1 x-accepts: application/json post: - description: create a RuntimeClass - operationId: createRuntimeClass + description: create a ServiceCIDR + operationId: createServiceCIDR parameters: - description: If 'true', then the output is pretty printed. Defaults to 'false' unless the user-agent indicates a browser or command-line HTTP tool (curl @@ -59015,73 +58905,73 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1.RuntimeClass' + $ref: '#/components/schemas/v1beta1.ServiceCIDR' required: true responses: "200": content: application/json: schema: - $ref: '#/components/schemas/v1.RuntimeClass' + $ref: '#/components/schemas/v1beta1.ServiceCIDR' application/yaml: schema: - $ref: '#/components/schemas/v1.RuntimeClass' + $ref: '#/components/schemas/v1beta1.ServiceCIDR' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1.RuntimeClass' + $ref: '#/components/schemas/v1beta1.ServiceCIDR' application/cbor: schema: - $ref: '#/components/schemas/v1.RuntimeClass' + $ref: '#/components/schemas/v1beta1.ServiceCIDR' description: OK "201": content: application/json: schema: - $ref: '#/components/schemas/v1.RuntimeClass' + $ref: '#/components/schemas/v1beta1.ServiceCIDR' application/yaml: schema: - $ref: '#/components/schemas/v1.RuntimeClass' + $ref: '#/components/schemas/v1beta1.ServiceCIDR' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1.RuntimeClass' + $ref: '#/components/schemas/v1beta1.ServiceCIDR' application/cbor: schema: - $ref: '#/components/schemas/v1.RuntimeClass' + $ref: '#/components/schemas/v1beta1.ServiceCIDR' description: Created "202": content: application/json: schema: - $ref: '#/components/schemas/v1.RuntimeClass' + $ref: '#/components/schemas/v1beta1.ServiceCIDR' application/yaml: schema: - $ref: '#/components/schemas/v1.RuntimeClass' + $ref: '#/components/schemas/v1beta1.ServiceCIDR' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1.RuntimeClass' + $ref: '#/components/schemas/v1beta1.ServiceCIDR' application/cbor: schema: - $ref: '#/components/schemas/v1.RuntimeClass' + $ref: '#/components/schemas/v1beta1.ServiceCIDR' description: Accepted "401": content: {} description: Unauthorized tags: - - node_v1 + - networking_v1beta1 x-kubernetes-action: post x-kubernetes-group-version-kind: - group: node.k8s.io - kind: RuntimeClass - version: v1 + group: networking.k8s.io + kind: ServiceCIDR + version: v1beta1 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json - /apis/node.k8s.io/v1/runtimeclasses/{name}: + /apis/networking.k8s.io/v1beta1/servicecidrs/{name}: delete: - description: delete a RuntimeClass - operationId: deleteRuntimeClass + description: delete a ServiceCIDR + operationId: deleteServiceCIDR parameters: - - description: name of the RuntimeClass + - description: name of the ServiceCIDR in: path name: name required: true @@ -59185,20 +59075,20 @@ paths: content: {} description: Unauthorized tags: - - node_v1 + - networking_v1beta1 x-kubernetes-action: delete x-kubernetes-group-version-kind: - group: node.k8s.io - kind: RuntimeClass - version: v1 + group: networking.k8s.io + kind: ServiceCIDR + version: v1beta1 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json get: - description: read the specified RuntimeClass - operationId: readRuntimeClass + description: read the specified ServiceCIDR + operationId: readServiceCIDR parameters: - - description: name of the RuntimeClass + - description: name of the ServiceCIDR in: path name: name required: true @@ -59216,33 +59106,33 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1.RuntimeClass' + $ref: '#/components/schemas/v1beta1.ServiceCIDR' application/yaml: schema: - $ref: '#/components/schemas/v1.RuntimeClass' + $ref: '#/components/schemas/v1beta1.ServiceCIDR' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1.RuntimeClass' + $ref: '#/components/schemas/v1beta1.ServiceCIDR' application/cbor: schema: - $ref: '#/components/schemas/v1.RuntimeClass' + $ref: '#/components/schemas/v1beta1.ServiceCIDR' description: OK "401": content: {} description: Unauthorized tags: - - node_v1 + - networking_v1beta1 x-kubernetes-action: get x-kubernetes-group-version-kind: - group: node.k8s.io - kind: RuntimeClass - version: v1 + group: networking.k8s.io + kind: ServiceCIDR + version: v1beta1 x-accepts: application/json patch: - description: partially update the specified RuntimeClass - operationId: patchRuntimeClass + description: partially update the specified ServiceCIDR + operationId: patchServiceCIDR parameters: - - description: name of the RuntimeClass + - description: name of the ServiceCIDR in: path name: name required: true @@ -59307,50 +59197,50 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1.RuntimeClass' + $ref: '#/components/schemas/v1beta1.ServiceCIDR' application/yaml: schema: - $ref: '#/components/schemas/v1.RuntimeClass' + $ref: '#/components/schemas/v1beta1.ServiceCIDR' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1.RuntimeClass' + $ref: '#/components/schemas/v1beta1.ServiceCIDR' application/cbor: schema: - $ref: '#/components/schemas/v1.RuntimeClass' + $ref: '#/components/schemas/v1beta1.ServiceCIDR' description: OK "201": content: application/json: schema: - $ref: '#/components/schemas/v1.RuntimeClass' + $ref: '#/components/schemas/v1beta1.ServiceCIDR' application/yaml: schema: - $ref: '#/components/schemas/v1.RuntimeClass' + $ref: '#/components/schemas/v1beta1.ServiceCIDR' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1.RuntimeClass' + $ref: '#/components/schemas/v1beta1.ServiceCIDR' application/cbor: schema: - $ref: '#/components/schemas/v1.RuntimeClass' + $ref: '#/components/schemas/v1beta1.ServiceCIDR' description: Created "401": content: {} description: Unauthorized tags: - - node_v1 + - networking_v1beta1 x-kubernetes-action: patch x-kubernetes-group-version-kind: - group: node.k8s.io - kind: RuntimeClass - version: v1 + group: networking.k8s.io + kind: ServiceCIDR + version: v1beta1 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json put: - description: replace the specified RuntimeClass - operationId: replaceRuntimeClass + description: replace the specified ServiceCIDR + operationId: replaceServiceCIDR parameters: - - description: name of the RuntimeClass + - description: name of the ServiceCIDR in: path name: name required: true @@ -59399,55 +59289,309 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1.RuntimeClass' + $ref: '#/components/schemas/v1beta1.ServiceCIDR' required: true responses: "200": content: application/json: schema: - $ref: '#/components/schemas/v1.RuntimeClass' + $ref: '#/components/schemas/v1beta1.ServiceCIDR' application/yaml: schema: - $ref: '#/components/schemas/v1.RuntimeClass' + $ref: '#/components/schemas/v1beta1.ServiceCIDR' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1.RuntimeClass' + $ref: '#/components/schemas/v1beta1.ServiceCIDR' application/cbor: schema: - $ref: '#/components/schemas/v1.RuntimeClass' + $ref: '#/components/schemas/v1beta1.ServiceCIDR' description: OK "201": content: application/json: schema: - $ref: '#/components/schemas/v1.RuntimeClass' + $ref: '#/components/schemas/v1beta1.ServiceCIDR' application/yaml: schema: - $ref: '#/components/schemas/v1.RuntimeClass' + $ref: '#/components/schemas/v1beta1.ServiceCIDR' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1.RuntimeClass' + $ref: '#/components/schemas/v1beta1.ServiceCIDR' application/cbor: schema: - $ref: '#/components/schemas/v1.RuntimeClass' + $ref: '#/components/schemas/v1beta1.ServiceCIDR' description: Created "401": content: {} description: Unauthorized tags: - - node_v1 + - networking_v1beta1 x-kubernetes-action: put x-kubernetes-group-version-kind: - group: node.k8s.io - kind: RuntimeClass - version: v1 + group: networking.k8s.io + kind: ServiceCIDR + version: v1beta1 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json - /apis/node.k8s.io/v1/watch/runtimeclasses: {} - /apis/node.k8s.io/v1/watch/runtimeclasses/{name}: {} - /apis/policy/: + /apis/networking.k8s.io/v1beta1/servicecidrs/{name}/status: + get: + description: read status of the specified ServiceCIDR + operationId: readServiceCIDRStatus + parameters: + - description: name of the ServiceCIDR + in: path + name: name + required: true + schema: + type: string + - description: If 'true', then the output is pretty printed. Defaults to 'false' + unless the user-agent indicates a browser or command-line HTTP tool (curl + and wget). + in: query + name: pretty + schema: + type: string + responses: + "200": + content: + application/json: + schema: + $ref: '#/components/schemas/v1beta1.ServiceCIDR' + application/yaml: + schema: + $ref: '#/components/schemas/v1beta1.ServiceCIDR' + application/vnd.kubernetes.protobuf: + schema: + $ref: '#/components/schemas/v1beta1.ServiceCIDR' + application/cbor: + schema: + $ref: '#/components/schemas/v1beta1.ServiceCIDR' + description: OK + "401": + content: {} + description: Unauthorized + tags: + - networking_v1beta1 + x-kubernetes-action: get + x-kubernetes-group-version-kind: + group: networking.k8s.io + kind: ServiceCIDR + version: v1beta1 + x-accepts: application/json + patch: + description: partially update status of the specified ServiceCIDR + operationId: patchServiceCIDRStatus + parameters: + - description: name of the ServiceCIDR + in: path + name: name + required: true + schema: + type: string + - description: If 'true', then the output is pretty printed. Defaults to 'false' + unless the user-agent indicates a browser or command-line HTTP tool (curl + and wget). + in: query + name: pretty + schema: + type: string + - description: 'When present, indicates that modifications should not be persisted. + An invalid or unrecognized dryRun directive will result in an error response + and no further processing of the request. Valid values are: - All: all dry + run stages will be processed' + in: query + name: dryRun + schema: + type: string + - description: fieldManager is a name associated with the actor or entity that + is making these changes. The value must be less than or 128 characters long, + and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. + This field is required for apply requests (application/apply-patch) but + optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch). + in: query + name: fieldManager + schema: + type: string + - description: 'fieldValidation instructs the server on how to handle objects + in the request (POST/PUT/PATCH) containing unknown or duplicate fields. + Valid values are: - Ignore: This will ignore any unknown fields that are + silently dropped from the object, and will ignore all but the last duplicate + field that the decoder encounters. This is the default behavior prior to + v1.23. - Warn: This will send a warning via the standard warning response + header for each unknown field that is dropped from the object, and for each + duplicate field that is encountered. The request will still succeed if there + are no other errors, and will only persist the last of any duplicate fields. + This is the default in v1.23+ - Strict: This will fail the request with + a BadRequest error if any unknown fields would be dropped from the object, + or if any duplicate fields are present. The error returned from the server + will contain all unknown and duplicate fields encountered.' + in: query + name: fieldValidation + schema: + type: string + - description: Force is going to "force" Apply requests. It means user will + re-acquire conflicting fields owned by other people. Force flag must be + unset for non-apply patch requests. + in: query + name: force + schema: + type: boolean + requestBody: + content: + application/json: + schema: + $ref: '#/components/schemas/v1.Patch' + required: true + responses: + "200": + content: + application/json: + schema: + $ref: '#/components/schemas/v1beta1.ServiceCIDR' + application/yaml: + schema: + $ref: '#/components/schemas/v1beta1.ServiceCIDR' + application/vnd.kubernetes.protobuf: + schema: + $ref: '#/components/schemas/v1beta1.ServiceCIDR' + application/cbor: + schema: + $ref: '#/components/schemas/v1beta1.ServiceCIDR' + description: OK + "201": + content: + application/json: + schema: + $ref: '#/components/schemas/v1beta1.ServiceCIDR' + application/yaml: + schema: + $ref: '#/components/schemas/v1beta1.ServiceCIDR' + application/vnd.kubernetes.protobuf: + schema: + $ref: '#/components/schemas/v1beta1.ServiceCIDR' + application/cbor: + schema: + $ref: '#/components/schemas/v1beta1.ServiceCIDR' + description: Created + "401": + content: {} + description: Unauthorized + tags: + - networking_v1beta1 + x-kubernetes-action: patch + x-kubernetes-group-version-kind: + group: networking.k8s.io + kind: ServiceCIDR + version: v1beta1 + x-codegen-request-body-name: body + x-contentType: application/json + x-accepts: application/json + put: + description: replace status of the specified ServiceCIDR + operationId: replaceServiceCIDRStatus + parameters: + - description: name of the ServiceCIDR + in: path + name: name + required: true + schema: + type: string + - description: If 'true', then the output is pretty printed. Defaults to 'false' + unless the user-agent indicates a browser or command-line HTTP tool (curl + and wget). + in: query + name: pretty + schema: + type: string + - description: 'When present, indicates that modifications should not be persisted. + An invalid or unrecognized dryRun directive will result in an error response + and no further processing of the request. Valid values are: - All: all dry + run stages will be processed' + in: query + name: dryRun + schema: + type: string + - description: fieldManager is a name associated with the actor or entity that + is making these changes. The value must be less than or 128 characters long, + and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. + in: query + name: fieldManager + schema: + type: string + - description: 'fieldValidation instructs the server on how to handle objects + in the request (POST/PUT/PATCH) containing unknown or duplicate fields. + Valid values are: - Ignore: This will ignore any unknown fields that are + silently dropped from the object, and will ignore all but the last duplicate + field that the decoder encounters. This is the default behavior prior to + v1.23. - Warn: This will send a warning via the standard warning response + header for each unknown field that is dropped from the object, and for each + duplicate field that is encountered. The request will still succeed if there + are no other errors, and will only persist the last of any duplicate fields. + This is the default in v1.23+ - Strict: This will fail the request with + a BadRequest error if any unknown fields would be dropped from the object, + or if any duplicate fields are present. The error returned from the server + will contain all unknown and duplicate fields encountered.' + in: query + name: fieldValidation + schema: + type: string + requestBody: + content: + application/json: + schema: + $ref: '#/components/schemas/v1beta1.ServiceCIDR' + required: true + responses: + "200": + content: + application/json: + schema: + $ref: '#/components/schemas/v1beta1.ServiceCIDR' + application/yaml: + schema: + $ref: '#/components/schemas/v1beta1.ServiceCIDR' + application/vnd.kubernetes.protobuf: + schema: + $ref: '#/components/schemas/v1beta1.ServiceCIDR' + application/cbor: + schema: + $ref: '#/components/schemas/v1beta1.ServiceCIDR' + description: OK + "201": + content: + application/json: + schema: + $ref: '#/components/schemas/v1beta1.ServiceCIDR' + application/yaml: + schema: + $ref: '#/components/schemas/v1beta1.ServiceCIDR' + application/vnd.kubernetes.protobuf: + schema: + $ref: '#/components/schemas/v1beta1.ServiceCIDR' + application/cbor: + schema: + $ref: '#/components/schemas/v1beta1.ServiceCIDR' + description: Created + "401": + content: {} + description: Unauthorized + tags: + - networking_v1beta1 + x-kubernetes-action: put + x-kubernetes-group-version-kind: + group: networking.k8s.io + kind: ServiceCIDR + version: v1beta1 + x-codegen-request-body-name: body + x-contentType: application/json + x-accepts: application/json + /apis/networking.k8s.io/v1beta1/watch/ipaddresses: {} + /apis/networking.k8s.io/v1beta1/watch/ipaddresses/{name}: {} + /apis/networking.k8s.io/v1beta1/watch/servicecidrs: {} + /apis/networking.k8s.io/v1beta1/watch/servicecidrs/{name}: {} + /apis/node.k8s.io/: get: description: get information of a group operationId: getAPIGroup @@ -59468,9 +59612,9 @@ paths: content: {} description: Unauthorized tags: - - policy + - node x-accepts: application/json - /apis/policy/v1/: + /apis/node.k8s.io/v1/: get: description: get available resources operationId: getAPIResources @@ -59494,19 +59638,13 @@ paths: content: {} description: Unauthorized tags: - - policy_v1 + - node_v1 x-accepts: application/json - /apis/policy/v1/namespaces/{namespace}/poddisruptionbudgets: + /apis/node.k8s.io/v1/runtimeclasses: delete: - description: delete collection of PodDisruptionBudget - operationId: deleteCollectionNamespacedPodDisruptionBudget + description: delete collection of RuntimeClass + operationId: deleteCollectionRuntimeClass parameters: - - description: object name and auth scope, such as for teams and projects - in: path - name: namespace - required: true - schema: - type: string - description: If 'true', then the output is pretty printed. Defaults to 'false' unless the user-agent indicates a browser or command-line HTTP tool (curl and wget). @@ -59658,25 +59796,19 @@ paths: content: {} description: Unauthorized tags: - - policy_v1 + - node_v1 x-kubernetes-action: deletecollection x-kubernetes-group-version-kind: - group: policy - kind: PodDisruptionBudget + group: node.k8s.io + kind: RuntimeClass version: v1 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json get: - description: list or watch objects of kind PodDisruptionBudget - operationId: listNamespacedPodDisruptionBudget + description: list or watch objects of kind RuntimeClass + operationId: listRuntimeClass parameters: - - description: object name and auth scope, such as for teams and projects - in: path - name: namespace - required: true - schema: - type: string - description: If 'true', then the output is pretty printed. Defaults to 'false' unless the user-agent indicates a browser or command-line HTTP tool (curl and wget). @@ -59773,47 +59905,41 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1.PodDisruptionBudgetList' + $ref: '#/components/schemas/v1.RuntimeClassList' application/yaml: schema: - $ref: '#/components/schemas/v1.PodDisruptionBudgetList' + $ref: '#/components/schemas/v1.RuntimeClassList' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1.PodDisruptionBudgetList' + $ref: '#/components/schemas/v1.RuntimeClassList' application/cbor: schema: - $ref: '#/components/schemas/v1.PodDisruptionBudgetList' + $ref: '#/components/schemas/v1.RuntimeClassList' application/json;stream=watch: schema: - $ref: '#/components/schemas/v1.PodDisruptionBudgetList' + $ref: '#/components/schemas/v1.RuntimeClassList' application/vnd.kubernetes.protobuf;stream=watch: schema: - $ref: '#/components/schemas/v1.PodDisruptionBudgetList' + $ref: '#/components/schemas/v1.RuntimeClassList' application/cbor-seq: schema: - $ref: '#/components/schemas/v1.PodDisruptionBudgetList' + $ref: '#/components/schemas/v1.RuntimeClassList' description: OK "401": content: {} description: Unauthorized tags: - - policy_v1 + - node_v1 x-kubernetes-action: list x-kubernetes-group-version-kind: - group: policy - kind: PodDisruptionBudget + group: node.k8s.io + kind: RuntimeClass version: v1 x-accepts: application/json post: - description: create a PodDisruptionBudget - operationId: createNamespacedPodDisruptionBudget + description: create a RuntimeClass + operationId: createRuntimeClass parameters: - - description: object name and auth scope, such as for teams and projects - in: path - name: namespace - required: true - schema: - type: string - description: If 'true', then the output is pretty printed. Defaults to 'false' unless the user-agent indicates a browser or command-line HTTP tool (curl and wget). @@ -59857,84 +59983,78 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1.PodDisruptionBudget' + $ref: '#/components/schemas/v1.RuntimeClass' required: true responses: "200": content: application/json: schema: - $ref: '#/components/schemas/v1.PodDisruptionBudget' + $ref: '#/components/schemas/v1.RuntimeClass' application/yaml: schema: - $ref: '#/components/schemas/v1.PodDisruptionBudget' + $ref: '#/components/schemas/v1.RuntimeClass' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1.PodDisruptionBudget' + $ref: '#/components/schemas/v1.RuntimeClass' application/cbor: schema: - $ref: '#/components/schemas/v1.PodDisruptionBudget' + $ref: '#/components/schemas/v1.RuntimeClass' description: OK "201": content: application/json: schema: - $ref: '#/components/schemas/v1.PodDisruptionBudget' + $ref: '#/components/schemas/v1.RuntimeClass' application/yaml: schema: - $ref: '#/components/schemas/v1.PodDisruptionBudget' + $ref: '#/components/schemas/v1.RuntimeClass' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1.PodDisruptionBudget' + $ref: '#/components/schemas/v1.RuntimeClass' application/cbor: schema: - $ref: '#/components/schemas/v1.PodDisruptionBudget' + $ref: '#/components/schemas/v1.RuntimeClass' description: Created "202": content: application/json: schema: - $ref: '#/components/schemas/v1.PodDisruptionBudget' + $ref: '#/components/schemas/v1.RuntimeClass' application/yaml: schema: - $ref: '#/components/schemas/v1.PodDisruptionBudget' + $ref: '#/components/schemas/v1.RuntimeClass' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1.PodDisruptionBudget' + $ref: '#/components/schemas/v1.RuntimeClass' application/cbor: schema: - $ref: '#/components/schemas/v1.PodDisruptionBudget' + $ref: '#/components/schemas/v1.RuntimeClass' description: Accepted "401": content: {} description: Unauthorized tags: - - policy_v1 + - node_v1 x-kubernetes-action: post x-kubernetes-group-version-kind: - group: policy - kind: PodDisruptionBudget + group: node.k8s.io + kind: RuntimeClass version: v1 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json - /apis/policy/v1/namespaces/{namespace}/poddisruptionbudgets/{name}: + /apis/node.k8s.io/v1/runtimeclasses/{name}: delete: - description: delete a PodDisruptionBudget - operationId: deleteNamespacedPodDisruptionBudget + description: delete a RuntimeClass + operationId: deleteRuntimeClass parameters: - - description: name of the PodDisruptionBudget + - description: name of the RuntimeClass in: path name: name required: true schema: type: string - - description: object name and auth scope, such as for teams and projects - in: path - name: namespace - required: true - schema: - type: string - description: If 'true', then the output is pretty printed. Defaults to 'false' unless the user-agent indicates a browser or command-line HTTP tool (curl and wget). @@ -60033,301 +60153,25 @@ paths: content: {} description: Unauthorized tags: - - policy_v1 + - node_v1 x-kubernetes-action: delete x-kubernetes-group-version-kind: - group: policy - kind: PodDisruptionBudget - version: v1 - x-codegen-request-body-name: body - x-contentType: application/json - x-accepts: application/json - get: - description: read the specified PodDisruptionBudget - operationId: readNamespacedPodDisruptionBudget - parameters: - - description: name of the PodDisruptionBudget - in: path - name: name - required: true - schema: - type: string - - description: object name and auth scope, such as for teams and projects - in: path - name: namespace - required: true - schema: - type: string - - description: If 'true', then the output is pretty printed. Defaults to 'false' - unless the user-agent indicates a browser or command-line HTTP tool (curl - and wget). - in: query - name: pretty - schema: - type: string - responses: - "200": - content: - application/json: - schema: - $ref: '#/components/schemas/v1.PodDisruptionBudget' - application/yaml: - schema: - $ref: '#/components/schemas/v1.PodDisruptionBudget' - application/vnd.kubernetes.protobuf: - schema: - $ref: '#/components/schemas/v1.PodDisruptionBudget' - application/cbor: - schema: - $ref: '#/components/schemas/v1.PodDisruptionBudget' - description: OK - "401": - content: {} - description: Unauthorized - tags: - - policy_v1 - x-kubernetes-action: get - x-kubernetes-group-version-kind: - group: policy - kind: PodDisruptionBudget - version: v1 - x-accepts: application/json - patch: - description: partially update the specified PodDisruptionBudget - operationId: patchNamespacedPodDisruptionBudget - parameters: - - description: name of the PodDisruptionBudget - in: path - name: name - required: true - schema: - type: string - - description: object name and auth scope, such as for teams and projects - in: path - name: namespace - required: true - schema: - type: string - - description: If 'true', then the output is pretty printed. Defaults to 'false' - unless the user-agent indicates a browser or command-line HTTP tool (curl - and wget). - in: query - name: pretty - schema: - type: string - - description: 'When present, indicates that modifications should not be persisted. - An invalid or unrecognized dryRun directive will result in an error response - and no further processing of the request. Valid values are: - All: all dry - run stages will be processed' - in: query - name: dryRun - schema: - type: string - - description: fieldManager is a name associated with the actor or entity that - is making these changes. The value must be less than or 128 characters long, - and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. - This field is required for apply requests (application/apply-patch) but - optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch). - in: query - name: fieldManager - schema: - type: string - - description: 'fieldValidation instructs the server on how to handle objects - in the request (POST/PUT/PATCH) containing unknown or duplicate fields. - Valid values are: - Ignore: This will ignore any unknown fields that are - silently dropped from the object, and will ignore all but the last duplicate - field that the decoder encounters. This is the default behavior prior to - v1.23. - Warn: This will send a warning via the standard warning response - header for each unknown field that is dropped from the object, and for each - duplicate field that is encountered. The request will still succeed if there - are no other errors, and will only persist the last of any duplicate fields. - This is the default in v1.23+ - Strict: This will fail the request with - a BadRequest error if any unknown fields would be dropped from the object, - or if any duplicate fields are present. The error returned from the server - will contain all unknown and duplicate fields encountered.' - in: query - name: fieldValidation - schema: - type: string - - description: Force is going to "force" Apply requests. It means user will - re-acquire conflicting fields owned by other people. Force flag must be - unset for non-apply patch requests. - in: query - name: force - schema: - type: boolean - requestBody: - content: - application/json: - schema: - $ref: '#/components/schemas/v1.Patch' - required: true - responses: - "200": - content: - application/json: - schema: - $ref: '#/components/schemas/v1.PodDisruptionBudget' - application/yaml: - schema: - $ref: '#/components/schemas/v1.PodDisruptionBudget' - application/vnd.kubernetes.protobuf: - schema: - $ref: '#/components/schemas/v1.PodDisruptionBudget' - application/cbor: - schema: - $ref: '#/components/schemas/v1.PodDisruptionBudget' - description: OK - "201": - content: - application/json: - schema: - $ref: '#/components/schemas/v1.PodDisruptionBudget' - application/yaml: - schema: - $ref: '#/components/schemas/v1.PodDisruptionBudget' - application/vnd.kubernetes.protobuf: - schema: - $ref: '#/components/schemas/v1.PodDisruptionBudget' - application/cbor: - schema: - $ref: '#/components/schemas/v1.PodDisruptionBudget' - description: Created - "401": - content: {} - description: Unauthorized - tags: - - policy_v1 - x-kubernetes-action: patch - x-kubernetes-group-version-kind: - group: policy - kind: PodDisruptionBudget - version: v1 - x-codegen-request-body-name: body - x-contentType: application/json - x-accepts: application/json - put: - description: replace the specified PodDisruptionBudget - operationId: replaceNamespacedPodDisruptionBudget - parameters: - - description: name of the PodDisruptionBudget - in: path - name: name - required: true - schema: - type: string - - description: object name and auth scope, such as for teams and projects - in: path - name: namespace - required: true - schema: - type: string - - description: If 'true', then the output is pretty printed. Defaults to 'false' - unless the user-agent indicates a browser or command-line HTTP tool (curl - and wget). - in: query - name: pretty - schema: - type: string - - description: 'When present, indicates that modifications should not be persisted. - An invalid or unrecognized dryRun directive will result in an error response - and no further processing of the request. Valid values are: - All: all dry - run stages will be processed' - in: query - name: dryRun - schema: - type: string - - description: fieldManager is a name associated with the actor or entity that - is making these changes. The value must be less than or 128 characters long, - and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. - in: query - name: fieldManager - schema: - type: string - - description: 'fieldValidation instructs the server on how to handle objects - in the request (POST/PUT/PATCH) containing unknown or duplicate fields. - Valid values are: - Ignore: This will ignore any unknown fields that are - silently dropped from the object, and will ignore all but the last duplicate - field that the decoder encounters. This is the default behavior prior to - v1.23. - Warn: This will send a warning via the standard warning response - header for each unknown field that is dropped from the object, and for each - duplicate field that is encountered. The request will still succeed if there - are no other errors, and will only persist the last of any duplicate fields. - This is the default in v1.23+ - Strict: This will fail the request with - a BadRequest error if any unknown fields would be dropped from the object, - or if any duplicate fields are present. The error returned from the server - will contain all unknown and duplicate fields encountered.' - in: query - name: fieldValidation - schema: - type: string - requestBody: - content: - application/json: - schema: - $ref: '#/components/schemas/v1.PodDisruptionBudget' - required: true - responses: - "200": - content: - application/json: - schema: - $ref: '#/components/schemas/v1.PodDisruptionBudget' - application/yaml: - schema: - $ref: '#/components/schemas/v1.PodDisruptionBudget' - application/vnd.kubernetes.protobuf: - schema: - $ref: '#/components/schemas/v1.PodDisruptionBudget' - application/cbor: - schema: - $ref: '#/components/schemas/v1.PodDisruptionBudget' - description: OK - "201": - content: - application/json: - schema: - $ref: '#/components/schemas/v1.PodDisruptionBudget' - application/yaml: - schema: - $ref: '#/components/schemas/v1.PodDisruptionBudget' - application/vnd.kubernetes.protobuf: - schema: - $ref: '#/components/schemas/v1.PodDisruptionBudget' - application/cbor: - schema: - $ref: '#/components/schemas/v1.PodDisruptionBudget' - description: Created - "401": - content: {} - description: Unauthorized - tags: - - policy_v1 - x-kubernetes-action: put - x-kubernetes-group-version-kind: - group: policy - kind: PodDisruptionBudget + group: node.k8s.io + kind: RuntimeClass version: v1 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json - /apis/policy/v1/namespaces/{namespace}/poddisruptionbudgets/{name}/status: get: - description: read status of the specified PodDisruptionBudget - operationId: readNamespacedPodDisruptionBudgetStatus + description: read the specified RuntimeClass + operationId: readRuntimeClass parameters: - - description: name of the PodDisruptionBudget + - description: name of the RuntimeClass in: path name: name required: true schema: type: string - - description: object name and auth scope, such as for teams and projects - in: path - name: namespace - required: true - schema: - type: string - description: If 'true', then the output is pretty printed. Defaults to 'false' unless the user-agent indicates a browser or command-line HTTP tool (curl and wget). @@ -60340,44 +60184,38 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1.PodDisruptionBudget' + $ref: '#/components/schemas/v1.RuntimeClass' application/yaml: schema: - $ref: '#/components/schemas/v1.PodDisruptionBudget' + $ref: '#/components/schemas/v1.RuntimeClass' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1.PodDisruptionBudget' + $ref: '#/components/schemas/v1.RuntimeClass' application/cbor: schema: - $ref: '#/components/schemas/v1.PodDisruptionBudget' + $ref: '#/components/schemas/v1.RuntimeClass' description: OK "401": content: {} description: Unauthorized tags: - - policy_v1 + - node_v1 x-kubernetes-action: get x-kubernetes-group-version-kind: - group: policy - kind: PodDisruptionBudget + group: node.k8s.io + kind: RuntimeClass version: v1 x-accepts: application/json patch: - description: partially update status of the specified PodDisruptionBudget - operationId: patchNamespacedPodDisruptionBudgetStatus + description: partially update the specified RuntimeClass + operationId: patchRuntimeClass parameters: - - description: name of the PodDisruptionBudget + - description: name of the RuntimeClass in: path name: name required: true schema: type: string - - description: object name and auth scope, such as for teams and projects - in: path - name: namespace - required: true - schema: - type: string - description: If 'true', then the output is pretty printed. Defaults to 'false' unless the user-agent indicates a browser or command-line HTTP tool (curl and wget). @@ -60437,61 +60275,55 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1.PodDisruptionBudget' + $ref: '#/components/schemas/v1.RuntimeClass' application/yaml: schema: - $ref: '#/components/schemas/v1.PodDisruptionBudget' + $ref: '#/components/schemas/v1.RuntimeClass' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1.PodDisruptionBudget' + $ref: '#/components/schemas/v1.RuntimeClass' application/cbor: schema: - $ref: '#/components/schemas/v1.PodDisruptionBudget' + $ref: '#/components/schemas/v1.RuntimeClass' description: OK "201": content: application/json: schema: - $ref: '#/components/schemas/v1.PodDisruptionBudget' + $ref: '#/components/schemas/v1.RuntimeClass' application/yaml: schema: - $ref: '#/components/schemas/v1.PodDisruptionBudget' + $ref: '#/components/schemas/v1.RuntimeClass' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1.PodDisruptionBudget' + $ref: '#/components/schemas/v1.RuntimeClass' application/cbor: schema: - $ref: '#/components/schemas/v1.PodDisruptionBudget' + $ref: '#/components/schemas/v1.RuntimeClass' description: Created "401": content: {} description: Unauthorized tags: - - policy_v1 + - node_v1 x-kubernetes-action: patch x-kubernetes-group-version-kind: - group: policy - kind: PodDisruptionBudget + group: node.k8s.io + kind: RuntimeClass version: v1 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json put: - description: replace status of the specified PodDisruptionBudget - operationId: replaceNamespacedPodDisruptionBudgetStatus + description: replace the specified RuntimeClass + operationId: replaceRuntimeClass parameters: - - description: name of the PodDisruptionBudget + - description: name of the RuntimeClass in: path name: name required: true schema: type: string - - description: object name and auth scope, such as for teams and projects - in: path - name: namespace - required: true - schema: - type: string - description: If 'true', then the output is pretty printed. Defaults to 'false' unless the user-agent indicates a browser or command-line HTTP tool (curl and wget). @@ -60535,188 +60367,55 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1.PodDisruptionBudget' + $ref: '#/components/schemas/v1.RuntimeClass' required: true responses: "200": content: application/json: schema: - $ref: '#/components/schemas/v1.PodDisruptionBudget' + $ref: '#/components/schemas/v1.RuntimeClass' application/yaml: schema: - $ref: '#/components/schemas/v1.PodDisruptionBudget' + $ref: '#/components/schemas/v1.RuntimeClass' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1.PodDisruptionBudget' + $ref: '#/components/schemas/v1.RuntimeClass' application/cbor: schema: - $ref: '#/components/schemas/v1.PodDisruptionBudget' + $ref: '#/components/schemas/v1.RuntimeClass' description: OK "201": content: application/json: schema: - $ref: '#/components/schemas/v1.PodDisruptionBudget' + $ref: '#/components/schemas/v1.RuntimeClass' application/yaml: schema: - $ref: '#/components/schemas/v1.PodDisruptionBudget' + $ref: '#/components/schemas/v1.RuntimeClass' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1.PodDisruptionBudget' + $ref: '#/components/schemas/v1.RuntimeClass' application/cbor: schema: - $ref: '#/components/schemas/v1.PodDisruptionBudget' + $ref: '#/components/schemas/v1.RuntimeClass' description: Created "401": content: {} description: Unauthorized tags: - - policy_v1 + - node_v1 x-kubernetes-action: put x-kubernetes-group-version-kind: - group: policy - kind: PodDisruptionBudget + group: node.k8s.io + kind: RuntimeClass version: v1 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json - /apis/policy/v1/poddisruptionbudgets: - get: - description: list or watch objects of kind PodDisruptionBudget - operationId: listPodDisruptionBudgetForAllNamespaces - parameters: - - description: allowWatchBookmarks requests watch events with type "BOOKMARK". - Servers that do not implement bookmarks may ignore this flag and bookmarks - are sent at the server's discretion. Clients should not assume bookmarks - are returned at any specific interval, nor may they assume the server will - send any BOOKMARK event during a session. If this is not a watch, this field - is ignored. - in: query - name: allowWatchBookmarks - schema: - type: boolean - - description: |- - The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". - - This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications. - in: query - name: continue - schema: - type: string - - description: A selector to restrict the list of returned objects by their - fields. Defaults to everything. - in: query - name: fieldSelector - schema: - type: string - - description: A selector to restrict the list of returned objects by their - labels. Defaults to everything. - in: query - name: labelSelector - schema: - type: string - - description: |- - limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. - - The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned. - in: query - name: limit - schema: - type: integer - - description: If 'true', then the output is pretty printed. Defaults to 'false' - unless the user-agent indicates a browser or command-line HTTP tool (curl - and wget). - in: query - name: pretty - schema: - type: string - - description: |- - resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. - - Defaults to unset - in: query - name: resourceVersion - schema: - type: string - - description: |- - resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. - - Defaults to unset - in: query - name: resourceVersionMatch - schema: - type: string - - description: |- - `sendInitialEvents=true` may be set together with `watch=true`. In that case, the watch stream will begin with synthetic events to produce the current state of objects in the collection. Once all such events have been sent, a synthetic "Bookmark" event will be sent. The bookmark will report the ResourceVersion (RV) corresponding to the set of objects, and be marked with `"k8s.io/initial-events-end": "true"` annotation. Afterwards, the watch stream will proceed as usual, sending watch events corresponding to changes (subsequent to the RV) to objects watched. - - When `sendInitialEvents` option is set, we require `resourceVersionMatch` option to also be set. The semantic of the watch request is as following: - `resourceVersionMatch` = NotOlderThan - is interpreted as "data at least as new as the provided `resourceVersion`" - and the bookmark event is send when the state is synced - to a `resourceVersion` at least as fresh as the one provided by the ListOptions. - If `resourceVersion` is unset, this is interpreted as "consistent read" and the - bookmark event is send when the state is synced at least to the moment - when request started being processed. - - `resourceVersionMatch` set to any other value or unset - Invalid error is returned. - - Defaults to true if `resourceVersion=""` or `resourceVersion="0"` (for backward compatibility reasons) and to false otherwise. - in: query - name: sendInitialEvents - schema: - type: boolean - - description: Timeout for the list/watch call. This limits the duration of - the call, regardless of any activity or inactivity. - in: query - name: timeoutSeconds - schema: - type: integer - - description: Watch for changes to the described resources and return them - as a stream of add, update, and remove notifications. Specify resourceVersion. - in: query - name: watch - schema: - type: boolean - responses: - "200": - content: - application/json: - schema: - $ref: '#/components/schemas/v1.PodDisruptionBudgetList' - application/yaml: - schema: - $ref: '#/components/schemas/v1.PodDisruptionBudgetList' - application/vnd.kubernetes.protobuf: - schema: - $ref: '#/components/schemas/v1.PodDisruptionBudgetList' - application/cbor: - schema: - $ref: '#/components/schemas/v1.PodDisruptionBudgetList' - application/json;stream=watch: - schema: - $ref: '#/components/schemas/v1.PodDisruptionBudgetList' - application/vnd.kubernetes.protobuf;stream=watch: - schema: - $ref: '#/components/schemas/v1.PodDisruptionBudgetList' - application/cbor-seq: - schema: - $ref: '#/components/schemas/v1.PodDisruptionBudgetList' - description: OK - "401": - content: {} - description: Unauthorized - tags: - - policy_v1 - x-kubernetes-action: list - x-kubernetes-group-version-kind: - group: policy - kind: PodDisruptionBudget - version: v1 - x-accepts: application/json - /apis/policy/v1/watch/namespaces/{namespace}/poddisruptionbudgets: {} - /apis/policy/v1/watch/namespaces/{namespace}/poddisruptionbudgets/{name}: {} - /apis/policy/v1/watch/poddisruptionbudgets: {} - /apis/rbac.authorization.k8s.io/: + /apis/node.k8s.io/v1/watch/runtimeclasses: {} + /apis/node.k8s.io/v1/watch/runtimeclasses/{name}: {} + /apis/policy/: get: description: get information of a group operationId: getAPIGroup @@ -60737,9 +60436,9 @@ paths: content: {} description: Unauthorized tags: - - rbacAuthorization + - policy x-accepts: application/json - /apis/rbac.authorization.k8s.io/v1/: + /apis/policy/v1/: get: description: get available resources operationId: getAPIResources @@ -60763,13 +60462,19 @@ paths: content: {} description: Unauthorized tags: - - rbacAuthorization_v1 + - policy_v1 x-accepts: application/json - /apis/rbac.authorization.k8s.io/v1/clusterrolebindings: + /apis/policy/v1/namespaces/{namespace}/poddisruptionbudgets: delete: - description: delete collection of ClusterRoleBinding - operationId: deleteCollectionClusterRoleBinding + description: delete collection of PodDisruptionBudget + operationId: deleteCollectionNamespacedPodDisruptionBudget parameters: + - description: object name and auth scope, such as for teams and projects + in: path + name: namespace + required: true + schema: + type: string - description: If 'true', then the output is pretty printed. Defaults to 'false' unless the user-agent indicates a browser or command-line HTTP tool (curl and wget). @@ -60921,19 +60626,25 @@ paths: content: {} description: Unauthorized tags: - - rbacAuthorization_v1 + - policy_v1 x-kubernetes-action: deletecollection x-kubernetes-group-version-kind: - group: rbac.authorization.k8s.io - kind: ClusterRoleBinding + group: policy + kind: PodDisruptionBudget version: v1 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json get: - description: list or watch objects of kind ClusterRoleBinding - operationId: listClusterRoleBinding + description: list or watch objects of kind PodDisruptionBudget + operationId: listNamespacedPodDisruptionBudget parameters: + - description: object name and auth scope, such as for teams and projects + in: path + name: namespace + required: true + schema: + type: string - description: If 'true', then the output is pretty printed. Defaults to 'false' unless the user-agent indicates a browser or command-line HTTP tool (curl and wget). @@ -61030,41 +60741,47 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1.ClusterRoleBindingList' + $ref: '#/components/schemas/v1.PodDisruptionBudgetList' application/yaml: schema: - $ref: '#/components/schemas/v1.ClusterRoleBindingList' + $ref: '#/components/schemas/v1.PodDisruptionBudgetList' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1.ClusterRoleBindingList' + $ref: '#/components/schemas/v1.PodDisruptionBudgetList' application/cbor: schema: - $ref: '#/components/schemas/v1.ClusterRoleBindingList' + $ref: '#/components/schemas/v1.PodDisruptionBudgetList' application/json;stream=watch: schema: - $ref: '#/components/schemas/v1.ClusterRoleBindingList' + $ref: '#/components/schemas/v1.PodDisruptionBudgetList' application/vnd.kubernetes.protobuf;stream=watch: schema: - $ref: '#/components/schemas/v1.ClusterRoleBindingList' + $ref: '#/components/schemas/v1.PodDisruptionBudgetList' application/cbor-seq: schema: - $ref: '#/components/schemas/v1.ClusterRoleBindingList' + $ref: '#/components/schemas/v1.PodDisruptionBudgetList' description: OK "401": content: {} description: Unauthorized tags: - - rbacAuthorization_v1 + - policy_v1 x-kubernetes-action: list x-kubernetes-group-version-kind: - group: rbac.authorization.k8s.io - kind: ClusterRoleBinding + group: policy + kind: PodDisruptionBudget version: v1 x-accepts: application/json post: - description: create a ClusterRoleBinding - operationId: createClusterRoleBinding + description: create a PodDisruptionBudget + operationId: createNamespacedPodDisruptionBudget parameters: + - description: object name and auth scope, such as for teams and projects + in: path + name: namespace + required: true + schema: + type: string - description: If 'true', then the output is pretty printed. Defaults to 'false' unless the user-agent indicates a browser or command-line HTTP tool (curl and wget). @@ -61108,78 +60825,84 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1.ClusterRoleBinding' + $ref: '#/components/schemas/v1.PodDisruptionBudget' required: true responses: "200": content: application/json: schema: - $ref: '#/components/schemas/v1.ClusterRoleBinding' + $ref: '#/components/schemas/v1.PodDisruptionBudget' application/yaml: schema: - $ref: '#/components/schemas/v1.ClusterRoleBinding' + $ref: '#/components/schemas/v1.PodDisruptionBudget' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1.ClusterRoleBinding' + $ref: '#/components/schemas/v1.PodDisruptionBudget' application/cbor: schema: - $ref: '#/components/schemas/v1.ClusterRoleBinding' + $ref: '#/components/schemas/v1.PodDisruptionBudget' description: OK "201": content: application/json: schema: - $ref: '#/components/schemas/v1.ClusterRoleBinding' + $ref: '#/components/schemas/v1.PodDisruptionBudget' application/yaml: schema: - $ref: '#/components/schemas/v1.ClusterRoleBinding' + $ref: '#/components/schemas/v1.PodDisruptionBudget' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1.ClusterRoleBinding' + $ref: '#/components/schemas/v1.PodDisruptionBudget' application/cbor: schema: - $ref: '#/components/schemas/v1.ClusterRoleBinding' + $ref: '#/components/schemas/v1.PodDisruptionBudget' description: Created "202": content: application/json: schema: - $ref: '#/components/schemas/v1.ClusterRoleBinding' + $ref: '#/components/schemas/v1.PodDisruptionBudget' application/yaml: schema: - $ref: '#/components/schemas/v1.ClusterRoleBinding' + $ref: '#/components/schemas/v1.PodDisruptionBudget' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1.ClusterRoleBinding' + $ref: '#/components/schemas/v1.PodDisruptionBudget' application/cbor: schema: - $ref: '#/components/schemas/v1.ClusterRoleBinding' + $ref: '#/components/schemas/v1.PodDisruptionBudget' description: Accepted "401": content: {} description: Unauthorized tags: - - rbacAuthorization_v1 + - policy_v1 x-kubernetes-action: post x-kubernetes-group-version-kind: - group: rbac.authorization.k8s.io - kind: ClusterRoleBinding + group: policy + kind: PodDisruptionBudget version: v1 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json - /apis/rbac.authorization.k8s.io/v1/clusterrolebindings/{name}: + /apis/policy/v1/namespaces/{namespace}/poddisruptionbudgets/{name}: delete: - description: delete a ClusterRoleBinding - operationId: deleteClusterRoleBinding + description: delete a PodDisruptionBudget + operationId: deleteNamespacedPodDisruptionBudget parameters: - - description: name of the ClusterRoleBinding + - description: name of the PodDisruptionBudget in: path name: name required: true schema: type: string + - description: object name and auth scope, such as for teams and projects + in: path + name: namespace + required: true + schema: + type: string - description: If 'true', then the output is pretty printed. Defaults to 'false' unless the user-agent indicates a browser or command-line HTTP tool (curl and wget). @@ -61278,25 +61001,31 @@ paths: content: {} description: Unauthorized tags: - - rbacAuthorization_v1 + - policy_v1 x-kubernetes-action: delete x-kubernetes-group-version-kind: - group: rbac.authorization.k8s.io - kind: ClusterRoleBinding + group: policy + kind: PodDisruptionBudget version: v1 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json get: - description: read the specified ClusterRoleBinding - operationId: readClusterRoleBinding + description: read the specified PodDisruptionBudget + operationId: readNamespacedPodDisruptionBudget parameters: - - description: name of the ClusterRoleBinding + - description: name of the PodDisruptionBudget in: path name: name required: true schema: type: string + - description: object name and auth scope, such as for teams and projects + in: path + name: namespace + required: true + schema: + type: string - description: If 'true', then the output is pretty printed. Defaults to 'false' unless the user-agent indicates a browser or command-line HTTP tool (curl and wget). @@ -61309,38 +61038,44 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1.ClusterRoleBinding' + $ref: '#/components/schemas/v1.PodDisruptionBudget' application/yaml: schema: - $ref: '#/components/schemas/v1.ClusterRoleBinding' + $ref: '#/components/schemas/v1.PodDisruptionBudget' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1.ClusterRoleBinding' + $ref: '#/components/schemas/v1.PodDisruptionBudget' application/cbor: schema: - $ref: '#/components/schemas/v1.ClusterRoleBinding' + $ref: '#/components/schemas/v1.PodDisruptionBudget' description: OK "401": content: {} description: Unauthorized tags: - - rbacAuthorization_v1 + - policy_v1 x-kubernetes-action: get x-kubernetes-group-version-kind: - group: rbac.authorization.k8s.io - kind: ClusterRoleBinding + group: policy + kind: PodDisruptionBudget version: v1 x-accepts: application/json patch: - description: partially update the specified ClusterRoleBinding - operationId: patchClusterRoleBinding + description: partially update the specified PodDisruptionBudget + operationId: patchNamespacedPodDisruptionBudget parameters: - - description: name of the ClusterRoleBinding + - description: name of the PodDisruptionBudget in: path name: name required: true schema: type: string + - description: object name and auth scope, such as for teams and projects + in: path + name: namespace + required: true + schema: + type: string - description: If 'true', then the output is pretty printed. Defaults to 'false' unless the user-agent indicates a browser or command-line HTTP tool (curl and wget). @@ -61400,55 +61135,61 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1.ClusterRoleBinding' + $ref: '#/components/schemas/v1.PodDisruptionBudget' application/yaml: schema: - $ref: '#/components/schemas/v1.ClusterRoleBinding' + $ref: '#/components/schemas/v1.PodDisruptionBudget' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1.ClusterRoleBinding' + $ref: '#/components/schemas/v1.PodDisruptionBudget' application/cbor: schema: - $ref: '#/components/schemas/v1.ClusterRoleBinding' + $ref: '#/components/schemas/v1.PodDisruptionBudget' description: OK "201": content: application/json: schema: - $ref: '#/components/schemas/v1.ClusterRoleBinding' + $ref: '#/components/schemas/v1.PodDisruptionBudget' application/yaml: schema: - $ref: '#/components/schemas/v1.ClusterRoleBinding' + $ref: '#/components/schemas/v1.PodDisruptionBudget' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1.ClusterRoleBinding' + $ref: '#/components/schemas/v1.PodDisruptionBudget' application/cbor: schema: - $ref: '#/components/schemas/v1.ClusterRoleBinding' + $ref: '#/components/schemas/v1.PodDisruptionBudget' description: Created "401": content: {} description: Unauthorized tags: - - rbacAuthorization_v1 + - policy_v1 x-kubernetes-action: patch x-kubernetes-group-version-kind: - group: rbac.authorization.k8s.io - kind: ClusterRoleBinding + group: policy + kind: PodDisruptionBudget version: v1 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json put: - description: replace the specified ClusterRoleBinding - operationId: replaceClusterRoleBinding + description: replace the specified PodDisruptionBudget + operationId: replaceNamespacedPodDisruptionBudget parameters: - - description: name of the ClusterRoleBinding + - description: name of the PodDisruptionBudget in: path name: name required: true schema: type: string + - description: object name and auth scope, such as for teams and projects + in: path + name: namespace + required: true + schema: + type: string - description: If 'true', then the output is pretty printed. Defaults to 'false' unless the user-agent indicates a browser or command-line HTTP tool (curl and wget). @@ -61492,56 +61233,510 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1.ClusterRoleBinding' + $ref: '#/components/schemas/v1.PodDisruptionBudget' required: true responses: "200": content: application/json: schema: - $ref: '#/components/schemas/v1.ClusterRoleBinding' + $ref: '#/components/schemas/v1.PodDisruptionBudget' application/yaml: schema: - $ref: '#/components/schemas/v1.ClusterRoleBinding' + $ref: '#/components/schemas/v1.PodDisruptionBudget' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1.ClusterRoleBinding' + $ref: '#/components/schemas/v1.PodDisruptionBudget' application/cbor: schema: - $ref: '#/components/schemas/v1.ClusterRoleBinding' + $ref: '#/components/schemas/v1.PodDisruptionBudget' description: OK "201": content: application/json: schema: - $ref: '#/components/schemas/v1.ClusterRoleBinding' + $ref: '#/components/schemas/v1.PodDisruptionBudget' application/yaml: schema: - $ref: '#/components/schemas/v1.ClusterRoleBinding' + $ref: '#/components/schemas/v1.PodDisruptionBudget' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1.ClusterRoleBinding' + $ref: '#/components/schemas/v1.PodDisruptionBudget' application/cbor: schema: - $ref: '#/components/schemas/v1.ClusterRoleBinding' + $ref: '#/components/schemas/v1.PodDisruptionBudget' description: Created "401": content: {} description: Unauthorized tags: - - rbacAuthorization_v1 + - policy_v1 x-kubernetes-action: put x-kubernetes-group-version-kind: - group: rbac.authorization.k8s.io - kind: ClusterRoleBinding + group: policy + kind: PodDisruptionBudget version: v1 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json - /apis/rbac.authorization.k8s.io/v1/clusterroles: + /apis/policy/v1/namespaces/{namespace}/poddisruptionbudgets/{name}/status: + get: + description: read status of the specified PodDisruptionBudget + operationId: readNamespacedPodDisruptionBudgetStatus + parameters: + - description: name of the PodDisruptionBudget + in: path + name: name + required: true + schema: + type: string + - description: object name and auth scope, such as for teams and projects + in: path + name: namespace + required: true + schema: + type: string + - description: If 'true', then the output is pretty printed. Defaults to 'false' + unless the user-agent indicates a browser or command-line HTTP tool (curl + and wget). + in: query + name: pretty + schema: + type: string + responses: + "200": + content: + application/json: + schema: + $ref: '#/components/schemas/v1.PodDisruptionBudget' + application/yaml: + schema: + $ref: '#/components/schemas/v1.PodDisruptionBudget' + application/vnd.kubernetes.protobuf: + schema: + $ref: '#/components/schemas/v1.PodDisruptionBudget' + application/cbor: + schema: + $ref: '#/components/schemas/v1.PodDisruptionBudget' + description: OK + "401": + content: {} + description: Unauthorized + tags: + - policy_v1 + x-kubernetes-action: get + x-kubernetes-group-version-kind: + group: policy + kind: PodDisruptionBudget + version: v1 + x-accepts: application/json + patch: + description: partially update status of the specified PodDisruptionBudget + operationId: patchNamespacedPodDisruptionBudgetStatus + parameters: + - description: name of the PodDisruptionBudget + in: path + name: name + required: true + schema: + type: string + - description: object name and auth scope, such as for teams and projects + in: path + name: namespace + required: true + schema: + type: string + - description: If 'true', then the output is pretty printed. Defaults to 'false' + unless the user-agent indicates a browser or command-line HTTP tool (curl + and wget). + in: query + name: pretty + schema: + type: string + - description: 'When present, indicates that modifications should not be persisted. + An invalid or unrecognized dryRun directive will result in an error response + and no further processing of the request. Valid values are: - All: all dry + run stages will be processed' + in: query + name: dryRun + schema: + type: string + - description: fieldManager is a name associated with the actor or entity that + is making these changes. The value must be less than or 128 characters long, + and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. + This field is required for apply requests (application/apply-patch) but + optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch). + in: query + name: fieldManager + schema: + type: string + - description: 'fieldValidation instructs the server on how to handle objects + in the request (POST/PUT/PATCH) containing unknown or duplicate fields. + Valid values are: - Ignore: This will ignore any unknown fields that are + silently dropped from the object, and will ignore all but the last duplicate + field that the decoder encounters. This is the default behavior prior to + v1.23. - Warn: This will send a warning via the standard warning response + header for each unknown field that is dropped from the object, and for each + duplicate field that is encountered. The request will still succeed if there + are no other errors, and will only persist the last of any duplicate fields. + This is the default in v1.23+ - Strict: This will fail the request with + a BadRequest error if any unknown fields would be dropped from the object, + or if any duplicate fields are present. The error returned from the server + will contain all unknown and duplicate fields encountered.' + in: query + name: fieldValidation + schema: + type: string + - description: Force is going to "force" Apply requests. It means user will + re-acquire conflicting fields owned by other people. Force flag must be + unset for non-apply patch requests. + in: query + name: force + schema: + type: boolean + requestBody: + content: + application/json: + schema: + $ref: '#/components/schemas/v1.Patch' + required: true + responses: + "200": + content: + application/json: + schema: + $ref: '#/components/schemas/v1.PodDisruptionBudget' + application/yaml: + schema: + $ref: '#/components/schemas/v1.PodDisruptionBudget' + application/vnd.kubernetes.protobuf: + schema: + $ref: '#/components/schemas/v1.PodDisruptionBudget' + application/cbor: + schema: + $ref: '#/components/schemas/v1.PodDisruptionBudget' + description: OK + "201": + content: + application/json: + schema: + $ref: '#/components/schemas/v1.PodDisruptionBudget' + application/yaml: + schema: + $ref: '#/components/schemas/v1.PodDisruptionBudget' + application/vnd.kubernetes.protobuf: + schema: + $ref: '#/components/schemas/v1.PodDisruptionBudget' + application/cbor: + schema: + $ref: '#/components/schemas/v1.PodDisruptionBudget' + description: Created + "401": + content: {} + description: Unauthorized + tags: + - policy_v1 + x-kubernetes-action: patch + x-kubernetes-group-version-kind: + group: policy + kind: PodDisruptionBudget + version: v1 + x-codegen-request-body-name: body + x-contentType: application/json + x-accepts: application/json + put: + description: replace status of the specified PodDisruptionBudget + operationId: replaceNamespacedPodDisruptionBudgetStatus + parameters: + - description: name of the PodDisruptionBudget + in: path + name: name + required: true + schema: + type: string + - description: object name and auth scope, such as for teams and projects + in: path + name: namespace + required: true + schema: + type: string + - description: If 'true', then the output is pretty printed. Defaults to 'false' + unless the user-agent indicates a browser or command-line HTTP tool (curl + and wget). + in: query + name: pretty + schema: + type: string + - description: 'When present, indicates that modifications should not be persisted. + An invalid or unrecognized dryRun directive will result in an error response + and no further processing of the request. Valid values are: - All: all dry + run stages will be processed' + in: query + name: dryRun + schema: + type: string + - description: fieldManager is a name associated with the actor or entity that + is making these changes. The value must be less than or 128 characters long, + and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. + in: query + name: fieldManager + schema: + type: string + - description: 'fieldValidation instructs the server on how to handle objects + in the request (POST/PUT/PATCH) containing unknown or duplicate fields. + Valid values are: - Ignore: This will ignore any unknown fields that are + silently dropped from the object, and will ignore all but the last duplicate + field that the decoder encounters. This is the default behavior prior to + v1.23. - Warn: This will send a warning via the standard warning response + header for each unknown field that is dropped from the object, and for each + duplicate field that is encountered. The request will still succeed if there + are no other errors, and will only persist the last of any duplicate fields. + This is the default in v1.23+ - Strict: This will fail the request with + a BadRequest error if any unknown fields would be dropped from the object, + or if any duplicate fields are present. The error returned from the server + will contain all unknown and duplicate fields encountered.' + in: query + name: fieldValidation + schema: + type: string + requestBody: + content: + application/json: + schema: + $ref: '#/components/schemas/v1.PodDisruptionBudget' + required: true + responses: + "200": + content: + application/json: + schema: + $ref: '#/components/schemas/v1.PodDisruptionBudget' + application/yaml: + schema: + $ref: '#/components/schemas/v1.PodDisruptionBudget' + application/vnd.kubernetes.protobuf: + schema: + $ref: '#/components/schemas/v1.PodDisruptionBudget' + application/cbor: + schema: + $ref: '#/components/schemas/v1.PodDisruptionBudget' + description: OK + "201": + content: + application/json: + schema: + $ref: '#/components/schemas/v1.PodDisruptionBudget' + application/yaml: + schema: + $ref: '#/components/schemas/v1.PodDisruptionBudget' + application/vnd.kubernetes.protobuf: + schema: + $ref: '#/components/schemas/v1.PodDisruptionBudget' + application/cbor: + schema: + $ref: '#/components/schemas/v1.PodDisruptionBudget' + description: Created + "401": + content: {} + description: Unauthorized + tags: + - policy_v1 + x-kubernetes-action: put + x-kubernetes-group-version-kind: + group: policy + kind: PodDisruptionBudget + version: v1 + x-codegen-request-body-name: body + x-contentType: application/json + x-accepts: application/json + /apis/policy/v1/poddisruptionbudgets: + get: + description: list or watch objects of kind PodDisruptionBudget + operationId: listPodDisruptionBudgetForAllNamespaces + parameters: + - description: allowWatchBookmarks requests watch events with type "BOOKMARK". + Servers that do not implement bookmarks may ignore this flag and bookmarks + are sent at the server's discretion. Clients should not assume bookmarks + are returned at any specific interval, nor may they assume the server will + send any BOOKMARK event during a session. If this is not a watch, this field + is ignored. + in: query + name: allowWatchBookmarks + schema: + type: boolean + - description: |- + The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + + This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications. + in: query + name: continue + schema: + type: string + - description: A selector to restrict the list of returned objects by their + fields. Defaults to everything. + in: query + name: fieldSelector + schema: + type: string + - description: A selector to restrict the list of returned objects by their + labels. Defaults to everything. + in: query + name: labelSelector + schema: + type: string + - description: |- + limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + + The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned. + in: query + name: limit + schema: + type: integer + - description: If 'true', then the output is pretty printed. Defaults to 'false' + unless the user-agent indicates a browser or command-line HTTP tool (curl + and wget). + in: query + name: pretty + schema: + type: string + - description: |- + resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + + Defaults to unset + in: query + name: resourceVersion + schema: + type: string + - description: |- + resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + + Defaults to unset + in: query + name: resourceVersionMatch + schema: + type: string + - description: |- + `sendInitialEvents=true` may be set together with `watch=true`. In that case, the watch stream will begin with synthetic events to produce the current state of objects in the collection. Once all such events have been sent, a synthetic "Bookmark" event will be sent. The bookmark will report the ResourceVersion (RV) corresponding to the set of objects, and be marked with `"k8s.io/initial-events-end": "true"` annotation. Afterwards, the watch stream will proceed as usual, sending watch events corresponding to changes (subsequent to the RV) to objects watched. + + When `sendInitialEvents` option is set, we require `resourceVersionMatch` option to also be set. The semantic of the watch request is as following: - `resourceVersionMatch` = NotOlderThan + is interpreted as "data at least as new as the provided `resourceVersion`" + and the bookmark event is send when the state is synced + to a `resourceVersion` at least as fresh as the one provided by the ListOptions. + If `resourceVersion` is unset, this is interpreted as "consistent read" and the + bookmark event is send when the state is synced at least to the moment + when request started being processed. + - `resourceVersionMatch` set to any other value or unset + Invalid error is returned. + + Defaults to true if `resourceVersion=""` or `resourceVersion="0"` (for backward compatibility reasons) and to false otherwise. + in: query + name: sendInitialEvents + schema: + type: boolean + - description: Timeout for the list/watch call. This limits the duration of + the call, regardless of any activity or inactivity. + in: query + name: timeoutSeconds + schema: + type: integer + - description: Watch for changes to the described resources and return them + as a stream of add, update, and remove notifications. Specify resourceVersion. + in: query + name: watch + schema: + type: boolean + responses: + "200": + content: + application/json: + schema: + $ref: '#/components/schemas/v1.PodDisruptionBudgetList' + application/yaml: + schema: + $ref: '#/components/schemas/v1.PodDisruptionBudgetList' + application/vnd.kubernetes.protobuf: + schema: + $ref: '#/components/schemas/v1.PodDisruptionBudgetList' + application/cbor: + schema: + $ref: '#/components/schemas/v1.PodDisruptionBudgetList' + application/json;stream=watch: + schema: + $ref: '#/components/schemas/v1.PodDisruptionBudgetList' + application/vnd.kubernetes.protobuf;stream=watch: + schema: + $ref: '#/components/schemas/v1.PodDisruptionBudgetList' + application/cbor-seq: + schema: + $ref: '#/components/schemas/v1.PodDisruptionBudgetList' + description: OK + "401": + content: {} + description: Unauthorized + tags: + - policy_v1 + x-kubernetes-action: list + x-kubernetes-group-version-kind: + group: policy + kind: PodDisruptionBudget + version: v1 + x-accepts: application/json + /apis/policy/v1/watch/namespaces/{namespace}/poddisruptionbudgets: {} + /apis/policy/v1/watch/namespaces/{namespace}/poddisruptionbudgets/{name}: {} + /apis/policy/v1/watch/poddisruptionbudgets: {} + /apis/rbac.authorization.k8s.io/: + get: + description: get information of a group + operationId: getAPIGroup + responses: + "200": + content: + application/json: + schema: + $ref: '#/components/schemas/v1.APIGroup' + application/yaml: + schema: + $ref: '#/components/schemas/v1.APIGroup' + application/vnd.kubernetes.protobuf: + schema: + $ref: '#/components/schemas/v1.APIGroup' + description: OK + "401": + content: {} + description: Unauthorized + tags: + - rbacAuthorization + x-accepts: application/json + /apis/rbac.authorization.k8s.io/v1/: + get: + description: get available resources + operationId: getAPIResources + responses: + "200": + content: + application/json: + schema: + $ref: '#/components/schemas/v1.APIResourceList' + application/yaml: + schema: + $ref: '#/components/schemas/v1.APIResourceList' + application/vnd.kubernetes.protobuf: + schema: + $ref: '#/components/schemas/v1.APIResourceList' + application/cbor: + schema: + $ref: '#/components/schemas/v1.APIResourceList' + description: OK + "401": + content: {} + description: Unauthorized + tags: + - rbacAuthorization_v1 + x-accepts: application/json + /apis/rbac.authorization.k8s.io/v1/clusterrolebindings: delete: - description: delete collection of ClusterRole - operationId: deleteCollectionClusterRole + description: delete collection of ClusterRoleBinding + operationId: deleteCollectionClusterRoleBinding parameters: - description: If 'true', then the output is pretty printed. Defaults to 'false' unless the user-agent indicates a browser or command-line HTTP tool (curl @@ -61698,14 +61893,14 @@ paths: x-kubernetes-action: deletecollection x-kubernetes-group-version-kind: group: rbac.authorization.k8s.io - kind: ClusterRole + kind: ClusterRoleBinding version: v1 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json get: - description: list or watch objects of kind ClusterRole - operationId: listClusterRole + description: list or watch objects of kind ClusterRoleBinding + operationId: listClusterRoleBinding parameters: - description: If 'true', then the output is pretty printed. Defaults to 'false' unless the user-agent indicates a browser or command-line HTTP tool (curl @@ -61803,25 +61998,25 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1.ClusterRoleList' + $ref: '#/components/schemas/v1.ClusterRoleBindingList' application/yaml: schema: - $ref: '#/components/schemas/v1.ClusterRoleList' + $ref: '#/components/schemas/v1.ClusterRoleBindingList' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1.ClusterRoleList' + $ref: '#/components/schemas/v1.ClusterRoleBindingList' application/cbor: schema: - $ref: '#/components/schemas/v1.ClusterRoleList' + $ref: '#/components/schemas/v1.ClusterRoleBindingList' application/json;stream=watch: schema: - $ref: '#/components/schemas/v1.ClusterRoleList' + $ref: '#/components/schemas/v1.ClusterRoleBindingList' application/vnd.kubernetes.protobuf;stream=watch: schema: - $ref: '#/components/schemas/v1.ClusterRoleList' + $ref: '#/components/schemas/v1.ClusterRoleBindingList' application/cbor-seq: schema: - $ref: '#/components/schemas/v1.ClusterRoleList' + $ref: '#/components/schemas/v1.ClusterRoleBindingList' description: OK "401": content: {} @@ -61831,12 +62026,12 @@ paths: x-kubernetes-action: list x-kubernetes-group-version-kind: group: rbac.authorization.k8s.io - kind: ClusterRole + kind: ClusterRoleBinding version: v1 x-accepts: application/json post: - description: create a ClusterRole - operationId: createClusterRole + description: create a ClusterRoleBinding + operationId: createClusterRoleBinding parameters: - description: If 'true', then the output is pretty printed. Defaults to 'false' unless the user-agent indicates a browser or command-line HTTP tool (curl @@ -61881,53 +62076,53 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1.ClusterRole' + $ref: '#/components/schemas/v1.ClusterRoleBinding' required: true responses: "200": content: application/json: schema: - $ref: '#/components/schemas/v1.ClusterRole' + $ref: '#/components/schemas/v1.ClusterRoleBinding' application/yaml: schema: - $ref: '#/components/schemas/v1.ClusterRole' + $ref: '#/components/schemas/v1.ClusterRoleBinding' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1.ClusterRole' + $ref: '#/components/schemas/v1.ClusterRoleBinding' application/cbor: schema: - $ref: '#/components/schemas/v1.ClusterRole' + $ref: '#/components/schemas/v1.ClusterRoleBinding' description: OK "201": content: application/json: schema: - $ref: '#/components/schemas/v1.ClusterRole' + $ref: '#/components/schemas/v1.ClusterRoleBinding' application/yaml: schema: - $ref: '#/components/schemas/v1.ClusterRole' + $ref: '#/components/schemas/v1.ClusterRoleBinding' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1.ClusterRole' + $ref: '#/components/schemas/v1.ClusterRoleBinding' application/cbor: schema: - $ref: '#/components/schemas/v1.ClusterRole' + $ref: '#/components/schemas/v1.ClusterRoleBinding' description: Created "202": content: application/json: schema: - $ref: '#/components/schemas/v1.ClusterRole' + $ref: '#/components/schemas/v1.ClusterRoleBinding' application/yaml: schema: - $ref: '#/components/schemas/v1.ClusterRole' + $ref: '#/components/schemas/v1.ClusterRoleBinding' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1.ClusterRole' + $ref: '#/components/schemas/v1.ClusterRoleBinding' application/cbor: schema: - $ref: '#/components/schemas/v1.ClusterRole' + $ref: '#/components/schemas/v1.ClusterRoleBinding' description: Accepted "401": content: {} @@ -61937,17 +62132,17 @@ paths: x-kubernetes-action: post x-kubernetes-group-version-kind: group: rbac.authorization.k8s.io - kind: ClusterRole + kind: ClusterRoleBinding version: v1 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json - /apis/rbac.authorization.k8s.io/v1/clusterroles/{name}: + /apis/rbac.authorization.k8s.io/v1/clusterrolebindings/{name}: delete: - description: delete a ClusterRole - operationId: deleteClusterRole + description: delete a ClusterRoleBinding + operationId: deleteClusterRoleBinding parameters: - - description: name of the ClusterRole + - description: name of the ClusterRoleBinding in: path name: name required: true @@ -62055,16 +62250,16 @@ paths: x-kubernetes-action: delete x-kubernetes-group-version-kind: group: rbac.authorization.k8s.io - kind: ClusterRole + kind: ClusterRoleBinding version: v1 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json get: - description: read the specified ClusterRole - operationId: readClusterRole + description: read the specified ClusterRoleBinding + operationId: readClusterRoleBinding parameters: - - description: name of the ClusterRole + - description: name of the ClusterRoleBinding in: path name: name required: true @@ -62082,16 +62277,16 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1.ClusterRole' + $ref: '#/components/schemas/v1.ClusterRoleBinding' application/yaml: schema: - $ref: '#/components/schemas/v1.ClusterRole' + $ref: '#/components/schemas/v1.ClusterRoleBinding' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1.ClusterRole' + $ref: '#/components/schemas/v1.ClusterRoleBinding' application/cbor: schema: - $ref: '#/components/schemas/v1.ClusterRole' + $ref: '#/components/schemas/v1.ClusterRoleBinding' description: OK "401": content: {} @@ -62101,14 +62296,14 @@ paths: x-kubernetes-action: get x-kubernetes-group-version-kind: group: rbac.authorization.k8s.io - kind: ClusterRole + kind: ClusterRoleBinding version: v1 x-accepts: application/json patch: - description: partially update the specified ClusterRole - operationId: patchClusterRole + description: partially update the specified ClusterRoleBinding + operationId: patchClusterRoleBinding parameters: - - description: name of the ClusterRole + - description: name of the ClusterRoleBinding in: path name: name required: true @@ -62173,31 +62368,31 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1.ClusterRole' + $ref: '#/components/schemas/v1.ClusterRoleBinding' application/yaml: schema: - $ref: '#/components/schemas/v1.ClusterRole' + $ref: '#/components/schemas/v1.ClusterRoleBinding' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1.ClusterRole' + $ref: '#/components/schemas/v1.ClusterRoleBinding' application/cbor: schema: - $ref: '#/components/schemas/v1.ClusterRole' + $ref: '#/components/schemas/v1.ClusterRoleBinding' description: OK "201": content: application/json: schema: - $ref: '#/components/schemas/v1.ClusterRole' + $ref: '#/components/schemas/v1.ClusterRoleBinding' application/yaml: schema: - $ref: '#/components/schemas/v1.ClusterRole' + $ref: '#/components/schemas/v1.ClusterRoleBinding' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1.ClusterRole' + $ref: '#/components/schemas/v1.ClusterRoleBinding' application/cbor: schema: - $ref: '#/components/schemas/v1.ClusterRole' + $ref: '#/components/schemas/v1.ClusterRoleBinding' description: Created "401": content: {} @@ -62207,16 +62402,16 @@ paths: x-kubernetes-action: patch x-kubernetes-group-version-kind: group: rbac.authorization.k8s.io - kind: ClusterRole + kind: ClusterRoleBinding version: v1 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json put: - description: replace the specified ClusterRole - operationId: replaceClusterRole + description: replace the specified ClusterRoleBinding + operationId: replaceClusterRoleBinding parameters: - - description: name of the ClusterRole + - description: name of the ClusterRoleBinding in: path name: name required: true @@ -62265,38 +62460,38 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1.ClusterRole' + $ref: '#/components/schemas/v1.ClusterRoleBinding' required: true responses: "200": content: application/json: schema: - $ref: '#/components/schemas/v1.ClusterRole' + $ref: '#/components/schemas/v1.ClusterRoleBinding' application/yaml: schema: - $ref: '#/components/schemas/v1.ClusterRole' + $ref: '#/components/schemas/v1.ClusterRoleBinding' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1.ClusterRole' + $ref: '#/components/schemas/v1.ClusterRoleBinding' application/cbor: schema: - $ref: '#/components/schemas/v1.ClusterRole' + $ref: '#/components/schemas/v1.ClusterRoleBinding' description: OK "201": content: application/json: schema: - $ref: '#/components/schemas/v1.ClusterRole' + $ref: '#/components/schemas/v1.ClusterRoleBinding' application/yaml: schema: - $ref: '#/components/schemas/v1.ClusterRole' + $ref: '#/components/schemas/v1.ClusterRoleBinding' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1.ClusterRole' + $ref: '#/components/schemas/v1.ClusterRoleBinding' application/cbor: schema: - $ref: '#/components/schemas/v1.ClusterRole' + $ref: '#/components/schemas/v1.ClusterRoleBinding' description: Created "401": content: {} @@ -62306,22 +62501,16 @@ paths: x-kubernetes-action: put x-kubernetes-group-version-kind: group: rbac.authorization.k8s.io - kind: ClusterRole + kind: ClusterRoleBinding version: v1 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json - /apis/rbac.authorization.k8s.io/v1/namespaces/{namespace}/rolebindings: + /apis/rbac.authorization.k8s.io/v1/clusterroles: delete: - description: delete collection of RoleBinding - operationId: deleteCollectionNamespacedRoleBinding + description: delete collection of ClusterRole + operationId: deleteCollectionClusterRole parameters: - - description: object name and auth scope, such as for teams and projects - in: path - name: namespace - required: true - schema: - type: string - description: If 'true', then the output is pretty printed. Defaults to 'false' unless the user-agent indicates a browser or command-line HTTP tool (curl and wget). @@ -62477,21 +62666,15 @@ paths: x-kubernetes-action: deletecollection x-kubernetes-group-version-kind: group: rbac.authorization.k8s.io - kind: RoleBinding + kind: ClusterRole version: v1 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json get: - description: list or watch objects of kind RoleBinding - operationId: listNamespacedRoleBinding + description: list or watch objects of kind ClusterRole + operationId: listClusterRole parameters: - - description: object name and auth scope, such as for teams and projects - in: path - name: namespace - required: true - schema: - type: string - description: If 'true', then the output is pretty printed. Defaults to 'false' unless the user-agent indicates a browser or command-line HTTP tool (curl and wget). @@ -62588,25 +62771,25 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1.RoleBindingList' + $ref: '#/components/schemas/v1.ClusterRoleList' application/yaml: schema: - $ref: '#/components/schemas/v1.RoleBindingList' + $ref: '#/components/schemas/v1.ClusterRoleList' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1.RoleBindingList' + $ref: '#/components/schemas/v1.ClusterRoleList' application/cbor: schema: - $ref: '#/components/schemas/v1.RoleBindingList' + $ref: '#/components/schemas/v1.ClusterRoleList' application/json;stream=watch: schema: - $ref: '#/components/schemas/v1.RoleBindingList' + $ref: '#/components/schemas/v1.ClusterRoleList' application/vnd.kubernetes.protobuf;stream=watch: schema: - $ref: '#/components/schemas/v1.RoleBindingList' + $ref: '#/components/schemas/v1.ClusterRoleList' application/cbor-seq: schema: - $ref: '#/components/schemas/v1.RoleBindingList' + $ref: '#/components/schemas/v1.ClusterRoleList' description: OK "401": content: {} @@ -62616,19 +62799,13 @@ paths: x-kubernetes-action: list x-kubernetes-group-version-kind: group: rbac.authorization.k8s.io - kind: RoleBinding + kind: ClusterRole version: v1 x-accepts: application/json post: - description: create a RoleBinding - operationId: createNamespacedRoleBinding + description: create a ClusterRole + operationId: createClusterRole parameters: - - description: object name and auth scope, such as for teams and projects - in: path - name: namespace - required: true - schema: - type: string - description: If 'true', then the output is pretty printed. Defaults to 'false' unless the user-agent indicates a browser or command-line HTTP tool (curl and wget). @@ -62672,53 +62849,53 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1.RoleBinding' + $ref: '#/components/schemas/v1.ClusterRole' required: true responses: "200": content: application/json: schema: - $ref: '#/components/schemas/v1.RoleBinding' + $ref: '#/components/schemas/v1.ClusterRole' application/yaml: schema: - $ref: '#/components/schemas/v1.RoleBinding' + $ref: '#/components/schemas/v1.ClusterRole' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1.RoleBinding' + $ref: '#/components/schemas/v1.ClusterRole' application/cbor: schema: - $ref: '#/components/schemas/v1.RoleBinding' + $ref: '#/components/schemas/v1.ClusterRole' description: OK "201": content: application/json: schema: - $ref: '#/components/schemas/v1.RoleBinding' + $ref: '#/components/schemas/v1.ClusterRole' application/yaml: schema: - $ref: '#/components/schemas/v1.RoleBinding' + $ref: '#/components/schemas/v1.ClusterRole' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1.RoleBinding' + $ref: '#/components/schemas/v1.ClusterRole' application/cbor: schema: - $ref: '#/components/schemas/v1.RoleBinding' + $ref: '#/components/schemas/v1.ClusterRole' description: Created "202": content: application/json: schema: - $ref: '#/components/schemas/v1.RoleBinding' + $ref: '#/components/schemas/v1.ClusterRole' application/yaml: schema: - $ref: '#/components/schemas/v1.RoleBinding' + $ref: '#/components/schemas/v1.ClusterRole' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1.RoleBinding' + $ref: '#/components/schemas/v1.ClusterRole' application/cbor: schema: - $ref: '#/components/schemas/v1.RoleBinding' + $ref: '#/components/schemas/v1.ClusterRole' description: Accepted "401": content: {} @@ -62728,28 +62905,22 @@ paths: x-kubernetes-action: post x-kubernetes-group-version-kind: group: rbac.authorization.k8s.io - kind: RoleBinding + kind: ClusterRole version: v1 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json - /apis/rbac.authorization.k8s.io/v1/namespaces/{namespace}/rolebindings/{name}: + /apis/rbac.authorization.k8s.io/v1/clusterroles/{name}: delete: - description: delete a RoleBinding - operationId: deleteNamespacedRoleBinding + description: delete a ClusterRole + operationId: deleteClusterRole parameters: - - description: name of the RoleBinding + - description: name of the ClusterRole in: path name: name required: true schema: type: string - - description: object name and auth scope, such as for teams and projects - in: path - name: namespace - required: true - schema: - type: string - description: If 'true', then the output is pretty printed. Defaults to 'false' unless the user-agent indicates a browser or command-line HTTP tool (curl and wget). @@ -62852,27 +63023,21 @@ paths: x-kubernetes-action: delete x-kubernetes-group-version-kind: group: rbac.authorization.k8s.io - kind: RoleBinding + kind: ClusterRole version: v1 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json get: - description: read the specified RoleBinding - operationId: readNamespacedRoleBinding + description: read the specified ClusterRole + operationId: readClusterRole parameters: - - description: name of the RoleBinding + - description: name of the ClusterRole in: path name: name required: true schema: type: string - - description: object name and auth scope, such as for teams and projects - in: path - name: namespace - required: true - schema: - type: string - description: If 'true', then the output is pretty printed. Defaults to 'false' unless the user-agent indicates a browser or command-line HTTP tool (curl and wget). @@ -62885,16 +63050,16 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1.RoleBinding' + $ref: '#/components/schemas/v1.ClusterRole' application/yaml: schema: - $ref: '#/components/schemas/v1.RoleBinding' + $ref: '#/components/schemas/v1.ClusterRole' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1.RoleBinding' + $ref: '#/components/schemas/v1.ClusterRole' application/cbor: schema: - $ref: '#/components/schemas/v1.RoleBinding' + $ref: '#/components/schemas/v1.ClusterRole' description: OK "401": content: {} @@ -62904,25 +63069,19 @@ paths: x-kubernetes-action: get x-kubernetes-group-version-kind: group: rbac.authorization.k8s.io - kind: RoleBinding + kind: ClusterRole version: v1 x-accepts: application/json patch: - description: partially update the specified RoleBinding - operationId: patchNamespacedRoleBinding + description: partially update the specified ClusterRole + operationId: patchClusterRole parameters: - - description: name of the RoleBinding + - description: name of the ClusterRole in: path name: name required: true schema: type: string - - description: object name and auth scope, such as for teams and projects - in: path - name: namespace - required: true - schema: - type: string - description: If 'true', then the output is pretty printed. Defaults to 'false' unless the user-agent indicates a browser or command-line HTTP tool (curl and wget). @@ -62982,31 +63141,31 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1.RoleBinding' + $ref: '#/components/schemas/v1.ClusterRole' application/yaml: schema: - $ref: '#/components/schemas/v1.RoleBinding' + $ref: '#/components/schemas/v1.ClusterRole' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1.RoleBinding' + $ref: '#/components/schemas/v1.ClusterRole' application/cbor: schema: - $ref: '#/components/schemas/v1.RoleBinding' + $ref: '#/components/schemas/v1.ClusterRole' description: OK "201": content: application/json: schema: - $ref: '#/components/schemas/v1.RoleBinding' + $ref: '#/components/schemas/v1.ClusterRole' application/yaml: schema: - $ref: '#/components/schemas/v1.RoleBinding' + $ref: '#/components/schemas/v1.ClusterRole' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1.RoleBinding' + $ref: '#/components/schemas/v1.ClusterRole' application/cbor: schema: - $ref: '#/components/schemas/v1.RoleBinding' + $ref: '#/components/schemas/v1.ClusterRole' description: Created "401": content: {} @@ -63016,27 +63175,21 @@ paths: x-kubernetes-action: patch x-kubernetes-group-version-kind: group: rbac.authorization.k8s.io - kind: RoleBinding + kind: ClusterRole version: v1 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json put: - description: replace the specified RoleBinding - operationId: replaceNamespacedRoleBinding + description: replace the specified ClusterRole + operationId: replaceClusterRole parameters: - - description: name of the RoleBinding + - description: name of the ClusterRole in: path name: name required: true schema: type: string - - description: object name and auth scope, such as for teams and projects - in: path - name: namespace - required: true - schema: - type: string - description: If 'true', then the output is pretty printed. Defaults to 'false' unless the user-agent indicates a browser or command-line HTTP tool (curl and wget). @@ -63080,38 +63233,38 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1.RoleBinding' + $ref: '#/components/schemas/v1.ClusterRole' required: true responses: "200": content: application/json: schema: - $ref: '#/components/schemas/v1.RoleBinding' + $ref: '#/components/schemas/v1.ClusterRole' application/yaml: schema: - $ref: '#/components/schemas/v1.RoleBinding' + $ref: '#/components/schemas/v1.ClusterRole' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1.RoleBinding' + $ref: '#/components/schemas/v1.ClusterRole' application/cbor: schema: - $ref: '#/components/schemas/v1.RoleBinding' + $ref: '#/components/schemas/v1.ClusterRole' description: OK "201": content: application/json: schema: - $ref: '#/components/schemas/v1.RoleBinding' + $ref: '#/components/schemas/v1.ClusterRole' application/yaml: schema: - $ref: '#/components/schemas/v1.RoleBinding' + $ref: '#/components/schemas/v1.ClusterRole' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1.RoleBinding' + $ref: '#/components/schemas/v1.ClusterRole' application/cbor: schema: - $ref: '#/components/schemas/v1.RoleBinding' + $ref: '#/components/schemas/v1.ClusterRole' description: Created "401": content: {} @@ -63121,15 +63274,15 @@ paths: x-kubernetes-action: put x-kubernetes-group-version-kind: group: rbac.authorization.k8s.io - kind: RoleBinding + kind: ClusterRole version: v1 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json - /apis/rbac.authorization.k8s.io/v1/namespaces/{namespace}/roles: + /apis/rbac.authorization.k8s.io/v1/namespaces/{namespace}/rolebindings: delete: - description: delete collection of Role - operationId: deleteCollectionNamespacedRole + description: delete collection of RoleBinding + operationId: deleteCollectionNamespacedRoleBinding parameters: - description: object name and auth scope, such as for teams and projects in: path @@ -63292,14 +63445,14 @@ paths: x-kubernetes-action: deletecollection x-kubernetes-group-version-kind: group: rbac.authorization.k8s.io - kind: Role + kind: RoleBinding version: v1 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json get: - description: list or watch objects of kind Role - operationId: listNamespacedRole + description: list or watch objects of kind RoleBinding + operationId: listNamespacedRoleBinding parameters: - description: object name and auth scope, such as for teams and projects in: path @@ -63403,25 +63556,25 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1.RoleList' + $ref: '#/components/schemas/v1.RoleBindingList' application/yaml: schema: - $ref: '#/components/schemas/v1.RoleList' + $ref: '#/components/schemas/v1.RoleBindingList' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1.RoleList' + $ref: '#/components/schemas/v1.RoleBindingList' application/cbor: schema: - $ref: '#/components/schemas/v1.RoleList' + $ref: '#/components/schemas/v1.RoleBindingList' application/json;stream=watch: schema: - $ref: '#/components/schemas/v1.RoleList' + $ref: '#/components/schemas/v1.RoleBindingList' application/vnd.kubernetes.protobuf;stream=watch: schema: - $ref: '#/components/schemas/v1.RoleList' + $ref: '#/components/schemas/v1.RoleBindingList' application/cbor-seq: schema: - $ref: '#/components/schemas/v1.RoleList' + $ref: '#/components/schemas/v1.RoleBindingList' description: OK "401": content: {} @@ -63431,12 +63584,12 @@ paths: x-kubernetes-action: list x-kubernetes-group-version-kind: group: rbac.authorization.k8s.io - kind: Role + kind: RoleBinding version: v1 x-accepts: application/json post: - description: create a Role - operationId: createNamespacedRole + description: create a RoleBinding + operationId: createNamespacedRoleBinding parameters: - description: object name and auth scope, such as for teams and projects in: path @@ -63487,53 +63640,53 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1.Role' + $ref: '#/components/schemas/v1.RoleBinding' required: true responses: "200": content: application/json: schema: - $ref: '#/components/schemas/v1.Role' + $ref: '#/components/schemas/v1.RoleBinding' application/yaml: schema: - $ref: '#/components/schemas/v1.Role' + $ref: '#/components/schemas/v1.RoleBinding' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1.Role' + $ref: '#/components/schemas/v1.RoleBinding' application/cbor: schema: - $ref: '#/components/schemas/v1.Role' + $ref: '#/components/schemas/v1.RoleBinding' description: OK "201": content: application/json: schema: - $ref: '#/components/schemas/v1.Role' + $ref: '#/components/schemas/v1.RoleBinding' application/yaml: schema: - $ref: '#/components/schemas/v1.Role' + $ref: '#/components/schemas/v1.RoleBinding' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1.Role' + $ref: '#/components/schemas/v1.RoleBinding' application/cbor: schema: - $ref: '#/components/schemas/v1.Role' + $ref: '#/components/schemas/v1.RoleBinding' description: Created "202": content: application/json: schema: - $ref: '#/components/schemas/v1.Role' + $ref: '#/components/schemas/v1.RoleBinding' application/yaml: schema: - $ref: '#/components/schemas/v1.Role' + $ref: '#/components/schemas/v1.RoleBinding' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1.Role' + $ref: '#/components/schemas/v1.RoleBinding' application/cbor: schema: - $ref: '#/components/schemas/v1.Role' + $ref: '#/components/schemas/v1.RoleBinding' description: Accepted "401": content: {} @@ -63543,17 +63696,17 @@ paths: x-kubernetes-action: post x-kubernetes-group-version-kind: group: rbac.authorization.k8s.io - kind: Role + kind: RoleBinding version: v1 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json - /apis/rbac.authorization.k8s.io/v1/namespaces/{namespace}/roles/{name}: + /apis/rbac.authorization.k8s.io/v1/namespaces/{namespace}/rolebindings/{name}: delete: - description: delete a Role - operationId: deleteNamespacedRole + description: delete a RoleBinding + operationId: deleteNamespacedRoleBinding parameters: - - description: name of the Role + - description: name of the RoleBinding in: path name: name required: true @@ -63667,16 +63820,16 @@ paths: x-kubernetes-action: delete x-kubernetes-group-version-kind: group: rbac.authorization.k8s.io - kind: Role + kind: RoleBinding version: v1 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json get: - description: read the specified Role - operationId: readNamespacedRole + description: read the specified RoleBinding + operationId: readNamespacedRoleBinding parameters: - - description: name of the Role + - description: name of the RoleBinding in: path name: name required: true @@ -63700,16 +63853,16 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1.Role' + $ref: '#/components/schemas/v1.RoleBinding' application/yaml: schema: - $ref: '#/components/schemas/v1.Role' + $ref: '#/components/schemas/v1.RoleBinding' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1.Role' + $ref: '#/components/schemas/v1.RoleBinding' application/cbor: schema: - $ref: '#/components/schemas/v1.Role' + $ref: '#/components/schemas/v1.RoleBinding' description: OK "401": content: {} @@ -63719,14 +63872,14 @@ paths: x-kubernetes-action: get x-kubernetes-group-version-kind: group: rbac.authorization.k8s.io - kind: Role + kind: RoleBinding version: v1 x-accepts: application/json patch: - description: partially update the specified Role - operationId: patchNamespacedRole + description: partially update the specified RoleBinding + operationId: patchNamespacedRoleBinding parameters: - - description: name of the Role + - description: name of the RoleBinding in: path name: name required: true @@ -63797,31 +63950,31 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1.Role' + $ref: '#/components/schemas/v1.RoleBinding' application/yaml: schema: - $ref: '#/components/schemas/v1.Role' + $ref: '#/components/schemas/v1.RoleBinding' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1.Role' + $ref: '#/components/schemas/v1.RoleBinding' application/cbor: schema: - $ref: '#/components/schemas/v1.Role' + $ref: '#/components/schemas/v1.RoleBinding' description: OK "201": content: application/json: schema: - $ref: '#/components/schemas/v1.Role' + $ref: '#/components/schemas/v1.RoleBinding' application/yaml: schema: - $ref: '#/components/schemas/v1.Role' + $ref: '#/components/schemas/v1.RoleBinding' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1.Role' + $ref: '#/components/schemas/v1.RoleBinding' application/cbor: schema: - $ref: '#/components/schemas/v1.Role' + $ref: '#/components/schemas/v1.RoleBinding' description: Created "401": content: {} @@ -63831,16 +63984,16 @@ paths: x-kubernetes-action: patch x-kubernetes-group-version-kind: group: rbac.authorization.k8s.io - kind: Role + kind: RoleBinding version: v1 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json put: - description: replace the specified Role - operationId: replaceNamespacedRole + description: replace the specified RoleBinding + operationId: replaceNamespacedRoleBinding parameters: - - description: name of the Role + - description: name of the RoleBinding in: path name: name required: true @@ -63895,38 +64048,38 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1.Role' + $ref: '#/components/schemas/v1.RoleBinding' required: true responses: "200": content: application/json: schema: - $ref: '#/components/schemas/v1.Role' + $ref: '#/components/schemas/v1.RoleBinding' application/yaml: schema: - $ref: '#/components/schemas/v1.Role' + $ref: '#/components/schemas/v1.RoleBinding' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1.Role' + $ref: '#/components/schemas/v1.RoleBinding' application/cbor: schema: - $ref: '#/components/schemas/v1.Role' + $ref: '#/components/schemas/v1.RoleBinding' description: OK "201": content: application/json: schema: - $ref: '#/components/schemas/v1.Role' + $ref: '#/components/schemas/v1.RoleBinding' application/yaml: schema: - $ref: '#/components/schemas/v1.Role' + $ref: '#/components/schemas/v1.RoleBinding' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1.Role' + $ref: '#/components/schemas/v1.RoleBinding' application/cbor: schema: - $ref: '#/components/schemas/v1.Role' + $ref: '#/components/schemas/v1.RoleBinding' description: Created "401": content: {} @@ -63936,26 +64089,29 @@ paths: x-kubernetes-action: put x-kubernetes-group-version-kind: group: rbac.authorization.k8s.io - kind: Role + kind: RoleBinding version: v1 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json - /apis/rbac.authorization.k8s.io/v1/rolebindings: - get: - description: list or watch objects of kind RoleBinding - operationId: listRoleBindingForAllNamespaces + /apis/rbac.authorization.k8s.io/v1/namespaces/{namespace}/roles: + delete: + description: delete collection of Role + operationId: deleteCollectionNamespacedRole parameters: - - description: allowWatchBookmarks requests watch events with type "BOOKMARK". - Servers that do not implement bookmarks may ignore this flag and bookmarks - are sent at the server's discretion. Clients should not assume bookmarks - are returned at any specific interval, nor may they assume the server will - send any BOOKMARK event during a session. If this is not a watch, this field - is ignored. + - description: object name and auth scope, such as for teams and projects + in: path + name: namespace + required: true + schema: + type: string + - description: If 'true', then the output is pretty printed. Defaults to 'false' + unless the user-agent indicates a browser or command-line HTTP tool (curl + and wget). in: query - name: allowWatchBookmarks + name: pretty schema: - type: boolean + type: string - description: |- The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". @@ -63964,12 +64120,43 @@ paths: name: continue schema: type: string + - description: 'When present, indicates that modifications should not be persisted. + An invalid or unrecognized dryRun directive will result in an error response + and no further processing of the request. Valid values are: - All: all dry + run stages will be processed' + in: query + name: dryRun + schema: + type: string - description: A selector to restrict the list of returned objects by their fields. Defaults to everything. in: query name: fieldSelector schema: type: string + - description: The duration in seconds before the object should be deleted. + Value must be non-negative integer. The value zero indicates delete immediately. + If this value is nil, the default grace period for the specified type will + be used. Defaults to a per object value if not specified. zero means delete + immediately. + in: query + name: gracePeriodSeconds + schema: + type: integer + - description: 'if set to true, it will trigger an unsafe deletion of the resource + in case the normal deletion flow fails with a corrupt object error. A resource + is considered corrupt if it can not be retrieved from the underlying storage + successfully because of a) its data can not be transformed e.g. decryption + failure, or b) it fails to decode into an object. NOTE: unsafe deletion + ignores finalizer constraints, skips precondition checks, and removes the + object from the storage. WARNING: This may potentially break the cluster + if the workload associated with the resource being unsafe-deleted relies + on normal deletion flow. Use only if you REALLY know what you are doing. + The default value is false, and the user must opt in to enable it' + in: query + name: ignoreStoreReadErrorWithClusterBreakingPotential + schema: + type: boolean - description: A selector to restrict the list of returned objects by their labels. Defaults to everything. in: query @@ -63984,374 +64171,23 @@ paths: name: limit schema: type: integer - - description: If 'true', then the output is pretty printed. Defaults to 'false' - unless the user-agent indicates a browser or command-line HTTP tool (curl - and wget). + - description: 'Deprecated: please use the PropagationPolicy, this field will + be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, + the "orphan" finalizer will be added to/removed from the object''s finalizers + list. Either this field or PropagationPolicy may be set, but not both.' in: query - name: pretty - schema: - type: string - - description: |- - resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. - - Defaults to unset - in: query - name: resourceVersion - schema: - type: string - - description: |- - resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. - - Defaults to unset - in: query - name: resourceVersionMatch - schema: - type: string - - description: |- - `sendInitialEvents=true` may be set together with `watch=true`. In that case, the watch stream will begin with synthetic events to produce the current state of objects in the collection. Once all such events have been sent, a synthetic "Bookmark" event will be sent. The bookmark will report the ResourceVersion (RV) corresponding to the set of objects, and be marked with `"k8s.io/initial-events-end": "true"` annotation. Afterwards, the watch stream will proceed as usual, sending watch events corresponding to changes (subsequent to the RV) to objects watched. - - When `sendInitialEvents` option is set, we require `resourceVersionMatch` option to also be set. The semantic of the watch request is as following: - `resourceVersionMatch` = NotOlderThan - is interpreted as "data at least as new as the provided `resourceVersion`" - and the bookmark event is send when the state is synced - to a `resourceVersion` at least as fresh as the one provided by the ListOptions. - If `resourceVersion` is unset, this is interpreted as "consistent read" and the - bookmark event is send when the state is synced at least to the moment - when request started being processed. - - `resourceVersionMatch` set to any other value or unset - Invalid error is returned. - - Defaults to true if `resourceVersion=""` or `resourceVersion="0"` (for backward compatibility reasons) and to false otherwise. - in: query - name: sendInitialEvents - schema: - type: boolean - - description: Timeout for the list/watch call. This limits the duration of - the call, regardless of any activity or inactivity. - in: query - name: timeoutSeconds - schema: - type: integer - - description: Watch for changes to the described resources and return them - as a stream of add, update, and remove notifications. Specify resourceVersion. - in: query - name: watch - schema: - type: boolean - responses: - "200": - content: - application/json: - schema: - $ref: '#/components/schemas/v1.RoleBindingList' - application/yaml: - schema: - $ref: '#/components/schemas/v1.RoleBindingList' - application/vnd.kubernetes.protobuf: - schema: - $ref: '#/components/schemas/v1.RoleBindingList' - application/cbor: - schema: - $ref: '#/components/schemas/v1.RoleBindingList' - application/json;stream=watch: - schema: - $ref: '#/components/schemas/v1.RoleBindingList' - application/vnd.kubernetes.protobuf;stream=watch: - schema: - $ref: '#/components/schemas/v1.RoleBindingList' - application/cbor-seq: - schema: - $ref: '#/components/schemas/v1.RoleBindingList' - description: OK - "401": - content: {} - description: Unauthorized - tags: - - rbacAuthorization_v1 - x-kubernetes-action: list - x-kubernetes-group-version-kind: - group: rbac.authorization.k8s.io - kind: RoleBinding - version: v1 - x-accepts: application/json - /apis/rbac.authorization.k8s.io/v1/roles: - get: - description: list or watch objects of kind Role - operationId: listRoleForAllNamespaces - parameters: - - description: allowWatchBookmarks requests watch events with type "BOOKMARK". - Servers that do not implement bookmarks may ignore this flag and bookmarks - are sent at the server's discretion. Clients should not assume bookmarks - are returned at any specific interval, nor may they assume the server will - send any BOOKMARK event during a session. If this is not a watch, this field - is ignored. - in: query - name: allowWatchBookmarks - schema: - type: boolean - - description: |- - The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". - - This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications. - in: query - name: continue - schema: - type: string - - description: A selector to restrict the list of returned objects by their - fields. Defaults to everything. - in: query - name: fieldSelector - schema: - type: string - - description: A selector to restrict the list of returned objects by their - labels. Defaults to everything. - in: query - name: labelSelector - schema: - type: string - - description: |- - limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. - - The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned. - in: query - name: limit - schema: - type: integer - - description: If 'true', then the output is pretty printed. Defaults to 'false' - unless the user-agent indicates a browser or command-line HTTP tool (curl - and wget). - in: query - name: pretty - schema: - type: string - - description: |- - resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. - - Defaults to unset - in: query - name: resourceVersion - schema: - type: string - - description: |- - resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. - - Defaults to unset - in: query - name: resourceVersionMatch - schema: - type: string - - description: |- - `sendInitialEvents=true` may be set together with `watch=true`. In that case, the watch stream will begin with synthetic events to produce the current state of objects in the collection. Once all such events have been sent, a synthetic "Bookmark" event will be sent. The bookmark will report the ResourceVersion (RV) corresponding to the set of objects, and be marked with `"k8s.io/initial-events-end": "true"` annotation. Afterwards, the watch stream will proceed as usual, sending watch events corresponding to changes (subsequent to the RV) to objects watched. - - When `sendInitialEvents` option is set, we require `resourceVersionMatch` option to also be set. The semantic of the watch request is as following: - `resourceVersionMatch` = NotOlderThan - is interpreted as "data at least as new as the provided `resourceVersion`" - and the bookmark event is send when the state is synced - to a `resourceVersion` at least as fresh as the one provided by the ListOptions. - If `resourceVersion` is unset, this is interpreted as "consistent read" and the - bookmark event is send when the state is synced at least to the moment - when request started being processed. - - `resourceVersionMatch` set to any other value or unset - Invalid error is returned. - - Defaults to true if `resourceVersion=""` or `resourceVersion="0"` (for backward compatibility reasons) and to false otherwise. - in: query - name: sendInitialEvents - schema: - type: boolean - - description: Timeout for the list/watch call. This limits the duration of - the call, regardless of any activity or inactivity. - in: query - name: timeoutSeconds - schema: - type: integer - - description: Watch for changes to the described resources and return them - as a stream of add, update, and remove notifications. Specify resourceVersion. - in: query - name: watch - schema: - type: boolean - responses: - "200": - content: - application/json: - schema: - $ref: '#/components/schemas/v1.RoleList' - application/yaml: - schema: - $ref: '#/components/schemas/v1.RoleList' - application/vnd.kubernetes.protobuf: - schema: - $ref: '#/components/schemas/v1.RoleList' - application/cbor: - schema: - $ref: '#/components/schemas/v1.RoleList' - application/json;stream=watch: - schema: - $ref: '#/components/schemas/v1.RoleList' - application/vnd.kubernetes.protobuf;stream=watch: - schema: - $ref: '#/components/schemas/v1.RoleList' - application/cbor-seq: - schema: - $ref: '#/components/schemas/v1.RoleList' - description: OK - "401": - content: {} - description: Unauthorized - tags: - - rbacAuthorization_v1 - x-kubernetes-action: list - x-kubernetes-group-version-kind: - group: rbac.authorization.k8s.io - kind: Role - version: v1 - x-accepts: application/json - /apis/rbac.authorization.k8s.io/v1/watch/clusterrolebindings: {} - /apis/rbac.authorization.k8s.io/v1/watch/clusterrolebindings/{name}: {} - /apis/rbac.authorization.k8s.io/v1/watch/clusterroles: {} - /apis/rbac.authorization.k8s.io/v1/watch/clusterroles/{name}: {} - /apis/rbac.authorization.k8s.io/v1/watch/namespaces/{namespace}/rolebindings: {} - /apis/rbac.authorization.k8s.io/v1/watch/namespaces/{namespace}/rolebindings/{name}: {} - /apis/rbac.authorization.k8s.io/v1/watch/namespaces/{namespace}/roles: {} - /apis/rbac.authorization.k8s.io/v1/watch/namespaces/{namespace}/roles/{name}: {} - /apis/rbac.authorization.k8s.io/v1/watch/rolebindings: {} - /apis/rbac.authorization.k8s.io/v1/watch/roles: {} - /apis/resource.k8s.io/: - get: - description: get information of a group - operationId: getAPIGroup - responses: - "200": - content: - application/json: - schema: - $ref: '#/components/schemas/v1.APIGroup' - application/yaml: - schema: - $ref: '#/components/schemas/v1.APIGroup' - application/vnd.kubernetes.protobuf: - schema: - $ref: '#/components/schemas/v1.APIGroup' - description: OK - "401": - content: {} - description: Unauthorized - tags: - - resource - x-accepts: application/json - /apis/resource.k8s.io/v1alpha3/: - get: - description: get available resources - operationId: getAPIResources - responses: - "200": - content: - application/json: - schema: - $ref: '#/components/schemas/v1.APIResourceList' - application/yaml: - schema: - $ref: '#/components/schemas/v1.APIResourceList' - application/vnd.kubernetes.protobuf: - schema: - $ref: '#/components/schemas/v1.APIResourceList' - application/cbor: - schema: - $ref: '#/components/schemas/v1.APIResourceList' - description: OK - "401": - content: {} - description: Unauthorized - tags: - - resource_v1alpha3 - x-accepts: application/json - /apis/resource.k8s.io/v1alpha3/deviceclasses: - delete: - description: delete collection of DeviceClass - operationId: deleteCollectionDeviceClass - parameters: - - description: If 'true', then the output is pretty printed. Defaults to 'false' - unless the user-agent indicates a browser or command-line HTTP tool (curl - and wget). - in: query - name: pretty - schema: - type: string - - description: |- - The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". - - This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications. - in: query - name: continue - schema: - type: string - - description: 'When present, indicates that modifications should not be persisted. - An invalid or unrecognized dryRun directive will result in an error response - and no further processing of the request. Valid values are: - All: all dry - run stages will be processed' - in: query - name: dryRun - schema: - type: string - - description: A selector to restrict the list of returned objects by their - fields. Defaults to everything. - in: query - name: fieldSelector - schema: - type: string - - description: The duration in seconds before the object should be deleted. - Value must be non-negative integer. The value zero indicates delete immediately. - If this value is nil, the default grace period for the specified type will - be used. Defaults to a per object value if not specified. zero means delete - immediately. - in: query - name: gracePeriodSeconds - schema: - type: integer - - description: 'if set to true, it will trigger an unsafe deletion of the resource - in case the normal deletion flow fails with a corrupt object error. A resource - is considered corrupt if it can not be retrieved from the underlying storage - successfully because of a) its data can not be transformed e.g. decryption - failure, or b) it fails to decode into an object. NOTE: unsafe deletion - ignores finalizer constraints, skips precondition checks, and removes the - object from the storage. WARNING: This may potentially break the cluster - if the workload associated with the resource being unsafe-deleted relies - on normal deletion flow. Use only if you REALLY know what you are doing. - The default value is false, and the user must opt in to enable it' - in: query - name: ignoreStoreReadErrorWithClusterBreakingPotential - schema: - type: boolean - - description: A selector to restrict the list of returned objects by their - labels. Defaults to everything. - in: query - name: labelSelector - schema: - type: string - - description: |- - limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. - - The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned. - in: query - name: limit - schema: - type: integer - - description: 'Deprecated: please use the PropagationPolicy, this field will - be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, - the "orphan" finalizer will be added to/removed from the object''s finalizers - list. Either this field or PropagationPolicy may be set, but not both.' - in: query - name: orphanDependents - schema: - type: boolean - - description: 'Whether and how garbage collection will be performed. Either - this field or OrphanDependents may be set, but not both. The default policy - is decided by the existing finalizer set in the metadata.finalizers and - the resource-specific default policy. Acceptable values are: ''Orphan'' - - orphan the dependents; ''Background'' - allow the garbage collector to - delete the dependents in the background; ''Foreground'' - a cascading policy - that deletes all dependents in the foreground.' - in: query - name: propagationPolicy + name: orphanDependents + schema: + type: boolean + - description: 'Whether and how garbage collection will be performed. Either + this field or OrphanDependents may be set, but not both. The default policy + is decided by the existing finalizer set in the metadata.finalizers and + the resource-specific default policy. Acceptable values are: ''Orphan'' + - orphan the dependents; ''Background'' - allow the garbage collector to + delete the dependents in the background; ''Foreground'' - a cascading policy + that deletes all dependents in the foreground.' + in: query + name: propagationPolicy schema: type: string - description: |- @@ -64420,19 +64256,25 @@ paths: content: {} description: Unauthorized tags: - - resource_v1alpha3 + - rbacAuthorization_v1 x-kubernetes-action: deletecollection x-kubernetes-group-version-kind: - group: resource.k8s.io - kind: DeviceClass - version: v1alpha3 + group: rbac.authorization.k8s.io + kind: Role + version: v1 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json get: - description: list or watch objects of kind DeviceClass - operationId: listDeviceClass + description: list or watch objects of kind Role + operationId: listNamespacedRole parameters: + - description: object name and auth scope, such as for teams and projects + in: path + name: namespace + required: true + schema: + type: string - description: If 'true', then the output is pretty printed. Defaults to 'false' unless the user-agent indicates a browser or command-line HTTP tool (curl and wget). @@ -64529,41 +64371,47 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1alpha3.DeviceClassList' + $ref: '#/components/schemas/v1.RoleList' application/yaml: schema: - $ref: '#/components/schemas/v1alpha3.DeviceClassList' + $ref: '#/components/schemas/v1.RoleList' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1alpha3.DeviceClassList' + $ref: '#/components/schemas/v1.RoleList' application/cbor: schema: - $ref: '#/components/schemas/v1alpha3.DeviceClassList' + $ref: '#/components/schemas/v1.RoleList' application/json;stream=watch: schema: - $ref: '#/components/schemas/v1alpha3.DeviceClassList' + $ref: '#/components/schemas/v1.RoleList' application/vnd.kubernetes.protobuf;stream=watch: schema: - $ref: '#/components/schemas/v1alpha3.DeviceClassList' + $ref: '#/components/schemas/v1.RoleList' application/cbor-seq: schema: - $ref: '#/components/schemas/v1alpha3.DeviceClassList' + $ref: '#/components/schemas/v1.RoleList' description: OK "401": content: {} description: Unauthorized tags: - - resource_v1alpha3 + - rbacAuthorization_v1 x-kubernetes-action: list x-kubernetes-group-version-kind: - group: resource.k8s.io - kind: DeviceClass - version: v1alpha3 + group: rbac.authorization.k8s.io + kind: Role + version: v1 x-accepts: application/json post: - description: create a DeviceClass - operationId: createDeviceClass + description: create a Role + operationId: createNamespacedRole parameters: + - description: object name and auth scope, such as for teams and projects + in: path + name: namespace + required: true + schema: + type: string - description: If 'true', then the output is pretty printed. Defaults to 'false' unless the user-agent indicates a browser or command-line HTTP tool (curl and wget). @@ -64607,78 +64455,84 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1alpha3.DeviceClass' + $ref: '#/components/schemas/v1.Role' required: true responses: "200": content: application/json: schema: - $ref: '#/components/schemas/v1alpha3.DeviceClass' + $ref: '#/components/schemas/v1.Role' application/yaml: schema: - $ref: '#/components/schemas/v1alpha3.DeviceClass' + $ref: '#/components/schemas/v1.Role' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1alpha3.DeviceClass' + $ref: '#/components/schemas/v1.Role' application/cbor: schema: - $ref: '#/components/schemas/v1alpha3.DeviceClass' + $ref: '#/components/schemas/v1.Role' description: OK "201": content: application/json: schema: - $ref: '#/components/schemas/v1alpha3.DeviceClass' + $ref: '#/components/schemas/v1.Role' application/yaml: schema: - $ref: '#/components/schemas/v1alpha3.DeviceClass' + $ref: '#/components/schemas/v1.Role' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1alpha3.DeviceClass' + $ref: '#/components/schemas/v1.Role' application/cbor: schema: - $ref: '#/components/schemas/v1alpha3.DeviceClass' + $ref: '#/components/schemas/v1.Role' description: Created "202": content: application/json: schema: - $ref: '#/components/schemas/v1alpha3.DeviceClass' + $ref: '#/components/schemas/v1.Role' application/yaml: schema: - $ref: '#/components/schemas/v1alpha3.DeviceClass' + $ref: '#/components/schemas/v1.Role' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1alpha3.DeviceClass' + $ref: '#/components/schemas/v1.Role' application/cbor: schema: - $ref: '#/components/schemas/v1alpha3.DeviceClass' + $ref: '#/components/schemas/v1.Role' description: Accepted "401": content: {} description: Unauthorized tags: - - resource_v1alpha3 + - rbacAuthorization_v1 x-kubernetes-action: post x-kubernetes-group-version-kind: - group: resource.k8s.io - kind: DeviceClass - version: v1alpha3 + group: rbac.authorization.k8s.io + kind: Role + version: v1 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json - /apis/resource.k8s.io/v1alpha3/deviceclasses/{name}: + /apis/rbac.authorization.k8s.io/v1/namespaces/{namespace}/roles/{name}: delete: - description: delete a DeviceClass - operationId: deleteDeviceClass + description: delete a Role + operationId: deleteNamespacedRole parameters: - - description: name of the DeviceClass + - description: name of the Role in: path name: name required: true schema: type: string + - description: object name and auth scope, such as for teams and projects + in: path + name: namespace + required: true + schema: + type: string - description: If 'true', then the output is pretty printed. Defaults to 'false' unless the user-agent indicates a browser or command-line HTTP tool (curl and wget). @@ -64747,55 +64601,61 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1alpha3.DeviceClass' + $ref: '#/components/schemas/v1.Status' application/yaml: schema: - $ref: '#/components/schemas/v1alpha3.DeviceClass' + $ref: '#/components/schemas/v1.Status' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1alpha3.DeviceClass' + $ref: '#/components/schemas/v1.Status' application/cbor: schema: - $ref: '#/components/schemas/v1alpha3.DeviceClass' + $ref: '#/components/schemas/v1.Status' description: OK "202": content: application/json: schema: - $ref: '#/components/schemas/v1alpha3.DeviceClass' + $ref: '#/components/schemas/v1.Status' application/yaml: schema: - $ref: '#/components/schemas/v1alpha3.DeviceClass' + $ref: '#/components/schemas/v1.Status' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1alpha3.DeviceClass' + $ref: '#/components/schemas/v1.Status' application/cbor: schema: - $ref: '#/components/schemas/v1alpha3.DeviceClass' + $ref: '#/components/schemas/v1.Status' description: Accepted "401": content: {} description: Unauthorized tags: - - resource_v1alpha3 + - rbacAuthorization_v1 x-kubernetes-action: delete x-kubernetes-group-version-kind: - group: resource.k8s.io - kind: DeviceClass - version: v1alpha3 + group: rbac.authorization.k8s.io + kind: Role + version: v1 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json get: - description: read the specified DeviceClass - operationId: readDeviceClass + description: read the specified Role + operationId: readNamespacedRole parameters: - - description: name of the DeviceClass + - description: name of the Role in: path name: name required: true schema: type: string + - description: object name and auth scope, such as for teams and projects + in: path + name: namespace + required: true + schema: + type: string - description: If 'true', then the output is pretty printed. Defaults to 'false' unless the user-agent indicates a browser or command-line HTTP tool (curl and wget). @@ -64808,38 +64668,44 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1alpha3.DeviceClass' + $ref: '#/components/schemas/v1.Role' application/yaml: schema: - $ref: '#/components/schemas/v1alpha3.DeviceClass' + $ref: '#/components/schemas/v1.Role' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1alpha3.DeviceClass' + $ref: '#/components/schemas/v1.Role' application/cbor: schema: - $ref: '#/components/schemas/v1alpha3.DeviceClass' + $ref: '#/components/schemas/v1.Role' description: OK "401": content: {} description: Unauthorized tags: - - resource_v1alpha3 + - rbacAuthorization_v1 x-kubernetes-action: get x-kubernetes-group-version-kind: - group: resource.k8s.io - kind: DeviceClass - version: v1alpha3 + group: rbac.authorization.k8s.io + kind: Role + version: v1 x-accepts: application/json patch: - description: partially update the specified DeviceClass - operationId: patchDeviceClass + description: partially update the specified Role + operationId: patchNamespacedRole parameters: - - description: name of the DeviceClass + - description: name of the Role in: path name: name required: true schema: type: string + - description: object name and auth scope, such as for teams and projects + in: path + name: namespace + required: true + schema: + type: string - description: If 'true', then the output is pretty printed. Defaults to 'false' unless the user-agent indicates a browser or command-line HTTP tool (curl and wget). @@ -64899,55 +64765,61 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1alpha3.DeviceClass' + $ref: '#/components/schemas/v1.Role' application/yaml: schema: - $ref: '#/components/schemas/v1alpha3.DeviceClass' + $ref: '#/components/schemas/v1.Role' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1alpha3.DeviceClass' + $ref: '#/components/schemas/v1.Role' application/cbor: schema: - $ref: '#/components/schemas/v1alpha3.DeviceClass' + $ref: '#/components/schemas/v1.Role' description: OK "201": content: application/json: schema: - $ref: '#/components/schemas/v1alpha3.DeviceClass' + $ref: '#/components/schemas/v1.Role' application/yaml: schema: - $ref: '#/components/schemas/v1alpha3.DeviceClass' + $ref: '#/components/schemas/v1.Role' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1alpha3.DeviceClass' + $ref: '#/components/schemas/v1.Role' application/cbor: schema: - $ref: '#/components/schemas/v1alpha3.DeviceClass' + $ref: '#/components/schemas/v1.Role' description: Created "401": content: {} description: Unauthorized tags: - - resource_v1alpha3 + - rbacAuthorization_v1 x-kubernetes-action: patch x-kubernetes-group-version-kind: - group: resource.k8s.io - kind: DeviceClass - version: v1alpha3 + group: rbac.authorization.k8s.io + kind: Role + version: v1 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json put: - description: replace the specified DeviceClass - operationId: replaceDeviceClass + description: replace the specified Role + operationId: replaceNamespacedRole parameters: - - description: name of the DeviceClass + - description: name of the Role in: path name: name required: true schema: type: string + - description: object name and auth scope, such as for teams and projects + in: path + name: namespace + required: true + schema: + type: string - description: If 'true', then the output is pretty printed. Defaults to 'false' unless the user-agent indicates a browser or command-line HTTP tool (curl and wget). @@ -64991,56 +64863,379 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1alpha3.DeviceClass' + $ref: '#/components/schemas/v1.Role' required: true responses: "200": content: application/json: schema: - $ref: '#/components/schemas/v1alpha3.DeviceClass' + $ref: '#/components/schemas/v1.Role' application/yaml: schema: - $ref: '#/components/schemas/v1alpha3.DeviceClass' + $ref: '#/components/schemas/v1.Role' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1alpha3.DeviceClass' + $ref: '#/components/schemas/v1.Role' application/cbor: schema: - $ref: '#/components/schemas/v1alpha3.DeviceClass' + $ref: '#/components/schemas/v1.Role' description: OK "201": content: application/json: schema: - $ref: '#/components/schemas/v1alpha3.DeviceClass' + $ref: '#/components/schemas/v1.Role' application/yaml: schema: - $ref: '#/components/schemas/v1alpha3.DeviceClass' + $ref: '#/components/schemas/v1.Role' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1alpha3.DeviceClass' + $ref: '#/components/schemas/v1.Role' application/cbor: schema: - $ref: '#/components/schemas/v1alpha3.DeviceClass' + $ref: '#/components/schemas/v1.Role' description: Created "401": content: {} description: Unauthorized tags: - - resource_v1alpha3 + - rbacAuthorization_v1 x-kubernetes-action: put x-kubernetes-group-version-kind: - group: resource.k8s.io - kind: DeviceClass - version: v1alpha3 + group: rbac.authorization.k8s.io + kind: Role + version: v1 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json - /apis/resource.k8s.io/v1alpha3/devicetaintrules: + /apis/rbac.authorization.k8s.io/v1/rolebindings: + get: + description: list or watch objects of kind RoleBinding + operationId: listRoleBindingForAllNamespaces + parameters: + - description: allowWatchBookmarks requests watch events with type "BOOKMARK". + Servers that do not implement bookmarks may ignore this flag and bookmarks + are sent at the server's discretion. Clients should not assume bookmarks + are returned at any specific interval, nor may they assume the server will + send any BOOKMARK event during a session. If this is not a watch, this field + is ignored. + in: query + name: allowWatchBookmarks + schema: + type: boolean + - description: |- + The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + + This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications. + in: query + name: continue + schema: + type: string + - description: A selector to restrict the list of returned objects by their + fields. Defaults to everything. + in: query + name: fieldSelector + schema: + type: string + - description: A selector to restrict the list of returned objects by their + labels. Defaults to everything. + in: query + name: labelSelector + schema: + type: string + - description: |- + limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + + The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned. + in: query + name: limit + schema: + type: integer + - description: If 'true', then the output is pretty printed. Defaults to 'false' + unless the user-agent indicates a browser or command-line HTTP tool (curl + and wget). + in: query + name: pretty + schema: + type: string + - description: |- + resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + + Defaults to unset + in: query + name: resourceVersion + schema: + type: string + - description: |- + resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + + Defaults to unset + in: query + name: resourceVersionMatch + schema: + type: string + - description: |- + `sendInitialEvents=true` may be set together with `watch=true`. In that case, the watch stream will begin with synthetic events to produce the current state of objects in the collection. Once all such events have been sent, a synthetic "Bookmark" event will be sent. The bookmark will report the ResourceVersion (RV) corresponding to the set of objects, and be marked with `"k8s.io/initial-events-end": "true"` annotation. Afterwards, the watch stream will proceed as usual, sending watch events corresponding to changes (subsequent to the RV) to objects watched. + + When `sendInitialEvents` option is set, we require `resourceVersionMatch` option to also be set. The semantic of the watch request is as following: - `resourceVersionMatch` = NotOlderThan + is interpreted as "data at least as new as the provided `resourceVersion`" + and the bookmark event is send when the state is synced + to a `resourceVersion` at least as fresh as the one provided by the ListOptions. + If `resourceVersion` is unset, this is interpreted as "consistent read" and the + bookmark event is send when the state is synced at least to the moment + when request started being processed. + - `resourceVersionMatch` set to any other value or unset + Invalid error is returned. + + Defaults to true if `resourceVersion=""` or `resourceVersion="0"` (for backward compatibility reasons) and to false otherwise. + in: query + name: sendInitialEvents + schema: + type: boolean + - description: Timeout for the list/watch call. This limits the duration of + the call, regardless of any activity or inactivity. + in: query + name: timeoutSeconds + schema: + type: integer + - description: Watch for changes to the described resources and return them + as a stream of add, update, and remove notifications. Specify resourceVersion. + in: query + name: watch + schema: + type: boolean + responses: + "200": + content: + application/json: + schema: + $ref: '#/components/schemas/v1.RoleBindingList' + application/yaml: + schema: + $ref: '#/components/schemas/v1.RoleBindingList' + application/vnd.kubernetes.protobuf: + schema: + $ref: '#/components/schemas/v1.RoleBindingList' + application/cbor: + schema: + $ref: '#/components/schemas/v1.RoleBindingList' + application/json;stream=watch: + schema: + $ref: '#/components/schemas/v1.RoleBindingList' + application/vnd.kubernetes.protobuf;stream=watch: + schema: + $ref: '#/components/schemas/v1.RoleBindingList' + application/cbor-seq: + schema: + $ref: '#/components/schemas/v1.RoleBindingList' + description: OK + "401": + content: {} + description: Unauthorized + tags: + - rbacAuthorization_v1 + x-kubernetes-action: list + x-kubernetes-group-version-kind: + group: rbac.authorization.k8s.io + kind: RoleBinding + version: v1 + x-accepts: application/json + /apis/rbac.authorization.k8s.io/v1/roles: + get: + description: list or watch objects of kind Role + operationId: listRoleForAllNamespaces + parameters: + - description: allowWatchBookmarks requests watch events with type "BOOKMARK". + Servers that do not implement bookmarks may ignore this flag and bookmarks + are sent at the server's discretion. Clients should not assume bookmarks + are returned at any specific interval, nor may they assume the server will + send any BOOKMARK event during a session. If this is not a watch, this field + is ignored. + in: query + name: allowWatchBookmarks + schema: + type: boolean + - description: |- + The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + + This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications. + in: query + name: continue + schema: + type: string + - description: A selector to restrict the list of returned objects by their + fields. Defaults to everything. + in: query + name: fieldSelector + schema: + type: string + - description: A selector to restrict the list of returned objects by their + labels. Defaults to everything. + in: query + name: labelSelector + schema: + type: string + - description: |- + limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + + The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned. + in: query + name: limit + schema: + type: integer + - description: If 'true', then the output is pretty printed. Defaults to 'false' + unless the user-agent indicates a browser or command-line HTTP tool (curl + and wget). + in: query + name: pretty + schema: + type: string + - description: |- + resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + + Defaults to unset + in: query + name: resourceVersion + schema: + type: string + - description: |- + resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + + Defaults to unset + in: query + name: resourceVersionMatch + schema: + type: string + - description: |- + `sendInitialEvents=true` may be set together with `watch=true`. In that case, the watch stream will begin with synthetic events to produce the current state of objects in the collection. Once all such events have been sent, a synthetic "Bookmark" event will be sent. The bookmark will report the ResourceVersion (RV) corresponding to the set of objects, and be marked with `"k8s.io/initial-events-end": "true"` annotation. Afterwards, the watch stream will proceed as usual, sending watch events corresponding to changes (subsequent to the RV) to objects watched. + + When `sendInitialEvents` option is set, we require `resourceVersionMatch` option to also be set. The semantic of the watch request is as following: - `resourceVersionMatch` = NotOlderThan + is interpreted as "data at least as new as the provided `resourceVersion`" + and the bookmark event is send when the state is synced + to a `resourceVersion` at least as fresh as the one provided by the ListOptions. + If `resourceVersion` is unset, this is interpreted as "consistent read" and the + bookmark event is send when the state is synced at least to the moment + when request started being processed. + - `resourceVersionMatch` set to any other value or unset + Invalid error is returned. + + Defaults to true if `resourceVersion=""` or `resourceVersion="0"` (for backward compatibility reasons) and to false otherwise. + in: query + name: sendInitialEvents + schema: + type: boolean + - description: Timeout for the list/watch call. This limits the duration of + the call, regardless of any activity or inactivity. + in: query + name: timeoutSeconds + schema: + type: integer + - description: Watch for changes to the described resources and return them + as a stream of add, update, and remove notifications. Specify resourceVersion. + in: query + name: watch + schema: + type: boolean + responses: + "200": + content: + application/json: + schema: + $ref: '#/components/schemas/v1.RoleList' + application/yaml: + schema: + $ref: '#/components/schemas/v1.RoleList' + application/vnd.kubernetes.protobuf: + schema: + $ref: '#/components/schemas/v1.RoleList' + application/cbor: + schema: + $ref: '#/components/schemas/v1.RoleList' + application/json;stream=watch: + schema: + $ref: '#/components/schemas/v1.RoleList' + application/vnd.kubernetes.protobuf;stream=watch: + schema: + $ref: '#/components/schemas/v1.RoleList' + application/cbor-seq: + schema: + $ref: '#/components/schemas/v1.RoleList' + description: OK + "401": + content: {} + description: Unauthorized + tags: + - rbacAuthorization_v1 + x-kubernetes-action: list + x-kubernetes-group-version-kind: + group: rbac.authorization.k8s.io + kind: Role + version: v1 + x-accepts: application/json + /apis/rbac.authorization.k8s.io/v1/watch/clusterrolebindings: {} + /apis/rbac.authorization.k8s.io/v1/watch/clusterrolebindings/{name}: {} + /apis/rbac.authorization.k8s.io/v1/watch/clusterroles: {} + /apis/rbac.authorization.k8s.io/v1/watch/clusterroles/{name}: {} + /apis/rbac.authorization.k8s.io/v1/watch/namespaces/{namespace}/rolebindings: {} + /apis/rbac.authorization.k8s.io/v1/watch/namespaces/{namespace}/rolebindings/{name}: {} + /apis/rbac.authorization.k8s.io/v1/watch/namespaces/{namespace}/roles: {} + /apis/rbac.authorization.k8s.io/v1/watch/namespaces/{namespace}/roles/{name}: {} + /apis/rbac.authorization.k8s.io/v1/watch/rolebindings: {} + /apis/rbac.authorization.k8s.io/v1/watch/roles: {} + /apis/resource.k8s.io/: + get: + description: get information of a group + operationId: getAPIGroup + responses: + "200": + content: + application/json: + schema: + $ref: '#/components/schemas/v1.APIGroup' + application/yaml: + schema: + $ref: '#/components/schemas/v1.APIGroup' + application/vnd.kubernetes.protobuf: + schema: + $ref: '#/components/schemas/v1.APIGroup' + description: OK + "401": + content: {} + description: Unauthorized + tags: + - resource + x-accepts: application/json + /apis/resource.k8s.io/v1/: + get: + description: get available resources + operationId: getAPIResources + responses: + "200": + content: + application/json: + schema: + $ref: '#/components/schemas/v1.APIResourceList' + application/yaml: + schema: + $ref: '#/components/schemas/v1.APIResourceList' + application/vnd.kubernetes.protobuf: + schema: + $ref: '#/components/schemas/v1.APIResourceList' + application/cbor: + schema: + $ref: '#/components/schemas/v1.APIResourceList' + description: OK + "401": + content: {} + description: Unauthorized + tags: + - resource_v1 + x-accepts: application/json + /apis/resource.k8s.io/v1/deviceclasses: delete: - description: delete collection of DeviceTaintRule - operationId: deleteCollectionDeviceTaintRule + description: delete collection of DeviceClass + operationId: deleteCollectionDeviceClass parameters: - description: If 'true', then the output is pretty printed. Defaults to 'false' unless the user-agent indicates a browser or command-line HTTP tool (curl @@ -65193,18 +65388,18 @@ paths: content: {} description: Unauthorized tags: - - resource_v1alpha3 + - resource_v1 x-kubernetes-action: deletecollection x-kubernetes-group-version-kind: group: resource.k8s.io - kind: DeviceTaintRule - version: v1alpha3 + kind: DeviceClass + version: v1 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json get: - description: list or watch objects of kind DeviceTaintRule - operationId: listDeviceTaintRule + description: list or watch objects of kind DeviceClass + operationId: listDeviceClass parameters: - description: If 'true', then the output is pretty printed. Defaults to 'false' unless the user-agent indicates a browser or command-line HTTP tool (curl @@ -65302,40 +65497,40 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1alpha3.DeviceTaintRuleList' + $ref: '#/components/schemas/v1.DeviceClassList' application/yaml: schema: - $ref: '#/components/schemas/v1alpha3.DeviceTaintRuleList' + $ref: '#/components/schemas/v1.DeviceClassList' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1alpha3.DeviceTaintRuleList' + $ref: '#/components/schemas/v1.DeviceClassList' application/cbor: schema: - $ref: '#/components/schemas/v1alpha3.DeviceTaintRuleList' + $ref: '#/components/schemas/v1.DeviceClassList' application/json;stream=watch: schema: - $ref: '#/components/schemas/v1alpha3.DeviceTaintRuleList' + $ref: '#/components/schemas/v1.DeviceClassList' application/vnd.kubernetes.protobuf;stream=watch: schema: - $ref: '#/components/schemas/v1alpha3.DeviceTaintRuleList' + $ref: '#/components/schemas/v1.DeviceClassList' application/cbor-seq: schema: - $ref: '#/components/schemas/v1alpha3.DeviceTaintRuleList' + $ref: '#/components/schemas/v1.DeviceClassList' description: OK "401": content: {} description: Unauthorized tags: - - resource_v1alpha3 + - resource_v1 x-kubernetes-action: list x-kubernetes-group-version-kind: group: resource.k8s.io - kind: DeviceTaintRule - version: v1alpha3 + kind: DeviceClass + version: v1 x-accepts: application/json post: - description: create a DeviceTaintRule - operationId: createDeviceTaintRule + description: create a DeviceClass + operationId: createDeviceClass parameters: - description: If 'true', then the output is pretty printed. Defaults to 'false' unless the user-agent indicates a browser or command-line HTTP tool (curl @@ -65380,73 +65575,73 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1alpha3.DeviceTaintRule' + $ref: '#/components/schemas/v1.DeviceClass' required: true responses: "200": content: application/json: schema: - $ref: '#/components/schemas/v1alpha3.DeviceTaintRule' + $ref: '#/components/schemas/v1.DeviceClass' application/yaml: schema: - $ref: '#/components/schemas/v1alpha3.DeviceTaintRule' + $ref: '#/components/schemas/v1.DeviceClass' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1alpha3.DeviceTaintRule' + $ref: '#/components/schemas/v1.DeviceClass' application/cbor: schema: - $ref: '#/components/schemas/v1alpha3.DeviceTaintRule' + $ref: '#/components/schemas/v1.DeviceClass' description: OK "201": content: application/json: schema: - $ref: '#/components/schemas/v1alpha3.DeviceTaintRule' + $ref: '#/components/schemas/v1.DeviceClass' application/yaml: schema: - $ref: '#/components/schemas/v1alpha3.DeviceTaintRule' + $ref: '#/components/schemas/v1.DeviceClass' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1alpha3.DeviceTaintRule' + $ref: '#/components/schemas/v1.DeviceClass' application/cbor: schema: - $ref: '#/components/schemas/v1alpha3.DeviceTaintRule' + $ref: '#/components/schemas/v1.DeviceClass' description: Created "202": content: application/json: schema: - $ref: '#/components/schemas/v1alpha3.DeviceTaintRule' + $ref: '#/components/schemas/v1.DeviceClass' application/yaml: schema: - $ref: '#/components/schemas/v1alpha3.DeviceTaintRule' + $ref: '#/components/schemas/v1.DeviceClass' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1alpha3.DeviceTaintRule' + $ref: '#/components/schemas/v1.DeviceClass' application/cbor: schema: - $ref: '#/components/schemas/v1alpha3.DeviceTaintRule' + $ref: '#/components/schemas/v1.DeviceClass' description: Accepted "401": content: {} description: Unauthorized tags: - - resource_v1alpha3 + - resource_v1 x-kubernetes-action: post x-kubernetes-group-version-kind: group: resource.k8s.io - kind: DeviceTaintRule - version: v1alpha3 + kind: DeviceClass + version: v1 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json - /apis/resource.k8s.io/v1alpha3/devicetaintrules/{name}: + /apis/resource.k8s.io/v1/deviceclasses/{name}: delete: - description: delete a DeviceTaintRule - operationId: deleteDeviceTaintRule + description: delete a DeviceClass + operationId: deleteDeviceClass parameters: - - description: name of the DeviceTaintRule + - description: name of the DeviceClass in: path name: name required: true @@ -65520,50 +65715,50 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1alpha3.DeviceTaintRule' + $ref: '#/components/schemas/v1.DeviceClass' application/yaml: schema: - $ref: '#/components/schemas/v1alpha3.DeviceTaintRule' + $ref: '#/components/schemas/v1.DeviceClass' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1alpha3.DeviceTaintRule' + $ref: '#/components/schemas/v1.DeviceClass' application/cbor: schema: - $ref: '#/components/schemas/v1alpha3.DeviceTaintRule' + $ref: '#/components/schemas/v1.DeviceClass' description: OK "202": content: application/json: schema: - $ref: '#/components/schemas/v1alpha3.DeviceTaintRule' + $ref: '#/components/schemas/v1.DeviceClass' application/yaml: schema: - $ref: '#/components/schemas/v1alpha3.DeviceTaintRule' + $ref: '#/components/schemas/v1.DeviceClass' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1alpha3.DeviceTaintRule' + $ref: '#/components/schemas/v1.DeviceClass' application/cbor: schema: - $ref: '#/components/schemas/v1alpha3.DeviceTaintRule' + $ref: '#/components/schemas/v1.DeviceClass' description: Accepted "401": content: {} description: Unauthorized tags: - - resource_v1alpha3 + - resource_v1 x-kubernetes-action: delete x-kubernetes-group-version-kind: group: resource.k8s.io - kind: DeviceTaintRule - version: v1alpha3 + kind: DeviceClass + version: v1 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json get: - description: read the specified DeviceTaintRule - operationId: readDeviceTaintRule + description: read the specified DeviceClass + operationId: readDeviceClass parameters: - - description: name of the DeviceTaintRule + - description: name of the DeviceClass in: path name: name required: true @@ -65581,33 +65776,33 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1alpha3.DeviceTaintRule' + $ref: '#/components/schemas/v1.DeviceClass' application/yaml: schema: - $ref: '#/components/schemas/v1alpha3.DeviceTaintRule' + $ref: '#/components/schemas/v1.DeviceClass' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1alpha3.DeviceTaintRule' + $ref: '#/components/schemas/v1.DeviceClass' application/cbor: schema: - $ref: '#/components/schemas/v1alpha3.DeviceTaintRule' + $ref: '#/components/schemas/v1.DeviceClass' description: OK "401": content: {} description: Unauthorized tags: - - resource_v1alpha3 + - resource_v1 x-kubernetes-action: get x-kubernetes-group-version-kind: group: resource.k8s.io - kind: DeviceTaintRule - version: v1alpha3 + kind: DeviceClass + version: v1 x-accepts: application/json patch: - description: partially update the specified DeviceTaintRule - operationId: patchDeviceTaintRule + description: partially update the specified DeviceClass + operationId: patchDeviceClass parameters: - - description: name of the DeviceTaintRule + - description: name of the DeviceClass in: path name: name required: true @@ -65672,50 +65867,50 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1alpha3.DeviceTaintRule' + $ref: '#/components/schemas/v1.DeviceClass' application/yaml: schema: - $ref: '#/components/schemas/v1alpha3.DeviceTaintRule' + $ref: '#/components/schemas/v1.DeviceClass' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1alpha3.DeviceTaintRule' + $ref: '#/components/schemas/v1.DeviceClass' application/cbor: schema: - $ref: '#/components/schemas/v1alpha3.DeviceTaintRule' + $ref: '#/components/schemas/v1.DeviceClass' description: OK "201": content: application/json: schema: - $ref: '#/components/schemas/v1alpha3.DeviceTaintRule' + $ref: '#/components/schemas/v1.DeviceClass' application/yaml: schema: - $ref: '#/components/schemas/v1alpha3.DeviceTaintRule' + $ref: '#/components/schemas/v1.DeviceClass' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1alpha3.DeviceTaintRule' + $ref: '#/components/schemas/v1.DeviceClass' application/cbor: schema: - $ref: '#/components/schemas/v1alpha3.DeviceTaintRule' + $ref: '#/components/schemas/v1.DeviceClass' description: Created "401": content: {} description: Unauthorized tags: - - resource_v1alpha3 + - resource_v1 x-kubernetes-action: patch x-kubernetes-group-version-kind: group: resource.k8s.io - kind: DeviceTaintRule - version: v1alpha3 + kind: DeviceClass + version: v1 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json put: - description: replace the specified DeviceTaintRule - operationId: replaceDeviceTaintRule + description: replace the specified DeviceClass + operationId: replaceDeviceClass parameters: - - description: name of the DeviceTaintRule + - description: name of the DeviceClass in: path name: name required: true @@ -65764,53 +65959,53 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1alpha3.DeviceTaintRule' + $ref: '#/components/schemas/v1.DeviceClass' required: true responses: "200": content: application/json: schema: - $ref: '#/components/schemas/v1alpha3.DeviceTaintRule' + $ref: '#/components/schemas/v1.DeviceClass' application/yaml: schema: - $ref: '#/components/schemas/v1alpha3.DeviceTaintRule' + $ref: '#/components/schemas/v1.DeviceClass' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1alpha3.DeviceTaintRule' + $ref: '#/components/schemas/v1.DeviceClass' application/cbor: schema: - $ref: '#/components/schemas/v1alpha3.DeviceTaintRule' + $ref: '#/components/schemas/v1.DeviceClass' description: OK "201": content: application/json: schema: - $ref: '#/components/schemas/v1alpha3.DeviceTaintRule' + $ref: '#/components/schemas/v1.DeviceClass' application/yaml: schema: - $ref: '#/components/schemas/v1alpha3.DeviceTaintRule' + $ref: '#/components/schemas/v1.DeviceClass' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1alpha3.DeviceTaintRule' + $ref: '#/components/schemas/v1.DeviceClass' application/cbor: schema: - $ref: '#/components/schemas/v1alpha3.DeviceTaintRule' + $ref: '#/components/schemas/v1.DeviceClass' description: Created "401": content: {} description: Unauthorized tags: - - resource_v1alpha3 + - resource_v1 x-kubernetes-action: put x-kubernetes-group-version-kind: group: resource.k8s.io - kind: DeviceTaintRule - version: v1alpha3 + kind: DeviceClass + version: v1 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json - /apis/resource.k8s.io/v1alpha3/namespaces/{namespace}/resourceclaims: + /apis/resource.k8s.io/v1/namespaces/{namespace}/resourceclaims: delete: description: delete collection of ResourceClaim operationId: deleteCollectionNamespacedResourceClaim @@ -65972,12 +66167,12 @@ paths: content: {} description: Unauthorized tags: - - resource_v1alpha3 + - resource_v1 x-kubernetes-action: deletecollection x-kubernetes-group-version-kind: group: resource.k8s.io kind: ResourceClaim - version: v1alpha3 + version: v1 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json @@ -66087,36 +66282,36 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1alpha3.ResourceClaimList' + $ref: '#/components/schemas/v1.ResourceClaimList' application/yaml: schema: - $ref: '#/components/schemas/v1alpha3.ResourceClaimList' + $ref: '#/components/schemas/v1.ResourceClaimList' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1alpha3.ResourceClaimList' + $ref: '#/components/schemas/v1.ResourceClaimList' application/cbor: schema: - $ref: '#/components/schemas/v1alpha3.ResourceClaimList' + $ref: '#/components/schemas/v1.ResourceClaimList' application/json;stream=watch: schema: - $ref: '#/components/schemas/v1alpha3.ResourceClaimList' + $ref: '#/components/schemas/v1.ResourceClaimList' application/vnd.kubernetes.protobuf;stream=watch: schema: - $ref: '#/components/schemas/v1alpha3.ResourceClaimList' + $ref: '#/components/schemas/v1.ResourceClaimList' application/cbor-seq: schema: - $ref: '#/components/schemas/v1alpha3.ResourceClaimList' + $ref: '#/components/schemas/v1.ResourceClaimList' description: OK "401": content: {} description: Unauthorized tags: - - resource_v1alpha3 + - resource_v1 x-kubernetes-action: list x-kubernetes-group-version-kind: group: resource.k8s.io kind: ResourceClaim - version: v1alpha3 + version: v1 x-accepts: application/json post: description: create a ResourceClaim @@ -66171,68 +66366,68 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1alpha3.ResourceClaim' + $ref: '#/components/schemas/resource.v1.ResourceClaim' required: true responses: "200": content: application/json: schema: - $ref: '#/components/schemas/v1alpha3.ResourceClaim' + $ref: '#/components/schemas/resource.v1.ResourceClaim' application/yaml: schema: - $ref: '#/components/schemas/v1alpha3.ResourceClaim' + $ref: '#/components/schemas/resource.v1.ResourceClaim' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1alpha3.ResourceClaim' + $ref: '#/components/schemas/resource.v1.ResourceClaim' application/cbor: schema: - $ref: '#/components/schemas/v1alpha3.ResourceClaim' + $ref: '#/components/schemas/resource.v1.ResourceClaim' description: OK "201": content: application/json: schema: - $ref: '#/components/schemas/v1alpha3.ResourceClaim' + $ref: '#/components/schemas/resource.v1.ResourceClaim' application/yaml: schema: - $ref: '#/components/schemas/v1alpha3.ResourceClaim' + $ref: '#/components/schemas/resource.v1.ResourceClaim' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1alpha3.ResourceClaim' + $ref: '#/components/schemas/resource.v1.ResourceClaim' application/cbor: schema: - $ref: '#/components/schemas/v1alpha3.ResourceClaim' + $ref: '#/components/schemas/resource.v1.ResourceClaim' description: Created "202": content: application/json: schema: - $ref: '#/components/schemas/v1alpha3.ResourceClaim' + $ref: '#/components/schemas/resource.v1.ResourceClaim' application/yaml: schema: - $ref: '#/components/schemas/v1alpha3.ResourceClaim' + $ref: '#/components/schemas/resource.v1.ResourceClaim' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1alpha3.ResourceClaim' + $ref: '#/components/schemas/resource.v1.ResourceClaim' application/cbor: schema: - $ref: '#/components/schemas/v1alpha3.ResourceClaim' + $ref: '#/components/schemas/resource.v1.ResourceClaim' description: Accepted "401": content: {} description: Unauthorized tags: - - resource_v1alpha3 + - resource_v1 x-kubernetes-action: post x-kubernetes-group-version-kind: group: resource.k8s.io kind: ResourceClaim - version: v1alpha3 + version: v1 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json - /apis/resource.k8s.io/v1alpha3/namespaces/{namespace}/resourceclaims/{name}: + /apis/resource.k8s.io/v1/namespaces/{namespace}/resourceclaims/{name}: delete: description: delete a ResourceClaim operationId: deleteNamespacedResourceClaim @@ -66317,42 +66512,42 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1alpha3.ResourceClaim' + $ref: '#/components/schemas/resource.v1.ResourceClaim' application/yaml: schema: - $ref: '#/components/schemas/v1alpha3.ResourceClaim' + $ref: '#/components/schemas/resource.v1.ResourceClaim' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1alpha3.ResourceClaim' + $ref: '#/components/schemas/resource.v1.ResourceClaim' application/cbor: schema: - $ref: '#/components/schemas/v1alpha3.ResourceClaim' + $ref: '#/components/schemas/resource.v1.ResourceClaim' description: OK "202": content: application/json: schema: - $ref: '#/components/schemas/v1alpha3.ResourceClaim' + $ref: '#/components/schemas/resource.v1.ResourceClaim' application/yaml: schema: - $ref: '#/components/schemas/v1alpha3.ResourceClaim' + $ref: '#/components/schemas/resource.v1.ResourceClaim' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1alpha3.ResourceClaim' + $ref: '#/components/schemas/resource.v1.ResourceClaim' application/cbor: schema: - $ref: '#/components/schemas/v1alpha3.ResourceClaim' + $ref: '#/components/schemas/resource.v1.ResourceClaim' description: Accepted "401": content: {} description: Unauthorized tags: - - resource_v1alpha3 + - resource_v1 x-kubernetes-action: delete x-kubernetes-group-version-kind: group: resource.k8s.io kind: ResourceClaim - version: v1alpha3 + version: v1 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json @@ -66384,27 +66579,27 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1alpha3.ResourceClaim' + $ref: '#/components/schemas/resource.v1.ResourceClaim' application/yaml: schema: - $ref: '#/components/schemas/v1alpha3.ResourceClaim' + $ref: '#/components/schemas/resource.v1.ResourceClaim' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1alpha3.ResourceClaim' + $ref: '#/components/schemas/resource.v1.ResourceClaim' application/cbor: schema: - $ref: '#/components/schemas/v1alpha3.ResourceClaim' + $ref: '#/components/schemas/resource.v1.ResourceClaim' description: OK "401": content: {} description: Unauthorized tags: - - resource_v1alpha3 + - resource_v1 x-kubernetes-action: get x-kubernetes-group-version-kind: group: resource.k8s.io kind: ResourceClaim - version: v1alpha3 + version: v1 x-accepts: application/json patch: description: partially update the specified ResourceClaim @@ -66481,42 +66676,42 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1alpha3.ResourceClaim' + $ref: '#/components/schemas/resource.v1.ResourceClaim' application/yaml: schema: - $ref: '#/components/schemas/v1alpha3.ResourceClaim' + $ref: '#/components/schemas/resource.v1.ResourceClaim' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1alpha3.ResourceClaim' + $ref: '#/components/schemas/resource.v1.ResourceClaim' application/cbor: schema: - $ref: '#/components/schemas/v1alpha3.ResourceClaim' + $ref: '#/components/schemas/resource.v1.ResourceClaim' description: OK "201": content: application/json: schema: - $ref: '#/components/schemas/v1alpha3.ResourceClaim' + $ref: '#/components/schemas/resource.v1.ResourceClaim' application/yaml: schema: - $ref: '#/components/schemas/v1alpha3.ResourceClaim' + $ref: '#/components/schemas/resource.v1.ResourceClaim' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1alpha3.ResourceClaim' + $ref: '#/components/schemas/resource.v1.ResourceClaim' application/cbor: schema: - $ref: '#/components/schemas/v1alpha3.ResourceClaim' + $ref: '#/components/schemas/resource.v1.ResourceClaim' description: Created "401": content: {} description: Unauthorized tags: - - resource_v1alpha3 + - resource_v1 x-kubernetes-action: patch x-kubernetes-group-version-kind: group: resource.k8s.io kind: ResourceClaim - version: v1alpha3 + version: v1 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json @@ -66579,53 +66774,53 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1alpha3.ResourceClaim' + $ref: '#/components/schemas/resource.v1.ResourceClaim' required: true responses: "200": content: application/json: schema: - $ref: '#/components/schemas/v1alpha3.ResourceClaim' + $ref: '#/components/schemas/resource.v1.ResourceClaim' application/yaml: schema: - $ref: '#/components/schemas/v1alpha3.ResourceClaim' + $ref: '#/components/schemas/resource.v1.ResourceClaim' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1alpha3.ResourceClaim' + $ref: '#/components/schemas/resource.v1.ResourceClaim' application/cbor: schema: - $ref: '#/components/schemas/v1alpha3.ResourceClaim' + $ref: '#/components/schemas/resource.v1.ResourceClaim' description: OK "201": content: application/json: schema: - $ref: '#/components/schemas/v1alpha3.ResourceClaim' + $ref: '#/components/schemas/resource.v1.ResourceClaim' application/yaml: schema: - $ref: '#/components/schemas/v1alpha3.ResourceClaim' + $ref: '#/components/schemas/resource.v1.ResourceClaim' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1alpha3.ResourceClaim' + $ref: '#/components/schemas/resource.v1.ResourceClaim' application/cbor: schema: - $ref: '#/components/schemas/v1alpha3.ResourceClaim' + $ref: '#/components/schemas/resource.v1.ResourceClaim' description: Created "401": content: {} description: Unauthorized tags: - - resource_v1alpha3 + - resource_v1 x-kubernetes-action: put x-kubernetes-group-version-kind: group: resource.k8s.io kind: ResourceClaim - version: v1alpha3 + version: v1 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json - /apis/resource.k8s.io/v1alpha3/namespaces/{namespace}/resourceclaims/{name}/status: + /apis/resource.k8s.io/v1/namespaces/{namespace}/resourceclaims/{name}/status: get: description: read status of the specified ResourceClaim operationId: readNamespacedResourceClaimStatus @@ -66654,27 +66849,27 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1alpha3.ResourceClaim' + $ref: '#/components/schemas/resource.v1.ResourceClaim' application/yaml: schema: - $ref: '#/components/schemas/v1alpha3.ResourceClaim' + $ref: '#/components/schemas/resource.v1.ResourceClaim' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1alpha3.ResourceClaim' + $ref: '#/components/schemas/resource.v1.ResourceClaim' application/cbor: schema: - $ref: '#/components/schemas/v1alpha3.ResourceClaim' + $ref: '#/components/schemas/resource.v1.ResourceClaim' description: OK "401": content: {} description: Unauthorized tags: - - resource_v1alpha3 + - resource_v1 x-kubernetes-action: get x-kubernetes-group-version-kind: group: resource.k8s.io kind: ResourceClaim - version: v1alpha3 + version: v1 x-accepts: application/json patch: description: partially update status of the specified ResourceClaim @@ -66751,42 +66946,42 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1alpha3.ResourceClaim' + $ref: '#/components/schemas/resource.v1.ResourceClaim' application/yaml: schema: - $ref: '#/components/schemas/v1alpha3.ResourceClaim' + $ref: '#/components/schemas/resource.v1.ResourceClaim' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1alpha3.ResourceClaim' + $ref: '#/components/schemas/resource.v1.ResourceClaim' application/cbor: schema: - $ref: '#/components/schemas/v1alpha3.ResourceClaim' + $ref: '#/components/schemas/resource.v1.ResourceClaim' description: OK "201": content: application/json: schema: - $ref: '#/components/schemas/v1alpha3.ResourceClaim' + $ref: '#/components/schemas/resource.v1.ResourceClaim' application/yaml: schema: - $ref: '#/components/schemas/v1alpha3.ResourceClaim' + $ref: '#/components/schemas/resource.v1.ResourceClaim' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1alpha3.ResourceClaim' + $ref: '#/components/schemas/resource.v1.ResourceClaim' application/cbor: schema: - $ref: '#/components/schemas/v1alpha3.ResourceClaim' + $ref: '#/components/schemas/resource.v1.ResourceClaim' description: Created "401": content: {} description: Unauthorized tags: - - resource_v1alpha3 + - resource_v1 x-kubernetes-action: patch x-kubernetes-group-version-kind: group: resource.k8s.io kind: ResourceClaim - version: v1alpha3 + version: v1 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json @@ -66849,53 +67044,53 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1alpha3.ResourceClaim' + $ref: '#/components/schemas/resource.v1.ResourceClaim' required: true responses: "200": content: application/json: schema: - $ref: '#/components/schemas/v1alpha3.ResourceClaim' + $ref: '#/components/schemas/resource.v1.ResourceClaim' application/yaml: schema: - $ref: '#/components/schemas/v1alpha3.ResourceClaim' + $ref: '#/components/schemas/resource.v1.ResourceClaim' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1alpha3.ResourceClaim' + $ref: '#/components/schemas/resource.v1.ResourceClaim' application/cbor: schema: - $ref: '#/components/schemas/v1alpha3.ResourceClaim' + $ref: '#/components/schemas/resource.v1.ResourceClaim' description: OK "201": content: application/json: schema: - $ref: '#/components/schemas/v1alpha3.ResourceClaim' + $ref: '#/components/schemas/resource.v1.ResourceClaim' application/yaml: schema: - $ref: '#/components/schemas/v1alpha3.ResourceClaim' + $ref: '#/components/schemas/resource.v1.ResourceClaim' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1alpha3.ResourceClaim' + $ref: '#/components/schemas/resource.v1.ResourceClaim' application/cbor: schema: - $ref: '#/components/schemas/v1alpha3.ResourceClaim' + $ref: '#/components/schemas/resource.v1.ResourceClaim' description: Created "401": content: {} description: Unauthorized tags: - - resource_v1alpha3 + - resource_v1 x-kubernetes-action: put x-kubernetes-group-version-kind: group: resource.k8s.io kind: ResourceClaim - version: v1alpha3 + version: v1 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json - /apis/resource.k8s.io/v1alpha3/namespaces/{namespace}/resourceclaimtemplates: + /apis/resource.k8s.io/v1/namespaces/{namespace}/resourceclaimtemplates: delete: description: delete collection of ResourceClaimTemplate operationId: deleteCollectionNamespacedResourceClaimTemplate @@ -67057,12 +67252,12 @@ paths: content: {} description: Unauthorized tags: - - resource_v1alpha3 + - resource_v1 x-kubernetes-action: deletecollection x-kubernetes-group-version-kind: group: resource.k8s.io kind: ResourceClaimTemplate - version: v1alpha3 + version: v1 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json @@ -67172,36 +67367,36 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1alpha3.ResourceClaimTemplateList' + $ref: '#/components/schemas/v1.ResourceClaimTemplateList' application/yaml: schema: - $ref: '#/components/schemas/v1alpha3.ResourceClaimTemplateList' + $ref: '#/components/schemas/v1.ResourceClaimTemplateList' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1alpha3.ResourceClaimTemplateList' + $ref: '#/components/schemas/v1.ResourceClaimTemplateList' application/cbor: schema: - $ref: '#/components/schemas/v1alpha3.ResourceClaimTemplateList' + $ref: '#/components/schemas/v1.ResourceClaimTemplateList' application/json;stream=watch: schema: - $ref: '#/components/schemas/v1alpha3.ResourceClaimTemplateList' + $ref: '#/components/schemas/v1.ResourceClaimTemplateList' application/vnd.kubernetes.protobuf;stream=watch: schema: - $ref: '#/components/schemas/v1alpha3.ResourceClaimTemplateList' + $ref: '#/components/schemas/v1.ResourceClaimTemplateList' application/cbor-seq: schema: - $ref: '#/components/schemas/v1alpha3.ResourceClaimTemplateList' + $ref: '#/components/schemas/v1.ResourceClaimTemplateList' description: OK "401": content: {} description: Unauthorized tags: - - resource_v1alpha3 + - resource_v1 x-kubernetes-action: list x-kubernetes-group-version-kind: group: resource.k8s.io kind: ResourceClaimTemplate - version: v1alpha3 + version: v1 x-accepts: application/json post: description: create a ResourceClaimTemplate @@ -67256,68 +67451,68 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1alpha3.ResourceClaimTemplate' + $ref: '#/components/schemas/v1.ResourceClaimTemplate' required: true responses: "200": content: application/json: schema: - $ref: '#/components/schemas/v1alpha3.ResourceClaimTemplate' + $ref: '#/components/schemas/v1.ResourceClaimTemplate' application/yaml: schema: - $ref: '#/components/schemas/v1alpha3.ResourceClaimTemplate' + $ref: '#/components/schemas/v1.ResourceClaimTemplate' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1alpha3.ResourceClaimTemplate' + $ref: '#/components/schemas/v1.ResourceClaimTemplate' application/cbor: schema: - $ref: '#/components/schemas/v1alpha3.ResourceClaimTemplate' + $ref: '#/components/schemas/v1.ResourceClaimTemplate' description: OK "201": content: application/json: schema: - $ref: '#/components/schemas/v1alpha3.ResourceClaimTemplate' + $ref: '#/components/schemas/v1.ResourceClaimTemplate' application/yaml: schema: - $ref: '#/components/schemas/v1alpha3.ResourceClaimTemplate' + $ref: '#/components/schemas/v1.ResourceClaimTemplate' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1alpha3.ResourceClaimTemplate' + $ref: '#/components/schemas/v1.ResourceClaimTemplate' application/cbor: schema: - $ref: '#/components/schemas/v1alpha3.ResourceClaimTemplate' + $ref: '#/components/schemas/v1.ResourceClaimTemplate' description: Created "202": content: application/json: schema: - $ref: '#/components/schemas/v1alpha3.ResourceClaimTemplate' + $ref: '#/components/schemas/v1.ResourceClaimTemplate' application/yaml: schema: - $ref: '#/components/schemas/v1alpha3.ResourceClaimTemplate' + $ref: '#/components/schemas/v1.ResourceClaimTemplate' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1alpha3.ResourceClaimTemplate' + $ref: '#/components/schemas/v1.ResourceClaimTemplate' application/cbor: schema: - $ref: '#/components/schemas/v1alpha3.ResourceClaimTemplate' + $ref: '#/components/schemas/v1.ResourceClaimTemplate' description: Accepted "401": content: {} description: Unauthorized tags: - - resource_v1alpha3 + - resource_v1 x-kubernetes-action: post x-kubernetes-group-version-kind: group: resource.k8s.io kind: ResourceClaimTemplate - version: v1alpha3 + version: v1 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json - /apis/resource.k8s.io/v1alpha3/namespaces/{namespace}/resourceclaimtemplates/{name}: + /apis/resource.k8s.io/v1/namespaces/{namespace}/resourceclaimtemplates/{name}: delete: description: delete a ResourceClaimTemplate operationId: deleteNamespacedResourceClaimTemplate @@ -67402,42 +67597,42 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1alpha3.ResourceClaimTemplate' + $ref: '#/components/schemas/v1.ResourceClaimTemplate' application/yaml: schema: - $ref: '#/components/schemas/v1alpha3.ResourceClaimTemplate' + $ref: '#/components/schemas/v1.ResourceClaimTemplate' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1alpha3.ResourceClaimTemplate' + $ref: '#/components/schemas/v1.ResourceClaimTemplate' application/cbor: schema: - $ref: '#/components/schemas/v1alpha3.ResourceClaimTemplate' + $ref: '#/components/schemas/v1.ResourceClaimTemplate' description: OK "202": content: application/json: schema: - $ref: '#/components/schemas/v1alpha3.ResourceClaimTemplate' + $ref: '#/components/schemas/v1.ResourceClaimTemplate' application/yaml: schema: - $ref: '#/components/schemas/v1alpha3.ResourceClaimTemplate' + $ref: '#/components/schemas/v1.ResourceClaimTemplate' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1alpha3.ResourceClaimTemplate' + $ref: '#/components/schemas/v1.ResourceClaimTemplate' application/cbor: schema: - $ref: '#/components/schemas/v1alpha3.ResourceClaimTemplate' + $ref: '#/components/schemas/v1.ResourceClaimTemplate' description: Accepted "401": content: {} description: Unauthorized tags: - - resource_v1alpha3 + - resource_v1 x-kubernetes-action: delete x-kubernetes-group-version-kind: group: resource.k8s.io kind: ResourceClaimTemplate - version: v1alpha3 + version: v1 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json @@ -67469,27 +67664,27 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1alpha3.ResourceClaimTemplate' + $ref: '#/components/schemas/v1.ResourceClaimTemplate' application/yaml: schema: - $ref: '#/components/schemas/v1alpha3.ResourceClaimTemplate' + $ref: '#/components/schemas/v1.ResourceClaimTemplate' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1alpha3.ResourceClaimTemplate' + $ref: '#/components/schemas/v1.ResourceClaimTemplate' application/cbor: schema: - $ref: '#/components/schemas/v1alpha3.ResourceClaimTemplate' + $ref: '#/components/schemas/v1.ResourceClaimTemplate' description: OK "401": content: {} description: Unauthorized tags: - - resource_v1alpha3 + - resource_v1 x-kubernetes-action: get x-kubernetes-group-version-kind: group: resource.k8s.io kind: ResourceClaimTemplate - version: v1alpha3 + version: v1 x-accepts: application/json patch: description: partially update the specified ResourceClaimTemplate @@ -67566,42 +67761,42 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1alpha3.ResourceClaimTemplate' + $ref: '#/components/schemas/v1.ResourceClaimTemplate' application/yaml: schema: - $ref: '#/components/schemas/v1alpha3.ResourceClaimTemplate' + $ref: '#/components/schemas/v1.ResourceClaimTemplate' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1alpha3.ResourceClaimTemplate' + $ref: '#/components/schemas/v1.ResourceClaimTemplate' application/cbor: schema: - $ref: '#/components/schemas/v1alpha3.ResourceClaimTemplate' + $ref: '#/components/schemas/v1.ResourceClaimTemplate' description: OK "201": content: application/json: schema: - $ref: '#/components/schemas/v1alpha3.ResourceClaimTemplate' + $ref: '#/components/schemas/v1.ResourceClaimTemplate' application/yaml: schema: - $ref: '#/components/schemas/v1alpha3.ResourceClaimTemplate' + $ref: '#/components/schemas/v1.ResourceClaimTemplate' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1alpha3.ResourceClaimTemplate' + $ref: '#/components/schemas/v1.ResourceClaimTemplate' application/cbor: schema: - $ref: '#/components/schemas/v1alpha3.ResourceClaimTemplate' + $ref: '#/components/schemas/v1.ResourceClaimTemplate' description: Created "401": content: {} description: Unauthorized tags: - - resource_v1alpha3 + - resource_v1 x-kubernetes-action: patch x-kubernetes-group-version-kind: group: resource.k8s.io kind: ResourceClaimTemplate - version: v1alpha3 + version: v1 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json @@ -67664,53 +67859,53 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1alpha3.ResourceClaimTemplate' + $ref: '#/components/schemas/v1.ResourceClaimTemplate' required: true responses: "200": content: application/json: schema: - $ref: '#/components/schemas/v1alpha3.ResourceClaimTemplate' + $ref: '#/components/schemas/v1.ResourceClaimTemplate' application/yaml: schema: - $ref: '#/components/schemas/v1alpha3.ResourceClaimTemplate' + $ref: '#/components/schemas/v1.ResourceClaimTemplate' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1alpha3.ResourceClaimTemplate' + $ref: '#/components/schemas/v1.ResourceClaimTemplate' application/cbor: schema: - $ref: '#/components/schemas/v1alpha3.ResourceClaimTemplate' + $ref: '#/components/schemas/v1.ResourceClaimTemplate' description: OK "201": content: application/json: schema: - $ref: '#/components/schemas/v1alpha3.ResourceClaimTemplate' + $ref: '#/components/schemas/v1.ResourceClaimTemplate' application/yaml: schema: - $ref: '#/components/schemas/v1alpha3.ResourceClaimTemplate' + $ref: '#/components/schemas/v1.ResourceClaimTemplate' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1alpha3.ResourceClaimTemplate' + $ref: '#/components/schemas/v1.ResourceClaimTemplate' application/cbor: schema: - $ref: '#/components/schemas/v1alpha3.ResourceClaimTemplate' + $ref: '#/components/schemas/v1.ResourceClaimTemplate' description: Created "401": content: {} description: Unauthorized tags: - - resource_v1alpha3 + - resource_v1 x-kubernetes-action: put x-kubernetes-group-version-kind: group: resource.k8s.io kind: ResourceClaimTemplate - version: v1alpha3 + version: v1 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json - /apis/resource.k8s.io/v1alpha3/resourceclaims: + /apis/resource.k8s.io/v1/resourceclaims: get: description: list or watch objects of kind ResourceClaim operationId: listResourceClaimForAllNamespaces @@ -67811,38 +68006,38 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1alpha3.ResourceClaimList' + $ref: '#/components/schemas/v1.ResourceClaimList' application/yaml: schema: - $ref: '#/components/schemas/v1alpha3.ResourceClaimList' + $ref: '#/components/schemas/v1.ResourceClaimList' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1alpha3.ResourceClaimList' + $ref: '#/components/schemas/v1.ResourceClaimList' application/cbor: schema: - $ref: '#/components/schemas/v1alpha3.ResourceClaimList' + $ref: '#/components/schemas/v1.ResourceClaimList' application/json;stream=watch: schema: - $ref: '#/components/schemas/v1alpha3.ResourceClaimList' + $ref: '#/components/schemas/v1.ResourceClaimList' application/vnd.kubernetes.protobuf;stream=watch: schema: - $ref: '#/components/schemas/v1alpha3.ResourceClaimList' + $ref: '#/components/schemas/v1.ResourceClaimList' application/cbor-seq: schema: - $ref: '#/components/schemas/v1alpha3.ResourceClaimList' + $ref: '#/components/schemas/v1.ResourceClaimList' description: OK "401": content: {} description: Unauthorized tags: - - resource_v1alpha3 + - resource_v1 x-kubernetes-action: list x-kubernetes-group-version-kind: group: resource.k8s.io kind: ResourceClaim - version: v1alpha3 + version: v1 x-accepts: application/json - /apis/resource.k8s.io/v1alpha3/resourceclaimtemplates: + /apis/resource.k8s.io/v1/resourceclaimtemplates: get: description: list or watch objects of kind ResourceClaimTemplate operationId: listResourceClaimTemplateForAllNamespaces @@ -67943,38 +68138,38 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1alpha3.ResourceClaimTemplateList' + $ref: '#/components/schemas/v1.ResourceClaimTemplateList' application/yaml: schema: - $ref: '#/components/schemas/v1alpha3.ResourceClaimTemplateList' + $ref: '#/components/schemas/v1.ResourceClaimTemplateList' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1alpha3.ResourceClaimTemplateList' + $ref: '#/components/schemas/v1.ResourceClaimTemplateList' application/cbor: schema: - $ref: '#/components/schemas/v1alpha3.ResourceClaimTemplateList' + $ref: '#/components/schemas/v1.ResourceClaimTemplateList' application/json;stream=watch: schema: - $ref: '#/components/schemas/v1alpha3.ResourceClaimTemplateList' + $ref: '#/components/schemas/v1.ResourceClaimTemplateList' application/vnd.kubernetes.protobuf;stream=watch: schema: - $ref: '#/components/schemas/v1alpha3.ResourceClaimTemplateList' + $ref: '#/components/schemas/v1.ResourceClaimTemplateList' application/cbor-seq: schema: - $ref: '#/components/schemas/v1alpha3.ResourceClaimTemplateList' + $ref: '#/components/schemas/v1.ResourceClaimTemplateList' description: OK "401": content: {} description: Unauthorized tags: - - resource_v1alpha3 + - resource_v1 x-kubernetes-action: list x-kubernetes-group-version-kind: group: resource.k8s.io kind: ResourceClaimTemplate - version: v1alpha3 + version: v1 x-accepts: application/json - /apis/resource.k8s.io/v1alpha3/resourceslices: + /apis/resource.k8s.io/v1/resourceslices: delete: description: delete collection of ResourceSlice operationId: deleteCollectionResourceSlice @@ -68130,12 +68325,12 @@ paths: content: {} description: Unauthorized tags: - - resource_v1alpha3 + - resource_v1 x-kubernetes-action: deletecollection x-kubernetes-group-version-kind: group: resource.k8s.io kind: ResourceSlice - version: v1alpha3 + version: v1 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json @@ -68239,36 +68434,36 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1alpha3.ResourceSliceList' + $ref: '#/components/schemas/v1.ResourceSliceList' application/yaml: schema: - $ref: '#/components/schemas/v1alpha3.ResourceSliceList' + $ref: '#/components/schemas/v1.ResourceSliceList' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1alpha3.ResourceSliceList' + $ref: '#/components/schemas/v1.ResourceSliceList' application/cbor: schema: - $ref: '#/components/schemas/v1alpha3.ResourceSliceList' + $ref: '#/components/schemas/v1.ResourceSliceList' application/json;stream=watch: schema: - $ref: '#/components/schemas/v1alpha3.ResourceSliceList' + $ref: '#/components/schemas/v1.ResourceSliceList' application/vnd.kubernetes.protobuf;stream=watch: schema: - $ref: '#/components/schemas/v1alpha3.ResourceSliceList' + $ref: '#/components/schemas/v1.ResourceSliceList' application/cbor-seq: schema: - $ref: '#/components/schemas/v1alpha3.ResourceSliceList' + $ref: '#/components/schemas/v1.ResourceSliceList' description: OK "401": content: {} description: Unauthorized tags: - - resource_v1alpha3 + - resource_v1 x-kubernetes-action: list x-kubernetes-group-version-kind: group: resource.k8s.io kind: ResourceSlice - version: v1alpha3 + version: v1 x-accepts: application/json post: description: create a ResourceSlice @@ -68317,68 +68512,68 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1alpha3.ResourceSlice' + $ref: '#/components/schemas/v1.ResourceSlice' required: true responses: "200": content: application/json: schema: - $ref: '#/components/schemas/v1alpha3.ResourceSlice' + $ref: '#/components/schemas/v1.ResourceSlice' application/yaml: schema: - $ref: '#/components/schemas/v1alpha3.ResourceSlice' + $ref: '#/components/schemas/v1.ResourceSlice' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1alpha3.ResourceSlice' + $ref: '#/components/schemas/v1.ResourceSlice' application/cbor: schema: - $ref: '#/components/schemas/v1alpha3.ResourceSlice' + $ref: '#/components/schemas/v1.ResourceSlice' description: OK "201": content: application/json: schema: - $ref: '#/components/schemas/v1alpha3.ResourceSlice' + $ref: '#/components/schemas/v1.ResourceSlice' application/yaml: schema: - $ref: '#/components/schemas/v1alpha3.ResourceSlice' + $ref: '#/components/schemas/v1.ResourceSlice' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1alpha3.ResourceSlice' + $ref: '#/components/schemas/v1.ResourceSlice' application/cbor: schema: - $ref: '#/components/schemas/v1alpha3.ResourceSlice' + $ref: '#/components/schemas/v1.ResourceSlice' description: Created "202": content: application/json: schema: - $ref: '#/components/schemas/v1alpha3.ResourceSlice' + $ref: '#/components/schemas/v1.ResourceSlice' application/yaml: schema: - $ref: '#/components/schemas/v1alpha3.ResourceSlice' + $ref: '#/components/schemas/v1.ResourceSlice' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1alpha3.ResourceSlice' + $ref: '#/components/schemas/v1.ResourceSlice' application/cbor: schema: - $ref: '#/components/schemas/v1alpha3.ResourceSlice' + $ref: '#/components/schemas/v1.ResourceSlice' description: Accepted "401": content: {} description: Unauthorized tags: - - resource_v1alpha3 + - resource_v1 x-kubernetes-action: post x-kubernetes-group-version-kind: group: resource.k8s.io kind: ResourceSlice - version: v1alpha3 + version: v1 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json - /apis/resource.k8s.io/v1alpha3/resourceslices/{name}: + /apis/resource.k8s.io/v1/resourceslices/{name}: delete: description: delete a ResourceSlice operationId: deleteResourceSlice @@ -68457,42 +68652,42 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1alpha3.ResourceSlice' + $ref: '#/components/schemas/v1.ResourceSlice' application/yaml: schema: - $ref: '#/components/schemas/v1alpha3.ResourceSlice' + $ref: '#/components/schemas/v1.ResourceSlice' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1alpha3.ResourceSlice' + $ref: '#/components/schemas/v1.ResourceSlice' application/cbor: schema: - $ref: '#/components/schemas/v1alpha3.ResourceSlice' + $ref: '#/components/schemas/v1.ResourceSlice' description: OK "202": content: application/json: schema: - $ref: '#/components/schemas/v1alpha3.ResourceSlice' + $ref: '#/components/schemas/v1.ResourceSlice' application/yaml: schema: - $ref: '#/components/schemas/v1alpha3.ResourceSlice' + $ref: '#/components/schemas/v1.ResourceSlice' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1alpha3.ResourceSlice' + $ref: '#/components/schemas/v1.ResourceSlice' application/cbor: schema: - $ref: '#/components/schemas/v1alpha3.ResourceSlice' + $ref: '#/components/schemas/v1.ResourceSlice' description: Accepted "401": content: {} description: Unauthorized tags: - - resource_v1alpha3 + - resource_v1 x-kubernetes-action: delete x-kubernetes-group-version-kind: group: resource.k8s.io kind: ResourceSlice - version: v1alpha3 + version: v1 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json @@ -68518,27 +68713,27 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1alpha3.ResourceSlice' + $ref: '#/components/schemas/v1.ResourceSlice' application/yaml: schema: - $ref: '#/components/schemas/v1alpha3.ResourceSlice' + $ref: '#/components/schemas/v1.ResourceSlice' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1alpha3.ResourceSlice' + $ref: '#/components/schemas/v1.ResourceSlice' application/cbor: schema: - $ref: '#/components/schemas/v1alpha3.ResourceSlice' + $ref: '#/components/schemas/v1.ResourceSlice' description: OK "401": content: {} description: Unauthorized tags: - - resource_v1alpha3 + - resource_v1 x-kubernetes-action: get x-kubernetes-group-version-kind: group: resource.k8s.io kind: ResourceSlice - version: v1alpha3 + version: v1 x-accepts: application/json patch: description: partially update the specified ResourceSlice @@ -68609,42 +68804,42 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1alpha3.ResourceSlice' + $ref: '#/components/schemas/v1.ResourceSlice' application/yaml: schema: - $ref: '#/components/schemas/v1alpha3.ResourceSlice' + $ref: '#/components/schemas/v1.ResourceSlice' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1alpha3.ResourceSlice' + $ref: '#/components/schemas/v1.ResourceSlice' application/cbor: schema: - $ref: '#/components/schemas/v1alpha3.ResourceSlice' + $ref: '#/components/schemas/v1.ResourceSlice' description: OK "201": content: application/json: schema: - $ref: '#/components/schemas/v1alpha3.ResourceSlice' + $ref: '#/components/schemas/v1.ResourceSlice' application/yaml: schema: - $ref: '#/components/schemas/v1alpha3.ResourceSlice' + $ref: '#/components/schemas/v1.ResourceSlice' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1alpha3.ResourceSlice' + $ref: '#/components/schemas/v1.ResourceSlice' application/cbor: schema: - $ref: '#/components/schemas/v1alpha3.ResourceSlice' + $ref: '#/components/schemas/v1.ResourceSlice' description: Created "401": content: {} description: Unauthorized tags: - - resource_v1alpha3 + - resource_v1 x-kubernetes-action: patch x-kubernetes-group-version-kind: group: resource.k8s.io kind: ResourceSlice - version: v1alpha3 + version: v1 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json @@ -68701,65 +68896,63 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1alpha3.ResourceSlice' + $ref: '#/components/schemas/v1.ResourceSlice' required: true responses: "200": content: application/json: schema: - $ref: '#/components/schemas/v1alpha3.ResourceSlice' + $ref: '#/components/schemas/v1.ResourceSlice' application/yaml: schema: - $ref: '#/components/schemas/v1alpha3.ResourceSlice' + $ref: '#/components/schemas/v1.ResourceSlice' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1alpha3.ResourceSlice' + $ref: '#/components/schemas/v1.ResourceSlice' application/cbor: schema: - $ref: '#/components/schemas/v1alpha3.ResourceSlice' + $ref: '#/components/schemas/v1.ResourceSlice' description: OK "201": content: application/json: schema: - $ref: '#/components/schemas/v1alpha3.ResourceSlice' + $ref: '#/components/schemas/v1.ResourceSlice' application/yaml: schema: - $ref: '#/components/schemas/v1alpha3.ResourceSlice' + $ref: '#/components/schemas/v1.ResourceSlice' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1alpha3.ResourceSlice' + $ref: '#/components/schemas/v1.ResourceSlice' application/cbor: schema: - $ref: '#/components/schemas/v1alpha3.ResourceSlice' + $ref: '#/components/schemas/v1.ResourceSlice' description: Created "401": content: {} description: Unauthorized tags: - - resource_v1alpha3 + - resource_v1 x-kubernetes-action: put x-kubernetes-group-version-kind: group: resource.k8s.io kind: ResourceSlice - version: v1alpha3 + version: v1 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json - /apis/resource.k8s.io/v1alpha3/watch/deviceclasses: {} - /apis/resource.k8s.io/v1alpha3/watch/deviceclasses/{name}: {} - /apis/resource.k8s.io/v1alpha3/watch/devicetaintrules: {} - /apis/resource.k8s.io/v1alpha3/watch/devicetaintrules/{name}: {} - /apis/resource.k8s.io/v1alpha3/watch/namespaces/{namespace}/resourceclaims: {} - /apis/resource.k8s.io/v1alpha3/watch/namespaces/{namespace}/resourceclaims/{name}: {} - /apis/resource.k8s.io/v1alpha3/watch/namespaces/{namespace}/resourceclaimtemplates: {} - /apis/resource.k8s.io/v1alpha3/watch/namespaces/{namespace}/resourceclaimtemplates/{name}: {} - /apis/resource.k8s.io/v1alpha3/watch/resourceclaims: {} - /apis/resource.k8s.io/v1alpha3/watch/resourceclaimtemplates: {} - /apis/resource.k8s.io/v1alpha3/watch/resourceslices: {} - /apis/resource.k8s.io/v1alpha3/watch/resourceslices/{name}: {} - /apis/resource.k8s.io/v1beta1/: + /apis/resource.k8s.io/v1/watch/deviceclasses: {} + /apis/resource.k8s.io/v1/watch/deviceclasses/{name}: {} + /apis/resource.k8s.io/v1/watch/namespaces/{namespace}/resourceclaims: {} + /apis/resource.k8s.io/v1/watch/namespaces/{namespace}/resourceclaims/{name}: {} + /apis/resource.k8s.io/v1/watch/namespaces/{namespace}/resourceclaimtemplates: {} + /apis/resource.k8s.io/v1/watch/namespaces/{namespace}/resourceclaimtemplates/{name}: {} + /apis/resource.k8s.io/v1/watch/resourceclaims: {} + /apis/resource.k8s.io/v1/watch/resourceclaimtemplates: {} + /apis/resource.k8s.io/v1/watch/resourceslices: {} + /apis/resource.k8s.io/v1/watch/resourceslices/{name}: {} + /apis/resource.k8s.io/v1alpha3/: get: description: get available resources operationId: getAPIResources @@ -68783,12 +68976,12 @@ paths: content: {} description: Unauthorized tags: - - resource_v1beta1 + - resource_v1alpha3 x-accepts: application/json - /apis/resource.k8s.io/v1beta1/deviceclasses: + /apis/resource.k8s.io/v1alpha3/devicetaintrules: delete: - description: delete collection of DeviceClass - operationId: deleteCollectionDeviceClass + description: delete collection of DeviceTaintRule + operationId: deleteCollectionDeviceTaintRule parameters: - description: If 'true', then the output is pretty printed. Defaults to 'false' unless the user-agent indicates a browser or command-line HTTP tool (curl @@ -68941,18 +69134,18 @@ paths: content: {} description: Unauthorized tags: - - resource_v1beta1 + - resource_v1alpha3 x-kubernetes-action: deletecollection x-kubernetes-group-version-kind: group: resource.k8s.io - kind: DeviceClass - version: v1beta1 + kind: DeviceTaintRule + version: v1alpha3 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json get: - description: list or watch objects of kind DeviceClass - operationId: listDeviceClass + description: list or watch objects of kind DeviceTaintRule + operationId: listDeviceTaintRule parameters: - description: If 'true', then the output is pretty printed. Defaults to 'false' unless the user-agent indicates a browser or command-line HTTP tool (curl @@ -69050,40 +69243,40 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1beta1.DeviceClassList' + $ref: '#/components/schemas/v1alpha3.DeviceTaintRuleList' application/yaml: schema: - $ref: '#/components/schemas/v1beta1.DeviceClassList' + $ref: '#/components/schemas/v1alpha3.DeviceTaintRuleList' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1beta1.DeviceClassList' + $ref: '#/components/schemas/v1alpha3.DeviceTaintRuleList' application/cbor: schema: - $ref: '#/components/schemas/v1beta1.DeviceClassList' + $ref: '#/components/schemas/v1alpha3.DeviceTaintRuleList' application/json;stream=watch: schema: - $ref: '#/components/schemas/v1beta1.DeviceClassList' + $ref: '#/components/schemas/v1alpha3.DeviceTaintRuleList' application/vnd.kubernetes.protobuf;stream=watch: schema: - $ref: '#/components/schemas/v1beta1.DeviceClassList' + $ref: '#/components/schemas/v1alpha3.DeviceTaintRuleList' application/cbor-seq: schema: - $ref: '#/components/schemas/v1beta1.DeviceClassList' + $ref: '#/components/schemas/v1alpha3.DeviceTaintRuleList' description: OK "401": content: {} description: Unauthorized tags: - - resource_v1beta1 + - resource_v1alpha3 x-kubernetes-action: list x-kubernetes-group-version-kind: group: resource.k8s.io - kind: DeviceClass - version: v1beta1 + kind: DeviceTaintRule + version: v1alpha3 x-accepts: application/json post: - description: create a DeviceClass - operationId: createDeviceClass + description: create a DeviceTaintRule + operationId: createDeviceTaintRule parameters: - description: If 'true', then the output is pretty printed. Defaults to 'false' unless the user-agent indicates a browser or command-line HTTP tool (curl @@ -69128,73 +69321,73 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1beta1.DeviceClass' + $ref: '#/components/schemas/v1alpha3.DeviceTaintRule' required: true responses: "200": content: application/json: schema: - $ref: '#/components/schemas/v1beta1.DeviceClass' + $ref: '#/components/schemas/v1alpha3.DeviceTaintRule' application/yaml: schema: - $ref: '#/components/schemas/v1beta1.DeviceClass' + $ref: '#/components/schemas/v1alpha3.DeviceTaintRule' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1beta1.DeviceClass' + $ref: '#/components/schemas/v1alpha3.DeviceTaintRule' application/cbor: schema: - $ref: '#/components/schemas/v1beta1.DeviceClass' + $ref: '#/components/schemas/v1alpha3.DeviceTaintRule' description: OK "201": content: application/json: schema: - $ref: '#/components/schemas/v1beta1.DeviceClass' + $ref: '#/components/schemas/v1alpha3.DeviceTaintRule' application/yaml: schema: - $ref: '#/components/schemas/v1beta1.DeviceClass' + $ref: '#/components/schemas/v1alpha3.DeviceTaintRule' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1beta1.DeviceClass' + $ref: '#/components/schemas/v1alpha3.DeviceTaintRule' application/cbor: schema: - $ref: '#/components/schemas/v1beta1.DeviceClass' + $ref: '#/components/schemas/v1alpha3.DeviceTaintRule' description: Created "202": content: application/json: schema: - $ref: '#/components/schemas/v1beta1.DeviceClass' + $ref: '#/components/schemas/v1alpha3.DeviceTaintRule' application/yaml: schema: - $ref: '#/components/schemas/v1beta1.DeviceClass' + $ref: '#/components/schemas/v1alpha3.DeviceTaintRule' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1beta1.DeviceClass' + $ref: '#/components/schemas/v1alpha3.DeviceTaintRule' application/cbor: schema: - $ref: '#/components/schemas/v1beta1.DeviceClass' + $ref: '#/components/schemas/v1alpha3.DeviceTaintRule' description: Accepted "401": content: {} description: Unauthorized tags: - - resource_v1beta1 + - resource_v1alpha3 x-kubernetes-action: post x-kubernetes-group-version-kind: group: resource.k8s.io - kind: DeviceClass - version: v1beta1 + kind: DeviceTaintRule + version: v1alpha3 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json - /apis/resource.k8s.io/v1beta1/deviceclasses/{name}: + /apis/resource.k8s.io/v1alpha3/devicetaintrules/{name}: delete: - description: delete a DeviceClass - operationId: deleteDeviceClass + description: delete a DeviceTaintRule + operationId: deleteDeviceTaintRule parameters: - - description: name of the DeviceClass + - description: name of the DeviceTaintRule in: path name: name required: true @@ -69268,50 +69461,50 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1beta1.DeviceClass' + $ref: '#/components/schemas/v1alpha3.DeviceTaintRule' application/yaml: schema: - $ref: '#/components/schemas/v1beta1.DeviceClass' + $ref: '#/components/schemas/v1alpha3.DeviceTaintRule' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1beta1.DeviceClass' + $ref: '#/components/schemas/v1alpha3.DeviceTaintRule' application/cbor: schema: - $ref: '#/components/schemas/v1beta1.DeviceClass' + $ref: '#/components/schemas/v1alpha3.DeviceTaintRule' description: OK "202": content: application/json: schema: - $ref: '#/components/schemas/v1beta1.DeviceClass' + $ref: '#/components/schemas/v1alpha3.DeviceTaintRule' application/yaml: schema: - $ref: '#/components/schemas/v1beta1.DeviceClass' + $ref: '#/components/schemas/v1alpha3.DeviceTaintRule' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1beta1.DeviceClass' + $ref: '#/components/schemas/v1alpha3.DeviceTaintRule' application/cbor: schema: - $ref: '#/components/schemas/v1beta1.DeviceClass' + $ref: '#/components/schemas/v1alpha3.DeviceTaintRule' description: Accepted "401": content: {} description: Unauthorized tags: - - resource_v1beta1 + - resource_v1alpha3 x-kubernetes-action: delete x-kubernetes-group-version-kind: group: resource.k8s.io - kind: DeviceClass - version: v1beta1 + kind: DeviceTaintRule + version: v1alpha3 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json get: - description: read the specified DeviceClass - operationId: readDeviceClass + description: read the specified DeviceTaintRule + operationId: readDeviceTaintRule parameters: - - description: name of the DeviceClass + - description: name of the DeviceTaintRule in: path name: name required: true @@ -69329,33 +69522,33 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1beta1.DeviceClass' + $ref: '#/components/schemas/v1alpha3.DeviceTaintRule' application/yaml: schema: - $ref: '#/components/schemas/v1beta1.DeviceClass' + $ref: '#/components/schemas/v1alpha3.DeviceTaintRule' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1beta1.DeviceClass' + $ref: '#/components/schemas/v1alpha3.DeviceTaintRule' application/cbor: schema: - $ref: '#/components/schemas/v1beta1.DeviceClass' + $ref: '#/components/schemas/v1alpha3.DeviceTaintRule' description: OK "401": content: {} description: Unauthorized tags: - - resource_v1beta1 + - resource_v1alpha3 x-kubernetes-action: get x-kubernetes-group-version-kind: group: resource.k8s.io - kind: DeviceClass - version: v1beta1 + kind: DeviceTaintRule + version: v1alpha3 x-accepts: application/json patch: - description: partially update the specified DeviceClass - operationId: patchDeviceClass + description: partially update the specified DeviceTaintRule + operationId: patchDeviceTaintRule parameters: - - description: name of the DeviceClass + - description: name of the DeviceTaintRule in: path name: name required: true @@ -69420,50 +69613,50 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1beta1.DeviceClass' + $ref: '#/components/schemas/v1alpha3.DeviceTaintRule' application/yaml: schema: - $ref: '#/components/schemas/v1beta1.DeviceClass' + $ref: '#/components/schemas/v1alpha3.DeviceTaintRule' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1beta1.DeviceClass' + $ref: '#/components/schemas/v1alpha3.DeviceTaintRule' application/cbor: schema: - $ref: '#/components/schemas/v1beta1.DeviceClass' + $ref: '#/components/schemas/v1alpha3.DeviceTaintRule' description: OK "201": content: application/json: schema: - $ref: '#/components/schemas/v1beta1.DeviceClass' + $ref: '#/components/schemas/v1alpha3.DeviceTaintRule' application/yaml: schema: - $ref: '#/components/schemas/v1beta1.DeviceClass' + $ref: '#/components/schemas/v1alpha3.DeviceTaintRule' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1beta1.DeviceClass' + $ref: '#/components/schemas/v1alpha3.DeviceTaintRule' application/cbor: schema: - $ref: '#/components/schemas/v1beta1.DeviceClass' + $ref: '#/components/schemas/v1alpha3.DeviceTaintRule' description: Created "401": content: {} description: Unauthorized tags: - - resource_v1beta1 + - resource_v1alpha3 x-kubernetes-action: patch x-kubernetes-group-version-kind: group: resource.k8s.io - kind: DeviceClass - version: v1beta1 + kind: DeviceTaintRule + version: v1alpha3 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json put: - description: replace the specified DeviceClass - operationId: replaceDeviceClass + description: replace the specified DeviceTaintRule + operationId: replaceDeviceTaintRule parameters: - - description: name of the DeviceClass + - description: name of the DeviceTaintRule in: path name: name required: true @@ -69512,63 +69705,85 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1beta1.DeviceClass' + $ref: '#/components/schemas/v1alpha3.DeviceTaintRule' required: true responses: "200": content: application/json: schema: - $ref: '#/components/schemas/v1beta1.DeviceClass' + $ref: '#/components/schemas/v1alpha3.DeviceTaintRule' application/yaml: schema: - $ref: '#/components/schemas/v1beta1.DeviceClass' + $ref: '#/components/schemas/v1alpha3.DeviceTaintRule' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1beta1.DeviceClass' + $ref: '#/components/schemas/v1alpha3.DeviceTaintRule' application/cbor: schema: - $ref: '#/components/schemas/v1beta1.DeviceClass' + $ref: '#/components/schemas/v1alpha3.DeviceTaintRule' description: OK "201": content: application/json: schema: - $ref: '#/components/schemas/v1beta1.DeviceClass' + $ref: '#/components/schemas/v1alpha3.DeviceTaintRule' application/yaml: schema: - $ref: '#/components/schemas/v1beta1.DeviceClass' + $ref: '#/components/schemas/v1alpha3.DeviceTaintRule' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1beta1.DeviceClass' + $ref: '#/components/schemas/v1alpha3.DeviceTaintRule' application/cbor: schema: - $ref: '#/components/schemas/v1beta1.DeviceClass' + $ref: '#/components/schemas/v1alpha3.DeviceTaintRule' description: Created "401": content: {} description: Unauthorized tags: - - resource_v1beta1 + - resource_v1alpha3 x-kubernetes-action: put x-kubernetes-group-version-kind: group: resource.k8s.io - kind: DeviceClass - version: v1beta1 + kind: DeviceTaintRule + version: v1alpha3 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json - /apis/resource.k8s.io/v1beta1/namespaces/{namespace}/resourceclaims: + /apis/resource.k8s.io/v1alpha3/watch/devicetaintrules: {} + /apis/resource.k8s.io/v1alpha3/watch/devicetaintrules/{name}: {} + /apis/resource.k8s.io/v1beta1/: + get: + description: get available resources + operationId: getAPIResources + responses: + "200": + content: + application/json: + schema: + $ref: '#/components/schemas/v1.APIResourceList' + application/yaml: + schema: + $ref: '#/components/schemas/v1.APIResourceList' + application/vnd.kubernetes.protobuf: + schema: + $ref: '#/components/schemas/v1.APIResourceList' + application/cbor: + schema: + $ref: '#/components/schemas/v1.APIResourceList' + description: OK + "401": + content: {} + description: Unauthorized + tags: + - resource_v1beta1 + x-accepts: application/json + /apis/resource.k8s.io/v1beta1/deviceclasses: delete: - description: delete collection of ResourceClaim - operationId: deleteCollectionNamespacedResourceClaim + description: delete collection of DeviceClass + operationId: deleteCollectionDeviceClass parameters: - - description: object name and auth scope, such as for teams and projects - in: path - name: namespace - required: true - schema: - type: string - description: If 'true', then the output is pretty printed. Defaults to 'false' unless the user-agent indicates a browser or command-line HTTP tool (curl and wget). @@ -69724,21 +69939,15 @@ paths: x-kubernetes-action: deletecollection x-kubernetes-group-version-kind: group: resource.k8s.io - kind: ResourceClaim + kind: DeviceClass version: v1beta1 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json get: - description: list or watch objects of kind ResourceClaim - operationId: listNamespacedResourceClaim + description: list or watch objects of kind DeviceClass + operationId: listDeviceClass parameters: - - description: object name and auth scope, such as for teams and projects - in: path - name: namespace - required: true - schema: - type: string - description: If 'true', then the output is pretty printed. Defaults to 'false' unless the user-agent indicates a browser or command-line HTTP tool (curl and wget). @@ -69835,25 +70044,25 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1beta1.ResourceClaimList' + $ref: '#/components/schemas/v1beta1.DeviceClassList' application/yaml: schema: - $ref: '#/components/schemas/v1beta1.ResourceClaimList' + $ref: '#/components/schemas/v1beta1.DeviceClassList' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1beta1.ResourceClaimList' + $ref: '#/components/schemas/v1beta1.DeviceClassList' application/cbor: schema: - $ref: '#/components/schemas/v1beta1.ResourceClaimList' + $ref: '#/components/schemas/v1beta1.DeviceClassList' application/json;stream=watch: schema: - $ref: '#/components/schemas/v1beta1.ResourceClaimList' + $ref: '#/components/schemas/v1beta1.DeviceClassList' application/vnd.kubernetes.protobuf;stream=watch: schema: - $ref: '#/components/schemas/v1beta1.ResourceClaimList' + $ref: '#/components/schemas/v1beta1.DeviceClassList' application/cbor-seq: schema: - $ref: '#/components/schemas/v1beta1.ResourceClaimList' + $ref: '#/components/schemas/v1beta1.DeviceClassList' description: OK "401": content: {} @@ -69863,19 +70072,13 @@ paths: x-kubernetes-action: list x-kubernetes-group-version-kind: group: resource.k8s.io - kind: ResourceClaim + kind: DeviceClass version: v1beta1 x-accepts: application/json post: - description: create a ResourceClaim - operationId: createNamespacedResourceClaim + description: create a DeviceClass + operationId: createDeviceClass parameters: - - description: object name and auth scope, such as for teams and projects - in: path - name: namespace - required: true - schema: - type: string - description: If 'true', then the output is pretty printed. Defaults to 'false' unless the user-agent indicates a browser or command-line HTTP tool (curl and wget). @@ -69919,53 +70122,53 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1beta1.ResourceClaim' + $ref: '#/components/schemas/v1beta1.DeviceClass' required: true responses: "200": content: application/json: schema: - $ref: '#/components/schemas/v1beta1.ResourceClaim' + $ref: '#/components/schemas/v1beta1.DeviceClass' application/yaml: schema: - $ref: '#/components/schemas/v1beta1.ResourceClaim' + $ref: '#/components/schemas/v1beta1.DeviceClass' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1beta1.ResourceClaim' + $ref: '#/components/schemas/v1beta1.DeviceClass' application/cbor: schema: - $ref: '#/components/schemas/v1beta1.ResourceClaim' + $ref: '#/components/schemas/v1beta1.DeviceClass' description: OK "201": content: application/json: schema: - $ref: '#/components/schemas/v1beta1.ResourceClaim' + $ref: '#/components/schemas/v1beta1.DeviceClass' application/yaml: schema: - $ref: '#/components/schemas/v1beta1.ResourceClaim' + $ref: '#/components/schemas/v1beta1.DeviceClass' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1beta1.ResourceClaim' + $ref: '#/components/schemas/v1beta1.DeviceClass' application/cbor: schema: - $ref: '#/components/schemas/v1beta1.ResourceClaim' + $ref: '#/components/schemas/v1beta1.DeviceClass' description: Created "202": content: application/json: schema: - $ref: '#/components/schemas/v1beta1.ResourceClaim' + $ref: '#/components/schemas/v1beta1.DeviceClass' application/yaml: schema: - $ref: '#/components/schemas/v1beta1.ResourceClaim' + $ref: '#/components/schemas/v1beta1.DeviceClass' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1beta1.ResourceClaim' + $ref: '#/components/schemas/v1beta1.DeviceClass' application/cbor: schema: - $ref: '#/components/schemas/v1beta1.ResourceClaim' + $ref: '#/components/schemas/v1beta1.DeviceClass' description: Accepted "401": content: {} @@ -69975,28 +70178,22 @@ paths: x-kubernetes-action: post x-kubernetes-group-version-kind: group: resource.k8s.io - kind: ResourceClaim + kind: DeviceClass version: v1beta1 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json - /apis/resource.k8s.io/v1beta1/namespaces/{namespace}/resourceclaims/{name}: + /apis/resource.k8s.io/v1beta1/deviceclasses/{name}: delete: - description: delete a ResourceClaim - operationId: deleteNamespacedResourceClaim + description: delete a DeviceClass + operationId: deleteDeviceClass parameters: - - description: name of the ResourceClaim + - description: name of the DeviceClass in: path name: name required: true schema: type: string - - description: object name and auth scope, such as for teams and projects - in: path - name: namespace - required: true - schema: - type: string - description: If 'true', then the output is pretty printed. Defaults to 'false' unless the user-agent indicates a browser or command-line HTTP tool (curl and wget). @@ -70065,31 +70262,31 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1beta1.ResourceClaim' + $ref: '#/components/schemas/v1beta1.DeviceClass' application/yaml: schema: - $ref: '#/components/schemas/v1beta1.ResourceClaim' + $ref: '#/components/schemas/v1beta1.DeviceClass' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1beta1.ResourceClaim' + $ref: '#/components/schemas/v1beta1.DeviceClass' application/cbor: schema: - $ref: '#/components/schemas/v1beta1.ResourceClaim' + $ref: '#/components/schemas/v1beta1.DeviceClass' description: OK "202": content: application/json: schema: - $ref: '#/components/schemas/v1beta1.ResourceClaim' + $ref: '#/components/schemas/v1beta1.DeviceClass' application/yaml: schema: - $ref: '#/components/schemas/v1beta1.ResourceClaim' + $ref: '#/components/schemas/v1beta1.DeviceClass' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1beta1.ResourceClaim' + $ref: '#/components/schemas/v1beta1.DeviceClass' application/cbor: schema: - $ref: '#/components/schemas/v1beta1.ResourceClaim' + $ref: '#/components/schemas/v1beta1.DeviceClass' description: Accepted "401": content: {} @@ -70099,297 +70296,21 @@ paths: x-kubernetes-action: delete x-kubernetes-group-version-kind: group: resource.k8s.io - kind: ResourceClaim - version: v1beta1 - x-codegen-request-body-name: body - x-contentType: application/json - x-accepts: application/json - get: - description: read the specified ResourceClaim - operationId: readNamespacedResourceClaim - parameters: - - description: name of the ResourceClaim - in: path - name: name - required: true - schema: - type: string - - description: object name and auth scope, such as for teams and projects - in: path - name: namespace - required: true - schema: - type: string - - description: If 'true', then the output is pretty printed. Defaults to 'false' - unless the user-agent indicates a browser or command-line HTTP tool (curl - and wget). - in: query - name: pretty - schema: - type: string - responses: - "200": - content: - application/json: - schema: - $ref: '#/components/schemas/v1beta1.ResourceClaim' - application/yaml: - schema: - $ref: '#/components/schemas/v1beta1.ResourceClaim' - application/vnd.kubernetes.protobuf: - schema: - $ref: '#/components/schemas/v1beta1.ResourceClaim' - application/cbor: - schema: - $ref: '#/components/schemas/v1beta1.ResourceClaim' - description: OK - "401": - content: {} - description: Unauthorized - tags: - - resource_v1beta1 - x-kubernetes-action: get - x-kubernetes-group-version-kind: - group: resource.k8s.io - kind: ResourceClaim - version: v1beta1 - x-accepts: application/json - patch: - description: partially update the specified ResourceClaim - operationId: patchNamespacedResourceClaim - parameters: - - description: name of the ResourceClaim - in: path - name: name - required: true - schema: - type: string - - description: object name and auth scope, such as for teams and projects - in: path - name: namespace - required: true - schema: - type: string - - description: If 'true', then the output is pretty printed. Defaults to 'false' - unless the user-agent indicates a browser or command-line HTTP tool (curl - and wget). - in: query - name: pretty - schema: - type: string - - description: 'When present, indicates that modifications should not be persisted. - An invalid or unrecognized dryRun directive will result in an error response - and no further processing of the request. Valid values are: - All: all dry - run stages will be processed' - in: query - name: dryRun - schema: - type: string - - description: fieldManager is a name associated with the actor or entity that - is making these changes. The value must be less than or 128 characters long, - and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. - This field is required for apply requests (application/apply-patch) but - optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch). - in: query - name: fieldManager - schema: - type: string - - description: 'fieldValidation instructs the server on how to handle objects - in the request (POST/PUT/PATCH) containing unknown or duplicate fields. - Valid values are: - Ignore: This will ignore any unknown fields that are - silently dropped from the object, and will ignore all but the last duplicate - field that the decoder encounters. This is the default behavior prior to - v1.23. - Warn: This will send a warning via the standard warning response - header for each unknown field that is dropped from the object, and for each - duplicate field that is encountered. The request will still succeed if there - are no other errors, and will only persist the last of any duplicate fields. - This is the default in v1.23+ - Strict: This will fail the request with - a BadRequest error if any unknown fields would be dropped from the object, - or if any duplicate fields are present. The error returned from the server - will contain all unknown and duplicate fields encountered.' - in: query - name: fieldValidation - schema: - type: string - - description: Force is going to "force" Apply requests. It means user will - re-acquire conflicting fields owned by other people. Force flag must be - unset for non-apply patch requests. - in: query - name: force - schema: - type: boolean - requestBody: - content: - application/json: - schema: - $ref: '#/components/schemas/v1.Patch' - required: true - responses: - "200": - content: - application/json: - schema: - $ref: '#/components/schemas/v1beta1.ResourceClaim' - application/yaml: - schema: - $ref: '#/components/schemas/v1beta1.ResourceClaim' - application/vnd.kubernetes.protobuf: - schema: - $ref: '#/components/schemas/v1beta1.ResourceClaim' - application/cbor: - schema: - $ref: '#/components/schemas/v1beta1.ResourceClaim' - description: OK - "201": - content: - application/json: - schema: - $ref: '#/components/schemas/v1beta1.ResourceClaim' - application/yaml: - schema: - $ref: '#/components/schemas/v1beta1.ResourceClaim' - application/vnd.kubernetes.protobuf: - schema: - $ref: '#/components/schemas/v1beta1.ResourceClaim' - application/cbor: - schema: - $ref: '#/components/schemas/v1beta1.ResourceClaim' - description: Created - "401": - content: {} - description: Unauthorized - tags: - - resource_v1beta1 - x-kubernetes-action: patch - x-kubernetes-group-version-kind: - group: resource.k8s.io - kind: ResourceClaim - version: v1beta1 - x-codegen-request-body-name: body - x-contentType: application/json - x-accepts: application/json - put: - description: replace the specified ResourceClaim - operationId: replaceNamespacedResourceClaim - parameters: - - description: name of the ResourceClaim - in: path - name: name - required: true - schema: - type: string - - description: object name and auth scope, such as for teams and projects - in: path - name: namespace - required: true - schema: - type: string - - description: If 'true', then the output is pretty printed. Defaults to 'false' - unless the user-agent indicates a browser or command-line HTTP tool (curl - and wget). - in: query - name: pretty - schema: - type: string - - description: 'When present, indicates that modifications should not be persisted. - An invalid or unrecognized dryRun directive will result in an error response - and no further processing of the request. Valid values are: - All: all dry - run stages will be processed' - in: query - name: dryRun - schema: - type: string - - description: fieldManager is a name associated with the actor or entity that - is making these changes. The value must be less than or 128 characters long, - and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. - in: query - name: fieldManager - schema: - type: string - - description: 'fieldValidation instructs the server on how to handle objects - in the request (POST/PUT/PATCH) containing unknown or duplicate fields. - Valid values are: - Ignore: This will ignore any unknown fields that are - silently dropped from the object, and will ignore all but the last duplicate - field that the decoder encounters. This is the default behavior prior to - v1.23. - Warn: This will send a warning via the standard warning response - header for each unknown field that is dropped from the object, and for each - duplicate field that is encountered. The request will still succeed if there - are no other errors, and will only persist the last of any duplicate fields. - This is the default in v1.23+ - Strict: This will fail the request with - a BadRequest error if any unknown fields would be dropped from the object, - or if any duplicate fields are present. The error returned from the server - will contain all unknown and duplicate fields encountered.' - in: query - name: fieldValidation - schema: - type: string - requestBody: - content: - application/json: - schema: - $ref: '#/components/schemas/v1beta1.ResourceClaim' - required: true - responses: - "200": - content: - application/json: - schema: - $ref: '#/components/schemas/v1beta1.ResourceClaim' - application/yaml: - schema: - $ref: '#/components/schemas/v1beta1.ResourceClaim' - application/vnd.kubernetes.protobuf: - schema: - $ref: '#/components/schemas/v1beta1.ResourceClaim' - application/cbor: - schema: - $ref: '#/components/schemas/v1beta1.ResourceClaim' - description: OK - "201": - content: - application/json: - schema: - $ref: '#/components/schemas/v1beta1.ResourceClaim' - application/yaml: - schema: - $ref: '#/components/schemas/v1beta1.ResourceClaim' - application/vnd.kubernetes.protobuf: - schema: - $ref: '#/components/schemas/v1beta1.ResourceClaim' - application/cbor: - schema: - $ref: '#/components/schemas/v1beta1.ResourceClaim' - description: Created - "401": - content: {} - description: Unauthorized - tags: - - resource_v1beta1 - x-kubernetes-action: put - x-kubernetes-group-version-kind: - group: resource.k8s.io - kind: ResourceClaim + kind: DeviceClass version: v1beta1 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json - /apis/resource.k8s.io/v1beta1/namespaces/{namespace}/resourceclaims/{name}/status: get: - description: read status of the specified ResourceClaim - operationId: readNamespacedResourceClaimStatus + description: read the specified DeviceClass + operationId: readDeviceClass parameters: - - description: name of the ResourceClaim + - description: name of the DeviceClass in: path name: name required: true schema: type: string - - description: object name and auth scope, such as for teams and projects - in: path - name: namespace - required: true - schema: - type: string - description: If 'true', then the output is pretty printed. Defaults to 'false' unless the user-agent indicates a browser or command-line HTTP tool (curl and wget). @@ -70402,16 +70323,16 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1beta1.ResourceClaim' + $ref: '#/components/schemas/v1beta1.DeviceClass' application/yaml: schema: - $ref: '#/components/schemas/v1beta1.ResourceClaim' + $ref: '#/components/schemas/v1beta1.DeviceClass' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1beta1.ResourceClaim' + $ref: '#/components/schemas/v1beta1.DeviceClass' application/cbor: schema: - $ref: '#/components/schemas/v1beta1.ResourceClaim' + $ref: '#/components/schemas/v1beta1.DeviceClass' description: OK "401": content: {} @@ -70421,25 +70342,19 @@ paths: x-kubernetes-action: get x-kubernetes-group-version-kind: group: resource.k8s.io - kind: ResourceClaim + kind: DeviceClass version: v1beta1 x-accepts: application/json patch: - description: partially update status of the specified ResourceClaim - operationId: patchNamespacedResourceClaimStatus + description: partially update the specified DeviceClass + operationId: patchDeviceClass parameters: - - description: name of the ResourceClaim + - description: name of the DeviceClass in: path name: name required: true schema: type: string - - description: object name and auth scope, such as for teams and projects - in: path - name: namespace - required: true - schema: - type: string - description: If 'true', then the output is pretty printed. Defaults to 'false' unless the user-agent indicates a browser or command-line HTTP tool (curl and wget). @@ -70499,31 +70414,31 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1beta1.ResourceClaim' + $ref: '#/components/schemas/v1beta1.DeviceClass' application/yaml: schema: - $ref: '#/components/schemas/v1beta1.ResourceClaim' + $ref: '#/components/schemas/v1beta1.DeviceClass' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1beta1.ResourceClaim' + $ref: '#/components/schemas/v1beta1.DeviceClass' application/cbor: schema: - $ref: '#/components/schemas/v1beta1.ResourceClaim' + $ref: '#/components/schemas/v1beta1.DeviceClass' description: OK "201": content: application/json: schema: - $ref: '#/components/schemas/v1beta1.ResourceClaim' + $ref: '#/components/schemas/v1beta1.DeviceClass' application/yaml: schema: - $ref: '#/components/schemas/v1beta1.ResourceClaim' + $ref: '#/components/schemas/v1beta1.DeviceClass' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1beta1.ResourceClaim' + $ref: '#/components/schemas/v1beta1.DeviceClass' application/cbor: schema: - $ref: '#/components/schemas/v1beta1.ResourceClaim' + $ref: '#/components/schemas/v1beta1.DeviceClass' description: Created "401": content: {} @@ -70533,27 +70448,21 @@ paths: x-kubernetes-action: patch x-kubernetes-group-version-kind: group: resource.k8s.io - kind: ResourceClaim + kind: DeviceClass version: v1beta1 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json put: - description: replace status of the specified ResourceClaim - operationId: replaceNamespacedResourceClaimStatus + description: replace the specified DeviceClass + operationId: replaceDeviceClass parameters: - - description: name of the ResourceClaim + - description: name of the DeviceClass in: path name: name required: true schema: type: string - - description: object name and auth scope, such as for teams and projects - in: path - name: namespace - required: true - schema: - type: string - description: If 'true', then the output is pretty printed. Defaults to 'false' unless the user-agent indicates a browser or command-line HTTP tool (curl and wget). @@ -70597,38 +70506,38 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1beta1.ResourceClaim' + $ref: '#/components/schemas/v1beta1.DeviceClass' required: true responses: "200": content: application/json: schema: - $ref: '#/components/schemas/v1beta1.ResourceClaim' + $ref: '#/components/schemas/v1beta1.DeviceClass' application/yaml: schema: - $ref: '#/components/schemas/v1beta1.ResourceClaim' + $ref: '#/components/schemas/v1beta1.DeviceClass' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1beta1.ResourceClaim' + $ref: '#/components/schemas/v1beta1.DeviceClass' application/cbor: schema: - $ref: '#/components/schemas/v1beta1.ResourceClaim' + $ref: '#/components/schemas/v1beta1.DeviceClass' description: OK "201": content: application/json: schema: - $ref: '#/components/schemas/v1beta1.ResourceClaim' + $ref: '#/components/schemas/v1beta1.DeviceClass' application/yaml: schema: - $ref: '#/components/schemas/v1beta1.ResourceClaim' + $ref: '#/components/schemas/v1beta1.DeviceClass' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1beta1.ResourceClaim' + $ref: '#/components/schemas/v1beta1.DeviceClass' application/cbor: schema: - $ref: '#/components/schemas/v1beta1.ResourceClaim' + $ref: '#/components/schemas/v1beta1.DeviceClass' description: Created "401": content: {} @@ -70638,15 +70547,15 @@ paths: x-kubernetes-action: put x-kubernetes-group-version-kind: group: resource.k8s.io - kind: ResourceClaim + kind: DeviceClass version: v1beta1 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json - /apis/resource.k8s.io/v1beta1/namespaces/{namespace}/resourceclaimtemplates: + /apis/resource.k8s.io/v1beta1/namespaces/{namespace}/resourceclaims: delete: - description: delete collection of ResourceClaimTemplate - operationId: deleteCollectionNamespacedResourceClaimTemplate + description: delete collection of ResourceClaim + operationId: deleteCollectionNamespacedResourceClaim parameters: - description: object name and auth scope, such as for teams and projects in: path @@ -70809,14 +70718,14 @@ paths: x-kubernetes-action: deletecollection x-kubernetes-group-version-kind: group: resource.k8s.io - kind: ResourceClaimTemplate + kind: ResourceClaim version: v1beta1 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json get: - description: list or watch objects of kind ResourceClaimTemplate - operationId: listNamespacedResourceClaimTemplate + description: list or watch objects of kind ResourceClaim + operationId: listNamespacedResourceClaim parameters: - description: object name and auth scope, such as for teams and projects in: path @@ -70920,25 +70829,25 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1beta1.ResourceClaimTemplateList' + $ref: '#/components/schemas/v1beta1.ResourceClaimList' application/yaml: schema: - $ref: '#/components/schemas/v1beta1.ResourceClaimTemplateList' + $ref: '#/components/schemas/v1beta1.ResourceClaimList' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1beta1.ResourceClaimTemplateList' + $ref: '#/components/schemas/v1beta1.ResourceClaimList' application/cbor: schema: - $ref: '#/components/schemas/v1beta1.ResourceClaimTemplateList' + $ref: '#/components/schemas/v1beta1.ResourceClaimList' application/json;stream=watch: schema: - $ref: '#/components/schemas/v1beta1.ResourceClaimTemplateList' + $ref: '#/components/schemas/v1beta1.ResourceClaimList' application/vnd.kubernetes.protobuf;stream=watch: schema: - $ref: '#/components/schemas/v1beta1.ResourceClaimTemplateList' + $ref: '#/components/schemas/v1beta1.ResourceClaimList' application/cbor-seq: schema: - $ref: '#/components/schemas/v1beta1.ResourceClaimTemplateList' + $ref: '#/components/schemas/v1beta1.ResourceClaimList' description: OK "401": content: {} @@ -70948,12 +70857,12 @@ paths: x-kubernetes-action: list x-kubernetes-group-version-kind: group: resource.k8s.io - kind: ResourceClaimTemplate + kind: ResourceClaim version: v1beta1 x-accepts: application/json post: - description: create a ResourceClaimTemplate - operationId: createNamespacedResourceClaimTemplate + description: create a ResourceClaim + operationId: createNamespacedResourceClaim parameters: - description: object name and auth scope, such as for teams and projects in: path @@ -71004,53 +70913,53 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1beta1.ResourceClaimTemplate' + $ref: '#/components/schemas/v1beta1.ResourceClaim' required: true responses: "200": content: application/json: schema: - $ref: '#/components/schemas/v1beta1.ResourceClaimTemplate' + $ref: '#/components/schemas/v1beta1.ResourceClaim' application/yaml: schema: - $ref: '#/components/schemas/v1beta1.ResourceClaimTemplate' + $ref: '#/components/schemas/v1beta1.ResourceClaim' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1beta1.ResourceClaimTemplate' + $ref: '#/components/schemas/v1beta1.ResourceClaim' application/cbor: schema: - $ref: '#/components/schemas/v1beta1.ResourceClaimTemplate' + $ref: '#/components/schemas/v1beta1.ResourceClaim' description: OK "201": content: application/json: schema: - $ref: '#/components/schemas/v1beta1.ResourceClaimTemplate' + $ref: '#/components/schemas/v1beta1.ResourceClaim' application/yaml: schema: - $ref: '#/components/schemas/v1beta1.ResourceClaimTemplate' + $ref: '#/components/schemas/v1beta1.ResourceClaim' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1beta1.ResourceClaimTemplate' + $ref: '#/components/schemas/v1beta1.ResourceClaim' application/cbor: schema: - $ref: '#/components/schemas/v1beta1.ResourceClaimTemplate' + $ref: '#/components/schemas/v1beta1.ResourceClaim' description: Created "202": content: application/json: schema: - $ref: '#/components/schemas/v1beta1.ResourceClaimTemplate' + $ref: '#/components/schemas/v1beta1.ResourceClaim' application/yaml: schema: - $ref: '#/components/schemas/v1beta1.ResourceClaimTemplate' + $ref: '#/components/schemas/v1beta1.ResourceClaim' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1beta1.ResourceClaimTemplate' + $ref: '#/components/schemas/v1beta1.ResourceClaim' application/cbor: schema: - $ref: '#/components/schemas/v1beta1.ResourceClaimTemplate' + $ref: '#/components/schemas/v1beta1.ResourceClaim' description: Accepted "401": content: {} @@ -71060,17 +70969,17 @@ paths: x-kubernetes-action: post x-kubernetes-group-version-kind: group: resource.k8s.io - kind: ResourceClaimTemplate + kind: ResourceClaim version: v1beta1 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json - /apis/resource.k8s.io/v1beta1/namespaces/{namespace}/resourceclaimtemplates/{name}: + /apis/resource.k8s.io/v1beta1/namespaces/{namespace}/resourceclaims/{name}: delete: - description: delete a ResourceClaimTemplate - operationId: deleteNamespacedResourceClaimTemplate + description: delete a ResourceClaim + operationId: deleteNamespacedResourceClaim parameters: - - description: name of the ResourceClaimTemplate + - description: name of the ResourceClaim in: path name: name required: true @@ -71150,31 +71059,31 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1beta1.ResourceClaimTemplate' + $ref: '#/components/schemas/v1beta1.ResourceClaim' application/yaml: schema: - $ref: '#/components/schemas/v1beta1.ResourceClaimTemplate' + $ref: '#/components/schemas/v1beta1.ResourceClaim' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1beta1.ResourceClaimTemplate' + $ref: '#/components/schemas/v1beta1.ResourceClaim' application/cbor: schema: - $ref: '#/components/schemas/v1beta1.ResourceClaimTemplate' + $ref: '#/components/schemas/v1beta1.ResourceClaim' description: OK "202": content: application/json: schema: - $ref: '#/components/schemas/v1beta1.ResourceClaimTemplate' + $ref: '#/components/schemas/v1beta1.ResourceClaim' application/yaml: schema: - $ref: '#/components/schemas/v1beta1.ResourceClaimTemplate' + $ref: '#/components/schemas/v1beta1.ResourceClaim' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1beta1.ResourceClaimTemplate' + $ref: '#/components/schemas/v1beta1.ResourceClaim' application/cbor: schema: - $ref: '#/components/schemas/v1beta1.ResourceClaimTemplate' + $ref: '#/components/schemas/v1beta1.ResourceClaim' description: Accepted "401": content: {} @@ -71184,16 +71093,16 @@ paths: x-kubernetes-action: delete x-kubernetes-group-version-kind: group: resource.k8s.io - kind: ResourceClaimTemplate + kind: ResourceClaim version: v1beta1 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json get: - description: read the specified ResourceClaimTemplate - operationId: readNamespacedResourceClaimTemplate + description: read the specified ResourceClaim + operationId: readNamespacedResourceClaim parameters: - - description: name of the ResourceClaimTemplate + - description: name of the ResourceClaim in: path name: name required: true @@ -71217,16 +71126,16 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1beta1.ResourceClaimTemplate' + $ref: '#/components/schemas/v1beta1.ResourceClaim' application/yaml: schema: - $ref: '#/components/schemas/v1beta1.ResourceClaimTemplate' + $ref: '#/components/schemas/v1beta1.ResourceClaim' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1beta1.ResourceClaimTemplate' + $ref: '#/components/schemas/v1beta1.ResourceClaim' application/cbor: schema: - $ref: '#/components/schemas/v1beta1.ResourceClaimTemplate' + $ref: '#/components/schemas/v1beta1.ResourceClaim' description: OK "401": content: {} @@ -71236,14 +71145,14 @@ paths: x-kubernetes-action: get x-kubernetes-group-version-kind: group: resource.k8s.io - kind: ResourceClaimTemplate + kind: ResourceClaim version: v1beta1 x-accepts: application/json patch: - description: partially update the specified ResourceClaimTemplate - operationId: patchNamespacedResourceClaimTemplate + description: partially update the specified ResourceClaim + operationId: patchNamespacedResourceClaim parameters: - - description: name of the ResourceClaimTemplate + - description: name of the ResourceClaim in: path name: name required: true @@ -71314,31 +71223,31 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1beta1.ResourceClaimTemplate' + $ref: '#/components/schemas/v1beta1.ResourceClaim' application/yaml: schema: - $ref: '#/components/schemas/v1beta1.ResourceClaimTemplate' + $ref: '#/components/schemas/v1beta1.ResourceClaim' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1beta1.ResourceClaimTemplate' + $ref: '#/components/schemas/v1beta1.ResourceClaim' application/cbor: schema: - $ref: '#/components/schemas/v1beta1.ResourceClaimTemplate' + $ref: '#/components/schemas/v1beta1.ResourceClaim' description: OK "201": content: application/json: schema: - $ref: '#/components/schemas/v1beta1.ResourceClaimTemplate' + $ref: '#/components/schemas/v1beta1.ResourceClaim' application/yaml: schema: - $ref: '#/components/schemas/v1beta1.ResourceClaimTemplate' + $ref: '#/components/schemas/v1beta1.ResourceClaim' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1beta1.ResourceClaimTemplate' + $ref: '#/components/schemas/v1beta1.ResourceClaim' application/cbor: schema: - $ref: '#/components/schemas/v1beta1.ResourceClaimTemplate' + $ref: '#/components/schemas/v1beta1.ResourceClaim' description: Created "401": content: {} @@ -71348,16 +71257,16 @@ paths: x-kubernetes-action: patch x-kubernetes-group-version-kind: group: resource.k8s.io - kind: ResourceClaimTemplate + kind: ResourceClaim version: v1beta1 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json put: - description: replace the specified ResourceClaimTemplate - operationId: replaceNamespacedResourceClaimTemplate + description: replace the specified ResourceClaim + operationId: replaceNamespacedResourceClaim parameters: - - description: name of the ResourceClaimTemplate + - description: name of the ResourceClaim in: path name: name required: true @@ -71412,38 +71321,38 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1beta1.ResourceClaimTemplate' + $ref: '#/components/schemas/v1beta1.ResourceClaim' required: true responses: "200": content: application/json: schema: - $ref: '#/components/schemas/v1beta1.ResourceClaimTemplate' + $ref: '#/components/schemas/v1beta1.ResourceClaim' application/yaml: schema: - $ref: '#/components/schemas/v1beta1.ResourceClaimTemplate' + $ref: '#/components/schemas/v1beta1.ResourceClaim' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1beta1.ResourceClaimTemplate' + $ref: '#/components/schemas/v1beta1.ResourceClaim' application/cbor: schema: - $ref: '#/components/schemas/v1beta1.ResourceClaimTemplate' + $ref: '#/components/schemas/v1beta1.ResourceClaim' description: OK "201": content: application/json: schema: - $ref: '#/components/schemas/v1beta1.ResourceClaimTemplate' + $ref: '#/components/schemas/v1beta1.ResourceClaim' application/yaml: schema: - $ref: '#/components/schemas/v1beta1.ResourceClaimTemplate' + $ref: '#/components/schemas/v1beta1.ResourceClaim' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1beta1.ResourceClaimTemplate' + $ref: '#/components/schemas/v1beta1.ResourceClaim' application/cbor: schema: - $ref: '#/components/schemas/v1beta1.ResourceClaimTemplate' + $ref: '#/components/schemas/v1beta1.ResourceClaim' description: Created "401": content: {} @@ -71453,54 +71362,78 @@ paths: x-kubernetes-action: put x-kubernetes-group-version-kind: group: resource.k8s.io - kind: ResourceClaimTemplate + kind: ResourceClaim version: v1beta1 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json - /apis/resource.k8s.io/v1beta1/resourceclaims: + /apis/resource.k8s.io/v1beta1/namespaces/{namespace}/resourceclaims/{name}/status: get: - description: list or watch objects of kind ResourceClaim - operationId: listResourceClaimForAllNamespaces + description: read status of the specified ResourceClaim + operationId: readNamespacedResourceClaimStatus parameters: - - description: allowWatchBookmarks requests watch events with type "BOOKMARK". - Servers that do not implement bookmarks may ignore this flag and bookmarks - are sent at the server's discretion. Clients should not assume bookmarks - are returned at any specific interval, nor may they assume the server will - send any BOOKMARK event during a session. If this is not a watch, this field - is ignored. - in: query - name: allowWatchBookmarks + - description: name of the ResourceClaim + in: path + name: name + required: true schema: - type: boolean - - description: |- - The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". - - This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications. - in: query - name: continue + type: string + - description: object name and auth scope, such as for teams and projects + in: path + name: namespace + required: true schema: type: string - - description: A selector to restrict the list of returned objects by their - fields. Defaults to everything. + - description: If 'true', then the output is pretty printed. Defaults to 'false' + unless the user-agent indicates a browser or command-line HTTP tool (curl + and wget). in: query - name: fieldSelector + name: pretty schema: type: string - - description: A selector to restrict the list of returned objects by their - labels. Defaults to everything. - in: query - name: labelSelector + responses: + "200": + content: + application/json: + schema: + $ref: '#/components/schemas/v1beta1.ResourceClaim' + application/yaml: + schema: + $ref: '#/components/schemas/v1beta1.ResourceClaim' + application/vnd.kubernetes.protobuf: + schema: + $ref: '#/components/schemas/v1beta1.ResourceClaim' + application/cbor: + schema: + $ref: '#/components/schemas/v1beta1.ResourceClaim' + description: OK + "401": + content: {} + description: Unauthorized + tags: + - resource_v1beta1 + x-kubernetes-action: get + x-kubernetes-group-version-kind: + group: resource.k8s.io + kind: ResourceClaim + version: v1beta1 + x-accepts: application/json + patch: + description: partially update status of the specified ResourceClaim + operationId: patchNamespacedResourceClaimStatus + parameters: + - description: name of the ResourceClaim + in: path + name: name + required: true schema: type: string - - description: |- - limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. - - The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned. - in: query - name: limit + - description: object name and auth scope, such as for teams and projects + in: path + name: namespace + required: true schema: - type: integer + type: string - description: If 'true', then the output is pretty printed. Defaults to 'false' unless the user-agent indicates a browser or command-line HTTP tool (curl and wget). @@ -71508,131 +71441,113 @@ paths: name: pretty schema: type: string - - description: |- - resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. - - Defaults to unset + - description: 'When present, indicates that modifications should not be persisted. + An invalid or unrecognized dryRun directive will result in an error response + and no further processing of the request. Valid values are: - All: all dry + run stages will be processed' in: query - name: resourceVersion + name: dryRun schema: type: string - - description: |- - resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. - - Defaults to unset + - description: fieldManager is a name associated with the actor or entity that + is making these changes. The value must be less than or 128 characters long, + and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. + This field is required for apply requests (application/apply-patch) but + optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch). in: query - name: resourceVersionMatch + name: fieldManager schema: type: string - - description: |- - `sendInitialEvents=true` may be set together with `watch=true`. In that case, the watch stream will begin with synthetic events to produce the current state of objects in the collection. Once all such events have been sent, a synthetic "Bookmark" event will be sent. The bookmark will report the ResourceVersion (RV) corresponding to the set of objects, and be marked with `"k8s.io/initial-events-end": "true"` annotation. Afterwards, the watch stream will proceed as usual, sending watch events corresponding to changes (subsequent to the RV) to objects watched. - - When `sendInitialEvents` option is set, we require `resourceVersionMatch` option to also be set. The semantic of the watch request is as following: - `resourceVersionMatch` = NotOlderThan - is interpreted as "data at least as new as the provided `resourceVersion`" - and the bookmark event is send when the state is synced - to a `resourceVersion` at least as fresh as the one provided by the ListOptions. - If `resourceVersion` is unset, this is interpreted as "consistent read" and the - bookmark event is send when the state is synced at least to the moment - when request started being processed. - - `resourceVersionMatch` set to any other value or unset - Invalid error is returned. - - Defaults to true if `resourceVersion=""` or `resourceVersion="0"` (for backward compatibility reasons) and to false otherwise. - in: query - name: sendInitialEvents - schema: - type: boolean - - description: Timeout for the list/watch call. This limits the duration of - the call, regardless of any activity or inactivity. + - description: 'fieldValidation instructs the server on how to handle objects + in the request (POST/PUT/PATCH) containing unknown or duplicate fields. + Valid values are: - Ignore: This will ignore any unknown fields that are + silently dropped from the object, and will ignore all but the last duplicate + field that the decoder encounters. This is the default behavior prior to + v1.23. - Warn: This will send a warning via the standard warning response + header for each unknown field that is dropped from the object, and for each + duplicate field that is encountered. The request will still succeed if there + are no other errors, and will only persist the last of any duplicate fields. + This is the default in v1.23+ - Strict: This will fail the request with + a BadRequest error if any unknown fields would be dropped from the object, + or if any duplicate fields are present. The error returned from the server + will contain all unknown and duplicate fields encountered.' in: query - name: timeoutSeconds + name: fieldValidation schema: - type: integer - - description: Watch for changes to the described resources and return them - as a stream of add, update, and remove notifications. Specify resourceVersion. + type: string + - description: Force is going to "force" Apply requests. It means user will + re-acquire conflicting fields owned by other people. Force flag must be + unset for non-apply patch requests. in: query - name: watch + name: force schema: type: boolean + requestBody: + content: + application/json: + schema: + $ref: '#/components/schemas/v1.Patch' + required: true responses: "200": content: application/json: schema: - $ref: '#/components/schemas/v1beta1.ResourceClaimList' + $ref: '#/components/schemas/v1beta1.ResourceClaim' application/yaml: schema: - $ref: '#/components/schemas/v1beta1.ResourceClaimList' + $ref: '#/components/schemas/v1beta1.ResourceClaim' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1beta1.ResourceClaimList' + $ref: '#/components/schemas/v1beta1.ResourceClaim' application/cbor: schema: - $ref: '#/components/schemas/v1beta1.ResourceClaimList' - application/json;stream=watch: + $ref: '#/components/schemas/v1beta1.ResourceClaim' + description: OK + "201": + content: + application/json: schema: - $ref: '#/components/schemas/v1beta1.ResourceClaimList' - application/vnd.kubernetes.protobuf;stream=watch: + $ref: '#/components/schemas/v1beta1.ResourceClaim' + application/yaml: schema: - $ref: '#/components/schemas/v1beta1.ResourceClaimList' - application/cbor-seq: + $ref: '#/components/schemas/v1beta1.ResourceClaim' + application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1beta1.ResourceClaimList' - description: OK + $ref: '#/components/schemas/v1beta1.ResourceClaim' + application/cbor: + schema: + $ref: '#/components/schemas/v1beta1.ResourceClaim' + description: Created "401": content: {} description: Unauthorized tags: - resource_v1beta1 - x-kubernetes-action: list + x-kubernetes-action: patch x-kubernetes-group-version-kind: group: resource.k8s.io kind: ResourceClaim version: v1beta1 + x-codegen-request-body-name: body + x-contentType: application/json x-accepts: application/json - /apis/resource.k8s.io/v1beta1/resourceclaimtemplates: - get: - description: list or watch objects of kind ResourceClaimTemplate - operationId: listResourceClaimTemplateForAllNamespaces + put: + description: replace status of the specified ResourceClaim + operationId: replaceNamespacedResourceClaimStatus parameters: - - description: allowWatchBookmarks requests watch events with type "BOOKMARK". - Servers that do not implement bookmarks may ignore this flag and bookmarks - are sent at the server's discretion. Clients should not assume bookmarks - are returned at any specific interval, nor may they assume the server will - send any BOOKMARK event during a session. If this is not a watch, this field - is ignored. - in: query - name: allowWatchBookmarks - schema: - type: boolean - - description: |- - The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". - - This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications. - in: query - name: continue - schema: - type: string - - description: A selector to restrict the list of returned objects by their - fields. Defaults to everything. - in: query - name: fieldSelector + - description: name of the ResourceClaim + in: path + name: name + required: true schema: type: string - - description: A selector to restrict the list of returned objects by their - labels. Defaults to everything. - in: query - name: labelSelector + - description: object name and auth scope, such as for teams and projects + in: path + name: namespace + required: true schema: type: string - - description: |- - limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. - - The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned. - in: query - name: limit - schema: - type: integer - description: If 'true', then the output is pretty printed. Defaults to 'false' unless the user-agent indicates a browser or command-line HTTP tool (curl and wget). @@ -71640,93 +71555,99 @@ paths: name: pretty schema: type: string - - description: |- - resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. - - Defaults to unset + - description: 'When present, indicates that modifications should not be persisted. + An invalid or unrecognized dryRun directive will result in an error response + and no further processing of the request. Valid values are: - All: all dry + run stages will be processed' in: query - name: resourceVersion + name: dryRun schema: type: string - - description: |- - resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. - - Defaults to unset + - description: fieldManager is a name associated with the actor or entity that + is making these changes. The value must be less than or 128 characters long, + and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. in: query - name: resourceVersionMatch + name: fieldManager schema: type: string - - description: |- - `sendInitialEvents=true` may be set together with `watch=true`. In that case, the watch stream will begin with synthetic events to produce the current state of objects in the collection. Once all such events have been sent, a synthetic "Bookmark" event will be sent. The bookmark will report the ResourceVersion (RV) corresponding to the set of objects, and be marked with `"k8s.io/initial-events-end": "true"` annotation. Afterwards, the watch stream will proceed as usual, sending watch events corresponding to changes (subsequent to the RV) to objects watched. - - When `sendInitialEvents` option is set, we require `resourceVersionMatch` option to also be set. The semantic of the watch request is as following: - `resourceVersionMatch` = NotOlderThan - is interpreted as "data at least as new as the provided `resourceVersion`" - and the bookmark event is send when the state is synced - to a `resourceVersion` at least as fresh as the one provided by the ListOptions. - If `resourceVersion` is unset, this is interpreted as "consistent read" and the - bookmark event is send when the state is synced at least to the moment - when request started being processed. - - `resourceVersionMatch` set to any other value or unset - Invalid error is returned. - - Defaults to true if `resourceVersion=""` or `resourceVersion="0"` (for backward compatibility reasons) and to false otherwise. - in: query - name: sendInitialEvents - schema: - type: boolean - - description: Timeout for the list/watch call. This limits the duration of - the call, regardless of any activity or inactivity. - in: query - name: timeoutSeconds - schema: - type: integer - - description: Watch for changes to the described resources and return them - as a stream of add, update, and remove notifications. Specify resourceVersion. + - description: 'fieldValidation instructs the server on how to handle objects + in the request (POST/PUT/PATCH) containing unknown or duplicate fields. + Valid values are: - Ignore: This will ignore any unknown fields that are + silently dropped from the object, and will ignore all but the last duplicate + field that the decoder encounters. This is the default behavior prior to + v1.23. - Warn: This will send a warning via the standard warning response + header for each unknown field that is dropped from the object, and for each + duplicate field that is encountered. The request will still succeed if there + are no other errors, and will only persist the last of any duplicate fields. + This is the default in v1.23+ - Strict: This will fail the request with + a BadRequest error if any unknown fields would be dropped from the object, + or if any duplicate fields are present. The error returned from the server + will contain all unknown and duplicate fields encountered.' in: query - name: watch + name: fieldValidation schema: - type: boolean + type: string + requestBody: + content: + application/json: + schema: + $ref: '#/components/schemas/v1beta1.ResourceClaim' + required: true responses: "200": content: application/json: schema: - $ref: '#/components/schemas/v1beta1.ResourceClaimTemplateList' + $ref: '#/components/schemas/v1beta1.ResourceClaim' application/yaml: schema: - $ref: '#/components/schemas/v1beta1.ResourceClaimTemplateList' + $ref: '#/components/schemas/v1beta1.ResourceClaim' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1beta1.ResourceClaimTemplateList' + $ref: '#/components/schemas/v1beta1.ResourceClaim' application/cbor: schema: - $ref: '#/components/schemas/v1beta1.ResourceClaimTemplateList' - application/json;stream=watch: + $ref: '#/components/schemas/v1beta1.ResourceClaim' + description: OK + "201": + content: + application/json: schema: - $ref: '#/components/schemas/v1beta1.ResourceClaimTemplateList' - application/vnd.kubernetes.protobuf;stream=watch: + $ref: '#/components/schemas/v1beta1.ResourceClaim' + application/yaml: schema: - $ref: '#/components/schemas/v1beta1.ResourceClaimTemplateList' - application/cbor-seq: + $ref: '#/components/schemas/v1beta1.ResourceClaim' + application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1beta1.ResourceClaimTemplateList' - description: OK + $ref: '#/components/schemas/v1beta1.ResourceClaim' + application/cbor: + schema: + $ref: '#/components/schemas/v1beta1.ResourceClaim' + description: Created "401": content: {} description: Unauthorized tags: - resource_v1beta1 - x-kubernetes-action: list + x-kubernetes-action: put x-kubernetes-group-version-kind: group: resource.k8s.io - kind: ResourceClaimTemplate + kind: ResourceClaim version: v1beta1 + x-codegen-request-body-name: body + x-contentType: application/json x-accepts: application/json - /apis/resource.k8s.io/v1beta1/resourceslices: + /apis/resource.k8s.io/v1beta1/namespaces/{namespace}/resourceclaimtemplates: delete: - description: delete collection of ResourceSlice - operationId: deleteCollectionResourceSlice + description: delete collection of ResourceClaimTemplate + operationId: deleteCollectionNamespacedResourceClaimTemplate parameters: + - description: object name and auth scope, such as for teams and projects + in: path + name: namespace + required: true + schema: + type: string - description: If 'true', then the output is pretty printed. Defaults to 'false' unless the user-agent indicates a browser or command-line HTTP tool (curl and wget). @@ -71882,15 +71803,21 @@ paths: x-kubernetes-action: deletecollection x-kubernetes-group-version-kind: group: resource.k8s.io - kind: ResourceSlice + kind: ResourceClaimTemplate version: v1beta1 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json get: - description: list or watch objects of kind ResourceSlice - operationId: listResourceSlice + description: list or watch objects of kind ResourceClaimTemplate + operationId: listNamespacedResourceClaimTemplate parameters: + - description: object name and auth scope, such as for teams and projects + in: path + name: namespace + required: true + schema: + type: string - description: If 'true', then the output is pretty printed. Defaults to 'false' unless the user-agent indicates a browser or command-line HTTP tool (curl and wget). @@ -71987,25 +71914,25 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1beta1.ResourceSliceList' + $ref: '#/components/schemas/v1beta1.ResourceClaimTemplateList' application/yaml: schema: - $ref: '#/components/schemas/v1beta1.ResourceSliceList' + $ref: '#/components/schemas/v1beta1.ResourceClaimTemplateList' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1beta1.ResourceSliceList' + $ref: '#/components/schemas/v1beta1.ResourceClaimTemplateList' application/cbor: schema: - $ref: '#/components/schemas/v1beta1.ResourceSliceList' + $ref: '#/components/schemas/v1beta1.ResourceClaimTemplateList' application/json;stream=watch: schema: - $ref: '#/components/schemas/v1beta1.ResourceSliceList' + $ref: '#/components/schemas/v1beta1.ResourceClaimTemplateList' application/vnd.kubernetes.protobuf;stream=watch: schema: - $ref: '#/components/schemas/v1beta1.ResourceSliceList' + $ref: '#/components/schemas/v1beta1.ResourceClaimTemplateList' application/cbor-seq: schema: - $ref: '#/components/schemas/v1beta1.ResourceSliceList' + $ref: '#/components/schemas/v1beta1.ResourceClaimTemplateList' description: OK "401": content: {} @@ -72015,13 +71942,19 @@ paths: x-kubernetes-action: list x-kubernetes-group-version-kind: group: resource.k8s.io - kind: ResourceSlice + kind: ResourceClaimTemplate version: v1beta1 x-accepts: application/json post: - description: create a ResourceSlice - operationId: createResourceSlice + description: create a ResourceClaimTemplate + operationId: createNamespacedResourceClaimTemplate parameters: + - description: object name and auth scope, such as for teams and projects + in: path + name: namespace + required: true + schema: + type: string - description: If 'true', then the output is pretty printed. Defaults to 'false' unless the user-agent indicates a browser or command-line HTTP tool (curl and wget). @@ -72065,53 +71998,53 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1beta1.ResourceSlice' + $ref: '#/components/schemas/v1beta1.ResourceClaimTemplate' required: true responses: "200": content: application/json: schema: - $ref: '#/components/schemas/v1beta1.ResourceSlice' + $ref: '#/components/schemas/v1beta1.ResourceClaimTemplate' application/yaml: schema: - $ref: '#/components/schemas/v1beta1.ResourceSlice' + $ref: '#/components/schemas/v1beta1.ResourceClaimTemplate' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1beta1.ResourceSlice' + $ref: '#/components/schemas/v1beta1.ResourceClaimTemplate' application/cbor: schema: - $ref: '#/components/schemas/v1beta1.ResourceSlice' + $ref: '#/components/schemas/v1beta1.ResourceClaimTemplate' description: OK "201": content: application/json: schema: - $ref: '#/components/schemas/v1beta1.ResourceSlice' + $ref: '#/components/schemas/v1beta1.ResourceClaimTemplate' application/yaml: schema: - $ref: '#/components/schemas/v1beta1.ResourceSlice' + $ref: '#/components/schemas/v1beta1.ResourceClaimTemplate' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1beta1.ResourceSlice' + $ref: '#/components/schemas/v1beta1.ResourceClaimTemplate' application/cbor: schema: - $ref: '#/components/schemas/v1beta1.ResourceSlice' + $ref: '#/components/schemas/v1beta1.ResourceClaimTemplate' description: Created "202": content: application/json: schema: - $ref: '#/components/schemas/v1beta1.ResourceSlice' + $ref: '#/components/schemas/v1beta1.ResourceClaimTemplate' application/yaml: schema: - $ref: '#/components/schemas/v1beta1.ResourceSlice' + $ref: '#/components/schemas/v1beta1.ResourceClaimTemplate' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1beta1.ResourceSlice' + $ref: '#/components/schemas/v1beta1.ResourceClaimTemplate' application/cbor: schema: - $ref: '#/components/schemas/v1beta1.ResourceSlice' + $ref: '#/components/schemas/v1beta1.ResourceClaimTemplate' description: Accepted "401": content: {} @@ -72121,22 +72054,28 @@ paths: x-kubernetes-action: post x-kubernetes-group-version-kind: group: resource.k8s.io - kind: ResourceSlice + kind: ResourceClaimTemplate version: v1beta1 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json - /apis/resource.k8s.io/v1beta1/resourceslices/{name}: + /apis/resource.k8s.io/v1beta1/namespaces/{namespace}/resourceclaimtemplates/{name}: delete: - description: delete a ResourceSlice - operationId: deleteResourceSlice + description: delete a ResourceClaimTemplate + operationId: deleteNamespacedResourceClaimTemplate parameters: - - description: name of the ResourceSlice + - description: name of the ResourceClaimTemplate in: path name: name required: true schema: type: string + - description: object name and auth scope, such as for teams and projects + in: path + name: namespace + required: true + schema: + type: string - description: If 'true', then the output is pretty printed. Defaults to 'false' unless the user-agent indicates a browser or command-line HTTP tool (curl and wget). @@ -72205,31 +72144,31 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1beta1.ResourceSlice' + $ref: '#/components/schemas/v1beta1.ResourceClaimTemplate' application/yaml: schema: - $ref: '#/components/schemas/v1beta1.ResourceSlice' + $ref: '#/components/schemas/v1beta1.ResourceClaimTemplate' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1beta1.ResourceSlice' + $ref: '#/components/schemas/v1beta1.ResourceClaimTemplate' application/cbor: schema: - $ref: '#/components/schemas/v1beta1.ResourceSlice' + $ref: '#/components/schemas/v1beta1.ResourceClaimTemplate' description: OK "202": content: application/json: schema: - $ref: '#/components/schemas/v1beta1.ResourceSlice' + $ref: '#/components/schemas/v1beta1.ResourceClaimTemplate' application/yaml: schema: - $ref: '#/components/schemas/v1beta1.ResourceSlice' + $ref: '#/components/schemas/v1beta1.ResourceClaimTemplate' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1beta1.ResourceSlice' + $ref: '#/components/schemas/v1beta1.ResourceClaimTemplate' application/cbor: schema: - $ref: '#/components/schemas/v1beta1.ResourceSlice' + $ref: '#/components/schemas/v1beta1.ResourceClaimTemplate' description: Accepted "401": content: {} @@ -72239,21 +72178,27 @@ paths: x-kubernetes-action: delete x-kubernetes-group-version-kind: group: resource.k8s.io - kind: ResourceSlice + kind: ResourceClaimTemplate version: v1beta1 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json get: - description: read the specified ResourceSlice - operationId: readResourceSlice + description: read the specified ResourceClaimTemplate + operationId: readNamespacedResourceClaimTemplate parameters: - - description: name of the ResourceSlice + - description: name of the ResourceClaimTemplate in: path name: name required: true schema: type: string + - description: object name and auth scope, such as for teams and projects + in: path + name: namespace + required: true + schema: + type: string - description: If 'true', then the output is pretty printed. Defaults to 'false' unless the user-agent indicates a browser or command-line HTTP tool (curl and wget). @@ -72266,16 +72211,16 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1beta1.ResourceSlice' + $ref: '#/components/schemas/v1beta1.ResourceClaimTemplate' application/yaml: schema: - $ref: '#/components/schemas/v1beta1.ResourceSlice' + $ref: '#/components/schemas/v1beta1.ResourceClaimTemplate' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1beta1.ResourceSlice' + $ref: '#/components/schemas/v1beta1.ResourceClaimTemplate' application/cbor: schema: - $ref: '#/components/schemas/v1beta1.ResourceSlice' + $ref: '#/components/schemas/v1beta1.ResourceClaimTemplate' description: OK "401": content: {} @@ -72285,19 +72230,25 @@ paths: x-kubernetes-action: get x-kubernetes-group-version-kind: group: resource.k8s.io - kind: ResourceSlice + kind: ResourceClaimTemplate version: v1beta1 x-accepts: application/json patch: - description: partially update the specified ResourceSlice - operationId: patchResourceSlice + description: partially update the specified ResourceClaimTemplate + operationId: patchNamespacedResourceClaimTemplate parameters: - - description: name of the ResourceSlice + - description: name of the ResourceClaimTemplate in: path name: name required: true schema: type: string + - description: object name and auth scope, such as for teams and projects + in: path + name: namespace + required: true + schema: + type: string - description: If 'true', then the output is pretty printed. Defaults to 'false' unless the user-agent indicates a browser or command-line HTTP tool (curl and wget). @@ -72357,31 +72308,31 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1beta1.ResourceSlice' + $ref: '#/components/schemas/v1beta1.ResourceClaimTemplate' application/yaml: schema: - $ref: '#/components/schemas/v1beta1.ResourceSlice' + $ref: '#/components/schemas/v1beta1.ResourceClaimTemplate' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1beta1.ResourceSlice' + $ref: '#/components/schemas/v1beta1.ResourceClaimTemplate' application/cbor: schema: - $ref: '#/components/schemas/v1beta1.ResourceSlice' + $ref: '#/components/schemas/v1beta1.ResourceClaimTemplate' description: OK "201": content: application/json: schema: - $ref: '#/components/schemas/v1beta1.ResourceSlice' + $ref: '#/components/schemas/v1beta1.ResourceClaimTemplate' application/yaml: schema: - $ref: '#/components/schemas/v1beta1.ResourceSlice' + $ref: '#/components/schemas/v1beta1.ResourceClaimTemplate' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1beta1.ResourceSlice' + $ref: '#/components/schemas/v1beta1.ResourceClaimTemplate' application/cbor: schema: - $ref: '#/components/schemas/v1beta1.ResourceSlice' + $ref: '#/components/schemas/v1beta1.ResourceClaimTemplate' description: Created "401": content: {} @@ -72391,21 +72342,27 @@ paths: x-kubernetes-action: patch x-kubernetes-group-version-kind: group: resource.k8s.io - kind: ResourceSlice + kind: ResourceClaimTemplate version: v1beta1 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json put: - description: replace the specified ResourceSlice - operationId: replaceResourceSlice + description: replace the specified ResourceClaimTemplate + operationId: replaceNamespacedResourceClaimTemplate parameters: - - description: name of the ResourceSlice + - description: name of the ResourceClaimTemplate in: path name: name required: true schema: type: string + - description: object name and auth scope, such as for teams and projects + in: path + name: namespace + required: true + schema: + type: string - description: If 'true', then the output is pretty printed. Defaults to 'false' unless the user-agent indicates a browser or command-line HTTP tool (curl and wget). @@ -72449,38 +72406,38 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1beta1.ResourceSlice' + $ref: '#/components/schemas/v1beta1.ResourceClaimTemplate' required: true responses: "200": content: application/json: schema: - $ref: '#/components/schemas/v1beta1.ResourceSlice' + $ref: '#/components/schemas/v1beta1.ResourceClaimTemplate' application/yaml: schema: - $ref: '#/components/schemas/v1beta1.ResourceSlice' + $ref: '#/components/schemas/v1beta1.ResourceClaimTemplate' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1beta1.ResourceSlice' + $ref: '#/components/schemas/v1beta1.ResourceClaimTemplate' application/cbor: schema: - $ref: '#/components/schemas/v1beta1.ResourceSlice' + $ref: '#/components/schemas/v1beta1.ResourceClaimTemplate' description: OK "201": content: application/json: schema: - $ref: '#/components/schemas/v1beta1.ResourceSlice' + $ref: '#/components/schemas/v1beta1.ResourceClaimTemplate' application/yaml: schema: - $ref: '#/components/schemas/v1beta1.ResourceSlice' + $ref: '#/components/schemas/v1beta1.ResourceClaimTemplate' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1beta1.ResourceSlice' + $ref: '#/components/schemas/v1beta1.ResourceClaimTemplate' application/cbor: schema: - $ref: '#/components/schemas/v1beta1.ResourceSlice' + $ref: '#/components/schemas/v1beta1.ResourceClaimTemplate' description: Created "401": content: {} @@ -72490,59 +72447,26 @@ paths: x-kubernetes-action: put x-kubernetes-group-version-kind: group: resource.k8s.io - kind: ResourceSlice + kind: ResourceClaimTemplate version: v1beta1 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json - /apis/resource.k8s.io/v1beta1/watch/deviceclasses: {} - /apis/resource.k8s.io/v1beta1/watch/deviceclasses/{name}: {} - /apis/resource.k8s.io/v1beta1/watch/namespaces/{namespace}/resourceclaims: {} - /apis/resource.k8s.io/v1beta1/watch/namespaces/{namespace}/resourceclaims/{name}: {} - /apis/resource.k8s.io/v1beta1/watch/namespaces/{namespace}/resourceclaimtemplates: {} - /apis/resource.k8s.io/v1beta1/watch/namespaces/{namespace}/resourceclaimtemplates/{name}: {} - /apis/resource.k8s.io/v1beta1/watch/resourceclaims: {} - /apis/resource.k8s.io/v1beta1/watch/resourceclaimtemplates: {} - /apis/resource.k8s.io/v1beta1/watch/resourceslices: {} - /apis/resource.k8s.io/v1beta1/watch/resourceslices/{name}: {} - /apis/resource.k8s.io/v1beta2/: + /apis/resource.k8s.io/v1beta1/resourceclaims: get: - description: get available resources - operationId: getAPIResources - responses: - "200": - content: - application/json: - schema: - $ref: '#/components/schemas/v1.APIResourceList' - application/yaml: - schema: - $ref: '#/components/schemas/v1.APIResourceList' - application/vnd.kubernetes.protobuf: - schema: - $ref: '#/components/schemas/v1.APIResourceList' - application/cbor: - schema: - $ref: '#/components/schemas/v1.APIResourceList' - description: OK - "401": - content: {} - description: Unauthorized - tags: - - resource_v1beta2 - x-accepts: application/json - /apis/resource.k8s.io/v1beta2/deviceclasses: - delete: - description: delete collection of DeviceClass - operationId: deleteCollectionDeviceClass + description: list or watch objects of kind ResourceClaim + operationId: listResourceClaimForAllNamespaces parameters: - - description: If 'true', then the output is pretty printed. Defaults to 'false' - unless the user-agent indicates a browser or command-line HTTP tool (curl - and wget). + - description: allowWatchBookmarks requests watch events with type "BOOKMARK". + Servers that do not implement bookmarks may ignore this flag and bookmarks + are sent at the server's discretion. Clients should not assume bookmarks + are returned at any specific interval, nor may they assume the server will + send any BOOKMARK event during a session. If this is not a watch, this field + is ignored. in: query - name: pretty + name: allowWatchBookmarks schema: - type: string + type: boolean - description: |- The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". @@ -72551,43 +72475,12 @@ paths: name: continue schema: type: string - - description: 'When present, indicates that modifications should not be persisted. - An invalid or unrecognized dryRun directive will result in an error response - and no further processing of the request. Valid values are: - All: all dry - run stages will be processed' - in: query - name: dryRun - schema: - type: string - description: A selector to restrict the list of returned objects by their fields. Defaults to everything. in: query name: fieldSelector schema: type: string - - description: The duration in seconds before the object should be deleted. - Value must be non-negative integer. The value zero indicates delete immediately. - If this value is nil, the default grace period for the specified type will - be used. Defaults to a per object value if not specified. zero means delete - immediately. - in: query - name: gracePeriodSeconds - schema: - type: integer - - description: 'if set to true, it will trigger an unsafe deletion of the resource - in case the normal deletion flow fails with a corrupt object error. A resource - is considered corrupt if it can not be retrieved from the underlying storage - successfully because of a) its data can not be transformed e.g. decryption - failure, or b) it fails to decode into an object. NOTE: unsafe deletion - ignores finalizer constraints, skips precondition checks, and removes the - object from the storage. WARNING: This may potentially break the cluster - if the workload associated with the resource being unsafe-deleted relies - on normal deletion flow. Use only if you REALLY know what you are doing. - The default value is false, and the user must opt in to enable it' - in: query - name: ignoreStoreReadErrorWithClusterBreakingPotential - schema: - type: boolean - description: A selector to restrict the list of returned objects by their labels. Defaults to everything. in: query @@ -72602,23 +72495,315 @@ paths: name: limit schema: type: integer - - description: 'Deprecated: please use the PropagationPolicy, this field will - be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, - the "orphan" finalizer will be added to/removed from the object''s finalizers - list. Either this field or PropagationPolicy may be set, but not both.' - in: query - name: orphanDependents - schema: - type: boolean - - description: 'Whether and how garbage collection will be performed. Either - this field or OrphanDependents may be set, but not both. The default policy - is decided by the existing finalizer set in the metadata.finalizers and - the resource-specific default policy. Acceptable values are: ''Orphan'' - - orphan the dependents; ''Background'' - allow the garbage collector to - delete the dependents in the background; ''Foreground'' - a cascading policy - that deletes all dependents in the foreground.' + - description: If 'true', then the output is pretty printed. Defaults to 'false' + unless the user-agent indicates a browser or command-line HTTP tool (curl + and wget). in: query - name: propagationPolicy + name: pretty + schema: + type: string + - description: |- + resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + + Defaults to unset + in: query + name: resourceVersion + schema: + type: string + - description: |- + resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + + Defaults to unset + in: query + name: resourceVersionMatch + schema: + type: string + - description: |- + `sendInitialEvents=true` may be set together with `watch=true`. In that case, the watch stream will begin with synthetic events to produce the current state of objects in the collection. Once all such events have been sent, a synthetic "Bookmark" event will be sent. The bookmark will report the ResourceVersion (RV) corresponding to the set of objects, and be marked with `"k8s.io/initial-events-end": "true"` annotation. Afterwards, the watch stream will proceed as usual, sending watch events corresponding to changes (subsequent to the RV) to objects watched. + + When `sendInitialEvents` option is set, we require `resourceVersionMatch` option to also be set. The semantic of the watch request is as following: - `resourceVersionMatch` = NotOlderThan + is interpreted as "data at least as new as the provided `resourceVersion`" + and the bookmark event is send when the state is synced + to a `resourceVersion` at least as fresh as the one provided by the ListOptions. + If `resourceVersion` is unset, this is interpreted as "consistent read" and the + bookmark event is send when the state is synced at least to the moment + when request started being processed. + - `resourceVersionMatch` set to any other value or unset + Invalid error is returned. + + Defaults to true if `resourceVersion=""` or `resourceVersion="0"` (for backward compatibility reasons) and to false otherwise. + in: query + name: sendInitialEvents + schema: + type: boolean + - description: Timeout for the list/watch call. This limits the duration of + the call, regardless of any activity or inactivity. + in: query + name: timeoutSeconds + schema: + type: integer + - description: Watch for changes to the described resources and return them + as a stream of add, update, and remove notifications. Specify resourceVersion. + in: query + name: watch + schema: + type: boolean + responses: + "200": + content: + application/json: + schema: + $ref: '#/components/schemas/v1beta1.ResourceClaimList' + application/yaml: + schema: + $ref: '#/components/schemas/v1beta1.ResourceClaimList' + application/vnd.kubernetes.protobuf: + schema: + $ref: '#/components/schemas/v1beta1.ResourceClaimList' + application/cbor: + schema: + $ref: '#/components/schemas/v1beta1.ResourceClaimList' + application/json;stream=watch: + schema: + $ref: '#/components/schemas/v1beta1.ResourceClaimList' + application/vnd.kubernetes.protobuf;stream=watch: + schema: + $ref: '#/components/schemas/v1beta1.ResourceClaimList' + application/cbor-seq: + schema: + $ref: '#/components/schemas/v1beta1.ResourceClaimList' + description: OK + "401": + content: {} + description: Unauthorized + tags: + - resource_v1beta1 + x-kubernetes-action: list + x-kubernetes-group-version-kind: + group: resource.k8s.io + kind: ResourceClaim + version: v1beta1 + x-accepts: application/json + /apis/resource.k8s.io/v1beta1/resourceclaimtemplates: + get: + description: list or watch objects of kind ResourceClaimTemplate + operationId: listResourceClaimTemplateForAllNamespaces + parameters: + - description: allowWatchBookmarks requests watch events with type "BOOKMARK". + Servers that do not implement bookmarks may ignore this flag and bookmarks + are sent at the server's discretion. Clients should not assume bookmarks + are returned at any specific interval, nor may they assume the server will + send any BOOKMARK event during a session. If this is not a watch, this field + is ignored. + in: query + name: allowWatchBookmarks + schema: + type: boolean + - description: |- + The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + + This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications. + in: query + name: continue + schema: + type: string + - description: A selector to restrict the list of returned objects by their + fields. Defaults to everything. + in: query + name: fieldSelector + schema: + type: string + - description: A selector to restrict the list of returned objects by their + labels. Defaults to everything. + in: query + name: labelSelector + schema: + type: string + - description: |- + limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + + The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned. + in: query + name: limit + schema: + type: integer + - description: If 'true', then the output is pretty printed. Defaults to 'false' + unless the user-agent indicates a browser or command-line HTTP tool (curl + and wget). + in: query + name: pretty + schema: + type: string + - description: |- + resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + + Defaults to unset + in: query + name: resourceVersion + schema: + type: string + - description: |- + resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + + Defaults to unset + in: query + name: resourceVersionMatch + schema: + type: string + - description: |- + `sendInitialEvents=true` may be set together with `watch=true`. In that case, the watch stream will begin with synthetic events to produce the current state of objects in the collection. Once all such events have been sent, a synthetic "Bookmark" event will be sent. The bookmark will report the ResourceVersion (RV) corresponding to the set of objects, and be marked with `"k8s.io/initial-events-end": "true"` annotation. Afterwards, the watch stream will proceed as usual, sending watch events corresponding to changes (subsequent to the RV) to objects watched. + + When `sendInitialEvents` option is set, we require `resourceVersionMatch` option to also be set. The semantic of the watch request is as following: - `resourceVersionMatch` = NotOlderThan + is interpreted as "data at least as new as the provided `resourceVersion`" + and the bookmark event is send when the state is synced + to a `resourceVersion` at least as fresh as the one provided by the ListOptions. + If `resourceVersion` is unset, this is interpreted as "consistent read" and the + bookmark event is send when the state is synced at least to the moment + when request started being processed. + - `resourceVersionMatch` set to any other value or unset + Invalid error is returned. + + Defaults to true if `resourceVersion=""` or `resourceVersion="0"` (for backward compatibility reasons) and to false otherwise. + in: query + name: sendInitialEvents + schema: + type: boolean + - description: Timeout for the list/watch call. This limits the duration of + the call, regardless of any activity or inactivity. + in: query + name: timeoutSeconds + schema: + type: integer + - description: Watch for changes to the described resources and return them + as a stream of add, update, and remove notifications. Specify resourceVersion. + in: query + name: watch + schema: + type: boolean + responses: + "200": + content: + application/json: + schema: + $ref: '#/components/schemas/v1beta1.ResourceClaimTemplateList' + application/yaml: + schema: + $ref: '#/components/schemas/v1beta1.ResourceClaimTemplateList' + application/vnd.kubernetes.protobuf: + schema: + $ref: '#/components/schemas/v1beta1.ResourceClaimTemplateList' + application/cbor: + schema: + $ref: '#/components/schemas/v1beta1.ResourceClaimTemplateList' + application/json;stream=watch: + schema: + $ref: '#/components/schemas/v1beta1.ResourceClaimTemplateList' + application/vnd.kubernetes.protobuf;stream=watch: + schema: + $ref: '#/components/schemas/v1beta1.ResourceClaimTemplateList' + application/cbor-seq: + schema: + $ref: '#/components/schemas/v1beta1.ResourceClaimTemplateList' + description: OK + "401": + content: {} + description: Unauthorized + tags: + - resource_v1beta1 + x-kubernetes-action: list + x-kubernetes-group-version-kind: + group: resource.k8s.io + kind: ResourceClaimTemplate + version: v1beta1 + x-accepts: application/json + /apis/resource.k8s.io/v1beta1/resourceslices: + delete: + description: delete collection of ResourceSlice + operationId: deleteCollectionResourceSlice + parameters: + - description: If 'true', then the output is pretty printed. Defaults to 'false' + unless the user-agent indicates a browser or command-line HTTP tool (curl + and wget). + in: query + name: pretty + schema: + type: string + - description: |- + The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + + This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications. + in: query + name: continue + schema: + type: string + - description: 'When present, indicates that modifications should not be persisted. + An invalid or unrecognized dryRun directive will result in an error response + and no further processing of the request. Valid values are: - All: all dry + run stages will be processed' + in: query + name: dryRun + schema: + type: string + - description: A selector to restrict the list of returned objects by their + fields. Defaults to everything. + in: query + name: fieldSelector + schema: + type: string + - description: The duration in seconds before the object should be deleted. + Value must be non-negative integer. The value zero indicates delete immediately. + If this value is nil, the default grace period for the specified type will + be used. Defaults to a per object value if not specified. zero means delete + immediately. + in: query + name: gracePeriodSeconds + schema: + type: integer + - description: 'if set to true, it will trigger an unsafe deletion of the resource + in case the normal deletion flow fails with a corrupt object error. A resource + is considered corrupt if it can not be retrieved from the underlying storage + successfully because of a) its data can not be transformed e.g. decryption + failure, or b) it fails to decode into an object. NOTE: unsafe deletion + ignores finalizer constraints, skips precondition checks, and removes the + object from the storage. WARNING: This may potentially break the cluster + if the workload associated with the resource being unsafe-deleted relies + on normal deletion flow. Use only if you REALLY know what you are doing. + The default value is false, and the user must opt in to enable it' + in: query + name: ignoreStoreReadErrorWithClusterBreakingPotential + schema: + type: boolean + - description: A selector to restrict the list of returned objects by their + labels. Defaults to everything. + in: query + name: labelSelector + schema: + type: string + - description: |- + limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + + The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned. + in: query + name: limit + schema: + type: integer + - description: 'Deprecated: please use the PropagationPolicy, this field will + be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, + the "orphan" finalizer will be added to/removed from the object''s finalizers + list. Either this field or PropagationPolicy may be set, but not both.' + in: query + name: orphanDependents + schema: + type: boolean + - description: 'Whether and how garbage collection will be performed. Either + this field or OrphanDependents may be set, but not both. The default policy + is decided by the existing finalizer set in the metadata.finalizers and + the resource-specific default policy. Acceptable values are: ''Orphan'' + - orphan the dependents; ''Background'' - allow the garbage collector to + delete the dependents in the background; ''Foreground'' - a cascading policy + that deletes all dependents in the foreground.' + in: query + name: propagationPolicy schema: type: string - description: |- @@ -72687,18 +72872,18 @@ paths: content: {} description: Unauthorized tags: - - resource_v1beta2 + - resource_v1beta1 x-kubernetes-action: deletecollection x-kubernetes-group-version-kind: group: resource.k8s.io - kind: DeviceClass - version: v1beta2 + kind: ResourceSlice + version: v1beta1 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json get: - description: list or watch objects of kind DeviceClass - operationId: listDeviceClass + description: list or watch objects of kind ResourceSlice + operationId: listResourceSlice parameters: - description: If 'true', then the output is pretty printed. Defaults to 'false' unless the user-agent indicates a browser or command-line HTTP tool (curl @@ -72796,40 +72981,40 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1beta2.DeviceClassList' + $ref: '#/components/schemas/v1beta1.ResourceSliceList' application/yaml: schema: - $ref: '#/components/schemas/v1beta2.DeviceClassList' + $ref: '#/components/schemas/v1beta1.ResourceSliceList' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1beta2.DeviceClassList' + $ref: '#/components/schemas/v1beta1.ResourceSliceList' application/cbor: schema: - $ref: '#/components/schemas/v1beta2.DeviceClassList' + $ref: '#/components/schemas/v1beta1.ResourceSliceList' application/json;stream=watch: schema: - $ref: '#/components/schemas/v1beta2.DeviceClassList' + $ref: '#/components/schemas/v1beta1.ResourceSliceList' application/vnd.kubernetes.protobuf;stream=watch: schema: - $ref: '#/components/schemas/v1beta2.DeviceClassList' + $ref: '#/components/schemas/v1beta1.ResourceSliceList' application/cbor-seq: schema: - $ref: '#/components/schemas/v1beta2.DeviceClassList' + $ref: '#/components/schemas/v1beta1.ResourceSliceList' description: OK "401": content: {} description: Unauthorized tags: - - resource_v1beta2 + - resource_v1beta1 x-kubernetes-action: list x-kubernetes-group-version-kind: group: resource.k8s.io - kind: DeviceClass - version: v1beta2 + kind: ResourceSlice + version: v1beta1 x-accepts: application/json post: - description: create a DeviceClass - operationId: createDeviceClass + description: create a ResourceSlice + operationId: createResourceSlice parameters: - description: If 'true', then the output is pretty printed. Defaults to 'false' unless the user-agent indicates a browser or command-line HTTP tool (curl @@ -72874,73 +73059,73 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1beta2.DeviceClass' + $ref: '#/components/schemas/v1beta1.ResourceSlice' required: true responses: "200": content: application/json: schema: - $ref: '#/components/schemas/v1beta2.DeviceClass' + $ref: '#/components/schemas/v1beta1.ResourceSlice' application/yaml: schema: - $ref: '#/components/schemas/v1beta2.DeviceClass' + $ref: '#/components/schemas/v1beta1.ResourceSlice' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1beta2.DeviceClass' + $ref: '#/components/schemas/v1beta1.ResourceSlice' application/cbor: schema: - $ref: '#/components/schemas/v1beta2.DeviceClass' + $ref: '#/components/schemas/v1beta1.ResourceSlice' description: OK "201": content: application/json: schema: - $ref: '#/components/schemas/v1beta2.DeviceClass' + $ref: '#/components/schemas/v1beta1.ResourceSlice' application/yaml: schema: - $ref: '#/components/schemas/v1beta2.DeviceClass' + $ref: '#/components/schemas/v1beta1.ResourceSlice' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1beta2.DeviceClass' + $ref: '#/components/schemas/v1beta1.ResourceSlice' application/cbor: schema: - $ref: '#/components/schemas/v1beta2.DeviceClass' + $ref: '#/components/schemas/v1beta1.ResourceSlice' description: Created "202": content: application/json: schema: - $ref: '#/components/schemas/v1beta2.DeviceClass' + $ref: '#/components/schemas/v1beta1.ResourceSlice' application/yaml: schema: - $ref: '#/components/schemas/v1beta2.DeviceClass' + $ref: '#/components/schemas/v1beta1.ResourceSlice' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1beta2.DeviceClass' + $ref: '#/components/schemas/v1beta1.ResourceSlice' application/cbor: schema: - $ref: '#/components/schemas/v1beta2.DeviceClass' + $ref: '#/components/schemas/v1beta1.ResourceSlice' description: Accepted "401": content: {} description: Unauthorized tags: - - resource_v1beta2 + - resource_v1beta1 x-kubernetes-action: post x-kubernetes-group-version-kind: group: resource.k8s.io - kind: DeviceClass - version: v1beta2 + kind: ResourceSlice + version: v1beta1 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json - /apis/resource.k8s.io/v1beta2/deviceclasses/{name}: + /apis/resource.k8s.io/v1beta1/resourceslices/{name}: delete: - description: delete a DeviceClass - operationId: deleteDeviceClass + description: delete a ResourceSlice + operationId: deleteResourceSlice parameters: - - description: name of the DeviceClass + - description: name of the ResourceSlice in: path name: name required: true @@ -73014,50 +73199,50 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1beta2.DeviceClass' + $ref: '#/components/schemas/v1beta1.ResourceSlice' application/yaml: schema: - $ref: '#/components/schemas/v1beta2.DeviceClass' + $ref: '#/components/schemas/v1beta1.ResourceSlice' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1beta2.DeviceClass' + $ref: '#/components/schemas/v1beta1.ResourceSlice' application/cbor: schema: - $ref: '#/components/schemas/v1beta2.DeviceClass' + $ref: '#/components/schemas/v1beta1.ResourceSlice' description: OK "202": content: application/json: schema: - $ref: '#/components/schemas/v1beta2.DeviceClass' + $ref: '#/components/schemas/v1beta1.ResourceSlice' application/yaml: schema: - $ref: '#/components/schemas/v1beta2.DeviceClass' + $ref: '#/components/schemas/v1beta1.ResourceSlice' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1beta2.DeviceClass' + $ref: '#/components/schemas/v1beta1.ResourceSlice' application/cbor: schema: - $ref: '#/components/schemas/v1beta2.DeviceClass' + $ref: '#/components/schemas/v1beta1.ResourceSlice' description: Accepted "401": content: {} description: Unauthorized tags: - - resource_v1beta2 + - resource_v1beta1 x-kubernetes-action: delete x-kubernetes-group-version-kind: group: resource.k8s.io - kind: DeviceClass - version: v1beta2 + kind: ResourceSlice + version: v1beta1 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json get: - description: read the specified DeviceClass - operationId: readDeviceClass + description: read the specified ResourceSlice + operationId: readResourceSlice parameters: - - description: name of the DeviceClass + - description: name of the ResourceSlice in: path name: name required: true @@ -73075,33 +73260,33 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1beta2.DeviceClass' + $ref: '#/components/schemas/v1beta1.ResourceSlice' application/yaml: schema: - $ref: '#/components/schemas/v1beta2.DeviceClass' + $ref: '#/components/schemas/v1beta1.ResourceSlice' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1beta2.DeviceClass' + $ref: '#/components/schemas/v1beta1.ResourceSlice' application/cbor: schema: - $ref: '#/components/schemas/v1beta2.DeviceClass' + $ref: '#/components/schemas/v1beta1.ResourceSlice' description: OK "401": content: {} description: Unauthorized tags: - - resource_v1beta2 + - resource_v1beta1 x-kubernetes-action: get x-kubernetes-group-version-kind: group: resource.k8s.io - kind: DeviceClass - version: v1beta2 + kind: ResourceSlice + version: v1beta1 x-accepts: application/json patch: - description: partially update the specified DeviceClass - operationId: patchDeviceClass + description: partially update the specified ResourceSlice + operationId: patchResourceSlice parameters: - - description: name of the DeviceClass + - description: name of the ResourceSlice in: path name: name required: true @@ -73166,50 +73351,50 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1beta2.DeviceClass' + $ref: '#/components/schemas/v1beta1.ResourceSlice' application/yaml: schema: - $ref: '#/components/schemas/v1beta2.DeviceClass' + $ref: '#/components/schemas/v1beta1.ResourceSlice' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1beta2.DeviceClass' + $ref: '#/components/schemas/v1beta1.ResourceSlice' application/cbor: schema: - $ref: '#/components/schemas/v1beta2.DeviceClass' + $ref: '#/components/schemas/v1beta1.ResourceSlice' description: OK "201": content: application/json: schema: - $ref: '#/components/schemas/v1beta2.DeviceClass' + $ref: '#/components/schemas/v1beta1.ResourceSlice' application/yaml: schema: - $ref: '#/components/schemas/v1beta2.DeviceClass' + $ref: '#/components/schemas/v1beta1.ResourceSlice' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1beta2.DeviceClass' + $ref: '#/components/schemas/v1beta1.ResourceSlice' application/cbor: schema: - $ref: '#/components/schemas/v1beta2.DeviceClass' + $ref: '#/components/schemas/v1beta1.ResourceSlice' description: Created "401": content: {} description: Unauthorized tags: - - resource_v1beta2 + - resource_v1beta1 x-kubernetes-action: patch x-kubernetes-group-version-kind: group: resource.k8s.io - kind: DeviceClass - version: v1beta2 + kind: ResourceSlice + version: v1beta1 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json put: - description: replace the specified DeviceClass - operationId: replaceDeviceClass + description: replace the specified ResourceSlice + operationId: replaceResourceSlice parameters: - - description: name of the DeviceClass + - description: name of the ResourceSlice in: path name: name required: true @@ -73258,63 +73443,93 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1beta2.DeviceClass' + $ref: '#/components/schemas/v1beta1.ResourceSlice' required: true responses: "200": content: application/json: schema: - $ref: '#/components/schemas/v1beta2.DeviceClass' + $ref: '#/components/schemas/v1beta1.ResourceSlice' application/yaml: schema: - $ref: '#/components/schemas/v1beta2.DeviceClass' + $ref: '#/components/schemas/v1beta1.ResourceSlice' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1beta2.DeviceClass' + $ref: '#/components/schemas/v1beta1.ResourceSlice' application/cbor: schema: - $ref: '#/components/schemas/v1beta2.DeviceClass' + $ref: '#/components/schemas/v1beta1.ResourceSlice' description: OK "201": content: application/json: schema: - $ref: '#/components/schemas/v1beta2.DeviceClass' + $ref: '#/components/schemas/v1beta1.ResourceSlice' application/yaml: schema: - $ref: '#/components/schemas/v1beta2.DeviceClass' + $ref: '#/components/schemas/v1beta1.ResourceSlice' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1beta2.DeviceClass' + $ref: '#/components/schemas/v1beta1.ResourceSlice' application/cbor: schema: - $ref: '#/components/schemas/v1beta2.DeviceClass' + $ref: '#/components/schemas/v1beta1.ResourceSlice' description: Created "401": content: {} description: Unauthorized tags: - - resource_v1beta2 + - resource_v1beta1 x-kubernetes-action: put x-kubernetes-group-version-kind: group: resource.k8s.io - kind: DeviceClass - version: v1beta2 + kind: ResourceSlice + version: v1beta1 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json - /apis/resource.k8s.io/v1beta2/namespaces/{namespace}/resourceclaims: + /apis/resource.k8s.io/v1beta1/watch/deviceclasses: {} + /apis/resource.k8s.io/v1beta1/watch/deviceclasses/{name}: {} + /apis/resource.k8s.io/v1beta1/watch/namespaces/{namespace}/resourceclaims: {} + /apis/resource.k8s.io/v1beta1/watch/namespaces/{namespace}/resourceclaims/{name}: {} + /apis/resource.k8s.io/v1beta1/watch/namespaces/{namespace}/resourceclaimtemplates: {} + /apis/resource.k8s.io/v1beta1/watch/namespaces/{namespace}/resourceclaimtemplates/{name}: {} + /apis/resource.k8s.io/v1beta1/watch/resourceclaims: {} + /apis/resource.k8s.io/v1beta1/watch/resourceclaimtemplates: {} + /apis/resource.k8s.io/v1beta1/watch/resourceslices: {} + /apis/resource.k8s.io/v1beta1/watch/resourceslices/{name}: {} + /apis/resource.k8s.io/v1beta2/: + get: + description: get available resources + operationId: getAPIResources + responses: + "200": + content: + application/json: + schema: + $ref: '#/components/schemas/v1.APIResourceList' + application/yaml: + schema: + $ref: '#/components/schemas/v1.APIResourceList' + application/vnd.kubernetes.protobuf: + schema: + $ref: '#/components/schemas/v1.APIResourceList' + application/cbor: + schema: + $ref: '#/components/schemas/v1.APIResourceList' + description: OK + "401": + content: {} + description: Unauthorized + tags: + - resource_v1beta2 + x-accepts: application/json + /apis/resource.k8s.io/v1beta2/deviceclasses: delete: - description: delete collection of ResourceClaim - operationId: deleteCollectionNamespacedResourceClaim + description: delete collection of DeviceClass + operationId: deleteCollectionDeviceClass parameters: - - description: object name and auth scope, such as for teams and projects - in: path - name: namespace - required: true - schema: - type: string - description: If 'true', then the output is pretty printed. Defaults to 'false' unless the user-agent indicates a browser or command-line HTTP tool (curl and wget). @@ -73470,21 +73685,15 @@ paths: x-kubernetes-action: deletecollection x-kubernetes-group-version-kind: group: resource.k8s.io - kind: ResourceClaim + kind: DeviceClass version: v1beta2 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json get: - description: list or watch objects of kind ResourceClaim - operationId: listNamespacedResourceClaim + description: list or watch objects of kind DeviceClass + operationId: listDeviceClass parameters: - - description: object name and auth scope, such as for teams and projects - in: path - name: namespace - required: true - schema: - type: string - description: If 'true', then the output is pretty printed. Defaults to 'false' unless the user-agent indicates a browser or command-line HTTP tool (curl and wget). @@ -73581,25 +73790,25 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1beta2.ResourceClaimList' + $ref: '#/components/schemas/v1beta2.DeviceClassList' application/yaml: schema: - $ref: '#/components/schemas/v1beta2.ResourceClaimList' + $ref: '#/components/schemas/v1beta2.DeviceClassList' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1beta2.ResourceClaimList' + $ref: '#/components/schemas/v1beta2.DeviceClassList' application/cbor: schema: - $ref: '#/components/schemas/v1beta2.ResourceClaimList' + $ref: '#/components/schemas/v1beta2.DeviceClassList' application/json;stream=watch: schema: - $ref: '#/components/schemas/v1beta2.ResourceClaimList' + $ref: '#/components/schemas/v1beta2.DeviceClassList' application/vnd.kubernetes.protobuf;stream=watch: schema: - $ref: '#/components/schemas/v1beta2.ResourceClaimList' + $ref: '#/components/schemas/v1beta2.DeviceClassList' application/cbor-seq: schema: - $ref: '#/components/schemas/v1beta2.ResourceClaimList' + $ref: '#/components/schemas/v1beta2.DeviceClassList' description: OK "401": content: {} @@ -73609,19 +73818,13 @@ paths: x-kubernetes-action: list x-kubernetes-group-version-kind: group: resource.k8s.io - kind: ResourceClaim + kind: DeviceClass version: v1beta2 x-accepts: application/json post: - description: create a ResourceClaim - operationId: createNamespacedResourceClaim + description: create a DeviceClass + operationId: createDeviceClass parameters: - - description: object name and auth scope, such as for teams and projects - in: path - name: namespace - required: true - schema: - type: string - description: If 'true', then the output is pretty printed. Defaults to 'false' unless the user-agent indicates a browser or command-line HTTP tool (curl and wget). @@ -73665,53 +73868,53 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1beta2.ResourceClaim' + $ref: '#/components/schemas/v1beta2.DeviceClass' required: true responses: "200": content: application/json: schema: - $ref: '#/components/schemas/v1beta2.ResourceClaim' + $ref: '#/components/schemas/v1beta2.DeviceClass' application/yaml: schema: - $ref: '#/components/schemas/v1beta2.ResourceClaim' + $ref: '#/components/schemas/v1beta2.DeviceClass' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1beta2.ResourceClaim' + $ref: '#/components/schemas/v1beta2.DeviceClass' application/cbor: schema: - $ref: '#/components/schemas/v1beta2.ResourceClaim' + $ref: '#/components/schemas/v1beta2.DeviceClass' description: OK "201": content: application/json: schema: - $ref: '#/components/schemas/v1beta2.ResourceClaim' + $ref: '#/components/schemas/v1beta2.DeviceClass' application/yaml: schema: - $ref: '#/components/schemas/v1beta2.ResourceClaim' + $ref: '#/components/schemas/v1beta2.DeviceClass' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1beta2.ResourceClaim' + $ref: '#/components/schemas/v1beta2.DeviceClass' application/cbor: schema: - $ref: '#/components/schemas/v1beta2.ResourceClaim' + $ref: '#/components/schemas/v1beta2.DeviceClass' description: Created "202": content: application/json: schema: - $ref: '#/components/schemas/v1beta2.ResourceClaim' + $ref: '#/components/schemas/v1beta2.DeviceClass' application/yaml: schema: - $ref: '#/components/schemas/v1beta2.ResourceClaim' + $ref: '#/components/schemas/v1beta2.DeviceClass' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1beta2.ResourceClaim' + $ref: '#/components/schemas/v1beta2.DeviceClass' application/cbor: schema: - $ref: '#/components/schemas/v1beta2.ResourceClaim' + $ref: '#/components/schemas/v1beta2.DeviceClass' description: Accepted "401": content: {} @@ -73721,28 +73924,22 @@ paths: x-kubernetes-action: post x-kubernetes-group-version-kind: group: resource.k8s.io - kind: ResourceClaim + kind: DeviceClass version: v1beta2 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json - /apis/resource.k8s.io/v1beta2/namespaces/{namespace}/resourceclaims/{name}: + /apis/resource.k8s.io/v1beta2/deviceclasses/{name}: delete: - description: delete a ResourceClaim - operationId: deleteNamespacedResourceClaim + description: delete a DeviceClass + operationId: deleteDeviceClass parameters: - - description: name of the ResourceClaim + - description: name of the DeviceClass in: path name: name required: true schema: type: string - - description: object name and auth scope, such as for teams and projects - in: path - name: namespace - required: true - schema: - type: string - description: If 'true', then the output is pretty printed. Defaults to 'false' unless the user-agent indicates a browser or command-line HTTP tool (curl and wget). @@ -73811,31 +74008,31 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1beta2.ResourceClaim' + $ref: '#/components/schemas/v1beta2.DeviceClass' application/yaml: schema: - $ref: '#/components/schemas/v1beta2.ResourceClaim' + $ref: '#/components/schemas/v1beta2.DeviceClass' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1beta2.ResourceClaim' + $ref: '#/components/schemas/v1beta2.DeviceClass' application/cbor: schema: - $ref: '#/components/schemas/v1beta2.ResourceClaim' + $ref: '#/components/schemas/v1beta2.DeviceClass' description: OK "202": content: application/json: schema: - $ref: '#/components/schemas/v1beta2.ResourceClaim' + $ref: '#/components/schemas/v1beta2.DeviceClass' application/yaml: schema: - $ref: '#/components/schemas/v1beta2.ResourceClaim' + $ref: '#/components/schemas/v1beta2.DeviceClass' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1beta2.ResourceClaim' + $ref: '#/components/schemas/v1beta2.DeviceClass' application/cbor: schema: - $ref: '#/components/schemas/v1beta2.ResourceClaim' + $ref: '#/components/schemas/v1beta2.DeviceClass' description: Accepted "401": content: {} @@ -73845,27 +74042,21 @@ paths: x-kubernetes-action: delete x-kubernetes-group-version-kind: group: resource.k8s.io - kind: ResourceClaim + kind: DeviceClass version: v1beta2 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json get: - description: read the specified ResourceClaim - operationId: readNamespacedResourceClaim + description: read the specified DeviceClass + operationId: readDeviceClass parameters: - - description: name of the ResourceClaim + - description: name of the DeviceClass in: path name: name required: true schema: type: string - - description: object name and auth scope, such as for teams and projects - in: path - name: namespace - required: true - schema: - type: string - description: If 'true', then the output is pretty printed. Defaults to 'false' unless the user-agent indicates a browser or command-line HTTP tool (curl and wget). @@ -73878,16 +74069,16 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1beta2.ResourceClaim' + $ref: '#/components/schemas/v1beta2.DeviceClass' application/yaml: schema: - $ref: '#/components/schemas/v1beta2.ResourceClaim' + $ref: '#/components/schemas/v1beta2.DeviceClass' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1beta2.ResourceClaim' + $ref: '#/components/schemas/v1beta2.DeviceClass' application/cbor: schema: - $ref: '#/components/schemas/v1beta2.ResourceClaim' + $ref: '#/components/schemas/v1beta2.DeviceClass' description: OK "401": content: {} @@ -73897,25 +74088,19 @@ paths: x-kubernetes-action: get x-kubernetes-group-version-kind: group: resource.k8s.io - kind: ResourceClaim + kind: DeviceClass version: v1beta2 x-accepts: application/json patch: - description: partially update the specified ResourceClaim - operationId: patchNamespacedResourceClaim + description: partially update the specified DeviceClass + operationId: patchDeviceClass parameters: - - description: name of the ResourceClaim + - description: name of the DeviceClass in: path name: name required: true schema: type: string - - description: object name and auth scope, such as for teams and projects - in: path - name: namespace - required: true - schema: - type: string - description: If 'true', then the output is pretty printed. Defaults to 'false' unless the user-agent indicates a browser or command-line HTTP tool (curl and wget). @@ -73975,31 +74160,31 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1beta2.ResourceClaim' + $ref: '#/components/schemas/v1beta2.DeviceClass' application/yaml: schema: - $ref: '#/components/schemas/v1beta2.ResourceClaim' + $ref: '#/components/schemas/v1beta2.DeviceClass' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1beta2.ResourceClaim' + $ref: '#/components/schemas/v1beta2.DeviceClass' application/cbor: schema: - $ref: '#/components/schemas/v1beta2.ResourceClaim' + $ref: '#/components/schemas/v1beta2.DeviceClass' description: OK "201": content: application/json: schema: - $ref: '#/components/schemas/v1beta2.ResourceClaim' + $ref: '#/components/schemas/v1beta2.DeviceClass' application/yaml: schema: - $ref: '#/components/schemas/v1beta2.ResourceClaim' + $ref: '#/components/schemas/v1beta2.DeviceClass' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1beta2.ResourceClaim' + $ref: '#/components/schemas/v1beta2.DeviceClass' application/cbor: schema: - $ref: '#/components/schemas/v1beta2.ResourceClaim' + $ref: '#/components/schemas/v1beta2.DeviceClass' description: Created "401": content: {} @@ -74009,27 +74194,836 @@ paths: x-kubernetes-action: patch x-kubernetes-group-version-kind: group: resource.k8s.io - kind: ResourceClaim + kind: DeviceClass version: v1beta2 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json put: - description: replace the specified ResourceClaim - operationId: replaceNamespacedResourceClaim + description: replace the specified DeviceClass + operationId: replaceDeviceClass parameters: - - description: name of the ResourceClaim + - description: name of the DeviceClass in: path name: name required: true schema: type: string - - description: object name and auth scope, such as for teams and projects - in: path - name: namespace - required: true - schema: - type: string + - description: If 'true', then the output is pretty printed. Defaults to 'false' + unless the user-agent indicates a browser or command-line HTTP tool (curl + and wget). + in: query + name: pretty + schema: + type: string + - description: 'When present, indicates that modifications should not be persisted. + An invalid or unrecognized dryRun directive will result in an error response + and no further processing of the request. Valid values are: - All: all dry + run stages will be processed' + in: query + name: dryRun + schema: + type: string + - description: fieldManager is a name associated with the actor or entity that + is making these changes. The value must be less than or 128 characters long, + and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. + in: query + name: fieldManager + schema: + type: string + - description: 'fieldValidation instructs the server on how to handle objects + in the request (POST/PUT/PATCH) containing unknown or duplicate fields. + Valid values are: - Ignore: This will ignore any unknown fields that are + silently dropped from the object, and will ignore all but the last duplicate + field that the decoder encounters. This is the default behavior prior to + v1.23. - Warn: This will send a warning via the standard warning response + header for each unknown field that is dropped from the object, and for each + duplicate field that is encountered. The request will still succeed if there + are no other errors, and will only persist the last of any duplicate fields. + This is the default in v1.23+ - Strict: This will fail the request with + a BadRequest error if any unknown fields would be dropped from the object, + or if any duplicate fields are present. The error returned from the server + will contain all unknown and duplicate fields encountered.' + in: query + name: fieldValidation + schema: + type: string + requestBody: + content: + application/json: + schema: + $ref: '#/components/schemas/v1beta2.DeviceClass' + required: true + responses: + "200": + content: + application/json: + schema: + $ref: '#/components/schemas/v1beta2.DeviceClass' + application/yaml: + schema: + $ref: '#/components/schemas/v1beta2.DeviceClass' + application/vnd.kubernetes.protobuf: + schema: + $ref: '#/components/schemas/v1beta2.DeviceClass' + application/cbor: + schema: + $ref: '#/components/schemas/v1beta2.DeviceClass' + description: OK + "201": + content: + application/json: + schema: + $ref: '#/components/schemas/v1beta2.DeviceClass' + application/yaml: + schema: + $ref: '#/components/schemas/v1beta2.DeviceClass' + application/vnd.kubernetes.protobuf: + schema: + $ref: '#/components/schemas/v1beta2.DeviceClass' + application/cbor: + schema: + $ref: '#/components/schemas/v1beta2.DeviceClass' + description: Created + "401": + content: {} + description: Unauthorized + tags: + - resource_v1beta2 + x-kubernetes-action: put + x-kubernetes-group-version-kind: + group: resource.k8s.io + kind: DeviceClass + version: v1beta2 + x-codegen-request-body-name: body + x-contentType: application/json + x-accepts: application/json + /apis/resource.k8s.io/v1beta2/namespaces/{namespace}/resourceclaims: + delete: + description: delete collection of ResourceClaim + operationId: deleteCollectionNamespacedResourceClaim + parameters: + - description: object name and auth scope, such as for teams and projects + in: path + name: namespace + required: true + schema: + type: string + - description: If 'true', then the output is pretty printed. Defaults to 'false' + unless the user-agent indicates a browser or command-line HTTP tool (curl + and wget). + in: query + name: pretty + schema: + type: string + - description: |- + The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + + This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications. + in: query + name: continue + schema: + type: string + - description: 'When present, indicates that modifications should not be persisted. + An invalid or unrecognized dryRun directive will result in an error response + and no further processing of the request. Valid values are: - All: all dry + run stages will be processed' + in: query + name: dryRun + schema: + type: string + - description: A selector to restrict the list of returned objects by their + fields. Defaults to everything. + in: query + name: fieldSelector + schema: + type: string + - description: The duration in seconds before the object should be deleted. + Value must be non-negative integer. The value zero indicates delete immediately. + If this value is nil, the default grace period for the specified type will + be used. Defaults to a per object value if not specified. zero means delete + immediately. + in: query + name: gracePeriodSeconds + schema: + type: integer + - description: 'if set to true, it will trigger an unsafe deletion of the resource + in case the normal deletion flow fails with a corrupt object error. A resource + is considered corrupt if it can not be retrieved from the underlying storage + successfully because of a) its data can not be transformed e.g. decryption + failure, or b) it fails to decode into an object. NOTE: unsafe deletion + ignores finalizer constraints, skips precondition checks, and removes the + object from the storage. WARNING: This may potentially break the cluster + if the workload associated with the resource being unsafe-deleted relies + on normal deletion flow. Use only if you REALLY know what you are doing. + The default value is false, and the user must opt in to enable it' + in: query + name: ignoreStoreReadErrorWithClusterBreakingPotential + schema: + type: boolean + - description: A selector to restrict the list of returned objects by their + labels. Defaults to everything. + in: query + name: labelSelector + schema: + type: string + - description: |- + limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + + The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned. + in: query + name: limit + schema: + type: integer + - description: 'Deprecated: please use the PropagationPolicy, this field will + be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, + the "orphan" finalizer will be added to/removed from the object''s finalizers + list. Either this field or PropagationPolicy may be set, but not both.' + in: query + name: orphanDependents + schema: + type: boolean + - description: 'Whether and how garbage collection will be performed. Either + this field or OrphanDependents may be set, but not both. The default policy + is decided by the existing finalizer set in the metadata.finalizers and + the resource-specific default policy. Acceptable values are: ''Orphan'' + - orphan the dependents; ''Background'' - allow the garbage collector to + delete the dependents in the background; ''Foreground'' - a cascading policy + that deletes all dependents in the foreground.' + in: query + name: propagationPolicy + schema: + type: string + - description: |- + resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + + Defaults to unset + in: query + name: resourceVersion + schema: + type: string + - description: |- + resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + + Defaults to unset + in: query + name: resourceVersionMatch + schema: + type: string + - description: |- + `sendInitialEvents=true` may be set together with `watch=true`. In that case, the watch stream will begin with synthetic events to produce the current state of objects in the collection. Once all such events have been sent, a synthetic "Bookmark" event will be sent. The bookmark will report the ResourceVersion (RV) corresponding to the set of objects, and be marked with `"k8s.io/initial-events-end": "true"` annotation. Afterwards, the watch stream will proceed as usual, sending watch events corresponding to changes (subsequent to the RV) to objects watched. + + When `sendInitialEvents` option is set, we require `resourceVersionMatch` option to also be set. The semantic of the watch request is as following: - `resourceVersionMatch` = NotOlderThan + is interpreted as "data at least as new as the provided `resourceVersion`" + and the bookmark event is send when the state is synced + to a `resourceVersion` at least as fresh as the one provided by the ListOptions. + If `resourceVersion` is unset, this is interpreted as "consistent read" and the + bookmark event is send when the state is synced at least to the moment + when request started being processed. + - `resourceVersionMatch` set to any other value or unset + Invalid error is returned. + + Defaults to true if `resourceVersion=""` or `resourceVersion="0"` (for backward compatibility reasons) and to false otherwise. + in: query + name: sendInitialEvents + schema: + type: boolean + - description: Timeout for the list/watch call. This limits the duration of + the call, regardless of any activity or inactivity. + in: query + name: timeoutSeconds + schema: + type: integer + requestBody: + content: + application/json: + schema: + $ref: '#/components/schemas/v1.DeleteOptions' + required: false + responses: + "200": + content: + application/json: + schema: + $ref: '#/components/schemas/v1.Status' + application/yaml: + schema: + $ref: '#/components/schemas/v1.Status' + application/vnd.kubernetes.protobuf: + schema: + $ref: '#/components/schemas/v1.Status' + application/cbor: + schema: + $ref: '#/components/schemas/v1.Status' + description: OK + "401": + content: {} + description: Unauthorized + tags: + - resource_v1beta2 + x-kubernetes-action: deletecollection + x-kubernetes-group-version-kind: + group: resource.k8s.io + kind: ResourceClaim + version: v1beta2 + x-codegen-request-body-name: body + x-contentType: application/json + x-accepts: application/json + get: + description: list or watch objects of kind ResourceClaim + operationId: listNamespacedResourceClaim + parameters: + - description: object name and auth scope, such as for teams and projects + in: path + name: namespace + required: true + schema: + type: string + - description: If 'true', then the output is pretty printed. Defaults to 'false' + unless the user-agent indicates a browser or command-line HTTP tool (curl + and wget). + in: query + name: pretty + schema: + type: string + - description: allowWatchBookmarks requests watch events with type "BOOKMARK". + Servers that do not implement bookmarks may ignore this flag and bookmarks + are sent at the server's discretion. Clients should not assume bookmarks + are returned at any specific interval, nor may they assume the server will + send any BOOKMARK event during a session. If this is not a watch, this field + is ignored. + in: query + name: allowWatchBookmarks + schema: + type: boolean + - description: |- + The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + + This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications. + in: query + name: continue + schema: + type: string + - description: A selector to restrict the list of returned objects by their + fields. Defaults to everything. + in: query + name: fieldSelector + schema: + type: string + - description: A selector to restrict the list of returned objects by their + labels. Defaults to everything. + in: query + name: labelSelector + schema: + type: string + - description: |- + limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + + The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned. + in: query + name: limit + schema: + type: integer + - description: |- + resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + + Defaults to unset + in: query + name: resourceVersion + schema: + type: string + - description: |- + resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + + Defaults to unset + in: query + name: resourceVersionMatch + schema: + type: string + - description: |- + `sendInitialEvents=true` may be set together with `watch=true`. In that case, the watch stream will begin with synthetic events to produce the current state of objects in the collection. Once all such events have been sent, a synthetic "Bookmark" event will be sent. The bookmark will report the ResourceVersion (RV) corresponding to the set of objects, and be marked with `"k8s.io/initial-events-end": "true"` annotation. Afterwards, the watch stream will proceed as usual, sending watch events corresponding to changes (subsequent to the RV) to objects watched. + + When `sendInitialEvents` option is set, we require `resourceVersionMatch` option to also be set. The semantic of the watch request is as following: - `resourceVersionMatch` = NotOlderThan + is interpreted as "data at least as new as the provided `resourceVersion`" + and the bookmark event is send when the state is synced + to a `resourceVersion` at least as fresh as the one provided by the ListOptions. + If `resourceVersion` is unset, this is interpreted as "consistent read" and the + bookmark event is send when the state is synced at least to the moment + when request started being processed. + - `resourceVersionMatch` set to any other value or unset + Invalid error is returned. + + Defaults to true if `resourceVersion=""` or `resourceVersion="0"` (for backward compatibility reasons) and to false otherwise. + in: query + name: sendInitialEvents + schema: + type: boolean + - description: Timeout for the list/watch call. This limits the duration of + the call, regardless of any activity or inactivity. + in: query + name: timeoutSeconds + schema: + type: integer + - description: Watch for changes to the described resources and return them + as a stream of add, update, and remove notifications. Specify resourceVersion. + in: query + name: watch + schema: + type: boolean + responses: + "200": + content: + application/json: + schema: + $ref: '#/components/schemas/v1beta2.ResourceClaimList' + application/yaml: + schema: + $ref: '#/components/schemas/v1beta2.ResourceClaimList' + application/vnd.kubernetes.protobuf: + schema: + $ref: '#/components/schemas/v1beta2.ResourceClaimList' + application/cbor: + schema: + $ref: '#/components/schemas/v1beta2.ResourceClaimList' + application/json;stream=watch: + schema: + $ref: '#/components/schemas/v1beta2.ResourceClaimList' + application/vnd.kubernetes.protobuf;stream=watch: + schema: + $ref: '#/components/schemas/v1beta2.ResourceClaimList' + application/cbor-seq: + schema: + $ref: '#/components/schemas/v1beta2.ResourceClaimList' + description: OK + "401": + content: {} + description: Unauthorized + tags: + - resource_v1beta2 + x-kubernetes-action: list + x-kubernetes-group-version-kind: + group: resource.k8s.io + kind: ResourceClaim + version: v1beta2 + x-accepts: application/json + post: + description: create a ResourceClaim + operationId: createNamespacedResourceClaim + parameters: + - description: object name and auth scope, such as for teams and projects + in: path + name: namespace + required: true + schema: + type: string + - description: If 'true', then the output is pretty printed. Defaults to 'false' + unless the user-agent indicates a browser or command-line HTTP tool (curl + and wget). + in: query + name: pretty + schema: + type: string + - description: 'When present, indicates that modifications should not be persisted. + An invalid or unrecognized dryRun directive will result in an error response + and no further processing of the request. Valid values are: - All: all dry + run stages will be processed' + in: query + name: dryRun + schema: + type: string + - description: fieldManager is a name associated with the actor or entity that + is making these changes. The value must be less than or 128 characters long, + and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. + in: query + name: fieldManager + schema: + type: string + - description: 'fieldValidation instructs the server on how to handle objects + in the request (POST/PUT/PATCH) containing unknown or duplicate fields. + Valid values are: - Ignore: This will ignore any unknown fields that are + silently dropped from the object, and will ignore all but the last duplicate + field that the decoder encounters. This is the default behavior prior to + v1.23. - Warn: This will send a warning via the standard warning response + header for each unknown field that is dropped from the object, and for each + duplicate field that is encountered. The request will still succeed if there + are no other errors, and will only persist the last of any duplicate fields. + This is the default in v1.23+ - Strict: This will fail the request with + a BadRequest error if any unknown fields would be dropped from the object, + or if any duplicate fields are present. The error returned from the server + will contain all unknown and duplicate fields encountered.' + in: query + name: fieldValidation + schema: + type: string + requestBody: + content: + application/json: + schema: + $ref: '#/components/schemas/v1beta2.ResourceClaim' + required: true + responses: + "200": + content: + application/json: + schema: + $ref: '#/components/schemas/v1beta2.ResourceClaim' + application/yaml: + schema: + $ref: '#/components/schemas/v1beta2.ResourceClaim' + application/vnd.kubernetes.protobuf: + schema: + $ref: '#/components/schemas/v1beta2.ResourceClaim' + application/cbor: + schema: + $ref: '#/components/schemas/v1beta2.ResourceClaim' + description: OK + "201": + content: + application/json: + schema: + $ref: '#/components/schemas/v1beta2.ResourceClaim' + application/yaml: + schema: + $ref: '#/components/schemas/v1beta2.ResourceClaim' + application/vnd.kubernetes.protobuf: + schema: + $ref: '#/components/schemas/v1beta2.ResourceClaim' + application/cbor: + schema: + $ref: '#/components/schemas/v1beta2.ResourceClaim' + description: Created + "202": + content: + application/json: + schema: + $ref: '#/components/schemas/v1beta2.ResourceClaim' + application/yaml: + schema: + $ref: '#/components/schemas/v1beta2.ResourceClaim' + application/vnd.kubernetes.protobuf: + schema: + $ref: '#/components/schemas/v1beta2.ResourceClaim' + application/cbor: + schema: + $ref: '#/components/schemas/v1beta2.ResourceClaim' + description: Accepted + "401": + content: {} + description: Unauthorized + tags: + - resource_v1beta2 + x-kubernetes-action: post + x-kubernetes-group-version-kind: + group: resource.k8s.io + kind: ResourceClaim + version: v1beta2 + x-codegen-request-body-name: body + x-contentType: application/json + x-accepts: application/json + /apis/resource.k8s.io/v1beta2/namespaces/{namespace}/resourceclaims/{name}: + delete: + description: delete a ResourceClaim + operationId: deleteNamespacedResourceClaim + parameters: + - description: name of the ResourceClaim + in: path + name: name + required: true + schema: + type: string + - description: object name and auth scope, such as for teams and projects + in: path + name: namespace + required: true + schema: + type: string + - description: If 'true', then the output is pretty printed. Defaults to 'false' + unless the user-agent indicates a browser or command-line HTTP tool (curl + and wget). + in: query + name: pretty + schema: + type: string + - description: 'When present, indicates that modifications should not be persisted. + An invalid or unrecognized dryRun directive will result in an error response + and no further processing of the request. Valid values are: - All: all dry + run stages will be processed' + in: query + name: dryRun + schema: + type: string + - description: The duration in seconds before the object should be deleted. + Value must be non-negative integer. The value zero indicates delete immediately. + If this value is nil, the default grace period for the specified type will + be used. Defaults to a per object value if not specified. zero means delete + immediately. + in: query + name: gracePeriodSeconds + schema: + type: integer + - description: 'if set to true, it will trigger an unsafe deletion of the resource + in case the normal deletion flow fails with a corrupt object error. A resource + is considered corrupt if it can not be retrieved from the underlying storage + successfully because of a) its data can not be transformed e.g. decryption + failure, or b) it fails to decode into an object. NOTE: unsafe deletion + ignores finalizer constraints, skips precondition checks, and removes the + object from the storage. WARNING: This may potentially break the cluster + if the workload associated with the resource being unsafe-deleted relies + on normal deletion flow. Use only if you REALLY know what you are doing. + The default value is false, and the user must opt in to enable it' + in: query + name: ignoreStoreReadErrorWithClusterBreakingPotential + schema: + type: boolean + - description: 'Deprecated: please use the PropagationPolicy, this field will + be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, + the "orphan" finalizer will be added to/removed from the object''s finalizers + list. Either this field or PropagationPolicy may be set, but not both.' + in: query + name: orphanDependents + schema: + type: boolean + - description: 'Whether and how garbage collection will be performed. Either + this field or OrphanDependents may be set, but not both. The default policy + is decided by the existing finalizer set in the metadata.finalizers and + the resource-specific default policy. Acceptable values are: ''Orphan'' + - orphan the dependents; ''Background'' - allow the garbage collector to + delete the dependents in the background; ''Foreground'' - a cascading policy + that deletes all dependents in the foreground.' + in: query + name: propagationPolicy + schema: + type: string + requestBody: + content: + application/json: + schema: + $ref: '#/components/schemas/v1.DeleteOptions' + required: false + responses: + "200": + content: + application/json: + schema: + $ref: '#/components/schemas/v1beta2.ResourceClaim' + application/yaml: + schema: + $ref: '#/components/schemas/v1beta2.ResourceClaim' + application/vnd.kubernetes.protobuf: + schema: + $ref: '#/components/schemas/v1beta2.ResourceClaim' + application/cbor: + schema: + $ref: '#/components/schemas/v1beta2.ResourceClaim' + description: OK + "202": + content: + application/json: + schema: + $ref: '#/components/schemas/v1beta2.ResourceClaim' + application/yaml: + schema: + $ref: '#/components/schemas/v1beta2.ResourceClaim' + application/vnd.kubernetes.protobuf: + schema: + $ref: '#/components/schemas/v1beta2.ResourceClaim' + application/cbor: + schema: + $ref: '#/components/schemas/v1beta2.ResourceClaim' + description: Accepted + "401": + content: {} + description: Unauthorized + tags: + - resource_v1beta2 + x-kubernetes-action: delete + x-kubernetes-group-version-kind: + group: resource.k8s.io + kind: ResourceClaim + version: v1beta2 + x-codegen-request-body-name: body + x-contentType: application/json + x-accepts: application/json + get: + description: read the specified ResourceClaim + operationId: readNamespacedResourceClaim + parameters: + - description: name of the ResourceClaim + in: path + name: name + required: true + schema: + type: string + - description: object name and auth scope, such as for teams and projects + in: path + name: namespace + required: true + schema: + type: string + - description: If 'true', then the output is pretty printed. Defaults to 'false' + unless the user-agent indicates a browser or command-line HTTP tool (curl + and wget). + in: query + name: pretty + schema: + type: string + responses: + "200": + content: + application/json: + schema: + $ref: '#/components/schemas/v1beta2.ResourceClaim' + application/yaml: + schema: + $ref: '#/components/schemas/v1beta2.ResourceClaim' + application/vnd.kubernetes.protobuf: + schema: + $ref: '#/components/schemas/v1beta2.ResourceClaim' + application/cbor: + schema: + $ref: '#/components/schemas/v1beta2.ResourceClaim' + description: OK + "401": + content: {} + description: Unauthorized + tags: + - resource_v1beta2 + x-kubernetes-action: get + x-kubernetes-group-version-kind: + group: resource.k8s.io + kind: ResourceClaim + version: v1beta2 + x-accepts: application/json + patch: + description: partially update the specified ResourceClaim + operationId: patchNamespacedResourceClaim + parameters: + - description: name of the ResourceClaim + in: path + name: name + required: true + schema: + type: string + - description: object name and auth scope, such as for teams and projects + in: path + name: namespace + required: true + schema: + type: string + - description: If 'true', then the output is pretty printed. Defaults to 'false' + unless the user-agent indicates a browser or command-line HTTP tool (curl + and wget). + in: query + name: pretty + schema: + type: string + - description: 'When present, indicates that modifications should not be persisted. + An invalid or unrecognized dryRun directive will result in an error response + and no further processing of the request. Valid values are: - All: all dry + run stages will be processed' + in: query + name: dryRun + schema: + type: string + - description: fieldManager is a name associated with the actor or entity that + is making these changes. The value must be less than or 128 characters long, + and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. + This field is required for apply requests (application/apply-patch) but + optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch). + in: query + name: fieldManager + schema: + type: string + - description: 'fieldValidation instructs the server on how to handle objects + in the request (POST/PUT/PATCH) containing unknown or duplicate fields. + Valid values are: - Ignore: This will ignore any unknown fields that are + silently dropped from the object, and will ignore all but the last duplicate + field that the decoder encounters. This is the default behavior prior to + v1.23. - Warn: This will send a warning via the standard warning response + header for each unknown field that is dropped from the object, and for each + duplicate field that is encountered. The request will still succeed if there + are no other errors, and will only persist the last of any duplicate fields. + This is the default in v1.23+ - Strict: This will fail the request with + a BadRequest error if any unknown fields would be dropped from the object, + or if any duplicate fields are present. The error returned from the server + will contain all unknown and duplicate fields encountered.' + in: query + name: fieldValidation + schema: + type: string + - description: Force is going to "force" Apply requests. It means user will + re-acquire conflicting fields owned by other people. Force flag must be + unset for non-apply patch requests. + in: query + name: force + schema: + type: boolean + requestBody: + content: + application/json: + schema: + $ref: '#/components/schemas/v1.Patch' + required: true + responses: + "200": + content: + application/json: + schema: + $ref: '#/components/schemas/v1beta2.ResourceClaim' + application/yaml: + schema: + $ref: '#/components/schemas/v1beta2.ResourceClaim' + application/vnd.kubernetes.protobuf: + schema: + $ref: '#/components/schemas/v1beta2.ResourceClaim' + application/cbor: + schema: + $ref: '#/components/schemas/v1beta2.ResourceClaim' + description: OK + "201": + content: + application/json: + schema: + $ref: '#/components/schemas/v1beta2.ResourceClaim' + application/yaml: + schema: + $ref: '#/components/schemas/v1beta2.ResourceClaim' + application/vnd.kubernetes.protobuf: + schema: + $ref: '#/components/schemas/v1beta2.ResourceClaim' + application/cbor: + schema: + $ref: '#/components/schemas/v1beta2.ResourceClaim' + description: Created + "401": + content: {} + description: Unauthorized + tags: + - resource_v1beta2 + x-kubernetes-action: patch + x-kubernetes-group-version-kind: + group: resource.k8s.io + kind: ResourceClaim + version: v1beta2 + x-codegen-request-body-name: body + x-contentType: application/json + x-accepts: application/json + put: + description: replace the specified ResourceClaim + operationId: replaceNamespacedResourceClaim + parameters: + - description: name of the ResourceClaim + in: path + name: name + required: true + schema: + type: string + - description: object name and auth scope, such as for teams and projects + in: path + name: namespace + required: true + schema: + type: string - description: If 'true', then the output is pretty printed. Defaults to 'false' unless the user-agent indicates a browser or command-line HTTP tool (curl and wget). @@ -81415,44 +82409,7 @@ paths: x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json - /apis/storage.k8s.io/v1/watch/csidrivers: {} - /apis/storage.k8s.io/v1/watch/csidrivers/{name}: {} - /apis/storage.k8s.io/v1/watch/csinodes: {} - /apis/storage.k8s.io/v1/watch/csinodes/{name}: {} - /apis/storage.k8s.io/v1/watch/csistoragecapacities: {} - /apis/storage.k8s.io/v1/watch/namespaces/{namespace}/csistoragecapacities: {} - /apis/storage.k8s.io/v1/watch/namespaces/{namespace}/csistoragecapacities/{name}: {} - /apis/storage.k8s.io/v1/watch/storageclasses: {} - /apis/storage.k8s.io/v1/watch/storageclasses/{name}: {} - /apis/storage.k8s.io/v1/watch/volumeattachments: {} - /apis/storage.k8s.io/v1/watch/volumeattachments/{name}: {} - /apis/storage.k8s.io/v1alpha1/: - get: - description: get available resources - operationId: getAPIResources - responses: - "200": - content: - application/json: - schema: - $ref: '#/components/schemas/v1.APIResourceList' - application/yaml: - schema: - $ref: '#/components/schemas/v1.APIResourceList' - application/vnd.kubernetes.protobuf: - schema: - $ref: '#/components/schemas/v1.APIResourceList' - application/cbor: - schema: - $ref: '#/components/schemas/v1.APIResourceList' - description: OK - "401": - content: {} - description: Unauthorized - tags: - - storage_v1alpha1 - x-accepts: application/json - /apis/storage.k8s.io/v1alpha1/volumeattributesclasses: + /apis/storage.k8s.io/v1/volumeattributesclasses: delete: description: delete collection of VolumeAttributesClass operationId: deleteCollectionVolumeAttributesClass @@ -81608,12 +82565,12 @@ paths: content: {} description: Unauthorized tags: - - storage_v1alpha1 + - storage_v1 x-kubernetes-action: deletecollection x-kubernetes-group-version-kind: group: storage.k8s.io kind: VolumeAttributesClass - version: v1alpha1 + version: v1 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json @@ -81717,36 +82674,36 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1alpha1.VolumeAttributesClassList' + $ref: '#/components/schemas/v1.VolumeAttributesClassList' application/yaml: schema: - $ref: '#/components/schemas/v1alpha1.VolumeAttributesClassList' + $ref: '#/components/schemas/v1.VolumeAttributesClassList' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1alpha1.VolumeAttributesClassList' + $ref: '#/components/schemas/v1.VolumeAttributesClassList' application/cbor: schema: - $ref: '#/components/schemas/v1alpha1.VolumeAttributesClassList' + $ref: '#/components/schemas/v1.VolumeAttributesClassList' application/json;stream=watch: schema: - $ref: '#/components/schemas/v1alpha1.VolumeAttributesClassList' + $ref: '#/components/schemas/v1.VolumeAttributesClassList' application/vnd.kubernetes.protobuf;stream=watch: schema: - $ref: '#/components/schemas/v1alpha1.VolumeAttributesClassList' + $ref: '#/components/schemas/v1.VolumeAttributesClassList' application/cbor-seq: schema: - $ref: '#/components/schemas/v1alpha1.VolumeAttributesClassList' + $ref: '#/components/schemas/v1.VolumeAttributesClassList' description: OK "401": content: {} description: Unauthorized tags: - - storage_v1alpha1 + - storage_v1 x-kubernetes-action: list x-kubernetes-group-version-kind: group: storage.k8s.io kind: VolumeAttributesClass - version: v1alpha1 + version: v1 x-accepts: application/json post: description: create a VolumeAttributesClass @@ -81795,68 +82752,68 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1alpha1.VolumeAttributesClass' + $ref: '#/components/schemas/v1.VolumeAttributesClass' required: true responses: "200": content: application/json: schema: - $ref: '#/components/schemas/v1alpha1.VolumeAttributesClass' + $ref: '#/components/schemas/v1.VolumeAttributesClass' application/yaml: schema: - $ref: '#/components/schemas/v1alpha1.VolumeAttributesClass' + $ref: '#/components/schemas/v1.VolumeAttributesClass' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1alpha1.VolumeAttributesClass' + $ref: '#/components/schemas/v1.VolumeAttributesClass' application/cbor: schema: - $ref: '#/components/schemas/v1alpha1.VolumeAttributesClass' + $ref: '#/components/schemas/v1.VolumeAttributesClass' description: OK "201": content: application/json: schema: - $ref: '#/components/schemas/v1alpha1.VolumeAttributesClass' + $ref: '#/components/schemas/v1.VolumeAttributesClass' application/yaml: schema: - $ref: '#/components/schemas/v1alpha1.VolumeAttributesClass' + $ref: '#/components/schemas/v1.VolumeAttributesClass' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1alpha1.VolumeAttributesClass' + $ref: '#/components/schemas/v1.VolumeAttributesClass' application/cbor: schema: - $ref: '#/components/schemas/v1alpha1.VolumeAttributesClass' + $ref: '#/components/schemas/v1.VolumeAttributesClass' description: Created "202": content: application/json: schema: - $ref: '#/components/schemas/v1alpha1.VolumeAttributesClass' + $ref: '#/components/schemas/v1.VolumeAttributesClass' application/yaml: schema: - $ref: '#/components/schemas/v1alpha1.VolumeAttributesClass' + $ref: '#/components/schemas/v1.VolumeAttributesClass' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1alpha1.VolumeAttributesClass' + $ref: '#/components/schemas/v1.VolumeAttributesClass' application/cbor: schema: - $ref: '#/components/schemas/v1alpha1.VolumeAttributesClass' + $ref: '#/components/schemas/v1.VolumeAttributesClass' description: Accepted "401": content: {} description: Unauthorized tags: - - storage_v1alpha1 + - storage_v1 x-kubernetes-action: post x-kubernetes-group-version-kind: group: storage.k8s.io kind: VolumeAttributesClass - version: v1alpha1 + version: v1 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json - /apis/storage.k8s.io/v1alpha1/volumeattributesclasses/{name}: + /apis/storage.k8s.io/v1/volumeattributesclasses/{name}: delete: description: delete a VolumeAttributesClass operationId: deleteVolumeAttributesClass @@ -81935,42 +82892,42 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1alpha1.VolumeAttributesClass' + $ref: '#/components/schemas/v1.VolumeAttributesClass' application/yaml: schema: - $ref: '#/components/schemas/v1alpha1.VolumeAttributesClass' + $ref: '#/components/schemas/v1.VolumeAttributesClass' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1alpha1.VolumeAttributesClass' + $ref: '#/components/schemas/v1.VolumeAttributesClass' application/cbor: schema: - $ref: '#/components/schemas/v1alpha1.VolumeAttributesClass' + $ref: '#/components/schemas/v1.VolumeAttributesClass' description: OK "202": content: application/json: schema: - $ref: '#/components/schemas/v1alpha1.VolumeAttributesClass' + $ref: '#/components/schemas/v1.VolumeAttributesClass' application/yaml: schema: - $ref: '#/components/schemas/v1alpha1.VolumeAttributesClass' + $ref: '#/components/schemas/v1.VolumeAttributesClass' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1alpha1.VolumeAttributesClass' + $ref: '#/components/schemas/v1.VolumeAttributesClass' application/cbor: schema: - $ref: '#/components/schemas/v1alpha1.VolumeAttributesClass' + $ref: '#/components/schemas/v1.VolumeAttributesClass' description: Accepted "401": content: {} description: Unauthorized tags: - - storage_v1alpha1 + - storage_v1 x-kubernetes-action: delete x-kubernetes-group-version-kind: group: storage.k8s.io kind: VolumeAttributesClass - version: v1alpha1 + version: v1 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json @@ -81996,27 +82953,27 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1alpha1.VolumeAttributesClass' + $ref: '#/components/schemas/v1.VolumeAttributesClass' application/yaml: schema: - $ref: '#/components/schemas/v1alpha1.VolumeAttributesClass' + $ref: '#/components/schemas/v1.VolumeAttributesClass' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1alpha1.VolumeAttributesClass' + $ref: '#/components/schemas/v1.VolumeAttributesClass' application/cbor: schema: - $ref: '#/components/schemas/v1alpha1.VolumeAttributesClass' + $ref: '#/components/schemas/v1.VolumeAttributesClass' description: OK "401": content: {} description: Unauthorized tags: - - storage_v1alpha1 + - storage_v1 x-kubernetes-action: get x-kubernetes-group-version-kind: group: storage.k8s.io kind: VolumeAttributesClass - version: v1alpha1 + version: v1 x-accepts: application/json patch: description: partially update the specified VolumeAttributesClass @@ -82087,42 +83044,42 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1alpha1.VolumeAttributesClass' + $ref: '#/components/schemas/v1.VolumeAttributesClass' application/yaml: schema: - $ref: '#/components/schemas/v1alpha1.VolumeAttributesClass' + $ref: '#/components/schemas/v1.VolumeAttributesClass' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1alpha1.VolumeAttributesClass' + $ref: '#/components/schemas/v1.VolumeAttributesClass' application/cbor: schema: - $ref: '#/components/schemas/v1alpha1.VolumeAttributesClass' + $ref: '#/components/schemas/v1.VolumeAttributesClass' description: OK "201": content: application/json: schema: - $ref: '#/components/schemas/v1alpha1.VolumeAttributesClass' + $ref: '#/components/schemas/v1.VolumeAttributesClass' application/yaml: schema: - $ref: '#/components/schemas/v1alpha1.VolumeAttributesClass' + $ref: '#/components/schemas/v1.VolumeAttributesClass' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1alpha1.VolumeAttributesClass' + $ref: '#/components/schemas/v1.VolumeAttributesClass' application/cbor: schema: - $ref: '#/components/schemas/v1alpha1.VolumeAttributesClass' + $ref: '#/components/schemas/v1.VolumeAttributesClass' description: Created "401": content: {} description: Unauthorized tags: - - storage_v1alpha1 + - storage_v1 x-kubernetes-action: patch x-kubernetes-group-version-kind: group: storage.k8s.io kind: VolumeAttributesClass - version: v1alpha1 + version: v1 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json @@ -82179,55 +83136,66 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1alpha1.VolumeAttributesClass' + $ref: '#/components/schemas/v1.VolumeAttributesClass' required: true responses: "200": content: application/json: schema: - $ref: '#/components/schemas/v1alpha1.VolumeAttributesClass' + $ref: '#/components/schemas/v1.VolumeAttributesClass' application/yaml: schema: - $ref: '#/components/schemas/v1alpha1.VolumeAttributesClass' + $ref: '#/components/schemas/v1.VolumeAttributesClass' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1alpha1.VolumeAttributesClass' + $ref: '#/components/schemas/v1.VolumeAttributesClass' application/cbor: schema: - $ref: '#/components/schemas/v1alpha1.VolumeAttributesClass' + $ref: '#/components/schemas/v1.VolumeAttributesClass' description: OK "201": content: application/json: schema: - $ref: '#/components/schemas/v1alpha1.VolumeAttributesClass' + $ref: '#/components/schemas/v1.VolumeAttributesClass' application/yaml: schema: - $ref: '#/components/schemas/v1alpha1.VolumeAttributesClass' + $ref: '#/components/schemas/v1.VolumeAttributesClass' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1alpha1.VolumeAttributesClass' + $ref: '#/components/schemas/v1.VolumeAttributesClass' application/cbor: schema: - $ref: '#/components/schemas/v1alpha1.VolumeAttributesClass' + $ref: '#/components/schemas/v1.VolumeAttributesClass' description: Created "401": content: {} description: Unauthorized tags: - - storage_v1alpha1 + - storage_v1 x-kubernetes-action: put x-kubernetes-group-version-kind: group: storage.k8s.io kind: VolumeAttributesClass - version: v1alpha1 + version: v1 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json - /apis/storage.k8s.io/v1alpha1/watch/volumeattributesclasses: {} - /apis/storage.k8s.io/v1alpha1/watch/volumeattributesclasses/{name}: {} - /apis/storage.k8s.io/v1beta1/: + /apis/storage.k8s.io/v1/watch/csidrivers: {} + /apis/storage.k8s.io/v1/watch/csidrivers/{name}: {} + /apis/storage.k8s.io/v1/watch/csinodes: {} + /apis/storage.k8s.io/v1/watch/csinodes/{name}: {} + /apis/storage.k8s.io/v1/watch/csistoragecapacities: {} + /apis/storage.k8s.io/v1/watch/namespaces/{namespace}/csistoragecapacities: {} + /apis/storage.k8s.io/v1/watch/namespaces/{namespace}/csistoragecapacities/{name}: {} + /apis/storage.k8s.io/v1/watch/storageclasses: {} + /apis/storage.k8s.io/v1/watch/storageclasses/{name}: {} + /apis/storage.k8s.io/v1/watch/volumeattachments: {} + /apis/storage.k8s.io/v1/watch/volumeattachments/{name}: {} + /apis/storage.k8s.io/v1/watch/volumeattributesclasses: {} + /apis/storage.k8s.io/v1/watch/volumeattributesclasses/{name}: {} + /apis/storage.k8s.io/v1alpha1/: get: description: get available resources operationId: getAPIResources @@ -82251,9 +83219,9 @@ paths: content: {} description: Unauthorized tags: - - storage_v1beta1 + - storage_v1alpha1 x-accepts: application/json - /apis/storage.k8s.io/v1beta1/volumeattributesclasses: + /apis/storage.k8s.io/v1alpha1/volumeattributesclasses: delete: description: delete collection of VolumeAttributesClass operationId: deleteCollectionVolumeAttributesClass @@ -82409,12 +83377,12 @@ paths: content: {} description: Unauthorized tags: - - storage_v1beta1 + - storage_v1alpha1 x-kubernetes-action: deletecollection x-kubernetes-group-version-kind: group: storage.k8s.io kind: VolumeAttributesClass - version: v1beta1 + version: v1alpha1 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json @@ -82518,36 +83486,36 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1beta1.VolumeAttributesClassList' + $ref: '#/components/schemas/v1alpha1.VolumeAttributesClassList' application/yaml: schema: - $ref: '#/components/schemas/v1beta1.VolumeAttributesClassList' + $ref: '#/components/schemas/v1alpha1.VolumeAttributesClassList' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1beta1.VolumeAttributesClassList' + $ref: '#/components/schemas/v1alpha1.VolumeAttributesClassList' application/cbor: schema: - $ref: '#/components/schemas/v1beta1.VolumeAttributesClassList' + $ref: '#/components/schemas/v1alpha1.VolumeAttributesClassList' application/json;stream=watch: schema: - $ref: '#/components/schemas/v1beta1.VolumeAttributesClassList' + $ref: '#/components/schemas/v1alpha1.VolumeAttributesClassList' application/vnd.kubernetes.protobuf;stream=watch: schema: - $ref: '#/components/schemas/v1beta1.VolumeAttributesClassList' + $ref: '#/components/schemas/v1alpha1.VolumeAttributesClassList' application/cbor-seq: schema: - $ref: '#/components/schemas/v1beta1.VolumeAttributesClassList' + $ref: '#/components/schemas/v1alpha1.VolumeAttributesClassList' description: OK "401": content: {} description: Unauthorized tags: - - storage_v1beta1 + - storage_v1alpha1 x-kubernetes-action: list x-kubernetes-group-version-kind: group: storage.k8s.io kind: VolumeAttributesClass - version: v1beta1 + version: v1alpha1 x-accepts: application/json post: description: create a VolumeAttributesClass @@ -82596,68 +83564,68 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1beta1.VolumeAttributesClass' + $ref: '#/components/schemas/v1alpha1.VolumeAttributesClass' required: true responses: "200": content: application/json: schema: - $ref: '#/components/schemas/v1beta1.VolumeAttributesClass' + $ref: '#/components/schemas/v1alpha1.VolumeAttributesClass' application/yaml: schema: - $ref: '#/components/schemas/v1beta1.VolumeAttributesClass' + $ref: '#/components/schemas/v1alpha1.VolumeAttributesClass' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1beta1.VolumeAttributesClass' + $ref: '#/components/schemas/v1alpha1.VolumeAttributesClass' application/cbor: schema: - $ref: '#/components/schemas/v1beta1.VolumeAttributesClass' + $ref: '#/components/schemas/v1alpha1.VolumeAttributesClass' description: OK "201": content: application/json: schema: - $ref: '#/components/schemas/v1beta1.VolumeAttributesClass' + $ref: '#/components/schemas/v1alpha1.VolumeAttributesClass' application/yaml: schema: - $ref: '#/components/schemas/v1beta1.VolumeAttributesClass' + $ref: '#/components/schemas/v1alpha1.VolumeAttributesClass' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1beta1.VolumeAttributesClass' + $ref: '#/components/schemas/v1alpha1.VolumeAttributesClass' application/cbor: schema: - $ref: '#/components/schemas/v1beta1.VolumeAttributesClass' + $ref: '#/components/schemas/v1alpha1.VolumeAttributesClass' description: Created "202": content: application/json: schema: - $ref: '#/components/schemas/v1beta1.VolumeAttributesClass' + $ref: '#/components/schemas/v1alpha1.VolumeAttributesClass' application/yaml: schema: - $ref: '#/components/schemas/v1beta1.VolumeAttributesClass' + $ref: '#/components/schemas/v1alpha1.VolumeAttributesClass' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1beta1.VolumeAttributesClass' + $ref: '#/components/schemas/v1alpha1.VolumeAttributesClass' application/cbor: schema: - $ref: '#/components/schemas/v1beta1.VolumeAttributesClass' + $ref: '#/components/schemas/v1alpha1.VolumeAttributesClass' description: Accepted "401": content: {} description: Unauthorized tags: - - storage_v1beta1 + - storage_v1alpha1 x-kubernetes-action: post x-kubernetes-group-version-kind: group: storage.k8s.io kind: VolumeAttributesClass - version: v1beta1 + version: v1alpha1 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json - /apis/storage.k8s.io/v1beta1/volumeattributesclasses/{name}: + /apis/storage.k8s.io/v1alpha1/volumeattributesclasses/{name}: delete: description: delete a VolumeAttributesClass operationId: deleteVolumeAttributesClass @@ -82736,42 +83704,42 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1beta1.VolumeAttributesClass' + $ref: '#/components/schemas/v1alpha1.VolumeAttributesClass' application/yaml: schema: - $ref: '#/components/schemas/v1beta1.VolumeAttributesClass' + $ref: '#/components/schemas/v1alpha1.VolumeAttributesClass' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1beta1.VolumeAttributesClass' + $ref: '#/components/schemas/v1alpha1.VolumeAttributesClass' application/cbor: schema: - $ref: '#/components/schemas/v1beta1.VolumeAttributesClass' + $ref: '#/components/schemas/v1alpha1.VolumeAttributesClass' description: OK "202": content: application/json: schema: - $ref: '#/components/schemas/v1beta1.VolumeAttributesClass' + $ref: '#/components/schemas/v1alpha1.VolumeAttributesClass' application/yaml: schema: - $ref: '#/components/schemas/v1beta1.VolumeAttributesClass' + $ref: '#/components/schemas/v1alpha1.VolumeAttributesClass' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1beta1.VolumeAttributesClass' + $ref: '#/components/schemas/v1alpha1.VolumeAttributesClass' application/cbor: schema: - $ref: '#/components/schemas/v1beta1.VolumeAttributesClass' + $ref: '#/components/schemas/v1alpha1.VolumeAttributesClass' description: Accepted "401": content: {} description: Unauthorized tags: - - storage_v1beta1 + - storage_v1alpha1 x-kubernetes-action: delete x-kubernetes-group-version-kind: group: storage.k8s.io kind: VolumeAttributesClass - version: v1beta1 + version: v1alpha1 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json @@ -82797,27 +83765,27 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1beta1.VolumeAttributesClass' + $ref: '#/components/schemas/v1alpha1.VolumeAttributesClass' application/yaml: schema: - $ref: '#/components/schemas/v1beta1.VolumeAttributesClass' + $ref: '#/components/schemas/v1alpha1.VolumeAttributesClass' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1beta1.VolumeAttributesClass' + $ref: '#/components/schemas/v1alpha1.VolumeAttributesClass' application/cbor: schema: - $ref: '#/components/schemas/v1beta1.VolumeAttributesClass' + $ref: '#/components/schemas/v1alpha1.VolumeAttributesClass' description: OK "401": content: {} description: Unauthorized tags: - - storage_v1beta1 + - storage_v1alpha1 x-kubernetes-action: get x-kubernetes-group-version-kind: group: storage.k8s.io kind: VolumeAttributesClass - version: v1beta1 + version: v1alpha1 x-accepts: application/json patch: description: partially update the specified VolumeAttributesClass @@ -82888,42 +83856,42 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1beta1.VolumeAttributesClass' + $ref: '#/components/schemas/v1alpha1.VolumeAttributesClass' application/yaml: schema: - $ref: '#/components/schemas/v1beta1.VolumeAttributesClass' + $ref: '#/components/schemas/v1alpha1.VolumeAttributesClass' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1beta1.VolumeAttributesClass' + $ref: '#/components/schemas/v1alpha1.VolumeAttributesClass' application/cbor: schema: - $ref: '#/components/schemas/v1beta1.VolumeAttributesClass' + $ref: '#/components/schemas/v1alpha1.VolumeAttributesClass' description: OK "201": content: application/json: schema: - $ref: '#/components/schemas/v1beta1.VolumeAttributesClass' + $ref: '#/components/schemas/v1alpha1.VolumeAttributesClass' application/yaml: schema: - $ref: '#/components/schemas/v1beta1.VolumeAttributesClass' + $ref: '#/components/schemas/v1alpha1.VolumeAttributesClass' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1beta1.VolumeAttributesClass' + $ref: '#/components/schemas/v1alpha1.VolumeAttributesClass' application/cbor: schema: - $ref: '#/components/schemas/v1beta1.VolumeAttributesClass' + $ref: '#/components/schemas/v1alpha1.VolumeAttributesClass' description: Created "401": content: {} description: Unauthorized tags: - - storage_v1beta1 + - storage_v1alpha1 x-kubernetes-action: patch x-kubernetes-group-version-kind: group: storage.k8s.io kind: VolumeAttributesClass - version: v1beta1 + version: v1alpha1 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json @@ -82980,78 +83948,879 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/v1beta1.VolumeAttributesClass' + $ref: '#/components/schemas/v1alpha1.VolumeAttributesClass' required: true responses: "200": content: application/json: schema: - $ref: '#/components/schemas/v1beta1.VolumeAttributesClass' + $ref: '#/components/schemas/v1alpha1.VolumeAttributesClass' application/yaml: schema: - $ref: '#/components/schemas/v1beta1.VolumeAttributesClass' + $ref: '#/components/schemas/v1alpha1.VolumeAttributesClass' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1beta1.VolumeAttributesClass' + $ref: '#/components/schemas/v1alpha1.VolumeAttributesClass' application/cbor: schema: - $ref: '#/components/schemas/v1beta1.VolumeAttributesClass' + $ref: '#/components/schemas/v1alpha1.VolumeAttributesClass' description: OK "201": content: application/json: schema: - $ref: '#/components/schemas/v1beta1.VolumeAttributesClass' + $ref: '#/components/schemas/v1alpha1.VolumeAttributesClass' application/yaml: schema: - $ref: '#/components/schemas/v1beta1.VolumeAttributesClass' + $ref: '#/components/schemas/v1alpha1.VolumeAttributesClass' application/vnd.kubernetes.protobuf: schema: - $ref: '#/components/schemas/v1beta1.VolumeAttributesClass' + $ref: '#/components/schemas/v1alpha1.VolumeAttributesClass' application/cbor: schema: - $ref: '#/components/schemas/v1beta1.VolumeAttributesClass' + $ref: '#/components/schemas/v1alpha1.VolumeAttributesClass' description: Created "401": content: {} description: Unauthorized tags: - - storage_v1beta1 + - storage_v1alpha1 x-kubernetes-action: put x-kubernetes-group-version-kind: group: storage.k8s.io kind: VolumeAttributesClass - version: v1beta1 + version: v1alpha1 x-codegen-request-body-name: body x-contentType: application/json x-accepts: application/json - /apis/storage.k8s.io/v1beta1/watch/volumeattributesclasses: {} - /apis/storage.k8s.io/v1beta1/watch/volumeattributesclasses/{name}: {} - /apis/storagemigration.k8s.io/: - get: - description: get information of a group - operationId: getAPIGroup - responses: - "200": - content: - application/json: - schema: - $ref: '#/components/schemas/v1.APIGroup' - application/yaml: - schema: - $ref: '#/components/schemas/v1.APIGroup' - application/vnd.kubernetes.protobuf: - schema: - $ref: '#/components/schemas/v1.APIGroup' - description: OK - "401": - content: {} - description: Unauthorized - tags: - - storagemigration - x-accepts: application/json - /apis/storagemigration.k8s.io/v1alpha1/: + /apis/storage.k8s.io/v1alpha1/watch/volumeattributesclasses: {} + /apis/storage.k8s.io/v1alpha1/watch/volumeattributesclasses/{name}: {} + /apis/storage.k8s.io/v1beta1/: + get: + description: get available resources + operationId: getAPIResources + responses: + "200": + content: + application/json: + schema: + $ref: '#/components/schemas/v1.APIResourceList' + application/yaml: + schema: + $ref: '#/components/schemas/v1.APIResourceList' + application/vnd.kubernetes.protobuf: + schema: + $ref: '#/components/schemas/v1.APIResourceList' + application/cbor: + schema: + $ref: '#/components/schemas/v1.APIResourceList' + description: OK + "401": + content: {} + description: Unauthorized + tags: + - storage_v1beta1 + x-accepts: application/json + /apis/storage.k8s.io/v1beta1/volumeattributesclasses: + delete: + description: delete collection of VolumeAttributesClass + operationId: deleteCollectionVolumeAttributesClass + parameters: + - description: If 'true', then the output is pretty printed. Defaults to 'false' + unless the user-agent indicates a browser or command-line HTTP tool (curl + and wget). + in: query + name: pretty + schema: + type: string + - description: |- + The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + + This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications. + in: query + name: continue + schema: + type: string + - description: 'When present, indicates that modifications should not be persisted. + An invalid or unrecognized dryRun directive will result in an error response + and no further processing of the request. Valid values are: - All: all dry + run stages will be processed' + in: query + name: dryRun + schema: + type: string + - description: A selector to restrict the list of returned objects by their + fields. Defaults to everything. + in: query + name: fieldSelector + schema: + type: string + - description: The duration in seconds before the object should be deleted. + Value must be non-negative integer. The value zero indicates delete immediately. + If this value is nil, the default grace period for the specified type will + be used. Defaults to a per object value if not specified. zero means delete + immediately. + in: query + name: gracePeriodSeconds + schema: + type: integer + - description: 'if set to true, it will trigger an unsafe deletion of the resource + in case the normal deletion flow fails with a corrupt object error. A resource + is considered corrupt if it can not be retrieved from the underlying storage + successfully because of a) its data can not be transformed e.g. decryption + failure, or b) it fails to decode into an object. NOTE: unsafe deletion + ignores finalizer constraints, skips precondition checks, and removes the + object from the storage. WARNING: This may potentially break the cluster + if the workload associated with the resource being unsafe-deleted relies + on normal deletion flow. Use only if you REALLY know what you are doing. + The default value is false, and the user must opt in to enable it' + in: query + name: ignoreStoreReadErrorWithClusterBreakingPotential + schema: + type: boolean + - description: A selector to restrict the list of returned objects by their + labels. Defaults to everything. + in: query + name: labelSelector + schema: + type: string + - description: |- + limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + + The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned. + in: query + name: limit + schema: + type: integer + - description: 'Deprecated: please use the PropagationPolicy, this field will + be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, + the "orphan" finalizer will be added to/removed from the object''s finalizers + list. Either this field or PropagationPolicy may be set, but not both.' + in: query + name: orphanDependents + schema: + type: boolean + - description: 'Whether and how garbage collection will be performed. Either + this field or OrphanDependents may be set, but not both. The default policy + is decided by the existing finalizer set in the metadata.finalizers and + the resource-specific default policy. Acceptable values are: ''Orphan'' + - orphan the dependents; ''Background'' - allow the garbage collector to + delete the dependents in the background; ''Foreground'' - a cascading policy + that deletes all dependents in the foreground.' + in: query + name: propagationPolicy + schema: + type: string + - description: |- + resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + + Defaults to unset + in: query + name: resourceVersion + schema: + type: string + - description: |- + resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + + Defaults to unset + in: query + name: resourceVersionMatch + schema: + type: string + - description: |- + `sendInitialEvents=true` may be set together with `watch=true`. In that case, the watch stream will begin with synthetic events to produce the current state of objects in the collection. Once all such events have been sent, a synthetic "Bookmark" event will be sent. The bookmark will report the ResourceVersion (RV) corresponding to the set of objects, and be marked with `"k8s.io/initial-events-end": "true"` annotation. Afterwards, the watch stream will proceed as usual, sending watch events corresponding to changes (subsequent to the RV) to objects watched. + + When `sendInitialEvents` option is set, we require `resourceVersionMatch` option to also be set. The semantic of the watch request is as following: - `resourceVersionMatch` = NotOlderThan + is interpreted as "data at least as new as the provided `resourceVersion`" + and the bookmark event is send when the state is synced + to a `resourceVersion` at least as fresh as the one provided by the ListOptions. + If `resourceVersion` is unset, this is interpreted as "consistent read" and the + bookmark event is send when the state is synced at least to the moment + when request started being processed. + - `resourceVersionMatch` set to any other value or unset + Invalid error is returned. + + Defaults to true if `resourceVersion=""` or `resourceVersion="0"` (for backward compatibility reasons) and to false otherwise. + in: query + name: sendInitialEvents + schema: + type: boolean + - description: Timeout for the list/watch call. This limits the duration of + the call, regardless of any activity or inactivity. + in: query + name: timeoutSeconds + schema: + type: integer + requestBody: + content: + application/json: + schema: + $ref: '#/components/schemas/v1.DeleteOptions' + required: false + responses: + "200": + content: + application/json: + schema: + $ref: '#/components/schemas/v1.Status' + application/yaml: + schema: + $ref: '#/components/schemas/v1.Status' + application/vnd.kubernetes.protobuf: + schema: + $ref: '#/components/schemas/v1.Status' + application/cbor: + schema: + $ref: '#/components/schemas/v1.Status' + description: OK + "401": + content: {} + description: Unauthorized + tags: + - storage_v1beta1 + x-kubernetes-action: deletecollection + x-kubernetes-group-version-kind: + group: storage.k8s.io + kind: VolumeAttributesClass + version: v1beta1 + x-codegen-request-body-name: body + x-contentType: application/json + x-accepts: application/json + get: + description: list or watch objects of kind VolumeAttributesClass + operationId: listVolumeAttributesClass + parameters: + - description: If 'true', then the output is pretty printed. Defaults to 'false' + unless the user-agent indicates a browser or command-line HTTP tool (curl + and wget). + in: query + name: pretty + schema: + type: string + - description: allowWatchBookmarks requests watch events with type "BOOKMARK". + Servers that do not implement bookmarks may ignore this flag and bookmarks + are sent at the server's discretion. Clients should not assume bookmarks + are returned at any specific interval, nor may they assume the server will + send any BOOKMARK event during a session. If this is not a watch, this field + is ignored. + in: query + name: allowWatchBookmarks + schema: + type: boolean + - description: |- + The continue option should be set when retrieving more results from the server. Since this value is server defined, clients may only use the continue value from a previous query result with identical query parameters (except for the value of continue) and the server may reject a continue value it does not recognize. If the specified continue value is no longer valid whether due to expiration (generally five to fifteen minutes) or a configuration change on the server, the server will respond with a 410 ResourceExpired error together with a continue token. If the client needs a consistent list, it must restart their list without the continue field. Otherwise, the client may send another list request with the token received with the 410 error, the server will respond with a list starting from the next key, but from the latest snapshot, which is inconsistent from the previous list results - objects that are created, modified, or deleted after the first list request will be included in the response, as long as their keys are after the "next key". + + This field is not supported when watch is true. Clients may start a watch from the last resourceVersion value returned by the server and not miss any modifications. + in: query + name: continue + schema: + type: string + - description: A selector to restrict the list of returned objects by their + fields. Defaults to everything. + in: query + name: fieldSelector + schema: + type: string + - description: A selector to restrict the list of returned objects by their + labels. Defaults to everything. + in: query + name: labelSelector + schema: + type: string + - description: |- + limit is a maximum number of responses to return for a list call. If more items exist, the server will set the `continue` field on the list metadata to a value that can be used with the same initial query to retrieve the next set of results. Setting a limit may return fewer than the requested amount of items (up to zero items) in the event all requested objects are filtered out and clients should only use the presence of the continue field to determine whether more results are available. Servers may choose not to support the limit argument and will return all of the available results. If limit is specified and the continue field is empty, clients may assume that no more results are available. This field is not supported if watch is true. + + The server guarantees that the objects returned when using continue will be identical to issuing a single list call without a limit - that is, no objects created, modified, or deleted after the first request is issued will be included in any subsequent continued requests. This is sometimes referred to as a consistent snapshot, and ensures that a client that is using limit to receive smaller chunks of a very large result can ensure they see all possible objects. If objects are updated during a chunked list the version of the object that was present at the time the first list result was calculated is returned. + in: query + name: limit + schema: + type: integer + - description: |- + resourceVersion sets a constraint on what resource versions a request may be served from. See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + + Defaults to unset + in: query + name: resourceVersion + schema: + type: string + - description: |- + resourceVersionMatch determines how resourceVersion is applied to list calls. It is highly recommended that resourceVersionMatch be set for list calls where resourceVersion is set See https://kubernetes.io/docs/reference/using-api/api-concepts/#resource-versions for details. + + Defaults to unset + in: query + name: resourceVersionMatch + schema: + type: string + - description: |- + `sendInitialEvents=true` may be set together with `watch=true`. In that case, the watch stream will begin with synthetic events to produce the current state of objects in the collection. Once all such events have been sent, a synthetic "Bookmark" event will be sent. The bookmark will report the ResourceVersion (RV) corresponding to the set of objects, and be marked with `"k8s.io/initial-events-end": "true"` annotation. Afterwards, the watch stream will proceed as usual, sending watch events corresponding to changes (subsequent to the RV) to objects watched. + + When `sendInitialEvents` option is set, we require `resourceVersionMatch` option to also be set. The semantic of the watch request is as following: - `resourceVersionMatch` = NotOlderThan + is interpreted as "data at least as new as the provided `resourceVersion`" + and the bookmark event is send when the state is synced + to a `resourceVersion` at least as fresh as the one provided by the ListOptions. + If `resourceVersion` is unset, this is interpreted as "consistent read" and the + bookmark event is send when the state is synced at least to the moment + when request started being processed. + - `resourceVersionMatch` set to any other value or unset + Invalid error is returned. + + Defaults to true if `resourceVersion=""` or `resourceVersion="0"` (for backward compatibility reasons) and to false otherwise. + in: query + name: sendInitialEvents + schema: + type: boolean + - description: Timeout for the list/watch call. This limits the duration of + the call, regardless of any activity or inactivity. + in: query + name: timeoutSeconds + schema: + type: integer + - description: Watch for changes to the described resources and return them + as a stream of add, update, and remove notifications. Specify resourceVersion. + in: query + name: watch + schema: + type: boolean + responses: + "200": + content: + application/json: + schema: + $ref: '#/components/schemas/v1beta1.VolumeAttributesClassList' + application/yaml: + schema: + $ref: '#/components/schemas/v1beta1.VolumeAttributesClassList' + application/vnd.kubernetes.protobuf: + schema: + $ref: '#/components/schemas/v1beta1.VolumeAttributesClassList' + application/cbor: + schema: + $ref: '#/components/schemas/v1beta1.VolumeAttributesClassList' + application/json;stream=watch: + schema: + $ref: '#/components/schemas/v1beta1.VolumeAttributesClassList' + application/vnd.kubernetes.protobuf;stream=watch: + schema: + $ref: '#/components/schemas/v1beta1.VolumeAttributesClassList' + application/cbor-seq: + schema: + $ref: '#/components/schemas/v1beta1.VolumeAttributesClassList' + description: OK + "401": + content: {} + description: Unauthorized + tags: + - storage_v1beta1 + x-kubernetes-action: list + x-kubernetes-group-version-kind: + group: storage.k8s.io + kind: VolumeAttributesClass + version: v1beta1 + x-accepts: application/json + post: + description: create a VolumeAttributesClass + operationId: createVolumeAttributesClass + parameters: + - description: If 'true', then the output is pretty printed. Defaults to 'false' + unless the user-agent indicates a browser or command-line HTTP tool (curl + and wget). + in: query + name: pretty + schema: + type: string + - description: 'When present, indicates that modifications should not be persisted. + An invalid or unrecognized dryRun directive will result in an error response + and no further processing of the request. Valid values are: - All: all dry + run stages will be processed' + in: query + name: dryRun + schema: + type: string + - description: fieldManager is a name associated with the actor or entity that + is making these changes. The value must be less than or 128 characters long, + and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. + in: query + name: fieldManager + schema: + type: string + - description: 'fieldValidation instructs the server on how to handle objects + in the request (POST/PUT/PATCH) containing unknown or duplicate fields. + Valid values are: - Ignore: This will ignore any unknown fields that are + silently dropped from the object, and will ignore all but the last duplicate + field that the decoder encounters. This is the default behavior prior to + v1.23. - Warn: This will send a warning via the standard warning response + header for each unknown field that is dropped from the object, and for each + duplicate field that is encountered. The request will still succeed if there + are no other errors, and will only persist the last of any duplicate fields. + This is the default in v1.23+ - Strict: This will fail the request with + a BadRequest error if any unknown fields would be dropped from the object, + or if any duplicate fields are present. The error returned from the server + will contain all unknown and duplicate fields encountered.' + in: query + name: fieldValidation + schema: + type: string + requestBody: + content: + application/json: + schema: + $ref: '#/components/schemas/v1beta1.VolumeAttributesClass' + required: true + responses: + "200": + content: + application/json: + schema: + $ref: '#/components/schemas/v1beta1.VolumeAttributesClass' + application/yaml: + schema: + $ref: '#/components/schemas/v1beta1.VolumeAttributesClass' + application/vnd.kubernetes.protobuf: + schema: + $ref: '#/components/schemas/v1beta1.VolumeAttributesClass' + application/cbor: + schema: + $ref: '#/components/schemas/v1beta1.VolumeAttributesClass' + description: OK + "201": + content: + application/json: + schema: + $ref: '#/components/schemas/v1beta1.VolumeAttributesClass' + application/yaml: + schema: + $ref: '#/components/schemas/v1beta1.VolumeAttributesClass' + application/vnd.kubernetes.protobuf: + schema: + $ref: '#/components/schemas/v1beta1.VolumeAttributesClass' + application/cbor: + schema: + $ref: '#/components/schemas/v1beta1.VolumeAttributesClass' + description: Created + "202": + content: + application/json: + schema: + $ref: '#/components/schemas/v1beta1.VolumeAttributesClass' + application/yaml: + schema: + $ref: '#/components/schemas/v1beta1.VolumeAttributesClass' + application/vnd.kubernetes.protobuf: + schema: + $ref: '#/components/schemas/v1beta1.VolumeAttributesClass' + application/cbor: + schema: + $ref: '#/components/schemas/v1beta1.VolumeAttributesClass' + description: Accepted + "401": + content: {} + description: Unauthorized + tags: + - storage_v1beta1 + x-kubernetes-action: post + x-kubernetes-group-version-kind: + group: storage.k8s.io + kind: VolumeAttributesClass + version: v1beta1 + x-codegen-request-body-name: body + x-contentType: application/json + x-accepts: application/json + /apis/storage.k8s.io/v1beta1/volumeattributesclasses/{name}: + delete: + description: delete a VolumeAttributesClass + operationId: deleteVolumeAttributesClass + parameters: + - description: name of the VolumeAttributesClass + in: path + name: name + required: true + schema: + type: string + - description: If 'true', then the output is pretty printed. Defaults to 'false' + unless the user-agent indicates a browser or command-line HTTP tool (curl + and wget). + in: query + name: pretty + schema: + type: string + - description: 'When present, indicates that modifications should not be persisted. + An invalid or unrecognized dryRun directive will result in an error response + and no further processing of the request. Valid values are: - All: all dry + run stages will be processed' + in: query + name: dryRun + schema: + type: string + - description: The duration in seconds before the object should be deleted. + Value must be non-negative integer. The value zero indicates delete immediately. + If this value is nil, the default grace period for the specified type will + be used. Defaults to a per object value if not specified. zero means delete + immediately. + in: query + name: gracePeriodSeconds + schema: + type: integer + - description: 'if set to true, it will trigger an unsafe deletion of the resource + in case the normal deletion flow fails with a corrupt object error. A resource + is considered corrupt if it can not be retrieved from the underlying storage + successfully because of a) its data can not be transformed e.g. decryption + failure, or b) it fails to decode into an object. NOTE: unsafe deletion + ignores finalizer constraints, skips precondition checks, and removes the + object from the storage. WARNING: This may potentially break the cluster + if the workload associated with the resource being unsafe-deleted relies + on normal deletion flow. Use only if you REALLY know what you are doing. + The default value is false, and the user must opt in to enable it' + in: query + name: ignoreStoreReadErrorWithClusterBreakingPotential + schema: + type: boolean + - description: 'Deprecated: please use the PropagationPolicy, this field will + be deprecated in 1.7. Should the dependent objects be orphaned. If true/false, + the "orphan" finalizer will be added to/removed from the object''s finalizers + list. Either this field or PropagationPolicy may be set, but not both.' + in: query + name: orphanDependents + schema: + type: boolean + - description: 'Whether and how garbage collection will be performed. Either + this field or OrphanDependents may be set, but not both. The default policy + is decided by the existing finalizer set in the metadata.finalizers and + the resource-specific default policy. Acceptable values are: ''Orphan'' + - orphan the dependents; ''Background'' - allow the garbage collector to + delete the dependents in the background; ''Foreground'' - a cascading policy + that deletes all dependents in the foreground.' + in: query + name: propagationPolicy + schema: + type: string + requestBody: + content: + application/json: + schema: + $ref: '#/components/schemas/v1.DeleteOptions' + required: false + responses: + "200": + content: + application/json: + schema: + $ref: '#/components/schemas/v1beta1.VolumeAttributesClass' + application/yaml: + schema: + $ref: '#/components/schemas/v1beta1.VolumeAttributesClass' + application/vnd.kubernetes.protobuf: + schema: + $ref: '#/components/schemas/v1beta1.VolumeAttributesClass' + application/cbor: + schema: + $ref: '#/components/schemas/v1beta1.VolumeAttributesClass' + description: OK + "202": + content: + application/json: + schema: + $ref: '#/components/schemas/v1beta1.VolumeAttributesClass' + application/yaml: + schema: + $ref: '#/components/schemas/v1beta1.VolumeAttributesClass' + application/vnd.kubernetes.protobuf: + schema: + $ref: '#/components/schemas/v1beta1.VolumeAttributesClass' + application/cbor: + schema: + $ref: '#/components/schemas/v1beta1.VolumeAttributesClass' + description: Accepted + "401": + content: {} + description: Unauthorized + tags: + - storage_v1beta1 + x-kubernetes-action: delete + x-kubernetes-group-version-kind: + group: storage.k8s.io + kind: VolumeAttributesClass + version: v1beta1 + x-codegen-request-body-name: body + x-contentType: application/json + x-accepts: application/json + get: + description: read the specified VolumeAttributesClass + operationId: readVolumeAttributesClass + parameters: + - description: name of the VolumeAttributesClass + in: path + name: name + required: true + schema: + type: string + - description: If 'true', then the output is pretty printed. Defaults to 'false' + unless the user-agent indicates a browser or command-line HTTP tool (curl + and wget). + in: query + name: pretty + schema: + type: string + responses: + "200": + content: + application/json: + schema: + $ref: '#/components/schemas/v1beta1.VolumeAttributesClass' + application/yaml: + schema: + $ref: '#/components/schemas/v1beta1.VolumeAttributesClass' + application/vnd.kubernetes.protobuf: + schema: + $ref: '#/components/schemas/v1beta1.VolumeAttributesClass' + application/cbor: + schema: + $ref: '#/components/schemas/v1beta1.VolumeAttributesClass' + description: OK + "401": + content: {} + description: Unauthorized + tags: + - storage_v1beta1 + x-kubernetes-action: get + x-kubernetes-group-version-kind: + group: storage.k8s.io + kind: VolumeAttributesClass + version: v1beta1 + x-accepts: application/json + patch: + description: partially update the specified VolumeAttributesClass + operationId: patchVolumeAttributesClass + parameters: + - description: name of the VolumeAttributesClass + in: path + name: name + required: true + schema: + type: string + - description: If 'true', then the output is pretty printed. Defaults to 'false' + unless the user-agent indicates a browser or command-line HTTP tool (curl + and wget). + in: query + name: pretty + schema: + type: string + - description: 'When present, indicates that modifications should not be persisted. + An invalid or unrecognized dryRun directive will result in an error response + and no further processing of the request. Valid values are: - All: all dry + run stages will be processed' + in: query + name: dryRun + schema: + type: string + - description: fieldManager is a name associated with the actor or entity that + is making these changes. The value must be less than or 128 characters long, + and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. + This field is required for apply requests (application/apply-patch) but + optional for non-apply patch types (JsonPatch, MergePatch, StrategicMergePatch). + in: query + name: fieldManager + schema: + type: string + - description: 'fieldValidation instructs the server on how to handle objects + in the request (POST/PUT/PATCH) containing unknown or duplicate fields. + Valid values are: - Ignore: This will ignore any unknown fields that are + silently dropped from the object, and will ignore all but the last duplicate + field that the decoder encounters. This is the default behavior prior to + v1.23. - Warn: This will send a warning via the standard warning response + header for each unknown field that is dropped from the object, and for each + duplicate field that is encountered. The request will still succeed if there + are no other errors, and will only persist the last of any duplicate fields. + This is the default in v1.23+ - Strict: This will fail the request with + a BadRequest error if any unknown fields would be dropped from the object, + or if any duplicate fields are present. The error returned from the server + will contain all unknown and duplicate fields encountered.' + in: query + name: fieldValidation + schema: + type: string + - description: Force is going to "force" Apply requests. It means user will + re-acquire conflicting fields owned by other people. Force flag must be + unset for non-apply patch requests. + in: query + name: force + schema: + type: boolean + requestBody: + content: + application/json: + schema: + $ref: '#/components/schemas/v1.Patch' + required: true + responses: + "200": + content: + application/json: + schema: + $ref: '#/components/schemas/v1beta1.VolumeAttributesClass' + application/yaml: + schema: + $ref: '#/components/schemas/v1beta1.VolumeAttributesClass' + application/vnd.kubernetes.protobuf: + schema: + $ref: '#/components/schemas/v1beta1.VolumeAttributesClass' + application/cbor: + schema: + $ref: '#/components/schemas/v1beta1.VolumeAttributesClass' + description: OK + "201": + content: + application/json: + schema: + $ref: '#/components/schemas/v1beta1.VolumeAttributesClass' + application/yaml: + schema: + $ref: '#/components/schemas/v1beta1.VolumeAttributesClass' + application/vnd.kubernetes.protobuf: + schema: + $ref: '#/components/schemas/v1beta1.VolumeAttributesClass' + application/cbor: + schema: + $ref: '#/components/schemas/v1beta1.VolumeAttributesClass' + description: Created + "401": + content: {} + description: Unauthorized + tags: + - storage_v1beta1 + x-kubernetes-action: patch + x-kubernetes-group-version-kind: + group: storage.k8s.io + kind: VolumeAttributesClass + version: v1beta1 + x-codegen-request-body-name: body + x-contentType: application/json + x-accepts: application/json + put: + description: replace the specified VolumeAttributesClass + operationId: replaceVolumeAttributesClass + parameters: + - description: name of the VolumeAttributesClass + in: path + name: name + required: true + schema: + type: string + - description: If 'true', then the output is pretty printed. Defaults to 'false' + unless the user-agent indicates a browser or command-line HTTP tool (curl + and wget). + in: query + name: pretty + schema: + type: string + - description: 'When present, indicates that modifications should not be persisted. + An invalid or unrecognized dryRun directive will result in an error response + and no further processing of the request. Valid values are: - All: all dry + run stages will be processed' + in: query + name: dryRun + schema: + type: string + - description: fieldManager is a name associated with the actor or entity that + is making these changes. The value must be less than or 128 characters long, + and only contain printable characters, as defined by https://golang.org/pkg/unicode/#IsPrint. + in: query + name: fieldManager + schema: + type: string + - description: 'fieldValidation instructs the server on how to handle objects + in the request (POST/PUT/PATCH) containing unknown or duplicate fields. + Valid values are: - Ignore: This will ignore any unknown fields that are + silently dropped from the object, and will ignore all but the last duplicate + field that the decoder encounters. This is the default behavior prior to + v1.23. - Warn: This will send a warning via the standard warning response + header for each unknown field that is dropped from the object, and for each + duplicate field that is encountered. The request will still succeed if there + are no other errors, and will only persist the last of any duplicate fields. + This is the default in v1.23+ - Strict: This will fail the request with + a BadRequest error if any unknown fields would be dropped from the object, + or if any duplicate fields are present. The error returned from the server + will contain all unknown and duplicate fields encountered.' + in: query + name: fieldValidation + schema: + type: string + requestBody: + content: + application/json: + schema: + $ref: '#/components/schemas/v1beta1.VolumeAttributesClass' + required: true + responses: + "200": + content: + application/json: + schema: + $ref: '#/components/schemas/v1beta1.VolumeAttributesClass' + application/yaml: + schema: + $ref: '#/components/schemas/v1beta1.VolumeAttributesClass' + application/vnd.kubernetes.protobuf: + schema: + $ref: '#/components/schemas/v1beta1.VolumeAttributesClass' + application/cbor: + schema: + $ref: '#/components/schemas/v1beta1.VolumeAttributesClass' + description: OK + "201": + content: + application/json: + schema: + $ref: '#/components/schemas/v1beta1.VolumeAttributesClass' + application/yaml: + schema: + $ref: '#/components/schemas/v1beta1.VolumeAttributesClass' + application/vnd.kubernetes.protobuf: + schema: + $ref: '#/components/schemas/v1beta1.VolumeAttributesClass' + application/cbor: + schema: + $ref: '#/components/schemas/v1beta1.VolumeAttributesClass' + description: Created + "401": + content: {} + description: Unauthorized + tags: + - storage_v1beta1 + x-kubernetes-action: put + x-kubernetes-group-version-kind: + group: storage.k8s.io + kind: VolumeAttributesClass + version: v1beta1 + x-codegen-request-body-name: body + x-contentType: application/json + x-accepts: application/json + /apis/storage.k8s.io/v1beta1/watch/volumeattributesclasses: {} + /apis/storage.k8s.io/v1beta1/watch/volumeattributesclasses/{name}: {} + /apis/storagemigration.k8s.io/: + get: + description: get information of a group + operationId: getAPIGroup + responses: + "200": + content: + application/json: + schema: + $ref: '#/components/schemas/v1.APIGroup' + application/yaml: + schema: + $ref: '#/components/schemas/v1.APIGroup' + application/vnd.kubernetes.protobuf: + schema: + $ref: '#/components/schemas/v1.APIGroup' + description: OK + "401": + content: {} + description: Unauthorized + tags: + - storagemigration + x-accepts: application/json + /apis/storagemigration.k8s.io/v1alpha1/: get: description: get available resources operationId: getAPIResources @@ -92401,54 +94170,97 @@ components: - expression - name type: object - v1beta1.AuditAnnotation: - description: AuditAnnotation describes how to produce an audit annotation for - an API request. + v1beta1.ApplyConfiguration: + description: ApplyConfiguration defines the desired configuration values of + an object. example: - valueExpression: valueExpression - key: key + expression: expression properties: - key: - description: |- - key specifies the audit annotation key. The audit annotation keys of a ValidatingAdmissionPolicy must be unique. The key must be a qualified name ([A-Za-z0-9][-A-Za-z0-9_.]*) no more than 63 bytes in length. - - The key is combined with the resource name of the ValidatingAdmissionPolicy to construct an audit annotation key: "{ValidatingAdmissionPolicy name}/{key}". - - If an admission webhook uses the same resource name as this ValidatingAdmissionPolicy and the same audit annotation key, the annotation key will be identical. In this case, the first annotation written with the key will be included in the audit event and all subsequent annotations with the same key will be discarded. - - Required. - type: string - valueExpression: - description: |- - valueExpression represents the expression which is evaluated by CEL to produce an audit annotation value. The expression must evaluate to either a string or null value. If the expression evaluates to a string, the audit annotation is included with the string value. If the expression evaluates to null or empty string the audit annotation will be omitted. The valueExpression may be no longer than 5kb in length. If the result of the valueExpression is more than 10kb in length, it will be truncated to 10kb. - - If multiple ValidatingAdmissionPolicyBinding resources match an API request, then the valueExpression will be evaluated for each binding. All unique values produced by the valueExpressions will be joined together in a comma-separated list. - - Required. + expression: + description: "expression will be evaluated by CEL to create an apply configuration.\ + \ ref: https://github.com/google/cel-spec\n\nApply configurations are\ + \ declared in CEL using object initialization. For example, this CEL expression\ + \ returns an apply configuration to set a single field:\n\n\tObject{\n\ + \t spec: Object.spec{\n\t serviceAccountName: \"example\"\n\t }\n\ + \t}\n\nApply configurations may not modify atomic structs, maps or arrays\ + \ due to the risk of accidental deletion of values not included in the\ + \ apply configuration.\n\nCEL expressions have access to the object types\ + \ needed to create apply configurations:\n\n- 'Object' - CEL type of the\ + \ resource object. - 'Object.' - CEL type of object field (such\ + \ as 'Object.spec') - 'Object.....`\ + \ - CEL type of nested field (such as 'Object.spec.containers')\n\nCEL\ + \ expressions have access to the contents of the API request, organized\ + \ into CEL variables as well as some other useful variables:\n\n- 'object'\ + \ - The object from the incoming request. The value is null for DELETE\ + \ requests. - 'oldObject' - The existing object. The value is null for\ + \ CREATE requests. - 'request' - Attributes of the API request([ref](/pkg/apis/admission/types.go#AdmissionRequest)).\ + \ - 'params' - Parameter resource referred to by the policy binding being\ + \ evaluated. Only populated if the policy has a ParamKind. - 'namespaceObject'\ + \ - The namespace object that the incoming object belongs to. The value\ + \ is null for cluster-scoped resources. - 'variables' - Map of composited\ + \ variables, from its name to its lazily evaluated value.\n For example,\ + \ a variable named 'foo' can be accessed as 'variables.foo'.\n- 'authorizer'\ + \ - A CEL Authorizer. May be used to perform authorization checks for\ + \ the principal (user or service account) of the request.\n See https://pkg.go.dev/k8s.io/apiserver/pkg/cel/library#Authz\n\ + - 'authorizer.requestResource' - A CEL ResourceCheck constructed from\ + \ the 'authorizer' and configured with the\n request resource.\n\nThe\ + \ `apiVersion`, `kind`, `metadata.name` and `metadata.generateName` are\ + \ always accessible from the root of the object. No other metadata properties\ + \ are accessible.\n\nOnly property names of the form `[a-zA-Z_.-/][a-zA-Z0-9_.-/]*`\ + \ are accessible. Required." type: string - required: - - key - - valueExpression type: object - v1beta1.ExpressionWarning: - description: ExpressionWarning is a warning information that targets a specific - expression. + v1beta1.JSONPatch: + description: JSONPatch defines a JSON Patch. example: - fieldRef: fieldRef - warning: warning + expression: expression properties: - fieldRef: - description: The path to the field that refers the expression. For example, - the reference to the expression of the first item of validations is "spec.validations[0].expression" - type: string - warning: - description: The content of type checking information in a human-readable - form. Each line of the warning contains the type that the expression is - checked against, followed by the type check error from the compiler. + expression: + description: "expression will be evaluated by CEL to create a [JSON patch](https://jsonpatch.com/).\ + \ ref: https://github.com/google/cel-spec\n\nexpression must return an\ + \ array of JSONPatch values.\n\nFor example, this CEL expression returns\ + \ a JSON patch to conditionally modify a value:\n\n\t [\n\t JSONPatch{op:\ + \ \"test\", path: \"/spec/example\", value: \"Red\"},\n\t JSONPatch{op:\ + \ \"replace\", path: \"/spec/example\", value: \"Green\"}\n\t ]\n\nTo\ + \ define an object for the patch value, use Object types. For example:\n\ + \n\t [\n\t JSONPatch{\n\t op: \"add\",\n\t path: \"/spec/selector\"\ + ,\n\t value: Object.spec.selector{matchLabels: {\"environment\":\ + \ \"test\"}}\n\t }\n\t ]\n\nTo use strings containing '/' and '~'\ + \ as JSONPatch path keys, use \"jsonpatch.escapeKey\". For example:\n\n\ + \t [\n\t JSONPatch{\n\t op: \"add\",\n\t path: \"/metadata/labels/\"\ + \ + jsonpatch.escapeKey(\"example.com/environment\"),\n\t value:\ + \ \"test\"\n\t },\n\t ]\n\nCEL expressions have access to the types\ + \ needed to create JSON patches and objects:\n\n- 'JSONPatch' - CEL type\ + \ of JSON Patch operations. JSONPatch has the fields 'op', 'from', 'path'\ + \ and 'value'.\n See [JSON patch](https://jsonpatch.com/) for more details.\ + \ The 'value' field may be set to any of: string,\n integer, array, map\ + \ or object. If set, the 'path' and 'from' fields must be set to a\n\ + \ [JSON pointer](https://datatracker.ietf.org/doc/html/rfc6901/) string,\ + \ where the 'jsonpatch.escapeKey()' CEL\n function may be used to escape\ + \ path keys containing '/' and '~'.\n- 'Object' - CEL type of the resource\ + \ object. - 'Object.' - CEL type of object field (such as 'Object.spec')\ + \ - 'Object.....` - CEL type of nested\ + \ field (such as 'Object.spec.containers')\n\nCEL expressions have access\ + \ to the contents of the API request, organized into CEL variables as\ + \ well as some other useful variables:\n\n- 'object' - The object from\ + \ the incoming request. The value is null for DELETE requests. - 'oldObject'\ + \ - The existing object. The value is null for CREATE requests. - 'request'\ + \ - Attributes of the API request([ref](/pkg/apis/admission/types.go#AdmissionRequest)).\ + \ - 'params' - Parameter resource referred to by the policy binding being\ + \ evaluated. Only populated if the policy has a ParamKind. - 'namespaceObject'\ + \ - The namespace object that the incoming object belongs to. The value\ + \ is null for cluster-scoped resources. - 'variables' - Map of composited\ + \ variables, from its name to its lazily evaluated value.\n For example,\ + \ a variable named 'foo' can be accessed as 'variables.foo'.\n- 'authorizer'\ + \ - A CEL Authorizer. May be used to perform authorization checks for\ + \ the principal (user or service account) of the request.\n See https://pkg.go.dev/k8s.io/apiserver/pkg/cel/library#Authz\n\ + - 'authorizer.requestResource' - A CEL ResourceCheck constructed from\ + \ the 'authorizer' and configured with the\n request resource.\n\nCEL\ + \ expressions have access to [Kubernetes CEL function libraries](https://kubernetes.io/docs/reference/using-api/cel/#cel-options-language-features-and-libraries)\ + \ as well as:\n\n- 'jsonpatch.escapeKey' - Performs JSONPatch key escaping.\ + \ '~' and '/' are escaped as '~0' and `~1' respectively).\n\nOnly property\ + \ names of the form `[a-zA-Z_.-/][a-zA-Z0-9_.-/]*` are accessible. Required." type: string - required: - - fieldRef - - warning type: object v1beta1.MatchCondition: description: MatchCondition represents a condition which must be fulfilled for @@ -92613,168 +94425,9 @@ components: x-kubernetes-list-type: atomic type: object x-kubernetes-map-type: atomic - v1beta1.NamedRuleWithOperations: - description: NamedRuleWithOperations is a tuple of Operations and Resources - with ResourceNames. - example: - resourceNames: - - resourceNames - - resourceNames - operations: - - operations - - operations - apiVersions: - - apiVersions - - apiVersions - scope: scope - resources: - - resources - - resources - apiGroups: - - apiGroups - - apiGroups - properties: - apiGroups: - description: APIGroups is the API groups the resources belong to. '*' is - all groups. If '*' is present, the length of the slice must be one. Required. - items: - type: string - type: array - x-kubernetes-list-type: atomic - apiVersions: - description: APIVersions is the API versions the resources belong to. '*' - is all versions. If '*' is present, the length of the slice must be one. - Required. - items: - type: string - type: array - x-kubernetes-list-type: atomic - operations: - description: Operations is the operations the admission hook cares about - - CREATE, UPDATE, DELETE, CONNECT or * for all of those operations and - any future admission operations that are added. If '*' is present, the - length of the slice must be one. Required. - items: - type: string - type: array - x-kubernetes-list-type: atomic - resourceNames: - description: ResourceNames is an optional white list of names that the rule - applies to. An empty set means that everything is allowed. - items: - type: string - type: array - x-kubernetes-list-type: atomic - resources: - description: |- - Resources is a list of resources this rule applies to. - - For example: 'pods' means pods. 'pods/log' means the log subresource of pods. '*' means all resources, but not subresources. 'pods/*' means all subresources of pods. '*/scale' means all scale subresources. '*/*' means all resources and their subresources. - - If wildcard is present, the validation rule will ensure resources do not overlap with each other. - - Depending on the enclosing object, subresources might not be allowed. Required. - items: - type: string - type: array - x-kubernetes-list-type: atomic - scope: - description: scope specifies the scope of this rule. Valid values are "Cluster", - "Namespaced", and "*" "Cluster" means that only cluster-scoped resources - will match this rule. Namespace API objects are cluster-scoped. "Namespaced" - means that only namespaced resources will match this rule. "*" means that - there are no scope restrictions. Subresources match the scope of their - parent resource. Default is "*". - type: string - type: object - x-kubernetes-map-type: atomic - v1beta1.ParamKind: - description: ParamKind is a tuple of Group Kind and Version. - example: - apiVersion: apiVersion - kind: kind - properties: - apiVersion: - description: APIVersion is the API group version the resources belong to. - In format of "group/version". Required. - type: string - kind: - description: Kind is the API kind the resources belong to. Required. - type: string - type: object - x-kubernetes-map-type: atomic - v1beta1.ParamRef: - description: ParamRef describes how to locate the params to be used as input - to expressions of rules applied by a policy binding. - example: - name: name - namespace: namespace - selector: - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchLabels: - key: matchLabels - parameterNotFoundAction: parameterNotFoundAction - properties: - name: - description: |- - name is the name of the resource being referenced. - - One of `name` or `selector` must be set, but `name` and `selector` are mutually exclusive properties. If one is set, the other must be unset. - - A single parameter used for all admission requests can be configured by setting the `name` field, leaving `selector` blank, and setting namespace if `paramKind` is namespace-scoped. - type: string - namespace: - description: |- - namespace is the namespace of the referenced resource. Allows limiting the search for params to a specific namespace. Applies to both `name` and `selector` fields. - - A per-namespace parameter may be used by specifying a namespace-scoped `paramKind` in the policy and leaving this field empty. - - - If `paramKind` is cluster-scoped, this field MUST be unset. Setting this field results in a configuration error. - - - If `paramKind` is namespace-scoped, the namespace of the object being evaluated for admission will be used when this field is left unset. Take care that if this is left empty the binding must not match any cluster-scoped resources, which will result in an error. - type: string - parameterNotFoundAction: - description: |- - `parameterNotFoundAction` controls the behavior of the binding when the resource exists, and name or selector is valid, but there are no parameters matched by the binding. If the value is set to `Allow`, then no matched parameters will be treated as successful validation by the binding. If set to `Deny`, then no matched parameters will be subject to the `failurePolicy` of the policy. - - Allowed values are `Allow` or `Deny` - - Required - type: string - selector: - $ref: '#/components/schemas/v1.LabelSelector' - type: object - x-kubernetes-map-type: atomic - v1beta1.TypeChecking: - description: TypeChecking contains results of type checking the expressions - in the ValidatingAdmissionPolicy - example: - expressionWarnings: - - fieldRef: fieldRef - warning: warning - - fieldRef: fieldRef - warning: warning - properties: - expressionWarnings: - description: The type checking warnings for each expression. - items: - $ref: '#/components/schemas/v1beta1.ExpressionWarning' - type: array - x-kubernetes-list-type: atomic - type: object - v1beta1.ValidatingAdmissionPolicy: - description: ValidatingAdmissionPolicy describes the definition of an admission - validation policy that accepts or rejects an object without changing it. + v1beta1.MutatingAdmissionPolicy: + description: MutatingAdmissionPolicy describes the definition of an admission + mutation policy that mutates the object coming into admission chain. example: metadata: generation: 6 @@ -92825,19 +94478,26 @@ components: apiVersion: apiVersion kind: kind spec: + reinvocationPolicy: reinvocationPolicy variables: - expression: expression name: name - expression: expression name: name + mutations: + - patchType: patchType + applyConfiguration: + expression: expression + jsonPatch: + expression: expression + - patchType: patchType + applyConfiguration: + expression: expression + jsonPatch: + expression: expression paramKind: apiVersion: apiVersion kind: kind - auditAnnotations: - - valueExpression: valueExpression - key: key - - valueExpression: valueExpression - key: key matchConditions: - expression: expression name: name @@ -92939,37 +94599,7 @@ components: operator: operator matchLabels: key: matchLabels - validations: - - reason: reason - expression: expression - messageExpression: messageExpression - message: message - - reason: reason - expression: expression - messageExpression: messageExpression - message: message failurePolicy: failurePolicy - status: - typeChecking: - expressionWarnings: - - fieldRef: fieldRef - warning: warning - - fieldRef: fieldRef - warning: warning - conditions: - - reason: reason - lastTransitionTime: 2000-01-23T04:56:07.000+00:00 - message: message - type: type - observedGeneration: 5 - status: status - - reason: reason - lastTransitionTime: 2000-01-23T04:56:07.000+00:00 - message: message - type: type - observedGeneration: 5 - status: status - observedGeneration: 0 properties: apiVersion: description: 'APIVersion defines the versioned schema of this representation @@ -92984,23 +94614,21 @@ components: metadata: $ref: '#/components/schemas/v1.ObjectMeta' spec: - $ref: '#/components/schemas/v1beta1.ValidatingAdmissionPolicySpec' - status: - $ref: '#/components/schemas/v1beta1.ValidatingAdmissionPolicyStatus' + $ref: '#/components/schemas/v1beta1.MutatingAdmissionPolicySpec' type: object x-kubernetes-group-version-kind: - group: admissionregistration.k8s.io - kind: ValidatingAdmissionPolicy + kind: MutatingAdmissionPolicy version: v1beta1 x-implements: - io.kubernetes.client.common.KubernetesObject - v1beta1.ValidatingAdmissionPolicyBinding: + v1beta1.MutatingAdmissionPolicyBinding: description: |- - ValidatingAdmissionPolicyBinding binds the ValidatingAdmissionPolicy with paramerized resources. ValidatingAdmissionPolicyBinding and parameter CRDs together define how cluster administrators configure policies for clusters. + MutatingAdmissionPolicyBinding binds the MutatingAdmissionPolicy with parametrized resources. MutatingAdmissionPolicyBinding and the optional parameter resource together define how cluster administrators configure policies for clusters. - For a given admission request, each binding will cause its policy to be evaluated N times, where N is 1 for policies/bindings that don't use params, otherwise N is the number of parameters selected by the binding. + For a given admission request, each binding will cause its policy to be evaluated N times, where N is 1 for policies/bindings that don't use params, otherwise N is the number of parameters selected by the binding. Each evaluation is constrained by a [runtime cost budget](https://kubernetes.io/docs/reference/using-api/cel/#runtime-cost-budget). - The CEL expressions of a policy must have a computed CEL cost below the maximum CEL budget. Each evaluation of the policy is given an independent CEL cost budget. Adding/removing policies, bindings, or params can not affect whether a given (policy, binding, param) combination is within its own CEL budget. + Adding/removing policies, bindings, or params can not affect whether a given (policy, binding, param) combination is within its own CEL budget. example: metadata: generation: 6 @@ -93166,9 +94794,6 @@ components: operator: operator matchLabels: key: matchLabels - validationActions: - - validationActions - - validationActions properties: apiVersion: description: 'APIVersion defines the versioned schema of this representation @@ -93183,16 +94808,16 @@ components: metadata: $ref: '#/components/schemas/v1.ObjectMeta' spec: - $ref: '#/components/schemas/v1beta1.ValidatingAdmissionPolicyBindingSpec' + $ref: '#/components/schemas/v1beta1.MutatingAdmissionPolicyBindingSpec' type: object x-kubernetes-group-version-kind: - group: admissionregistration.k8s.io - kind: ValidatingAdmissionPolicyBinding + kind: MutatingAdmissionPolicyBinding version: v1beta1 x-implements: - io.kubernetes.client.common.KubernetesObject - v1beta1.ValidatingAdmissionPolicyBindingList: - description: ValidatingAdmissionPolicyBindingList is a list of ValidatingAdmissionPolicyBinding. + v1beta1.MutatingAdmissionPolicyBindingList: + description: MutatingAdmissionPolicyBindingList is a list of MutatingAdmissionPolicyBinding. example: metadata: remainingItemCount: 1 @@ -93366,9 +94991,6 @@ components: operator: operator matchLabels: key: matchLabels - validationActions: - - validationActions - - validationActions - metadata: generation: 6 finalizers: @@ -93533,9 +95155,6 @@ components: operator: operator matchLabels: key: matchLabels - validationActions: - - validationActions - - validationActions properties: apiVersion: description: 'APIVersion defines the versioned schema of this representation @@ -93545,7 +95164,7 @@ components: items: description: List of PolicyBinding. items: - $ref: '#/components/schemas/v1beta1.ValidatingAdmissionPolicyBinding' + $ref: '#/components/schemas/v1beta1.MutatingAdmissionPolicyBinding' type: array kind: description: 'Kind is a string value representing the REST resource this @@ -93559,13 +95178,13 @@ components: type: object x-kubernetes-group-version-kind: - group: admissionregistration.k8s.io - kind: ValidatingAdmissionPolicyBindingList + kind: MutatingAdmissionPolicyBindingList version: v1beta1 x-implements: - io.kubernetes.client.common.KubernetesListObject - v1beta1.ValidatingAdmissionPolicyBindingSpec: - description: ValidatingAdmissionPolicyBindingSpec is the specification of the - ValidatingAdmissionPolicyBinding. + v1beta1.MutatingAdmissionPolicyBindingSpec: + description: MutatingAdmissionPolicyBindingSpec is the specification of the + MutatingAdmissionPolicyBinding. example: paramRef: name: name @@ -93682,48 +95301,20 @@ components: operator: operator matchLabels: key: matchLabels - validationActions: - - validationActions - - validationActions properties: matchResources: $ref: '#/components/schemas/v1beta1.MatchResources' paramRef: $ref: '#/components/schemas/v1beta1.ParamRef' policyName: - description: PolicyName references a ValidatingAdmissionPolicy name which - the ValidatingAdmissionPolicyBinding binds to. If the referenced resource + description: policyName references a MutatingAdmissionPolicy name which + the MutatingAdmissionPolicyBinding binds to. If the referenced resource does not exist, this binding is considered invalid and will be ignored Required. type: string - validationActions: - description: |- - validationActions declares how Validations of the referenced ValidatingAdmissionPolicy are enforced. If a validation evaluates to false it is always enforced according to these actions. - - Failures defined by the ValidatingAdmissionPolicy's FailurePolicy are enforced according to these actions only if the FailurePolicy is set to Fail, otherwise the failures are ignored. This includes compilation errors, runtime errors and misconfigurations of the policy. - - validationActions is declared as a set of action values. Order does not matter. validationActions may not contain duplicates of the same action. - - The supported actions values are: - - "Deny" specifies that a validation failure results in a denied request. - - "Warn" specifies that a validation failure is reported to the request client in HTTP Warning headers, with a warning code of 299. Warnings can be sent both for allowed or denied admission responses. - - "Audit" specifies that a validation failure is included in the published audit event for the request. The audit event will contain a `validation.policy.admission.k8s.io/validation_failure` audit annotation with a value containing the details of the validation failures, formatted as a JSON list of objects, each with the following fields: - message: The validation failure message string - policy: The resource name of the ValidatingAdmissionPolicy - binding: The resource name of the ValidatingAdmissionPolicyBinding - expressionIndex: The index of the failed validations in the ValidatingAdmissionPolicy - validationActions: The enforcement actions enacted for the validation failure Example audit annotation: `"validation.policy.admission.k8s.io/validation_failure": "[{\"message\": \"Invalid value\", {\"policy\": \"policy.example.com\", {\"binding\": \"policybinding.example.com\", {\"expressionIndex\": \"1\", {\"validationActions\": [\"Audit\"]}]"` - - Clients should expect to handle additional values by ignoring any values not recognized. - - "Deny" and "Warn" may not be used together since this combination needlessly duplicates the validation failure both in the API response body and the HTTP warning headers. - - Required. - items: - type: string - type: array - x-kubernetes-list-type: set type: object - v1beta1.ValidatingAdmissionPolicyList: - description: ValidatingAdmissionPolicyList is a list of ValidatingAdmissionPolicy. + v1beta1.MutatingAdmissionPolicyList: + description: MutatingAdmissionPolicyList is a list of MutatingAdmissionPolicy. example: metadata: remainingItemCount: 1 @@ -93782,19 +95373,26 @@ components: apiVersion: apiVersion kind: kind spec: + reinvocationPolicy: reinvocationPolicy variables: - expression: expression name: name - expression: expression name: name + mutations: + - patchType: patchType + applyConfiguration: + expression: expression + jsonPatch: + expression: expression + - patchType: patchType + applyConfiguration: + expression: expression + jsonPatch: + expression: expression paramKind: apiVersion: apiVersion kind: kind - auditAnnotations: - - valueExpression: valueExpression - key: key - - valueExpression: valueExpression - key: key matchConditions: - expression: expression name: name @@ -93896,37 +95494,7 @@ components: operator: operator matchLabels: key: matchLabels - validations: - - reason: reason - expression: expression - messageExpression: messageExpression - message: message - - reason: reason - expression: expression - messageExpression: messageExpression - message: message failurePolicy: failurePolicy - status: - typeChecking: - expressionWarnings: - - fieldRef: fieldRef - warning: warning - - fieldRef: fieldRef - warning: warning - conditions: - - reason: reason - lastTransitionTime: 2000-01-23T04:56:07.000+00:00 - message: message - type: type - observedGeneration: 5 - status: status - - reason: reason - lastTransitionTime: 2000-01-23T04:56:07.000+00:00 - message: message - type: type - observedGeneration: 5 - status: status - observedGeneration: 0 - metadata: generation: 6 finalizers: @@ -93976,19 +95544,26 @@ components: apiVersion: apiVersion kind: kind spec: + reinvocationPolicy: reinvocationPolicy variables: - expression: expression name: name - expression: expression name: name + mutations: + - patchType: patchType + applyConfiguration: + expression: expression + jsonPatch: + expression: expression + - patchType: patchType + applyConfiguration: + expression: expression + jsonPatch: + expression: expression paramKind: apiVersion: apiVersion kind: kind - auditAnnotations: - - valueExpression: valueExpression - key: key - - valueExpression: valueExpression - key: key matchConditions: - expression: expression name: name @@ -94090,37 +95665,7 @@ components: operator: operator matchLabels: key: matchLabels - validations: - - reason: reason - expression: expression - messageExpression: messageExpression - message: message - - reason: reason - expression: expression - messageExpression: messageExpression - message: message failurePolicy: failurePolicy - status: - typeChecking: - expressionWarnings: - - fieldRef: fieldRef - warning: warning - - fieldRef: fieldRef - warning: warning - conditions: - - reason: reason - lastTransitionTime: 2000-01-23T04:56:07.000+00:00 - message: message - type: type - observedGeneration: 5 - status: status - - reason: reason - lastTransitionTime: 2000-01-23T04:56:07.000+00:00 - message: message - type: type - observedGeneration: 5 - status: status - observedGeneration: 0 properties: apiVersion: description: 'APIVersion defines the versioned schema of this representation @@ -94130,7 +95675,7 @@ components: items: description: List of ValidatingAdmissionPolicy. items: - $ref: '#/components/schemas/v1beta1.ValidatingAdmissionPolicy' + $ref: '#/components/schemas/v1beta1.MutatingAdmissionPolicy' type: array kind: description: 'Kind is a string value representing the REST resource this @@ -94144,27 +95689,34 @@ components: type: object x-kubernetes-group-version-kind: - group: admissionregistration.k8s.io - kind: ValidatingAdmissionPolicyList + kind: MutatingAdmissionPolicyList version: v1beta1 x-implements: - io.kubernetes.client.common.KubernetesListObject - v1beta1.ValidatingAdmissionPolicySpec: - description: ValidatingAdmissionPolicySpec is the specification of the desired - behavior of the AdmissionPolicy. + v1beta1.MutatingAdmissionPolicySpec: + description: MutatingAdmissionPolicySpec is the specification of the desired + behavior of the admission policy. example: + reinvocationPolicy: reinvocationPolicy variables: - expression: expression name: name - expression: expression name: name + mutations: + - patchType: patchType + applyConfiguration: + expression: expression + jsonPatch: + expression: expression + - patchType: patchType + applyConfiguration: + expression: expression + jsonPatch: + expression: expression paramKind: apiVersion: apiVersion kind: kind - auditAnnotations: - - valueExpression: valueExpression - key: key - - valueExpression: valueExpression - key: key matchConditions: - expression: expression name: name @@ -94266,41 +95818,21 @@ components: operator: operator matchLabels: key: matchLabels - validations: - - reason: reason - expression: expression - messageExpression: messageExpression - message: message - - reason: reason - expression: expression - messageExpression: messageExpression - message: message failurePolicy: failurePolicy properties: - auditAnnotations: - description: auditAnnotations contains CEL expressions which are used to - produce audit annotations for the audit event of the API request. validations - and auditAnnotations may not both be empty; a least one of validations - or auditAnnotations is required. - items: - $ref: '#/components/schemas/v1beta1.AuditAnnotation' - type: array - x-kubernetes-list-type: atomic failurePolicy: description: |- failurePolicy defines how to handle failures for the admission policy. Failures can occur from CEL expression parse errors, type check errors, runtime errors and invalid or mis-configured policy definitions or bindings. - A policy is invalid if spec.paramKind refers to a non-existent Kind. A binding is invalid if spec.paramRef.name refers to a non-existent resource. + A policy is invalid if paramKind refers to a non-existent Kind. A binding is invalid if paramRef.name refers to a non-existent resource. failurePolicy does not define how validations that evaluate to false are handled. - When failurePolicy is set to Fail, ValidatingAdmissionPolicyBinding validationActions define how failures are enforced. - Allowed values are Ignore or Fail. Defaults to Fail. type: string matchConditions: description: |- - MatchConditions is a list of conditions that must be met for a request to be validated. Match conditions filter requests that have already been matched by the rules, namespaceSelector, and objectSelector. An empty list of matchConditions matches all requests. There are a maximum of 64 match conditions allowed. + matchConditions is a list of conditions that must be met for a request to be validated. Match conditions filter requests that have already been matched by the matchConstraints. An empty list of matchConditions matches all requests. There are a maximum of 64 match conditions allowed. If a parameter object is provided, it can be accessed via the `params` handle in the same manner as validation expressions. @@ -94320,160 +95852,199 @@ components: x-kubernetes-patch-merge-key: name matchConstraints: $ref: '#/components/schemas/v1beta1.MatchResources' - paramKind: - $ref: '#/components/schemas/v1beta1.ParamKind' - validations: - description: Validations contain CEL expressions which is used to apply - the validation. Validations and AuditAnnotations may not both be empty; - a minimum of one Validations or AuditAnnotations is required. + mutations: + description: mutations contain operations to perform on matching objects. + mutations may not be empty; a minimum of one mutation is required. mutations + are evaluated in order, and are reinvoked according to the reinvocationPolicy. + The mutations of a policy are invoked for each binding of this policy + and reinvocation of mutations occurs on a per binding basis. items: - $ref: '#/components/schemas/v1beta1.Validation' + $ref: '#/components/schemas/v1beta1.Mutation' type: array x-kubernetes-list-type: atomic + paramKind: + $ref: '#/components/schemas/v1beta1.ParamKind' + reinvocationPolicy: + description: |- + reinvocationPolicy indicates whether mutations may be called multiple times per MutatingAdmissionPolicyBinding as part of a single admission evaluation. Allowed values are "Never" and "IfNeeded". + + Never: These mutations will not be called more than once per binding in a single admission evaluation. + + IfNeeded: These mutations may be invoked more than once per binding for a single admission request and there is no guarantee of order with respect to other admission plugins, admission webhooks, bindings of this policy and admission policies. Mutations are only reinvoked when mutations change the object after this mutation is invoked. Required. + type: string variables: description: |- - Variables contain definitions of variables that can be used in composition of other expressions. Each variable is defined as a named CEL expression. The variables defined here will be available under `variables` in other expressions of the policy except MatchConditions because MatchConditions are evaluated before the rest of the policy. + variables contain definitions of variables that can be used in composition of other expressions. Each variable is defined as a named CEL expression. The variables defined here will be available under `variables` in other expressions of the policy except matchConditions because matchConditions are evaluated before the rest of the policy. - The expression of a variable can refer to other variables defined earlier in the list but not those after. Thus, Variables must be sorted by the order of first appearance and acyclic. + The expression of a variable can refer to other variables defined earlier in the list but not those after. Thus, variables must be sorted by the order of first appearance and acyclic. items: $ref: '#/components/schemas/v1beta1.Variable' type: array - x-kubernetes-patch-strategy: merge - x-kubernetes-list-type: map - x-kubernetes-list-map-keys: - - name - x-kubernetes-patch-merge-key: name + x-kubernetes-list-type: atomic type: object - v1beta1.ValidatingAdmissionPolicyStatus: - description: ValidatingAdmissionPolicyStatus represents the status of an admission - validation policy. + v1beta1.Mutation: + description: Mutation specifies the CEL expression which is used to apply the + Mutation. example: - typeChecking: - expressionWarnings: - - fieldRef: fieldRef - warning: warning - - fieldRef: fieldRef - warning: warning - conditions: - - reason: reason - lastTransitionTime: 2000-01-23T04:56:07.000+00:00 - message: message - type: type - observedGeneration: 5 - status: status - - reason: reason - lastTransitionTime: 2000-01-23T04:56:07.000+00:00 - message: message - type: type - observedGeneration: 5 - status: status - observedGeneration: 0 + patchType: patchType + applyConfiguration: + expression: expression + jsonPatch: + expression: expression properties: - conditions: - description: The conditions represent the latest available observations - of a policy's current state. + applyConfiguration: + $ref: '#/components/schemas/v1beta1.ApplyConfiguration' + jsonPatch: + $ref: '#/components/schemas/v1beta1.JSONPatch' + patchType: + description: patchType indicates the patch strategy used. Allowed values + are "ApplyConfiguration" and "JSONPatch". Required. + type: string + required: + - patchType + type: object + v1beta1.NamedRuleWithOperations: + description: NamedRuleWithOperations is a tuple of Operations and Resources + with ResourceNames. + example: + resourceNames: + - resourceNames + - resourceNames + operations: + - operations + - operations + apiVersions: + - apiVersions + - apiVersions + scope: scope + resources: + - resources + - resources + apiGroups: + - apiGroups + - apiGroups + properties: + apiGroups: + description: APIGroups is the API groups the resources belong to. '*' is + all groups. If '*' is present, the length of the slice must be one. Required. items: - $ref: '#/components/schemas/v1.Condition' + type: string type: array - x-kubernetes-list-type: map - x-kubernetes-list-map-keys: - - type - observedGeneration: - description: The generation observed by the controller. - format: int64 - type: integer - typeChecking: - $ref: '#/components/schemas/v1beta1.TypeChecking' + x-kubernetes-list-type: atomic + apiVersions: + description: APIVersions is the API versions the resources belong to. '*' + is all versions. If '*' is present, the length of the slice must be one. + Required. + items: + type: string + type: array + x-kubernetes-list-type: atomic + operations: + description: Operations is the operations the admission hook cares about + - CREATE, UPDATE, DELETE, CONNECT or * for all of those operations and + any future admission operations that are added. If '*' is present, the + length of the slice must be one. Required. + items: + type: string + type: array + x-kubernetes-list-type: atomic + resourceNames: + description: ResourceNames is an optional white list of names that the rule + applies to. An empty set means that everything is allowed. + items: + type: string + type: array + x-kubernetes-list-type: atomic + resources: + description: |- + Resources is a list of resources this rule applies to. + + For example: 'pods' means pods. 'pods/log' means the log subresource of pods. '*' means all resources, but not subresources. 'pods/*' means all subresources of pods. '*/scale' means all scale subresources. '*/*' means all resources and their subresources. + + If wildcard is present, the validation rule will ensure resources do not overlap with each other. + + Depending on the enclosing object, subresources might not be allowed. Required. + items: + type: string + type: array + x-kubernetes-list-type: atomic + scope: + description: scope specifies the scope of this rule. Valid values are "Cluster", + "Namespaced", and "*" "Cluster" means that only cluster-scoped resources + will match this rule. Namespace API objects are cluster-scoped. "Namespaced" + means that only namespaced resources will match this rule. "*" means that + there are no scope restrictions. Subresources match the scope of their + parent resource. Default is "*". + type: string type: object - v1beta1.Validation: - description: Validation specifies the CEL expression which is used to apply - the validation. + x-kubernetes-map-type: atomic + v1beta1.ParamKind: + description: ParamKind is a tuple of Group Kind and Version. example: - reason: reason - expression: expression - messageExpression: messageExpression - message: message + apiVersion: apiVersion + kind: kind properties: - expression: - description: "Expression represents the expression which will be evaluated\ - \ by CEL. ref: https://github.com/google/cel-spec CEL expressions have\ - \ access to the contents of the API request/response, organized into CEL\ - \ variables as well as some other useful variables:\n\n- 'object' - The\ - \ object from the incoming request. The value is null for DELETE requests.\ - \ - 'oldObject' - The existing object. The value is null for CREATE requests.\ - \ - 'request' - Attributes of the API request([ref](/pkg/apis/admission/types.go#AdmissionRequest)).\ - \ - 'params' - Parameter resource referred to by the policy binding being\ - \ evaluated. Only populated if the policy has a ParamKind. - 'namespaceObject'\ - \ - The namespace object that the incoming object belongs to. The value\ - \ is null for cluster-scoped resources. - 'variables' - Map of composited\ - \ variables, from its name to its lazily evaluated value.\n For example,\ - \ a variable named 'foo' can be accessed as 'variables.foo'.\n- 'authorizer'\ - \ - A CEL Authorizer. May be used to perform authorization checks for\ - \ the principal (user or service account) of the request.\n See https://pkg.go.dev/k8s.io/apiserver/pkg/cel/library#Authz\n\ - - 'authorizer.requestResource' - A CEL ResourceCheck constructed from\ - \ the 'authorizer' and configured with the\n request resource.\n\nThe\ - \ `apiVersion`, `kind`, `metadata.name` and `metadata.generateName` are\ - \ always accessible from the root of the object. No other metadata properties\ - \ are accessible.\n\nOnly property names of the form `[a-zA-Z_.-/][a-zA-Z0-9_.-/]*`\ - \ are accessible. Accessible property names are escaped according to the\ - \ following rules when accessed in the expression: - '__' escapes to '__underscores__'\ - \ - '.' escapes to '__dot__' - '-' escapes to '__dash__' - '/' escapes\ - \ to '__slash__' - Property names that exactly match a CEL RESERVED keyword\ - \ escape to '__{keyword}__'. The keywords are:\n\t \"true\", \"false\"\ - , \"null\", \"in\", \"as\", \"break\", \"const\", \"continue\", \"else\"\ - , \"for\", \"function\", \"if\",\n\t \"import\", \"let\", \"loop\", \"\ - package\", \"namespace\", \"return\".\nExamples:\n - Expression accessing\ - \ a property named \"namespace\": {\"Expression\": \"object.__namespace__\ - \ > 0\"}\n - Expression accessing a property named \"x-prop\": {\"Expression\"\ - : \"object.x__dash__prop > 0\"}\n - Expression accessing a property named\ - \ \"redact__d\": {\"Expression\": \"object.redact__underscores__d > 0\"\ - }\n\nEquality on arrays with list type of 'set' or 'map' ignores element\ - \ order, i.e. [1, 2] == [2, 1]. Concatenation on arrays with x-kubernetes-list-type\ - \ use the semantics of the list type:\n - 'set': `X + Y` performs a union\ - \ where the array positions of all elements in `X` are preserved and\n\ - \ non-intersecting elements in `Y` are appended, retaining their partial\ - \ order.\n - 'map': `X + Y` performs a merge where the array positions\ - \ of all keys in `X` are preserved but the values\n are overwritten\ - \ by values in `Y` when the key sets of `X` and `Y` intersect. Elements\ - \ in `Y` with\n non-intersecting keys are appended, retaining their\ - \ partial order.\nRequired." + apiVersion: + description: APIVersion is the API group version the resources belong to. + In format of "group/version". Required. type: string - message: - description: 'Message represents the message displayed when validation fails. - The message is required if the Expression contains line breaks. The message - must not contain line breaks. If unset, the message is "failed rule: {Rule}". - e.g. "must be a URL with the host matching spec.host" If the Expression - contains line breaks. Message is required. The message must not contain - line breaks. If unset, the message is "failed Expression: {Expression}".' + kind: + description: Kind is the API kind the resources belong to. Required. type: string - messageExpression: - description: 'messageExpression declares a CEL expression that evaluates - to the validation failure message that is returned when this rule fails. - Since messageExpression is used as a failure message, it must evaluate - to a string. If both message and messageExpression are present on a validation, - then messageExpression will be used if validation fails. If messageExpression - results in a runtime error, the runtime error is logged, and the validation - failure message is produced as if the messageExpression field were unset. - If messageExpression evaluates to an empty string, a string with only - spaces, or a string that contains line breaks, then the validation failure - message will also be produced as if the messageExpression field were unset, - and the fact that messageExpression produced an empty string/string with - only spaces/string with line breaks will be logged. messageExpression - has access to all the same variables as the `expression` except for ''authorizer'' - and ''authorizer.requestResource''. Example: "object.x must be less than - max ("+string(params.max)+")"' + type: object + x-kubernetes-map-type: atomic + v1beta1.ParamRef: + description: ParamRef describes how to locate the params to be used as input + to expressions of rules applied by a policy binding. + example: + name: name + namespace: namespace + selector: + matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchLabels: + key: matchLabels + parameterNotFoundAction: parameterNotFoundAction + properties: + name: + description: |- + name is the name of the resource being referenced. + + One of `name` or `selector` must be set, but `name` and `selector` are mutually exclusive properties. If one is set, the other must be unset. + + A single parameter used for all admission requests can be configured by setting the `name` field, leaving `selector` blank, and setting namespace if `paramKind` is namespace-scoped. type: string - reason: - description: 'Reason represents a machine-readable description of why this - validation failed. If this is the first validation in the list to fail, - this reason, as well as the corresponding HTTP response code, are used - in the HTTP response to the client. The currently supported reasons are: - "Unauthorized", "Forbidden", "Invalid", "RequestEntityTooLarge". If not - set, StatusReasonInvalid is used in the response to the client.' + namespace: + description: |- + namespace is the namespace of the referenced resource. Allows limiting the search for params to a specific namespace. Applies to both `name` and `selector` fields. + + A per-namespace parameter may be used by specifying a namespace-scoped `paramKind` in the policy and leaving this field empty. + + - If `paramKind` is cluster-scoped, this field MUST be unset. Setting this field results in a configuration error. + + - If `paramKind` is namespace-scoped, the namespace of the object being evaluated for admission will be used when this field is left unset. Take care that if this is left empty the binding must not match any cluster-scoped resources, which will result in an error. type: string - required: - - expression + parameterNotFoundAction: + description: |- + `parameterNotFoundAction` controls the behavior of the binding when the resource exists, and name or selector is valid, but there are no parameters matched by the binding. If the value is set to `Allow`, then no matched parameters will be treated as successful validation by the binding. If set to `Deny`, then no matched parameters will be subject to the `failurePolicy` of the policy. + + Allowed values are `Allow` or `Deny` + + Required + type: string + selector: + $ref: '#/components/schemas/v1.LabelSelector' type: object + x-kubernetes-map-type: atomic v1beta1.Variable: description: Variable is the definition of a variable that is used for composition. A variable is defined as a named expression. @@ -95294,6 +96865,7 @@ components: - conditionType: conditionType - conditionType: conditionType serviceAccountName: serviceAccountName + hostnameOverride: hostnameOverride imagePullSecrets: - name: name - name: name @@ -95316,17 +96888,17 @@ components: appArmorProfile: localhostProfile: localhostProfile type: type - fsGroup: 7 + fsGroup: 1 fsGroupChangePolicy: fsGroupChangePolicy seLinuxChangePolicy: seLinuxChangePolicy - runAsGroup: 1 + runAsGroup: 4 runAsNonRoot: true sysctls: - name: name value: value - name: name value: value - runAsUser: 4 + runAsUser: 5 seccompProfile: localhostProfile: localhostProfile type: type @@ -95336,8 +96908,8 @@ components: hostProcess: true gmsaCredentialSpecName: gmsaCredentialSpecName supplementalGroups: - - 5 - - 5 + - 9 + - 9 supplementalGroupsPolicy: supplementalGroupsPolicy preemptionPolicy: preemptionPolicy nodeSelector: @@ -95346,12 +96918,12 @@ components: runtimeClassName: runtimeClassName tolerations: - effect: effect - tolerationSeconds: 9 + tolerationSeconds: 6 value: value key: key operator: operator - effect: effect - tolerationSeconds: 9 + tolerationSeconds: 6 value: value key: key operator: operator @@ -95370,7 +96942,7 @@ components: topologySpreadConstraints: - nodeTaintsPolicy: nodeTaintsPolicy whenUnsatisfiable: whenUnsatisfiable - maxSkew: 6 + maxSkew: 8 nodeAffinityPolicy: nodeAffinityPolicy labelSelector: matchExpressions: @@ -95386,14 +96958,14 @@ components: operator: operator matchLabels: key: matchLabels - minDomains: 8 + minDomains: 9 topologyKey: topologyKey matchLabelKeys: - matchLabelKeys - matchLabelKeys - nodeTaintsPolicy: nodeTaintsPolicy whenUnsatisfiable: whenUnsatisfiable - maxSkew: 6 + maxSkew: 8 nodeAffinityPolicy: nodeAffinityPolicy labelSelector: matchExpressions: @@ -95409,7 +96981,7 @@ components: operator: operator matchLabels: key: matchLabels - minDomains: 8 + minDomains: 9 topologyKey: topologyKey matchLabelKeys: - matchLabelKeys @@ -95518,20 +97090,20 @@ components: volumeMode: volumeMode secret: secretName: secretName - defaultMode: 3 + defaultMode: 7 optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key projected: sources: - downwardAPI: items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -95540,7 +97112,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -95553,26 +97125,33 @@ components: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key + podCertificate: + certificateChainPath: certificateChainPath + keyPath: keyPath + maxExpirationSeconds: 3 + keyType: keyType + credentialBundlePath: credentialBundlePath + signerName: signerName secret: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key serviceAccountToken: path: path audience: audience - expirationSeconds: 6 + expirationSeconds: 3 clusterTrustBundle: path: path labelSelector: @@ -95594,7 +97173,7 @@ components: signerName: signerName - downwardAPI: items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -95603,7 +97182,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -95616,26 +97195,33 @@ components: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key + podCertificate: + certificateChainPath: certificateChainPath + keyPath: keyPath + maxExpirationSeconds: 3 + keyType: keyType + credentialBundlePath: credentialBundlePath + signerName: signerName secret: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key serviceAccountToken: path: path audience: audience - expirationSeconds: 6 + expirationSeconds: 3 clusterTrustBundle: path: path labelSelector: @@ -95655,7 +97241,7 @@ components: name: name optional: true signerName: signerName - defaultMode: 5 + defaultMode: 6 cephfs: path: path secretRef: @@ -95710,9 +97296,9 @@ components: readOnly: true fsType: fsType downwardAPI: - defaultMode: 6 + defaultMode: 1 items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -95721,7 +97307,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -95731,7 +97317,7 @@ components: apiVersion: apiVersion fieldPath: fieldPath awsElasticBlockStore: - partition: 9 + partition: 6 volumeID: volumeID readOnly: true fsType: fsType @@ -95741,7 +97327,7 @@ components: iscsi: chapAuthSession: true iscsiInterface: iscsiInterface - lun: 6 + lun: 5 chapAuthDiscovery: true iqn: iqn portals: @@ -95766,14 +97352,14 @@ components: - monitors - monitors configMap: - defaultMode: 6 + defaultMode: 3 name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key storageos: @@ -95813,7 +97399,7 @@ components: volumePath: volumePath fsType: fsType fc: - lun: 2 + lun: 6 targetWWNs: - targetWWNs - targetWWNs @@ -95928,20 +97514,20 @@ components: volumeMode: volumeMode secret: secretName: secretName - defaultMode: 3 + defaultMode: 7 optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key projected: sources: - downwardAPI: items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -95950,7 +97536,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -95963,26 +97549,33 @@ components: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key + podCertificate: + certificateChainPath: certificateChainPath + keyPath: keyPath + maxExpirationSeconds: 3 + keyType: keyType + credentialBundlePath: credentialBundlePath + signerName: signerName secret: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key serviceAccountToken: path: path audience: audience - expirationSeconds: 6 + expirationSeconds: 3 clusterTrustBundle: path: path labelSelector: @@ -96004,7 +97597,7 @@ components: signerName: signerName - downwardAPI: items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -96013,7 +97606,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -96026,26 +97619,33 @@ components: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key + podCertificate: + certificateChainPath: certificateChainPath + keyPath: keyPath + maxExpirationSeconds: 3 + keyType: keyType + credentialBundlePath: credentialBundlePath + signerName: signerName secret: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key serviceAccountToken: path: path audience: audience - expirationSeconds: 6 + expirationSeconds: 3 clusterTrustBundle: path: path labelSelector: @@ -96065,7 +97665,7 @@ components: name: name optional: true signerName: signerName - defaultMode: 5 + defaultMode: 6 cephfs: path: path secretRef: @@ -96120,9 +97720,9 @@ components: readOnly: true fsType: fsType downwardAPI: - defaultMode: 6 + defaultMode: 1 items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -96131,7 +97731,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -96141,7 +97741,7 @@ components: apiVersion: apiVersion fieldPath: fieldPath awsElasticBlockStore: - partition: 9 + partition: 6 volumeID: volumeID readOnly: true fsType: fsType @@ -96151,7 +97751,7 @@ components: iscsi: chapAuthSession: true iscsiInterface: iscsiInterface - lun: 6 + lun: 5 chapAuthDiscovery: true iqn: iqn portals: @@ -96176,14 +97776,14 @@ components: - monitors - monitors configMap: - defaultMode: 6 + defaultMode: 3 name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key storageos: @@ -96223,7 +97823,7 @@ components: volumePath: volumePath fsType: fsType fc: - lun: 2 + lun: 6 targetWWNs: - targetWWNs - targetWWNs @@ -96249,11 +97849,24 @@ components: name: name - devicePath: devicePath name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator stdin: true terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -96483,6 +98096,11 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key - name: name value: value valueFrom: @@ -96501,6 +98119,11 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key restartPolicy: restartPolicy command: - command @@ -96516,11 +98139,24 @@ components: name: name - devicePath: devicePath name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator stdin: true terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -96750,6 +98386,11 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key - name: name value: value valueFrom: @@ -96768,6 +98409,11 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key restartPolicy: restartPolicy command: - command @@ -96779,7 +98425,7 @@ components: tty: true stdinOnce: true serviceAccount: serviceAccount - priority: 6 + priority: 7 restartPolicy: restartPolicy shareProcessNamespace: true hostUsers: true @@ -96797,50 +98443,24 @@ components: name: name - devicePath: devicePath name: name - image: image - imagePullPolicy: imagePullPolicy - livenessProbe: - terminationGracePeriodSeconds: 2 - failureThreshold: 5 - periodSeconds: 9 - tcpSocket: - port: port - host: host - timeoutSeconds: 4 - successThreshold: 3 - initialDelaySeconds: 7 - exec: - command: - - command - - command - grpc: - port: 2 - service: service - httpGet: - path: path - scheme: scheme - port: port - host: host - httpHeaders: - - name: name - value: value - - name: name - value: value + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator stdin: true terminationMessagePolicy: terminationMessagePolicy - terminationMessagePath: terminationMessagePath - workingDir: workingDir - resources: - claims: - - request: request - name: name - - request: request - name: name - requests: {} - limits: {} securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -96896,43 +98516,6 @@ components: value: value - name: name value: value - env: - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath ports: - protocol: protocol hostIP: hostIP @@ -96944,10 +98527,6 @@ components: name: name containerPort: 7 hostPort: 1 - restartPolicy: restartPolicy - command: - - command - - command volumeMounts: - mountPath: mountPath mountPropagation: mountPropagation @@ -96963,9 +98542,6 @@ components: subPath: subPath recursiveReadOnly: recursiveReadOnly subPathExpr: subPathExpr - args: - - args - - args lifecycle: postStart: sleep: @@ -97008,8 +98584,6 @@ components: - name: name value: value stopSignal: stopSignal - name: name - tty: true readinessProbe: terminationGracePeriodSeconds: 2 failureThreshold: 5 @@ -97042,7 +98616,6 @@ components: restartPolicy: restartPolicy - resourceName: resourceName restartPolicy: restartPolicy - stdinOnce: true envFrom: - configMapRef: name: name @@ -97058,11 +98631,6 @@ components: secretRef: name: name optional: true - - volumeDevices: - - devicePath: devicePath - name: name - - devicePath: devicePath - name: name image: image imagePullPolicy: imagePullPolicy livenessProbe: @@ -97092,8 +98660,6 @@ components: value: value - name: name value: value - stdin: true - terminationMessagePolicy: terminationMessagePolicy terminationMessagePath: terminationMessagePath workingDir: workingDir resources: @@ -97104,9 +98670,86 @@ components: name: name requests: {} limits: {} + env: + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + restartPolicy: restartPolicy + command: + - command + - command + args: + - args + - args + name: name + tty: true + stdinOnce: true + - volumeDevices: + - devicePath: devicePath + name: name + - devicePath: devicePath + name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + stdin: true + terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -97162,43 +98805,6 @@ components: value: value - name: name value: value - env: - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath ports: - protocol: protocol hostIP: hostIP @@ -97210,10 +98816,6 @@ components: name: name containerPort: 7 hostPort: 1 - restartPolicy: restartPolicy - command: - - command - - command volumeMounts: - mountPath: mountPath mountPropagation: mountPropagation @@ -97229,9 +98831,6 @@ components: subPath: subPath recursiveReadOnly: recursiveReadOnly subPathExpr: subPathExpr - args: - - args - - args lifecycle: postStart: sleep: @@ -97274,8 +98873,6 @@ components: - name: name value: value stopSignal: stopSignal - name: name - tty: true readinessProbe: terminationGracePeriodSeconds: 2 failureThreshold: 5 @@ -97308,7 +98905,6 @@ components: restartPolicy: restartPolicy - resourceName: resourceName restartPolicy: restartPolicy - stdinOnce: true envFrom: - configMapRef: name: name @@ -97324,12 +98920,6 @@ components: secretRef: name: name optional: true - initContainers: - - volumeDevices: - - devicePath: devicePath - name: name - - devicePath: devicePath - name: name image: image imagePullPolicy: imagePullPolicy livenessProbe: @@ -97359,8 +98949,6 @@ components: value: value - name: name value: value - stdin: true - terminationMessagePolicy: terminationMessagePolicy terminationMessagePath: terminationMessagePath workingDir: workingDir resources: @@ -97371,9 +98959,87 @@ components: name: name requests: {} limits: {} + env: + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + restartPolicy: restartPolicy + command: + - command + - command + args: + - args + - args + name: name + tty: true + stdinOnce: true + initContainers: + - volumeDevices: + - devicePath: devicePath + name: name + - devicePath: devicePath + name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + stdin: true + terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -97429,43 +99095,6 @@ components: value: value - name: name value: value - env: - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath ports: - protocol: protocol hostIP: hostIP @@ -97477,10 +99106,6 @@ components: name: name containerPort: 7 hostPort: 1 - restartPolicy: restartPolicy - command: - - command - - command volumeMounts: - mountPath: mountPath mountPropagation: mountPropagation @@ -97496,9 +99121,6 @@ components: subPath: subPath recursiveReadOnly: recursiveReadOnly subPathExpr: subPathExpr - args: - - args - - args lifecycle: postStart: sleep: @@ -97541,8 +99163,6 @@ components: - name: name value: value stopSignal: stopSignal - name: name - tty: true readinessProbe: terminationGracePeriodSeconds: 2 failureThreshold: 5 @@ -97575,7 +99195,6 @@ components: restartPolicy: restartPolicy - resourceName: resourceName restartPolicy: restartPolicy - stdinOnce: true envFrom: - configMapRef: name: name @@ -97591,11 +99210,6 @@ components: secretRef: name: name optional: true - - volumeDevices: - - devicePath: devicePath - name: name - - devicePath: devicePath - name: name image: image imagePullPolicy: imagePullPolicy livenessProbe: @@ -97625,8 +99239,6 @@ components: value: value - name: name value: value - stdin: true - terminationMessagePolicy: terminationMessagePolicy terminationMessagePath: terminationMessagePath workingDir: workingDir resources: @@ -97637,9 +99249,86 @@ components: name: name requests: {} limits: {} + env: + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + restartPolicy: restartPolicy + command: + - command + - command + args: + - args + - args + name: name + tty: true + stdinOnce: true + - volumeDevices: + - devicePath: devicePath + name: name + - devicePath: devicePath + name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + stdin: true + terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -97695,43 +99384,6 @@ components: value: value - name: name value: value - env: - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath ports: - protocol: protocol hostIP: hostIP @@ -97743,10 +99395,6 @@ components: name: name containerPort: 7 hostPort: 1 - restartPolicy: restartPolicy - command: - - command - - command volumeMounts: - mountPath: mountPath mountPropagation: mountPropagation @@ -97762,9 +99410,6 @@ components: subPath: subPath recursiveReadOnly: recursiveReadOnly subPathExpr: subPathExpr - args: - - args - - args lifecycle: postStart: sleep: @@ -97807,8 +99452,6 @@ components: - name: name value: value stopSignal: stopSignal - name: name - tty: true readinessProbe: terminationGracePeriodSeconds: 2 failureThreshold: 5 @@ -97841,7 +99484,6 @@ components: restartPolicy: restartPolicy - resourceName: resourceName restartPolicy: restartPolicy - stdinOnce: true envFrom: - configMapRef: name: name @@ -97857,6 +99499,102 @@ components: secretRef: name: name optional: true + image: image + imagePullPolicy: imagePullPolicy + livenessProbe: + terminationGracePeriodSeconds: 2 + failureThreshold: 5 + periodSeconds: 9 + tcpSocket: + port: port + host: host + timeoutSeconds: 4 + successThreshold: 3 + initialDelaySeconds: 7 + exec: + command: + - command + - command + grpc: + port: 2 + service: service + httpGet: + path: path + scheme: scheme + port: port + host: host + httpHeaders: + - name: name + value: value + - name: name + value: value + terminationMessagePath: terminationMessagePath + workingDir: workingDir + resources: + claims: + - request: request + name: name + - request: request + name: name + requests: {} + limits: {} + env: + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + restartPolicy: restartPolicy + command: + - command + - command + args: + - args + - args + name: name + tty: true + stdinOnce: true affinity: nodeAffinity: requiredDuringSchedulingIgnoredDuringExecution: @@ -98497,6 +100235,7 @@ components: - conditionType: conditionType - conditionType: conditionType serviceAccountName: serviceAccountName + hostnameOverride: hostnameOverride imagePullSecrets: - name: name - name: name @@ -98519,17 +100258,17 @@ components: appArmorProfile: localhostProfile: localhostProfile type: type - fsGroup: 7 + fsGroup: 1 fsGroupChangePolicy: fsGroupChangePolicy seLinuxChangePolicy: seLinuxChangePolicy - runAsGroup: 1 + runAsGroup: 4 runAsNonRoot: true sysctls: - name: name value: value - name: name value: value - runAsUser: 4 + runAsUser: 5 seccompProfile: localhostProfile: localhostProfile type: type @@ -98539,8 +100278,8 @@ components: hostProcess: true gmsaCredentialSpecName: gmsaCredentialSpecName supplementalGroups: - - 5 - - 5 + - 9 + - 9 supplementalGroupsPolicy: supplementalGroupsPolicy preemptionPolicy: preemptionPolicy nodeSelector: @@ -98549,12 +100288,12 @@ components: runtimeClassName: runtimeClassName tolerations: - effect: effect - tolerationSeconds: 9 + tolerationSeconds: 6 value: value key: key operator: operator - effect: effect - tolerationSeconds: 9 + tolerationSeconds: 6 value: value key: key operator: operator @@ -98573,7 +100312,7 @@ components: topologySpreadConstraints: - nodeTaintsPolicy: nodeTaintsPolicy whenUnsatisfiable: whenUnsatisfiable - maxSkew: 6 + maxSkew: 8 nodeAffinityPolicy: nodeAffinityPolicy labelSelector: matchExpressions: @@ -98589,14 +100328,14 @@ components: operator: operator matchLabels: key: matchLabels - minDomains: 8 + minDomains: 9 topologyKey: topologyKey matchLabelKeys: - matchLabelKeys - matchLabelKeys - nodeTaintsPolicy: nodeTaintsPolicy whenUnsatisfiable: whenUnsatisfiable - maxSkew: 6 + maxSkew: 8 nodeAffinityPolicy: nodeAffinityPolicy labelSelector: matchExpressions: @@ -98612,7 +100351,7 @@ components: operator: operator matchLabels: key: matchLabels - minDomains: 8 + minDomains: 9 topologyKey: topologyKey matchLabelKeys: - matchLabelKeys @@ -98721,20 +100460,20 @@ components: volumeMode: volumeMode secret: secretName: secretName - defaultMode: 3 + defaultMode: 7 optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key projected: sources: - downwardAPI: items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -98743,7 +100482,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -98756,26 +100495,33 @@ components: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key + podCertificate: + certificateChainPath: certificateChainPath + keyPath: keyPath + maxExpirationSeconds: 3 + keyType: keyType + credentialBundlePath: credentialBundlePath + signerName: signerName secret: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key serviceAccountToken: path: path audience: audience - expirationSeconds: 6 + expirationSeconds: 3 clusterTrustBundle: path: path labelSelector: @@ -98797,7 +100543,7 @@ components: signerName: signerName - downwardAPI: items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -98806,7 +100552,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -98819,26 +100565,33 @@ components: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key + podCertificate: + certificateChainPath: certificateChainPath + keyPath: keyPath + maxExpirationSeconds: 3 + keyType: keyType + credentialBundlePath: credentialBundlePath + signerName: signerName secret: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key serviceAccountToken: path: path audience: audience - expirationSeconds: 6 + expirationSeconds: 3 clusterTrustBundle: path: path labelSelector: @@ -98858,7 +100611,7 @@ components: name: name optional: true signerName: signerName - defaultMode: 5 + defaultMode: 6 cephfs: path: path secretRef: @@ -98913,9 +100666,9 @@ components: readOnly: true fsType: fsType downwardAPI: - defaultMode: 6 + defaultMode: 1 items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -98924,7 +100677,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -98934,7 +100687,7 @@ components: apiVersion: apiVersion fieldPath: fieldPath awsElasticBlockStore: - partition: 9 + partition: 6 volumeID: volumeID readOnly: true fsType: fsType @@ -98944,7 +100697,7 @@ components: iscsi: chapAuthSession: true iscsiInterface: iscsiInterface - lun: 6 + lun: 5 chapAuthDiscovery: true iqn: iqn portals: @@ -98969,14 +100722,14 @@ components: - monitors - monitors configMap: - defaultMode: 6 + defaultMode: 3 name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key storageos: @@ -99016,7 +100769,7 @@ components: volumePath: volumePath fsType: fsType fc: - lun: 2 + lun: 6 targetWWNs: - targetWWNs - targetWWNs @@ -99131,20 +100884,20 @@ components: volumeMode: volumeMode secret: secretName: secretName - defaultMode: 3 + defaultMode: 7 optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key projected: sources: - downwardAPI: items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -99153,7 +100906,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -99166,26 +100919,33 @@ components: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key + podCertificate: + certificateChainPath: certificateChainPath + keyPath: keyPath + maxExpirationSeconds: 3 + keyType: keyType + credentialBundlePath: credentialBundlePath + signerName: signerName secret: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key serviceAccountToken: path: path audience: audience - expirationSeconds: 6 + expirationSeconds: 3 clusterTrustBundle: path: path labelSelector: @@ -99207,7 +100967,7 @@ components: signerName: signerName - downwardAPI: items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -99216,7 +100976,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -99229,26 +100989,33 @@ components: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key + podCertificate: + certificateChainPath: certificateChainPath + keyPath: keyPath + maxExpirationSeconds: 3 + keyType: keyType + credentialBundlePath: credentialBundlePath + signerName: signerName secret: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key serviceAccountToken: path: path audience: audience - expirationSeconds: 6 + expirationSeconds: 3 clusterTrustBundle: path: path labelSelector: @@ -99268,7 +101035,7 @@ components: name: name optional: true signerName: signerName - defaultMode: 5 + defaultMode: 6 cephfs: path: path secretRef: @@ -99323,9 +101090,9 @@ components: readOnly: true fsType: fsType downwardAPI: - defaultMode: 6 + defaultMode: 1 items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -99334,7 +101101,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -99344,7 +101111,7 @@ components: apiVersion: apiVersion fieldPath: fieldPath awsElasticBlockStore: - partition: 9 + partition: 6 volumeID: volumeID readOnly: true fsType: fsType @@ -99354,7 +101121,7 @@ components: iscsi: chapAuthSession: true iscsiInterface: iscsiInterface - lun: 6 + lun: 5 chapAuthDiscovery: true iqn: iqn portals: @@ -99379,14 +101146,14 @@ components: - monitors - monitors configMap: - defaultMode: 6 + defaultMode: 3 name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key storageos: @@ -99426,7 +101193,7 @@ components: volumePath: volumePath fsType: fsType fc: - lun: 2 + lun: 6 targetWWNs: - targetWWNs - targetWWNs @@ -99452,11 +101219,24 @@ components: name: name - devicePath: devicePath name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator stdin: true terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -99686,6 +101466,11 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key - name: name value: value valueFrom: @@ -99704,6 +101489,11 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key restartPolicy: restartPolicy command: - command @@ -99719,11 +101509,24 @@ components: name: name - devicePath: devicePath name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator stdin: true terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -99953,6 +101756,11 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key - name: name value: value valueFrom: @@ -99971,6 +101779,11 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key restartPolicy: restartPolicy command: - command @@ -99982,7 +101795,7 @@ components: tty: true stdinOnce: true serviceAccount: serviceAccount - priority: 6 + priority: 7 restartPolicy: restartPolicy shareProcessNamespace: true hostUsers: true @@ -100000,50 +101813,24 @@ components: name: name - devicePath: devicePath name: name - image: image - imagePullPolicy: imagePullPolicy - livenessProbe: - terminationGracePeriodSeconds: 2 - failureThreshold: 5 - periodSeconds: 9 - tcpSocket: - port: port - host: host - timeoutSeconds: 4 - successThreshold: 3 - initialDelaySeconds: 7 - exec: - command: - - command - - command - grpc: - port: 2 - service: service - httpGet: - path: path - scheme: scheme - port: port - host: host - httpHeaders: - - name: name - value: value - - name: name - value: value + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator stdin: true terminationMessagePolicy: terminationMessagePolicy - terminationMessagePath: terminationMessagePath - workingDir: workingDir - resources: - claims: - - request: request - name: name - - request: request - name: name - requests: {} - limits: {} securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -100099,43 +101886,6 @@ components: value: value - name: name value: value - env: - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath ports: - protocol: protocol hostIP: hostIP @@ -100147,10 +101897,6 @@ components: name: name containerPort: 7 hostPort: 1 - restartPolicy: restartPolicy - command: - - command - - command volumeMounts: - mountPath: mountPath mountPropagation: mountPropagation @@ -100166,9 +101912,6 @@ components: subPath: subPath recursiveReadOnly: recursiveReadOnly subPathExpr: subPathExpr - args: - - args - - args lifecycle: postStart: sleep: @@ -100211,8 +101954,6 @@ components: - name: name value: value stopSignal: stopSignal - name: name - tty: true readinessProbe: terminationGracePeriodSeconds: 2 failureThreshold: 5 @@ -100245,7 +101986,6 @@ components: restartPolicy: restartPolicy - resourceName: resourceName restartPolicy: restartPolicy - stdinOnce: true envFrom: - configMapRef: name: name @@ -100261,11 +102001,6 @@ components: secretRef: name: name optional: true - - volumeDevices: - - devicePath: devicePath - name: name - - devicePath: devicePath - name: name image: image imagePullPolicy: imagePullPolicy livenessProbe: @@ -100295,8 +102030,6 @@ components: value: value - name: name value: value - stdin: true - terminationMessagePolicy: terminationMessagePolicy terminationMessagePath: terminationMessagePath workingDir: workingDir resources: @@ -100307,9 +102040,86 @@ components: name: name requests: {} limits: {} + env: + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + restartPolicy: restartPolicy + command: + - command + - command + args: + - args + - args + name: name + tty: true + stdinOnce: true + - volumeDevices: + - devicePath: devicePath + name: name + - devicePath: devicePath + name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + stdin: true + terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -100365,43 +102175,6 @@ components: value: value - name: name value: value - env: - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath ports: - protocol: protocol hostIP: hostIP @@ -100413,10 +102186,6 @@ components: name: name containerPort: 7 hostPort: 1 - restartPolicy: restartPolicy - command: - - command - - command volumeMounts: - mountPath: mountPath mountPropagation: mountPropagation @@ -100432,9 +102201,6 @@ components: subPath: subPath recursiveReadOnly: recursiveReadOnly subPathExpr: subPathExpr - args: - - args - - args lifecycle: postStart: sleep: @@ -100477,8 +102243,6 @@ components: - name: name value: value stopSignal: stopSignal - name: name - tty: true readinessProbe: terminationGracePeriodSeconds: 2 failureThreshold: 5 @@ -100511,7 +102275,6 @@ components: restartPolicy: restartPolicy - resourceName: resourceName restartPolicy: restartPolicy - stdinOnce: true envFrom: - configMapRef: name: name @@ -100527,12 +102290,6 @@ components: secretRef: name: name optional: true - initContainers: - - volumeDevices: - - devicePath: devicePath - name: name - - devicePath: devicePath - name: name image: image imagePullPolicy: imagePullPolicy livenessProbe: @@ -100562,8 +102319,6 @@ components: value: value - name: name value: value - stdin: true - terminationMessagePolicy: terminationMessagePolicy terminationMessagePath: terminationMessagePath workingDir: workingDir resources: @@ -100574,9 +102329,87 @@ components: name: name requests: {} limits: {} + env: + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + restartPolicy: restartPolicy + command: + - command + - command + args: + - args + - args + name: name + tty: true + stdinOnce: true + initContainers: + - volumeDevices: + - devicePath: devicePath + name: name + - devicePath: devicePath + name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + stdin: true + terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -100632,43 +102465,6 @@ components: value: value - name: name value: value - env: - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath ports: - protocol: protocol hostIP: hostIP @@ -100680,10 +102476,6 @@ components: name: name containerPort: 7 hostPort: 1 - restartPolicy: restartPolicy - command: - - command - - command volumeMounts: - mountPath: mountPath mountPropagation: mountPropagation @@ -100699,9 +102491,6 @@ components: subPath: subPath recursiveReadOnly: recursiveReadOnly subPathExpr: subPathExpr - args: - - args - - args lifecycle: postStart: sleep: @@ -100744,8 +102533,6 @@ components: - name: name value: value stopSignal: stopSignal - name: name - tty: true readinessProbe: terminationGracePeriodSeconds: 2 failureThreshold: 5 @@ -100778,7 +102565,6 @@ components: restartPolicy: restartPolicy - resourceName: resourceName restartPolicy: restartPolicy - stdinOnce: true envFrom: - configMapRef: name: name @@ -100794,11 +102580,6 @@ components: secretRef: name: name optional: true - - volumeDevices: - - devicePath: devicePath - name: name - - devicePath: devicePath - name: name image: image imagePullPolicy: imagePullPolicy livenessProbe: @@ -100828,8 +102609,6 @@ components: value: value - name: name value: value - stdin: true - terminationMessagePolicy: terminationMessagePolicy terminationMessagePath: terminationMessagePath workingDir: workingDir resources: @@ -100840,9 +102619,86 @@ components: name: name requests: {} limits: {} + env: + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + restartPolicy: restartPolicy + command: + - command + - command + args: + - args + - args + name: name + tty: true + stdinOnce: true + - volumeDevices: + - devicePath: devicePath + name: name + - devicePath: devicePath + name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + stdin: true + terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -100898,43 +102754,6 @@ components: value: value - name: name value: value - env: - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath ports: - protocol: protocol hostIP: hostIP @@ -100946,10 +102765,6 @@ components: name: name containerPort: 7 hostPort: 1 - restartPolicy: restartPolicy - command: - - command - - command volumeMounts: - mountPath: mountPath mountPropagation: mountPropagation @@ -100965,9 +102780,6 @@ components: subPath: subPath recursiveReadOnly: recursiveReadOnly subPathExpr: subPathExpr - args: - - args - - args lifecycle: postStart: sleep: @@ -101010,8 +102822,6 @@ components: - name: name value: value stopSignal: stopSignal - name: name - tty: true readinessProbe: terminationGracePeriodSeconds: 2 failureThreshold: 5 @@ -101044,7 +102854,6 @@ components: restartPolicy: restartPolicy - resourceName: resourceName restartPolicy: restartPolicy - stdinOnce: true envFrom: - configMapRef: name: name @@ -101060,6 +102869,102 @@ components: secretRef: name: name optional: true + image: image + imagePullPolicy: imagePullPolicy + livenessProbe: + terminationGracePeriodSeconds: 2 + failureThreshold: 5 + periodSeconds: 9 + tcpSocket: + port: port + host: host + timeoutSeconds: 4 + successThreshold: 3 + initialDelaySeconds: 7 + exec: + command: + - command + - command + grpc: + port: 2 + service: service + httpGet: + path: path + scheme: scheme + port: port + host: host + httpHeaders: + - name: name + value: value + - name: name + value: value + terminationMessagePath: terminationMessagePath + workingDir: workingDir + resources: + claims: + - request: request + name: name + - request: request + name: name + requests: {} + limits: {} + env: + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + restartPolicy: restartPolicy + command: + - command + - command + args: + - args + - args + name: name + tty: true + stdinOnce: true affinity: nodeAffinity: requiredDuringSchedulingIgnoredDuringExecution: @@ -101635,6 +103540,7 @@ components: - conditionType: conditionType - conditionType: conditionType serviceAccountName: serviceAccountName + hostnameOverride: hostnameOverride imagePullSecrets: - name: name - name: name @@ -101657,17 +103563,17 @@ components: appArmorProfile: localhostProfile: localhostProfile type: type - fsGroup: 7 + fsGroup: 1 fsGroupChangePolicy: fsGroupChangePolicy seLinuxChangePolicy: seLinuxChangePolicy - runAsGroup: 1 + runAsGroup: 4 runAsNonRoot: true sysctls: - name: name value: value - name: name value: value - runAsUser: 4 + runAsUser: 5 seccompProfile: localhostProfile: localhostProfile type: type @@ -101677,8 +103583,8 @@ components: hostProcess: true gmsaCredentialSpecName: gmsaCredentialSpecName supplementalGroups: - - 5 - - 5 + - 9 + - 9 supplementalGroupsPolicy: supplementalGroupsPolicy preemptionPolicy: preemptionPolicy nodeSelector: @@ -101687,12 +103593,12 @@ components: runtimeClassName: runtimeClassName tolerations: - effect: effect - tolerationSeconds: 9 + tolerationSeconds: 6 value: value key: key operator: operator - effect: effect - tolerationSeconds: 9 + tolerationSeconds: 6 value: value key: key operator: operator @@ -101711,7 +103617,7 @@ components: topologySpreadConstraints: - nodeTaintsPolicy: nodeTaintsPolicy whenUnsatisfiable: whenUnsatisfiable - maxSkew: 6 + maxSkew: 8 nodeAffinityPolicy: nodeAffinityPolicy labelSelector: matchExpressions: @@ -101727,14 +103633,14 @@ components: operator: operator matchLabels: key: matchLabels - minDomains: 8 + minDomains: 9 topologyKey: topologyKey matchLabelKeys: - matchLabelKeys - matchLabelKeys - nodeTaintsPolicy: nodeTaintsPolicy whenUnsatisfiable: whenUnsatisfiable - maxSkew: 6 + maxSkew: 8 nodeAffinityPolicy: nodeAffinityPolicy labelSelector: matchExpressions: @@ -101750,7 +103656,7 @@ components: operator: operator matchLabels: key: matchLabels - minDomains: 8 + minDomains: 9 topologyKey: topologyKey matchLabelKeys: - matchLabelKeys @@ -101859,20 +103765,20 @@ components: volumeMode: volumeMode secret: secretName: secretName - defaultMode: 3 + defaultMode: 7 optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key projected: sources: - downwardAPI: items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -101881,7 +103787,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -101894,26 +103800,33 @@ components: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key + podCertificate: + certificateChainPath: certificateChainPath + keyPath: keyPath + maxExpirationSeconds: 3 + keyType: keyType + credentialBundlePath: credentialBundlePath + signerName: signerName secret: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key serviceAccountToken: path: path audience: audience - expirationSeconds: 6 + expirationSeconds: 3 clusterTrustBundle: path: path labelSelector: @@ -101935,7 +103848,7 @@ components: signerName: signerName - downwardAPI: items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -101944,7 +103857,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -101957,26 +103870,33 @@ components: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key + podCertificate: + certificateChainPath: certificateChainPath + keyPath: keyPath + maxExpirationSeconds: 3 + keyType: keyType + credentialBundlePath: credentialBundlePath + signerName: signerName secret: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key serviceAccountToken: path: path audience: audience - expirationSeconds: 6 + expirationSeconds: 3 clusterTrustBundle: path: path labelSelector: @@ -101996,7 +103916,7 @@ components: name: name optional: true signerName: signerName - defaultMode: 5 + defaultMode: 6 cephfs: path: path secretRef: @@ -102051,9 +103971,9 @@ components: readOnly: true fsType: fsType downwardAPI: - defaultMode: 6 + defaultMode: 1 items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -102062,7 +103982,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -102072,7 +103992,7 @@ components: apiVersion: apiVersion fieldPath: fieldPath awsElasticBlockStore: - partition: 9 + partition: 6 volumeID: volumeID readOnly: true fsType: fsType @@ -102082,7 +104002,7 @@ components: iscsi: chapAuthSession: true iscsiInterface: iscsiInterface - lun: 6 + lun: 5 chapAuthDiscovery: true iqn: iqn portals: @@ -102107,14 +104027,14 @@ components: - monitors - monitors configMap: - defaultMode: 6 + defaultMode: 3 name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key storageos: @@ -102154,7 +104074,7 @@ components: volumePath: volumePath fsType: fsType fc: - lun: 2 + lun: 6 targetWWNs: - targetWWNs - targetWWNs @@ -102269,20 +104189,20 @@ components: volumeMode: volumeMode secret: secretName: secretName - defaultMode: 3 + defaultMode: 7 optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key projected: sources: - downwardAPI: items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -102291,7 +104211,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -102304,26 +104224,33 @@ components: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key + podCertificate: + certificateChainPath: certificateChainPath + keyPath: keyPath + maxExpirationSeconds: 3 + keyType: keyType + credentialBundlePath: credentialBundlePath + signerName: signerName secret: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key serviceAccountToken: path: path audience: audience - expirationSeconds: 6 + expirationSeconds: 3 clusterTrustBundle: path: path labelSelector: @@ -102345,7 +104272,7 @@ components: signerName: signerName - downwardAPI: items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -102354,7 +104281,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -102367,26 +104294,33 @@ components: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key + podCertificate: + certificateChainPath: certificateChainPath + keyPath: keyPath + maxExpirationSeconds: 3 + keyType: keyType + credentialBundlePath: credentialBundlePath + signerName: signerName secret: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key serviceAccountToken: path: path audience: audience - expirationSeconds: 6 + expirationSeconds: 3 clusterTrustBundle: path: path labelSelector: @@ -102406,7 +104340,7 @@ components: name: name optional: true signerName: signerName - defaultMode: 5 + defaultMode: 6 cephfs: path: path secretRef: @@ -102461,9 +104395,9 @@ components: readOnly: true fsType: fsType downwardAPI: - defaultMode: 6 + defaultMode: 1 items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -102472,7 +104406,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -102482,7 +104416,7 @@ components: apiVersion: apiVersion fieldPath: fieldPath awsElasticBlockStore: - partition: 9 + partition: 6 volumeID: volumeID readOnly: true fsType: fsType @@ -102492,7 +104426,7 @@ components: iscsi: chapAuthSession: true iscsiInterface: iscsiInterface - lun: 6 + lun: 5 chapAuthDiscovery: true iqn: iqn portals: @@ -102517,14 +104451,14 @@ components: - monitors - monitors configMap: - defaultMode: 6 + defaultMode: 3 name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key storageos: @@ -102564,7 +104498,7 @@ components: volumePath: volumePath fsType: fsType fc: - lun: 2 + lun: 6 targetWWNs: - targetWWNs - targetWWNs @@ -102590,11 +104524,24 @@ components: name: name - devicePath: devicePath name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator stdin: true terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -102824,6 +104771,11 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key - name: name value: value valueFrom: @@ -102842,6 +104794,11 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key restartPolicy: restartPolicy command: - command @@ -102857,11 +104814,24 @@ components: name: name - devicePath: devicePath name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator stdin: true terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -103091,6 +105061,11 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key - name: name value: value valueFrom: @@ -103109,6 +105084,11 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key restartPolicy: restartPolicy command: - command @@ -103120,7 +105100,7 @@ components: tty: true stdinOnce: true serviceAccount: serviceAccount - priority: 6 + priority: 7 restartPolicy: restartPolicy shareProcessNamespace: true hostUsers: true @@ -103138,50 +105118,24 @@ components: name: name - devicePath: devicePath name: name - image: image - imagePullPolicy: imagePullPolicy - livenessProbe: - terminationGracePeriodSeconds: 2 - failureThreshold: 5 - periodSeconds: 9 - tcpSocket: - port: port - host: host - timeoutSeconds: 4 - successThreshold: 3 - initialDelaySeconds: 7 - exec: - command: - - command - - command - grpc: - port: 2 - service: service - httpGet: - path: path - scheme: scheme - port: port - host: host - httpHeaders: - - name: name - value: value - - name: name - value: value + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator stdin: true terminationMessagePolicy: terminationMessagePolicy - terminationMessagePath: terminationMessagePath - workingDir: workingDir - resources: - claims: - - request: request - name: name - - request: request - name: name - requests: {} - limits: {} securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -103237,43 +105191,6 @@ components: value: value - name: name value: value - env: - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath ports: - protocol: protocol hostIP: hostIP @@ -103285,10 +105202,6 @@ components: name: name containerPort: 7 hostPort: 1 - restartPolicy: restartPolicy - command: - - command - - command volumeMounts: - mountPath: mountPath mountPropagation: mountPropagation @@ -103304,9 +105217,6 @@ components: subPath: subPath recursiveReadOnly: recursiveReadOnly subPathExpr: subPathExpr - args: - - args - - args lifecycle: postStart: sleep: @@ -103349,8 +105259,6 @@ components: - name: name value: value stopSignal: stopSignal - name: name - tty: true readinessProbe: terminationGracePeriodSeconds: 2 failureThreshold: 5 @@ -103383,7 +105291,6 @@ components: restartPolicy: restartPolicy - resourceName: resourceName restartPolicy: restartPolicy - stdinOnce: true envFrom: - configMapRef: name: name @@ -103399,11 +105306,6 @@ components: secretRef: name: name optional: true - - volumeDevices: - - devicePath: devicePath - name: name - - devicePath: devicePath - name: name image: image imagePullPolicy: imagePullPolicy livenessProbe: @@ -103433,8 +105335,6 @@ components: value: value - name: name value: value - stdin: true - terminationMessagePolicy: terminationMessagePolicy terminationMessagePath: terminationMessagePath workingDir: workingDir resources: @@ -103445,9 +105345,86 @@ components: name: name requests: {} limits: {} + env: + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + restartPolicy: restartPolicy + command: + - command + - command + args: + - args + - args + name: name + tty: true + stdinOnce: true + - volumeDevices: + - devicePath: devicePath + name: name + - devicePath: devicePath + name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + stdin: true + terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -103503,43 +105480,6 @@ components: value: value - name: name value: value - env: - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath ports: - protocol: protocol hostIP: hostIP @@ -103551,10 +105491,6 @@ components: name: name containerPort: 7 hostPort: 1 - restartPolicy: restartPolicy - command: - - command - - command volumeMounts: - mountPath: mountPath mountPropagation: mountPropagation @@ -103570,9 +105506,6 @@ components: subPath: subPath recursiveReadOnly: recursiveReadOnly subPathExpr: subPathExpr - args: - - args - - args lifecycle: postStart: sleep: @@ -103615,8 +105548,6 @@ components: - name: name value: value stopSignal: stopSignal - name: name - tty: true readinessProbe: terminationGracePeriodSeconds: 2 failureThreshold: 5 @@ -103649,7 +105580,6 @@ components: restartPolicy: restartPolicy - resourceName: resourceName restartPolicy: restartPolicy - stdinOnce: true envFrom: - configMapRef: name: name @@ -103665,12 +105595,6 @@ components: secretRef: name: name optional: true - initContainers: - - volumeDevices: - - devicePath: devicePath - name: name - - devicePath: devicePath - name: name image: image imagePullPolicy: imagePullPolicy livenessProbe: @@ -103700,8 +105624,6 @@ components: value: value - name: name value: value - stdin: true - terminationMessagePolicy: terminationMessagePolicy terminationMessagePath: terminationMessagePath workingDir: workingDir resources: @@ -103712,9 +105634,87 @@ components: name: name requests: {} limits: {} + env: + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + restartPolicy: restartPolicy + command: + - command + - command + args: + - args + - args + name: name + tty: true + stdinOnce: true + initContainers: + - volumeDevices: + - devicePath: devicePath + name: name + - devicePath: devicePath + name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + stdin: true + terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -103770,43 +105770,6 @@ components: value: value - name: name value: value - env: - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath ports: - protocol: protocol hostIP: hostIP @@ -103818,10 +105781,6 @@ components: name: name containerPort: 7 hostPort: 1 - restartPolicy: restartPolicy - command: - - command - - command volumeMounts: - mountPath: mountPath mountPropagation: mountPropagation @@ -103837,9 +105796,6 @@ components: subPath: subPath recursiveReadOnly: recursiveReadOnly subPathExpr: subPathExpr - args: - - args - - args lifecycle: postStart: sleep: @@ -103882,8 +105838,6 @@ components: - name: name value: value stopSignal: stopSignal - name: name - tty: true readinessProbe: terminationGracePeriodSeconds: 2 failureThreshold: 5 @@ -103916,7 +105870,6 @@ components: restartPolicy: restartPolicy - resourceName: resourceName restartPolicy: restartPolicy - stdinOnce: true envFrom: - configMapRef: name: name @@ -103932,11 +105885,6 @@ components: secretRef: name: name optional: true - - volumeDevices: - - devicePath: devicePath - name: name - - devicePath: devicePath - name: name image: image imagePullPolicy: imagePullPolicy livenessProbe: @@ -103966,8 +105914,6 @@ components: value: value - name: name value: value - stdin: true - terminationMessagePolicy: terminationMessagePolicy terminationMessagePath: terminationMessagePath workingDir: workingDir resources: @@ -103978,9 +105924,86 @@ components: name: name requests: {} limits: {} + env: + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + restartPolicy: restartPolicy + command: + - command + - command + args: + - args + - args + name: name + tty: true + stdinOnce: true + - volumeDevices: + - devicePath: devicePath + name: name + - devicePath: devicePath + name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + stdin: true + terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -104036,43 +106059,6 @@ components: value: value - name: name value: value - env: - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath ports: - protocol: protocol hostIP: hostIP @@ -104084,10 +106070,6 @@ components: name: name containerPort: 7 hostPort: 1 - restartPolicy: restartPolicy - command: - - command - - command volumeMounts: - mountPath: mountPath mountPropagation: mountPropagation @@ -104103,9 +106085,6 @@ components: subPath: subPath recursiveReadOnly: recursiveReadOnly subPathExpr: subPathExpr - args: - - args - - args lifecycle: postStart: sleep: @@ -104148,8 +106127,6 @@ components: - name: name value: value stopSignal: stopSignal - name: name - tty: true readinessProbe: terminationGracePeriodSeconds: 2 failureThreshold: 5 @@ -104182,7 +106159,6 @@ components: restartPolicy: restartPolicy - resourceName: resourceName restartPolicy: restartPolicy - stdinOnce: true envFrom: - configMapRef: name: name @@ -104198,6 +106174,102 @@ components: secretRef: name: name optional: true + image: image + imagePullPolicy: imagePullPolicy + livenessProbe: + terminationGracePeriodSeconds: 2 + failureThreshold: 5 + periodSeconds: 9 + tcpSocket: + port: port + host: host + timeoutSeconds: 4 + successThreshold: 3 + initialDelaySeconds: 7 + exec: + command: + - command + - command + grpc: + port: 2 + service: service + httpGet: + path: path + scheme: scheme + port: port + host: host + httpHeaders: + - name: name + value: value + - name: name + value: value + terminationMessagePath: terminationMessagePath + workingDir: workingDir + resources: + claims: + - request: request + name: name + - request: request + name: name + requests: {} + limits: {} + env: + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + restartPolicy: restartPolicy + command: + - command + - command + args: + - args + - args + name: name + tty: true + stdinOnce: true affinity: nodeAffinity: requiredDuringSchedulingIgnoredDuringExecution: @@ -104754,6 +106826,7 @@ components: - conditionType: conditionType - conditionType: conditionType serviceAccountName: serviceAccountName + hostnameOverride: hostnameOverride imagePullSecrets: - name: name - name: name @@ -104776,17 +106849,17 @@ components: appArmorProfile: localhostProfile: localhostProfile type: type - fsGroup: 7 + fsGroup: 1 fsGroupChangePolicy: fsGroupChangePolicy seLinuxChangePolicy: seLinuxChangePolicy - runAsGroup: 1 + runAsGroup: 4 runAsNonRoot: true sysctls: - name: name value: value - name: name value: value - runAsUser: 4 + runAsUser: 5 seccompProfile: localhostProfile: localhostProfile type: type @@ -104796,8 +106869,8 @@ components: hostProcess: true gmsaCredentialSpecName: gmsaCredentialSpecName supplementalGroups: - - 5 - - 5 + - 9 + - 9 supplementalGroupsPolicy: supplementalGroupsPolicy preemptionPolicy: preemptionPolicy nodeSelector: @@ -104806,12 +106879,12 @@ components: runtimeClassName: runtimeClassName tolerations: - effect: effect - tolerationSeconds: 9 + tolerationSeconds: 6 value: value key: key operator: operator - effect: effect - tolerationSeconds: 9 + tolerationSeconds: 6 value: value key: key operator: operator @@ -104830,7 +106903,7 @@ components: topologySpreadConstraints: - nodeTaintsPolicy: nodeTaintsPolicy whenUnsatisfiable: whenUnsatisfiable - maxSkew: 6 + maxSkew: 8 nodeAffinityPolicy: nodeAffinityPolicy labelSelector: matchExpressions: @@ -104846,14 +106919,14 @@ components: operator: operator matchLabels: key: matchLabels - minDomains: 8 + minDomains: 9 topologyKey: topologyKey matchLabelKeys: - matchLabelKeys - matchLabelKeys - nodeTaintsPolicy: nodeTaintsPolicy whenUnsatisfiable: whenUnsatisfiable - maxSkew: 6 + maxSkew: 8 nodeAffinityPolicy: nodeAffinityPolicy labelSelector: matchExpressions: @@ -104869,7 +106942,7 @@ components: operator: operator matchLabels: key: matchLabels - minDomains: 8 + minDomains: 9 topologyKey: topologyKey matchLabelKeys: - matchLabelKeys @@ -104978,20 +107051,20 @@ components: volumeMode: volumeMode secret: secretName: secretName - defaultMode: 3 + defaultMode: 7 optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key projected: sources: - downwardAPI: items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -105000,7 +107073,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -105013,26 +107086,33 @@ components: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key + podCertificate: + certificateChainPath: certificateChainPath + keyPath: keyPath + maxExpirationSeconds: 3 + keyType: keyType + credentialBundlePath: credentialBundlePath + signerName: signerName secret: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key serviceAccountToken: path: path audience: audience - expirationSeconds: 6 + expirationSeconds: 3 clusterTrustBundle: path: path labelSelector: @@ -105054,7 +107134,7 @@ components: signerName: signerName - downwardAPI: items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -105063,7 +107143,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -105076,26 +107156,33 @@ components: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key + podCertificate: + certificateChainPath: certificateChainPath + keyPath: keyPath + maxExpirationSeconds: 3 + keyType: keyType + credentialBundlePath: credentialBundlePath + signerName: signerName secret: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key serviceAccountToken: path: path audience: audience - expirationSeconds: 6 + expirationSeconds: 3 clusterTrustBundle: path: path labelSelector: @@ -105115,7 +107202,7 @@ components: name: name optional: true signerName: signerName - defaultMode: 5 + defaultMode: 6 cephfs: path: path secretRef: @@ -105170,9 +107257,9 @@ components: readOnly: true fsType: fsType downwardAPI: - defaultMode: 6 + defaultMode: 1 items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -105181,7 +107268,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -105191,7 +107278,7 @@ components: apiVersion: apiVersion fieldPath: fieldPath awsElasticBlockStore: - partition: 9 + partition: 6 volumeID: volumeID readOnly: true fsType: fsType @@ -105201,7 +107288,7 @@ components: iscsi: chapAuthSession: true iscsiInterface: iscsiInterface - lun: 6 + lun: 5 chapAuthDiscovery: true iqn: iqn portals: @@ -105226,14 +107313,14 @@ components: - monitors - monitors configMap: - defaultMode: 6 + defaultMode: 3 name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key storageos: @@ -105273,7 +107360,7 @@ components: volumePath: volumePath fsType: fsType fc: - lun: 2 + lun: 6 targetWWNs: - targetWWNs - targetWWNs @@ -105388,20 +107475,20 @@ components: volumeMode: volumeMode secret: secretName: secretName - defaultMode: 3 + defaultMode: 7 optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key projected: sources: - downwardAPI: items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -105410,7 +107497,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -105423,26 +107510,33 @@ components: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key + podCertificate: + certificateChainPath: certificateChainPath + keyPath: keyPath + maxExpirationSeconds: 3 + keyType: keyType + credentialBundlePath: credentialBundlePath + signerName: signerName secret: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key serviceAccountToken: path: path audience: audience - expirationSeconds: 6 + expirationSeconds: 3 clusterTrustBundle: path: path labelSelector: @@ -105464,7 +107558,7 @@ components: signerName: signerName - downwardAPI: items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -105473,7 +107567,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -105486,26 +107580,33 @@ components: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key + podCertificate: + certificateChainPath: certificateChainPath + keyPath: keyPath + maxExpirationSeconds: 3 + keyType: keyType + credentialBundlePath: credentialBundlePath + signerName: signerName secret: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key serviceAccountToken: path: path audience: audience - expirationSeconds: 6 + expirationSeconds: 3 clusterTrustBundle: path: path labelSelector: @@ -105525,7 +107626,7 @@ components: name: name optional: true signerName: signerName - defaultMode: 5 + defaultMode: 6 cephfs: path: path secretRef: @@ -105580,9 +107681,9 @@ components: readOnly: true fsType: fsType downwardAPI: - defaultMode: 6 + defaultMode: 1 items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -105591,7 +107692,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -105601,7 +107702,7 @@ components: apiVersion: apiVersion fieldPath: fieldPath awsElasticBlockStore: - partition: 9 + partition: 6 volumeID: volumeID readOnly: true fsType: fsType @@ -105611,7 +107712,7 @@ components: iscsi: chapAuthSession: true iscsiInterface: iscsiInterface - lun: 6 + lun: 5 chapAuthDiscovery: true iqn: iqn portals: @@ -105636,14 +107737,14 @@ components: - monitors - monitors configMap: - defaultMode: 6 + defaultMode: 3 name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key storageos: @@ -105683,7 +107784,7 @@ components: volumePath: volumePath fsType: fsType fc: - lun: 2 + lun: 6 targetWWNs: - targetWWNs - targetWWNs @@ -105709,11 +107810,24 @@ components: name: name - devicePath: devicePath name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator stdin: true terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -105943,6 +108057,11 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key - name: name value: value valueFrom: @@ -105961,6 +108080,11 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key restartPolicy: restartPolicy command: - command @@ -105976,11 +108100,24 @@ components: name: name - devicePath: devicePath name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator stdin: true terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -106210,6 +108347,11 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key - name: name value: value valueFrom: @@ -106228,6 +108370,11 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key restartPolicy: restartPolicy command: - command @@ -106239,7 +108386,7 @@ components: tty: true stdinOnce: true serviceAccount: serviceAccount - priority: 6 + priority: 7 restartPolicy: restartPolicy shareProcessNamespace: true hostUsers: true @@ -106257,50 +108404,24 @@ components: name: name - devicePath: devicePath name: name - image: image - imagePullPolicy: imagePullPolicy - livenessProbe: - terminationGracePeriodSeconds: 2 - failureThreshold: 5 - periodSeconds: 9 - tcpSocket: - port: port - host: host - timeoutSeconds: 4 - successThreshold: 3 - initialDelaySeconds: 7 - exec: - command: - - command - - command - grpc: - port: 2 - service: service - httpGet: - path: path - scheme: scheme - port: port - host: host - httpHeaders: - - name: name - value: value - - name: name - value: value + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator stdin: true terminationMessagePolicy: terminationMessagePolicy - terminationMessagePath: terminationMessagePath - workingDir: workingDir - resources: - claims: - - request: request - name: name - - request: request - name: name - requests: {} - limits: {} securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -106356,43 +108477,6 @@ components: value: value - name: name value: value - env: - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath ports: - protocol: protocol hostIP: hostIP @@ -106404,10 +108488,6 @@ components: name: name containerPort: 7 hostPort: 1 - restartPolicy: restartPolicy - command: - - command - - command volumeMounts: - mountPath: mountPath mountPropagation: mountPropagation @@ -106423,9 +108503,6 @@ components: subPath: subPath recursiveReadOnly: recursiveReadOnly subPathExpr: subPathExpr - args: - - args - - args lifecycle: postStart: sleep: @@ -106468,8 +108545,6 @@ components: - name: name value: value stopSignal: stopSignal - name: name - tty: true readinessProbe: terminationGracePeriodSeconds: 2 failureThreshold: 5 @@ -106502,7 +108577,6 @@ components: restartPolicy: restartPolicy - resourceName: resourceName restartPolicy: restartPolicy - stdinOnce: true envFrom: - configMapRef: name: name @@ -106518,11 +108592,6 @@ components: secretRef: name: name optional: true - - volumeDevices: - - devicePath: devicePath - name: name - - devicePath: devicePath - name: name image: image imagePullPolicy: imagePullPolicy livenessProbe: @@ -106552,8 +108621,6 @@ components: value: value - name: name value: value - stdin: true - terminationMessagePolicy: terminationMessagePolicy terminationMessagePath: terminationMessagePath workingDir: workingDir resources: @@ -106564,9 +108631,86 @@ components: name: name requests: {} limits: {} + env: + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + restartPolicy: restartPolicy + command: + - command + - command + args: + - args + - args + name: name + tty: true + stdinOnce: true + - volumeDevices: + - devicePath: devicePath + name: name + - devicePath: devicePath + name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + stdin: true + terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -106622,43 +108766,6 @@ components: value: value - name: name value: value - env: - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath ports: - protocol: protocol hostIP: hostIP @@ -106670,10 +108777,6 @@ components: name: name containerPort: 7 hostPort: 1 - restartPolicy: restartPolicy - command: - - command - - command volumeMounts: - mountPath: mountPath mountPropagation: mountPropagation @@ -106689,9 +108792,6 @@ components: subPath: subPath recursiveReadOnly: recursiveReadOnly subPathExpr: subPathExpr - args: - - args - - args lifecycle: postStart: sleep: @@ -106734,8 +108834,6 @@ components: - name: name value: value stopSignal: stopSignal - name: name - tty: true readinessProbe: terminationGracePeriodSeconds: 2 failureThreshold: 5 @@ -106768,7 +108866,6 @@ components: restartPolicy: restartPolicy - resourceName: resourceName restartPolicy: restartPolicy - stdinOnce: true envFrom: - configMapRef: name: name @@ -106784,12 +108881,6 @@ components: secretRef: name: name optional: true - initContainers: - - volumeDevices: - - devicePath: devicePath - name: name - - devicePath: devicePath - name: name image: image imagePullPolicy: imagePullPolicy livenessProbe: @@ -106819,8 +108910,6 @@ components: value: value - name: name value: value - stdin: true - terminationMessagePolicy: terminationMessagePolicy terminationMessagePath: terminationMessagePath workingDir: workingDir resources: @@ -106831,9 +108920,87 @@ components: name: name requests: {} limits: {} + env: + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + restartPolicy: restartPolicy + command: + - command + - command + args: + - args + - args + name: name + tty: true + stdinOnce: true + initContainers: + - volumeDevices: + - devicePath: devicePath + name: name + - devicePath: devicePath + name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + stdin: true + terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -106889,43 +109056,6 @@ components: value: value - name: name value: value - env: - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath ports: - protocol: protocol hostIP: hostIP @@ -106937,10 +109067,6 @@ components: name: name containerPort: 7 hostPort: 1 - restartPolicy: restartPolicy - command: - - command - - command volumeMounts: - mountPath: mountPath mountPropagation: mountPropagation @@ -106956,9 +109082,6 @@ components: subPath: subPath recursiveReadOnly: recursiveReadOnly subPathExpr: subPathExpr - args: - - args - - args lifecycle: postStart: sleep: @@ -107001,8 +109124,6 @@ components: - name: name value: value stopSignal: stopSignal - name: name - tty: true readinessProbe: terminationGracePeriodSeconds: 2 failureThreshold: 5 @@ -107035,7 +109156,6 @@ components: restartPolicy: restartPolicy - resourceName: resourceName restartPolicy: restartPolicy - stdinOnce: true envFrom: - configMapRef: name: name @@ -107051,11 +109171,6 @@ components: secretRef: name: name optional: true - - volumeDevices: - - devicePath: devicePath - name: name - - devicePath: devicePath - name: name image: image imagePullPolicy: imagePullPolicy livenessProbe: @@ -107085,8 +109200,6 @@ components: value: value - name: name value: value - stdin: true - terminationMessagePolicy: terminationMessagePolicy terminationMessagePath: terminationMessagePath workingDir: workingDir resources: @@ -107097,9 +109210,86 @@ components: name: name requests: {} limits: {} + env: + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + restartPolicy: restartPolicy + command: + - command + - command + args: + - args + - args + name: name + tty: true + stdinOnce: true + - volumeDevices: + - devicePath: devicePath + name: name + - devicePath: devicePath + name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + stdin: true + terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -107155,43 +109345,6 @@ components: value: value - name: name value: value - env: - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath ports: - protocol: protocol hostIP: hostIP @@ -107203,10 +109356,6 @@ components: name: name containerPort: 7 hostPort: 1 - restartPolicy: restartPolicy - command: - - command - - command volumeMounts: - mountPath: mountPath mountPropagation: mountPropagation @@ -107222,9 +109371,6 @@ components: subPath: subPath recursiveReadOnly: recursiveReadOnly subPathExpr: subPathExpr - args: - - args - - args lifecycle: postStart: sleep: @@ -107267,8 +109413,6 @@ components: - name: name value: value stopSignal: stopSignal - name: name - tty: true readinessProbe: terminationGracePeriodSeconds: 2 failureThreshold: 5 @@ -107301,7 +109445,6 @@ components: restartPolicy: restartPolicy - resourceName: resourceName restartPolicy: restartPolicy - stdinOnce: true envFrom: - configMapRef: name: name @@ -107317,6 +109460,102 @@ components: secretRef: name: name optional: true + image: image + imagePullPolicy: imagePullPolicy + livenessProbe: + terminationGracePeriodSeconds: 2 + failureThreshold: 5 + periodSeconds: 9 + tcpSocket: + port: port + host: host + timeoutSeconds: 4 + successThreshold: 3 + initialDelaySeconds: 7 + exec: + command: + - command + - command + grpc: + port: 2 + service: service + httpGet: + path: path + scheme: scheme + port: port + host: host + httpHeaders: + - name: name + value: value + - name: name + value: value + terminationMessagePath: terminationMessagePath + workingDir: workingDir + resources: + claims: + - request: request + name: name + - request: request + name: name + requests: {} + limits: {} + env: + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + restartPolicy: restartPolicy + command: + - command + - command + args: + - args + - args + name: name + tty: true + stdinOnce: true affinity: nodeAffinity: requiredDuringSchedulingIgnoredDuringExecution: @@ -108002,6 +110241,7 @@ components: - conditionType: conditionType - conditionType: conditionType serviceAccountName: serviceAccountName + hostnameOverride: hostnameOverride imagePullSecrets: - name: name - name: name @@ -108024,17 +110264,17 @@ components: appArmorProfile: localhostProfile: localhostProfile type: type - fsGroup: 7 + fsGroup: 1 fsGroupChangePolicy: fsGroupChangePolicy seLinuxChangePolicy: seLinuxChangePolicy - runAsGroup: 1 + runAsGroup: 4 runAsNonRoot: true sysctls: - name: name value: value - name: name value: value - runAsUser: 4 + runAsUser: 5 seccompProfile: localhostProfile: localhostProfile type: type @@ -108044,8 +110284,8 @@ components: hostProcess: true gmsaCredentialSpecName: gmsaCredentialSpecName supplementalGroups: - - 5 - - 5 + - 9 + - 9 supplementalGroupsPolicy: supplementalGroupsPolicy preemptionPolicy: preemptionPolicy nodeSelector: @@ -108054,12 +110294,12 @@ components: runtimeClassName: runtimeClassName tolerations: - effect: effect - tolerationSeconds: 9 + tolerationSeconds: 6 value: value key: key operator: operator - effect: effect - tolerationSeconds: 9 + tolerationSeconds: 6 value: value key: key operator: operator @@ -108078,7 +110318,7 @@ components: topologySpreadConstraints: - nodeTaintsPolicy: nodeTaintsPolicy whenUnsatisfiable: whenUnsatisfiable - maxSkew: 6 + maxSkew: 8 nodeAffinityPolicy: nodeAffinityPolicy labelSelector: matchExpressions: @@ -108094,14 +110334,14 @@ components: operator: operator matchLabels: key: matchLabels - minDomains: 8 + minDomains: 9 topologyKey: topologyKey matchLabelKeys: - matchLabelKeys - matchLabelKeys - nodeTaintsPolicy: nodeTaintsPolicy whenUnsatisfiable: whenUnsatisfiable - maxSkew: 6 + maxSkew: 8 nodeAffinityPolicy: nodeAffinityPolicy labelSelector: matchExpressions: @@ -108117,7 +110357,7 @@ components: operator: operator matchLabels: key: matchLabels - minDomains: 8 + minDomains: 9 topologyKey: topologyKey matchLabelKeys: - matchLabelKeys @@ -108226,20 +110466,20 @@ components: volumeMode: volumeMode secret: secretName: secretName - defaultMode: 3 + defaultMode: 7 optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key projected: sources: - downwardAPI: items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -108248,7 +110488,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -108261,26 +110501,33 @@ components: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key + podCertificate: + certificateChainPath: certificateChainPath + keyPath: keyPath + maxExpirationSeconds: 3 + keyType: keyType + credentialBundlePath: credentialBundlePath + signerName: signerName secret: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key serviceAccountToken: path: path audience: audience - expirationSeconds: 6 + expirationSeconds: 3 clusterTrustBundle: path: path labelSelector: @@ -108302,7 +110549,7 @@ components: signerName: signerName - downwardAPI: items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -108311,7 +110558,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -108324,26 +110571,33 @@ components: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key + podCertificate: + certificateChainPath: certificateChainPath + keyPath: keyPath + maxExpirationSeconds: 3 + keyType: keyType + credentialBundlePath: credentialBundlePath + signerName: signerName secret: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key serviceAccountToken: path: path audience: audience - expirationSeconds: 6 + expirationSeconds: 3 clusterTrustBundle: path: path labelSelector: @@ -108363,7 +110617,7 @@ components: name: name optional: true signerName: signerName - defaultMode: 5 + defaultMode: 6 cephfs: path: path secretRef: @@ -108418,9 +110672,9 @@ components: readOnly: true fsType: fsType downwardAPI: - defaultMode: 6 + defaultMode: 1 items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -108429,7 +110683,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -108439,7 +110693,7 @@ components: apiVersion: apiVersion fieldPath: fieldPath awsElasticBlockStore: - partition: 9 + partition: 6 volumeID: volumeID readOnly: true fsType: fsType @@ -108449,7 +110703,7 @@ components: iscsi: chapAuthSession: true iscsiInterface: iscsiInterface - lun: 6 + lun: 5 chapAuthDiscovery: true iqn: iqn portals: @@ -108474,14 +110728,14 @@ components: - monitors - monitors configMap: - defaultMode: 6 + defaultMode: 3 name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key storageos: @@ -108521,7 +110775,7 @@ components: volumePath: volumePath fsType: fsType fc: - lun: 2 + lun: 6 targetWWNs: - targetWWNs - targetWWNs @@ -108636,20 +110890,20 @@ components: volumeMode: volumeMode secret: secretName: secretName - defaultMode: 3 + defaultMode: 7 optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key projected: sources: - downwardAPI: items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -108658,7 +110912,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -108671,26 +110925,33 @@ components: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key + podCertificate: + certificateChainPath: certificateChainPath + keyPath: keyPath + maxExpirationSeconds: 3 + keyType: keyType + credentialBundlePath: credentialBundlePath + signerName: signerName secret: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key serviceAccountToken: path: path audience: audience - expirationSeconds: 6 + expirationSeconds: 3 clusterTrustBundle: path: path labelSelector: @@ -108712,7 +110973,7 @@ components: signerName: signerName - downwardAPI: items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -108721,7 +110982,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -108734,26 +110995,33 @@ components: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key + podCertificate: + certificateChainPath: certificateChainPath + keyPath: keyPath + maxExpirationSeconds: 3 + keyType: keyType + credentialBundlePath: credentialBundlePath + signerName: signerName secret: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key serviceAccountToken: path: path audience: audience - expirationSeconds: 6 + expirationSeconds: 3 clusterTrustBundle: path: path labelSelector: @@ -108773,7 +111041,7 @@ components: name: name optional: true signerName: signerName - defaultMode: 5 + defaultMode: 6 cephfs: path: path secretRef: @@ -108828,9 +111096,9 @@ components: readOnly: true fsType: fsType downwardAPI: - defaultMode: 6 + defaultMode: 1 items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -108839,7 +111107,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -108849,7 +111117,7 @@ components: apiVersion: apiVersion fieldPath: fieldPath awsElasticBlockStore: - partition: 9 + partition: 6 volumeID: volumeID readOnly: true fsType: fsType @@ -108859,7 +111127,7 @@ components: iscsi: chapAuthSession: true iscsiInterface: iscsiInterface - lun: 6 + lun: 5 chapAuthDiscovery: true iqn: iqn portals: @@ -108884,14 +111152,14 @@ components: - monitors - monitors configMap: - defaultMode: 6 + defaultMode: 3 name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key storageos: @@ -108931,7 +111199,7 @@ components: volumePath: volumePath fsType: fsType fc: - lun: 2 + lun: 6 targetWWNs: - targetWWNs - targetWWNs @@ -108957,11 +111225,24 @@ components: name: name - devicePath: devicePath name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator stdin: true terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -109191,6 +111472,11 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key - name: name value: value valueFrom: @@ -109209,6 +111495,11 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key restartPolicy: restartPolicy command: - command @@ -109224,11 +111515,24 @@ components: name: name - devicePath: devicePath name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator stdin: true terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -109458,6 +111762,11 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key - name: name value: value valueFrom: @@ -109476,6 +111785,11 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key restartPolicy: restartPolicy command: - command @@ -109487,7 +111801,7 @@ components: tty: true stdinOnce: true serviceAccount: serviceAccount - priority: 6 + priority: 7 restartPolicy: restartPolicy shareProcessNamespace: true hostUsers: true @@ -109505,50 +111819,24 @@ components: name: name - devicePath: devicePath name: name - image: image - imagePullPolicy: imagePullPolicy - livenessProbe: - terminationGracePeriodSeconds: 2 - failureThreshold: 5 - periodSeconds: 9 - tcpSocket: - port: port - host: host - timeoutSeconds: 4 - successThreshold: 3 - initialDelaySeconds: 7 - exec: - command: - - command - - command - grpc: - port: 2 - service: service - httpGet: - path: path - scheme: scheme - port: port - host: host - httpHeaders: - - name: name - value: value - - name: name - value: value + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator stdin: true terminationMessagePolicy: terminationMessagePolicy - terminationMessagePath: terminationMessagePath - workingDir: workingDir - resources: - claims: - - request: request - name: name - - request: request - name: name - requests: {} - limits: {} securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -109604,43 +111892,6 @@ components: value: value - name: name value: value - env: - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath ports: - protocol: protocol hostIP: hostIP @@ -109652,10 +111903,6 @@ components: name: name containerPort: 7 hostPort: 1 - restartPolicy: restartPolicy - command: - - command - - command volumeMounts: - mountPath: mountPath mountPropagation: mountPropagation @@ -109671,9 +111918,6 @@ components: subPath: subPath recursiveReadOnly: recursiveReadOnly subPathExpr: subPathExpr - args: - - args - - args lifecycle: postStart: sleep: @@ -109716,8 +111960,6 @@ components: - name: name value: value stopSignal: stopSignal - name: name - tty: true readinessProbe: terminationGracePeriodSeconds: 2 failureThreshold: 5 @@ -109750,7 +111992,6 @@ components: restartPolicy: restartPolicy - resourceName: resourceName restartPolicy: restartPolicy - stdinOnce: true envFrom: - configMapRef: name: name @@ -109766,11 +112007,6 @@ components: secretRef: name: name optional: true - - volumeDevices: - - devicePath: devicePath - name: name - - devicePath: devicePath - name: name image: image imagePullPolicy: imagePullPolicy livenessProbe: @@ -109800,8 +112036,6 @@ components: value: value - name: name value: value - stdin: true - terminationMessagePolicy: terminationMessagePolicy terminationMessagePath: terminationMessagePath workingDir: workingDir resources: @@ -109812,9 +112046,86 @@ components: name: name requests: {} limits: {} + env: + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + restartPolicy: restartPolicy + command: + - command + - command + args: + - args + - args + name: name + tty: true + stdinOnce: true + - volumeDevices: + - devicePath: devicePath + name: name + - devicePath: devicePath + name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + stdin: true + terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -109870,43 +112181,6 @@ components: value: value - name: name value: value - env: - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath ports: - protocol: protocol hostIP: hostIP @@ -109918,10 +112192,6 @@ components: name: name containerPort: 7 hostPort: 1 - restartPolicy: restartPolicy - command: - - command - - command volumeMounts: - mountPath: mountPath mountPropagation: mountPropagation @@ -109937,9 +112207,6 @@ components: subPath: subPath recursiveReadOnly: recursiveReadOnly subPathExpr: subPathExpr - args: - - args - - args lifecycle: postStart: sleep: @@ -109982,8 +112249,6 @@ components: - name: name value: value stopSignal: stopSignal - name: name - tty: true readinessProbe: terminationGracePeriodSeconds: 2 failureThreshold: 5 @@ -110016,7 +112281,6 @@ components: restartPolicy: restartPolicy - resourceName: resourceName restartPolicy: restartPolicy - stdinOnce: true envFrom: - configMapRef: name: name @@ -110032,12 +112296,6 @@ components: secretRef: name: name optional: true - initContainers: - - volumeDevices: - - devicePath: devicePath - name: name - - devicePath: devicePath - name: name image: image imagePullPolicy: imagePullPolicy livenessProbe: @@ -110067,8 +112325,6 @@ components: value: value - name: name value: value - stdin: true - terminationMessagePolicy: terminationMessagePolicy terminationMessagePath: terminationMessagePath workingDir: workingDir resources: @@ -110079,9 +112335,87 @@ components: name: name requests: {} limits: {} + env: + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + restartPolicy: restartPolicy + command: + - command + - command + args: + - args + - args + name: name + tty: true + stdinOnce: true + initContainers: + - volumeDevices: + - devicePath: devicePath + name: name + - devicePath: devicePath + name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + stdin: true + terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -110137,43 +112471,6 @@ components: value: value - name: name value: value - env: - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath ports: - protocol: protocol hostIP: hostIP @@ -110185,10 +112482,6 @@ components: name: name containerPort: 7 hostPort: 1 - restartPolicy: restartPolicy - command: - - command - - command volumeMounts: - mountPath: mountPath mountPropagation: mountPropagation @@ -110204,9 +112497,6 @@ components: subPath: subPath recursiveReadOnly: recursiveReadOnly subPathExpr: subPathExpr - args: - - args - - args lifecycle: postStart: sleep: @@ -110249,8 +112539,6 @@ components: - name: name value: value stopSignal: stopSignal - name: name - tty: true readinessProbe: terminationGracePeriodSeconds: 2 failureThreshold: 5 @@ -110283,7 +112571,6 @@ components: restartPolicy: restartPolicy - resourceName: resourceName restartPolicy: restartPolicy - stdinOnce: true envFrom: - configMapRef: name: name @@ -110299,11 +112586,6 @@ components: secretRef: name: name optional: true - - volumeDevices: - - devicePath: devicePath - name: name - - devicePath: devicePath - name: name image: image imagePullPolicy: imagePullPolicy livenessProbe: @@ -110333,8 +112615,6 @@ components: value: value - name: name value: value - stdin: true - terminationMessagePolicy: terminationMessagePolicy terminationMessagePath: terminationMessagePath workingDir: workingDir resources: @@ -110345,9 +112625,86 @@ components: name: name requests: {} limits: {} + env: + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + restartPolicy: restartPolicy + command: + - command + - command + args: + - args + - args + name: name + tty: true + stdinOnce: true + - volumeDevices: + - devicePath: devicePath + name: name + - devicePath: devicePath + name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + stdin: true + terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -110403,43 +112760,6 @@ components: value: value - name: name value: value - env: - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath ports: - protocol: protocol hostIP: hostIP @@ -110451,10 +112771,6 @@ components: name: name containerPort: 7 hostPort: 1 - restartPolicy: restartPolicy - command: - - command - - command volumeMounts: - mountPath: mountPath mountPropagation: mountPropagation @@ -110470,9 +112786,6 @@ components: subPath: subPath recursiveReadOnly: recursiveReadOnly subPathExpr: subPathExpr - args: - - args - - args lifecycle: postStart: sleep: @@ -110515,8 +112828,6 @@ components: - name: name value: value stopSignal: stopSignal - name: name - tty: true readinessProbe: terminationGracePeriodSeconds: 2 failureThreshold: 5 @@ -110549,7 +112860,6 @@ components: restartPolicy: restartPolicy - resourceName: resourceName restartPolicy: restartPolicy - stdinOnce: true envFrom: - configMapRef: name: name @@ -110565,6 +112875,102 @@ components: secretRef: name: name optional: true + image: image + imagePullPolicy: imagePullPolicy + livenessProbe: + terminationGracePeriodSeconds: 2 + failureThreshold: 5 + periodSeconds: 9 + tcpSocket: + port: port + host: host + timeoutSeconds: 4 + successThreshold: 3 + initialDelaySeconds: 7 + exec: + command: + - command + - command + grpc: + port: 2 + service: service + httpGet: + path: path + scheme: scheme + port: port + host: host + httpHeaders: + - name: name + value: value + - name: name + value: value + terminationMessagePath: terminationMessagePath + workingDir: workingDir + resources: + claims: + - request: request + name: name + - request: request + name: name + requests: {} + limits: {} + env: + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + restartPolicy: restartPolicy + command: + - command + - command + args: + - args + - args + name: name + tty: true + stdinOnce: true affinity: nodeAffinity: requiredDuringSchedulingIgnoredDuringExecution: @@ -111214,6 +113620,7 @@ components: - conditionType: conditionType - conditionType: conditionType serviceAccountName: serviceAccountName + hostnameOverride: hostnameOverride imagePullSecrets: - name: name - name: name @@ -111236,17 +113643,17 @@ components: appArmorProfile: localhostProfile: localhostProfile type: type - fsGroup: 7 + fsGroup: 1 fsGroupChangePolicy: fsGroupChangePolicy seLinuxChangePolicy: seLinuxChangePolicy - runAsGroup: 1 + runAsGroup: 4 runAsNonRoot: true sysctls: - name: name value: value - name: name value: value - runAsUser: 4 + runAsUser: 5 seccompProfile: localhostProfile: localhostProfile type: type @@ -111256,8 +113663,8 @@ components: hostProcess: true gmsaCredentialSpecName: gmsaCredentialSpecName supplementalGroups: - - 5 - - 5 + - 9 + - 9 supplementalGroupsPolicy: supplementalGroupsPolicy preemptionPolicy: preemptionPolicy nodeSelector: @@ -111266,12 +113673,12 @@ components: runtimeClassName: runtimeClassName tolerations: - effect: effect - tolerationSeconds: 9 + tolerationSeconds: 6 value: value key: key operator: operator - effect: effect - tolerationSeconds: 9 + tolerationSeconds: 6 value: value key: key operator: operator @@ -111290,7 +113697,7 @@ components: topologySpreadConstraints: - nodeTaintsPolicy: nodeTaintsPolicy whenUnsatisfiable: whenUnsatisfiable - maxSkew: 6 + maxSkew: 8 nodeAffinityPolicy: nodeAffinityPolicy labelSelector: matchExpressions: @@ -111306,14 +113713,14 @@ components: operator: operator matchLabels: key: matchLabels - minDomains: 8 + minDomains: 9 topologyKey: topologyKey matchLabelKeys: - matchLabelKeys - matchLabelKeys - nodeTaintsPolicy: nodeTaintsPolicy whenUnsatisfiable: whenUnsatisfiable - maxSkew: 6 + maxSkew: 8 nodeAffinityPolicy: nodeAffinityPolicy labelSelector: matchExpressions: @@ -111329,7 +113736,7 @@ components: operator: operator matchLabels: key: matchLabels - minDomains: 8 + minDomains: 9 topologyKey: topologyKey matchLabelKeys: - matchLabelKeys @@ -111438,20 +113845,20 @@ components: volumeMode: volumeMode secret: secretName: secretName - defaultMode: 3 + defaultMode: 7 optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key projected: sources: - downwardAPI: items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -111460,7 +113867,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -111473,26 +113880,33 @@ components: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key + podCertificate: + certificateChainPath: certificateChainPath + keyPath: keyPath + maxExpirationSeconds: 3 + keyType: keyType + credentialBundlePath: credentialBundlePath + signerName: signerName secret: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key serviceAccountToken: path: path audience: audience - expirationSeconds: 6 + expirationSeconds: 3 clusterTrustBundle: path: path labelSelector: @@ -111514,7 +113928,7 @@ components: signerName: signerName - downwardAPI: items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -111523,7 +113937,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -111536,26 +113950,33 @@ components: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key + podCertificate: + certificateChainPath: certificateChainPath + keyPath: keyPath + maxExpirationSeconds: 3 + keyType: keyType + credentialBundlePath: credentialBundlePath + signerName: signerName secret: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key serviceAccountToken: path: path audience: audience - expirationSeconds: 6 + expirationSeconds: 3 clusterTrustBundle: path: path labelSelector: @@ -111575,7 +113996,7 @@ components: name: name optional: true signerName: signerName - defaultMode: 5 + defaultMode: 6 cephfs: path: path secretRef: @@ -111630,9 +114051,9 @@ components: readOnly: true fsType: fsType downwardAPI: - defaultMode: 6 + defaultMode: 1 items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -111641,7 +114062,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -111651,7 +114072,7 @@ components: apiVersion: apiVersion fieldPath: fieldPath awsElasticBlockStore: - partition: 9 + partition: 6 volumeID: volumeID readOnly: true fsType: fsType @@ -111661,7 +114082,7 @@ components: iscsi: chapAuthSession: true iscsiInterface: iscsiInterface - lun: 6 + lun: 5 chapAuthDiscovery: true iqn: iqn portals: @@ -111686,14 +114107,14 @@ components: - monitors - monitors configMap: - defaultMode: 6 + defaultMode: 3 name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key storageos: @@ -111733,7 +114154,7 @@ components: volumePath: volumePath fsType: fsType fc: - lun: 2 + lun: 6 targetWWNs: - targetWWNs - targetWWNs @@ -111848,20 +114269,20 @@ components: volumeMode: volumeMode secret: secretName: secretName - defaultMode: 3 + defaultMode: 7 optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key projected: sources: - downwardAPI: items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -111870,7 +114291,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -111883,26 +114304,33 @@ components: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key + podCertificate: + certificateChainPath: certificateChainPath + keyPath: keyPath + maxExpirationSeconds: 3 + keyType: keyType + credentialBundlePath: credentialBundlePath + signerName: signerName secret: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key serviceAccountToken: path: path audience: audience - expirationSeconds: 6 + expirationSeconds: 3 clusterTrustBundle: path: path labelSelector: @@ -111924,7 +114352,7 @@ components: signerName: signerName - downwardAPI: items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -111933,7 +114361,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -111946,26 +114374,33 @@ components: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key + podCertificate: + certificateChainPath: certificateChainPath + keyPath: keyPath + maxExpirationSeconds: 3 + keyType: keyType + credentialBundlePath: credentialBundlePath + signerName: signerName secret: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key serviceAccountToken: path: path audience: audience - expirationSeconds: 6 + expirationSeconds: 3 clusterTrustBundle: path: path labelSelector: @@ -111985,7 +114420,7 @@ components: name: name optional: true signerName: signerName - defaultMode: 5 + defaultMode: 6 cephfs: path: path secretRef: @@ -112040,9 +114475,9 @@ components: readOnly: true fsType: fsType downwardAPI: - defaultMode: 6 + defaultMode: 1 items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -112051,7 +114486,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -112061,7 +114496,7 @@ components: apiVersion: apiVersion fieldPath: fieldPath awsElasticBlockStore: - partition: 9 + partition: 6 volumeID: volumeID readOnly: true fsType: fsType @@ -112071,7 +114506,7 @@ components: iscsi: chapAuthSession: true iscsiInterface: iscsiInterface - lun: 6 + lun: 5 chapAuthDiscovery: true iqn: iqn portals: @@ -112096,14 +114531,14 @@ components: - monitors - monitors configMap: - defaultMode: 6 + defaultMode: 3 name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key storageos: @@ -112143,7 +114578,7 @@ components: volumePath: volumePath fsType: fsType fc: - lun: 2 + lun: 6 targetWWNs: - targetWWNs - targetWWNs @@ -112169,11 +114604,24 @@ components: name: name - devicePath: devicePath name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator stdin: true terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -112403,6 +114851,11 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key - name: name value: value valueFrom: @@ -112421,6 +114874,11 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key restartPolicy: restartPolicy command: - command @@ -112436,11 +114894,24 @@ components: name: name - devicePath: devicePath name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator stdin: true terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -112670,6 +115141,11 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key - name: name value: value valueFrom: @@ -112688,6 +115164,11 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key restartPolicy: restartPolicy command: - command @@ -112699,7 +115180,7 @@ components: tty: true stdinOnce: true serviceAccount: serviceAccount - priority: 6 + priority: 7 restartPolicy: restartPolicy shareProcessNamespace: true hostUsers: true @@ -112717,50 +115198,24 @@ components: name: name - devicePath: devicePath name: name - image: image - imagePullPolicy: imagePullPolicy - livenessProbe: - terminationGracePeriodSeconds: 2 - failureThreshold: 5 - periodSeconds: 9 - tcpSocket: - port: port - host: host - timeoutSeconds: 4 - successThreshold: 3 - initialDelaySeconds: 7 - exec: - command: - - command - - command - grpc: - port: 2 - service: service - httpGet: - path: path - scheme: scheme - port: port - host: host - httpHeaders: - - name: name - value: value - - name: name - value: value + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator stdin: true terminationMessagePolicy: terminationMessagePolicy - terminationMessagePath: terminationMessagePath - workingDir: workingDir - resources: - claims: - - request: request - name: name - - request: request - name: name - requests: {} - limits: {} securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -112816,43 +115271,6 @@ components: value: value - name: name value: value - env: - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath ports: - protocol: protocol hostIP: hostIP @@ -112864,10 +115282,6 @@ components: name: name containerPort: 7 hostPort: 1 - restartPolicy: restartPolicy - command: - - command - - command volumeMounts: - mountPath: mountPath mountPropagation: mountPropagation @@ -112883,9 +115297,6 @@ components: subPath: subPath recursiveReadOnly: recursiveReadOnly subPathExpr: subPathExpr - args: - - args - - args lifecycle: postStart: sleep: @@ -112928,8 +115339,6 @@ components: - name: name value: value stopSignal: stopSignal - name: name - tty: true readinessProbe: terminationGracePeriodSeconds: 2 failureThreshold: 5 @@ -112962,7 +115371,6 @@ components: restartPolicy: restartPolicy - resourceName: resourceName restartPolicy: restartPolicy - stdinOnce: true envFrom: - configMapRef: name: name @@ -112978,11 +115386,6 @@ components: secretRef: name: name optional: true - - volumeDevices: - - devicePath: devicePath - name: name - - devicePath: devicePath - name: name image: image imagePullPolicy: imagePullPolicy livenessProbe: @@ -113012,8 +115415,6 @@ components: value: value - name: name value: value - stdin: true - terminationMessagePolicy: terminationMessagePolicy terminationMessagePath: terminationMessagePath workingDir: workingDir resources: @@ -113024,9 +115425,86 @@ components: name: name requests: {} limits: {} + env: + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + restartPolicy: restartPolicy + command: + - command + - command + args: + - args + - args + name: name + tty: true + stdinOnce: true + - volumeDevices: + - devicePath: devicePath + name: name + - devicePath: devicePath + name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + stdin: true + terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -113082,43 +115560,6 @@ components: value: value - name: name value: value - env: - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath ports: - protocol: protocol hostIP: hostIP @@ -113130,10 +115571,6 @@ components: name: name containerPort: 7 hostPort: 1 - restartPolicy: restartPolicy - command: - - command - - command volumeMounts: - mountPath: mountPath mountPropagation: mountPropagation @@ -113149,9 +115586,6 @@ components: subPath: subPath recursiveReadOnly: recursiveReadOnly subPathExpr: subPathExpr - args: - - args - - args lifecycle: postStart: sleep: @@ -113194,8 +115628,6 @@ components: - name: name value: value stopSignal: stopSignal - name: name - tty: true readinessProbe: terminationGracePeriodSeconds: 2 failureThreshold: 5 @@ -113228,7 +115660,6 @@ components: restartPolicy: restartPolicy - resourceName: resourceName restartPolicy: restartPolicy - stdinOnce: true envFrom: - configMapRef: name: name @@ -113244,12 +115675,6 @@ components: secretRef: name: name optional: true - initContainers: - - volumeDevices: - - devicePath: devicePath - name: name - - devicePath: devicePath - name: name image: image imagePullPolicy: imagePullPolicy livenessProbe: @@ -113279,8 +115704,6 @@ components: value: value - name: name value: value - stdin: true - terminationMessagePolicy: terminationMessagePolicy terminationMessagePath: terminationMessagePath workingDir: workingDir resources: @@ -113291,9 +115714,87 @@ components: name: name requests: {} limits: {} + env: + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + restartPolicy: restartPolicy + command: + - command + - command + args: + - args + - args + name: name + tty: true + stdinOnce: true + initContainers: + - volumeDevices: + - devicePath: devicePath + name: name + - devicePath: devicePath + name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + stdin: true + terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -113349,43 +115850,6 @@ components: value: value - name: name value: value - env: - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath ports: - protocol: protocol hostIP: hostIP @@ -113397,10 +115861,6 @@ components: name: name containerPort: 7 hostPort: 1 - restartPolicy: restartPolicy - command: - - command - - command volumeMounts: - mountPath: mountPath mountPropagation: mountPropagation @@ -113416,9 +115876,6 @@ components: subPath: subPath recursiveReadOnly: recursiveReadOnly subPathExpr: subPathExpr - args: - - args - - args lifecycle: postStart: sleep: @@ -113461,8 +115918,6 @@ components: - name: name value: value stopSignal: stopSignal - name: name - tty: true readinessProbe: terminationGracePeriodSeconds: 2 failureThreshold: 5 @@ -113495,7 +115950,6 @@ components: restartPolicy: restartPolicy - resourceName: resourceName restartPolicy: restartPolicy - stdinOnce: true envFrom: - configMapRef: name: name @@ -113511,11 +115965,6 @@ components: secretRef: name: name optional: true - - volumeDevices: - - devicePath: devicePath - name: name - - devicePath: devicePath - name: name image: image imagePullPolicy: imagePullPolicy livenessProbe: @@ -113545,8 +115994,6 @@ components: value: value - name: name value: value - stdin: true - terminationMessagePolicy: terminationMessagePolicy terminationMessagePath: terminationMessagePath workingDir: workingDir resources: @@ -113557,9 +116004,86 @@ components: name: name requests: {} limits: {} + env: + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + restartPolicy: restartPolicy + command: + - command + - command + args: + - args + - args + name: name + tty: true + stdinOnce: true + - volumeDevices: + - devicePath: devicePath + name: name + - devicePath: devicePath + name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + stdin: true + terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -113615,43 +116139,6 @@ components: value: value - name: name value: value - env: - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath ports: - protocol: protocol hostIP: hostIP @@ -113663,10 +116150,6 @@ components: name: name containerPort: 7 hostPort: 1 - restartPolicy: restartPolicy - command: - - command - - command volumeMounts: - mountPath: mountPath mountPropagation: mountPropagation @@ -113682,9 +116165,6 @@ components: subPath: subPath recursiveReadOnly: recursiveReadOnly subPathExpr: subPathExpr - args: - - args - - args lifecycle: postStart: sleep: @@ -113727,8 +116207,6 @@ components: - name: name value: value stopSignal: stopSignal - name: name - tty: true readinessProbe: terminationGracePeriodSeconds: 2 failureThreshold: 5 @@ -113761,7 +116239,6 @@ components: restartPolicy: restartPolicy - resourceName: resourceName restartPolicy: restartPolicy - stdinOnce: true envFrom: - configMapRef: name: name @@ -113777,6 +116254,102 @@ components: secretRef: name: name optional: true + image: image + imagePullPolicy: imagePullPolicy + livenessProbe: + terminationGracePeriodSeconds: 2 + failureThreshold: 5 + periodSeconds: 9 + tcpSocket: + port: port + host: host + timeoutSeconds: 4 + successThreshold: 3 + initialDelaySeconds: 7 + exec: + command: + - command + - command + grpc: + port: 2 + service: service + httpGet: + path: path + scheme: scheme + port: port + host: host + httpHeaders: + - name: name + value: value + - name: name + value: value + terminationMessagePath: terminationMessagePath + workingDir: workingDir + resources: + claims: + - request: request + name: name + - request: request + name: name + requests: {} + limits: {} + env: + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + restartPolicy: restartPolicy + command: + - command + - command + args: + - args + - args + name: name + tty: true + stdinOnce: true affinity: nodeAffinity: requiredDuringSchedulingIgnoredDuringExecution: @@ -114356,6 +116929,7 @@ components: - conditionType: conditionType - conditionType: conditionType serviceAccountName: serviceAccountName + hostnameOverride: hostnameOverride imagePullSecrets: - name: name - name: name @@ -114378,17 +116952,17 @@ components: appArmorProfile: localhostProfile: localhostProfile type: type - fsGroup: 7 + fsGroup: 1 fsGroupChangePolicy: fsGroupChangePolicy seLinuxChangePolicy: seLinuxChangePolicy - runAsGroup: 1 + runAsGroup: 4 runAsNonRoot: true sysctls: - name: name value: value - name: name value: value - runAsUser: 4 + runAsUser: 5 seccompProfile: localhostProfile: localhostProfile type: type @@ -114398,8 +116972,8 @@ components: hostProcess: true gmsaCredentialSpecName: gmsaCredentialSpecName supplementalGroups: - - 5 - - 5 + - 9 + - 9 supplementalGroupsPolicy: supplementalGroupsPolicy preemptionPolicy: preemptionPolicy nodeSelector: @@ -114408,12 +116982,12 @@ components: runtimeClassName: runtimeClassName tolerations: - effect: effect - tolerationSeconds: 9 + tolerationSeconds: 6 value: value key: key operator: operator - effect: effect - tolerationSeconds: 9 + tolerationSeconds: 6 value: value key: key operator: operator @@ -114432,7 +117006,7 @@ components: topologySpreadConstraints: - nodeTaintsPolicy: nodeTaintsPolicy whenUnsatisfiable: whenUnsatisfiable - maxSkew: 6 + maxSkew: 8 nodeAffinityPolicy: nodeAffinityPolicy labelSelector: matchExpressions: @@ -114448,14 +117022,14 @@ components: operator: operator matchLabels: key: matchLabels - minDomains: 8 + minDomains: 9 topologyKey: topologyKey matchLabelKeys: - matchLabelKeys - matchLabelKeys - nodeTaintsPolicy: nodeTaintsPolicy whenUnsatisfiable: whenUnsatisfiable - maxSkew: 6 + maxSkew: 8 nodeAffinityPolicy: nodeAffinityPolicy labelSelector: matchExpressions: @@ -114471,7 +117045,7 @@ components: operator: operator matchLabels: key: matchLabels - minDomains: 8 + minDomains: 9 topologyKey: topologyKey matchLabelKeys: - matchLabelKeys @@ -114580,20 +117154,20 @@ components: volumeMode: volumeMode secret: secretName: secretName - defaultMode: 3 + defaultMode: 7 optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key projected: sources: - downwardAPI: items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -114602,7 +117176,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -114615,26 +117189,33 @@ components: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key + podCertificate: + certificateChainPath: certificateChainPath + keyPath: keyPath + maxExpirationSeconds: 3 + keyType: keyType + credentialBundlePath: credentialBundlePath + signerName: signerName secret: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key serviceAccountToken: path: path audience: audience - expirationSeconds: 6 + expirationSeconds: 3 clusterTrustBundle: path: path labelSelector: @@ -114656,7 +117237,7 @@ components: signerName: signerName - downwardAPI: items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -114665,7 +117246,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -114678,26 +117259,33 @@ components: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key + podCertificate: + certificateChainPath: certificateChainPath + keyPath: keyPath + maxExpirationSeconds: 3 + keyType: keyType + credentialBundlePath: credentialBundlePath + signerName: signerName secret: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key serviceAccountToken: path: path audience: audience - expirationSeconds: 6 + expirationSeconds: 3 clusterTrustBundle: path: path labelSelector: @@ -114717,7 +117305,7 @@ components: name: name optional: true signerName: signerName - defaultMode: 5 + defaultMode: 6 cephfs: path: path secretRef: @@ -114772,9 +117360,9 @@ components: readOnly: true fsType: fsType downwardAPI: - defaultMode: 6 + defaultMode: 1 items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -114783,7 +117371,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -114793,7 +117381,7 @@ components: apiVersion: apiVersion fieldPath: fieldPath awsElasticBlockStore: - partition: 9 + partition: 6 volumeID: volumeID readOnly: true fsType: fsType @@ -114803,7 +117391,7 @@ components: iscsi: chapAuthSession: true iscsiInterface: iscsiInterface - lun: 6 + lun: 5 chapAuthDiscovery: true iqn: iqn portals: @@ -114828,14 +117416,14 @@ components: - monitors - monitors configMap: - defaultMode: 6 + defaultMode: 3 name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key storageos: @@ -114875,7 +117463,7 @@ components: volumePath: volumePath fsType: fsType fc: - lun: 2 + lun: 6 targetWWNs: - targetWWNs - targetWWNs @@ -114990,20 +117578,20 @@ components: volumeMode: volumeMode secret: secretName: secretName - defaultMode: 3 + defaultMode: 7 optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key projected: sources: - downwardAPI: items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -115012,7 +117600,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -115025,26 +117613,33 @@ components: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key + podCertificate: + certificateChainPath: certificateChainPath + keyPath: keyPath + maxExpirationSeconds: 3 + keyType: keyType + credentialBundlePath: credentialBundlePath + signerName: signerName secret: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key serviceAccountToken: path: path audience: audience - expirationSeconds: 6 + expirationSeconds: 3 clusterTrustBundle: path: path labelSelector: @@ -115066,7 +117661,7 @@ components: signerName: signerName - downwardAPI: items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -115075,7 +117670,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -115088,26 +117683,33 @@ components: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key + podCertificate: + certificateChainPath: certificateChainPath + keyPath: keyPath + maxExpirationSeconds: 3 + keyType: keyType + credentialBundlePath: credentialBundlePath + signerName: signerName secret: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key serviceAccountToken: path: path audience: audience - expirationSeconds: 6 + expirationSeconds: 3 clusterTrustBundle: path: path labelSelector: @@ -115127,7 +117729,7 @@ components: name: name optional: true signerName: signerName - defaultMode: 5 + defaultMode: 6 cephfs: path: path secretRef: @@ -115182,9 +117784,9 @@ components: readOnly: true fsType: fsType downwardAPI: - defaultMode: 6 + defaultMode: 1 items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -115193,7 +117795,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -115203,7 +117805,7 @@ components: apiVersion: apiVersion fieldPath: fieldPath awsElasticBlockStore: - partition: 9 + partition: 6 volumeID: volumeID readOnly: true fsType: fsType @@ -115213,7 +117815,7 @@ components: iscsi: chapAuthSession: true iscsiInterface: iscsiInterface - lun: 6 + lun: 5 chapAuthDiscovery: true iqn: iqn portals: @@ -115238,14 +117840,14 @@ components: - monitors - monitors configMap: - defaultMode: 6 + defaultMode: 3 name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key storageos: @@ -115285,7 +117887,7 @@ components: volumePath: volumePath fsType: fsType fc: - lun: 2 + lun: 6 targetWWNs: - targetWWNs - targetWWNs @@ -115311,11 +117913,24 @@ components: name: name - devicePath: devicePath name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator stdin: true terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -115545,6 +118160,11 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key - name: name value: value valueFrom: @@ -115563,6 +118183,11 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key restartPolicy: restartPolicy command: - command @@ -115578,11 +118203,24 @@ components: name: name - devicePath: devicePath name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator stdin: true terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -115812,6 +118450,11 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key - name: name value: value valueFrom: @@ -115830,6 +118473,11 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key restartPolicy: restartPolicy command: - command @@ -115841,7 +118489,7 @@ components: tty: true stdinOnce: true serviceAccount: serviceAccount - priority: 6 + priority: 7 restartPolicy: restartPolicy shareProcessNamespace: true hostUsers: true @@ -115859,50 +118507,24 @@ components: name: name - devicePath: devicePath name: name - image: image - imagePullPolicy: imagePullPolicy - livenessProbe: - terminationGracePeriodSeconds: 2 - failureThreshold: 5 - periodSeconds: 9 - tcpSocket: - port: port - host: host - timeoutSeconds: 4 - successThreshold: 3 - initialDelaySeconds: 7 - exec: - command: - - command - - command - grpc: - port: 2 - service: service - httpGet: - path: path - scheme: scheme - port: port - host: host - httpHeaders: - - name: name - value: value - - name: name - value: value + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator stdin: true terminationMessagePolicy: terminationMessagePolicy - terminationMessagePath: terminationMessagePath - workingDir: workingDir - resources: - claims: - - request: request - name: name - - request: request - name: name - requests: {} - limits: {} securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -115958,43 +118580,6 @@ components: value: value - name: name value: value - env: - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath ports: - protocol: protocol hostIP: hostIP @@ -116006,10 +118591,6 @@ components: name: name containerPort: 7 hostPort: 1 - restartPolicy: restartPolicy - command: - - command - - command volumeMounts: - mountPath: mountPath mountPropagation: mountPropagation @@ -116025,9 +118606,6 @@ components: subPath: subPath recursiveReadOnly: recursiveReadOnly subPathExpr: subPathExpr - args: - - args - - args lifecycle: postStart: sleep: @@ -116070,8 +118648,6 @@ components: - name: name value: value stopSignal: stopSignal - name: name - tty: true readinessProbe: terminationGracePeriodSeconds: 2 failureThreshold: 5 @@ -116104,7 +118680,6 @@ components: restartPolicy: restartPolicy - resourceName: resourceName restartPolicy: restartPolicy - stdinOnce: true envFrom: - configMapRef: name: name @@ -116120,11 +118695,6 @@ components: secretRef: name: name optional: true - - volumeDevices: - - devicePath: devicePath - name: name - - devicePath: devicePath - name: name image: image imagePullPolicy: imagePullPolicy livenessProbe: @@ -116154,8 +118724,6 @@ components: value: value - name: name value: value - stdin: true - terminationMessagePolicy: terminationMessagePolicy terminationMessagePath: terminationMessagePath workingDir: workingDir resources: @@ -116166,9 +118734,86 @@ components: name: name requests: {} limits: {} + env: + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + restartPolicy: restartPolicy + command: + - command + - command + args: + - args + - args + name: name + tty: true + stdinOnce: true + - volumeDevices: + - devicePath: devicePath + name: name + - devicePath: devicePath + name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + stdin: true + terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -116224,43 +118869,6 @@ components: value: value - name: name value: value - env: - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath ports: - protocol: protocol hostIP: hostIP @@ -116272,10 +118880,6 @@ components: name: name containerPort: 7 hostPort: 1 - restartPolicy: restartPolicy - command: - - command - - command volumeMounts: - mountPath: mountPath mountPropagation: mountPropagation @@ -116291,9 +118895,6 @@ components: subPath: subPath recursiveReadOnly: recursiveReadOnly subPathExpr: subPathExpr - args: - - args - - args lifecycle: postStart: sleep: @@ -116336,8 +118937,6 @@ components: - name: name value: value stopSignal: stopSignal - name: name - tty: true readinessProbe: terminationGracePeriodSeconds: 2 failureThreshold: 5 @@ -116370,7 +118969,6 @@ components: restartPolicy: restartPolicy - resourceName: resourceName restartPolicy: restartPolicy - stdinOnce: true envFrom: - configMapRef: name: name @@ -116386,12 +118984,6 @@ components: secretRef: name: name optional: true - initContainers: - - volumeDevices: - - devicePath: devicePath - name: name - - devicePath: devicePath - name: name image: image imagePullPolicy: imagePullPolicy livenessProbe: @@ -116421,8 +119013,6 @@ components: value: value - name: name value: value - stdin: true - terminationMessagePolicy: terminationMessagePolicy terminationMessagePath: terminationMessagePath workingDir: workingDir resources: @@ -116433,9 +119023,87 @@ components: name: name requests: {} limits: {} + env: + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + restartPolicy: restartPolicy + command: + - command + - command + args: + - args + - args + name: name + tty: true + stdinOnce: true + initContainers: + - volumeDevices: + - devicePath: devicePath + name: name + - devicePath: devicePath + name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + stdin: true + terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -116491,43 +119159,6 @@ components: value: value - name: name value: value - env: - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath ports: - protocol: protocol hostIP: hostIP @@ -116539,10 +119170,6 @@ components: name: name containerPort: 7 hostPort: 1 - restartPolicy: restartPolicy - command: - - command - - command volumeMounts: - mountPath: mountPath mountPropagation: mountPropagation @@ -116558,9 +119185,6 @@ components: subPath: subPath recursiveReadOnly: recursiveReadOnly subPathExpr: subPathExpr - args: - - args - - args lifecycle: postStart: sleep: @@ -116603,8 +119227,6 @@ components: - name: name value: value stopSignal: stopSignal - name: name - tty: true readinessProbe: terminationGracePeriodSeconds: 2 failureThreshold: 5 @@ -116637,7 +119259,6 @@ components: restartPolicy: restartPolicy - resourceName: resourceName restartPolicy: restartPolicy - stdinOnce: true envFrom: - configMapRef: name: name @@ -116653,11 +119274,6 @@ components: secretRef: name: name optional: true - - volumeDevices: - - devicePath: devicePath - name: name - - devicePath: devicePath - name: name image: image imagePullPolicy: imagePullPolicy livenessProbe: @@ -116687,8 +119303,6 @@ components: value: value - name: name value: value - stdin: true - terminationMessagePolicy: terminationMessagePolicy terminationMessagePath: terminationMessagePath workingDir: workingDir resources: @@ -116699,9 +119313,86 @@ components: name: name requests: {} limits: {} + env: + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + restartPolicy: restartPolicy + command: + - command + - command + args: + - args + - args + name: name + tty: true + stdinOnce: true + - volumeDevices: + - devicePath: devicePath + name: name + - devicePath: devicePath + name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + stdin: true + terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -116757,43 +119448,6 @@ components: value: value - name: name value: value - env: - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath ports: - protocol: protocol hostIP: hostIP @@ -116805,10 +119459,6 @@ components: name: name containerPort: 7 hostPort: 1 - restartPolicy: restartPolicy - command: - - command - - command volumeMounts: - mountPath: mountPath mountPropagation: mountPropagation @@ -116824,9 +119474,6 @@ components: subPath: subPath recursiveReadOnly: recursiveReadOnly subPathExpr: subPathExpr - args: - - args - - args lifecycle: postStart: sleep: @@ -116869,8 +119516,6 @@ components: - name: name value: value stopSignal: stopSignal - name: name - tty: true readinessProbe: terminationGracePeriodSeconds: 2 failureThreshold: 5 @@ -116903,7 +119548,6 @@ components: restartPolicy: restartPolicy - resourceName: resourceName restartPolicy: restartPolicy - stdinOnce: true envFrom: - configMapRef: name: name @@ -116919,6 +119563,102 @@ components: secretRef: name: name optional: true + image: image + imagePullPolicy: imagePullPolicy + livenessProbe: + terminationGracePeriodSeconds: 2 + failureThreshold: 5 + periodSeconds: 9 + tcpSocket: + port: port + host: host + timeoutSeconds: 4 + successThreshold: 3 + initialDelaySeconds: 7 + exec: + command: + - command + - command + grpc: + port: 2 + service: service + httpGet: + path: path + scheme: scheme + port: port + host: host + httpHeaders: + - name: name + value: value + - name: name + value: value + terminationMessagePath: terminationMessagePath + workingDir: workingDir + resources: + claims: + - request: request + name: name + - request: request + name: name + requests: {} + limits: {} + env: + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + restartPolicy: restartPolicy + command: + - command + - command + args: + - args + - args + name: name + tty: true + stdinOnce: true affinity: nodeAffinity: requiredDuringSchedulingIgnoredDuringExecution: @@ -117480,6 +120220,7 @@ components: - conditionType: conditionType - conditionType: conditionType serviceAccountName: serviceAccountName + hostnameOverride: hostnameOverride imagePullSecrets: - name: name - name: name @@ -117502,17 +120243,17 @@ components: appArmorProfile: localhostProfile: localhostProfile type: type - fsGroup: 7 + fsGroup: 1 fsGroupChangePolicy: fsGroupChangePolicy seLinuxChangePolicy: seLinuxChangePolicy - runAsGroup: 1 + runAsGroup: 4 runAsNonRoot: true sysctls: - name: name value: value - name: name value: value - runAsUser: 4 + runAsUser: 5 seccompProfile: localhostProfile: localhostProfile type: type @@ -117522,8 +120263,8 @@ components: hostProcess: true gmsaCredentialSpecName: gmsaCredentialSpecName supplementalGroups: - - 5 - - 5 + - 9 + - 9 supplementalGroupsPolicy: supplementalGroupsPolicy preemptionPolicy: preemptionPolicy nodeSelector: @@ -117532,12 +120273,12 @@ components: runtimeClassName: runtimeClassName tolerations: - effect: effect - tolerationSeconds: 9 + tolerationSeconds: 6 value: value key: key operator: operator - effect: effect - tolerationSeconds: 9 + tolerationSeconds: 6 value: value key: key operator: operator @@ -117556,7 +120297,7 @@ components: topologySpreadConstraints: - nodeTaintsPolicy: nodeTaintsPolicy whenUnsatisfiable: whenUnsatisfiable - maxSkew: 6 + maxSkew: 8 nodeAffinityPolicy: nodeAffinityPolicy labelSelector: matchExpressions: @@ -117572,14 +120313,14 @@ components: operator: operator matchLabels: key: matchLabels - minDomains: 8 + minDomains: 9 topologyKey: topologyKey matchLabelKeys: - matchLabelKeys - matchLabelKeys - nodeTaintsPolicy: nodeTaintsPolicy whenUnsatisfiable: whenUnsatisfiable - maxSkew: 6 + maxSkew: 8 nodeAffinityPolicy: nodeAffinityPolicy labelSelector: matchExpressions: @@ -117595,7 +120336,7 @@ components: operator: operator matchLabels: key: matchLabels - minDomains: 8 + minDomains: 9 topologyKey: topologyKey matchLabelKeys: - matchLabelKeys @@ -117704,20 +120445,20 @@ components: volumeMode: volumeMode secret: secretName: secretName - defaultMode: 3 + defaultMode: 7 optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key projected: sources: - downwardAPI: items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -117726,7 +120467,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -117739,26 +120480,33 @@ components: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key + podCertificate: + certificateChainPath: certificateChainPath + keyPath: keyPath + maxExpirationSeconds: 3 + keyType: keyType + credentialBundlePath: credentialBundlePath + signerName: signerName secret: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key serviceAccountToken: path: path audience: audience - expirationSeconds: 6 + expirationSeconds: 3 clusterTrustBundle: path: path labelSelector: @@ -117780,7 +120528,7 @@ components: signerName: signerName - downwardAPI: items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -117789,7 +120537,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -117802,26 +120550,33 @@ components: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key + podCertificate: + certificateChainPath: certificateChainPath + keyPath: keyPath + maxExpirationSeconds: 3 + keyType: keyType + credentialBundlePath: credentialBundlePath + signerName: signerName secret: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key serviceAccountToken: path: path audience: audience - expirationSeconds: 6 + expirationSeconds: 3 clusterTrustBundle: path: path labelSelector: @@ -117841,7 +120596,7 @@ components: name: name optional: true signerName: signerName - defaultMode: 5 + defaultMode: 6 cephfs: path: path secretRef: @@ -117896,9 +120651,9 @@ components: readOnly: true fsType: fsType downwardAPI: - defaultMode: 6 + defaultMode: 1 items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -117907,7 +120662,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -117917,7 +120672,7 @@ components: apiVersion: apiVersion fieldPath: fieldPath awsElasticBlockStore: - partition: 9 + partition: 6 volumeID: volumeID readOnly: true fsType: fsType @@ -117927,7 +120682,7 @@ components: iscsi: chapAuthSession: true iscsiInterface: iscsiInterface - lun: 6 + lun: 5 chapAuthDiscovery: true iqn: iqn portals: @@ -117952,14 +120707,14 @@ components: - monitors - monitors configMap: - defaultMode: 6 + defaultMode: 3 name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key storageos: @@ -117999,7 +120754,7 @@ components: volumePath: volumePath fsType: fsType fc: - lun: 2 + lun: 6 targetWWNs: - targetWWNs - targetWWNs @@ -118114,20 +120869,20 @@ components: volumeMode: volumeMode secret: secretName: secretName - defaultMode: 3 + defaultMode: 7 optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key projected: sources: - downwardAPI: items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -118136,7 +120891,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -118149,26 +120904,33 @@ components: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key + podCertificate: + certificateChainPath: certificateChainPath + keyPath: keyPath + maxExpirationSeconds: 3 + keyType: keyType + credentialBundlePath: credentialBundlePath + signerName: signerName secret: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key serviceAccountToken: path: path audience: audience - expirationSeconds: 6 + expirationSeconds: 3 clusterTrustBundle: path: path labelSelector: @@ -118190,7 +120952,7 @@ components: signerName: signerName - downwardAPI: items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -118199,7 +120961,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -118212,26 +120974,33 @@ components: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key + podCertificate: + certificateChainPath: certificateChainPath + keyPath: keyPath + maxExpirationSeconds: 3 + keyType: keyType + credentialBundlePath: credentialBundlePath + signerName: signerName secret: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key serviceAccountToken: path: path audience: audience - expirationSeconds: 6 + expirationSeconds: 3 clusterTrustBundle: path: path labelSelector: @@ -118251,7 +121020,7 @@ components: name: name optional: true signerName: signerName - defaultMode: 5 + defaultMode: 6 cephfs: path: path secretRef: @@ -118306,9 +121075,9 @@ components: readOnly: true fsType: fsType downwardAPI: - defaultMode: 6 + defaultMode: 1 items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -118317,7 +121086,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -118327,7 +121096,7 @@ components: apiVersion: apiVersion fieldPath: fieldPath awsElasticBlockStore: - partition: 9 + partition: 6 volumeID: volumeID readOnly: true fsType: fsType @@ -118337,7 +121106,7 @@ components: iscsi: chapAuthSession: true iscsiInterface: iscsiInterface - lun: 6 + lun: 5 chapAuthDiscovery: true iqn: iqn portals: @@ -118362,14 +121131,14 @@ components: - monitors - monitors configMap: - defaultMode: 6 + defaultMode: 3 name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key storageos: @@ -118409,7 +121178,7 @@ components: volumePath: volumePath fsType: fsType fc: - lun: 2 + lun: 6 targetWWNs: - targetWWNs - targetWWNs @@ -118435,11 +121204,24 @@ components: name: name - devicePath: devicePath name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator stdin: true terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -118669,6 +121451,11 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key - name: name value: value valueFrom: @@ -118687,6 +121474,11 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key restartPolicy: restartPolicy command: - command @@ -118702,11 +121494,24 @@ components: name: name - devicePath: devicePath name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator stdin: true terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -118936,6 +121741,11 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key - name: name value: value valueFrom: @@ -118954,6 +121764,11 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key restartPolicy: restartPolicy command: - command @@ -118965,7 +121780,7 @@ components: tty: true stdinOnce: true serviceAccount: serviceAccount - priority: 6 + priority: 7 restartPolicy: restartPolicy shareProcessNamespace: true hostUsers: true @@ -118983,50 +121798,24 @@ components: name: name - devicePath: devicePath name: name - image: image - imagePullPolicy: imagePullPolicy - livenessProbe: - terminationGracePeriodSeconds: 2 - failureThreshold: 5 - periodSeconds: 9 - tcpSocket: - port: port - host: host - timeoutSeconds: 4 - successThreshold: 3 - initialDelaySeconds: 7 - exec: - command: - - command - - command - grpc: - port: 2 - service: service - httpGet: - path: path - scheme: scheme - port: port - host: host - httpHeaders: - - name: name - value: value - - name: name - value: value + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator stdin: true terminationMessagePolicy: terminationMessagePolicy - terminationMessagePath: terminationMessagePath - workingDir: workingDir - resources: - claims: - - request: request - name: name - - request: request - name: name - requests: {} - limits: {} securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -119082,43 +121871,6 @@ components: value: value - name: name value: value - env: - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath ports: - protocol: protocol hostIP: hostIP @@ -119130,10 +121882,6 @@ components: name: name containerPort: 7 hostPort: 1 - restartPolicy: restartPolicy - command: - - command - - command volumeMounts: - mountPath: mountPath mountPropagation: mountPropagation @@ -119149,9 +121897,6 @@ components: subPath: subPath recursiveReadOnly: recursiveReadOnly subPathExpr: subPathExpr - args: - - args - - args lifecycle: postStart: sleep: @@ -119194,8 +121939,6 @@ components: - name: name value: value stopSignal: stopSignal - name: name - tty: true readinessProbe: terminationGracePeriodSeconds: 2 failureThreshold: 5 @@ -119228,7 +121971,6 @@ components: restartPolicy: restartPolicy - resourceName: resourceName restartPolicy: restartPolicy - stdinOnce: true envFrom: - configMapRef: name: name @@ -119244,11 +121986,6 @@ components: secretRef: name: name optional: true - - volumeDevices: - - devicePath: devicePath - name: name - - devicePath: devicePath - name: name image: image imagePullPolicy: imagePullPolicy livenessProbe: @@ -119278,8 +122015,6 @@ components: value: value - name: name value: value - stdin: true - terminationMessagePolicy: terminationMessagePolicy terminationMessagePath: terminationMessagePath workingDir: workingDir resources: @@ -119290,9 +122025,86 @@ components: name: name requests: {} limits: {} + env: + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + restartPolicy: restartPolicy + command: + - command + - command + args: + - args + - args + name: name + tty: true + stdinOnce: true + - volumeDevices: + - devicePath: devicePath + name: name + - devicePath: devicePath + name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + stdin: true + terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -119348,43 +122160,6 @@ components: value: value - name: name value: value - env: - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath ports: - protocol: protocol hostIP: hostIP @@ -119396,10 +122171,6 @@ components: name: name containerPort: 7 hostPort: 1 - restartPolicy: restartPolicy - command: - - command - - command volumeMounts: - mountPath: mountPath mountPropagation: mountPropagation @@ -119415,9 +122186,6 @@ components: subPath: subPath recursiveReadOnly: recursiveReadOnly subPathExpr: subPathExpr - args: - - args - - args lifecycle: postStart: sleep: @@ -119460,8 +122228,6 @@ components: - name: name value: value stopSignal: stopSignal - name: name - tty: true readinessProbe: terminationGracePeriodSeconds: 2 failureThreshold: 5 @@ -119494,7 +122260,6 @@ components: restartPolicy: restartPolicy - resourceName: resourceName restartPolicy: restartPolicy - stdinOnce: true envFrom: - configMapRef: name: name @@ -119510,12 +122275,6 @@ components: secretRef: name: name optional: true - initContainers: - - volumeDevices: - - devicePath: devicePath - name: name - - devicePath: devicePath - name: name image: image imagePullPolicy: imagePullPolicy livenessProbe: @@ -119545,8 +122304,6 @@ components: value: value - name: name value: value - stdin: true - terminationMessagePolicy: terminationMessagePolicy terminationMessagePath: terminationMessagePath workingDir: workingDir resources: @@ -119557,9 +122314,87 @@ components: name: name requests: {} limits: {} + env: + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + restartPolicy: restartPolicy + command: + - command + - command + args: + - args + - args + name: name + tty: true + stdinOnce: true + initContainers: + - volumeDevices: + - devicePath: devicePath + name: name + - devicePath: devicePath + name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + stdin: true + terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -119615,43 +122450,6 @@ components: value: value - name: name value: value - env: - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath ports: - protocol: protocol hostIP: hostIP @@ -119663,10 +122461,6 @@ components: name: name containerPort: 7 hostPort: 1 - restartPolicy: restartPolicy - command: - - command - - command volumeMounts: - mountPath: mountPath mountPropagation: mountPropagation @@ -119682,9 +122476,6 @@ components: subPath: subPath recursiveReadOnly: recursiveReadOnly subPathExpr: subPathExpr - args: - - args - - args lifecycle: postStart: sleep: @@ -119727,8 +122518,6 @@ components: - name: name value: value stopSignal: stopSignal - name: name - tty: true readinessProbe: terminationGracePeriodSeconds: 2 failureThreshold: 5 @@ -119761,7 +122550,6 @@ components: restartPolicy: restartPolicy - resourceName: resourceName restartPolicy: restartPolicy - stdinOnce: true envFrom: - configMapRef: name: name @@ -119777,11 +122565,6 @@ components: secretRef: name: name optional: true - - volumeDevices: - - devicePath: devicePath - name: name - - devicePath: devicePath - name: name image: image imagePullPolicy: imagePullPolicy livenessProbe: @@ -119811,8 +122594,6 @@ components: value: value - name: name value: value - stdin: true - terminationMessagePolicy: terminationMessagePolicy terminationMessagePath: terminationMessagePath workingDir: workingDir resources: @@ -119823,9 +122604,86 @@ components: name: name requests: {} limits: {} + env: + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + restartPolicy: restartPolicy + command: + - command + - command + args: + - args + - args + name: name + tty: true + stdinOnce: true + - volumeDevices: + - devicePath: devicePath + name: name + - devicePath: devicePath + name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + stdin: true + terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -119881,43 +122739,6 @@ components: value: value - name: name value: value - env: - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath ports: - protocol: protocol hostIP: hostIP @@ -119929,10 +122750,6 @@ components: name: name containerPort: 7 hostPort: 1 - restartPolicy: restartPolicy - command: - - command - - command volumeMounts: - mountPath: mountPath mountPropagation: mountPropagation @@ -119948,9 +122765,6 @@ components: subPath: subPath recursiveReadOnly: recursiveReadOnly subPathExpr: subPathExpr - args: - - args - - args lifecycle: postStart: sleep: @@ -119993,8 +122807,6 @@ components: - name: name value: value stopSignal: stopSignal - name: name - tty: true readinessProbe: terminationGracePeriodSeconds: 2 failureThreshold: 5 @@ -120027,7 +122839,6 @@ components: restartPolicy: restartPolicy - resourceName: resourceName restartPolicy: restartPolicy - stdinOnce: true envFrom: - configMapRef: name: name @@ -120043,6 +122854,102 @@ components: secretRef: name: name optional: true + image: image + imagePullPolicy: imagePullPolicy + livenessProbe: + terminationGracePeriodSeconds: 2 + failureThreshold: 5 + periodSeconds: 9 + tcpSocket: + port: port + host: host + timeoutSeconds: 4 + successThreshold: 3 + initialDelaySeconds: 7 + exec: + command: + - command + - command + grpc: + port: 2 + service: service + httpGet: + path: path + scheme: scheme + port: port + host: host + httpHeaders: + - name: name + value: value + - name: name + value: value + terminationMessagePath: terminationMessagePath + workingDir: workingDir + resources: + claims: + - request: request + name: name + - request: request + name: name + requests: {} + limits: {} + env: + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + restartPolicy: restartPolicy + command: + - command + - command + args: + - args + - args + name: name + tty: true + stdinOnce: true affinity: nodeAffinity: requiredDuringSchedulingIgnoredDuringExecution: @@ -120741,6 +123648,7 @@ components: - conditionType: conditionType - conditionType: conditionType serviceAccountName: serviceAccountName + hostnameOverride: hostnameOverride imagePullSecrets: - name: name - name: name @@ -120763,17 +123671,17 @@ components: appArmorProfile: localhostProfile: localhostProfile type: type - fsGroup: 7 + fsGroup: 1 fsGroupChangePolicy: fsGroupChangePolicy seLinuxChangePolicy: seLinuxChangePolicy - runAsGroup: 1 + runAsGroup: 4 runAsNonRoot: true sysctls: - name: name value: value - name: name value: value - runAsUser: 4 + runAsUser: 5 seccompProfile: localhostProfile: localhostProfile type: type @@ -120783,8 +123691,8 @@ components: hostProcess: true gmsaCredentialSpecName: gmsaCredentialSpecName supplementalGroups: - - 5 - - 5 + - 9 + - 9 supplementalGroupsPolicy: supplementalGroupsPolicy preemptionPolicy: preemptionPolicy nodeSelector: @@ -120793,12 +123701,12 @@ components: runtimeClassName: runtimeClassName tolerations: - effect: effect - tolerationSeconds: 9 + tolerationSeconds: 6 value: value key: key operator: operator - effect: effect - tolerationSeconds: 9 + tolerationSeconds: 6 value: value key: key operator: operator @@ -120817,7 +123725,7 @@ components: topologySpreadConstraints: - nodeTaintsPolicy: nodeTaintsPolicy whenUnsatisfiable: whenUnsatisfiable - maxSkew: 6 + maxSkew: 8 nodeAffinityPolicy: nodeAffinityPolicy labelSelector: matchExpressions: @@ -120833,14 +123741,14 @@ components: operator: operator matchLabels: key: matchLabels - minDomains: 8 + minDomains: 9 topologyKey: topologyKey matchLabelKeys: - matchLabelKeys - matchLabelKeys - nodeTaintsPolicy: nodeTaintsPolicy whenUnsatisfiable: whenUnsatisfiable - maxSkew: 6 + maxSkew: 8 nodeAffinityPolicy: nodeAffinityPolicy labelSelector: matchExpressions: @@ -120856,7 +123764,7 @@ components: operator: operator matchLabels: key: matchLabels - minDomains: 8 + minDomains: 9 topologyKey: topologyKey matchLabelKeys: - matchLabelKeys @@ -120965,20 +123873,20 @@ components: volumeMode: volumeMode secret: secretName: secretName - defaultMode: 3 + defaultMode: 7 optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key projected: sources: - downwardAPI: items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -120987,7 +123895,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -121000,26 +123908,33 @@ components: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key + podCertificate: + certificateChainPath: certificateChainPath + keyPath: keyPath + maxExpirationSeconds: 3 + keyType: keyType + credentialBundlePath: credentialBundlePath + signerName: signerName secret: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key serviceAccountToken: path: path audience: audience - expirationSeconds: 6 + expirationSeconds: 3 clusterTrustBundle: path: path labelSelector: @@ -121041,7 +123956,7 @@ components: signerName: signerName - downwardAPI: items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -121050,7 +123965,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -121063,26 +123978,33 @@ components: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key + podCertificate: + certificateChainPath: certificateChainPath + keyPath: keyPath + maxExpirationSeconds: 3 + keyType: keyType + credentialBundlePath: credentialBundlePath + signerName: signerName secret: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key serviceAccountToken: path: path audience: audience - expirationSeconds: 6 + expirationSeconds: 3 clusterTrustBundle: path: path labelSelector: @@ -121102,7 +124024,7 @@ components: name: name optional: true signerName: signerName - defaultMode: 5 + defaultMode: 6 cephfs: path: path secretRef: @@ -121157,9 +124079,9 @@ components: readOnly: true fsType: fsType downwardAPI: - defaultMode: 6 + defaultMode: 1 items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -121168,7 +124090,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -121178,7 +124100,7 @@ components: apiVersion: apiVersion fieldPath: fieldPath awsElasticBlockStore: - partition: 9 + partition: 6 volumeID: volumeID readOnly: true fsType: fsType @@ -121188,7 +124110,7 @@ components: iscsi: chapAuthSession: true iscsiInterface: iscsiInterface - lun: 6 + lun: 5 chapAuthDiscovery: true iqn: iqn portals: @@ -121213,14 +124135,14 @@ components: - monitors - monitors configMap: - defaultMode: 6 + defaultMode: 3 name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key storageos: @@ -121260,7 +124182,7 @@ components: volumePath: volumePath fsType: fsType fc: - lun: 2 + lun: 6 targetWWNs: - targetWWNs - targetWWNs @@ -121375,20 +124297,20 @@ components: volumeMode: volumeMode secret: secretName: secretName - defaultMode: 3 + defaultMode: 7 optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key projected: sources: - downwardAPI: items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -121397,7 +124319,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -121410,26 +124332,33 @@ components: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key + podCertificate: + certificateChainPath: certificateChainPath + keyPath: keyPath + maxExpirationSeconds: 3 + keyType: keyType + credentialBundlePath: credentialBundlePath + signerName: signerName secret: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key serviceAccountToken: path: path audience: audience - expirationSeconds: 6 + expirationSeconds: 3 clusterTrustBundle: path: path labelSelector: @@ -121451,7 +124380,7 @@ components: signerName: signerName - downwardAPI: items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -121460,7 +124389,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -121473,26 +124402,33 @@ components: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key + podCertificate: + certificateChainPath: certificateChainPath + keyPath: keyPath + maxExpirationSeconds: 3 + keyType: keyType + credentialBundlePath: credentialBundlePath + signerName: signerName secret: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key serviceAccountToken: path: path audience: audience - expirationSeconds: 6 + expirationSeconds: 3 clusterTrustBundle: path: path labelSelector: @@ -121512,7 +124448,7 @@ components: name: name optional: true signerName: signerName - defaultMode: 5 + defaultMode: 6 cephfs: path: path secretRef: @@ -121567,9 +124503,9 @@ components: readOnly: true fsType: fsType downwardAPI: - defaultMode: 6 + defaultMode: 1 items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -121578,7 +124514,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -121588,7 +124524,7 @@ components: apiVersion: apiVersion fieldPath: fieldPath awsElasticBlockStore: - partition: 9 + partition: 6 volumeID: volumeID readOnly: true fsType: fsType @@ -121598,7 +124534,7 @@ components: iscsi: chapAuthSession: true iscsiInterface: iscsiInterface - lun: 6 + lun: 5 chapAuthDiscovery: true iqn: iqn portals: @@ -121623,14 +124559,14 @@ components: - monitors - monitors configMap: - defaultMode: 6 + defaultMode: 3 name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key storageos: @@ -121670,7 +124606,7 @@ components: volumePath: volumePath fsType: fsType fc: - lun: 2 + lun: 6 targetWWNs: - targetWWNs - targetWWNs @@ -121696,11 +124632,24 @@ components: name: name - devicePath: devicePath name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator stdin: true terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -121930,6 +124879,11 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key - name: name value: value valueFrom: @@ -121948,6 +124902,11 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key restartPolicy: restartPolicy command: - command @@ -121963,11 +124922,24 @@ components: name: name - devicePath: devicePath name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator stdin: true terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -122197,6 +125169,11 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key - name: name value: value valueFrom: @@ -122215,6 +125192,11 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key restartPolicy: restartPolicy command: - command @@ -122226,7 +125208,7 @@ components: tty: true stdinOnce: true serviceAccount: serviceAccount - priority: 6 + priority: 7 restartPolicy: restartPolicy shareProcessNamespace: true hostUsers: true @@ -122244,50 +125226,24 @@ components: name: name - devicePath: devicePath name: name - image: image - imagePullPolicy: imagePullPolicy - livenessProbe: - terminationGracePeriodSeconds: 2 - failureThreshold: 5 - periodSeconds: 9 - tcpSocket: - port: port - host: host - timeoutSeconds: 4 - successThreshold: 3 - initialDelaySeconds: 7 - exec: - command: - - command - - command - grpc: - port: 2 - service: service - httpGet: - path: path - scheme: scheme - port: port - host: host - httpHeaders: - - name: name - value: value - - name: name - value: value + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator stdin: true terminationMessagePolicy: terminationMessagePolicy - terminationMessagePath: terminationMessagePath - workingDir: workingDir - resources: - claims: - - request: request - name: name - - request: request - name: name - requests: {} - limits: {} securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -122343,43 +125299,6 @@ components: value: value - name: name value: value - env: - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath ports: - protocol: protocol hostIP: hostIP @@ -122391,10 +125310,6 @@ components: name: name containerPort: 7 hostPort: 1 - restartPolicy: restartPolicy - command: - - command - - command volumeMounts: - mountPath: mountPath mountPropagation: mountPropagation @@ -122410,9 +125325,6 @@ components: subPath: subPath recursiveReadOnly: recursiveReadOnly subPathExpr: subPathExpr - args: - - args - - args lifecycle: postStart: sleep: @@ -122455,8 +125367,6 @@ components: - name: name value: value stopSignal: stopSignal - name: name - tty: true readinessProbe: terminationGracePeriodSeconds: 2 failureThreshold: 5 @@ -122489,7 +125399,6 @@ components: restartPolicy: restartPolicy - resourceName: resourceName restartPolicy: restartPolicy - stdinOnce: true envFrom: - configMapRef: name: name @@ -122505,11 +125414,6 @@ components: secretRef: name: name optional: true - - volumeDevices: - - devicePath: devicePath - name: name - - devicePath: devicePath - name: name image: image imagePullPolicy: imagePullPolicy livenessProbe: @@ -122539,8 +125443,6 @@ components: value: value - name: name value: value - stdin: true - terminationMessagePolicy: terminationMessagePolicy terminationMessagePath: terminationMessagePath workingDir: workingDir resources: @@ -122551,9 +125453,86 @@ components: name: name requests: {} limits: {} + env: + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + restartPolicy: restartPolicy + command: + - command + - command + args: + - args + - args + name: name + tty: true + stdinOnce: true + - volumeDevices: + - devicePath: devicePath + name: name + - devicePath: devicePath + name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + stdin: true + terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -122609,43 +125588,6 @@ components: value: value - name: name value: value - env: - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath ports: - protocol: protocol hostIP: hostIP @@ -122657,10 +125599,6 @@ components: name: name containerPort: 7 hostPort: 1 - restartPolicy: restartPolicy - command: - - command - - command volumeMounts: - mountPath: mountPath mountPropagation: mountPropagation @@ -122676,9 +125614,6 @@ components: subPath: subPath recursiveReadOnly: recursiveReadOnly subPathExpr: subPathExpr - args: - - args - - args lifecycle: postStart: sleep: @@ -122721,8 +125656,6 @@ components: - name: name value: value stopSignal: stopSignal - name: name - tty: true readinessProbe: terminationGracePeriodSeconds: 2 failureThreshold: 5 @@ -122755,7 +125688,6 @@ components: restartPolicy: restartPolicy - resourceName: resourceName restartPolicy: restartPolicy - stdinOnce: true envFrom: - configMapRef: name: name @@ -122771,12 +125703,6 @@ components: secretRef: name: name optional: true - initContainers: - - volumeDevices: - - devicePath: devicePath - name: name - - devicePath: devicePath - name: name image: image imagePullPolicy: imagePullPolicy livenessProbe: @@ -122806,8 +125732,6 @@ components: value: value - name: name value: value - stdin: true - terminationMessagePolicy: terminationMessagePolicy terminationMessagePath: terminationMessagePath workingDir: workingDir resources: @@ -122818,9 +125742,87 @@ components: name: name requests: {} limits: {} + env: + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + restartPolicy: restartPolicy + command: + - command + - command + args: + - args + - args + name: name + tty: true + stdinOnce: true + initContainers: + - volumeDevices: + - devicePath: devicePath + name: name + - devicePath: devicePath + name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + stdin: true + terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -122876,43 +125878,6 @@ components: value: value - name: name value: value - env: - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath ports: - protocol: protocol hostIP: hostIP @@ -122924,10 +125889,6 @@ components: name: name containerPort: 7 hostPort: 1 - restartPolicy: restartPolicy - command: - - command - - command volumeMounts: - mountPath: mountPath mountPropagation: mountPropagation @@ -122943,9 +125904,6 @@ components: subPath: subPath recursiveReadOnly: recursiveReadOnly subPathExpr: subPathExpr - args: - - args - - args lifecycle: postStart: sleep: @@ -122988,8 +125946,6 @@ components: - name: name value: value stopSignal: stopSignal - name: name - tty: true readinessProbe: terminationGracePeriodSeconds: 2 failureThreshold: 5 @@ -123022,7 +125978,6 @@ components: restartPolicy: restartPolicy - resourceName: resourceName restartPolicy: restartPolicy - stdinOnce: true envFrom: - configMapRef: name: name @@ -123038,11 +125993,6 @@ components: secretRef: name: name optional: true - - volumeDevices: - - devicePath: devicePath - name: name - - devicePath: devicePath - name: name image: image imagePullPolicy: imagePullPolicy livenessProbe: @@ -123072,8 +126022,6 @@ components: value: value - name: name value: value - stdin: true - terminationMessagePolicy: terminationMessagePolicy terminationMessagePath: terminationMessagePath workingDir: workingDir resources: @@ -123084,9 +126032,86 @@ components: name: name requests: {} limits: {} + env: + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + restartPolicy: restartPolicy + command: + - command + - command + args: + - args + - args + name: name + tty: true + stdinOnce: true + - volumeDevices: + - devicePath: devicePath + name: name + - devicePath: devicePath + name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + stdin: true + terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -123142,43 +126167,6 @@ components: value: value - name: name value: value - env: - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath ports: - protocol: protocol hostIP: hostIP @@ -123190,10 +126178,6 @@ components: name: name containerPort: 7 hostPort: 1 - restartPolicy: restartPolicy - command: - - command - - command volumeMounts: - mountPath: mountPath mountPropagation: mountPropagation @@ -123209,9 +126193,6 @@ components: subPath: subPath recursiveReadOnly: recursiveReadOnly subPathExpr: subPathExpr - args: - - args - - args lifecycle: postStart: sleep: @@ -123254,8 +126235,6 @@ components: - name: name value: value stopSignal: stopSignal - name: name - tty: true readinessProbe: terminationGracePeriodSeconds: 2 failureThreshold: 5 @@ -123288,7 +126267,6 @@ components: restartPolicy: restartPolicy - resourceName: resourceName restartPolicy: restartPolicy - stdinOnce: true envFrom: - configMapRef: name: name @@ -123304,6 +126282,102 @@ components: secretRef: name: name optional: true + image: image + imagePullPolicy: imagePullPolicy + livenessProbe: + terminationGracePeriodSeconds: 2 + failureThreshold: 5 + periodSeconds: 9 + tcpSocket: + port: port + host: host + timeoutSeconds: 4 + successThreshold: 3 + initialDelaySeconds: 7 + exec: + command: + - command + - command + grpc: + port: 2 + service: service + httpGet: + path: path + scheme: scheme + port: port + host: host + httpHeaders: + - name: name + value: value + - name: name + value: value + terminationMessagePath: terminationMessagePath + workingDir: workingDir + resources: + claims: + - request: request + name: name + - request: request + name: name + requests: {} + limits: {} + env: + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + restartPolicy: restartPolicy + command: + - command + - command + args: + - args + - args + name: name + tty: true + stdinOnce: true affinity: nodeAffinity: requiredDuringSchedulingIgnoredDuringExecution: @@ -123937,6 +127011,7 @@ components: - conditionType: conditionType - conditionType: conditionType serviceAccountName: serviceAccountName + hostnameOverride: hostnameOverride imagePullSecrets: - name: name - name: name @@ -123959,17 +127034,17 @@ components: appArmorProfile: localhostProfile: localhostProfile type: type - fsGroup: 7 + fsGroup: 1 fsGroupChangePolicy: fsGroupChangePolicy seLinuxChangePolicy: seLinuxChangePolicy - runAsGroup: 1 + runAsGroup: 4 runAsNonRoot: true sysctls: - name: name value: value - name: name value: value - runAsUser: 4 + runAsUser: 5 seccompProfile: localhostProfile: localhostProfile type: type @@ -123979,8 +127054,8 @@ components: hostProcess: true gmsaCredentialSpecName: gmsaCredentialSpecName supplementalGroups: - - 5 - - 5 + - 9 + - 9 supplementalGroupsPolicy: supplementalGroupsPolicy preemptionPolicy: preemptionPolicy nodeSelector: @@ -123989,12 +127064,12 @@ components: runtimeClassName: runtimeClassName tolerations: - effect: effect - tolerationSeconds: 9 + tolerationSeconds: 6 value: value key: key operator: operator - effect: effect - tolerationSeconds: 9 + tolerationSeconds: 6 value: value key: key operator: operator @@ -124013,7 +127088,7 @@ components: topologySpreadConstraints: - nodeTaintsPolicy: nodeTaintsPolicy whenUnsatisfiable: whenUnsatisfiable - maxSkew: 6 + maxSkew: 8 nodeAffinityPolicy: nodeAffinityPolicy labelSelector: matchExpressions: @@ -124029,14 +127104,14 @@ components: operator: operator matchLabels: key: matchLabels - minDomains: 8 + minDomains: 9 topologyKey: topologyKey matchLabelKeys: - matchLabelKeys - matchLabelKeys - nodeTaintsPolicy: nodeTaintsPolicy whenUnsatisfiable: whenUnsatisfiable - maxSkew: 6 + maxSkew: 8 nodeAffinityPolicy: nodeAffinityPolicy labelSelector: matchExpressions: @@ -124052,7 +127127,7 @@ components: operator: operator matchLabels: key: matchLabels - minDomains: 8 + minDomains: 9 topologyKey: topologyKey matchLabelKeys: - matchLabelKeys @@ -124161,20 +127236,20 @@ components: volumeMode: volumeMode secret: secretName: secretName - defaultMode: 3 + defaultMode: 7 optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key projected: sources: - downwardAPI: items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -124183,7 +127258,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -124196,26 +127271,33 @@ components: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key + podCertificate: + certificateChainPath: certificateChainPath + keyPath: keyPath + maxExpirationSeconds: 3 + keyType: keyType + credentialBundlePath: credentialBundlePath + signerName: signerName secret: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key serviceAccountToken: path: path audience: audience - expirationSeconds: 6 + expirationSeconds: 3 clusterTrustBundle: path: path labelSelector: @@ -124237,7 +127319,7 @@ components: signerName: signerName - downwardAPI: items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -124246,7 +127328,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -124259,26 +127341,33 @@ components: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key + podCertificate: + certificateChainPath: certificateChainPath + keyPath: keyPath + maxExpirationSeconds: 3 + keyType: keyType + credentialBundlePath: credentialBundlePath + signerName: signerName secret: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key serviceAccountToken: path: path audience: audience - expirationSeconds: 6 + expirationSeconds: 3 clusterTrustBundle: path: path labelSelector: @@ -124298,7 +127387,7 @@ components: name: name optional: true signerName: signerName - defaultMode: 5 + defaultMode: 6 cephfs: path: path secretRef: @@ -124353,9 +127442,9 @@ components: readOnly: true fsType: fsType downwardAPI: - defaultMode: 6 + defaultMode: 1 items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -124364,7 +127453,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -124374,7 +127463,7 @@ components: apiVersion: apiVersion fieldPath: fieldPath awsElasticBlockStore: - partition: 9 + partition: 6 volumeID: volumeID readOnly: true fsType: fsType @@ -124384,7 +127473,7 @@ components: iscsi: chapAuthSession: true iscsiInterface: iscsiInterface - lun: 6 + lun: 5 chapAuthDiscovery: true iqn: iqn portals: @@ -124409,14 +127498,14 @@ components: - monitors - monitors configMap: - defaultMode: 6 + defaultMode: 3 name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key storageos: @@ -124456,7 +127545,7 @@ components: volumePath: volumePath fsType: fsType fc: - lun: 2 + lun: 6 targetWWNs: - targetWWNs - targetWWNs @@ -124571,20 +127660,20 @@ components: volumeMode: volumeMode secret: secretName: secretName - defaultMode: 3 + defaultMode: 7 optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key projected: sources: - downwardAPI: items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -124593,7 +127682,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -124606,26 +127695,33 @@ components: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key + podCertificate: + certificateChainPath: certificateChainPath + keyPath: keyPath + maxExpirationSeconds: 3 + keyType: keyType + credentialBundlePath: credentialBundlePath + signerName: signerName secret: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key serviceAccountToken: path: path audience: audience - expirationSeconds: 6 + expirationSeconds: 3 clusterTrustBundle: path: path labelSelector: @@ -124647,7 +127743,7 @@ components: signerName: signerName - downwardAPI: items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -124656,7 +127752,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -124669,26 +127765,33 @@ components: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key + podCertificate: + certificateChainPath: certificateChainPath + keyPath: keyPath + maxExpirationSeconds: 3 + keyType: keyType + credentialBundlePath: credentialBundlePath + signerName: signerName secret: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key serviceAccountToken: path: path audience: audience - expirationSeconds: 6 + expirationSeconds: 3 clusterTrustBundle: path: path labelSelector: @@ -124708,7 +127811,7 @@ components: name: name optional: true signerName: signerName - defaultMode: 5 + defaultMode: 6 cephfs: path: path secretRef: @@ -124763,9 +127866,9 @@ components: readOnly: true fsType: fsType downwardAPI: - defaultMode: 6 + defaultMode: 1 items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -124774,7 +127877,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -124784,7 +127887,7 @@ components: apiVersion: apiVersion fieldPath: fieldPath awsElasticBlockStore: - partition: 9 + partition: 6 volumeID: volumeID readOnly: true fsType: fsType @@ -124794,7 +127897,7 @@ components: iscsi: chapAuthSession: true iscsiInterface: iscsiInterface - lun: 6 + lun: 5 chapAuthDiscovery: true iqn: iqn portals: @@ -124819,14 +127922,14 @@ components: - monitors - monitors configMap: - defaultMode: 6 + defaultMode: 3 name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key storageos: @@ -124866,7 +127969,7 @@ components: volumePath: volumePath fsType: fsType fc: - lun: 2 + lun: 6 targetWWNs: - targetWWNs - targetWWNs @@ -124892,11 +127995,24 @@ components: name: name - devicePath: devicePath name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator stdin: true terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -125126,6 +128242,11 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key - name: name value: value valueFrom: @@ -125144,6 +128265,11 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key restartPolicy: restartPolicy command: - command @@ -125159,11 +128285,24 @@ components: name: name - devicePath: devicePath name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator stdin: true terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -125393,6 +128532,11 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key - name: name value: value valueFrom: @@ -125411,6 +128555,11 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key restartPolicy: restartPolicy command: - command @@ -125422,7 +128571,7 @@ components: tty: true stdinOnce: true serviceAccount: serviceAccount - priority: 6 + priority: 7 restartPolicy: restartPolicy shareProcessNamespace: true hostUsers: true @@ -125440,50 +128589,24 @@ components: name: name - devicePath: devicePath name: name - image: image - imagePullPolicy: imagePullPolicy - livenessProbe: - terminationGracePeriodSeconds: 2 - failureThreshold: 5 - periodSeconds: 9 - tcpSocket: - port: port - host: host - timeoutSeconds: 4 - successThreshold: 3 - initialDelaySeconds: 7 - exec: - command: - - command - - command - grpc: - port: 2 - service: service - httpGet: - path: path - scheme: scheme - port: port - host: host - httpHeaders: - - name: name - value: value - - name: name - value: value + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator stdin: true terminationMessagePolicy: terminationMessagePolicy - terminationMessagePath: terminationMessagePath - workingDir: workingDir - resources: - claims: - - request: request - name: name - - request: request - name: name - requests: {} - limits: {} securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -125539,43 +128662,6 @@ components: value: value - name: name value: value - env: - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath ports: - protocol: protocol hostIP: hostIP @@ -125587,10 +128673,6 @@ components: name: name containerPort: 7 hostPort: 1 - restartPolicy: restartPolicy - command: - - command - - command volumeMounts: - mountPath: mountPath mountPropagation: mountPropagation @@ -125606,9 +128688,6 @@ components: subPath: subPath recursiveReadOnly: recursiveReadOnly subPathExpr: subPathExpr - args: - - args - - args lifecycle: postStart: sleep: @@ -125651,8 +128730,6 @@ components: - name: name value: value stopSignal: stopSignal - name: name - tty: true readinessProbe: terminationGracePeriodSeconds: 2 failureThreshold: 5 @@ -125685,7 +128762,6 @@ components: restartPolicy: restartPolicy - resourceName: resourceName restartPolicy: restartPolicy - stdinOnce: true envFrom: - configMapRef: name: name @@ -125701,11 +128777,6 @@ components: secretRef: name: name optional: true - - volumeDevices: - - devicePath: devicePath - name: name - - devicePath: devicePath - name: name image: image imagePullPolicy: imagePullPolicy livenessProbe: @@ -125735,8 +128806,6 @@ components: value: value - name: name value: value - stdin: true - terminationMessagePolicy: terminationMessagePolicy terminationMessagePath: terminationMessagePath workingDir: workingDir resources: @@ -125747,9 +128816,86 @@ components: name: name requests: {} limits: {} + env: + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + restartPolicy: restartPolicy + command: + - command + - command + args: + - args + - args + name: name + tty: true + stdinOnce: true + - volumeDevices: + - devicePath: devicePath + name: name + - devicePath: devicePath + name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + stdin: true + terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -125805,43 +128951,6 @@ components: value: value - name: name value: value - env: - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath ports: - protocol: protocol hostIP: hostIP @@ -125853,10 +128962,6 @@ components: name: name containerPort: 7 hostPort: 1 - restartPolicy: restartPolicy - command: - - command - - command volumeMounts: - mountPath: mountPath mountPropagation: mountPropagation @@ -125872,9 +128977,6 @@ components: subPath: subPath recursiveReadOnly: recursiveReadOnly subPathExpr: subPathExpr - args: - - args - - args lifecycle: postStart: sleep: @@ -125917,8 +129019,6 @@ components: - name: name value: value stopSignal: stopSignal - name: name - tty: true readinessProbe: terminationGracePeriodSeconds: 2 failureThreshold: 5 @@ -125951,7 +129051,6 @@ components: restartPolicy: restartPolicy - resourceName: resourceName restartPolicy: restartPolicy - stdinOnce: true envFrom: - configMapRef: name: name @@ -125967,12 +129066,6 @@ components: secretRef: name: name optional: true - initContainers: - - volumeDevices: - - devicePath: devicePath - name: name - - devicePath: devicePath - name: name image: image imagePullPolicy: imagePullPolicy livenessProbe: @@ -126002,8 +129095,6 @@ components: value: value - name: name value: value - stdin: true - terminationMessagePolicy: terminationMessagePolicy terminationMessagePath: terminationMessagePath workingDir: workingDir resources: @@ -126014,9 +129105,87 @@ components: name: name requests: {} limits: {} + env: + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + restartPolicy: restartPolicy + command: + - command + - command + args: + - args + - args + name: name + tty: true + stdinOnce: true + initContainers: + - volumeDevices: + - devicePath: devicePath + name: name + - devicePath: devicePath + name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + stdin: true + terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -126072,43 +129241,6 @@ components: value: value - name: name value: value - env: - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath ports: - protocol: protocol hostIP: hostIP @@ -126120,10 +129252,6 @@ components: name: name containerPort: 7 hostPort: 1 - restartPolicy: restartPolicy - command: - - command - - command volumeMounts: - mountPath: mountPath mountPropagation: mountPropagation @@ -126139,9 +129267,6 @@ components: subPath: subPath recursiveReadOnly: recursiveReadOnly subPathExpr: subPathExpr - args: - - args - - args lifecycle: postStart: sleep: @@ -126184,8 +129309,6 @@ components: - name: name value: value stopSignal: stopSignal - name: name - tty: true readinessProbe: terminationGracePeriodSeconds: 2 failureThreshold: 5 @@ -126218,7 +129341,6 @@ components: restartPolicy: restartPolicy - resourceName: resourceName restartPolicy: restartPolicy - stdinOnce: true envFrom: - configMapRef: name: name @@ -126234,11 +129356,6 @@ components: secretRef: name: name optional: true - - volumeDevices: - - devicePath: devicePath - name: name - - devicePath: devicePath - name: name image: image imagePullPolicy: imagePullPolicy livenessProbe: @@ -126268,8 +129385,6 @@ components: value: value - name: name value: value - stdin: true - terminationMessagePolicy: terminationMessagePolicy terminationMessagePath: terminationMessagePath workingDir: workingDir resources: @@ -126280,9 +129395,86 @@ components: name: name requests: {} limits: {} + env: + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + restartPolicy: restartPolicy + command: + - command + - command + args: + - args + - args + name: name + tty: true + stdinOnce: true + - volumeDevices: + - devicePath: devicePath + name: name + - devicePath: devicePath + name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + stdin: true + terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -126338,43 +129530,6 @@ components: value: value - name: name value: value - env: - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath ports: - protocol: protocol hostIP: hostIP @@ -126386,10 +129541,6 @@ components: name: name containerPort: 7 hostPort: 1 - restartPolicy: restartPolicy - command: - - command - - command volumeMounts: - mountPath: mountPath mountPropagation: mountPropagation @@ -126405,9 +129556,6 @@ components: subPath: subPath recursiveReadOnly: recursiveReadOnly subPathExpr: subPathExpr - args: - - args - - args lifecycle: postStart: sleep: @@ -126450,8 +129598,6 @@ components: - name: name value: value stopSignal: stopSignal - name: name - tty: true readinessProbe: terminationGracePeriodSeconds: 2 failureThreshold: 5 @@ -126484,7 +129630,6 @@ components: restartPolicy: restartPolicy - resourceName: resourceName restartPolicy: restartPolicy - stdinOnce: true envFrom: - configMapRef: name: name @@ -126500,6 +129645,102 @@ components: secretRef: name: name optional: true + image: image + imagePullPolicy: imagePullPolicy + livenessProbe: + terminationGracePeriodSeconds: 2 + failureThreshold: 5 + periodSeconds: 9 + tcpSocket: + port: port + host: host + timeoutSeconds: 4 + successThreshold: 3 + initialDelaySeconds: 7 + exec: + command: + - command + - command + grpc: + port: 2 + service: service + httpGet: + path: path + scheme: scheme + port: port + host: host + httpHeaders: + - name: name + value: value + - name: name + value: value + terminationMessagePath: terminationMessagePath + workingDir: workingDir + resources: + claims: + - request: request + name: name + - request: request + name: name + requests: {} + limits: {} + env: + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + restartPolicy: restartPolicy + command: + - command + - command + args: + - args + - args + name: name + tty: true + stdinOnce: true affinity: nodeAffinity: requiredDuringSchedulingIgnoredDuringExecution: @@ -127067,6 +130308,7 @@ components: - conditionType: conditionType - conditionType: conditionType serviceAccountName: serviceAccountName + hostnameOverride: hostnameOverride imagePullSecrets: - name: name - name: name @@ -127089,17 +130331,17 @@ components: appArmorProfile: localhostProfile: localhostProfile type: type - fsGroup: 7 + fsGroup: 1 fsGroupChangePolicy: fsGroupChangePolicy seLinuxChangePolicy: seLinuxChangePolicy - runAsGroup: 1 + runAsGroup: 4 runAsNonRoot: true sysctls: - name: name value: value - name: name value: value - runAsUser: 4 + runAsUser: 5 seccompProfile: localhostProfile: localhostProfile type: type @@ -127109,8 +130351,8 @@ components: hostProcess: true gmsaCredentialSpecName: gmsaCredentialSpecName supplementalGroups: - - 5 - - 5 + - 9 + - 9 supplementalGroupsPolicy: supplementalGroupsPolicy preemptionPolicy: preemptionPolicy nodeSelector: @@ -127119,12 +130361,12 @@ components: runtimeClassName: runtimeClassName tolerations: - effect: effect - tolerationSeconds: 9 + tolerationSeconds: 6 value: value key: key operator: operator - effect: effect - tolerationSeconds: 9 + tolerationSeconds: 6 value: value key: key operator: operator @@ -127143,7 +130385,7 @@ components: topologySpreadConstraints: - nodeTaintsPolicy: nodeTaintsPolicy whenUnsatisfiable: whenUnsatisfiable - maxSkew: 6 + maxSkew: 8 nodeAffinityPolicy: nodeAffinityPolicy labelSelector: matchExpressions: @@ -127159,14 +130401,14 @@ components: operator: operator matchLabels: key: matchLabels - minDomains: 8 + minDomains: 9 topologyKey: topologyKey matchLabelKeys: - matchLabelKeys - matchLabelKeys - nodeTaintsPolicy: nodeTaintsPolicy whenUnsatisfiable: whenUnsatisfiable - maxSkew: 6 + maxSkew: 8 nodeAffinityPolicy: nodeAffinityPolicy labelSelector: matchExpressions: @@ -127182,7 +130424,7 @@ components: operator: operator matchLabels: key: matchLabels - minDomains: 8 + minDomains: 9 topologyKey: topologyKey matchLabelKeys: - matchLabelKeys @@ -127291,20 +130533,20 @@ components: volumeMode: volumeMode secret: secretName: secretName - defaultMode: 3 + defaultMode: 7 optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key projected: sources: - downwardAPI: items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -127313,7 +130555,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -127326,26 +130568,33 @@ components: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key + podCertificate: + certificateChainPath: certificateChainPath + keyPath: keyPath + maxExpirationSeconds: 3 + keyType: keyType + credentialBundlePath: credentialBundlePath + signerName: signerName secret: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key serviceAccountToken: path: path audience: audience - expirationSeconds: 6 + expirationSeconds: 3 clusterTrustBundle: path: path labelSelector: @@ -127367,7 +130616,7 @@ components: signerName: signerName - downwardAPI: items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -127376,7 +130625,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -127389,26 +130638,33 @@ components: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key + podCertificate: + certificateChainPath: certificateChainPath + keyPath: keyPath + maxExpirationSeconds: 3 + keyType: keyType + credentialBundlePath: credentialBundlePath + signerName: signerName secret: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key serviceAccountToken: path: path audience: audience - expirationSeconds: 6 + expirationSeconds: 3 clusterTrustBundle: path: path labelSelector: @@ -127428,7 +130684,7 @@ components: name: name optional: true signerName: signerName - defaultMode: 5 + defaultMode: 6 cephfs: path: path secretRef: @@ -127483,9 +130739,9 @@ components: readOnly: true fsType: fsType downwardAPI: - defaultMode: 6 + defaultMode: 1 items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -127494,7 +130750,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -127504,7 +130760,7 @@ components: apiVersion: apiVersion fieldPath: fieldPath awsElasticBlockStore: - partition: 9 + partition: 6 volumeID: volumeID readOnly: true fsType: fsType @@ -127514,7 +130770,7 @@ components: iscsi: chapAuthSession: true iscsiInterface: iscsiInterface - lun: 6 + lun: 5 chapAuthDiscovery: true iqn: iqn portals: @@ -127539,14 +130795,14 @@ components: - monitors - monitors configMap: - defaultMode: 6 + defaultMode: 3 name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key storageos: @@ -127586,7 +130842,7 @@ components: volumePath: volumePath fsType: fsType fc: - lun: 2 + lun: 6 targetWWNs: - targetWWNs - targetWWNs @@ -127701,20 +130957,20 @@ components: volumeMode: volumeMode secret: secretName: secretName - defaultMode: 3 + defaultMode: 7 optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key projected: sources: - downwardAPI: items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -127723,7 +130979,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -127736,26 +130992,33 @@ components: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key + podCertificate: + certificateChainPath: certificateChainPath + keyPath: keyPath + maxExpirationSeconds: 3 + keyType: keyType + credentialBundlePath: credentialBundlePath + signerName: signerName secret: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key serviceAccountToken: path: path audience: audience - expirationSeconds: 6 + expirationSeconds: 3 clusterTrustBundle: path: path labelSelector: @@ -127777,7 +131040,7 @@ components: signerName: signerName - downwardAPI: items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -127786,7 +131049,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -127799,26 +131062,33 @@ components: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key + podCertificate: + certificateChainPath: certificateChainPath + keyPath: keyPath + maxExpirationSeconds: 3 + keyType: keyType + credentialBundlePath: credentialBundlePath + signerName: signerName secret: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key serviceAccountToken: path: path audience: audience - expirationSeconds: 6 + expirationSeconds: 3 clusterTrustBundle: path: path labelSelector: @@ -127838,7 +131108,7 @@ components: name: name optional: true signerName: signerName - defaultMode: 5 + defaultMode: 6 cephfs: path: path secretRef: @@ -127893,9 +131163,9 @@ components: readOnly: true fsType: fsType downwardAPI: - defaultMode: 6 + defaultMode: 1 items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -127904,7 +131174,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -127914,7 +131184,7 @@ components: apiVersion: apiVersion fieldPath: fieldPath awsElasticBlockStore: - partition: 9 + partition: 6 volumeID: volumeID readOnly: true fsType: fsType @@ -127924,7 +131194,7 @@ components: iscsi: chapAuthSession: true iscsiInterface: iscsiInterface - lun: 6 + lun: 5 chapAuthDiscovery: true iqn: iqn portals: @@ -127949,14 +131219,14 @@ components: - monitors - monitors configMap: - defaultMode: 6 + defaultMode: 3 name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key storageos: @@ -127996,7 +131266,7 @@ components: volumePath: volumePath fsType: fsType fc: - lun: 2 + lun: 6 targetWWNs: - targetWWNs - targetWWNs @@ -128022,11 +131292,24 @@ components: name: name - devicePath: devicePath name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator stdin: true terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -128256,6 +131539,11 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key - name: name value: value valueFrom: @@ -128274,6 +131562,11 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key restartPolicy: restartPolicy command: - command @@ -128289,11 +131582,24 @@ components: name: name - devicePath: devicePath name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator stdin: true terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -128523,6 +131829,11 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key - name: name value: value valueFrom: @@ -128541,6 +131852,11 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key restartPolicy: restartPolicy command: - command @@ -128552,7 +131868,7 @@ components: tty: true stdinOnce: true serviceAccount: serviceAccount - priority: 6 + priority: 7 restartPolicy: restartPolicy shareProcessNamespace: true hostUsers: true @@ -128570,50 +131886,24 @@ components: name: name - devicePath: devicePath name: name - image: image - imagePullPolicy: imagePullPolicy - livenessProbe: - terminationGracePeriodSeconds: 2 - failureThreshold: 5 - periodSeconds: 9 - tcpSocket: - port: port - host: host - timeoutSeconds: 4 - successThreshold: 3 - initialDelaySeconds: 7 - exec: - command: - - command - - command - grpc: - port: 2 - service: service - httpGet: - path: path - scheme: scheme - port: port - host: host - httpHeaders: - - name: name - value: value - - name: name - value: value + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator stdin: true terminationMessagePolicy: terminationMessagePolicy - terminationMessagePath: terminationMessagePath - workingDir: workingDir - resources: - claims: - - request: request - name: name - - request: request - name: name - requests: {} - limits: {} securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -128669,43 +131959,6 @@ components: value: value - name: name value: value - env: - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath ports: - protocol: protocol hostIP: hostIP @@ -128717,10 +131970,6 @@ components: name: name containerPort: 7 hostPort: 1 - restartPolicy: restartPolicy - command: - - command - - command volumeMounts: - mountPath: mountPath mountPropagation: mountPropagation @@ -128736,9 +131985,6 @@ components: subPath: subPath recursiveReadOnly: recursiveReadOnly subPathExpr: subPathExpr - args: - - args - - args lifecycle: postStart: sleep: @@ -128781,8 +132027,6 @@ components: - name: name value: value stopSignal: stopSignal - name: name - tty: true readinessProbe: terminationGracePeriodSeconds: 2 failureThreshold: 5 @@ -128815,7 +132059,6 @@ components: restartPolicy: restartPolicy - resourceName: resourceName restartPolicy: restartPolicy - stdinOnce: true envFrom: - configMapRef: name: name @@ -128831,11 +132074,6 @@ components: secretRef: name: name optional: true - - volumeDevices: - - devicePath: devicePath - name: name - - devicePath: devicePath - name: name image: image imagePullPolicy: imagePullPolicy livenessProbe: @@ -128865,8 +132103,6 @@ components: value: value - name: name value: value - stdin: true - terminationMessagePolicy: terminationMessagePolicy terminationMessagePath: terminationMessagePath workingDir: workingDir resources: @@ -128877,9 +132113,86 @@ components: name: name requests: {} limits: {} + env: + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + restartPolicy: restartPolicy + command: + - command + - command + args: + - args + - args + name: name + tty: true + stdinOnce: true + - volumeDevices: + - devicePath: devicePath + name: name + - devicePath: devicePath + name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + stdin: true + terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -128935,43 +132248,6 @@ components: value: value - name: name value: value - env: - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath ports: - protocol: protocol hostIP: hostIP @@ -128983,10 +132259,6 @@ components: name: name containerPort: 7 hostPort: 1 - restartPolicy: restartPolicy - command: - - command - - command volumeMounts: - mountPath: mountPath mountPropagation: mountPropagation @@ -129002,9 +132274,6 @@ components: subPath: subPath recursiveReadOnly: recursiveReadOnly subPathExpr: subPathExpr - args: - - args - - args lifecycle: postStart: sleep: @@ -129047,8 +132316,6 @@ components: - name: name value: value stopSignal: stopSignal - name: name - tty: true readinessProbe: terminationGracePeriodSeconds: 2 failureThreshold: 5 @@ -129081,7 +132348,6 @@ components: restartPolicy: restartPolicy - resourceName: resourceName restartPolicy: restartPolicy - stdinOnce: true envFrom: - configMapRef: name: name @@ -129097,12 +132363,6 @@ components: secretRef: name: name optional: true - initContainers: - - volumeDevices: - - devicePath: devicePath - name: name - - devicePath: devicePath - name: name image: image imagePullPolicy: imagePullPolicy livenessProbe: @@ -129132,8 +132392,6 @@ components: value: value - name: name value: value - stdin: true - terminationMessagePolicy: terminationMessagePolicy terminationMessagePath: terminationMessagePath workingDir: workingDir resources: @@ -129144,9 +132402,87 @@ components: name: name requests: {} limits: {} + env: + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + restartPolicy: restartPolicy + command: + - command + - command + args: + - args + - args + name: name + tty: true + stdinOnce: true + initContainers: + - volumeDevices: + - devicePath: devicePath + name: name + - devicePath: devicePath + name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + stdin: true + terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -129202,43 +132538,6 @@ components: value: value - name: name value: value - env: - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath ports: - protocol: protocol hostIP: hostIP @@ -129250,10 +132549,6 @@ components: name: name containerPort: 7 hostPort: 1 - restartPolicy: restartPolicy - command: - - command - - command volumeMounts: - mountPath: mountPath mountPropagation: mountPropagation @@ -129269,9 +132564,6 @@ components: subPath: subPath recursiveReadOnly: recursiveReadOnly subPathExpr: subPathExpr - args: - - args - - args lifecycle: postStart: sleep: @@ -129314,8 +132606,6 @@ components: - name: name value: value stopSignal: stopSignal - name: name - tty: true readinessProbe: terminationGracePeriodSeconds: 2 failureThreshold: 5 @@ -129348,7 +132638,6 @@ components: restartPolicy: restartPolicy - resourceName: resourceName restartPolicy: restartPolicy - stdinOnce: true envFrom: - configMapRef: name: name @@ -129364,11 +132653,6 @@ components: secretRef: name: name optional: true - - volumeDevices: - - devicePath: devicePath - name: name - - devicePath: devicePath - name: name image: image imagePullPolicy: imagePullPolicy livenessProbe: @@ -129398,8 +132682,6 @@ components: value: value - name: name value: value - stdin: true - terminationMessagePolicy: terminationMessagePolicy terminationMessagePath: terminationMessagePath workingDir: workingDir resources: @@ -129410,9 +132692,86 @@ components: name: name requests: {} limits: {} + env: + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + restartPolicy: restartPolicy + command: + - command + - command + args: + - args + - args + name: name + tty: true + stdinOnce: true + - volumeDevices: + - devicePath: devicePath + name: name + - devicePath: devicePath + name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + stdin: true + terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -129468,43 +132827,6 @@ components: value: value - name: name value: value - env: - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath ports: - protocol: protocol hostIP: hostIP @@ -129516,10 +132838,6 @@ components: name: name containerPort: 7 hostPort: 1 - restartPolicy: restartPolicy - command: - - command - - command volumeMounts: - mountPath: mountPath mountPropagation: mountPropagation @@ -129535,9 +132853,6 @@ components: subPath: subPath recursiveReadOnly: recursiveReadOnly subPathExpr: subPathExpr - args: - - args - - args lifecycle: postStart: sleep: @@ -129580,8 +132895,6 @@ components: - name: name value: value stopSignal: stopSignal - name: name - tty: true readinessProbe: terminationGracePeriodSeconds: 2 failureThreshold: 5 @@ -129614,7 +132927,6 @@ components: restartPolicy: restartPolicy - resourceName: resourceName restartPolicy: restartPolicy - stdinOnce: true envFrom: - configMapRef: name: name @@ -129630,6 +132942,102 @@ components: secretRef: name: name optional: true + image: image + imagePullPolicy: imagePullPolicy + livenessProbe: + terminationGracePeriodSeconds: 2 + failureThreshold: 5 + periodSeconds: 9 + tcpSocket: + port: port + host: host + timeoutSeconds: 4 + successThreshold: 3 + initialDelaySeconds: 7 + exec: + command: + - command + - command + grpc: + port: 2 + service: service + httpGet: + path: path + scheme: scheme + port: port + host: host + httpHeaders: + - name: name + value: value + - name: name + value: value + terminationMessagePath: terminationMessagePath + workingDir: workingDir + resources: + claims: + - request: request + name: name + - request: request + name: name + requests: {} + limits: {} + env: + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + restartPolicy: restartPolicy + command: + - command + - command + args: + - args + - args + name: name + tty: true + stdinOnce: true affinity: nodeAffinity: requiredDuringSchedulingIgnoredDuringExecution: @@ -130178,6 +133586,7 @@ components: - conditionType: conditionType - conditionType: conditionType serviceAccountName: serviceAccountName + hostnameOverride: hostnameOverride imagePullSecrets: - name: name - name: name @@ -130200,17 +133609,17 @@ components: appArmorProfile: localhostProfile: localhostProfile type: type - fsGroup: 7 + fsGroup: 1 fsGroupChangePolicy: fsGroupChangePolicy seLinuxChangePolicy: seLinuxChangePolicy - runAsGroup: 1 + runAsGroup: 4 runAsNonRoot: true sysctls: - name: name value: value - name: name value: value - runAsUser: 4 + runAsUser: 5 seccompProfile: localhostProfile: localhostProfile type: type @@ -130220,8 +133629,8 @@ components: hostProcess: true gmsaCredentialSpecName: gmsaCredentialSpecName supplementalGroups: - - 5 - - 5 + - 9 + - 9 supplementalGroupsPolicy: supplementalGroupsPolicy preemptionPolicy: preemptionPolicy nodeSelector: @@ -130230,12 +133639,12 @@ components: runtimeClassName: runtimeClassName tolerations: - effect: effect - tolerationSeconds: 9 + tolerationSeconds: 6 value: value key: key operator: operator - effect: effect - tolerationSeconds: 9 + tolerationSeconds: 6 value: value key: key operator: operator @@ -130254,7 +133663,7 @@ components: topologySpreadConstraints: - nodeTaintsPolicy: nodeTaintsPolicy whenUnsatisfiable: whenUnsatisfiable - maxSkew: 6 + maxSkew: 8 nodeAffinityPolicy: nodeAffinityPolicy labelSelector: matchExpressions: @@ -130270,14 +133679,14 @@ components: operator: operator matchLabels: key: matchLabels - minDomains: 8 + minDomains: 9 topologyKey: topologyKey matchLabelKeys: - matchLabelKeys - matchLabelKeys - nodeTaintsPolicy: nodeTaintsPolicy whenUnsatisfiable: whenUnsatisfiable - maxSkew: 6 + maxSkew: 8 nodeAffinityPolicy: nodeAffinityPolicy labelSelector: matchExpressions: @@ -130293,7 +133702,7 @@ components: operator: operator matchLabels: key: matchLabels - minDomains: 8 + minDomains: 9 topologyKey: topologyKey matchLabelKeys: - matchLabelKeys @@ -130402,20 +133811,20 @@ components: volumeMode: volumeMode secret: secretName: secretName - defaultMode: 3 + defaultMode: 7 optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key projected: sources: - downwardAPI: items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -130424,7 +133833,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -130437,26 +133846,33 @@ components: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key + podCertificate: + certificateChainPath: certificateChainPath + keyPath: keyPath + maxExpirationSeconds: 3 + keyType: keyType + credentialBundlePath: credentialBundlePath + signerName: signerName secret: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key serviceAccountToken: path: path audience: audience - expirationSeconds: 6 + expirationSeconds: 3 clusterTrustBundle: path: path labelSelector: @@ -130478,7 +133894,7 @@ components: signerName: signerName - downwardAPI: items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -130487,7 +133903,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -130500,26 +133916,33 @@ components: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key + podCertificate: + certificateChainPath: certificateChainPath + keyPath: keyPath + maxExpirationSeconds: 3 + keyType: keyType + credentialBundlePath: credentialBundlePath + signerName: signerName secret: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key serviceAccountToken: path: path audience: audience - expirationSeconds: 6 + expirationSeconds: 3 clusterTrustBundle: path: path labelSelector: @@ -130539,7 +133962,7 @@ components: name: name optional: true signerName: signerName - defaultMode: 5 + defaultMode: 6 cephfs: path: path secretRef: @@ -130594,9 +134017,9 @@ components: readOnly: true fsType: fsType downwardAPI: - defaultMode: 6 + defaultMode: 1 items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -130605,7 +134028,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -130615,7 +134038,7 @@ components: apiVersion: apiVersion fieldPath: fieldPath awsElasticBlockStore: - partition: 9 + partition: 6 volumeID: volumeID readOnly: true fsType: fsType @@ -130625,7 +134048,7 @@ components: iscsi: chapAuthSession: true iscsiInterface: iscsiInterface - lun: 6 + lun: 5 chapAuthDiscovery: true iqn: iqn portals: @@ -130650,14 +134073,14 @@ components: - monitors - monitors configMap: - defaultMode: 6 + defaultMode: 3 name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key storageos: @@ -130697,7 +134120,7 @@ components: volumePath: volumePath fsType: fsType fc: - lun: 2 + lun: 6 targetWWNs: - targetWWNs - targetWWNs @@ -130812,20 +134235,20 @@ components: volumeMode: volumeMode secret: secretName: secretName - defaultMode: 3 + defaultMode: 7 optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key projected: sources: - downwardAPI: items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -130834,7 +134257,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -130847,26 +134270,33 @@ components: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key + podCertificate: + certificateChainPath: certificateChainPath + keyPath: keyPath + maxExpirationSeconds: 3 + keyType: keyType + credentialBundlePath: credentialBundlePath + signerName: signerName secret: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key serviceAccountToken: path: path audience: audience - expirationSeconds: 6 + expirationSeconds: 3 clusterTrustBundle: path: path labelSelector: @@ -130888,7 +134318,7 @@ components: signerName: signerName - downwardAPI: items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -130897,7 +134327,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -130910,26 +134340,33 @@ components: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key + podCertificate: + certificateChainPath: certificateChainPath + keyPath: keyPath + maxExpirationSeconds: 3 + keyType: keyType + credentialBundlePath: credentialBundlePath + signerName: signerName secret: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key serviceAccountToken: path: path audience: audience - expirationSeconds: 6 + expirationSeconds: 3 clusterTrustBundle: path: path labelSelector: @@ -130949,7 +134386,7 @@ components: name: name optional: true signerName: signerName - defaultMode: 5 + defaultMode: 6 cephfs: path: path secretRef: @@ -131004,9 +134441,9 @@ components: readOnly: true fsType: fsType downwardAPI: - defaultMode: 6 + defaultMode: 1 items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -131015,7 +134452,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -131025,7 +134462,7 @@ components: apiVersion: apiVersion fieldPath: fieldPath awsElasticBlockStore: - partition: 9 + partition: 6 volumeID: volumeID readOnly: true fsType: fsType @@ -131035,7 +134472,7 @@ components: iscsi: chapAuthSession: true iscsiInterface: iscsiInterface - lun: 6 + lun: 5 chapAuthDiscovery: true iqn: iqn portals: @@ -131060,14 +134497,14 @@ components: - monitors - monitors configMap: - defaultMode: 6 + defaultMode: 3 name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key storageos: @@ -131107,7 +134544,7 @@ components: volumePath: volumePath fsType: fsType fc: - lun: 2 + lun: 6 targetWWNs: - targetWWNs - targetWWNs @@ -131133,11 +134570,24 @@ components: name: name - devicePath: devicePath name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator stdin: true terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -131367,6 +134817,11 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key - name: name value: value valueFrom: @@ -131385,6 +134840,11 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key restartPolicy: restartPolicy command: - command @@ -131400,11 +134860,24 @@ components: name: name - devicePath: devicePath name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator stdin: true terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -131634,6 +135107,11 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key - name: name value: value valueFrom: @@ -131652,6 +135130,11 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key restartPolicy: restartPolicy command: - command @@ -131663,7 +135146,7 @@ components: tty: true stdinOnce: true serviceAccount: serviceAccount - priority: 6 + priority: 7 restartPolicy: restartPolicy shareProcessNamespace: true hostUsers: true @@ -131681,50 +135164,24 @@ components: name: name - devicePath: devicePath name: name - image: image - imagePullPolicy: imagePullPolicy - livenessProbe: - terminationGracePeriodSeconds: 2 - failureThreshold: 5 - periodSeconds: 9 - tcpSocket: - port: port - host: host - timeoutSeconds: 4 - successThreshold: 3 - initialDelaySeconds: 7 - exec: - command: - - command - - command - grpc: - port: 2 - service: service - httpGet: - path: path - scheme: scheme - port: port - host: host - httpHeaders: - - name: name - value: value - - name: name - value: value + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator stdin: true terminationMessagePolicy: terminationMessagePolicy - terminationMessagePath: terminationMessagePath - workingDir: workingDir - resources: - claims: - - request: request - name: name - - request: request - name: name - requests: {} - limits: {} securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -131780,43 +135237,6 @@ components: value: value - name: name value: value - env: - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath ports: - protocol: protocol hostIP: hostIP @@ -131828,10 +135248,6 @@ components: name: name containerPort: 7 hostPort: 1 - restartPolicy: restartPolicy - command: - - command - - command volumeMounts: - mountPath: mountPath mountPropagation: mountPropagation @@ -131847,9 +135263,6 @@ components: subPath: subPath recursiveReadOnly: recursiveReadOnly subPathExpr: subPathExpr - args: - - args - - args lifecycle: postStart: sleep: @@ -131892,8 +135305,6 @@ components: - name: name value: value stopSignal: stopSignal - name: name - tty: true readinessProbe: terminationGracePeriodSeconds: 2 failureThreshold: 5 @@ -131926,7 +135337,6 @@ components: restartPolicy: restartPolicy - resourceName: resourceName restartPolicy: restartPolicy - stdinOnce: true envFrom: - configMapRef: name: name @@ -131942,11 +135352,6 @@ components: secretRef: name: name optional: true - - volumeDevices: - - devicePath: devicePath - name: name - - devicePath: devicePath - name: name image: image imagePullPolicy: imagePullPolicy livenessProbe: @@ -131976,8 +135381,6 @@ components: value: value - name: name value: value - stdin: true - terminationMessagePolicy: terminationMessagePolicy terminationMessagePath: terminationMessagePath workingDir: workingDir resources: @@ -131988,9 +135391,86 @@ components: name: name requests: {} limits: {} + env: + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + restartPolicy: restartPolicy + command: + - command + - command + args: + - args + - args + name: name + tty: true + stdinOnce: true + - volumeDevices: + - devicePath: devicePath + name: name + - devicePath: devicePath + name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + stdin: true + terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -132046,43 +135526,6 @@ components: value: value - name: name value: value - env: - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath ports: - protocol: protocol hostIP: hostIP @@ -132094,10 +135537,6 @@ components: name: name containerPort: 7 hostPort: 1 - restartPolicy: restartPolicy - command: - - command - - command volumeMounts: - mountPath: mountPath mountPropagation: mountPropagation @@ -132113,9 +135552,6 @@ components: subPath: subPath recursiveReadOnly: recursiveReadOnly subPathExpr: subPathExpr - args: - - args - - args lifecycle: postStart: sleep: @@ -132158,8 +135594,6 @@ components: - name: name value: value stopSignal: stopSignal - name: name - tty: true readinessProbe: terminationGracePeriodSeconds: 2 failureThreshold: 5 @@ -132192,7 +135626,6 @@ components: restartPolicy: restartPolicy - resourceName: resourceName restartPolicy: restartPolicy - stdinOnce: true envFrom: - configMapRef: name: name @@ -132208,12 +135641,6 @@ components: secretRef: name: name optional: true - initContainers: - - volumeDevices: - - devicePath: devicePath - name: name - - devicePath: devicePath - name: name image: image imagePullPolicy: imagePullPolicy livenessProbe: @@ -132243,8 +135670,6 @@ components: value: value - name: name value: value - stdin: true - terminationMessagePolicy: terminationMessagePolicy terminationMessagePath: terminationMessagePath workingDir: workingDir resources: @@ -132255,9 +135680,87 @@ components: name: name requests: {} limits: {} + env: + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + restartPolicy: restartPolicy + command: + - command + - command + args: + - args + - args + name: name + tty: true + stdinOnce: true + initContainers: + - volumeDevices: + - devicePath: devicePath + name: name + - devicePath: devicePath + name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + stdin: true + terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -132313,43 +135816,6 @@ components: value: value - name: name value: value - env: - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath ports: - protocol: protocol hostIP: hostIP @@ -132361,10 +135827,6 @@ components: name: name containerPort: 7 hostPort: 1 - restartPolicy: restartPolicy - command: - - command - - command volumeMounts: - mountPath: mountPath mountPropagation: mountPropagation @@ -132380,9 +135842,6 @@ components: subPath: subPath recursiveReadOnly: recursiveReadOnly subPathExpr: subPathExpr - args: - - args - - args lifecycle: postStart: sleep: @@ -132425,8 +135884,6 @@ components: - name: name value: value stopSignal: stopSignal - name: name - tty: true readinessProbe: terminationGracePeriodSeconds: 2 failureThreshold: 5 @@ -132459,7 +135916,6 @@ components: restartPolicy: restartPolicy - resourceName: resourceName restartPolicy: restartPolicy - stdinOnce: true envFrom: - configMapRef: name: name @@ -132475,11 +135931,6 @@ components: secretRef: name: name optional: true - - volumeDevices: - - devicePath: devicePath - name: name - - devicePath: devicePath - name: name image: image imagePullPolicy: imagePullPolicy livenessProbe: @@ -132509,8 +135960,6 @@ components: value: value - name: name value: value - stdin: true - terminationMessagePolicy: terminationMessagePolicy terminationMessagePath: terminationMessagePath workingDir: workingDir resources: @@ -132521,9 +135970,86 @@ components: name: name requests: {} limits: {} + env: + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + restartPolicy: restartPolicy + command: + - command + - command + args: + - args + - args + name: name + tty: true + stdinOnce: true + - volumeDevices: + - devicePath: devicePath + name: name + - devicePath: devicePath + name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + stdin: true + terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -132579,43 +136105,6 @@ components: value: value - name: name value: value - env: - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath ports: - protocol: protocol hostIP: hostIP @@ -132627,10 +136116,6 @@ components: name: name containerPort: 7 hostPort: 1 - restartPolicy: restartPolicy - command: - - command - - command volumeMounts: - mountPath: mountPath mountPropagation: mountPropagation @@ -132646,9 +136131,6 @@ components: subPath: subPath recursiveReadOnly: recursiveReadOnly subPathExpr: subPathExpr - args: - - args - - args lifecycle: postStart: sleep: @@ -132691,8 +136173,6 @@ components: - name: name value: value stopSignal: stopSignal - name: name - tty: true readinessProbe: terminationGracePeriodSeconds: 2 failureThreshold: 5 @@ -132725,7 +136205,6 @@ components: restartPolicy: restartPolicy - resourceName: resourceName restartPolicy: restartPolicy - stdinOnce: true envFrom: - configMapRef: name: name @@ -132741,6 +136220,102 @@ components: secretRef: name: name optional: true + image: image + imagePullPolicy: imagePullPolicy + livenessProbe: + terminationGracePeriodSeconds: 2 + failureThreshold: 5 + periodSeconds: 9 + tcpSocket: + port: port + host: host + timeoutSeconds: 4 + successThreshold: 3 + initialDelaySeconds: 7 + exec: + command: + - command + - command + grpc: + port: 2 + service: service + httpGet: + path: path + scheme: scheme + port: port + host: host + httpHeaders: + - name: name + value: value + - name: name + value: value + terminationMessagePath: terminationMessagePath + workingDir: workingDir + resources: + claims: + - request: request + name: name + - request: request + name: name + requests: {} + limits: {} + env: + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + restartPolicy: restartPolicy + command: + - command + - command + args: + - args + - args + name: name + tty: true + stdinOnce: true affinity: nodeAffinity: requiredDuringSchedulingIgnoredDuringExecution: @@ -133451,6 +137026,7 @@ components: - conditionType: conditionType - conditionType: conditionType serviceAccountName: serviceAccountName + hostnameOverride: hostnameOverride imagePullSecrets: - name: name - name: name @@ -133473,17 +137049,17 @@ components: appArmorProfile: localhostProfile: localhostProfile type: type - fsGroup: 7 + fsGroup: 1 fsGroupChangePolicy: fsGroupChangePolicy seLinuxChangePolicy: seLinuxChangePolicy - runAsGroup: 1 + runAsGroup: 4 runAsNonRoot: true sysctls: - name: name value: value - name: name value: value - runAsUser: 4 + runAsUser: 5 seccompProfile: localhostProfile: localhostProfile type: type @@ -133493,8 +137069,8 @@ components: hostProcess: true gmsaCredentialSpecName: gmsaCredentialSpecName supplementalGroups: - - 5 - - 5 + - 9 + - 9 supplementalGroupsPolicy: supplementalGroupsPolicy preemptionPolicy: preemptionPolicy nodeSelector: @@ -133503,12 +137079,12 @@ components: runtimeClassName: runtimeClassName tolerations: - effect: effect - tolerationSeconds: 9 + tolerationSeconds: 6 value: value key: key operator: operator - effect: effect - tolerationSeconds: 9 + tolerationSeconds: 6 value: value key: key operator: operator @@ -133527,7 +137103,7 @@ components: topologySpreadConstraints: - nodeTaintsPolicy: nodeTaintsPolicy whenUnsatisfiable: whenUnsatisfiable - maxSkew: 6 + maxSkew: 8 nodeAffinityPolicy: nodeAffinityPolicy labelSelector: matchExpressions: @@ -133543,14 +137119,14 @@ components: operator: operator matchLabels: key: matchLabels - minDomains: 8 + minDomains: 9 topologyKey: topologyKey matchLabelKeys: - matchLabelKeys - matchLabelKeys - nodeTaintsPolicy: nodeTaintsPolicy whenUnsatisfiable: whenUnsatisfiable - maxSkew: 6 + maxSkew: 8 nodeAffinityPolicy: nodeAffinityPolicy labelSelector: matchExpressions: @@ -133566,7 +137142,7 @@ components: operator: operator matchLabels: key: matchLabels - minDomains: 8 + minDomains: 9 topologyKey: topologyKey matchLabelKeys: - matchLabelKeys @@ -133675,20 +137251,20 @@ components: volumeMode: volumeMode secret: secretName: secretName - defaultMode: 3 + defaultMode: 7 optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key projected: sources: - downwardAPI: items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -133697,7 +137273,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -133710,26 +137286,33 @@ components: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key + podCertificate: + certificateChainPath: certificateChainPath + keyPath: keyPath + maxExpirationSeconds: 3 + keyType: keyType + credentialBundlePath: credentialBundlePath + signerName: signerName secret: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key serviceAccountToken: path: path audience: audience - expirationSeconds: 6 + expirationSeconds: 3 clusterTrustBundle: path: path labelSelector: @@ -133751,7 +137334,7 @@ components: signerName: signerName - downwardAPI: items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -133760,7 +137343,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -133773,26 +137356,33 @@ components: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key + podCertificate: + certificateChainPath: certificateChainPath + keyPath: keyPath + maxExpirationSeconds: 3 + keyType: keyType + credentialBundlePath: credentialBundlePath + signerName: signerName secret: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key serviceAccountToken: path: path audience: audience - expirationSeconds: 6 + expirationSeconds: 3 clusterTrustBundle: path: path labelSelector: @@ -133812,7 +137402,7 @@ components: name: name optional: true signerName: signerName - defaultMode: 5 + defaultMode: 6 cephfs: path: path secretRef: @@ -133867,9 +137457,9 @@ components: readOnly: true fsType: fsType downwardAPI: - defaultMode: 6 + defaultMode: 1 items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -133878,7 +137468,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -133888,7 +137478,7 @@ components: apiVersion: apiVersion fieldPath: fieldPath awsElasticBlockStore: - partition: 9 + partition: 6 volumeID: volumeID readOnly: true fsType: fsType @@ -133898,7 +137488,7 @@ components: iscsi: chapAuthSession: true iscsiInterface: iscsiInterface - lun: 6 + lun: 5 chapAuthDiscovery: true iqn: iqn portals: @@ -133923,14 +137513,14 @@ components: - monitors - monitors configMap: - defaultMode: 6 + defaultMode: 3 name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key storageos: @@ -133970,7 +137560,7 @@ components: volumePath: volumePath fsType: fsType fc: - lun: 2 + lun: 6 targetWWNs: - targetWWNs - targetWWNs @@ -134085,20 +137675,20 @@ components: volumeMode: volumeMode secret: secretName: secretName - defaultMode: 3 + defaultMode: 7 optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key projected: sources: - downwardAPI: items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -134107,7 +137697,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -134120,26 +137710,33 @@ components: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key + podCertificate: + certificateChainPath: certificateChainPath + keyPath: keyPath + maxExpirationSeconds: 3 + keyType: keyType + credentialBundlePath: credentialBundlePath + signerName: signerName secret: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key serviceAccountToken: path: path audience: audience - expirationSeconds: 6 + expirationSeconds: 3 clusterTrustBundle: path: path labelSelector: @@ -134161,7 +137758,7 @@ components: signerName: signerName - downwardAPI: items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -134170,7 +137767,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -134183,26 +137780,33 @@ components: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key + podCertificate: + certificateChainPath: certificateChainPath + keyPath: keyPath + maxExpirationSeconds: 3 + keyType: keyType + credentialBundlePath: credentialBundlePath + signerName: signerName secret: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key serviceAccountToken: path: path audience: audience - expirationSeconds: 6 + expirationSeconds: 3 clusterTrustBundle: path: path labelSelector: @@ -134222,7 +137826,7 @@ components: name: name optional: true signerName: signerName - defaultMode: 5 + defaultMode: 6 cephfs: path: path secretRef: @@ -134277,9 +137881,9 @@ components: readOnly: true fsType: fsType downwardAPI: - defaultMode: 6 + defaultMode: 1 items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -134288,7 +137892,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -134298,7 +137902,7 @@ components: apiVersion: apiVersion fieldPath: fieldPath awsElasticBlockStore: - partition: 9 + partition: 6 volumeID: volumeID readOnly: true fsType: fsType @@ -134308,7 +137912,7 @@ components: iscsi: chapAuthSession: true iscsiInterface: iscsiInterface - lun: 6 + lun: 5 chapAuthDiscovery: true iqn: iqn portals: @@ -134333,14 +137937,14 @@ components: - monitors - monitors configMap: - defaultMode: 6 + defaultMode: 3 name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key storageos: @@ -134380,7 +137984,7 @@ components: volumePath: volumePath fsType: fsType fc: - lun: 2 + lun: 6 targetWWNs: - targetWWNs - targetWWNs @@ -134406,11 +138010,24 @@ components: name: name - devicePath: devicePath name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator stdin: true terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -134640,6 +138257,11 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key - name: name value: value valueFrom: @@ -134658,6 +138280,11 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key restartPolicy: restartPolicy command: - command @@ -134673,11 +138300,24 @@ components: name: name - devicePath: devicePath name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator stdin: true terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -134907,6 +138547,11 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key - name: name value: value valueFrom: @@ -134925,6 +138570,11 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key restartPolicy: restartPolicy command: - command @@ -134936,7 +138586,7 @@ components: tty: true stdinOnce: true serviceAccount: serviceAccount - priority: 6 + priority: 7 restartPolicy: restartPolicy shareProcessNamespace: true hostUsers: true @@ -134954,50 +138604,24 @@ components: name: name - devicePath: devicePath name: name - image: image - imagePullPolicy: imagePullPolicy - livenessProbe: - terminationGracePeriodSeconds: 2 - failureThreshold: 5 - periodSeconds: 9 - tcpSocket: - port: port - host: host - timeoutSeconds: 4 - successThreshold: 3 - initialDelaySeconds: 7 - exec: - command: - - command - - command - grpc: - port: 2 - service: service - httpGet: - path: path - scheme: scheme - port: port - host: host - httpHeaders: - - name: name - value: value - - name: name - value: value + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator stdin: true terminationMessagePolicy: terminationMessagePolicy - terminationMessagePath: terminationMessagePath - workingDir: workingDir - resources: - claims: - - request: request - name: name - - request: request - name: name - requests: {} - limits: {} securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -135053,43 +138677,6 @@ components: value: value - name: name value: value - env: - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath ports: - protocol: protocol hostIP: hostIP @@ -135101,10 +138688,6 @@ components: name: name containerPort: 7 hostPort: 1 - restartPolicy: restartPolicy - command: - - command - - command volumeMounts: - mountPath: mountPath mountPropagation: mountPropagation @@ -135120,9 +138703,6 @@ components: subPath: subPath recursiveReadOnly: recursiveReadOnly subPathExpr: subPathExpr - args: - - args - - args lifecycle: postStart: sleep: @@ -135165,8 +138745,6 @@ components: - name: name value: value stopSignal: stopSignal - name: name - tty: true readinessProbe: terminationGracePeriodSeconds: 2 failureThreshold: 5 @@ -135199,7 +138777,6 @@ components: restartPolicy: restartPolicy - resourceName: resourceName restartPolicy: restartPolicy - stdinOnce: true envFrom: - configMapRef: name: name @@ -135215,11 +138792,6 @@ components: secretRef: name: name optional: true - - volumeDevices: - - devicePath: devicePath - name: name - - devicePath: devicePath - name: name image: image imagePullPolicy: imagePullPolicy livenessProbe: @@ -135249,8 +138821,6 @@ components: value: value - name: name value: value - stdin: true - terminationMessagePolicy: terminationMessagePolicy terminationMessagePath: terminationMessagePath workingDir: workingDir resources: @@ -135261,9 +138831,86 @@ components: name: name requests: {} limits: {} + env: + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + restartPolicy: restartPolicy + command: + - command + - command + args: + - args + - args + name: name + tty: true + stdinOnce: true + - volumeDevices: + - devicePath: devicePath + name: name + - devicePath: devicePath + name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + stdin: true + terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -135319,43 +138966,6 @@ components: value: value - name: name value: value - env: - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath ports: - protocol: protocol hostIP: hostIP @@ -135367,10 +138977,6 @@ components: name: name containerPort: 7 hostPort: 1 - restartPolicy: restartPolicy - command: - - command - - command volumeMounts: - mountPath: mountPath mountPropagation: mountPropagation @@ -135386,9 +138992,6 @@ components: subPath: subPath recursiveReadOnly: recursiveReadOnly subPathExpr: subPathExpr - args: - - args - - args lifecycle: postStart: sleep: @@ -135431,8 +139034,6 @@ components: - name: name value: value stopSignal: stopSignal - name: name - tty: true readinessProbe: terminationGracePeriodSeconds: 2 failureThreshold: 5 @@ -135465,7 +139066,6 @@ components: restartPolicy: restartPolicy - resourceName: resourceName restartPolicy: restartPolicy - stdinOnce: true envFrom: - configMapRef: name: name @@ -135481,12 +139081,6 @@ components: secretRef: name: name optional: true - initContainers: - - volumeDevices: - - devicePath: devicePath - name: name - - devicePath: devicePath - name: name image: image imagePullPolicy: imagePullPolicy livenessProbe: @@ -135516,8 +139110,6 @@ components: value: value - name: name value: value - stdin: true - terminationMessagePolicy: terminationMessagePolicy terminationMessagePath: terminationMessagePath workingDir: workingDir resources: @@ -135528,9 +139120,87 @@ components: name: name requests: {} limits: {} + env: + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + restartPolicy: restartPolicy + command: + - command + - command + args: + - args + - args + name: name + tty: true + stdinOnce: true + initContainers: + - volumeDevices: + - devicePath: devicePath + name: name + - devicePath: devicePath + name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + stdin: true + terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -135586,43 +139256,6 @@ components: value: value - name: name value: value - env: - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath ports: - protocol: protocol hostIP: hostIP @@ -135634,10 +139267,6 @@ components: name: name containerPort: 7 hostPort: 1 - restartPolicy: restartPolicy - command: - - command - - command volumeMounts: - mountPath: mountPath mountPropagation: mountPropagation @@ -135653,9 +139282,6 @@ components: subPath: subPath recursiveReadOnly: recursiveReadOnly subPathExpr: subPathExpr - args: - - args - - args lifecycle: postStart: sleep: @@ -135698,8 +139324,6 @@ components: - name: name value: value stopSignal: stopSignal - name: name - tty: true readinessProbe: terminationGracePeriodSeconds: 2 failureThreshold: 5 @@ -135732,7 +139356,6 @@ components: restartPolicy: restartPolicy - resourceName: resourceName restartPolicy: restartPolicy - stdinOnce: true envFrom: - configMapRef: name: name @@ -135748,11 +139371,6 @@ components: secretRef: name: name optional: true - - volumeDevices: - - devicePath: devicePath - name: name - - devicePath: devicePath - name: name image: image imagePullPolicy: imagePullPolicy livenessProbe: @@ -135782,8 +139400,6 @@ components: value: value - name: name value: value - stdin: true - terminationMessagePolicy: terminationMessagePolicy terminationMessagePath: terminationMessagePath workingDir: workingDir resources: @@ -135794,9 +139410,86 @@ components: name: name requests: {} limits: {} + env: + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + restartPolicy: restartPolicy + command: + - command + - command + args: + - args + - args + name: name + tty: true + stdinOnce: true + - volumeDevices: + - devicePath: devicePath + name: name + - devicePath: devicePath + name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + stdin: true + terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -135852,43 +139545,6 @@ components: value: value - name: name value: value - env: - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath ports: - protocol: protocol hostIP: hostIP @@ -135900,10 +139556,6 @@ components: name: name containerPort: 7 hostPort: 1 - restartPolicy: restartPolicy - command: - - command - - command volumeMounts: - mountPath: mountPath mountPropagation: mountPropagation @@ -135919,9 +139571,6 @@ components: subPath: subPath recursiveReadOnly: recursiveReadOnly subPathExpr: subPathExpr - args: - - args - - args lifecycle: postStart: sleep: @@ -135964,8 +139613,6 @@ components: - name: name value: value stopSignal: stopSignal - name: name - tty: true readinessProbe: terminationGracePeriodSeconds: 2 failureThreshold: 5 @@ -135998,7 +139645,6 @@ components: restartPolicy: restartPolicy - resourceName: resourceName restartPolicy: restartPolicy - stdinOnce: true envFrom: - configMapRef: name: name @@ -136014,6 +139660,102 @@ components: secretRef: name: name optional: true + image: image + imagePullPolicy: imagePullPolicy + livenessProbe: + terminationGracePeriodSeconds: 2 + failureThreshold: 5 + periodSeconds: 9 + tcpSocket: + port: port + host: host + timeoutSeconds: 4 + successThreshold: 3 + initialDelaySeconds: 7 + exec: + command: + - command + - command + grpc: + port: 2 + service: service + httpGet: + path: path + scheme: scheme + port: port + host: host + httpHeaders: + - name: name + value: value + - name: name + value: value + terminationMessagePath: terminationMessagePath + workingDir: workingDir + resources: + claims: + - request: request + name: name + - request: request + name: name + requests: {} + limits: {} + env: + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + restartPolicy: restartPolicy + command: + - command + - command + args: + - args + - args + name: name + tty: true + stdinOnce: true affinity: nodeAffinity: requiredDuringSchedulingIgnoredDuringExecution: @@ -136879,6 +140621,7 @@ components: - conditionType: conditionType - conditionType: conditionType serviceAccountName: serviceAccountName + hostnameOverride: hostnameOverride imagePullSecrets: - name: name - name: name @@ -136901,17 +140644,17 @@ components: appArmorProfile: localhostProfile: localhostProfile type: type - fsGroup: 7 + fsGroup: 1 fsGroupChangePolicy: fsGroupChangePolicy seLinuxChangePolicy: seLinuxChangePolicy - runAsGroup: 1 + runAsGroup: 4 runAsNonRoot: true sysctls: - name: name value: value - name: name value: value - runAsUser: 4 + runAsUser: 5 seccompProfile: localhostProfile: localhostProfile type: type @@ -136921,8 +140664,8 @@ components: hostProcess: true gmsaCredentialSpecName: gmsaCredentialSpecName supplementalGroups: - - 5 - - 5 + - 9 + - 9 supplementalGroupsPolicy: supplementalGroupsPolicy preemptionPolicy: preemptionPolicy nodeSelector: @@ -136931,12 +140674,12 @@ components: runtimeClassName: runtimeClassName tolerations: - effect: effect - tolerationSeconds: 9 + tolerationSeconds: 6 value: value key: key operator: operator - effect: effect - tolerationSeconds: 9 + tolerationSeconds: 6 value: value key: key operator: operator @@ -136955,7 +140698,7 @@ components: topologySpreadConstraints: - nodeTaintsPolicy: nodeTaintsPolicy whenUnsatisfiable: whenUnsatisfiable - maxSkew: 6 + maxSkew: 8 nodeAffinityPolicy: nodeAffinityPolicy labelSelector: matchExpressions: @@ -136971,14 +140714,14 @@ components: operator: operator matchLabels: key: matchLabels - minDomains: 8 + minDomains: 9 topologyKey: topologyKey matchLabelKeys: - matchLabelKeys - matchLabelKeys - nodeTaintsPolicy: nodeTaintsPolicy whenUnsatisfiable: whenUnsatisfiable - maxSkew: 6 + maxSkew: 8 nodeAffinityPolicy: nodeAffinityPolicy labelSelector: matchExpressions: @@ -136994,7 +140737,7 @@ components: operator: operator matchLabels: key: matchLabels - minDomains: 8 + minDomains: 9 topologyKey: topologyKey matchLabelKeys: - matchLabelKeys @@ -137103,20 +140846,20 @@ components: volumeMode: volumeMode secret: secretName: secretName - defaultMode: 3 + defaultMode: 7 optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key projected: sources: - downwardAPI: items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -137125,7 +140868,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -137138,26 +140881,33 @@ components: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key + podCertificate: + certificateChainPath: certificateChainPath + keyPath: keyPath + maxExpirationSeconds: 3 + keyType: keyType + credentialBundlePath: credentialBundlePath + signerName: signerName secret: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key serviceAccountToken: path: path audience: audience - expirationSeconds: 6 + expirationSeconds: 3 clusterTrustBundle: path: path labelSelector: @@ -137179,7 +140929,7 @@ components: signerName: signerName - downwardAPI: items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -137188,7 +140938,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -137201,26 +140951,33 @@ components: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key + podCertificate: + certificateChainPath: certificateChainPath + keyPath: keyPath + maxExpirationSeconds: 3 + keyType: keyType + credentialBundlePath: credentialBundlePath + signerName: signerName secret: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key serviceAccountToken: path: path audience: audience - expirationSeconds: 6 + expirationSeconds: 3 clusterTrustBundle: path: path labelSelector: @@ -137240,7 +140997,7 @@ components: name: name optional: true signerName: signerName - defaultMode: 5 + defaultMode: 6 cephfs: path: path secretRef: @@ -137295,9 +141052,9 @@ components: readOnly: true fsType: fsType downwardAPI: - defaultMode: 6 + defaultMode: 1 items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -137306,7 +141063,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -137316,7 +141073,7 @@ components: apiVersion: apiVersion fieldPath: fieldPath awsElasticBlockStore: - partition: 9 + partition: 6 volumeID: volumeID readOnly: true fsType: fsType @@ -137326,7 +141083,7 @@ components: iscsi: chapAuthSession: true iscsiInterface: iscsiInterface - lun: 6 + lun: 5 chapAuthDiscovery: true iqn: iqn portals: @@ -137351,14 +141108,14 @@ components: - monitors - monitors configMap: - defaultMode: 6 + defaultMode: 3 name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key storageos: @@ -137398,7 +141155,7 @@ components: volumePath: volumePath fsType: fsType fc: - lun: 2 + lun: 6 targetWWNs: - targetWWNs - targetWWNs @@ -137513,20 +141270,20 @@ components: volumeMode: volumeMode secret: secretName: secretName - defaultMode: 3 + defaultMode: 7 optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key projected: sources: - downwardAPI: items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -137535,7 +141292,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -137548,26 +141305,33 @@ components: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key + podCertificate: + certificateChainPath: certificateChainPath + keyPath: keyPath + maxExpirationSeconds: 3 + keyType: keyType + credentialBundlePath: credentialBundlePath + signerName: signerName secret: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key serviceAccountToken: path: path audience: audience - expirationSeconds: 6 + expirationSeconds: 3 clusterTrustBundle: path: path labelSelector: @@ -137589,7 +141353,7 @@ components: signerName: signerName - downwardAPI: items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -137598,7 +141362,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -137611,26 +141375,33 @@ components: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key + podCertificate: + certificateChainPath: certificateChainPath + keyPath: keyPath + maxExpirationSeconds: 3 + keyType: keyType + credentialBundlePath: credentialBundlePath + signerName: signerName secret: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key serviceAccountToken: path: path audience: audience - expirationSeconds: 6 + expirationSeconds: 3 clusterTrustBundle: path: path labelSelector: @@ -137650,7 +141421,7 @@ components: name: name optional: true signerName: signerName - defaultMode: 5 + defaultMode: 6 cephfs: path: path secretRef: @@ -137705,9 +141476,9 @@ components: readOnly: true fsType: fsType downwardAPI: - defaultMode: 6 + defaultMode: 1 items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -137716,7 +141487,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -137726,7 +141497,7 @@ components: apiVersion: apiVersion fieldPath: fieldPath awsElasticBlockStore: - partition: 9 + partition: 6 volumeID: volumeID readOnly: true fsType: fsType @@ -137736,7 +141507,7 @@ components: iscsi: chapAuthSession: true iscsiInterface: iscsiInterface - lun: 6 + lun: 5 chapAuthDiscovery: true iqn: iqn portals: @@ -137761,14 +141532,14 @@ components: - monitors - monitors configMap: - defaultMode: 6 + defaultMode: 3 name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key storageos: @@ -137808,7 +141579,7 @@ components: volumePath: volumePath fsType: fsType fc: - lun: 2 + lun: 6 targetWWNs: - targetWWNs - targetWWNs @@ -137834,11 +141605,24 @@ components: name: name - devicePath: devicePath name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator stdin: true terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -138068,6 +141852,11 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key - name: name value: value valueFrom: @@ -138086,6 +141875,11 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key restartPolicy: restartPolicy command: - command @@ -138101,11 +141895,24 @@ components: name: name - devicePath: devicePath name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator stdin: true terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -138335,6 +142142,11 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key - name: name value: value valueFrom: @@ -138353,6 +142165,11 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key restartPolicy: restartPolicy command: - command @@ -138364,7 +142181,7 @@ components: tty: true stdinOnce: true serviceAccount: serviceAccount - priority: 6 + priority: 7 restartPolicy: restartPolicy shareProcessNamespace: true hostUsers: true @@ -138382,50 +142199,24 @@ components: name: name - devicePath: devicePath name: name - image: image - imagePullPolicy: imagePullPolicy - livenessProbe: - terminationGracePeriodSeconds: 2 - failureThreshold: 5 - periodSeconds: 9 - tcpSocket: - port: port - host: host - timeoutSeconds: 4 - successThreshold: 3 - initialDelaySeconds: 7 - exec: - command: - - command - - command - grpc: - port: 2 - service: service - httpGet: - path: path - scheme: scheme - port: port - host: host - httpHeaders: - - name: name - value: value - - name: name - value: value + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator stdin: true terminationMessagePolicy: terminationMessagePolicy - terminationMessagePath: terminationMessagePath - workingDir: workingDir - resources: - claims: - - request: request - name: name - - request: request - name: name - requests: {} - limits: {} securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -138481,43 +142272,6 @@ components: value: value - name: name value: value - env: - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath ports: - protocol: protocol hostIP: hostIP @@ -138529,10 +142283,6 @@ components: name: name containerPort: 7 hostPort: 1 - restartPolicy: restartPolicy - command: - - command - - command volumeMounts: - mountPath: mountPath mountPropagation: mountPropagation @@ -138548,9 +142298,6 @@ components: subPath: subPath recursiveReadOnly: recursiveReadOnly subPathExpr: subPathExpr - args: - - args - - args lifecycle: postStart: sleep: @@ -138593,8 +142340,6 @@ components: - name: name value: value stopSignal: stopSignal - name: name - tty: true readinessProbe: terminationGracePeriodSeconds: 2 failureThreshold: 5 @@ -138627,7 +142372,6 @@ components: restartPolicy: restartPolicy - resourceName: resourceName restartPolicy: restartPolicy - stdinOnce: true envFrom: - configMapRef: name: name @@ -138643,11 +142387,6 @@ components: secretRef: name: name optional: true - - volumeDevices: - - devicePath: devicePath - name: name - - devicePath: devicePath - name: name image: image imagePullPolicy: imagePullPolicy livenessProbe: @@ -138677,8 +142416,6 @@ components: value: value - name: name value: value - stdin: true - terminationMessagePolicy: terminationMessagePolicy terminationMessagePath: terminationMessagePath workingDir: workingDir resources: @@ -138689,9 +142426,86 @@ components: name: name requests: {} limits: {} + env: + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + restartPolicy: restartPolicy + command: + - command + - command + args: + - args + - args + name: name + tty: true + stdinOnce: true + - volumeDevices: + - devicePath: devicePath + name: name + - devicePath: devicePath + name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + stdin: true + terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -138747,43 +142561,6 @@ components: value: value - name: name value: value - env: - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath ports: - protocol: protocol hostIP: hostIP @@ -138795,10 +142572,6 @@ components: name: name containerPort: 7 hostPort: 1 - restartPolicy: restartPolicy - command: - - command - - command volumeMounts: - mountPath: mountPath mountPropagation: mountPropagation @@ -138814,9 +142587,6 @@ components: subPath: subPath recursiveReadOnly: recursiveReadOnly subPathExpr: subPathExpr - args: - - args - - args lifecycle: postStart: sleep: @@ -138859,8 +142629,6 @@ components: - name: name value: value stopSignal: stopSignal - name: name - tty: true readinessProbe: terminationGracePeriodSeconds: 2 failureThreshold: 5 @@ -138893,7 +142661,6 @@ components: restartPolicy: restartPolicy - resourceName: resourceName restartPolicy: restartPolicy - stdinOnce: true envFrom: - configMapRef: name: name @@ -138909,12 +142676,6 @@ components: secretRef: name: name optional: true - initContainers: - - volumeDevices: - - devicePath: devicePath - name: name - - devicePath: devicePath - name: name image: image imagePullPolicy: imagePullPolicy livenessProbe: @@ -138944,8 +142705,6 @@ components: value: value - name: name value: value - stdin: true - terminationMessagePolicy: terminationMessagePolicy terminationMessagePath: terminationMessagePath workingDir: workingDir resources: @@ -138956,9 +142715,87 @@ components: name: name requests: {} limits: {} + env: + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + restartPolicy: restartPolicy + command: + - command + - command + args: + - args + - args + name: name + tty: true + stdinOnce: true + initContainers: + - volumeDevices: + - devicePath: devicePath + name: name + - devicePath: devicePath + name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + stdin: true + terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -139014,43 +142851,6 @@ components: value: value - name: name value: value - env: - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath ports: - protocol: protocol hostIP: hostIP @@ -139062,10 +142862,6 @@ components: name: name containerPort: 7 hostPort: 1 - restartPolicy: restartPolicy - command: - - command - - command volumeMounts: - mountPath: mountPath mountPropagation: mountPropagation @@ -139081,9 +142877,6 @@ components: subPath: subPath recursiveReadOnly: recursiveReadOnly subPathExpr: subPathExpr - args: - - args - - args lifecycle: postStart: sleep: @@ -139126,8 +142919,6 @@ components: - name: name value: value stopSignal: stopSignal - name: name - tty: true readinessProbe: terminationGracePeriodSeconds: 2 failureThreshold: 5 @@ -139160,7 +142951,6 @@ components: restartPolicy: restartPolicy - resourceName: resourceName restartPolicy: restartPolicy - stdinOnce: true envFrom: - configMapRef: name: name @@ -139176,11 +142966,6 @@ components: secretRef: name: name optional: true - - volumeDevices: - - devicePath: devicePath - name: name - - devicePath: devicePath - name: name image: image imagePullPolicy: imagePullPolicy livenessProbe: @@ -139210,8 +142995,6 @@ components: value: value - name: name value: value - stdin: true - terminationMessagePolicy: terminationMessagePolicy terminationMessagePath: terminationMessagePath workingDir: workingDir resources: @@ -139222,9 +143005,86 @@ components: name: name requests: {} limits: {} + env: + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + restartPolicy: restartPolicy + command: + - command + - command + args: + - args + - args + name: name + tty: true + stdinOnce: true + - volumeDevices: + - devicePath: devicePath + name: name + - devicePath: devicePath + name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + stdin: true + terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -139280,43 +143140,6 @@ components: value: value - name: name value: value - env: - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath ports: - protocol: protocol hostIP: hostIP @@ -139328,10 +143151,6 @@ components: name: name containerPort: 7 hostPort: 1 - restartPolicy: restartPolicy - command: - - command - - command volumeMounts: - mountPath: mountPath mountPropagation: mountPropagation @@ -139347,9 +143166,6 @@ components: subPath: subPath recursiveReadOnly: recursiveReadOnly subPathExpr: subPathExpr - args: - - args - - args lifecycle: postStart: sleep: @@ -139392,8 +143208,6 @@ components: - name: name value: value stopSignal: stopSignal - name: name - tty: true readinessProbe: terminationGracePeriodSeconds: 2 failureThreshold: 5 @@ -139426,7 +143240,6 @@ components: restartPolicy: restartPolicy - resourceName: resourceName restartPolicy: restartPolicy - stdinOnce: true envFrom: - configMapRef: name: name @@ -139442,6 +143255,102 @@ components: secretRef: name: name optional: true + image: image + imagePullPolicy: imagePullPolicy + livenessProbe: + terminationGracePeriodSeconds: 2 + failureThreshold: 5 + periodSeconds: 9 + tcpSocket: + port: port + host: host + timeoutSeconds: 4 + successThreshold: 3 + initialDelaySeconds: 7 + exec: + command: + - command + - command + grpc: + port: 2 + service: service + httpGet: + path: path + scheme: scheme + port: port + host: host + httpHeaders: + - name: name + value: value + - name: name + value: value + terminationMessagePath: terminationMessagePath + workingDir: workingDir + resources: + claims: + - request: request + name: name + - request: request + name: name + requests: {} + limits: {} + env: + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + restartPolicy: restartPolicy + command: + - command + - command + args: + - args + - args + name: name + tty: true + stdinOnce: true affinity: nodeAffinity: requiredDuringSchedulingIgnoredDuringExecution: @@ -140242,6 +144151,7 @@ components: - conditionType: conditionType - conditionType: conditionType serviceAccountName: serviceAccountName + hostnameOverride: hostnameOverride imagePullSecrets: - name: name - name: name @@ -140264,17 +144174,17 @@ components: appArmorProfile: localhostProfile: localhostProfile type: type - fsGroup: 7 + fsGroup: 1 fsGroupChangePolicy: fsGroupChangePolicy seLinuxChangePolicy: seLinuxChangePolicy - runAsGroup: 1 + runAsGroup: 4 runAsNonRoot: true sysctls: - name: name value: value - name: name value: value - runAsUser: 4 + runAsUser: 5 seccompProfile: localhostProfile: localhostProfile type: type @@ -140284,8 +144194,8 @@ components: hostProcess: true gmsaCredentialSpecName: gmsaCredentialSpecName supplementalGroups: - - 5 - - 5 + - 9 + - 9 supplementalGroupsPolicy: supplementalGroupsPolicy preemptionPolicy: preemptionPolicy nodeSelector: @@ -140294,12 +144204,12 @@ components: runtimeClassName: runtimeClassName tolerations: - effect: effect - tolerationSeconds: 9 + tolerationSeconds: 6 value: value key: key operator: operator - effect: effect - tolerationSeconds: 9 + tolerationSeconds: 6 value: value key: key operator: operator @@ -140318,7 +144228,7 @@ components: topologySpreadConstraints: - nodeTaintsPolicy: nodeTaintsPolicy whenUnsatisfiable: whenUnsatisfiable - maxSkew: 6 + maxSkew: 8 nodeAffinityPolicy: nodeAffinityPolicy labelSelector: matchExpressions: @@ -140334,14 +144244,14 @@ components: operator: operator matchLabels: key: matchLabels - minDomains: 8 + minDomains: 9 topologyKey: topologyKey matchLabelKeys: - matchLabelKeys - matchLabelKeys - nodeTaintsPolicy: nodeTaintsPolicy whenUnsatisfiable: whenUnsatisfiable - maxSkew: 6 + maxSkew: 8 nodeAffinityPolicy: nodeAffinityPolicy labelSelector: matchExpressions: @@ -140357,7 +144267,7 @@ components: operator: operator matchLabels: key: matchLabels - minDomains: 8 + minDomains: 9 topologyKey: topologyKey matchLabelKeys: - matchLabelKeys @@ -140466,20 +144376,20 @@ components: volumeMode: volumeMode secret: secretName: secretName - defaultMode: 3 + defaultMode: 7 optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key projected: sources: - downwardAPI: items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -140488,7 +144398,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -140501,26 +144411,33 @@ components: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key + podCertificate: + certificateChainPath: certificateChainPath + keyPath: keyPath + maxExpirationSeconds: 3 + keyType: keyType + credentialBundlePath: credentialBundlePath + signerName: signerName secret: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key serviceAccountToken: path: path audience: audience - expirationSeconds: 6 + expirationSeconds: 3 clusterTrustBundle: path: path labelSelector: @@ -140542,7 +144459,7 @@ components: signerName: signerName - downwardAPI: items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -140551,7 +144468,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -140564,26 +144481,33 @@ components: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key + podCertificate: + certificateChainPath: certificateChainPath + keyPath: keyPath + maxExpirationSeconds: 3 + keyType: keyType + credentialBundlePath: credentialBundlePath + signerName: signerName secret: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key serviceAccountToken: path: path audience: audience - expirationSeconds: 6 + expirationSeconds: 3 clusterTrustBundle: path: path labelSelector: @@ -140603,7 +144527,7 @@ components: name: name optional: true signerName: signerName - defaultMode: 5 + defaultMode: 6 cephfs: path: path secretRef: @@ -140658,9 +144582,9 @@ components: readOnly: true fsType: fsType downwardAPI: - defaultMode: 6 + defaultMode: 1 items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -140669,7 +144593,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -140679,7 +144603,7 @@ components: apiVersion: apiVersion fieldPath: fieldPath awsElasticBlockStore: - partition: 9 + partition: 6 volumeID: volumeID readOnly: true fsType: fsType @@ -140689,7 +144613,7 @@ components: iscsi: chapAuthSession: true iscsiInterface: iscsiInterface - lun: 6 + lun: 5 chapAuthDiscovery: true iqn: iqn portals: @@ -140714,14 +144638,14 @@ components: - monitors - monitors configMap: - defaultMode: 6 + defaultMode: 3 name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key storageos: @@ -140761,7 +144685,7 @@ components: volumePath: volumePath fsType: fsType fc: - lun: 2 + lun: 6 targetWWNs: - targetWWNs - targetWWNs @@ -140876,20 +144800,20 @@ components: volumeMode: volumeMode secret: secretName: secretName - defaultMode: 3 + defaultMode: 7 optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key projected: sources: - downwardAPI: items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -140898,7 +144822,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -140911,26 +144835,33 @@ components: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key + podCertificate: + certificateChainPath: certificateChainPath + keyPath: keyPath + maxExpirationSeconds: 3 + keyType: keyType + credentialBundlePath: credentialBundlePath + signerName: signerName secret: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key serviceAccountToken: path: path audience: audience - expirationSeconds: 6 + expirationSeconds: 3 clusterTrustBundle: path: path labelSelector: @@ -140952,7 +144883,7 @@ components: signerName: signerName - downwardAPI: items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -140961,7 +144892,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -140974,26 +144905,33 @@ components: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key + podCertificate: + certificateChainPath: certificateChainPath + keyPath: keyPath + maxExpirationSeconds: 3 + keyType: keyType + credentialBundlePath: credentialBundlePath + signerName: signerName secret: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key serviceAccountToken: path: path audience: audience - expirationSeconds: 6 + expirationSeconds: 3 clusterTrustBundle: path: path labelSelector: @@ -141013,7 +144951,7 @@ components: name: name optional: true signerName: signerName - defaultMode: 5 + defaultMode: 6 cephfs: path: path secretRef: @@ -141068,9 +145006,9 @@ components: readOnly: true fsType: fsType downwardAPI: - defaultMode: 6 + defaultMode: 1 items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -141079,7 +145017,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -141089,7 +145027,7 @@ components: apiVersion: apiVersion fieldPath: fieldPath awsElasticBlockStore: - partition: 9 + partition: 6 volumeID: volumeID readOnly: true fsType: fsType @@ -141099,7 +145037,7 @@ components: iscsi: chapAuthSession: true iscsiInterface: iscsiInterface - lun: 6 + lun: 5 chapAuthDiscovery: true iqn: iqn portals: @@ -141124,14 +145062,14 @@ components: - monitors - monitors configMap: - defaultMode: 6 + defaultMode: 3 name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key storageos: @@ -141171,7 +145109,7 @@ components: volumePath: volumePath fsType: fsType fc: - lun: 2 + lun: 6 targetWWNs: - targetWWNs - targetWWNs @@ -141197,11 +145135,24 @@ components: name: name - devicePath: devicePath name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator stdin: true terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -141431,6 +145382,11 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key - name: name value: value valueFrom: @@ -141449,6 +145405,11 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key restartPolicy: restartPolicy command: - command @@ -141464,11 +145425,24 @@ components: name: name - devicePath: devicePath name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator stdin: true terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -141698,6 +145672,11 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key - name: name value: value valueFrom: @@ -141716,6 +145695,11 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key restartPolicy: restartPolicy command: - command @@ -141727,7 +145711,7 @@ components: tty: true stdinOnce: true serviceAccount: serviceAccount - priority: 6 + priority: 7 restartPolicy: restartPolicy shareProcessNamespace: true hostUsers: true @@ -141745,50 +145729,24 @@ components: name: name - devicePath: devicePath name: name - image: image - imagePullPolicy: imagePullPolicy - livenessProbe: - terminationGracePeriodSeconds: 2 - failureThreshold: 5 - periodSeconds: 9 - tcpSocket: - port: port - host: host - timeoutSeconds: 4 - successThreshold: 3 - initialDelaySeconds: 7 - exec: - command: - - command - - command - grpc: - port: 2 - service: service - httpGet: - path: path - scheme: scheme - port: port - host: host - httpHeaders: - - name: name - value: value - - name: name - value: value + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator stdin: true terminationMessagePolicy: terminationMessagePolicy - terminationMessagePath: terminationMessagePath - workingDir: workingDir - resources: - claims: - - request: request - name: name - - request: request - name: name - requests: {} - limits: {} securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -141844,43 +145802,6 @@ components: value: value - name: name value: value - env: - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath ports: - protocol: protocol hostIP: hostIP @@ -141892,10 +145813,6 @@ components: name: name containerPort: 7 hostPort: 1 - restartPolicy: restartPolicy - command: - - command - - command volumeMounts: - mountPath: mountPath mountPropagation: mountPropagation @@ -141911,9 +145828,6 @@ components: subPath: subPath recursiveReadOnly: recursiveReadOnly subPathExpr: subPathExpr - args: - - args - - args lifecycle: postStart: sleep: @@ -141956,8 +145870,6 @@ components: - name: name value: value stopSignal: stopSignal - name: name - tty: true readinessProbe: terminationGracePeriodSeconds: 2 failureThreshold: 5 @@ -141990,7 +145902,6 @@ components: restartPolicy: restartPolicy - resourceName: resourceName restartPolicy: restartPolicy - stdinOnce: true envFrom: - configMapRef: name: name @@ -142006,11 +145917,6 @@ components: secretRef: name: name optional: true - - volumeDevices: - - devicePath: devicePath - name: name - - devicePath: devicePath - name: name image: image imagePullPolicy: imagePullPolicy livenessProbe: @@ -142040,8 +145946,6 @@ components: value: value - name: name value: value - stdin: true - terminationMessagePolicy: terminationMessagePolicy terminationMessagePath: terminationMessagePath workingDir: workingDir resources: @@ -142052,9 +145956,86 @@ components: name: name requests: {} limits: {} + env: + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + restartPolicy: restartPolicy + command: + - command + - command + args: + - args + - args + name: name + tty: true + stdinOnce: true + - volumeDevices: + - devicePath: devicePath + name: name + - devicePath: devicePath + name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + stdin: true + terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -142110,43 +146091,6 @@ components: value: value - name: name value: value - env: - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath ports: - protocol: protocol hostIP: hostIP @@ -142158,10 +146102,6 @@ components: name: name containerPort: 7 hostPort: 1 - restartPolicy: restartPolicy - command: - - command - - command volumeMounts: - mountPath: mountPath mountPropagation: mountPropagation @@ -142177,9 +146117,6 @@ components: subPath: subPath recursiveReadOnly: recursiveReadOnly subPathExpr: subPathExpr - args: - - args - - args lifecycle: postStart: sleep: @@ -142222,8 +146159,6 @@ components: - name: name value: value stopSignal: stopSignal - name: name - tty: true readinessProbe: terminationGracePeriodSeconds: 2 failureThreshold: 5 @@ -142256,7 +146191,6 @@ components: restartPolicy: restartPolicy - resourceName: resourceName restartPolicy: restartPolicy - stdinOnce: true envFrom: - configMapRef: name: name @@ -142272,12 +146206,6 @@ components: secretRef: name: name optional: true - initContainers: - - volumeDevices: - - devicePath: devicePath - name: name - - devicePath: devicePath - name: name image: image imagePullPolicy: imagePullPolicy livenessProbe: @@ -142307,8 +146235,6 @@ components: value: value - name: name value: value - stdin: true - terminationMessagePolicy: terminationMessagePolicy terminationMessagePath: terminationMessagePath workingDir: workingDir resources: @@ -142319,9 +146245,87 @@ components: name: name requests: {} limits: {} + env: + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + restartPolicy: restartPolicy + command: + - command + - command + args: + - args + - args + name: name + tty: true + stdinOnce: true + initContainers: + - volumeDevices: + - devicePath: devicePath + name: name + - devicePath: devicePath + name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + stdin: true + terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -142377,43 +146381,6 @@ components: value: value - name: name value: value - env: - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath ports: - protocol: protocol hostIP: hostIP @@ -142425,10 +146392,6 @@ components: name: name containerPort: 7 hostPort: 1 - restartPolicy: restartPolicy - command: - - command - - command volumeMounts: - mountPath: mountPath mountPropagation: mountPropagation @@ -142444,9 +146407,6 @@ components: subPath: subPath recursiveReadOnly: recursiveReadOnly subPathExpr: subPathExpr - args: - - args - - args lifecycle: postStart: sleep: @@ -142489,8 +146449,6 @@ components: - name: name value: value stopSignal: stopSignal - name: name - tty: true readinessProbe: terminationGracePeriodSeconds: 2 failureThreshold: 5 @@ -142523,7 +146481,6 @@ components: restartPolicy: restartPolicy - resourceName: resourceName restartPolicy: restartPolicy - stdinOnce: true envFrom: - configMapRef: name: name @@ -142539,11 +146496,6 @@ components: secretRef: name: name optional: true - - volumeDevices: - - devicePath: devicePath - name: name - - devicePath: devicePath - name: name image: image imagePullPolicy: imagePullPolicy livenessProbe: @@ -142573,8 +146525,6 @@ components: value: value - name: name value: value - stdin: true - terminationMessagePolicy: terminationMessagePolicy terminationMessagePath: terminationMessagePath workingDir: workingDir resources: @@ -142585,9 +146535,86 @@ components: name: name requests: {} limits: {} + env: + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + restartPolicy: restartPolicy + command: + - command + - command + args: + - args + - args + name: name + tty: true + stdinOnce: true + - volumeDevices: + - devicePath: devicePath + name: name + - devicePath: devicePath + name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + stdin: true + terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -142643,43 +146670,6 @@ components: value: value - name: name value: value - env: - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath ports: - protocol: protocol hostIP: hostIP @@ -142691,10 +146681,6 @@ components: name: name containerPort: 7 hostPort: 1 - restartPolicy: restartPolicy - command: - - command - - command volumeMounts: - mountPath: mountPath mountPropagation: mountPropagation @@ -142710,9 +146696,6 @@ components: subPath: subPath recursiveReadOnly: recursiveReadOnly subPathExpr: subPathExpr - args: - - args - - args lifecycle: postStart: sleep: @@ -142755,8 +146738,6 @@ components: - name: name value: value stopSignal: stopSignal - name: name - tty: true readinessProbe: terminationGracePeriodSeconds: 2 failureThreshold: 5 @@ -142789,7 +146770,6 @@ components: restartPolicy: restartPolicy - resourceName: resourceName restartPolicy: restartPolicy - stdinOnce: true envFrom: - configMapRef: name: name @@ -142805,6 +146785,102 @@ components: secretRef: name: name optional: true + image: image + imagePullPolicy: imagePullPolicy + livenessProbe: + terminationGracePeriodSeconds: 2 + failureThreshold: 5 + periodSeconds: 9 + tcpSocket: + port: port + host: host + timeoutSeconds: 4 + successThreshold: 3 + initialDelaySeconds: 7 + exec: + command: + - command + - command + grpc: + port: 2 + service: service + httpGet: + path: path + scheme: scheme + port: port + host: host + httpHeaders: + - name: name + value: value + - name: name + value: value + terminationMessagePath: terminationMessagePath + workingDir: workingDir + resources: + claims: + - request: request + name: name + - request: request + name: name + requests: {} + limits: {} + env: + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + restartPolicy: restartPolicy + command: + - command + - command + args: + - args + - args + name: name + tty: true + stdinOnce: true affinity: nodeAffinity: requiredDuringSchedulingIgnoredDuringExecution: @@ -143622,6 +147698,7 @@ components: - conditionType: conditionType - conditionType: conditionType serviceAccountName: serviceAccountName + hostnameOverride: hostnameOverride imagePullSecrets: - name: name - name: name @@ -143644,17 +147721,17 @@ components: appArmorProfile: localhostProfile: localhostProfile type: type - fsGroup: 7 + fsGroup: 1 fsGroupChangePolicy: fsGroupChangePolicy seLinuxChangePolicy: seLinuxChangePolicy - runAsGroup: 1 + runAsGroup: 4 runAsNonRoot: true sysctls: - name: name value: value - name: name value: value - runAsUser: 4 + runAsUser: 5 seccompProfile: localhostProfile: localhostProfile type: type @@ -143664,8 +147741,8 @@ components: hostProcess: true gmsaCredentialSpecName: gmsaCredentialSpecName supplementalGroups: - - 5 - - 5 + - 9 + - 9 supplementalGroupsPolicy: supplementalGroupsPolicy preemptionPolicy: preemptionPolicy nodeSelector: @@ -143674,12 +147751,12 @@ components: runtimeClassName: runtimeClassName tolerations: - effect: effect - tolerationSeconds: 9 + tolerationSeconds: 6 value: value key: key operator: operator - effect: effect - tolerationSeconds: 9 + tolerationSeconds: 6 value: value key: key operator: operator @@ -143698,7 +147775,7 @@ components: topologySpreadConstraints: - nodeTaintsPolicy: nodeTaintsPolicy whenUnsatisfiable: whenUnsatisfiable - maxSkew: 6 + maxSkew: 8 nodeAffinityPolicy: nodeAffinityPolicy labelSelector: matchExpressions: @@ -143714,14 +147791,14 @@ components: operator: operator matchLabels: key: matchLabels - minDomains: 8 + minDomains: 9 topologyKey: topologyKey matchLabelKeys: - matchLabelKeys - matchLabelKeys - nodeTaintsPolicy: nodeTaintsPolicy whenUnsatisfiable: whenUnsatisfiable - maxSkew: 6 + maxSkew: 8 nodeAffinityPolicy: nodeAffinityPolicy labelSelector: matchExpressions: @@ -143737,7 +147814,7 @@ components: operator: operator matchLabels: key: matchLabels - minDomains: 8 + minDomains: 9 topologyKey: topologyKey matchLabelKeys: - matchLabelKeys @@ -143846,20 +147923,20 @@ components: volumeMode: volumeMode secret: secretName: secretName - defaultMode: 3 + defaultMode: 7 optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key projected: sources: - downwardAPI: items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -143868,7 +147945,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -143881,26 +147958,33 @@ components: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key + podCertificate: + certificateChainPath: certificateChainPath + keyPath: keyPath + maxExpirationSeconds: 3 + keyType: keyType + credentialBundlePath: credentialBundlePath + signerName: signerName secret: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key serviceAccountToken: path: path audience: audience - expirationSeconds: 6 + expirationSeconds: 3 clusterTrustBundle: path: path labelSelector: @@ -143922,7 +148006,7 @@ components: signerName: signerName - downwardAPI: items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -143931,7 +148015,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -143944,26 +148028,33 @@ components: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key + podCertificate: + certificateChainPath: certificateChainPath + keyPath: keyPath + maxExpirationSeconds: 3 + keyType: keyType + credentialBundlePath: credentialBundlePath + signerName: signerName secret: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key serviceAccountToken: path: path audience: audience - expirationSeconds: 6 + expirationSeconds: 3 clusterTrustBundle: path: path labelSelector: @@ -143983,7 +148074,7 @@ components: name: name optional: true signerName: signerName - defaultMode: 5 + defaultMode: 6 cephfs: path: path secretRef: @@ -144038,9 +148129,9 @@ components: readOnly: true fsType: fsType downwardAPI: - defaultMode: 6 + defaultMode: 1 items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -144049,7 +148140,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -144059,7 +148150,7 @@ components: apiVersion: apiVersion fieldPath: fieldPath awsElasticBlockStore: - partition: 9 + partition: 6 volumeID: volumeID readOnly: true fsType: fsType @@ -144069,7 +148160,7 @@ components: iscsi: chapAuthSession: true iscsiInterface: iscsiInterface - lun: 6 + lun: 5 chapAuthDiscovery: true iqn: iqn portals: @@ -144094,14 +148185,14 @@ components: - monitors - monitors configMap: - defaultMode: 6 + defaultMode: 3 name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key storageos: @@ -144141,7 +148232,7 @@ components: volumePath: volumePath fsType: fsType fc: - lun: 2 + lun: 6 targetWWNs: - targetWWNs - targetWWNs @@ -144256,20 +148347,20 @@ components: volumeMode: volumeMode secret: secretName: secretName - defaultMode: 3 + defaultMode: 7 optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key projected: sources: - downwardAPI: items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -144278,7 +148369,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -144291,26 +148382,33 @@ components: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key + podCertificate: + certificateChainPath: certificateChainPath + keyPath: keyPath + maxExpirationSeconds: 3 + keyType: keyType + credentialBundlePath: credentialBundlePath + signerName: signerName secret: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key serviceAccountToken: path: path audience: audience - expirationSeconds: 6 + expirationSeconds: 3 clusterTrustBundle: path: path labelSelector: @@ -144332,7 +148430,7 @@ components: signerName: signerName - downwardAPI: items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -144341,7 +148439,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -144354,26 +148452,33 @@ components: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key + podCertificate: + certificateChainPath: certificateChainPath + keyPath: keyPath + maxExpirationSeconds: 3 + keyType: keyType + credentialBundlePath: credentialBundlePath + signerName: signerName secret: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key serviceAccountToken: path: path audience: audience - expirationSeconds: 6 + expirationSeconds: 3 clusterTrustBundle: path: path labelSelector: @@ -144393,7 +148498,7 @@ components: name: name optional: true signerName: signerName - defaultMode: 5 + defaultMode: 6 cephfs: path: path secretRef: @@ -144448,9 +148553,9 @@ components: readOnly: true fsType: fsType downwardAPI: - defaultMode: 6 + defaultMode: 1 items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -144459,7 +148564,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -144469,7 +148574,7 @@ components: apiVersion: apiVersion fieldPath: fieldPath awsElasticBlockStore: - partition: 9 + partition: 6 volumeID: volumeID readOnly: true fsType: fsType @@ -144479,7 +148584,7 @@ components: iscsi: chapAuthSession: true iscsiInterface: iscsiInterface - lun: 6 + lun: 5 chapAuthDiscovery: true iqn: iqn portals: @@ -144504,14 +148609,14 @@ components: - monitors - monitors configMap: - defaultMode: 6 + defaultMode: 3 name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key storageos: @@ -144551,7 +148656,7 @@ components: volumePath: volumePath fsType: fsType fc: - lun: 2 + lun: 6 targetWWNs: - targetWWNs - targetWWNs @@ -144577,11 +148682,24 @@ components: name: name - devicePath: devicePath name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator stdin: true terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -144811,6 +148929,11 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key - name: name value: value valueFrom: @@ -144829,6 +148952,11 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key restartPolicy: restartPolicy command: - command @@ -144844,11 +148972,24 @@ components: name: name - devicePath: devicePath name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator stdin: true terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -145078,6 +149219,11 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key - name: name value: value valueFrom: @@ -145096,6 +149242,11 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key restartPolicy: restartPolicy command: - command @@ -145107,7 +149258,7 @@ components: tty: true stdinOnce: true serviceAccount: serviceAccount - priority: 6 + priority: 7 restartPolicy: restartPolicy shareProcessNamespace: true hostUsers: true @@ -145125,50 +149276,24 @@ components: name: name - devicePath: devicePath name: name - image: image - imagePullPolicy: imagePullPolicy - livenessProbe: - terminationGracePeriodSeconds: 2 - failureThreshold: 5 - periodSeconds: 9 - tcpSocket: - port: port - host: host - timeoutSeconds: 4 - successThreshold: 3 - initialDelaySeconds: 7 - exec: - command: - - command - - command - grpc: - port: 2 - service: service - httpGet: - path: path - scheme: scheme - port: port - host: host - httpHeaders: - - name: name - value: value - - name: name - value: value + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator stdin: true terminationMessagePolicy: terminationMessagePolicy - terminationMessagePath: terminationMessagePath - workingDir: workingDir - resources: - claims: - - request: request - name: name - - request: request - name: name - requests: {} - limits: {} securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -145224,43 +149349,6 @@ components: value: value - name: name value: value - env: - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath ports: - protocol: protocol hostIP: hostIP @@ -145272,10 +149360,6 @@ components: name: name containerPort: 7 hostPort: 1 - restartPolicy: restartPolicy - command: - - command - - command volumeMounts: - mountPath: mountPath mountPropagation: mountPropagation @@ -145291,9 +149375,6 @@ components: subPath: subPath recursiveReadOnly: recursiveReadOnly subPathExpr: subPathExpr - args: - - args - - args lifecycle: postStart: sleep: @@ -145336,8 +149417,6 @@ components: - name: name value: value stopSignal: stopSignal - name: name - tty: true readinessProbe: terminationGracePeriodSeconds: 2 failureThreshold: 5 @@ -145370,7 +149449,6 @@ components: restartPolicy: restartPolicy - resourceName: resourceName restartPolicy: restartPolicy - stdinOnce: true envFrom: - configMapRef: name: name @@ -145386,11 +149464,6 @@ components: secretRef: name: name optional: true - - volumeDevices: - - devicePath: devicePath - name: name - - devicePath: devicePath - name: name image: image imagePullPolicy: imagePullPolicy livenessProbe: @@ -145420,8 +149493,6 @@ components: value: value - name: name value: value - stdin: true - terminationMessagePolicy: terminationMessagePolicy terminationMessagePath: terminationMessagePath workingDir: workingDir resources: @@ -145432,9 +149503,86 @@ components: name: name requests: {} limits: {} + env: + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + restartPolicy: restartPolicy + command: + - command + - command + args: + - args + - args + name: name + tty: true + stdinOnce: true + - volumeDevices: + - devicePath: devicePath + name: name + - devicePath: devicePath + name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + stdin: true + terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -145490,43 +149638,6 @@ components: value: value - name: name value: value - env: - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath ports: - protocol: protocol hostIP: hostIP @@ -145538,10 +149649,6 @@ components: name: name containerPort: 7 hostPort: 1 - restartPolicy: restartPolicy - command: - - command - - command volumeMounts: - mountPath: mountPath mountPropagation: mountPropagation @@ -145557,9 +149664,6 @@ components: subPath: subPath recursiveReadOnly: recursiveReadOnly subPathExpr: subPathExpr - args: - - args - - args lifecycle: postStart: sleep: @@ -145602,8 +149706,6 @@ components: - name: name value: value stopSignal: stopSignal - name: name - tty: true readinessProbe: terminationGracePeriodSeconds: 2 failureThreshold: 5 @@ -145636,7 +149738,6 @@ components: restartPolicy: restartPolicy - resourceName: resourceName restartPolicy: restartPolicy - stdinOnce: true envFrom: - configMapRef: name: name @@ -145652,12 +149753,6 @@ components: secretRef: name: name optional: true - initContainers: - - volumeDevices: - - devicePath: devicePath - name: name - - devicePath: devicePath - name: name image: image imagePullPolicy: imagePullPolicy livenessProbe: @@ -145687,8 +149782,6 @@ components: value: value - name: name value: value - stdin: true - terminationMessagePolicy: terminationMessagePolicy terminationMessagePath: terminationMessagePath workingDir: workingDir resources: @@ -145699,9 +149792,87 @@ components: name: name requests: {} limits: {} + env: + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + restartPolicy: restartPolicy + command: + - command + - command + args: + - args + - args + name: name + tty: true + stdinOnce: true + initContainers: + - volumeDevices: + - devicePath: devicePath + name: name + - devicePath: devicePath + name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + stdin: true + terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -145757,43 +149928,6 @@ components: value: value - name: name value: value - env: - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath ports: - protocol: protocol hostIP: hostIP @@ -145805,10 +149939,6 @@ components: name: name containerPort: 7 hostPort: 1 - restartPolicy: restartPolicy - command: - - command - - command volumeMounts: - mountPath: mountPath mountPropagation: mountPropagation @@ -145824,9 +149954,6 @@ components: subPath: subPath recursiveReadOnly: recursiveReadOnly subPathExpr: subPathExpr - args: - - args - - args lifecycle: postStart: sleep: @@ -145869,8 +149996,6 @@ components: - name: name value: value stopSignal: stopSignal - name: name - tty: true readinessProbe: terminationGracePeriodSeconds: 2 failureThreshold: 5 @@ -145903,7 +150028,6 @@ components: restartPolicy: restartPolicy - resourceName: resourceName restartPolicy: restartPolicy - stdinOnce: true envFrom: - configMapRef: name: name @@ -145919,11 +150043,6 @@ components: secretRef: name: name optional: true - - volumeDevices: - - devicePath: devicePath - name: name - - devicePath: devicePath - name: name image: image imagePullPolicy: imagePullPolicy livenessProbe: @@ -145953,8 +150072,6 @@ components: value: value - name: name value: value - stdin: true - terminationMessagePolicy: terminationMessagePolicy terminationMessagePath: terminationMessagePath workingDir: workingDir resources: @@ -145965,9 +150082,86 @@ components: name: name requests: {} limits: {} + env: + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + restartPolicy: restartPolicy + command: + - command + - command + args: + - args + - args + name: name + tty: true + stdinOnce: true + - volumeDevices: + - devicePath: devicePath + name: name + - devicePath: devicePath + name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + stdin: true + terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -146023,43 +150217,6 @@ components: value: value - name: name value: value - env: - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath ports: - protocol: protocol hostIP: hostIP @@ -146071,10 +150228,6 @@ components: name: name containerPort: 7 hostPort: 1 - restartPolicy: restartPolicy - command: - - command - - command volumeMounts: - mountPath: mountPath mountPropagation: mountPropagation @@ -146090,9 +150243,6 @@ components: subPath: subPath recursiveReadOnly: recursiveReadOnly subPathExpr: subPathExpr - args: - - args - - args lifecycle: postStart: sleep: @@ -146135,8 +150285,6 @@ components: - name: name value: value stopSignal: stopSignal - name: name - tty: true readinessProbe: terminationGracePeriodSeconds: 2 failureThreshold: 5 @@ -146169,7 +150317,6 @@ components: restartPolicy: restartPolicy - resourceName: resourceName restartPolicy: restartPolicy - stdinOnce: true envFrom: - configMapRef: name: name @@ -146185,6 +150332,102 @@ components: secretRef: name: name optional: true + image: image + imagePullPolicy: imagePullPolicy + livenessProbe: + terminationGracePeriodSeconds: 2 + failureThreshold: 5 + periodSeconds: 9 + tcpSocket: + port: port + host: host + timeoutSeconds: 4 + successThreshold: 3 + initialDelaySeconds: 7 + exec: + command: + - command + - command + grpc: + port: 2 + service: service + httpGet: + path: path + scheme: scheme + port: port + host: host + httpHeaders: + - name: name + value: value + - name: name + value: value + terminationMessagePath: terminationMessagePath + workingDir: workingDir + resources: + claims: + - request: request + name: name + - request: request + name: name + requests: {} + limits: {} + env: + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + restartPolicy: restartPolicy + command: + - command + - command + args: + - args + - args + name: name + tty: true + stdinOnce: true affinity: nodeAffinity: requiredDuringSchedulingIgnoredDuringExecution: @@ -151906,6 +156149,7 @@ components: - conditionType: conditionType - conditionType: conditionType serviceAccountName: serviceAccountName + hostnameOverride: hostnameOverride imagePullSecrets: - name: name - name: name @@ -151928,17 +156172,17 @@ components: appArmorProfile: localhostProfile: localhostProfile type: type - fsGroup: 7 + fsGroup: 1 fsGroupChangePolicy: fsGroupChangePolicy seLinuxChangePolicy: seLinuxChangePolicy - runAsGroup: 1 + runAsGroup: 4 runAsNonRoot: true sysctls: - name: name value: value - name: name value: value - runAsUser: 4 + runAsUser: 5 seccompProfile: localhostProfile: localhostProfile type: type @@ -151948,8 +156192,8 @@ components: hostProcess: true gmsaCredentialSpecName: gmsaCredentialSpecName supplementalGroups: - - 5 - - 5 + - 9 + - 9 supplementalGroupsPolicy: supplementalGroupsPolicy preemptionPolicy: preemptionPolicy nodeSelector: @@ -151958,12 +156202,12 @@ components: runtimeClassName: runtimeClassName tolerations: - effect: effect - tolerationSeconds: 9 + tolerationSeconds: 6 value: value key: key operator: operator - effect: effect - tolerationSeconds: 9 + tolerationSeconds: 6 value: value key: key operator: operator @@ -151982,7 +156226,7 @@ components: topologySpreadConstraints: - nodeTaintsPolicy: nodeTaintsPolicy whenUnsatisfiable: whenUnsatisfiable - maxSkew: 6 + maxSkew: 8 nodeAffinityPolicy: nodeAffinityPolicy labelSelector: matchExpressions: @@ -151998,14 +156242,14 @@ components: operator: operator matchLabels: key: matchLabels - minDomains: 8 + minDomains: 9 topologyKey: topologyKey matchLabelKeys: - matchLabelKeys - matchLabelKeys - nodeTaintsPolicy: nodeTaintsPolicy whenUnsatisfiable: whenUnsatisfiable - maxSkew: 6 + maxSkew: 8 nodeAffinityPolicy: nodeAffinityPolicy labelSelector: matchExpressions: @@ -152021,7 +156265,7 @@ components: operator: operator matchLabels: key: matchLabels - minDomains: 8 + minDomains: 9 topologyKey: topologyKey matchLabelKeys: - matchLabelKeys @@ -152130,20 +156374,20 @@ components: volumeMode: volumeMode secret: secretName: secretName - defaultMode: 3 + defaultMode: 7 optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key projected: sources: - downwardAPI: items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -152152,7 +156396,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -152165,26 +156409,33 @@ components: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key + podCertificate: + certificateChainPath: certificateChainPath + keyPath: keyPath + maxExpirationSeconds: 3 + keyType: keyType + credentialBundlePath: credentialBundlePath + signerName: signerName secret: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key serviceAccountToken: path: path audience: audience - expirationSeconds: 6 + expirationSeconds: 3 clusterTrustBundle: path: path labelSelector: @@ -152206,7 +156457,7 @@ components: signerName: signerName - downwardAPI: items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -152215,7 +156466,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -152228,26 +156479,33 @@ components: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key + podCertificate: + certificateChainPath: certificateChainPath + keyPath: keyPath + maxExpirationSeconds: 3 + keyType: keyType + credentialBundlePath: credentialBundlePath + signerName: signerName secret: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key serviceAccountToken: path: path audience: audience - expirationSeconds: 6 + expirationSeconds: 3 clusterTrustBundle: path: path labelSelector: @@ -152267,7 +156525,7 @@ components: name: name optional: true signerName: signerName - defaultMode: 5 + defaultMode: 6 cephfs: path: path secretRef: @@ -152322,9 +156580,9 @@ components: readOnly: true fsType: fsType downwardAPI: - defaultMode: 6 + defaultMode: 1 items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -152333,7 +156591,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -152343,7 +156601,7 @@ components: apiVersion: apiVersion fieldPath: fieldPath awsElasticBlockStore: - partition: 9 + partition: 6 volumeID: volumeID readOnly: true fsType: fsType @@ -152353,7 +156611,7 @@ components: iscsi: chapAuthSession: true iscsiInterface: iscsiInterface - lun: 6 + lun: 5 chapAuthDiscovery: true iqn: iqn portals: @@ -152378,14 +156636,14 @@ components: - monitors - monitors configMap: - defaultMode: 6 + defaultMode: 3 name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key storageos: @@ -152425,7 +156683,7 @@ components: volumePath: volumePath fsType: fsType fc: - lun: 2 + lun: 6 targetWWNs: - targetWWNs - targetWWNs @@ -152540,20 +156798,20 @@ components: volumeMode: volumeMode secret: secretName: secretName - defaultMode: 3 + defaultMode: 7 optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key projected: sources: - downwardAPI: items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -152562,7 +156820,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -152575,26 +156833,33 @@ components: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key + podCertificate: + certificateChainPath: certificateChainPath + keyPath: keyPath + maxExpirationSeconds: 3 + keyType: keyType + credentialBundlePath: credentialBundlePath + signerName: signerName secret: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key serviceAccountToken: path: path audience: audience - expirationSeconds: 6 + expirationSeconds: 3 clusterTrustBundle: path: path labelSelector: @@ -152616,7 +156881,7 @@ components: signerName: signerName - downwardAPI: items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -152625,7 +156890,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -152638,26 +156903,33 @@ components: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key + podCertificate: + certificateChainPath: certificateChainPath + keyPath: keyPath + maxExpirationSeconds: 3 + keyType: keyType + credentialBundlePath: credentialBundlePath + signerName: signerName secret: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key serviceAccountToken: path: path audience: audience - expirationSeconds: 6 + expirationSeconds: 3 clusterTrustBundle: path: path labelSelector: @@ -152677,7 +156949,7 @@ components: name: name optional: true signerName: signerName - defaultMode: 5 + defaultMode: 6 cephfs: path: path secretRef: @@ -152732,9 +157004,9 @@ components: readOnly: true fsType: fsType downwardAPI: - defaultMode: 6 + defaultMode: 1 items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -152743,7 +157015,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -152753,7 +157025,7 @@ components: apiVersion: apiVersion fieldPath: fieldPath awsElasticBlockStore: - partition: 9 + partition: 6 volumeID: volumeID readOnly: true fsType: fsType @@ -152763,7 +157035,7 @@ components: iscsi: chapAuthSession: true iscsiInterface: iscsiInterface - lun: 6 + lun: 5 chapAuthDiscovery: true iqn: iqn portals: @@ -152788,14 +157060,14 @@ components: - monitors - monitors configMap: - defaultMode: 6 + defaultMode: 3 name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key storageos: @@ -152835,7 +157107,7 @@ components: volumePath: volumePath fsType: fsType fc: - lun: 2 + lun: 6 targetWWNs: - targetWWNs - targetWWNs @@ -152861,11 +157133,24 @@ components: name: name - devicePath: devicePath name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator stdin: true terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -153095,6 +157380,11 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key - name: name value: value valueFrom: @@ -153113,6 +157403,11 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key restartPolicy: restartPolicy command: - command @@ -153128,11 +157423,24 @@ components: name: name - devicePath: devicePath name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator stdin: true terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -153362,6 +157670,11 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key - name: name value: value valueFrom: @@ -153380,6 +157693,11 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key restartPolicy: restartPolicy command: - command @@ -153391,7 +157709,7 @@ components: tty: true stdinOnce: true serviceAccount: serviceAccount - priority: 6 + priority: 7 restartPolicy: restartPolicy shareProcessNamespace: true hostUsers: true @@ -153409,50 +157727,24 @@ components: name: name - devicePath: devicePath name: name - image: image - imagePullPolicy: imagePullPolicy - livenessProbe: - terminationGracePeriodSeconds: 2 - failureThreshold: 5 - periodSeconds: 9 - tcpSocket: - port: port - host: host - timeoutSeconds: 4 - successThreshold: 3 - initialDelaySeconds: 7 - exec: - command: - - command - - command - grpc: - port: 2 - service: service - httpGet: - path: path - scheme: scheme - port: port - host: host - httpHeaders: - - name: name - value: value - - name: name - value: value + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator stdin: true terminationMessagePolicy: terminationMessagePolicy - terminationMessagePath: terminationMessagePath - workingDir: workingDir - resources: - claims: - - request: request - name: name - - request: request - name: name - requests: {} - limits: {} securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -153508,43 +157800,6 @@ components: value: value - name: name value: value - env: - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath ports: - protocol: protocol hostIP: hostIP @@ -153556,10 +157811,6 @@ components: name: name containerPort: 7 hostPort: 1 - restartPolicy: restartPolicy - command: - - command - - command volumeMounts: - mountPath: mountPath mountPropagation: mountPropagation @@ -153575,9 +157826,6 @@ components: subPath: subPath recursiveReadOnly: recursiveReadOnly subPathExpr: subPathExpr - args: - - args - - args lifecycle: postStart: sleep: @@ -153620,8 +157868,6 @@ components: - name: name value: value stopSignal: stopSignal - name: name - tty: true readinessProbe: terminationGracePeriodSeconds: 2 failureThreshold: 5 @@ -153654,7 +157900,6 @@ components: restartPolicy: restartPolicy - resourceName: resourceName restartPolicy: restartPolicy - stdinOnce: true envFrom: - configMapRef: name: name @@ -153670,11 +157915,6 @@ components: secretRef: name: name optional: true - - volumeDevices: - - devicePath: devicePath - name: name - - devicePath: devicePath - name: name image: image imagePullPolicy: imagePullPolicy livenessProbe: @@ -153704,8 +157944,6 @@ components: value: value - name: name value: value - stdin: true - terminationMessagePolicy: terminationMessagePolicy terminationMessagePath: terminationMessagePath workingDir: workingDir resources: @@ -153716,9 +157954,86 @@ components: name: name requests: {} limits: {} + env: + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + restartPolicy: restartPolicy + command: + - command + - command + args: + - args + - args + name: name + tty: true + stdinOnce: true + - volumeDevices: + - devicePath: devicePath + name: name + - devicePath: devicePath + name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + stdin: true + terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -153774,43 +158089,6 @@ components: value: value - name: name value: value - env: - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath ports: - protocol: protocol hostIP: hostIP @@ -153822,10 +158100,6 @@ components: name: name containerPort: 7 hostPort: 1 - restartPolicy: restartPolicy - command: - - command - - command volumeMounts: - mountPath: mountPath mountPropagation: mountPropagation @@ -153841,9 +158115,6 @@ components: subPath: subPath recursiveReadOnly: recursiveReadOnly subPathExpr: subPathExpr - args: - - args - - args lifecycle: postStart: sleep: @@ -153886,8 +158157,6 @@ components: - name: name value: value stopSignal: stopSignal - name: name - tty: true readinessProbe: terminationGracePeriodSeconds: 2 failureThreshold: 5 @@ -153920,7 +158189,6 @@ components: restartPolicy: restartPolicy - resourceName: resourceName restartPolicy: restartPolicy - stdinOnce: true envFrom: - configMapRef: name: name @@ -153936,12 +158204,6 @@ components: secretRef: name: name optional: true - initContainers: - - volumeDevices: - - devicePath: devicePath - name: name - - devicePath: devicePath - name: name image: image imagePullPolicy: imagePullPolicy livenessProbe: @@ -153971,8 +158233,6 @@ components: value: value - name: name value: value - stdin: true - terminationMessagePolicy: terminationMessagePolicy terminationMessagePath: terminationMessagePath workingDir: workingDir resources: @@ -153983,9 +158243,87 @@ components: name: name requests: {} limits: {} + env: + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + restartPolicy: restartPolicy + command: + - command + - command + args: + - args + - args + name: name + tty: true + stdinOnce: true + initContainers: + - volumeDevices: + - devicePath: devicePath + name: name + - devicePath: devicePath + name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + stdin: true + terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -154041,43 +158379,6 @@ components: value: value - name: name value: value - env: - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath ports: - protocol: protocol hostIP: hostIP @@ -154089,10 +158390,6 @@ components: name: name containerPort: 7 hostPort: 1 - restartPolicy: restartPolicy - command: - - command - - command volumeMounts: - mountPath: mountPath mountPropagation: mountPropagation @@ -154108,9 +158405,6 @@ components: subPath: subPath recursiveReadOnly: recursiveReadOnly subPathExpr: subPathExpr - args: - - args - - args lifecycle: postStart: sleep: @@ -154153,8 +158447,6 @@ components: - name: name value: value stopSignal: stopSignal - name: name - tty: true readinessProbe: terminationGracePeriodSeconds: 2 failureThreshold: 5 @@ -154187,7 +158479,6 @@ components: restartPolicy: restartPolicy - resourceName: resourceName restartPolicy: restartPolicy - stdinOnce: true envFrom: - configMapRef: name: name @@ -154203,11 +158494,6 @@ components: secretRef: name: name optional: true - - volumeDevices: - - devicePath: devicePath - name: name - - devicePath: devicePath - name: name image: image imagePullPolicy: imagePullPolicy livenessProbe: @@ -154237,8 +158523,6 @@ components: value: value - name: name value: value - stdin: true - terminationMessagePolicy: terminationMessagePolicy terminationMessagePath: terminationMessagePath workingDir: workingDir resources: @@ -154249,9 +158533,86 @@ components: name: name requests: {} limits: {} + env: + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + restartPolicy: restartPolicy + command: + - command + - command + args: + - args + - args + name: name + tty: true + stdinOnce: true + - volumeDevices: + - devicePath: devicePath + name: name + - devicePath: devicePath + name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + stdin: true + terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -154307,43 +158668,6 @@ components: value: value - name: name value: value - env: - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath ports: - protocol: protocol hostIP: hostIP @@ -154355,10 +158679,6 @@ components: name: name containerPort: 7 hostPort: 1 - restartPolicy: restartPolicy - command: - - command - - command volumeMounts: - mountPath: mountPath mountPropagation: mountPropagation @@ -154374,9 +158694,6 @@ components: subPath: subPath recursiveReadOnly: recursiveReadOnly subPathExpr: subPathExpr - args: - - args - - args lifecycle: postStart: sleep: @@ -154419,8 +158736,6 @@ components: - name: name value: value stopSignal: stopSignal - name: name - tty: true readinessProbe: terminationGracePeriodSeconds: 2 failureThreshold: 5 @@ -154453,7 +158768,6 @@ components: restartPolicy: restartPolicy - resourceName: resourceName restartPolicy: restartPolicy - stdinOnce: true envFrom: - configMapRef: name: name @@ -154469,6 +158783,102 @@ components: secretRef: name: name optional: true + image: image + imagePullPolicy: imagePullPolicy + livenessProbe: + terminationGracePeriodSeconds: 2 + failureThreshold: 5 + periodSeconds: 9 + tcpSocket: + port: port + host: host + timeoutSeconds: 4 + successThreshold: 3 + initialDelaySeconds: 7 + exec: + command: + - command + - command + grpc: + port: 2 + service: service + httpGet: + path: path + scheme: scheme + port: port + host: host + httpHeaders: + - name: name + value: value + - name: name + value: value + terminationMessagePath: terminationMessagePath + workingDir: workingDir + resources: + claims: + - request: request + name: name + - request: request + name: name + requests: {} + limits: {} + env: + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + restartPolicy: restartPolicy + command: + - command + - command + args: + - args + - args + name: name + tty: true + stdinOnce: true affinity: nodeAffinity: requiredDuringSchedulingIgnoredDuringExecution: @@ -155168,6 +159578,7 @@ components: - conditionType: conditionType - conditionType: conditionType serviceAccountName: serviceAccountName + hostnameOverride: hostnameOverride imagePullSecrets: - name: name - name: name @@ -155190,17 +159601,17 @@ components: appArmorProfile: localhostProfile: localhostProfile type: type - fsGroup: 7 + fsGroup: 1 fsGroupChangePolicy: fsGroupChangePolicy seLinuxChangePolicy: seLinuxChangePolicy - runAsGroup: 1 + runAsGroup: 4 runAsNonRoot: true sysctls: - name: name value: value - name: name value: value - runAsUser: 4 + runAsUser: 5 seccompProfile: localhostProfile: localhostProfile type: type @@ -155210,8 +159621,8 @@ components: hostProcess: true gmsaCredentialSpecName: gmsaCredentialSpecName supplementalGroups: - - 5 - - 5 + - 9 + - 9 supplementalGroupsPolicy: supplementalGroupsPolicy preemptionPolicy: preemptionPolicy nodeSelector: @@ -155220,12 +159631,12 @@ components: runtimeClassName: runtimeClassName tolerations: - effect: effect - tolerationSeconds: 9 + tolerationSeconds: 6 value: value key: key operator: operator - effect: effect - tolerationSeconds: 9 + tolerationSeconds: 6 value: value key: key operator: operator @@ -155244,7 +159655,7 @@ components: topologySpreadConstraints: - nodeTaintsPolicy: nodeTaintsPolicy whenUnsatisfiable: whenUnsatisfiable - maxSkew: 6 + maxSkew: 8 nodeAffinityPolicy: nodeAffinityPolicy labelSelector: matchExpressions: @@ -155260,14 +159671,14 @@ components: operator: operator matchLabels: key: matchLabels - minDomains: 8 + minDomains: 9 topologyKey: topologyKey matchLabelKeys: - matchLabelKeys - matchLabelKeys - nodeTaintsPolicy: nodeTaintsPolicy whenUnsatisfiable: whenUnsatisfiable - maxSkew: 6 + maxSkew: 8 nodeAffinityPolicy: nodeAffinityPolicy labelSelector: matchExpressions: @@ -155283,7 +159694,7 @@ components: operator: operator matchLabels: key: matchLabels - minDomains: 8 + minDomains: 9 topologyKey: topologyKey matchLabelKeys: - matchLabelKeys @@ -155392,20 +159803,20 @@ components: volumeMode: volumeMode secret: secretName: secretName - defaultMode: 3 + defaultMode: 7 optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key projected: sources: - downwardAPI: items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -155414,7 +159825,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -155427,26 +159838,33 @@ components: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key + podCertificate: + certificateChainPath: certificateChainPath + keyPath: keyPath + maxExpirationSeconds: 3 + keyType: keyType + credentialBundlePath: credentialBundlePath + signerName: signerName secret: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key serviceAccountToken: path: path audience: audience - expirationSeconds: 6 + expirationSeconds: 3 clusterTrustBundle: path: path labelSelector: @@ -155468,7 +159886,7 @@ components: signerName: signerName - downwardAPI: items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -155477,7 +159895,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -155490,26 +159908,33 @@ components: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key + podCertificate: + certificateChainPath: certificateChainPath + keyPath: keyPath + maxExpirationSeconds: 3 + keyType: keyType + credentialBundlePath: credentialBundlePath + signerName: signerName secret: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key serviceAccountToken: path: path audience: audience - expirationSeconds: 6 + expirationSeconds: 3 clusterTrustBundle: path: path labelSelector: @@ -155529,7 +159954,7 @@ components: name: name optional: true signerName: signerName - defaultMode: 5 + defaultMode: 6 cephfs: path: path secretRef: @@ -155584,9 +160009,9 @@ components: readOnly: true fsType: fsType downwardAPI: - defaultMode: 6 + defaultMode: 1 items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -155595,7 +160020,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -155605,7 +160030,7 @@ components: apiVersion: apiVersion fieldPath: fieldPath awsElasticBlockStore: - partition: 9 + partition: 6 volumeID: volumeID readOnly: true fsType: fsType @@ -155615,7 +160040,7 @@ components: iscsi: chapAuthSession: true iscsiInterface: iscsiInterface - lun: 6 + lun: 5 chapAuthDiscovery: true iqn: iqn portals: @@ -155640,14 +160065,14 @@ components: - monitors - monitors configMap: - defaultMode: 6 + defaultMode: 3 name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key storageos: @@ -155687,7 +160112,7 @@ components: volumePath: volumePath fsType: fsType fc: - lun: 2 + lun: 6 targetWWNs: - targetWWNs - targetWWNs @@ -155802,20 +160227,20 @@ components: volumeMode: volumeMode secret: secretName: secretName - defaultMode: 3 + defaultMode: 7 optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key projected: sources: - downwardAPI: items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -155824,7 +160249,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -155837,26 +160262,33 @@ components: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key + podCertificate: + certificateChainPath: certificateChainPath + keyPath: keyPath + maxExpirationSeconds: 3 + keyType: keyType + credentialBundlePath: credentialBundlePath + signerName: signerName secret: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key serviceAccountToken: path: path audience: audience - expirationSeconds: 6 + expirationSeconds: 3 clusterTrustBundle: path: path labelSelector: @@ -155878,7 +160310,7 @@ components: signerName: signerName - downwardAPI: items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -155887,7 +160319,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -155900,26 +160332,33 @@ components: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key + podCertificate: + certificateChainPath: certificateChainPath + keyPath: keyPath + maxExpirationSeconds: 3 + keyType: keyType + credentialBundlePath: credentialBundlePath + signerName: signerName secret: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key serviceAccountToken: path: path audience: audience - expirationSeconds: 6 + expirationSeconds: 3 clusterTrustBundle: path: path labelSelector: @@ -155939,7 +160378,7 @@ components: name: name optional: true signerName: signerName - defaultMode: 5 + defaultMode: 6 cephfs: path: path secretRef: @@ -155994,9 +160433,9 @@ components: readOnly: true fsType: fsType downwardAPI: - defaultMode: 6 + defaultMode: 1 items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -156005,7 +160444,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -156015,7 +160454,7 @@ components: apiVersion: apiVersion fieldPath: fieldPath awsElasticBlockStore: - partition: 9 + partition: 6 volumeID: volumeID readOnly: true fsType: fsType @@ -156025,7 +160464,7 @@ components: iscsi: chapAuthSession: true iscsiInterface: iscsiInterface - lun: 6 + lun: 5 chapAuthDiscovery: true iqn: iqn portals: @@ -156050,14 +160489,14 @@ components: - monitors - monitors configMap: - defaultMode: 6 + defaultMode: 3 name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key storageos: @@ -156097,7 +160536,7 @@ components: volumePath: volumePath fsType: fsType fc: - lun: 2 + lun: 6 targetWWNs: - targetWWNs - targetWWNs @@ -156123,11 +160562,24 @@ components: name: name - devicePath: devicePath name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator stdin: true terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -156357,6 +160809,11 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key - name: name value: value valueFrom: @@ -156375,6 +160832,11 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key restartPolicy: restartPolicy command: - command @@ -156390,11 +160852,24 @@ components: name: name - devicePath: devicePath name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator stdin: true terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -156624,6 +161099,11 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key - name: name value: value valueFrom: @@ -156642,6 +161122,11 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key restartPolicy: restartPolicy command: - command @@ -156653,7 +161138,7 @@ components: tty: true stdinOnce: true serviceAccount: serviceAccount - priority: 6 + priority: 7 restartPolicy: restartPolicy shareProcessNamespace: true hostUsers: true @@ -156671,50 +161156,24 @@ components: name: name - devicePath: devicePath name: name - image: image - imagePullPolicy: imagePullPolicy - livenessProbe: - terminationGracePeriodSeconds: 2 - failureThreshold: 5 - periodSeconds: 9 - tcpSocket: - port: port - host: host - timeoutSeconds: 4 - successThreshold: 3 - initialDelaySeconds: 7 - exec: - command: - - command - - command - grpc: - port: 2 - service: service - httpGet: - path: path - scheme: scheme - port: port - host: host - httpHeaders: - - name: name - value: value - - name: name - value: value + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator stdin: true terminationMessagePolicy: terminationMessagePolicy - terminationMessagePath: terminationMessagePath - workingDir: workingDir - resources: - claims: - - request: request - name: name - - request: request - name: name - requests: {} - limits: {} securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -156770,43 +161229,6 @@ components: value: value - name: name value: value - env: - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath ports: - protocol: protocol hostIP: hostIP @@ -156818,10 +161240,6 @@ components: name: name containerPort: 7 hostPort: 1 - restartPolicy: restartPolicy - command: - - command - - command volumeMounts: - mountPath: mountPath mountPropagation: mountPropagation @@ -156837,9 +161255,6 @@ components: subPath: subPath recursiveReadOnly: recursiveReadOnly subPathExpr: subPathExpr - args: - - args - - args lifecycle: postStart: sleep: @@ -156882,8 +161297,6 @@ components: - name: name value: value stopSignal: stopSignal - name: name - tty: true readinessProbe: terminationGracePeriodSeconds: 2 failureThreshold: 5 @@ -156916,7 +161329,6 @@ components: restartPolicy: restartPolicy - resourceName: resourceName restartPolicy: restartPolicy - stdinOnce: true envFrom: - configMapRef: name: name @@ -156932,11 +161344,6 @@ components: secretRef: name: name optional: true - - volumeDevices: - - devicePath: devicePath - name: name - - devicePath: devicePath - name: name image: image imagePullPolicy: imagePullPolicy livenessProbe: @@ -156966,8 +161373,6 @@ components: value: value - name: name value: value - stdin: true - terminationMessagePolicy: terminationMessagePolicy terminationMessagePath: terminationMessagePath workingDir: workingDir resources: @@ -156978,9 +161383,86 @@ components: name: name requests: {} limits: {} + env: + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + restartPolicy: restartPolicy + command: + - command + - command + args: + - args + - args + name: name + tty: true + stdinOnce: true + - volumeDevices: + - devicePath: devicePath + name: name + - devicePath: devicePath + name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + stdin: true + terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -157036,43 +161518,6 @@ components: value: value - name: name value: value - env: - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath ports: - protocol: protocol hostIP: hostIP @@ -157084,10 +161529,6 @@ components: name: name containerPort: 7 hostPort: 1 - restartPolicy: restartPolicy - command: - - command - - command volumeMounts: - mountPath: mountPath mountPropagation: mountPropagation @@ -157103,9 +161544,6 @@ components: subPath: subPath recursiveReadOnly: recursiveReadOnly subPathExpr: subPathExpr - args: - - args - - args lifecycle: postStart: sleep: @@ -157148,8 +161586,6 @@ components: - name: name value: value stopSignal: stopSignal - name: name - tty: true readinessProbe: terminationGracePeriodSeconds: 2 failureThreshold: 5 @@ -157182,7 +161618,6 @@ components: restartPolicy: restartPolicy - resourceName: resourceName restartPolicy: restartPolicy - stdinOnce: true envFrom: - configMapRef: name: name @@ -157198,12 +161633,6 @@ components: secretRef: name: name optional: true - initContainers: - - volumeDevices: - - devicePath: devicePath - name: name - - devicePath: devicePath - name: name image: image imagePullPolicy: imagePullPolicy livenessProbe: @@ -157233,8 +161662,6 @@ components: value: value - name: name value: value - stdin: true - terminationMessagePolicy: terminationMessagePolicy terminationMessagePath: terminationMessagePath workingDir: workingDir resources: @@ -157245,9 +161672,87 @@ components: name: name requests: {} limits: {} + env: + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + restartPolicy: restartPolicy + command: + - command + - command + args: + - args + - args + name: name + tty: true + stdinOnce: true + initContainers: + - volumeDevices: + - devicePath: devicePath + name: name + - devicePath: devicePath + name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + stdin: true + terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -157303,43 +161808,6 @@ components: value: value - name: name value: value - env: - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath ports: - protocol: protocol hostIP: hostIP @@ -157351,10 +161819,6 @@ components: name: name containerPort: 7 hostPort: 1 - restartPolicy: restartPolicy - command: - - command - - command volumeMounts: - mountPath: mountPath mountPropagation: mountPropagation @@ -157370,9 +161834,6 @@ components: subPath: subPath recursiveReadOnly: recursiveReadOnly subPathExpr: subPathExpr - args: - - args - - args lifecycle: postStart: sleep: @@ -157415,8 +161876,6 @@ components: - name: name value: value stopSignal: stopSignal - name: name - tty: true readinessProbe: terminationGracePeriodSeconds: 2 failureThreshold: 5 @@ -157449,7 +161908,6 @@ components: restartPolicy: restartPolicy - resourceName: resourceName restartPolicy: restartPolicy - stdinOnce: true envFrom: - configMapRef: name: name @@ -157465,11 +161923,6 @@ components: secretRef: name: name optional: true - - volumeDevices: - - devicePath: devicePath - name: name - - devicePath: devicePath - name: name image: image imagePullPolicy: imagePullPolicy livenessProbe: @@ -157499,8 +161952,6 @@ components: value: value - name: name value: value - stdin: true - terminationMessagePolicy: terminationMessagePolicy terminationMessagePath: terminationMessagePath workingDir: workingDir resources: @@ -157511,9 +161962,86 @@ components: name: name requests: {} limits: {} + env: + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + restartPolicy: restartPolicy + command: + - command + - command + args: + - args + - args + name: name + tty: true + stdinOnce: true + - volumeDevices: + - devicePath: devicePath + name: name + - devicePath: devicePath + name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + stdin: true + terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -157569,43 +162097,6 @@ components: value: value - name: name value: value - env: - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath ports: - protocol: protocol hostIP: hostIP @@ -157617,10 +162108,6 @@ components: name: name containerPort: 7 hostPort: 1 - restartPolicy: restartPolicy - command: - - command - - command volumeMounts: - mountPath: mountPath mountPropagation: mountPropagation @@ -157636,9 +162123,6 @@ components: subPath: subPath recursiveReadOnly: recursiveReadOnly subPathExpr: subPathExpr - args: - - args - - args lifecycle: postStart: sleep: @@ -157681,8 +162165,6 @@ components: - name: name value: value stopSignal: stopSignal - name: name - tty: true readinessProbe: terminationGracePeriodSeconds: 2 failureThreshold: 5 @@ -157715,7 +162197,6 @@ components: restartPolicy: restartPolicy - resourceName: resourceName restartPolicy: restartPolicy - stdinOnce: true envFrom: - configMapRef: name: name @@ -157731,6 +162212,102 @@ components: secretRef: name: name optional: true + image: image + imagePullPolicy: imagePullPolicy + livenessProbe: + terminationGracePeriodSeconds: 2 + failureThreshold: 5 + periodSeconds: 9 + tcpSocket: + port: port + host: host + timeoutSeconds: 4 + successThreshold: 3 + initialDelaySeconds: 7 + exec: + command: + - command + - command + grpc: + port: 2 + service: service + httpGet: + path: path + scheme: scheme + port: port + host: host + httpHeaders: + - name: name + value: value + - name: name + value: value + terminationMessagePath: terminationMessagePath + workingDir: workingDir + resources: + claims: + - request: request + name: name + - request: request + name: name + requests: {} + limits: {} + env: + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + restartPolicy: restartPolicy + command: + - command + - command + args: + - args + - args + name: name + tty: true + stdinOnce: true affinity: nodeAffinity: requiredDuringSchedulingIgnoredDuringExecution: @@ -158395,6 +162972,7 @@ components: - conditionType: conditionType - conditionType: conditionType serviceAccountName: serviceAccountName + hostnameOverride: hostnameOverride imagePullSecrets: - name: name - name: name @@ -158417,17 +162995,17 @@ components: appArmorProfile: localhostProfile: localhostProfile type: type - fsGroup: 7 + fsGroup: 1 fsGroupChangePolicy: fsGroupChangePolicy seLinuxChangePolicy: seLinuxChangePolicy - runAsGroup: 1 + runAsGroup: 4 runAsNonRoot: true sysctls: - name: name value: value - name: name value: value - runAsUser: 4 + runAsUser: 5 seccompProfile: localhostProfile: localhostProfile type: type @@ -158437,8 +163015,8 @@ components: hostProcess: true gmsaCredentialSpecName: gmsaCredentialSpecName supplementalGroups: - - 5 - - 5 + - 9 + - 9 supplementalGroupsPolicy: supplementalGroupsPolicy preemptionPolicy: preemptionPolicy nodeSelector: @@ -158447,12 +163025,12 @@ components: runtimeClassName: runtimeClassName tolerations: - effect: effect - tolerationSeconds: 9 + tolerationSeconds: 6 value: value key: key operator: operator - effect: effect - tolerationSeconds: 9 + tolerationSeconds: 6 value: value key: key operator: operator @@ -158471,7 +163049,7 @@ components: topologySpreadConstraints: - nodeTaintsPolicy: nodeTaintsPolicy whenUnsatisfiable: whenUnsatisfiable - maxSkew: 6 + maxSkew: 8 nodeAffinityPolicy: nodeAffinityPolicy labelSelector: matchExpressions: @@ -158487,14 +163065,14 @@ components: operator: operator matchLabels: key: matchLabels - minDomains: 8 + minDomains: 9 topologyKey: topologyKey matchLabelKeys: - matchLabelKeys - matchLabelKeys - nodeTaintsPolicy: nodeTaintsPolicy whenUnsatisfiable: whenUnsatisfiable - maxSkew: 6 + maxSkew: 8 nodeAffinityPolicy: nodeAffinityPolicy labelSelector: matchExpressions: @@ -158510,7 +163088,7 @@ components: operator: operator matchLabels: key: matchLabels - minDomains: 8 + minDomains: 9 topologyKey: topologyKey matchLabelKeys: - matchLabelKeys @@ -158619,20 +163197,20 @@ components: volumeMode: volumeMode secret: secretName: secretName - defaultMode: 3 + defaultMode: 7 optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key projected: sources: - downwardAPI: items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -158641,7 +163219,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -158654,26 +163232,33 @@ components: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key + podCertificate: + certificateChainPath: certificateChainPath + keyPath: keyPath + maxExpirationSeconds: 3 + keyType: keyType + credentialBundlePath: credentialBundlePath + signerName: signerName secret: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key serviceAccountToken: path: path audience: audience - expirationSeconds: 6 + expirationSeconds: 3 clusterTrustBundle: path: path labelSelector: @@ -158695,7 +163280,7 @@ components: signerName: signerName - downwardAPI: items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -158704,7 +163289,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -158717,26 +163302,33 @@ components: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key + podCertificate: + certificateChainPath: certificateChainPath + keyPath: keyPath + maxExpirationSeconds: 3 + keyType: keyType + credentialBundlePath: credentialBundlePath + signerName: signerName secret: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key serviceAccountToken: path: path audience: audience - expirationSeconds: 6 + expirationSeconds: 3 clusterTrustBundle: path: path labelSelector: @@ -158756,7 +163348,7 @@ components: name: name optional: true signerName: signerName - defaultMode: 5 + defaultMode: 6 cephfs: path: path secretRef: @@ -158811,9 +163403,9 @@ components: readOnly: true fsType: fsType downwardAPI: - defaultMode: 6 + defaultMode: 1 items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -158822,7 +163414,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -158832,7 +163424,7 @@ components: apiVersion: apiVersion fieldPath: fieldPath awsElasticBlockStore: - partition: 9 + partition: 6 volumeID: volumeID readOnly: true fsType: fsType @@ -158842,7 +163434,7 @@ components: iscsi: chapAuthSession: true iscsiInterface: iscsiInterface - lun: 6 + lun: 5 chapAuthDiscovery: true iqn: iqn portals: @@ -158867,14 +163459,14 @@ components: - monitors - monitors configMap: - defaultMode: 6 + defaultMode: 3 name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key storageos: @@ -158914,7 +163506,7 @@ components: volumePath: volumePath fsType: fsType fc: - lun: 2 + lun: 6 targetWWNs: - targetWWNs - targetWWNs @@ -159029,20 +163621,20 @@ components: volumeMode: volumeMode secret: secretName: secretName - defaultMode: 3 + defaultMode: 7 optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key projected: sources: - downwardAPI: items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -159051,7 +163643,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -159064,26 +163656,33 @@ components: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key + podCertificate: + certificateChainPath: certificateChainPath + keyPath: keyPath + maxExpirationSeconds: 3 + keyType: keyType + credentialBundlePath: credentialBundlePath + signerName: signerName secret: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key serviceAccountToken: path: path audience: audience - expirationSeconds: 6 + expirationSeconds: 3 clusterTrustBundle: path: path labelSelector: @@ -159105,7 +163704,7 @@ components: signerName: signerName - downwardAPI: items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -159114,7 +163713,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -159127,26 +163726,33 @@ components: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key + podCertificate: + certificateChainPath: certificateChainPath + keyPath: keyPath + maxExpirationSeconds: 3 + keyType: keyType + credentialBundlePath: credentialBundlePath + signerName: signerName secret: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key serviceAccountToken: path: path audience: audience - expirationSeconds: 6 + expirationSeconds: 3 clusterTrustBundle: path: path labelSelector: @@ -159166,7 +163772,7 @@ components: name: name optional: true signerName: signerName - defaultMode: 5 + defaultMode: 6 cephfs: path: path secretRef: @@ -159221,9 +163827,9 @@ components: readOnly: true fsType: fsType downwardAPI: - defaultMode: 6 + defaultMode: 1 items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -159232,7 +163838,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -159242,7 +163848,7 @@ components: apiVersion: apiVersion fieldPath: fieldPath awsElasticBlockStore: - partition: 9 + partition: 6 volumeID: volumeID readOnly: true fsType: fsType @@ -159252,7 +163858,7 @@ components: iscsi: chapAuthSession: true iscsiInterface: iscsiInterface - lun: 6 + lun: 5 chapAuthDiscovery: true iqn: iqn portals: @@ -159277,14 +163883,14 @@ components: - monitors - monitors configMap: - defaultMode: 6 + defaultMode: 3 name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key storageos: @@ -159324,7 +163930,7 @@ components: volumePath: volumePath fsType: fsType fc: - lun: 2 + lun: 6 targetWWNs: - targetWWNs - targetWWNs @@ -159350,11 +163956,24 @@ components: name: name - devicePath: devicePath name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator stdin: true terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -159584,6 +164203,11 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key - name: name value: value valueFrom: @@ -159602,6 +164226,11 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key restartPolicy: restartPolicy command: - command @@ -159617,11 +164246,24 @@ components: name: name - devicePath: devicePath name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator stdin: true terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -159851,6 +164493,11 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key - name: name value: value valueFrom: @@ -159869,6 +164516,11 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key restartPolicy: restartPolicy command: - command @@ -159880,7 +164532,7 @@ components: tty: true stdinOnce: true serviceAccount: serviceAccount - priority: 6 + priority: 7 restartPolicy: restartPolicy shareProcessNamespace: true hostUsers: true @@ -159898,50 +164550,24 @@ components: name: name - devicePath: devicePath name: name - image: image - imagePullPolicy: imagePullPolicy - livenessProbe: - terminationGracePeriodSeconds: 2 - failureThreshold: 5 - periodSeconds: 9 - tcpSocket: - port: port - host: host - timeoutSeconds: 4 - successThreshold: 3 - initialDelaySeconds: 7 - exec: - command: - - command - - command - grpc: - port: 2 - service: service - httpGet: - path: path - scheme: scheme - port: port - host: host - httpHeaders: - - name: name - value: value - - name: name - value: value + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator stdin: true terminationMessagePolicy: terminationMessagePolicy - terminationMessagePath: terminationMessagePath - workingDir: workingDir - resources: - claims: - - request: request - name: name - - request: request - name: name - requests: {} - limits: {} securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -159997,43 +164623,6 @@ components: value: value - name: name value: value - env: - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath ports: - protocol: protocol hostIP: hostIP @@ -160045,10 +164634,6 @@ components: name: name containerPort: 7 hostPort: 1 - restartPolicy: restartPolicy - command: - - command - - command volumeMounts: - mountPath: mountPath mountPropagation: mountPropagation @@ -160064,9 +164649,6 @@ components: subPath: subPath recursiveReadOnly: recursiveReadOnly subPathExpr: subPathExpr - args: - - args - - args lifecycle: postStart: sleep: @@ -160109,8 +164691,6 @@ components: - name: name value: value stopSignal: stopSignal - name: name - tty: true readinessProbe: terminationGracePeriodSeconds: 2 failureThreshold: 5 @@ -160143,7 +164723,6 @@ components: restartPolicy: restartPolicy - resourceName: resourceName restartPolicy: restartPolicy - stdinOnce: true envFrom: - configMapRef: name: name @@ -160159,11 +164738,6 @@ components: secretRef: name: name optional: true - - volumeDevices: - - devicePath: devicePath - name: name - - devicePath: devicePath - name: name image: image imagePullPolicy: imagePullPolicy livenessProbe: @@ -160193,8 +164767,6 @@ components: value: value - name: name value: value - stdin: true - terminationMessagePolicy: terminationMessagePolicy terminationMessagePath: terminationMessagePath workingDir: workingDir resources: @@ -160205,9 +164777,86 @@ components: name: name requests: {} limits: {} + env: + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + restartPolicy: restartPolicy + command: + - command + - command + args: + - args + - args + name: name + tty: true + stdinOnce: true + - volumeDevices: + - devicePath: devicePath + name: name + - devicePath: devicePath + name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + stdin: true + terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -160263,43 +164912,6 @@ components: value: value - name: name value: value - env: - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath ports: - protocol: protocol hostIP: hostIP @@ -160311,10 +164923,6 @@ components: name: name containerPort: 7 hostPort: 1 - restartPolicy: restartPolicy - command: - - command - - command volumeMounts: - mountPath: mountPath mountPropagation: mountPropagation @@ -160330,9 +164938,6 @@ components: subPath: subPath recursiveReadOnly: recursiveReadOnly subPathExpr: subPathExpr - args: - - args - - args lifecycle: postStart: sleep: @@ -160375,8 +164980,6 @@ components: - name: name value: value stopSignal: stopSignal - name: name - tty: true readinessProbe: terminationGracePeriodSeconds: 2 failureThreshold: 5 @@ -160409,7 +165012,6 @@ components: restartPolicy: restartPolicy - resourceName: resourceName restartPolicy: restartPolicy - stdinOnce: true envFrom: - configMapRef: name: name @@ -160425,12 +165027,6 @@ components: secretRef: name: name optional: true - initContainers: - - volumeDevices: - - devicePath: devicePath - name: name - - devicePath: devicePath - name: name image: image imagePullPolicy: imagePullPolicy livenessProbe: @@ -160460,8 +165056,6 @@ components: value: value - name: name value: value - stdin: true - terminationMessagePolicy: terminationMessagePolicy terminationMessagePath: terminationMessagePath workingDir: workingDir resources: @@ -160472,9 +165066,87 @@ components: name: name requests: {} limits: {} + env: + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + restartPolicy: restartPolicy + command: + - command + - command + args: + - args + - args + name: name + tty: true + stdinOnce: true + initContainers: + - volumeDevices: + - devicePath: devicePath + name: name + - devicePath: devicePath + name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + stdin: true + terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -160530,43 +165202,6 @@ components: value: value - name: name value: value - env: - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath ports: - protocol: protocol hostIP: hostIP @@ -160578,10 +165213,6 @@ components: name: name containerPort: 7 hostPort: 1 - restartPolicy: restartPolicy - command: - - command - - command volumeMounts: - mountPath: mountPath mountPropagation: mountPropagation @@ -160597,9 +165228,6 @@ components: subPath: subPath recursiveReadOnly: recursiveReadOnly subPathExpr: subPathExpr - args: - - args - - args lifecycle: postStart: sleep: @@ -160642,8 +165270,6 @@ components: - name: name value: value stopSignal: stopSignal - name: name - tty: true readinessProbe: terminationGracePeriodSeconds: 2 failureThreshold: 5 @@ -160676,7 +165302,6 @@ components: restartPolicy: restartPolicy - resourceName: resourceName restartPolicy: restartPolicy - stdinOnce: true envFrom: - configMapRef: name: name @@ -160692,11 +165317,6 @@ components: secretRef: name: name optional: true - - volumeDevices: - - devicePath: devicePath - name: name - - devicePath: devicePath - name: name image: image imagePullPolicy: imagePullPolicy livenessProbe: @@ -160726,8 +165346,6 @@ components: value: value - name: name value: value - stdin: true - terminationMessagePolicy: terminationMessagePolicy terminationMessagePath: terminationMessagePath workingDir: workingDir resources: @@ -160738,9 +165356,86 @@ components: name: name requests: {} limits: {} + env: + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + restartPolicy: restartPolicy + command: + - command + - command + args: + - args + - args + name: name + tty: true + stdinOnce: true + - volumeDevices: + - devicePath: devicePath + name: name + - devicePath: devicePath + name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + stdin: true + terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -160796,43 +165491,6 @@ components: value: value - name: name value: value - env: - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath ports: - protocol: protocol hostIP: hostIP @@ -160844,10 +165502,6 @@ components: name: name containerPort: 7 hostPort: 1 - restartPolicy: restartPolicy - command: - - command - - command volumeMounts: - mountPath: mountPath mountPropagation: mountPropagation @@ -160863,9 +165517,6 @@ components: subPath: subPath recursiveReadOnly: recursiveReadOnly subPathExpr: subPathExpr - args: - - args - - args lifecycle: postStart: sleep: @@ -160908,8 +165559,6 @@ components: - name: name value: value stopSignal: stopSignal - name: name - tty: true readinessProbe: terminationGracePeriodSeconds: 2 failureThreshold: 5 @@ -160942,7 +165591,6 @@ components: restartPolicy: restartPolicy - resourceName: resourceName restartPolicy: restartPolicy - stdinOnce: true envFrom: - configMapRef: name: name @@ -160958,6 +165606,102 @@ components: secretRef: name: name optional: true + image: image + imagePullPolicy: imagePullPolicy + livenessProbe: + terminationGracePeriodSeconds: 2 + failureThreshold: 5 + periodSeconds: 9 + tcpSocket: + port: port + host: host + timeoutSeconds: 4 + successThreshold: 3 + initialDelaySeconds: 7 + exec: + command: + - command + - command + grpc: + port: 2 + service: service + httpGet: + path: path + scheme: scheme + port: port + host: host + httpHeaders: + - name: name + value: value + - name: name + value: value + terminationMessagePath: terminationMessagePath + workingDir: workingDir + resources: + claims: + - request: request + name: name + - request: request + name: name + requests: {} + limits: {} + env: + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + restartPolicy: restartPolicy + command: + - command + - command + args: + - args + - args + name: name + tty: true + stdinOnce: true affinity: nodeAffinity: requiredDuringSchedulingIgnoredDuringExecution: @@ -161604,6 +166348,7 @@ components: - conditionType: conditionType - conditionType: conditionType serviceAccountName: serviceAccountName + hostnameOverride: hostnameOverride imagePullSecrets: - name: name - name: name @@ -161626,17 +166371,17 @@ components: appArmorProfile: localhostProfile: localhostProfile type: type - fsGroup: 7 + fsGroup: 1 fsGroupChangePolicy: fsGroupChangePolicy seLinuxChangePolicy: seLinuxChangePolicy - runAsGroup: 1 + runAsGroup: 4 runAsNonRoot: true sysctls: - name: name value: value - name: name value: value - runAsUser: 4 + runAsUser: 5 seccompProfile: localhostProfile: localhostProfile type: type @@ -161646,8 +166391,8 @@ components: hostProcess: true gmsaCredentialSpecName: gmsaCredentialSpecName supplementalGroups: - - 5 - - 5 + - 9 + - 9 supplementalGroupsPolicy: supplementalGroupsPolicy preemptionPolicy: preemptionPolicy nodeSelector: @@ -161656,12 +166401,12 @@ components: runtimeClassName: runtimeClassName tolerations: - effect: effect - tolerationSeconds: 9 + tolerationSeconds: 6 value: value key: key operator: operator - effect: effect - tolerationSeconds: 9 + tolerationSeconds: 6 value: value key: key operator: operator @@ -161680,7 +166425,7 @@ components: topologySpreadConstraints: - nodeTaintsPolicy: nodeTaintsPolicy whenUnsatisfiable: whenUnsatisfiable - maxSkew: 6 + maxSkew: 8 nodeAffinityPolicy: nodeAffinityPolicy labelSelector: matchExpressions: @@ -161696,14 +166441,14 @@ components: operator: operator matchLabels: key: matchLabels - minDomains: 8 + minDomains: 9 topologyKey: topologyKey matchLabelKeys: - matchLabelKeys - matchLabelKeys - nodeTaintsPolicy: nodeTaintsPolicy whenUnsatisfiable: whenUnsatisfiable - maxSkew: 6 + maxSkew: 8 nodeAffinityPolicy: nodeAffinityPolicy labelSelector: matchExpressions: @@ -161719,7 +166464,7 @@ components: operator: operator matchLabels: key: matchLabels - minDomains: 8 + minDomains: 9 topologyKey: topologyKey matchLabelKeys: - matchLabelKeys @@ -161828,20 +166573,20 @@ components: volumeMode: volumeMode secret: secretName: secretName - defaultMode: 3 + defaultMode: 7 optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key projected: sources: - downwardAPI: items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -161850,7 +166595,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -161863,26 +166608,33 @@ components: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key + podCertificate: + certificateChainPath: certificateChainPath + keyPath: keyPath + maxExpirationSeconds: 3 + keyType: keyType + credentialBundlePath: credentialBundlePath + signerName: signerName secret: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key serviceAccountToken: path: path audience: audience - expirationSeconds: 6 + expirationSeconds: 3 clusterTrustBundle: path: path labelSelector: @@ -161904,7 +166656,7 @@ components: signerName: signerName - downwardAPI: items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -161913,7 +166665,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -161926,26 +166678,33 @@ components: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key + podCertificate: + certificateChainPath: certificateChainPath + keyPath: keyPath + maxExpirationSeconds: 3 + keyType: keyType + credentialBundlePath: credentialBundlePath + signerName: signerName secret: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key serviceAccountToken: path: path audience: audience - expirationSeconds: 6 + expirationSeconds: 3 clusterTrustBundle: path: path labelSelector: @@ -161965,7 +166724,7 @@ components: name: name optional: true signerName: signerName - defaultMode: 5 + defaultMode: 6 cephfs: path: path secretRef: @@ -162020,9 +166779,9 @@ components: readOnly: true fsType: fsType downwardAPI: - defaultMode: 6 + defaultMode: 1 items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -162031,7 +166790,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -162041,7 +166800,7 @@ components: apiVersion: apiVersion fieldPath: fieldPath awsElasticBlockStore: - partition: 9 + partition: 6 volumeID: volumeID readOnly: true fsType: fsType @@ -162051,7 +166810,7 @@ components: iscsi: chapAuthSession: true iscsiInterface: iscsiInterface - lun: 6 + lun: 5 chapAuthDiscovery: true iqn: iqn portals: @@ -162076,14 +166835,14 @@ components: - monitors - monitors configMap: - defaultMode: 6 + defaultMode: 3 name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key storageos: @@ -162123,7 +166882,7 @@ components: volumePath: volumePath fsType: fsType fc: - lun: 2 + lun: 6 targetWWNs: - targetWWNs - targetWWNs @@ -162238,20 +166997,20 @@ components: volumeMode: volumeMode secret: secretName: secretName - defaultMode: 3 + defaultMode: 7 optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key projected: sources: - downwardAPI: items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -162260,7 +167019,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -162273,26 +167032,33 @@ components: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key + podCertificate: + certificateChainPath: certificateChainPath + keyPath: keyPath + maxExpirationSeconds: 3 + keyType: keyType + credentialBundlePath: credentialBundlePath + signerName: signerName secret: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key serviceAccountToken: path: path audience: audience - expirationSeconds: 6 + expirationSeconds: 3 clusterTrustBundle: path: path labelSelector: @@ -162314,7 +167080,7 @@ components: signerName: signerName - downwardAPI: items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -162323,7 +167089,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -162336,26 +167102,33 @@ components: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key + podCertificate: + certificateChainPath: certificateChainPath + keyPath: keyPath + maxExpirationSeconds: 3 + keyType: keyType + credentialBundlePath: credentialBundlePath + signerName: signerName secret: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key serviceAccountToken: path: path audience: audience - expirationSeconds: 6 + expirationSeconds: 3 clusterTrustBundle: path: path labelSelector: @@ -162375,7 +167148,7 @@ components: name: name optional: true signerName: signerName - defaultMode: 5 + defaultMode: 6 cephfs: path: path secretRef: @@ -162430,9 +167203,9 @@ components: readOnly: true fsType: fsType downwardAPI: - defaultMode: 6 + defaultMode: 1 items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -162441,7 +167214,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -162451,7 +167224,7 @@ components: apiVersion: apiVersion fieldPath: fieldPath awsElasticBlockStore: - partition: 9 + partition: 6 volumeID: volumeID readOnly: true fsType: fsType @@ -162461,7 +167234,7 @@ components: iscsi: chapAuthSession: true iscsiInterface: iscsiInterface - lun: 6 + lun: 5 chapAuthDiscovery: true iqn: iqn portals: @@ -162486,14 +167259,14 @@ components: - monitors - monitors configMap: - defaultMode: 6 + defaultMode: 3 name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key storageos: @@ -162533,7 +167306,7 @@ components: volumePath: volumePath fsType: fsType fc: - lun: 2 + lun: 6 targetWWNs: - targetWWNs - targetWWNs @@ -162559,11 +167332,24 @@ components: name: name - devicePath: devicePath name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator stdin: true terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -162793,6 +167579,11 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key - name: name value: value valueFrom: @@ -162811,6 +167602,11 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key restartPolicy: restartPolicy command: - command @@ -162826,11 +167622,24 @@ components: name: name - devicePath: devicePath name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator stdin: true terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -163060,6 +167869,11 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key - name: name value: value valueFrom: @@ -163078,6 +167892,11 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key restartPolicy: restartPolicy command: - command @@ -163089,7 +167908,7 @@ components: tty: true stdinOnce: true serviceAccount: serviceAccount - priority: 6 + priority: 7 restartPolicy: restartPolicy shareProcessNamespace: true hostUsers: true @@ -163107,50 +167926,24 @@ components: name: name - devicePath: devicePath name: name - image: image - imagePullPolicy: imagePullPolicy - livenessProbe: - terminationGracePeriodSeconds: 2 - failureThreshold: 5 - periodSeconds: 9 - tcpSocket: - port: port - host: host - timeoutSeconds: 4 - successThreshold: 3 - initialDelaySeconds: 7 - exec: - command: - - command - - command - grpc: - port: 2 - service: service - httpGet: - path: path - scheme: scheme - port: port - host: host - httpHeaders: - - name: name - value: value - - name: name - value: value + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator stdin: true terminationMessagePolicy: terminationMessagePolicy - terminationMessagePath: terminationMessagePath - workingDir: workingDir - resources: - claims: - - request: request - name: name - - request: request - name: name - requests: {} - limits: {} securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -163206,43 +167999,6 @@ components: value: value - name: name value: value - env: - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath ports: - protocol: protocol hostIP: hostIP @@ -163254,10 +168010,6 @@ components: name: name containerPort: 7 hostPort: 1 - restartPolicy: restartPolicy - command: - - command - - command volumeMounts: - mountPath: mountPath mountPropagation: mountPropagation @@ -163273,9 +168025,6 @@ components: subPath: subPath recursiveReadOnly: recursiveReadOnly subPathExpr: subPathExpr - args: - - args - - args lifecycle: postStart: sleep: @@ -163318,8 +168067,6 @@ components: - name: name value: value stopSignal: stopSignal - name: name - tty: true readinessProbe: terminationGracePeriodSeconds: 2 failureThreshold: 5 @@ -163352,7 +168099,6 @@ components: restartPolicy: restartPolicy - resourceName: resourceName restartPolicy: restartPolicy - stdinOnce: true envFrom: - configMapRef: name: name @@ -163368,11 +168114,6 @@ components: secretRef: name: name optional: true - - volumeDevices: - - devicePath: devicePath - name: name - - devicePath: devicePath - name: name image: image imagePullPolicy: imagePullPolicy livenessProbe: @@ -163402,8 +168143,6 @@ components: value: value - name: name value: value - stdin: true - terminationMessagePolicy: terminationMessagePolicy terminationMessagePath: terminationMessagePath workingDir: workingDir resources: @@ -163414,9 +168153,86 @@ components: name: name requests: {} limits: {} + env: + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + restartPolicy: restartPolicy + command: + - command + - command + args: + - args + - args + name: name + tty: true + stdinOnce: true + - volumeDevices: + - devicePath: devicePath + name: name + - devicePath: devicePath + name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + stdin: true + terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -163472,43 +168288,6 @@ components: value: value - name: name value: value - env: - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath ports: - protocol: protocol hostIP: hostIP @@ -163520,10 +168299,6 @@ components: name: name containerPort: 7 hostPort: 1 - restartPolicy: restartPolicy - command: - - command - - command volumeMounts: - mountPath: mountPath mountPropagation: mountPropagation @@ -163539,9 +168314,6 @@ components: subPath: subPath recursiveReadOnly: recursiveReadOnly subPathExpr: subPathExpr - args: - - args - - args lifecycle: postStart: sleep: @@ -163584,8 +168356,6 @@ components: - name: name value: value stopSignal: stopSignal - name: name - tty: true readinessProbe: terminationGracePeriodSeconds: 2 failureThreshold: 5 @@ -163618,7 +168388,6 @@ components: restartPolicy: restartPolicy - resourceName: resourceName restartPolicy: restartPolicy - stdinOnce: true envFrom: - configMapRef: name: name @@ -163634,12 +168403,6 @@ components: secretRef: name: name optional: true - initContainers: - - volumeDevices: - - devicePath: devicePath - name: name - - devicePath: devicePath - name: name image: image imagePullPolicy: imagePullPolicy livenessProbe: @@ -163669,8 +168432,6 @@ components: value: value - name: name value: value - stdin: true - terminationMessagePolicy: terminationMessagePolicy terminationMessagePath: terminationMessagePath workingDir: workingDir resources: @@ -163681,9 +168442,87 @@ components: name: name requests: {} limits: {} + env: + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + restartPolicy: restartPolicy + command: + - command + - command + args: + - args + - args + name: name + tty: true + stdinOnce: true + initContainers: + - volumeDevices: + - devicePath: devicePath + name: name + - devicePath: devicePath + name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + stdin: true + terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -163739,43 +168578,6 @@ components: value: value - name: name value: value - env: - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath ports: - protocol: protocol hostIP: hostIP @@ -163787,10 +168589,6 @@ components: name: name containerPort: 7 hostPort: 1 - restartPolicy: restartPolicy - command: - - command - - command volumeMounts: - mountPath: mountPath mountPropagation: mountPropagation @@ -163806,9 +168604,6 @@ components: subPath: subPath recursiveReadOnly: recursiveReadOnly subPathExpr: subPathExpr - args: - - args - - args lifecycle: postStart: sleep: @@ -163851,8 +168646,6 @@ components: - name: name value: value stopSignal: stopSignal - name: name - tty: true readinessProbe: terminationGracePeriodSeconds: 2 failureThreshold: 5 @@ -163885,7 +168678,6 @@ components: restartPolicy: restartPolicy - resourceName: resourceName restartPolicy: restartPolicy - stdinOnce: true envFrom: - configMapRef: name: name @@ -163901,11 +168693,6 @@ components: secretRef: name: name optional: true - - volumeDevices: - - devicePath: devicePath - name: name - - devicePath: devicePath - name: name image: image imagePullPolicy: imagePullPolicy livenessProbe: @@ -163935,8 +168722,6 @@ components: value: value - name: name value: value - stdin: true - terminationMessagePolicy: terminationMessagePolicy terminationMessagePath: terminationMessagePath workingDir: workingDir resources: @@ -163947,9 +168732,86 @@ components: name: name requests: {} limits: {} + env: + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + restartPolicy: restartPolicy + command: + - command + - command + args: + - args + - args + name: name + tty: true + stdinOnce: true + - volumeDevices: + - devicePath: devicePath + name: name + - devicePath: devicePath + name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + stdin: true + terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -164005,43 +168867,6 @@ components: value: value - name: name value: value - env: - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath ports: - protocol: protocol hostIP: hostIP @@ -164053,10 +168878,6 @@ components: name: name containerPort: 7 hostPort: 1 - restartPolicy: restartPolicy - command: - - command - - command volumeMounts: - mountPath: mountPath mountPropagation: mountPropagation @@ -164072,9 +168893,6 @@ components: subPath: subPath recursiveReadOnly: recursiveReadOnly subPathExpr: subPathExpr - args: - - args - - args lifecycle: postStart: sleep: @@ -164117,8 +168935,6 @@ components: - name: name value: value stopSignal: stopSignal - name: name - tty: true readinessProbe: terminationGracePeriodSeconds: 2 failureThreshold: 5 @@ -164151,7 +168967,6 @@ components: restartPolicy: restartPolicy - resourceName: resourceName restartPolicy: restartPolicy - stdinOnce: true envFrom: - configMapRef: name: name @@ -164167,6 +168982,102 @@ components: secretRef: name: name optional: true + image: image + imagePullPolicy: imagePullPolicy + livenessProbe: + terminationGracePeriodSeconds: 2 + failureThreshold: 5 + periodSeconds: 9 + tcpSocket: + port: port + host: host + timeoutSeconds: 4 + successThreshold: 3 + initialDelaySeconds: 7 + exec: + command: + - command + - command + grpc: + port: 2 + service: service + httpGet: + path: path + scheme: scheme + port: port + host: host + httpHeaders: + - name: name + value: value + - name: name + value: value + terminationMessagePath: terminationMessagePath + workingDir: workingDir + resources: + claims: + - request: request + name: name + - request: request + name: name + requests: {} + limits: {} + env: + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + restartPolicy: restartPolicy + command: + - command + - command + args: + - args + - args + name: name + tty: true + stdinOnce: true affinity: nodeAffinity: requiredDuringSchedulingIgnoredDuringExecution: @@ -164851,6 +169762,7 @@ components: - conditionType: conditionType - conditionType: conditionType serviceAccountName: serviceAccountName + hostnameOverride: hostnameOverride imagePullSecrets: - name: name - name: name @@ -164873,17 +169785,17 @@ components: appArmorProfile: localhostProfile: localhostProfile type: type - fsGroup: 7 + fsGroup: 1 fsGroupChangePolicy: fsGroupChangePolicy seLinuxChangePolicy: seLinuxChangePolicy - runAsGroup: 1 + runAsGroup: 4 runAsNonRoot: true sysctls: - name: name value: value - name: name value: value - runAsUser: 4 + runAsUser: 5 seccompProfile: localhostProfile: localhostProfile type: type @@ -164893,8 +169805,8 @@ components: hostProcess: true gmsaCredentialSpecName: gmsaCredentialSpecName supplementalGroups: - - 5 - - 5 + - 9 + - 9 supplementalGroupsPolicy: supplementalGroupsPolicy preemptionPolicy: preemptionPolicy nodeSelector: @@ -164903,12 +169815,12 @@ components: runtimeClassName: runtimeClassName tolerations: - effect: effect - tolerationSeconds: 9 + tolerationSeconds: 6 value: value key: key operator: operator - effect: effect - tolerationSeconds: 9 + tolerationSeconds: 6 value: value key: key operator: operator @@ -164927,7 +169839,7 @@ components: topologySpreadConstraints: - nodeTaintsPolicy: nodeTaintsPolicy whenUnsatisfiable: whenUnsatisfiable - maxSkew: 6 + maxSkew: 8 nodeAffinityPolicy: nodeAffinityPolicy labelSelector: matchExpressions: @@ -164943,14 +169855,14 @@ components: operator: operator matchLabels: key: matchLabels - minDomains: 8 + minDomains: 9 topologyKey: topologyKey matchLabelKeys: - matchLabelKeys - matchLabelKeys - nodeTaintsPolicy: nodeTaintsPolicy whenUnsatisfiable: whenUnsatisfiable - maxSkew: 6 + maxSkew: 8 nodeAffinityPolicy: nodeAffinityPolicy labelSelector: matchExpressions: @@ -164966,7 +169878,7 @@ components: operator: operator matchLabels: key: matchLabels - minDomains: 8 + minDomains: 9 topologyKey: topologyKey matchLabelKeys: - matchLabelKeys @@ -165075,20 +169987,20 @@ components: volumeMode: volumeMode secret: secretName: secretName - defaultMode: 3 + defaultMode: 7 optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key projected: sources: - downwardAPI: items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -165097,7 +170009,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -165110,26 +170022,33 @@ components: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key + podCertificate: + certificateChainPath: certificateChainPath + keyPath: keyPath + maxExpirationSeconds: 3 + keyType: keyType + credentialBundlePath: credentialBundlePath + signerName: signerName secret: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key serviceAccountToken: path: path audience: audience - expirationSeconds: 6 + expirationSeconds: 3 clusterTrustBundle: path: path labelSelector: @@ -165151,7 +170070,7 @@ components: signerName: signerName - downwardAPI: items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -165160,7 +170079,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -165173,26 +170092,33 @@ components: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key + podCertificate: + certificateChainPath: certificateChainPath + keyPath: keyPath + maxExpirationSeconds: 3 + keyType: keyType + credentialBundlePath: credentialBundlePath + signerName: signerName secret: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key serviceAccountToken: path: path audience: audience - expirationSeconds: 6 + expirationSeconds: 3 clusterTrustBundle: path: path labelSelector: @@ -165212,7 +170138,7 @@ components: name: name optional: true signerName: signerName - defaultMode: 5 + defaultMode: 6 cephfs: path: path secretRef: @@ -165267,9 +170193,9 @@ components: readOnly: true fsType: fsType downwardAPI: - defaultMode: 6 + defaultMode: 1 items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -165278,7 +170204,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -165288,7 +170214,7 @@ components: apiVersion: apiVersion fieldPath: fieldPath awsElasticBlockStore: - partition: 9 + partition: 6 volumeID: volumeID readOnly: true fsType: fsType @@ -165298,7 +170224,7 @@ components: iscsi: chapAuthSession: true iscsiInterface: iscsiInterface - lun: 6 + lun: 5 chapAuthDiscovery: true iqn: iqn portals: @@ -165323,14 +170249,14 @@ components: - monitors - monitors configMap: - defaultMode: 6 + defaultMode: 3 name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key storageos: @@ -165370,7 +170296,7 @@ components: volumePath: volumePath fsType: fsType fc: - lun: 2 + lun: 6 targetWWNs: - targetWWNs - targetWWNs @@ -165485,20 +170411,20 @@ components: volumeMode: volumeMode secret: secretName: secretName - defaultMode: 3 + defaultMode: 7 optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key projected: sources: - downwardAPI: items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -165507,7 +170433,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -165520,26 +170446,33 @@ components: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key + podCertificate: + certificateChainPath: certificateChainPath + keyPath: keyPath + maxExpirationSeconds: 3 + keyType: keyType + credentialBundlePath: credentialBundlePath + signerName: signerName secret: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key serviceAccountToken: path: path audience: audience - expirationSeconds: 6 + expirationSeconds: 3 clusterTrustBundle: path: path labelSelector: @@ -165561,7 +170494,7 @@ components: signerName: signerName - downwardAPI: items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -165570,7 +170503,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -165583,26 +170516,33 @@ components: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key + podCertificate: + certificateChainPath: certificateChainPath + keyPath: keyPath + maxExpirationSeconds: 3 + keyType: keyType + credentialBundlePath: credentialBundlePath + signerName: signerName secret: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key serviceAccountToken: path: path audience: audience - expirationSeconds: 6 + expirationSeconds: 3 clusterTrustBundle: path: path labelSelector: @@ -165622,7 +170562,7 @@ components: name: name optional: true signerName: signerName - defaultMode: 5 + defaultMode: 6 cephfs: path: path secretRef: @@ -165677,9 +170617,9 @@ components: readOnly: true fsType: fsType downwardAPI: - defaultMode: 6 + defaultMode: 1 items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -165688,7 +170628,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -165698,7 +170638,7 @@ components: apiVersion: apiVersion fieldPath: fieldPath awsElasticBlockStore: - partition: 9 + partition: 6 volumeID: volumeID readOnly: true fsType: fsType @@ -165708,7 +170648,7 @@ components: iscsi: chapAuthSession: true iscsiInterface: iscsiInterface - lun: 6 + lun: 5 chapAuthDiscovery: true iqn: iqn portals: @@ -165733,14 +170673,14 @@ components: - monitors - monitors configMap: - defaultMode: 6 + defaultMode: 3 name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key storageos: @@ -165780,7 +170720,7 @@ components: volumePath: volumePath fsType: fsType fc: - lun: 2 + lun: 6 targetWWNs: - targetWWNs - targetWWNs @@ -165806,11 +170746,24 @@ components: name: name - devicePath: devicePath name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator stdin: true terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -166040,6 +170993,11 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key - name: name value: value valueFrom: @@ -166058,6 +171016,11 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key restartPolicy: restartPolicy command: - command @@ -166073,11 +171036,24 @@ components: name: name - devicePath: devicePath name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator stdin: true terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -166307,6 +171283,11 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key - name: name value: value valueFrom: @@ -166325,6 +171306,11 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key restartPolicy: restartPolicy command: - command @@ -166336,7 +171322,7 @@ components: tty: true stdinOnce: true serviceAccount: serviceAccount - priority: 6 + priority: 7 restartPolicy: restartPolicy shareProcessNamespace: true hostUsers: true @@ -166354,50 +171340,24 @@ components: name: name - devicePath: devicePath name: name - image: image - imagePullPolicy: imagePullPolicy - livenessProbe: - terminationGracePeriodSeconds: 2 - failureThreshold: 5 - periodSeconds: 9 - tcpSocket: - port: port - host: host - timeoutSeconds: 4 - successThreshold: 3 - initialDelaySeconds: 7 - exec: - command: - - command - - command - grpc: - port: 2 - service: service - httpGet: - path: path - scheme: scheme - port: port - host: host - httpHeaders: - - name: name - value: value - - name: name - value: value + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator stdin: true terminationMessagePolicy: terminationMessagePolicy - terminationMessagePath: terminationMessagePath - workingDir: workingDir - resources: - claims: - - request: request - name: name - - request: request - name: name - requests: {} - limits: {} securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -166453,43 +171413,6 @@ components: value: value - name: name value: value - env: - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath ports: - protocol: protocol hostIP: hostIP @@ -166501,10 +171424,6 @@ components: name: name containerPort: 7 hostPort: 1 - restartPolicy: restartPolicy - command: - - command - - command volumeMounts: - mountPath: mountPath mountPropagation: mountPropagation @@ -166520,9 +171439,6 @@ components: subPath: subPath recursiveReadOnly: recursiveReadOnly subPathExpr: subPathExpr - args: - - args - - args lifecycle: postStart: sleep: @@ -166565,8 +171481,6 @@ components: - name: name value: value stopSignal: stopSignal - name: name - tty: true readinessProbe: terminationGracePeriodSeconds: 2 failureThreshold: 5 @@ -166599,7 +171513,6 @@ components: restartPolicy: restartPolicy - resourceName: resourceName restartPolicy: restartPolicy - stdinOnce: true envFrom: - configMapRef: name: name @@ -166615,11 +171528,6 @@ components: secretRef: name: name optional: true - - volumeDevices: - - devicePath: devicePath - name: name - - devicePath: devicePath - name: name image: image imagePullPolicy: imagePullPolicy livenessProbe: @@ -166649,8 +171557,6 @@ components: value: value - name: name value: value - stdin: true - terminationMessagePolicy: terminationMessagePolicy terminationMessagePath: terminationMessagePath workingDir: workingDir resources: @@ -166661,9 +171567,86 @@ components: name: name requests: {} limits: {} + env: + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + restartPolicy: restartPolicy + command: + - command + - command + args: + - args + - args + name: name + tty: true + stdinOnce: true + - volumeDevices: + - devicePath: devicePath + name: name + - devicePath: devicePath + name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + stdin: true + terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -166719,43 +171702,6 @@ components: value: value - name: name value: value - env: - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath ports: - protocol: protocol hostIP: hostIP @@ -166767,10 +171713,6 @@ components: name: name containerPort: 7 hostPort: 1 - restartPolicy: restartPolicy - command: - - command - - command volumeMounts: - mountPath: mountPath mountPropagation: mountPropagation @@ -166786,9 +171728,6 @@ components: subPath: subPath recursiveReadOnly: recursiveReadOnly subPathExpr: subPathExpr - args: - - args - - args lifecycle: postStart: sleep: @@ -166831,8 +171770,6 @@ components: - name: name value: value stopSignal: stopSignal - name: name - tty: true readinessProbe: terminationGracePeriodSeconds: 2 failureThreshold: 5 @@ -166865,7 +171802,6 @@ components: restartPolicy: restartPolicy - resourceName: resourceName restartPolicy: restartPolicy - stdinOnce: true envFrom: - configMapRef: name: name @@ -166881,12 +171817,6 @@ components: secretRef: name: name optional: true - initContainers: - - volumeDevices: - - devicePath: devicePath - name: name - - devicePath: devicePath - name: name image: image imagePullPolicy: imagePullPolicy livenessProbe: @@ -166916,8 +171846,6 @@ components: value: value - name: name value: value - stdin: true - terminationMessagePolicy: terminationMessagePolicy terminationMessagePath: terminationMessagePath workingDir: workingDir resources: @@ -166928,9 +171856,87 @@ components: name: name requests: {} limits: {} + env: + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + restartPolicy: restartPolicy + command: + - command + - command + args: + - args + - args + name: name + tty: true + stdinOnce: true + initContainers: + - volumeDevices: + - devicePath: devicePath + name: name + - devicePath: devicePath + name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + stdin: true + terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -166986,43 +171992,6 @@ components: value: value - name: name value: value - env: - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath ports: - protocol: protocol hostIP: hostIP @@ -167034,10 +172003,6 @@ components: name: name containerPort: 7 hostPort: 1 - restartPolicy: restartPolicy - command: - - command - - command volumeMounts: - mountPath: mountPath mountPropagation: mountPropagation @@ -167053,9 +172018,6 @@ components: subPath: subPath recursiveReadOnly: recursiveReadOnly subPathExpr: subPathExpr - args: - - args - - args lifecycle: postStart: sleep: @@ -167098,8 +172060,6 @@ components: - name: name value: value stopSignal: stopSignal - name: name - tty: true readinessProbe: terminationGracePeriodSeconds: 2 failureThreshold: 5 @@ -167132,7 +172092,6 @@ components: restartPolicy: restartPolicy - resourceName: resourceName restartPolicy: restartPolicy - stdinOnce: true envFrom: - configMapRef: name: name @@ -167148,11 +172107,6 @@ components: secretRef: name: name optional: true - - volumeDevices: - - devicePath: devicePath - name: name - - devicePath: devicePath - name: name image: image imagePullPolicy: imagePullPolicy livenessProbe: @@ -167182,8 +172136,6 @@ components: value: value - name: name value: value - stdin: true - terminationMessagePolicy: terminationMessagePolicy terminationMessagePath: terminationMessagePath workingDir: workingDir resources: @@ -167194,9 +172146,86 @@ components: name: name requests: {} limits: {} + env: + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + restartPolicy: restartPolicy + command: + - command + - command + args: + - args + - args + name: name + tty: true + stdinOnce: true + - volumeDevices: + - devicePath: devicePath + name: name + - devicePath: devicePath + name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + stdin: true + terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -167252,43 +172281,6 @@ components: value: value - name: name value: value - env: - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath ports: - protocol: protocol hostIP: hostIP @@ -167300,10 +172292,6 @@ components: name: name containerPort: 7 hostPort: 1 - restartPolicy: restartPolicy - command: - - command - - command volumeMounts: - mountPath: mountPath mountPropagation: mountPropagation @@ -167319,9 +172307,6 @@ components: subPath: subPath recursiveReadOnly: recursiveReadOnly subPathExpr: subPathExpr - args: - - args - - args lifecycle: postStart: sleep: @@ -167364,8 +172349,6 @@ components: - name: name value: value stopSignal: stopSignal - name: name - tty: true readinessProbe: terminationGracePeriodSeconds: 2 failureThreshold: 5 @@ -167398,7 +172381,6 @@ components: restartPolicy: restartPolicy - resourceName: resourceName restartPolicy: restartPolicy - stdinOnce: true envFrom: - configMapRef: name: name @@ -167414,6 +172396,102 @@ components: secretRef: name: name optional: true + image: image + imagePullPolicy: imagePullPolicy + livenessProbe: + terminationGracePeriodSeconds: 2 + failureThreshold: 5 + periodSeconds: 9 + tcpSocket: + port: port + host: host + timeoutSeconds: 4 + successThreshold: 3 + initialDelaySeconds: 7 + exec: + command: + - command + - command + grpc: + port: 2 + service: service + httpGet: + path: path + scheme: scheme + port: port + host: host + httpHeaders: + - name: name + value: value + - name: name + value: value + terminationMessagePath: terminationMessagePath + workingDir: workingDir + resources: + claims: + - request: request + name: name + - request: request + name: name + requests: {} + limits: {} + env: + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + restartPolicy: restartPolicy + command: + - command + - command + args: + - args + - args + name: name + tty: true + stdinOnce: true affinity: nodeAffinity: requiredDuringSchedulingIgnoredDuringExecution: @@ -168104,6 +173182,7 @@ components: - conditionType: conditionType - conditionType: conditionType serviceAccountName: serviceAccountName + hostnameOverride: hostnameOverride imagePullSecrets: - name: name - name: name @@ -168126,17 +173205,17 @@ components: appArmorProfile: localhostProfile: localhostProfile type: type - fsGroup: 7 + fsGroup: 1 fsGroupChangePolicy: fsGroupChangePolicy seLinuxChangePolicy: seLinuxChangePolicy - runAsGroup: 1 + runAsGroup: 4 runAsNonRoot: true sysctls: - name: name value: value - name: name value: value - runAsUser: 4 + runAsUser: 5 seccompProfile: localhostProfile: localhostProfile type: type @@ -168146,8 +173225,8 @@ components: hostProcess: true gmsaCredentialSpecName: gmsaCredentialSpecName supplementalGroups: - - 5 - - 5 + - 9 + - 9 supplementalGroupsPolicy: supplementalGroupsPolicy preemptionPolicy: preemptionPolicy nodeSelector: @@ -168156,12 +173235,12 @@ components: runtimeClassName: runtimeClassName tolerations: - effect: effect - tolerationSeconds: 9 + tolerationSeconds: 6 value: value key: key operator: operator - effect: effect - tolerationSeconds: 9 + tolerationSeconds: 6 value: value key: key operator: operator @@ -168180,7 +173259,7 @@ components: topologySpreadConstraints: - nodeTaintsPolicy: nodeTaintsPolicy whenUnsatisfiable: whenUnsatisfiable - maxSkew: 6 + maxSkew: 8 nodeAffinityPolicy: nodeAffinityPolicy labelSelector: matchExpressions: @@ -168196,14 +173275,14 @@ components: operator: operator matchLabels: key: matchLabels - minDomains: 8 + minDomains: 9 topologyKey: topologyKey matchLabelKeys: - matchLabelKeys - matchLabelKeys - nodeTaintsPolicy: nodeTaintsPolicy whenUnsatisfiable: whenUnsatisfiable - maxSkew: 6 + maxSkew: 8 nodeAffinityPolicy: nodeAffinityPolicy labelSelector: matchExpressions: @@ -168219,7 +173298,7 @@ components: operator: operator matchLabels: key: matchLabels - minDomains: 8 + minDomains: 9 topologyKey: topologyKey matchLabelKeys: - matchLabelKeys @@ -168328,20 +173407,20 @@ components: volumeMode: volumeMode secret: secretName: secretName - defaultMode: 3 + defaultMode: 7 optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key projected: sources: - downwardAPI: items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -168350,7 +173429,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -168363,26 +173442,33 @@ components: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key + podCertificate: + certificateChainPath: certificateChainPath + keyPath: keyPath + maxExpirationSeconds: 3 + keyType: keyType + credentialBundlePath: credentialBundlePath + signerName: signerName secret: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key serviceAccountToken: path: path audience: audience - expirationSeconds: 6 + expirationSeconds: 3 clusterTrustBundle: path: path labelSelector: @@ -168404,7 +173490,7 @@ components: signerName: signerName - downwardAPI: items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -168413,7 +173499,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -168426,26 +173512,33 @@ components: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key + podCertificate: + certificateChainPath: certificateChainPath + keyPath: keyPath + maxExpirationSeconds: 3 + keyType: keyType + credentialBundlePath: credentialBundlePath + signerName: signerName secret: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key serviceAccountToken: path: path audience: audience - expirationSeconds: 6 + expirationSeconds: 3 clusterTrustBundle: path: path labelSelector: @@ -168465,7 +173558,7 @@ components: name: name optional: true signerName: signerName - defaultMode: 5 + defaultMode: 6 cephfs: path: path secretRef: @@ -168520,9 +173613,9 @@ components: readOnly: true fsType: fsType downwardAPI: - defaultMode: 6 + defaultMode: 1 items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -168531,7 +173624,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -168541,7 +173634,7 @@ components: apiVersion: apiVersion fieldPath: fieldPath awsElasticBlockStore: - partition: 9 + partition: 6 volumeID: volumeID readOnly: true fsType: fsType @@ -168551,7 +173644,7 @@ components: iscsi: chapAuthSession: true iscsiInterface: iscsiInterface - lun: 6 + lun: 5 chapAuthDiscovery: true iqn: iqn portals: @@ -168576,14 +173669,14 @@ components: - monitors - monitors configMap: - defaultMode: 6 + defaultMode: 3 name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key storageos: @@ -168623,7 +173716,7 @@ components: volumePath: volumePath fsType: fsType fc: - lun: 2 + lun: 6 targetWWNs: - targetWWNs - targetWWNs @@ -168738,20 +173831,20 @@ components: volumeMode: volumeMode secret: secretName: secretName - defaultMode: 3 + defaultMode: 7 optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key projected: sources: - downwardAPI: items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -168760,7 +173853,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -168773,26 +173866,33 @@ components: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key + podCertificate: + certificateChainPath: certificateChainPath + keyPath: keyPath + maxExpirationSeconds: 3 + keyType: keyType + credentialBundlePath: credentialBundlePath + signerName: signerName secret: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key serviceAccountToken: path: path audience: audience - expirationSeconds: 6 + expirationSeconds: 3 clusterTrustBundle: path: path labelSelector: @@ -168814,7 +173914,7 @@ components: signerName: signerName - downwardAPI: items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -168823,7 +173923,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -168836,26 +173936,33 @@ components: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key + podCertificate: + certificateChainPath: certificateChainPath + keyPath: keyPath + maxExpirationSeconds: 3 + keyType: keyType + credentialBundlePath: credentialBundlePath + signerName: signerName secret: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key serviceAccountToken: path: path audience: audience - expirationSeconds: 6 + expirationSeconds: 3 clusterTrustBundle: path: path labelSelector: @@ -168875,7 +173982,7 @@ components: name: name optional: true signerName: signerName - defaultMode: 5 + defaultMode: 6 cephfs: path: path secretRef: @@ -168930,9 +174037,9 @@ components: readOnly: true fsType: fsType downwardAPI: - defaultMode: 6 + defaultMode: 1 items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -168941,7 +174048,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -168951,7 +174058,7 @@ components: apiVersion: apiVersion fieldPath: fieldPath awsElasticBlockStore: - partition: 9 + partition: 6 volumeID: volumeID readOnly: true fsType: fsType @@ -168961,7 +174068,7 @@ components: iscsi: chapAuthSession: true iscsiInterface: iscsiInterface - lun: 6 + lun: 5 chapAuthDiscovery: true iqn: iqn portals: @@ -168986,14 +174093,14 @@ components: - monitors - monitors configMap: - defaultMode: 6 + defaultMode: 3 name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key storageos: @@ -169033,7 +174140,7 @@ components: volumePath: volumePath fsType: fsType fc: - lun: 2 + lun: 6 targetWWNs: - targetWWNs - targetWWNs @@ -169059,11 +174166,24 @@ components: name: name - devicePath: devicePath name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator stdin: true terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -169293,6 +174413,11 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key - name: name value: value valueFrom: @@ -169311,6 +174436,11 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key restartPolicy: restartPolicy command: - command @@ -169326,11 +174456,24 @@ components: name: name - devicePath: devicePath name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator stdin: true terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -169560,6 +174703,11 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key - name: name value: value valueFrom: @@ -169578,6 +174726,11 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key restartPolicy: restartPolicy command: - command @@ -169589,7 +174742,7 @@ components: tty: true stdinOnce: true serviceAccount: serviceAccount - priority: 6 + priority: 7 restartPolicy: restartPolicy shareProcessNamespace: true hostUsers: true @@ -169607,50 +174760,24 @@ components: name: name - devicePath: devicePath name: name - image: image - imagePullPolicy: imagePullPolicy - livenessProbe: - terminationGracePeriodSeconds: 2 - failureThreshold: 5 - periodSeconds: 9 - tcpSocket: - port: port - host: host - timeoutSeconds: 4 - successThreshold: 3 - initialDelaySeconds: 7 - exec: - command: - - command - - command - grpc: - port: 2 - service: service - httpGet: - path: path - scheme: scheme - port: port - host: host - httpHeaders: - - name: name - value: value - - name: name - value: value + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator stdin: true terminationMessagePolicy: terminationMessagePolicy - terminationMessagePath: terminationMessagePath - workingDir: workingDir - resources: - claims: - - request: request - name: name - - request: request - name: name - requests: {} - limits: {} securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -169706,43 +174833,6 @@ components: value: value - name: name value: value - env: - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath ports: - protocol: protocol hostIP: hostIP @@ -169754,10 +174844,6 @@ components: name: name containerPort: 7 hostPort: 1 - restartPolicy: restartPolicy - command: - - command - - command volumeMounts: - mountPath: mountPath mountPropagation: mountPropagation @@ -169773,9 +174859,6 @@ components: subPath: subPath recursiveReadOnly: recursiveReadOnly subPathExpr: subPathExpr - args: - - args - - args lifecycle: postStart: sleep: @@ -169818,8 +174901,6 @@ components: - name: name value: value stopSignal: stopSignal - name: name - tty: true readinessProbe: terminationGracePeriodSeconds: 2 failureThreshold: 5 @@ -169852,7 +174933,6 @@ components: restartPolicy: restartPolicy - resourceName: resourceName restartPolicy: restartPolicy - stdinOnce: true envFrom: - configMapRef: name: name @@ -169868,11 +174948,6 @@ components: secretRef: name: name optional: true - - volumeDevices: - - devicePath: devicePath - name: name - - devicePath: devicePath - name: name image: image imagePullPolicy: imagePullPolicy livenessProbe: @@ -169902,8 +174977,6 @@ components: value: value - name: name value: value - stdin: true - terminationMessagePolicy: terminationMessagePolicy terminationMessagePath: terminationMessagePath workingDir: workingDir resources: @@ -169914,9 +174987,86 @@ components: name: name requests: {} limits: {} + env: + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + restartPolicy: restartPolicy + command: + - command + - command + args: + - args + - args + name: name + tty: true + stdinOnce: true + - volumeDevices: + - devicePath: devicePath + name: name + - devicePath: devicePath + name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + stdin: true + terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -169972,43 +175122,6 @@ components: value: value - name: name value: value - env: - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath ports: - protocol: protocol hostIP: hostIP @@ -170020,10 +175133,6 @@ components: name: name containerPort: 7 hostPort: 1 - restartPolicy: restartPolicy - command: - - command - - command volumeMounts: - mountPath: mountPath mountPropagation: mountPropagation @@ -170039,9 +175148,6 @@ components: subPath: subPath recursiveReadOnly: recursiveReadOnly subPathExpr: subPathExpr - args: - - args - - args lifecycle: postStart: sleep: @@ -170084,8 +175190,6 @@ components: - name: name value: value stopSignal: stopSignal - name: name - tty: true readinessProbe: terminationGracePeriodSeconds: 2 failureThreshold: 5 @@ -170118,7 +175222,6 @@ components: restartPolicy: restartPolicy - resourceName: resourceName restartPolicy: restartPolicy - stdinOnce: true envFrom: - configMapRef: name: name @@ -170134,12 +175237,6 @@ components: secretRef: name: name optional: true - initContainers: - - volumeDevices: - - devicePath: devicePath - name: name - - devicePath: devicePath - name: name image: image imagePullPolicy: imagePullPolicy livenessProbe: @@ -170169,8 +175266,6 @@ components: value: value - name: name value: value - stdin: true - terminationMessagePolicy: terminationMessagePolicy terminationMessagePath: terminationMessagePath workingDir: workingDir resources: @@ -170181,9 +175276,87 @@ components: name: name requests: {} limits: {} + env: + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + restartPolicy: restartPolicy + command: + - command + - command + args: + - args + - args + name: name + tty: true + stdinOnce: true + initContainers: + - volumeDevices: + - devicePath: devicePath + name: name + - devicePath: devicePath + name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + stdin: true + terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -170239,43 +175412,6 @@ components: value: value - name: name value: value - env: - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath ports: - protocol: protocol hostIP: hostIP @@ -170287,10 +175423,6 @@ components: name: name containerPort: 7 hostPort: 1 - restartPolicy: restartPolicy - command: - - command - - command volumeMounts: - mountPath: mountPath mountPropagation: mountPropagation @@ -170306,9 +175438,6 @@ components: subPath: subPath recursiveReadOnly: recursiveReadOnly subPathExpr: subPathExpr - args: - - args - - args lifecycle: postStart: sleep: @@ -170351,8 +175480,6 @@ components: - name: name value: value stopSignal: stopSignal - name: name - tty: true readinessProbe: terminationGracePeriodSeconds: 2 failureThreshold: 5 @@ -170385,7 +175512,6 @@ components: restartPolicy: restartPolicy - resourceName: resourceName restartPolicy: restartPolicy - stdinOnce: true envFrom: - configMapRef: name: name @@ -170401,11 +175527,6 @@ components: secretRef: name: name optional: true - - volumeDevices: - - devicePath: devicePath - name: name - - devicePath: devicePath - name: name image: image imagePullPolicy: imagePullPolicy livenessProbe: @@ -170435,8 +175556,6 @@ components: value: value - name: name value: value - stdin: true - terminationMessagePolicy: terminationMessagePolicy terminationMessagePath: terminationMessagePath workingDir: workingDir resources: @@ -170447,9 +175566,86 @@ components: name: name requests: {} limits: {} + env: + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + restartPolicy: restartPolicy + command: + - command + - command + args: + - args + - args + name: name + tty: true + stdinOnce: true + - volumeDevices: + - devicePath: devicePath + name: name + - devicePath: devicePath + name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + stdin: true + terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -170505,43 +175701,6 @@ components: value: value - name: name value: value - env: - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath ports: - protocol: protocol hostIP: hostIP @@ -170553,10 +175712,6 @@ components: name: name containerPort: 7 hostPort: 1 - restartPolicy: restartPolicy - command: - - command - - command volumeMounts: - mountPath: mountPath mountPropagation: mountPropagation @@ -170572,9 +175727,6 @@ components: subPath: subPath recursiveReadOnly: recursiveReadOnly subPathExpr: subPathExpr - args: - - args - - args lifecycle: postStart: sleep: @@ -170617,8 +175769,6 @@ components: - name: name value: value stopSignal: stopSignal - name: name - tty: true readinessProbe: terminationGracePeriodSeconds: 2 failureThreshold: 5 @@ -170651,7 +175801,6 @@ components: restartPolicy: restartPolicy - resourceName: resourceName restartPolicy: restartPolicy - stdinOnce: true envFrom: - configMapRef: name: name @@ -170667,6 +175816,102 @@ components: secretRef: name: name optional: true + image: image + imagePullPolicy: imagePullPolicy + livenessProbe: + terminationGracePeriodSeconds: 2 + failureThreshold: 5 + periodSeconds: 9 + tcpSocket: + port: port + host: host + timeoutSeconds: 4 + successThreshold: 3 + initialDelaySeconds: 7 + exec: + command: + - command + - command + grpc: + port: 2 + service: service + httpGet: + path: path + scheme: scheme + port: port + host: host + httpHeaders: + - name: name + value: value + - name: name + value: value + terminationMessagePath: terminationMessagePath + workingDir: workingDir + resources: + claims: + - request: request + name: name + - request: request + name: name + requests: {} + limits: {} + env: + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + restartPolicy: restartPolicy + command: + - command + - command + args: + - args + - args + name: name + tty: true + stdinOnce: true affinity: nodeAffinity: requiredDuringSchedulingIgnoredDuringExecution: @@ -171288,6 +176533,7 @@ components: - conditionType: conditionType - conditionType: conditionType serviceAccountName: serviceAccountName + hostnameOverride: hostnameOverride imagePullSecrets: - name: name - name: name @@ -171310,17 +176556,17 @@ components: appArmorProfile: localhostProfile: localhostProfile type: type - fsGroup: 7 + fsGroup: 1 fsGroupChangePolicy: fsGroupChangePolicy seLinuxChangePolicy: seLinuxChangePolicy - runAsGroup: 1 + runAsGroup: 4 runAsNonRoot: true sysctls: - name: name value: value - name: name value: value - runAsUser: 4 + runAsUser: 5 seccompProfile: localhostProfile: localhostProfile type: type @@ -171330,8 +176576,8 @@ components: hostProcess: true gmsaCredentialSpecName: gmsaCredentialSpecName supplementalGroups: - - 5 - - 5 + - 9 + - 9 supplementalGroupsPolicy: supplementalGroupsPolicy preemptionPolicy: preemptionPolicy nodeSelector: @@ -171340,12 +176586,12 @@ components: runtimeClassName: runtimeClassName tolerations: - effect: effect - tolerationSeconds: 9 + tolerationSeconds: 6 value: value key: key operator: operator - effect: effect - tolerationSeconds: 9 + tolerationSeconds: 6 value: value key: key operator: operator @@ -171364,7 +176610,7 @@ components: topologySpreadConstraints: - nodeTaintsPolicy: nodeTaintsPolicy whenUnsatisfiable: whenUnsatisfiable - maxSkew: 6 + maxSkew: 8 nodeAffinityPolicy: nodeAffinityPolicy labelSelector: matchExpressions: @@ -171380,14 +176626,14 @@ components: operator: operator matchLabels: key: matchLabels - minDomains: 8 + minDomains: 9 topologyKey: topologyKey matchLabelKeys: - matchLabelKeys - matchLabelKeys - nodeTaintsPolicy: nodeTaintsPolicy whenUnsatisfiable: whenUnsatisfiable - maxSkew: 6 + maxSkew: 8 nodeAffinityPolicy: nodeAffinityPolicy labelSelector: matchExpressions: @@ -171403,7 +176649,7 @@ components: operator: operator matchLabels: key: matchLabels - minDomains: 8 + minDomains: 9 topologyKey: topologyKey matchLabelKeys: - matchLabelKeys @@ -171512,20 +176758,20 @@ components: volumeMode: volumeMode secret: secretName: secretName - defaultMode: 3 + defaultMode: 7 optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key projected: sources: - downwardAPI: items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -171534,7 +176780,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -171547,26 +176793,33 @@ components: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key + podCertificate: + certificateChainPath: certificateChainPath + keyPath: keyPath + maxExpirationSeconds: 3 + keyType: keyType + credentialBundlePath: credentialBundlePath + signerName: signerName secret: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key serviceAccountToken: path: path audience: audience - expirationSeconds: 6 + expirationSeconds: 3 clusterTrustBundle: path: path labelSelector: @@ -171588,7 +176841,7 @@ components: signerName: signerName - downwardAPI: items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -171597,7 +176850,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -171610,26 +176863,33 @@ components: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key + podCertificate: + certificateChainPath: certificateChainPath + keyPath: keyPath + maxExpirationSeconds: 3 + keyType: keyType + credentialBundlePath: credentialBundlePath + signerName: signerName secret: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key serviceAccountToken: path: path audience: audience - expirationSeconds: 6 + expirationSeconds: 3 clusterTrustBundle: path: path labelSelector: @@ -171649,7 +176909,7 @@ components: name: name optional: true signerName: signerName - defaultMode: 5 + defaultMode: 6 cephfs: path: path secretRef: @@ -171704,9 +176964,9 @@ components: readOnly: true fsType: fsType downwardAPI: - defaultMode: 6 + defaultMode: 1 items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -171715,7 +176975,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -171725,7 +176985,7 @@ components: apiVersion: apiVersion fieldPath: fieldPath awsElasticBlockStore: - partition: 9 + partition: 6 volumeID: volumeID readOnly: true fsType: fsType @@ -171735,7 +176995,7 @@ components: iscsi: chapAuthSession: true iscsiInterface: iscsiInterface - lun: 6 + lun: 5 chapAuthDiscovery: true iqn: iqn portals: @@ -171760,14 +177020,14 @@ components: - monitors - monitors configMap: - defaultMode: 6 + defaultMode: 3 name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key storageos: @@ -171807,7 +177067,7 @@ components: volumePath: volumePath fsType: fsType fc: - lun: 2 + lun: 6 targetWWNs: - targetWWNs - targetWWNs @@ -171922,20 +177182,20 @@ components: volumeMode: volumeMode secret: secretName: secretName - defaultMode: 3 + defaultMode: 7 optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key projected: sources: - downwardAPI: items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -171944,7 +177204,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -171957,26 +177217,33 @@ components: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key + podCertificate: + certificateChainPath: certificateChainPath + keyPath: keyPath + maxExpirationSeconds: 3 + keyType: keyType + credentialBundlePath: credentialBundlePath + signerName: signerName secret: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key serviceAccountToken: path: path audience: audience - expirationSeconds: 6 + expirationSeconds: 3 clusterTrustBundle: path: path labelSelector: @@ -171998,7 +177265,7 @@ components: signerName: signerName - downwardAPI: items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -172007,7 +177274,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -172020,26 +177287,33 @@ components: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key + podCertificate: + certificateChainPath: certificateChainPath + keyPath: keyPath + maxExpirationSeconds: 3 + keyType: keyType + credentialBundlePath: credentialBundlePath + signerName: signerName secret: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key serviceAccountToken: path: path audience: audience - expirationSeconds: 6 + expirationSeconds: 3 clusterTrustBundle: path: path labelSelector: @@ -172059,7 +177333,7 @@ components: name: name optional: true signerName: signerName - defaultMode: 5 + defaultMode: 6 cephfs: path: path secretRef: @@ -172114,9 +177388,9 @@ components: readOnly: true fsType: fsType downwardAPI: - defaultMode: 6 + defaultMode: 1 items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -172125,7 +177399,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -172135,7 +177409,7 @@ components: apiVersion: apiVersion fieldPath: fieldPath awsElasticBlockStore: - partition: 9 + partition: 6 volumeID: volumeID readOnly: true fsType: fsType @@ -172145,7 +177419,7 @@ components: iscsi: chapAuthSession: true iscsiInterface: iscsiInterface - lun: 6 + lun: 5 chapAuthDiscovery: true iqn: iqn portals: @@ -172170,14 +177444,14 @@ components: - monitors - monitors configMap: - defaultMode: 6 + defaultMode: 3 name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key storageos: @@ -172217,7 +177491,7 @@ components: volumePath: volumePath fsType: fsType fc: - lun: 2 + lun: 6 targetWWNs: - targetWWNs - targetWWNs @@ -172243,11 +177517,24 @@ components: name: name - devicePath: devicePath name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator stdin: true terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -172477,6 +177764,11 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key - name: name value: value valueFrom: @@ -172495,6 +177787,11 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key restartPolicy: restartPolicy command: - command @@ -172510,11 +177807,24 @@ components: name: name - devicePath: devicePath name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator stdin: true terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -172744,6 +178054,11 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key - name: name value: value valueFrom: @@ -172762,6 +178077,11 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key restartPolicy: restartPolicy command: - command @@ -172773,7 +178093,7 @@ components: tty: true stdinOnce: true serviceAccount: serviceAccount - priority: 6 + priority: 7 restartPolicy: restartPolicy shareProcessNamespace: true hostUsers: true @@ -172791,50 +178111,24 @@ components: name: name - devicePath: devicePath name: name - image: image - imagePullPolicy: imagePullPolicy - livenessProbe: - terminationGracePeriodSeconds: 2 - failureThreshold: 5 - periodSeconds: 9 - tcpSocket: - port: port - host: host - timeoutSeconds: 4 - successThreshold: 3 - initialDelaySeconds: 7 - exec: - command: - - command - - command - grpc: - port: 2 - service: service - httpGet: - path: path - scheme: scheme - port: port - host: host - httpHeaders: - - name: name - value: value - - name: name - value: value + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator stdin: true terminationMessagePolicy: terminationMessagePolicy - terminationMessagePath: terminationMessagePath - workingDir: workingDir - resources: - claims: - - request: request - name: name - - request: request - name: name - requests: {} - limits: {} securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -172890,43 +178184,6 @@ components: value: value - name: name value: value - env: - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath ports: - protocol: protocol hostIP: hostIP @@ -172938,10 +178195,6 @@ components: name: name containerPort: 7 hostPort: 1 - restartPolicy: restartPolicy - command: - - command - - command volumeMounts: - mountPath: mountPath mountPropagation: mountPropagation @@ -172957,9 +178210,6 @@ components: subPath: subPath recursiveReadOnly: recursiveReadOnly subPathExpr: subPathExpr - args: - - args - - args lifecycle: postStart: sleep: @@ -173002,8 +178252,6 @@ components: - name: name value: value stopSignal: stopSignal - name: name - tty: true readinessProbe: terminationGracePeriodSeconds: 2 failureThreshold: 5 @@ -173036,7 +178284,6 @@ components: restartPolicy: restartPolicy - resourceName: resourceName restartPolicy: restartPolicy - stdinOnce: true envFrom: - configMapRef: name: name @@ -173052,11 +178299,6 @@ components: secretRef: name: name optional: true - - volumeDevices: - - devicePath: devicePath - name: name - - devicePath: devicePath - name: name image: image imagePullPolicy: imagePullPolicy livenessProbe: @@ -173086,8 +178328,6 @@ components: value: value - name: name value: value - stdin: true - terminationMessagePolicy: terminationMessagePolicy terminationMessagePath: terminationMessagePath workingDir: workingDir resources: @@ -173098,9 +178338,86 @@ components: name: name requests: {} limits: {} + env: + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + restartPolicy: restartPolicy + command: + - command + - command + args: + - args + - args + name: name + tty: true + stdinOnce: true + - volumeDevices: + - devicePath: devicePath + name: name + - devicePath: devicePath + name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + stdin: true + terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -173156,43 +178473,6 @@ components: value: value - name: name value: value - env: - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath ports: - protocol: protocol hostIP: hostIP @@ -173204,10 +178484,6 @@ components: name: name containerPort: 7 hostPort: 1 - restartPolicy: restartPolicy - command: - - command - - command volumeMounts: - mountPath: mountPath mountPropagation: mountPropagation @@ -173223,9 +178499,6 @@ components: subPath: subPath recursiveReadOnly: recursiveReadOnly subPathExpr: subPathExpr - args: - - args - - args lifecycle: postStart: sleep: @@ -173268,8 +178541,6 @@ components: - name: name value: value stopSignal: stopSignal - name: name - tty: true readinessProbe: terminationGracePeriodSeconds: 2 failureThreshold: 5 @@ -173302,7 +178573,6 @@ components: restartPolicy: restartPolicy - resourceName: resourceName restartPolicy: restartPolicy - stdinOnce: true envFrom: - configMapRef: name: name @@ -173318,12 +178588,6 @@ components: secretRef: name: name optional: true - initContainers: - - volumeDevices: - - devicePath: devicePath - name: name - - devicePath: devicePath - name: name image: image imagePullPolicy: imagePullPolicy livenessProbe: @@ -173353,8 +178617,6 @@ components: value: value - name: name value: value - stdin: true - terminationMessagePolicy: terminationMessagePolicy terminationMessagePath: terminationMessagePath workingDir: workingDir resources: @@ -173365,9 +178627,87 @@ components: name: name requests: {} limits: {} + env: + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + restartPolicy: restartPolicy + command: + - command + - command + args: + - args + - args + name: name + tty: true + stdinOnce: true + initContainers: + - volumeDevices: + - devicePath: devicePath + name: name + - devicePath: devicePath + name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + stdin: true + terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -173423,43 +178763,6 @@ components: value: value - name: name value: value - env: - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath ports: - protocol: protocol hostIP: hostIP @@ -173471,10 +178774,6 @@ components: name: name containerPort: 7 hostPort: 1 - restartPolicy: restartPolicy - command: - - command - - command volumeMounts: - mountPath: mountPath mountPropagation: mountPropagation @@ -173490,9 +178789,6 @@ components: subPath: subPath recursiveReadOnly: recursiveReadOnly subPathExpr: subPathExpr - args: - - args - - args lifecycle: postStart: sleep: @@ -173535,8 +178831,6 @@ components: - name: name value: value stopSignal: stopSignal - name: name - tty: true readinessProbe: terminationGracePeriodSeconds: 2 failureThreshold: 5 @@ -173569,7 +178863,6 @@ components: restartPolicy: restartPolicy - resourceName: resourceName restartPolicy: restartPolicy - stdinOnce: true envFrom: - configMapRef: name: name @@ -173585,11 +178878,6 @@ components: secretRef: name: name optional: true - - volumeDevices: - - devicePath: devicePath - name: name - - devicePath: devicePath - name: name image: image imagePullPolicy: imagePullPolicy livenessProbe: @@ -173619,8 +178907,6 @@ components: value: value - name: name value: value - stdin: true - terminationMessagePolicy: terminationMessagePolicy terminationMessagePath: terminationMessagePath workingDir: workingDir resources: @@ -173631,9 +178917,86 @@ components: name: name requests: {} limits: {} + env: + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + restartPolicy: restartPolicy + command: + - command + - command + args: + - args + - args + name: name + tty: true + stdinOnce: true + - volumeDevices: + - devicePath: devicePath + name: name + - devicePath: devicePath + name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + stdin: true + terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -173689,43 +179052,6 @@ components: value: value - name: name value: value - env: - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath ports: - protocol: protocol hostIP: hostIP @@ -173737,10 +179063,6 @@ components: name: name containerPort: 7 hostPort: 1 - restartPolicy: restartPolicy - command: - - command - - command volumeMounts: - mountPath: mountPath mountPropagation: mountPropagation @@ -173756,9 +179078,6 @@ components: subPath: subPath recursiveReadOnly: recursiveReadOnly subPathExpr: subPathExpr - args: - - args - - args lifecycle: postStart: sleep: @@ -173801,8 +179120,6 @@ components: - name: name value: value stopSignal: stopSignal - name: name - tty: true readinessProbe: terminationGracePeriodSeconds: 2 failureThreshold: 5 @@ -173835,7 +179152,6 @@ components: restartPolicy: restartPolicy - resourceName: resourceName restartPolicy: restartPolicy - stdinOnce: true envFrom: - configMapRef: name: name @@ -173851,6 +179167,102 @@ components: secretRef: name: name optional: true + image: image + imagePullPolicy: imagePullPolicy + livenessProbe: + terminationGracePeriodSeconds: 2 + failureThreshold: 5 + periodSeconds: 9 + tcpSocket: + port: port + host: host + timeoutSeconds: 4 + successThreshold: 3 + initialDelaySeconds: 7 + exec: + command: + - command + - command + grpc: + port: 2 + service: service + httpGet: + path: path + scheme: scheme + port: port + host: host + httpHeaders: + - name: name + value: value + - name: name + value: value + terminationMessagePath: terminationMessagePath + workingDir: workingDir + resources: + claims: + - request: request + name: name + - request: request + name: name + requests: {} + limits: {} + env: + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + restartPolicy: restartPolicy + command: + - command + - command + args: + - args + - args + name: name + tty: true + stdinOnce: true affinity: nodeAffinity: requiredDuringSchedulingIgnoredDuringExecution: @@ -174453,6 +179865,7 @@ components: - conditionType: conditionType - conditionType: conditionType serviceAccountName: serviceAccountName + hostnameOverride: hostnameOverride imagePullSecrets: - name: name - name: name @@ -174475,17 +179888,17 @@ components: appArmorProfile: localhostProfile: localhostProfile type: type - fsGroup: 7 + fsGroup: 1 fsGroupChangePolicy: fsGroupChangePolicy seLinuxChangePolicy: seLinuxChangePolicy - runAsGroup: 1 + runAsGroup: 4 runAsNonRoot: true sysctls: - name: name value: value - name: name value: value - runAsUser: 4 + runAsUser: 5 seccompProfile: localhostProfile: localhostProfile type: type @@ -174495,8 +179908,8 @@ components: hostProcess: true gmsaCredentialSpecName: gmsaCredentialSpecName supplementalGroups: - - 5 - - 5 + - 9 + - 9 supplementalGroupsPolicy: supplementalGroupsPolicy preemptionPolicy: preemptionPolicy nodeSelector: @@ -174505,12 +179918,12 @@ components: runtimeClassName: runtimeClassName tolerations: - effect: effect - tolerationSeconds: 9 + tolerationSeconds: 6 value: value key: key operator: operator - effect: effect - tolerationSeconds: 9 + tolerationSeconds: 6 value: value key: key operator: operator @@ -174529,7 +179942,7 @@ components: topologySpreadConstraints: - nodeTaintsPolicy: nodeTaintsPolicy whenUnsatisfiable: whenUnsatisfiable - maxSkew: 6 + maxSkew: 8 nodeAffinityPolicy: nodeAffinityPolicy labelSelector: matchExpressions: @@ -174545,14 +179958,14 @@ components: operator: operator matchLabels: key: matchLabels - minDomains: 8 + minDomains: 9 topologyKey: topologyKey matchLabelKeys: - matchLabelKeys - matchLabelKeys - nodeTaintsPolicy: nodeTaintsPolicy whenUnsatisfiable: whenUnsatisfiable - maxSkew: 6 + maxSkew: 8 nodeAffinityPolicy: nodeAffinityPolicy labelSelector: matchExpressions: @@ -174568,7 +179981,7 @@ components: operator: operator matchLabels: key: matchLabels - minDomains: 8 + minDomains: 9 topologyKey: topologyKey matchLabelKeys: - matchLabelKeys @@ -174677,20 +180090,20 @@ components: volumeMode: volumeMode secret: secretName: secretName - defaultMode: 3 + defaultMode: 7 optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key projected: sources: - downwardAPI: items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -174699,7 +180112,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -174712,26 +180125,33 @@ components: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key + podCertificate: + certificateChainPath: certificateChainPath + keyPath: keyPath + maxExpirationSeconds: 3 + keyType: keyType + credentialBundlePath: credentialBundlePath + signerName: signerName secret: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key serviceAccountToken: path: path audience: audience - expirationSeconds: 6 + expirationSeconds: 3 clusterTrustBundle: path: path labelSelector: @@ -174753,7 +180173,7 @@ components: signerName: signerName - downwardAPI: items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -174762,7 +180182,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -174775,26 +180195,33 @@ components: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key + podCertificate: + certificateChainPath: certificateChainPath + keyPath: keyPath + maxExpirationSeconds: 3 + keyType: keyType + credentialBundlePath: credentialBundlePath + signerName: signerName secret: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key serviceAccountToken: path: path audience: audience - expirationSeconds: 6 + expirationSeconds: 3 clusterTrustBundle: path: path labelSelector: @@ -174814,7 +180241,7 @@ components: name: name optional: true signerName: signerName - defaultMode: 5 + defaultMode: 6 cephfs: path: path secretRef: @@ -174869,9 +180296,9 @@ components: readOnly: true fsType: fsType downwardAPI: - defaultMode: 6 + defaultMode: 1 items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -174880,7 +180307,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -174890,7 +180317,7 @@ components: apiVersion: apiVersion fieldPath: fieldPath awsElasticBlockStore: - partition: 9 + partition: 6 volumeID: volumeID readOnly: true fsType: fsType @@ -174900,7 +180327,7 @@ components: iscsi: chapAuthSession: true iscsiInterface: iscsiInterface - lun: 6 + lun: 5 chapAuthDiscovery: true iqn: iqn portals: @@ -174925,14 +180352,14 @@ components: - monitors - monitors configMap: - defaultMode: 6 + defaultMode: 3 name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key storageos: @@ -174972,7 +180399,7 @@ components: volumePath: volumePath fsType: fsType fc: - lun: 2 + lun: 6 targetWWNs: - targetWWNs - targetWWNs @@ -175087,20 +180514,20 @@ components: volumeMode: volumeMode secret: secretName: secretName - defaultMode: 3 + defaultMode: 7 optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key projected: sources: - downwardAPI: items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -175109,7 +180536,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -175122,26 +180549,33 @@ components: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key + podCertificate: + certificateChainPath: certificateChainPath + keyPath: keyPath + maxExpirationSeconds: 3 + keyType: keyType + credentialBundlePath: credentialBundlePath + signerName: signerName secret: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key serviceAccountToken: path: path audience: audience - expirationSeconds: 6 + expirationSeconds: 3 clusterTrustBundle: path: path labelSelector: @@ -175163,7 +180597,7 @@ components: signerName: signerName - downwardAPI: items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -175172,7 +180606,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -175185,26 +180619,33 @@ components: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key + podCertificate: + certificateChainPath: certificateChainPath + keyPath: keyPath + maxExpirationSeconds: 3 + keyType: keyType + credentialBundlePath: credentialBundlePath + signerName: signerName secret: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key serviceAccountToken: path: path audience: audience - expirationSeconds: 6 + expirationSeconds: 3 clusterTrustBundle: path: path labelSelector: @@ -175224,7 +180665,7 @@ components: name: name optional: true signerName: signerName - defaultMode: 5 + defaultMode: 6 cephfs: path: path secretRef: @@ -175279,9 +180720,9 @@ components: readOnly: true fsType: fsType downwardAPI: - defaultMode: 6 + defaultMode: 1 items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -175290,7 +180731,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -175300,7 +180741,7 @@ components: apiVersion: apiVersion fieldPath: fieldPath awsElasticBlockStore: - partition: 9 + partition: 6 volumeID: volumeID readOnly: true fsType: fsType @@ -175310,7 +180751,7 @@ components: iscsi: chapAuthSession: true iscsiInterface: iscsiInterface - lun: 6 + lun: 5 chapAuthDiscovery: true iqn: iqn portals: @@ -175335,14 +180776,14 @@ components: - monitors - monitors configMap: - defaultMode: 6 + defaultMode: 3 name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key storageos: @@ -175382,7 +180823,7 @@ components: volumePath: volumePath fsType: fsType fc: - lun: 2 + lun: 6 targetWWNs: - targetWWNs - targetWWNs @@ -175408,11 +180849,24 @@ components: name: name - devicePath: devicePath name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator stdin: true terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -175642,6 +181096,11 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key - name: name value: value valueFrom: @@ -175660,6 +181119,11 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key restartPolicy: restartPolicy command: - command @@ -175675,11 +181139,24 @@ components: name: name - devicePath: devicePath name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator stdin: true terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -175909,6 +181386,11 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key - name: name value: value valueFrom: @@ -175927,6 +181409,11 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key restartPolicy: restartPolicy command: - command @@ -175938,7 +181425,7 @@ components: tty: true stdinOnce: true serviceAccount: serviceAccount - priority: 6 + priority: 7 restartPolicy: restartPolicy shareProcessNamespace: true hostUsers: true @@ -175956,50 +181443,24 @@ components: name: name - devicePath: devicePath name: name - image: image - imagePullPolicy: imagePullPolicy - livenessProbe: - terminationGracePeriodSeconds: 2 - failureThreshold: 5 - periodSeconds: 9 - tcpSocket: - port: port - host: host - timeoutSeconds: 4 - successThreshold: 3 - initialDelaySeconds: 7 - exec: - command: - - command - - command - grpc: - port: 2 - service: service - httpGet: - path: path - scheme: scheme - port: port - host: host - httpHeaders: - - name: name - value: value - - name: name - value: value + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator stdin: true terminationMessagePolicy: terminationMessagePolicy - terminationMessagePath: terminationMessagePath - workingDir: workingDir - resources: - claims: - - request: request - name: name - - request: request - name: name - requests: {} - limits: {} securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -176055,43 +181516,6 @@ components: value: value - name: name value: value - env: - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath ports: - protocol: protocol hostIP: hostIP @@ -176103,10 +181527,6 @@ components: name: name containerPort: 7 hostPort: 1 - restartPolicy: restartPolicy - command: - - command - - command volumeMounts: - mountPath: mountPath mountPropagation: mountPropagation @@ -176122,9 +181542,6 @@ components: subPath: subPath recursiveReadOnly: recursiveReadOnly subPathExpr: subPathExpr - args: - - args - - args lifecycle: postStart: sleep: @@ -176167,8 +181584,6 @@ components: - name: name value: value stopSignal: stopSignal - name: name - tty: true readinessProbe: terminationGracePeriodSeconds: 2 failureThreshold: 5 @@ -176201,7 +181616,6 @@ components: restartPolicy: restartPolicy - resourceName: resourceName restartPolicy: restartPolicy - stdinOnce: true envFrom: - configMapRef: name: name @@ -176217,11 +181631,6 @@ components: secretRef: name: name optional: true - - volumeDevices: - - devicePath: devicePath - name: name - - devicePath: devicePath - name: name image: image imagePullPolicy: imagePullPolicy livenessProbe: @@ -176251,8 +181660,6 @@ components: value: value - name: name value: value - stdin: true - terminationMessagePolicy: terminationMessagePolicy terminationMessagePath: terminationMessagePath workingDir: workingDir resources: @@ -176263,9 +181670,86 @@ components: name: name requests: {} limits: {} + env: + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + restartPolicy: restartPolicy + command: + - command + - command + args: + - args + - args + name: name + tty: true + stdinOnce: true + - volumeDevices: + - devicePath: devicePath + name: name + - devicePath: devicePath + name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + stdin: true + terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -176321,43 +181805,6 @@ components: value: value - name: name value: value - env: - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath ports: - protocol: protocol hostIP: hostIP @@ -176369,10 +181816,6 @@ components: name: name containerPort: 7 hostPort: 1 - restartPolicy: restartPolicy - command: - - command - - command volumeMounts: - mountPath: mountPath mountPropagation: mountPropagation @@ -176388,9 +181831,6 @@ components: subPath: subPath recursiveReadOnly: recursiveReadOnly subPathExpr: subPathExpr - args: - - args - - args lifecycle: postStart: sleep: @@ -176433,8 +181873,6 @@ components: - name: name value: value stopSignal: stopSignal - name: name - tty: true readinessProbe: terminationGracePeriodSeconds: 2 failureThreshold: 5 @@ -176467,7 +181905,6 @@ components: restartPolicy: restartPolicy - resourceName: resourceName restartPolicy: restartPolicy - stdinOnce: true envFrom: - configMapRef: name: name @@ -176483,12 +181920,6 @@ components: secretRef: name: name optional: true - initContainers: - - volumeDevices: - - devicePath: devicePath - name: name - - devicePath: devicePath - name: name image: image imagePullPolicy: imagePullPolicy livenessProbe: @@ -176518,8 +181949,6 @@ components: value: value - name: name value: value - stdin: true - terminationMessagePolicy: terminationMessagePolicy terminationMessagePath: terminationMessagePath workingDir: workingDir resources: @@ -176530,9 +181959,87 @@ components: name: name requests: {} limits: {} + env: + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + restartPolicy: restartPolicy + command: + - command + - command + args: + - args + - args + name: name + tty: true + stdinOnce: true + initContainers: + - volumeDevices: + - devicePath: devicePath + name: name + - devicePath: devicePath + name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + stdin: true + terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -176588,43 +182095,6 @@ components: value: value - name: name value: value - env: - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath ports: - protocol: protocol hostIP: hostIP @@ -176636,10 +182106,6 @@ components: name: name containerPort: 7 hostPort: 1 - restartPolicy: restartPolicy - command: - - command - - command volumeMounts: - mountPath: mountPath mountPropagation: mountPropagation @@ -176655,9 +182121,6 @@ components: subPath: subPath recursiveReadOnly: recursiveReadOnly subPathExpr: subPathExpr - args: - - args - - args lifecycle: postStart: sleep: @@ -176700,8 +182163,6 @@ components: - name: name value: value stopSignal: stopSignal - name: name - tty: true readinessProbe: terminationGracePeriodSeconds: 2 failureThreshold: 5 @@ -176734,7 +182195,6 @@ components: restartPolicy: restartPolicy - resourceName: resourceName restartPolicy: restartPolicy - stdinOnce: true envFrom: - configMapRef: name: name @@ -176750,11 +182210,6 @@ components: secretRef: name: name optional: true - - volumeDevices: - - devicePath: devicePath - name: name - - devicePath: devicePath - name: name image: image imagePullPolicy: imagePullPolicy livenessProbe: @@ -176784,8 +182239,6 @@ components: value: value - name: name value: value - stdin: true - terminationMessagePolicy: terminationMessagePolicy terminationMessagePath: terminationMessagePath workingDir: workingDir resources: @@ -176796,9 +182249,86 @@ components: name: name requests: {} limits: {} + env: + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + restartPolicy: restartPolicy + command: + - command + - command + args: + - args + - args + name: name + tty: true + stdinOnce: true + - volumeDevices: + - devicePath: devicePath + name: name + - devicePath: devicePath + name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + stdin: true + terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -176854,43 +182384,6 @@ components: value: value - name: name value: value - env: - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath ports: - protocol: protocol hostIP: hostIP @@ -176902,10 +182395,6 @@ components: name: name containerPort: 7 hostPort: 1 - restartPolicy: restartPolicy - command: - - command - - command volumeMounts: - mountPath: mountPath mountPropagation: mountPropagation @@ -176921,9 +182410,6 @@ components: subPath: subPath recursiveReadOnly: recursiveReadOnly subPathExpr: subPathExpr - args: - - args - - args lifecycle: postStart: sleep: @@ -176966,8 +182452,6 @@ components: - name: name value: value stopSignal: stopSignal - name: name - tty: true readinessProbe: terminationGracePeriodSeconds: 2 failureThreshold: 5 @@ -177000,7 +182484,6 @@ components: restartPolicy: restartPolicy - resourceName: resourceName restartPolicy: restartPolicy - stdinOnce: true envFrom: - configMapRef: name: name @@ -177016,6 +182499,102 @@ components: secretRef: name: name optional: true + image: image + imagePullPolicy: imagePullPolicy + livenessProbe: + terminationGracePeriodSeconds: 2 + failureThreshold: 5 + periodSeconds: 9 + tcpSocket: + port: port + host: host + timeoutSeconds: 4 + successThreshold: 3 + initialDelaySeconds: 7 + exec: + command: + - command + - command + grpc: + port: 2 + service: service + httpGet: + path: path + scheme: scheme + port: port + host: host + httpHeaders: + - name: name + value: value + - name: name + value: value + terminationMessagePath: terminationMessagePath + workingDir: workingDir + resources: + claims: + - request: request + name: name + - request: request + name: name + requests: {} + limits: {} + env: + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + restartPolicy: restartPolicy + command: + - command + - command + args: + - args + - args + name: name + tty: true + stdinOnce: true affinity: nodeAffinity: requiredDuringSchedulingIgnoredDuringExecution: @@ -177500,7 +183079,8 @@ components: type: integer backoffLimit: description: Specifies the number of retries before marking this job failed. - Defaults to 6 + Defaults to 6, unless backoffLimitPerIndex (only Indexed Job) is specified. + When backoffLimitPerIndex is specified, backoffLimit defaults to 2147483647. format: int32 type: integer backoffLimitPerIndex: @@ -177574,7 +183154,7 @@ components: - Failed means to wait until a previously created Pod is fully terminated (has phase Failed or Succeeded) before creating a replacement Pod. - When using podFailurePolicy, Failed is the the only allowed value. TerminatingOrFailed and Failed are allowed values when podFailurePolicy is not in use. This is an beta field. To use this, enable the JobPodReplacementPolicy feature toggle. This is on by default. + When using podFailurePolicy, Failed is the the only allowed value. TerminatingOrFailed and Failed are allowed values when podFailurePolicy is not in use. type: string selector: $ref: '#/components/schemas/v1.LabelSelector' @@ -177835,6 +183415,7 @@ components: - conditionType: conditionType - conditionType: conditionType serviceAccountName: serviceAccountName + hostnameOverride: hostnameOverride imagePullSecrets: - name: name - name: name @@ -177857,17 +183438,17 @@ components: appArmorProfile: localhostProfile: localhostProfile type: type - fsGroup: 7 + fsGroup: 1 fsGroupChangePolicy: fsGroupChangePolicy seLinuxChangePolicy: seLinuxChangePolicy - runAsGroup: 1 + runAsGroup: 4 runAsNonRoot: true sysctls: - name: name value: value - name: name value: value - runAsUser: 4 + runAsUser: 5 seccompProfile: localhostProfile: localhostProfile type: type @@ -177877,8 +183458,8 @@ components: hostProcess: true gmsaCredentialSpecName: gmsaCredentialSpecName supplementalGroups: - - 5 - - 5 + - 9 + - 9 supplementalGroupsPolicy: supplementalGroupsPolicy preemptionPolicy: preemptionPolicy nodeSelector: @@ -177887,12 +183468,12 @@ components: runtimeClassName: runtimeClassName tolerations: - effect: effect - tolerationSeconds: 9 + tolerationSeconds: 6 value: value key: key operator: operator - effect: effect - tolerationSeconds: 9 + tolerationSeconds: 6 value: value key: key operator: operator @@ -177911,7 +183492,7 @@ components: topologySpreadConstraints: - nodeTaintsPolicy: nodeTaintsPolicy whenUnsatisfiable: whenUnsatisfiable - maxSkew: 6 + maxSkew: 8 nodeAffinityPolicy: nodeAffinityPolicy labelSelector: matchExpressions: @@ -177927,14 +183508,14 @@ components: operator: operator matchLabels: key: matchLabels - minDomains: 8 + minDomains: 9 topologyKey: topologyKey matchLabelKeys: - matchLabelKeys - matchLabelKeys - nodeTaintsPolicy: nodeTaintsPolicy whenUnsatisfiable: whenUnsatisfiable - maxSkew: 6 + maxSkew: 8 nodeAffinityPolicy: nodeAffinityPolicy labelSelector: matchExpressions: @@ -177950,7 +183531,7 @@ components: operator: operator matchLabels: key: matchLabels - minDomains: 8 + minDomains: 9 topologyKey: topologyKey matchLabelKeys: - matchLabelKeys @@ -178059,20 +183640,20 @@ components: volumeMode: volumeMode secret: secretName: secretName - defaultMode: 3 + defaultMode: 7 optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key projected: sources: - downwardAPI: items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -178081,7 +183662,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -178094,26 +183675,33 @@ components: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key + podCertificate: + certificateChainPath: certificateChainPath + keyPath: keyPath + maxExpirationSeconds: 3 + keyType: keyType + credentialBundlePath: credentialBundlePath + signerName: signerName secret: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key serviceAccountToken: path: path audience: audience - expirationSeconds: 6 + expirationSeconds: 3 clusterTrustBundle: path: path labelSelector: @@ -178135,7 +183723,7 @@ components: signerName: signerName - downwardAPI: items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -178144,7 +183732,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -178157,26 +183745,33 @@ components: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key + podCertificate: + certificateChainPath: certificateChainPath + keyPath: keyPath + maxExpirationSeconds: 3 + keyType: keyType + credentialBundlePath: credentialBundlePath + signerName: signerName secret: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key serviceAccountToken: path: path audience: audience - expirationSeconds: 6 + expirationSeconds: 3 clusterTrustBundle: path: path labelSelector: @@ -178196,7 +183791,7 @@ components: name: name optional: true signerName: signerName - defaultMode: 5 + defaultMode: 6 cephfs: path: path secretRef: @@ -178251,9 +183846,9 @@ components: readOnly: true fsType: fsType downwardAPI: - defaultMode: 6 + defaultMode: 1 items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -178262,7 +183857,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -178272,7 +183867,7 @@ components: apiVersion: apiVersion fieldPath: fieldPath awsElasticBlockStore: - partition: 9 + partition: 6 volumeID: volumeID readOnly: true fsType: fsType @@ -178282,7 +183877,7 @@ components: iscsi: chapAuthSession: true iscsiInterface: iscsiInterface - lun: 6 + lun: 5 chapAuthDiscovery: true iqn: iqn portals: @@ -178307,14 +183902,14 @@ components: - monitors - monitors configMap: - defaultMode: 6 + defaultMode: 3 name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key storageos: @@ -178354,7 +183949,7 @@ components: volumePath: volumePath fsType: fsType fc: - lun: 2 + lun: 6 targetWWNs: - targetWWNs - targetWWNs @@ -178469,20 +184064,20 @@ components: volumeMode: volumeMode secret: secretName: secretName - defaultMode: 3 + defaultMode: 7 optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key projected: sources: - downwardAPI: items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -178491,7 +184086,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -178504,26 +184099,33 @@ components: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key + podCertificate: + certificateChainPath: certificateChainPath + keyPath: keyPath + maxExpirationSeconds: 3 + keyType: keyType + credentialBundlePath: credentialBundlePath + signerName: signerName secret: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key serviceAccountToken: path: path audience: audience - expirationSeconds: 6 + expirationSeconds: 3 clusterTrustBundle: path: path labelSelector: @@ -178545,7 +184147,7 @@ components: signerName: signerName - downwardAPI: items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -178554,7 +184156,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -178567,26 +184169,33 @@ components: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key + podCertificate: + certificateChainPath: certificateChainPath + keyPath: keyPath + maxExpirationSeconds: 3 + keyType: keyType + credentialBundlePath: credentialBundlePath + signerName: signerName secret: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key serviceAccountToken: path: path audience: audience - expirationSeconds: 6 + expirationSeconds: 3 clusterTrustBundle: path: path labelSelector: @@ -178606,7 +184215,7 @@ components: name: name optional: true signerName: signerName - defaultMode: 5 + defaultMode: 6 cephfs: path: path secretRef: @@ -178661,9 +184270,9 @@ components: readOnly: true fsType: fsType downwardAPI: - defaultMode: 6 + defaultMode: 1 items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -178672,7 +184281,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -178682,7 +184291,7 @@ components: apiVersion: apiVersion fieldPath: fieldPath awsElasticBlockStore: - partition: 9 + partition: 6 volumeID: volumeID readOnly: true fsType: fsType @@ -178692,7 +184301,7 @@ components: iscsi: chapAuthSession: true iscsiInterface: iscsiInterface - lun: 6 + lun: 5 chapAuthDiscovery: true iqn: iqn portals: @@ -178717,14 +184326,14 @@ components: - monitors - monitors configMap: - defaultMode: 6 + defaultMode: 3 name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key storageos: @@ -178764,7 +184373,7 @@ components: volumePath: volumePath fsType: fsType fc: - lun: 2 + lun: 6 targetWWNs: - targetWWNs - targetWWNs @@ -178790,11 +184399,24 @@ components: name: name - devicePath: devicePath name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator stdin: true terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -179024,6 +184646,11 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key - name: name value: value valueFrom: @@ -179042,6 +184669,11 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key restartPolicy: restartPolicy command: - command @@ -179057,11 +184689,24 @@ components: name: name - devicePath: devicePath name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator stdin: true terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -179291,6 +184936,11 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key - name: name value: value valueFrom: @@ -179309,6 +184959,11 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key restartPolicy: restartPolicy command: - command @@ -179320,7 +184975,7 @@ components: tty: true stdinOnce: true serviceAccount: serviceAccount - priority: 6 + priority: 7 restartPolicy: restartPolicy shareProcessNamespace: true hostUsers: true @@ -179338,50 +184993,24 @@ components: name: name - devicePath: devicePath name: name - image: image - imagePullPolicy: imagePullPolicy - livenessProbe: - terminationGracePeriodSeconds: 2 - failureThreshold: 5 - periodSeconds: 9 - tcpSocket: - port: port - host: host - timeoutSeconds: 4 - successThreshold: 3 - initialDelaySeconds: 7 - exec: - command: - - command - - command - grpc: - port: 2 - service: service - httpGet: - path: path - scheme: scheme - port: port - host: host - httpHeaders: - - name: name - value: value - - name: name - value: value + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator stdin: true terminationMessagePolicy: terminationMessagePolicy - terminationMessagePath: terminationMessagePath - workingDir: workingDir - resources: - claims: - - request: request - name: name - - request: request - name: name - requests: {} - limits: {} securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -179437,43 +185066,6 @@ components: value: value - name: name value: value - env: - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath ports: - protocol: protocol hostIP: hostIP @@ -179485,10 +185077,6 @@ components: name: name containerPort: 7 hostPort: 1 - restartPolicy: restartPolicy - command: - - command - - command volumeMounts: - mountPath: mountPath mountPropagation: mountPropagation @@ -179504,9 +185092,6 @@ components: subPath: subPath recursiveReadOnly: recursiveReadOnly subPathExpr: subPathExpr - args: - - args - - args lifecycle: postStart: sleep: @@ -179549,8 +185134,6 @@ components: - name: name value: value stopSignal: stopSignal - name: name - tty: true readinessProbe: terminationGracePeriodSeconds: 2 failureThreshold: 5 @@ -179583,7 +185166,6 @@ components: restartPolicy: restartPolicy - resourceName: resourceName restartPolicy: restartPolicy - stdinOnce: true envFrom: - configMapRef: name: name @@ -179599,11 +185181,6 @@ components: secretRef: name: name optional: true - - volumeDevices: - - devicePath: devicePath - name: name - - devicePath: devicePath - name: name image: image imagePullPolicy: imagePullPolicy livenessProbe: @@ -179633,8 +185210,6 @@ components: value: value - name: name value: value - stdin: true - terminationMessagePolicy: terminationMessagePolicy terminationMessagePath: terminationMessagePath workingDir: workingDir resources: @@ -179645,9 +185220,86 @@ components: name: name requests: {} limits: {} + env: + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + restartPolicy: restartPolicy + command: + - command + - command + args: + - args + - args + name: name + tty: true + stdinOnce: true + - volumeDevices: + - devicePath: devicePath + name: name + - devicePath: devicePath + name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + stdin: true + terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -179703,43 +185355,6 @@ components: value: value - name: name value: value - env: - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath ports: - protocol: protocol hostIP: hostIP @@ -179751,10 +185366,6 @@ components: name: name containerPort: 7 hostPort: 1 - restartPolicy: restartPolicy - command: - - command - - command volumeMounts: - mountPath: mountPath mountPropagation: mountPropagation @@ -179770,9 +185381,6 @@ components: subPath: subPath recursiveReadOnly: recursiveReadOnly subPathExpr: subPathExpr - args: - - args - - args lifecycle: postStart: sleep: @@ -179815,8 +185423,6 @@ components: - name: name value: value stopSignal: stopSignal - name: name - tty: true readinessProbe: terminationGracePeriodSeconds: 2 failureThreshold: 5 @@ -179849,7 +185455,6 @@ components: restartPolicy: restartPolicy - resourceName: resourceName restartPolicy: restartPolicy - stdinOnce: true envFrom: - configMapRef: name: name @@ -179865,12 +185470,6 @@ components: secretRef: name: name optional: true - initContainers: - - volumeDevices: - - devicePath: devicePath - name: name - - devicePath: devicePath - name: name image: image imagePullPolicy: imagePullPolicy livenessProbe: @@ -179900,8 +185499,6 @@ components: value: value - name: name value: value - stdin: true - terminationMessagePolicy: terminationMessagePolicy terminationMessagePath: terminationMessagePath workingDir: workingDir resources: @@ -179912,9 +185509,87 @@ components: name: name requests: {} limits: {} + env: + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + restartPolicy: restartPolicy + command: + - command + - command + args: + - args + - args + name: name + tty: true + stdinOnce: true + initContainers: + - volumeDevices: + - devicePath: devicePath + name: name + - devicePath: devicePath + name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + stdin: true + terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -179970,43 +185645,6 @@ components: value: value - name: name value: value - env: - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath ports: - protocol: protocol hostIP: hostIP @@ -180018,10 +185656,6 @@ components: name: name containerPort: 7 hostPort: 1 - restartPolicy: restartPolicy - command: - - command - - command volumeMounts: - mountPath: mountPath mountPropagation: mountPropagation @@ -180037,9 +185671,6 @@ components: subPath: subPath recursiveReadOnly: recursiveReadOnly subPathExpr: subPathExpr - args: - - args - - args lifecycle: postStart: sleep: @@ -180082,8 +185713,6 @@ components: - name: name value: value stopSignal: stopSignal - name: name - tty: true readinessProbe: terminationGracePeriodSeconds: 2 failureThreshold: 5 @@ -180116,7 +185745,6 @@ components: restartPolicy: restartPolicy - resourceName: resourceName restartPolicy: restartPolicy - stdinOnce: true envFrom: - configMapRef: name: name @@ -180132,11 +185760,6 @@ components: secretRef: name: name optional: true - - volumeDevices: - - devicePath: devicePath - name: name - - devicePath: devicePath - name: name image: image imagePullPolicy: imagePullPolicy livenessProbe: @@ -180166,8 +185789,6 @@ components: value: value - name: name value: value - stdin: true - terminationMessagePolicy: terminationMessagePolicy terminationMessagePath: terminationMessagePath workingDir: workingDir resources: @@ -180178,9 +185799,86 @@ components: name: name requests: {} limits: {} + env: + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + restartPolicy: restartPolicy + command: + - command + - command + args: + - args + - args + name: name + tty: true + stdinOnce: true + - volumeDevices: + - devicePath: devicePath + name: name + - devicePath: devicePath + name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + stdin: true + terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -180236,43 +185934,6 @@ components: value: value - name: name value: value - env: - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath ports: - protocol: protocol hostIP: hostIP @@ -180284,10 +185945,6 @@ components: name: name containerPort: 7 hostPort: 1 - restartPolicy: restartPolicy - command: - - command - - command volumeMounts: - mountPath: mountPath mountPropagation: mountPropagation @@ -180303,9 +185960,6 @@ components: subPath: subPath recursiveReadOnly: recursiveReadOnly subPathExpr: subPathExpr - args: - - args - - args lifecycle: postStart: sleep: @@ -180348,8 +186002,6 @@ components: - name: name value: value stopSignal: stopSignal - name: name - tty: true readinessProbe: terminationGracePeriodSeconds: 2 failureThreshold: 5 @@ -180382,7 +186034,6 @@ components: restartPolicy: restartPolicy - resourceName: resourceName restartPolicy: restartPolicy - stdinOnce: true envFrom: - configMapRef: name: name @@ -180398,6 +186049,102 @@ components: secretRef: name: name optional: true + image: image + imagePullPolicy: imagePullPolicy + livenessProbe: + terminationGracePeriodSeconds: 2 + failureThreshold: 5 + periodSeconds: 9 + tcpSocket: + port: port + host: host + timeoutSeconds: 4 + successThreshold: 3 + initialDelaySeconds: 7 + exec: + command: + - command + - command + grpc: + port: 2 + service: service + httpGet: + path: path + scheme: scheme + port: port + host: host + httpHeaders: + - name: name + value: value + - name: name + value: value + terminationMessagePath: terminationMessagePath + workingDir: workingDir + resources: + claims: + - request: request + name: name + - request: request + name: name + requests: {} + limits: {} + env: + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + restartPolicy: restartPolicy + command: + - command + - command + args: + - args + - args + name: name + tty: true + stdinOnce: true affinity: nodeAffinity: requiredDuringSchedulingIgnoredDuringExecution: @@ -181045,9 +186792,9 @@ components: rules: description: rules represents the list of alternative rules for the declaring the Jobs as successful before `.status.succeeded >= .spec.completions`. - Once any of the rules are met, the "SucceededCriteriaMet" condition is - added, and the lingering pods are removed. The terminal state for such - a Job has the "Complete" condition. Additionally, these rules are evaluated + Once any of the rules are met, the "SuccessCriteriaMet" condition is added, + and the lingering pods are removed. The terminal state for such a Job + has the "Complete" condition. Additionally, these rules are evaluated in order; Once the Job meets one of the rules, other rules are ignored. At most 20 elements are allowed. items: @@ -181903,13 +187650,11 @@ components: required: - trustBundle type: object - v1beta1.ClusterTrustBundle: + v1alpha1.PodCertificateRequest: description: |- - ClusterTrustBundle is a cluster-scoped container for X.509 trust anchors (root certificates). + PodCertificateRequest encodes a pod requesting a certificate from a given signer. - ClusterTrustBundle objects are considered to be readable by any authenticated user in the cluster, because they can be mounted by pods using the `clusterTrustBundle` projection. All service accounts have read access to ClusterTrustBundles by default. Users who only have namespace-level access to a cluster can read ClusterTrustBundles by impersonating a serviceaccount that they have access to. - - It can be optionally associated with a particular assigner, in which case it contains one valid set of trust anchors for that signer. Signers may have multiple associated ClusterTrustBundles; each is an independent set of trust anchors for that signer. Admission control is used to enforce that only users with permissions on the signer can create or modify the corresponding bundle. + Kubelets use this API to implement podCertificate projected volumes example: metadata: generation: 6 @@ -181960,8 +187705,34 @@ components: apiVersion: apiVersion kind: kind spec: - trustBundle: trustBundle + nodeName: nodeName + pkixPublicKey: pkixPublicKey + podUID: podUID + serviceAccountName: serviceAccountName + maxExpirationSeconds: 0 + nodeUID: nodeUID + podName: podName + proofOfPossession: proofOfPossession + serviceAccountUID: serviceAccountUID signerName: signerName + status: + notAfter: 2000-01-23T04:56:07.000+00:00 + certificateChain: certificateChain + beginRefreshAt: 2000-01-23T04:56:07.000+00:00 + conditions: + - reason: reason + lastTransitionTime: 2000-01-23T04:56:07.000+00:00 + message: message + type: type + observedGeneration: 5 + status: status + - reason: reason + lastTransitionTime: 2000-01-23T04:56:07.000+00:00 + message: message + type: type + observedGeneration: 5 + status: status + notBefore: 2000-01-23T04:56:07.000+00:00 properties: apiVersion: description: 'APIVersion defines the versioned schema of this representation @@ -181976,18 +187747,21 @@ components: metadata: $ref: '#/components/schemas/v1.ObjectMeta' spec: - $ref: '#/components/schemas/v1beta1.ClusterTrustBundleSpec' + $ref: '#/components/schemas/v1alpha1.PodCertificateRequestSpec' + status: + $ref: '#/components/schemas/v1alpha1.PodCertificateRequestStatus' required: - spec type: object x-kubernetes-group-version-kind: - group: certificates.k8s.io - kind: ClusterTrustBundle - version: v1beta1 + kind: PodCertificateRequest + version: v1alpha1 x-implements: - io.kubernetes.client.common.KubernetesObject - v1beta1.ClusterTrustBundleList: - description: ClusterTrustBundleList is a collection of ClusterTrustBundle objects + v1alpha1.PodCertificateRequestList: + description: PodCertificateRequestList is a collection of PodCertificateRequest + objects example: metadata: remainingItemCount: 1 @@ -182046,8 +187820,34 @@ components: apiVersion: apiVersion kind: kind spec: - trustBundle: trustBundle + nodeName: nodeName + pkixPublicKey: pkixPublicKey + podUID: podUID + serviceAccountName: serviceAccountName + maxExpirationSeconds: 0 + nodeUID: nodeUID + podName: podName + proofOfPossession: proofOfPossession + serviceAccountUID: serviceAccountUID signerName: signerName + status: + notAfter: 2000-01-23T04:56:07.000+00:00 + certificateChain: certificateChain + beginRefreshAt: 2000-01-23T04:56:07.000+00:00 + conditions: + - reason: reason + lastTransitionTime: 2000-01-23T04:56:07.000+00:00 + message: message + type: type + observedGeneration: 5 + status: status + - reason: reason + lastTransitionTime: 2000-01-23T04:56:07.000+00:00 + message: message + type: type + observedGeneration: 5 + status: status + notBefore: 2000-01-23T04:56:07.000+00:00 - metadata: generation: 6 finalizers: @@ -182097,8 +187897,34 @@ components: apiVersion: apiVersion kind: kind spec: - trustBundle: trustBundle + nodeName: nodeName + pkixPublicKey: pkixPublicKey + podUID: podUID + serviceAccountName: serviceAccountName + maxExpirationSeconds: 0 + nodeUID: nodeUID + podName: podName + proofOfPossession: proofOfPossession + serviceAccountUID: serviceAccountUID signerName: signerName + status: + notAfter: 2000-01-23T04:56:07.000+00:00 + certificateChain: certificateChain + beginRefreshAt: 2000-01-23T04:56:07.000+00:00 + conditions: + - reason: reason + lastTransitionTime: 2000-01-23T04:56:07.000+00:00 + message: message + type: type + observedGeneration: 5 + status: status + - reason: reason + lastTransitionTime: 2000-01-23T04:56:07.000+00:00 + message: message + type: type + observedGeneration: 5 + status: status + notBefore: 2000-01-23T04:56:07.000+00:00 properties: apiVersion: description: 'APIVersion defines the versioned schema of this representation @@ -182106,9 +187932,9 @@ components: internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources' type: string items: - description: items is a collection of ClusterTrustBundle objects + description: items is a collection of PodCertificateRequest objects items: - $ref: '#/components/schemas/v1beta1.ClusterTrustBundle' + $ref: '#/components/schemas/v1alpha1.PodCertificateRequest' type: array kind: description: 'Kind is a string value representing the REST resource this @@ -182122,41 +187948,180 @@ components: type: object x-kubernetes-group-version-kind: - group: certificates.k8s.io - kind: ClusterTrustBundleList - version: v1beta1 + kind: PodCertificateRequestList + version: v1alpha1 x-implements: - io.kubernetes.client.common.KubernetesListObject - v1beta1.ClusterTrustBundleSpec: - description: ClusterTrustBundleSpec contains the signer and trust anchors. + v1alpha1.PodCertificateRequestSpec: + description: PodCertificateRequestSpec describes the certificate request. All + fields are immutable after creation. example: - trustBundle: trustBundle + nodeName: nodeName + pkixPublicKey: pkixPublicKey + podUID: podUID + serviceAccountName: serviceAccountName + maxExpirationSeconds: 0 + nodeUID: nodeUID + podName: podName + proofOfPossession: proofOfPossession + serviceAccountUID: serviceAccountUID signerName: signerName properties: - signerName: + maxExpirationSeconds: description: |- - signerName indicates the associated signer, if any. + maxExpirationSeconds is the maximum lifetime permitted for the certificate. - In order to create or update a ClusterTrustBundle that sets signerName, you must have the following cluster-scoped permission: group=certificates.k8s.io resource=signers resourceName= verb=attest. + If omitted, kube-apiserver will set it to 86400(24 hours). kube-apiserver will reject values shorter than 3600 (1 hour). The maximum allowable value is 7862400 (91 days). - If signerName is not empty, then the ClusterTrustBundle object must be named with the signer name as a prefix (translating slashes to colons). For example, for the signer name `example.com/foo`, valid ClusterTrustBundle object names include `example.com:foo:abc` and `example.com:foo:v1`. + The signer implementation is then free to issue a certificate with any lifetime *shorter* than MaxExpirationSeconds, but no shorter than 3600 seconds (1 hour). This constraint is enforced by kube-apiserver. `kubernetes.io` signers will never issue certificates with a lifetime longer than 24 hours. + format: int32 + type: integer + nodeName: + description: nodeName is the name of the node the pod is assigned to. + type: string + nodeUID: + description: nodeUID is the UID of the node the pod is assigned to. + type: string + pkixPublicKey: + description: |- + pkixPublicKey is the PKIX-serialized public key the signer will issue the certificate to. - If signerName is empty, then the ClusterTrustBundle object's name must not have such a prefix. + The key must be one of RSA3072, RSA4096, ECDSAP256, ECDSAP384, ECDSAP521, or ED25519. Note that this list may be expanded in the future. - List/watch requests for ClusterTrustBundles can filter on this field using a `spec.signerName=NAME` field selector. + Signer implementations do not need to support all key types supported by kube-apiserver and kubelet. If a signer does not support the key type used for a given PodCertificateRequest, it must deny the request by setting a status.conditions entry with a type of "Denied" and a reason of "UnsupportedKeyType". It may also suggest a key type that it does support in the message field. + format: byte + pattern: ^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$ type: string - trustBundle: + podName: + description: podName is the name of the pod into which the certificate will + be mounted. + type: string + podUID: + description: podUID is the UID of the pod into which the certificate will + be mounted. + type: string + proofOfPossession: description: |- - trustBundle contains the individual X.509 trust anchors for this bundle, as PEM bundle of PEM-wrapped, DER-formatted X.509 certificates. + proofOfPossession proves that the requesting kubelet holds the private key corresponding to pkixPublicKey. - The data must consist only of PEM certificate blocks that parse as valid X.509 certificates. Each certificate must include a basic constraints extension with the CA bit set. The API server will reject objects that contain duplicate certificates, or that use PEM block headers. + It is contructed by signing the ASCII bytes of the pod's UID using `pkixPublicKey`. - Users of ClusterTrustBundles, including Kubelet, are free to reorder and deduplicate certificate blocks in this file according to their own logic, as well as to drop PEM block headers and inter-block data. + kube-apiserver validates the proof of possession during creation of the PodCertificateRequest. + + If the key is an RSA key, then the signature is over the ASCII bytes of the pod UID, using RSASSA-PSS from RFC 8017 (as implemented by the golang function crypto/rsa.SignPSS with nil options). + + If the key is an ECDSA key, then the signature is as described by [SEC 1, Version 2.0](https://www.secg.org/sec1-v2.pdf) (as implemented by the golang library function crypto/ecdsa.SignASN1) + + If the key is an ED25519 key, the the signature is as described by the [ED25519 Specification](https://ed25519.cr.yp.to/) (as implemented by the golang library crypto/ed25519.Sign). + format: byte + pattern: ^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$ + type: string + serviceAccountName: + description: serviceAccountName is the name of the service account the pod + is running as. + type: string + serviceAccountUID: + description: serviceAccountUID is the UID of the service account the pod + is running as. + type: string + signerName: + description: |- + signerName indicates the requested signer. + + All signer names beginning with `kubernetes.io` are reserved for use by the Kubernetes project. There is currently one well-known signer documented by the Kubernetes project, `kubernetes.io/kube-apiserver-client-pod`, which will issue client certificates understood by kube-apiserver. It is currently unimplemented. type: string required: - - trustBundle + - nodeName + - nodeUID + - pkixPublicKey + - podName + - podUID + - proofOfPossession + - serviceAccountName + - serviceAccountUID + - signerName type: object - v1.Lease: - description: Lease defines a lease concept. + v1alpha1.PodCertificateRequestStatus: + description: PodCertificateRequestStatus describes the status of the request, + and holds the certificate data if the request is issued. + example: + notAfter: 2000-01-23T04:56:07.000+00:00 + certificateChain: certificateChain + beginRefreshAt: 2000-01-23T04:56:07.000+00:00 + conditions: + - reason: reason + lastTransitionTime: 2000-01-23T04:56:07.000+00:00 + message: message + type: type + observedGeneration: 5 + status: status + - reason: reason + lastTransitionTime: 2000-01-23T04:56:07.000+00:00 + message: message + type: type + observedGeneration: 5 + status: status + notBefore: 2000-01-23T04:56:07.000+00:00 + properties: + beginRefreshAt: + description: |- + beginRefreshAt is the time at which the kubelet should begin trying to refresh the certificate. This field is set via the /status subresource, and must be set at the same time as certificateChain. Once populated, this field is immutable. + + This field is only a hint. Kubelet may start refreshing before or after this time if necessary. + format: date-time + type: string + certificateChain: + description: |- + certificateChain is populated with an issued certificate by the signer. This field is set via the /status subresource. Once populated, this field is immutable. + + If the certificate signing request is denied, a condition of type "Denied" is added and this field remains empty. If the signer cannot issue the certificate, a condition of type "Failed" is added and this field remains empty. + + Validation requirements: + 1. certificateChain must consist of one or more PEM-formatted certificates. + 2. Each entry must be a valid PEM-wrapped, DER-encoded ASN.1 Certificate as + described in section 4 of RFC5280. + + If more than one block is present, and the definition of the requested spec.signerName does not indicate otherwise, the first block is the issued certificate, and subsequent blocks should be treated as intermediate certificates and presented in TLS handshakes. When projecting the chain into a pod volume, kubelet will drop any data in-between the PEM blocks, as well as any PEM block headers. + type: string + conditions: + description: |- + conditions applied to the request. + + The types "Issued", "Denied", and "Failed" have special handling. At most one of these conditions may be present, and they must have status "True". + + If the request is denied with `Reason=UnsupportedKeyType`, the signer may suggest a key type that will work in the message field. + items: + $ref: '#/components/schemas/v1.Condition' + type: array + x-kubernetes-patch-strategy: merge + x-kubernetes-list-type: map + x-kubernetes-list-map-keys: + - type + x-kubernetes-patch-merge-key: type + notAfter: + description: notAfter is the time at which the certificate expires. The + value must be the same as the notAfter value in the leaf certificate in + certificateChain. This field is set via the /status subresource. Once + populated, it is immutable. The signer must set this field at the same + time it sets certificateChain. + format: date-time + type: string + notBefore: + description: notBefore is the time at which the certificate becomes valid. The + value must be the same as the notBefore value in the leaf certificate + in certificateChain. This field is set via the /status subresource. Once + populated, it is immutable. The signer must set this field at the same + time it sets certificateChain. + format: date-time + type: string + type: object + v1beta1.ClusterTrustBundle: + description: |- + ClusterTrustBundle is a cluster-scoped container for X.509 trust anchors (root certificates). + + ClusterTrustBundle objects are considered to be readable by any authenticated user in the cluster, because they can be mounted by pods using the `clusterTrustBundle` projection. All service accounts have read access to ClusterTrustBundles by default. Users who only have namespace-level access to a cluster can read ClusterTrustBundles by impersonating a serviceaccount that they have access to. + + It can be optionally associated with a particular assigner, in which case it contains one valid set of trust anchors for that signer. Signers may have multiple associated ClusterTrustBundles; each is an independent set of trust anchors for that signer. Admission control is used to enforce that only users with permissions on the signer can create or modify the corresponding bundle. example: metadata: generation: 6 @@ -182207,13 +188172,8 @@ components: apiVersion: apiVersion kind: kind spec: - renewTime: 2000-01-23T04:56:07.000+00:00 - leaseDurationSeconds: 0 - leaseTransitions: 6 - preferredHolder: preferredHolder - acquireTime: 2000-01-23T04:56:07.000+00:00 - strategy: strategy - holderIdentity: holderIdentity + trustBundle: trustBundle + signerName: signerName properties: apiVersion: description: 'APIVersion defines the versioned schema of this representation @@ -182228,16 +188188,18 @@ components: metadata: $ref: '#/components/schemas/v1.ObjectMeta' spec: - $ref: '#/components/schemas/v1.LeaseSpec' + $ref: '#/components/schemas/v1beta1.ClusterTrustBundleSpec' + required: + - spec type: object x-kubernetes-group-version-kind: - - group: coordination.k8s.io - kind: Lease - version: v1 + - group: certificates.k8s.io + kind: ClusterTrustBundle + version: v1beta1 x-implements: - io.kubernetes.client.common.KubernetesObject - v1.LeaseList: - description: LeaseList is a list of Lease objects. + v1beta1.ClusterTrustBundleList: + description: ClusterTrustBundleList is a collection of ClusterTrustBundle objects example: metadata: remainingItemCount: 1 @@ -182296,13 +188258,8 @@ components: apiVersion: apiVersion kind: kind spec: - renewTime: 2000-01-23T04:56:07.000+00:00 - leaseDurationSeconds: 0 - leaseTransitions: 6 - preferredHolder: preferredHolder - acquireTime: 2000-01-23T04:56:07.000+00:00 - strategy: strategy - holderIdentity: holderIdentity + trustBundle: trustBundle + signerName: signerName - metadata: generation: 6 finalizers: @@ -182352,13 +188309,8 @@ components: apiVersion: apiVersion kind: kind spec: - renewTime: 2000-01-23T04:56:07.000+00:00 - leaseDurationSeconds: 0 - leaseTransitions: 6 - preferredHolder: preferredHolder - acquireTime: 2000-01-23T04:56:07.000+00:00 - strategy: strategy - holderIdentity: holderIdentity + trustBundle: trustBundle + signerName: signerName properties: apiVersion: description: 'APIVersion defines the versioned schema of this representation @@ -182366,9 +188318,9 @@ components: internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources' type: string items: - description: items is a list of schema objects. + description: items is a collection of ClusterTrustBundle objects items: - $ref: '#/components/schemas/v1.Lease' + $ref: '#/components/schemas/v1beta1.ClusterTrustBundle' type: array kind: description: 'Kind is a string value representing the REST resource this @@ -182381,63 +188333,323 @@ components: - items type: object x-kubernetes-group-version-kind: - - group: coordination.k8s.io - kind: LeaseList - version: v1 + - group: certificates.k8s.io + kind: ClusterTrustBundleList + version: v1beta1 x-implements: - io.kubernetes.client.common.KubernetesListObject - v1.LeaseSpec: - description: LeaseSpec is a specification of a Lease. + v1beta1.ClusterTrustBundleSpec: + description: ClusterTrustBundleSpec contains the signer and trust anchors. example: - renewTime: 2000-01-23T04:56:07.000+00:00 - leaseDurationSeconds: 0 - leaseTransitions: 6 - preferredHolder: preferredHolder - acquireTime: 2000-01-23T04:56:07.000+00:00 - strategy: strategy - holderIdentity: holderIdentity + trustBundle: trustBundle + signerName: signerName properties: - acquireTime: - description: acquireTime is a time when the current lease was acquired. - format: date-time - type: string - holderIdentity: - description: holderIdentity contains the identity of the holder of a current - lease. If Coordinated Leader Election is used, the holder identity must - be equal to the elected LeaseCandidate.metadata.name field. - type: string - leaseDurationSeconds: - description: leaseDurationSeconds is a duration that candidates for a lease - need to wait to force acquire it. This is measured against the time of - last observed renewTime. - format: int32 - type: integer - leaseTransitions: - description: leaseTransitions is the number of transitions of a lease between - holders. - format: int32 - type: integer - preferredHolder: - description: PreferredHolder signals to a lease holder that the lease has - a more optimal holder and should be given up. This field can only be set - if Strategy is also set. - type: string - renewTime: - description: renewTime is a time when the current holder of a lease has - last updated the lease. - format: date-time + signerName: + description: |- + signerName indicates the associated signer, if any. + + In order to create or update a ClusterTrustBundle that sets signerName, you must have the following cluster-scoped permission: group=certificates.k8s.io resource=signers resourceName= verb=attest. + + If signerName is not empty, then the ClusterTrustBundle object must be named with the signer name as a prefix (translating slashes to colons). For example, for the signer name `example.com/foo`, valid ClusterTrustBundle object names include `example.com:foo:abc` and `example.com:foo:v1`. + + If signerName is empty, then the ClusterTrustBundle object's name must not have such a prefix. + + List/watch requests for ClusterTrustBundles can filter on this field using a `spec.signerName=NAME` field selector. type: string - strategy: - description: Strategy indicates the strategy for picking the leader for - coordinated leader election. If the field is not specified, there is no - active coordination for this lease. (Alpha) Using this field requires - the CoordinatedLeaderElection feature gate to be enabled. + trustBundle: + description: |- + trustBundle contains the individual X.509 trust anchors for this bundle, as PEM bundle of PEM-wrapped, DER-formatted X.509 certificates. + + The data must consist only of PEM certificate blocks that parse as valid X.509 certificates. Each certificate must include a basic constraints extension with the CA bit set. The API server will reject objects that contain duplicate certificates, or that use PEM block headers. + + Users of ClusterTrustBundles, including Kubelet, are free to reorder and deduplicate certificate blocks in this file according to their own logic, as well as to drop PEM block headers and inter-block data. type: string + required: + - trustBundle type: object - v1alpha2.LeaseCandidate: - description: LeaseCandidate defines a candidate for a Lease object. Candidates - are created such that coordinated leader election will pick the best leader - from the list of candidates. + v1.Lease: + description: Lease defines a lease concept. + example: + metadata: + generation: 6 + finalizers: + - finalizers + - finalizers + resourceVersion: resourceVersion + annotations: + key: annotations + generateName: generateName + deletionTimestamp: 2000-01-23T04:56:07.000+00:00 + labels: + key: labels + ownerReferences: + - uid: uid + controller: true + apiVersion: apiVersion + kind: kind + name: name + blockOwnerDeletion: true + - uid: uid + controller: true + apiVersion: apiVersion + kind: kind + name: name + blockOwnerDeletion: true + selfLink: selfLink + deletionGracePeriodSeconds: 0 + uid: uid + managedFields: + - apiVersion: apiVersion + fieldsV1: '{}' + manager: manager + subresource: subresource + time: 2000-01-23T04:56:07.000+00:00 + operation: operation + fieldsType: fieldsType + - apiVersion: apiVersion + fieldsV1: '{}' + manager: manager + subresource: subresource + time: 2000-01-23T04:56:07.000+00:00 + operation: operation + fieldsType: fieldsType + creationTimestamp: 2000-01-23T04:56:07.000+00:00 + name: name + namespace: namespace + apiVersion: apiVersion + kind: kind + spec: + renewTime: 2000-01-23T04:56:07.000+00:00 + leaseDurationSeconds: 0 + leaseTransitions: 6 + preferredHolder: preferredHolder + acquireTime: 2000-01-23T04:56:07.000+00:00 + strategy: strategy + holderIdentity: holderIdentity + properties: + apiVersion: + description: 'APIVersion defines the versioned schema of this representation + of an object. Servers should convert recognized schemas to the latest + internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources' + type: string + kind: + description: 'Kind is a string value representing the REST resource this + object represents. Servers may infer this from the endpoint the client + submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds' + type: string + metadata: + $ref: '#/components/schemas/v1.ObjectMeta' + spec: + $ref: '#/components/schemas/v1.LeaseSpec' + type: object + x-kubernetes-group-version-kind: + - group: coordination.k8s.io + kind: Lease + version: v1 + x-implements: + - io.kubernetes.client.common.KubernetesObject + v1.LeaseList: + description: LeaseList is a list of Lease objects. + example: + metadata: + remainingItemCount: 1 + continue: continue + resourceVersion: resourceVersion + selfLink: selfLink + apiVersion: apiVersion + kind: kind + items: + - metadata: + generation: 6 + finalizers: + - finalizers + - finalizers + resourceVersion: resourceVersion + annotations: + key: annotations + generateName: generateName + deletionTimestamp: 2000-01-23T04:56:07.000+00:00 + labels: + key: labels + ownerReferences: + - uid: uid + controller: true + apiVersion: apiVersion + kind: kind + name: name + blockOwnerDeletion: true + - uid: uid + controller: true + apiVersion: apiVersion + kind: kind + name: name + blockOwnerDeletion: true + selfLink: selfLink + deletionGracePeriodSeconds: 0 + uid: uid + managedFields: + - apiVersion: apiVersion + fieldsV1: '{}' + manager: manager + subresource: subresource + time: 2000-01-23T04:56:07.000+00:00 + operation: operation + fieldsType: fieldsType + - apiVersion: apiVersion + fieldsV1: '{}' + manager: manager + subresource: subresource + time: 2000-01-23T04:56:07.000+00:00 + operation: operation + fieldsType: fieldsType + creationTimestamp: 2000-01-23T04:56:07.000+00:00 + name: name + namespace: namespace + apiVersion: apiVersion + kind: kind + spec: + renewTime: 2000-01-23T04:56:07.000+00:00 + leaseDurationSeconds: 0 + leaseTransitions: 6 + preferredHolder: preferredHolder + acquireTime: 2000-01-23T04:56:07.000+00:00 + strategy: strategy + holderIdentity: holderIdentity + - metadata: + generation: 6 + finalizers: + - finalizers + - finalizers + resourceVersion: resourceVersion + annotations: + key: annotations + generateName: generateName + deletionTimestamp: 2000-01-23T04:56:07.000+00:00 + labels: + key: labels + ownerReferences: + - uid: uid + controller: true + apiVersion: apiVersion + kind: kind + name: name + blockOwnerDeletion: true + - uid: uid + controller: true + apiVersion: apiVersion + kind: kind + name: name + blockOwnerDeletion: true + selfLink: selfLink + deletionGracePeriodSeconds: 0 + uid: uid + managedFields: + - apiVersion: apiVersion + fieldsV1: '{}' + manager: manager + subresource: subresource + time: 2000-01-23T04:56:07.000+00:00 + operation: operation + fieldsType: fieldsType + - apiVersion: apiVersion + fieldsV1: '{}' + manager: manager + subresource: subresource + time: 2000-01-23T04:56:07.000+00:00 + operation: operation + fieldsType: fieldsType + creationTimestamp: 2000-01-23T04:56:07.000+00:00 + name: name + namespace: namespace + apiVersion: apiVersion + kind: kind + spec: + renewTime: 2000-01-23T04:56:07.000+00:00 + leaseDurationSeconds: 0 + leaseTransitions: 6 + preferredHolder: preferredHolder + acquireTime: 2000-01-23T04:56:07.000+00:00 + strategy: strategy + holderIdentity: holderIdentity + properties: + apiVersion: + description: 'APIVersion defines the versioned schema of this representation + of an object. Servers should convert recognized schemas to the latest + internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources' + type: string + items: + description: items is a list of schema objects. + items: + $ref: '#/components/schemas/v1.Lease' + type: array + kind: + description: 'Kind is a string value representing the REST resource this + object represents. Servers may infer this from the endpoint the client + submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds' + type: string + metadata: + $ref: '#/components/schemas/v1.ListMeta' + required: + - items + type: object + x-kubernetes-group-version-kind: + - group: coordination.k8s.io + kind: LeaseList + version: v1 + x-implements: + - io.kubernetes.client.common.KubernetesListObject + v1.LeaseSpec: + description: LeaseSpec is a specification of a Lease. + example: + renewTime: 2000-01-23T04:56:07.000+00:00 + leaseDurationSeconds: 0 + leaseTransitions: 6 + preferredHolder: preferredHolder + acquireTime: 2000-01-23T04:56:07.000+00:00 + strategy: strategy + holderIdentity: holderIdentity + properties: + acquireTime: + description: acquireTime is a time when the current lease was acquired. + format: date-time + type: string + holderIdentity: + description: holderIdentity contains the identity of the holder of a current + lease. If Coordinated Leader Election is used, the holder identity must + be equal to the elected LeaseCandidate.metadata.name field. + type: string + leaseDurationSeconds: + description: leaseDurationSeconds is a duration that candidates for a lease + need to wait to force acquire it. This is measured against the time of + last observed renewTime. + format: int32 + type: integer + leaseTransitions: + description: leaseTransitions is the number of transitions of a lease between + holders. + format: int32 + type: integer + preferredHolder: + description: PreferredHolder signals to a lease holder that the lease has + a more optimal holder and should be given up. This field can only be set + if Strategy is also set. + type: string + renewTime: + description: renewTime is a time when the current holder of a lease has + last updated the lease. + format: date-time + type: string + strategy: + description: Strategy indicates the strategy for picking the leader for + coordinated leader election. If the field is not specified, there is no + active coordination for this lease. (Alpha) Using this field requires + the CoordinatedLeaderElection feature gate to be enabled. + type: string + type: object + v1alpha2.LeaseCandidate: + description: LeaseCandidate defines a candidate for a Lease object. Candidates + are created such that coordinated leader election will pick the best leader + from the list of candidates. example: metadata: generation: 6 @@ -183006,7 +189218,7 @@ components: An AWS EBS disk must exist before mounting to a container. The disk must also be in the same AWS zone as the kubelet. An AWS EBS disk can only be mounted as read/write once. AWS EBS volumes support ownership management and SELinux relabeling. example: - partition: 9 + partition: 6 volumeID: volumeID readOnly: true fsType: fsType @@ -184607,10 +190819,10 @@ components: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key properties: @@ -184643,14 +190855,14 @@ components: The contents of the target ConfigMap's Data field will be presented in a volume as files using the keys in the Data field as the file names, unless the items element is populated with specific mappings of keys to paths. ConfigMap volumes support ownership management and SELinux relabeling. example: - defaultMode: 6 + defaultMode: 3 name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key properties: @@ -184695,50 +190907,24 @@ components: name: name - devicePath: devicePath name: name - image: image - imagePullPolicy: imagePullPolicy - livenessProbe: - terminationGracePeriodSeconds: 2 - failureThreshold: 5 - periodSeconds: 9 - tcpSocket: - port: port - host: host - timeoutSeconds: 4 - successThreshold: 3 - initialDelaySeconds: 7 - exec: - command: - - command - - command - grpc: - port: 2 - service: service - httpGet: - path: path - scheme: scheme - port: port - host: host - httpHeaders: - - name: name - value: value - - name: name - value: value + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator stdin: true terminationMessagePolicy: terminationMessagePolicy - terminationMessagePath: terminationMessagePath - workingDir: workingDir - resources: - claims: - - request: request - name: name - - request: request - name: name - requests: {} - limits: {} securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -184794,43 +190980,6 @@ components: value: value - name: name value: value - env: - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath ports: - protocol: protocol hostIP: hostIP @@ -184842,10 +190991,6 @@ components: name: name containerPort: 7 hostPort: 1 - restartPolicy: restartPolicy - command: - - command - - command volumeMounts: - mountPath: mountPath mountPropagation: mountPropagation @@ -184861,9 +191006,6 @@ components: subPath: subPath recursiveReadOnly: recursiveReadOnly subPathExpr: subPathExpr - args: - - args - - args lifecycle: postStart: sleep: @@ -184906,8 +191048,6 @@ components: - name: name value: value stopSignal: stopSignal - name: name - tty: true readinessProbe: terminationGracePeriodSeconds: 2 failureThreshold: 5 @@ -184940,7 +191080,6 @@ components: restartPolicy: restartPolicy - resourceName: resourceName restartPolicy: restartPolicy - stdinOnce: true envFrom: - configMapRef: name: name @@ -184956,6 +191095,102 @@ components: secretRef: name: name optional: true + image: image + imagePullPolicy: imagePullPolicy + livenessProbe: + terminationGracePeriodSeconds: 2 + failureThreshold: 5 + periodSeconds: 9 + tcpSocket: + port: port + host: host + timeoutSeconds: 4 + successThreshold: 3 + initialDelaySeconds: 7 + exec: + command: + - command + - command + grpc: + port: 2 + service: service + httpGet: + path: path + scheme: scheme + port: port + host: host + httpHeaders: + - name: name + value: value + - name: name + value: value + terminationMessagePath: terminationMessagePath + workingDir: workingDir + resources: + claims: + - request: request + name: name + - request: request + name: name + requests: {} + limits: {} + env: + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + restartPolicy: restartPolicy + command: + - command + - command + args: + - args + - args + name: name + tty: true + stdinOnce: true properties: args: description: 'Arguments to the entrypoint. The container image''s CMD is @@ -184996,11 +191231,10 @@ components: x-kubernetes-patch-merge-key: name envFrom: description: List of sources to populate environment variables in the container. - The keys defined within a source must be a C_IDENTIFIER. All invalid keys - will be reported as an event when the container is starting. When a key - exists in multiple sources, the value associated with the last source - will take precedence. Values defined by an Env with a duplicate key will - take precedence. Cannot be updated. + The keys defined within a source may consist of any printable ASCII characters + except '='. When a key exists in multiple sources, the value associated + with the last source will take precedence. Values defined by an Env with + a duplicate key will take precedence. Cannot be updated. items: $ref: '#/components/schemas/v1.EnvFromSource' type: array @@ -185052,21 +191286,34 @@ components: $ref: '#/components/schemas/v1.ResourceRequirements' restartPolicy: description: 'RestartPolicy defines the restart behavior of individual containers - in a pod. This field may only be set for init containers, and the only - allowed value is "Always". For non-init containers or when this field + in a pod. This overrides the pod-level restart policy. When this field is not specified, the restart behavior is defined by the Pod''s restart - policy and the container type. Setting the RestartPolicy as "Always" for - the init container will have the following effect: this init container - will be continually restarted on exit until all regular containers have - terminated. Once all regular containers have completed, all init containers - with restartPolicy "Always" will be shut down. This lifecycle differs - from normal init containers and is often referred to as a "sidecar" container. - Although this init container still starts in the init container sequence, - it does not wait for the container to complete before proceeding to the - next init container. Instead, the next init container starts immediately - after this init container is started, or after any startupProbe has successfully - completed.' - type: string + policy and the container type. Additionally, setting the RestartPolicy + as "Always" for the init container will have the following effect: this + init container will be continually restarted on exit until all regular + containers have terminated. Once all regular containers have completed, + all init containers with restartPolicy "Always" will be shut down. This + lifecycle differs from normal init containers and is often referred to + as a "sidecar" container. Although this init container still starts in + the init container sequence, it does not wait for the container to complete + before proceeding to the next init container. Instead, the next init container + starts immediately after this init container is started, or after any + startupProbe has successfully completed.' + type: string + restartPolicyRules: + description: 'Represents a list of rules to be checked to determine if the + container should be restarted on exit. The rules are evaluated in order. + Once a rule matches a container exit condition, the remaining rules are + ignored. If no rule matches the container exit condition, the Container-level + restart policy determines the whether the container is restarted or not. + Constraints on the rules: - At most 20 rules are allowed. - Rules can + have the same action. - Identical rules are not forbidden in validations. + When rules are specified, container MUST set RestartPolicy explicitly + even it if matches the Pod''s RestartPolicy.' + items: + $ref: '#/components/schemas/v1.ContainerRestartRule' + type: array + x-kubernetes-list-type: atomic securityContext: $ref: '#/components/schemas/v1.SecurityContext' startupProbe: @@ -185138,6 +191385,30 @@ components: required: - name type: object + v1.ContainerExtendedResourceRequest: + description: ContainerExtendedResourceRequest has the mapping of container name, + extended resource name to the device request name. + example: + requestName: requestName + containerName: containerName + resourceName: resourceName + properties: + containerName: + description: The name of the container requesting resources. + type: string + requestName: + description: The name of the request in the special ResourceClaim which + corresponds to the extended resource. + type: string + resourceName: + description: The name of the extended resource in that container which gets + backed by DRA. + type: string + required: + - containerName + - requestName + - resourceName + type: object v1.ContainerImage: description: Describe a container image example: @@ -185211,6 +191482,52 @@ components: - resourceName - restartPolicy type: object + v1.ContainerRestartRule: + description: ContainerRestartRule describes how a container exit is handled. + example: + action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + properties: + action: + description: Specifies the action taken on a container exit if the requirements + are satisfied. The only possible value is "Restart" to restart the container. + type: string + exitCodes: + $ref: '#/components/schemas/v1.ContainerRestartRuleOnExitCodes' + required: + - action + type: object + v1.ContainerRestartRuleOnExitCodes: + description: ContainerRestartRuleOnExitCodes describes the condition for handling + an exited container based on its exit codes. + example: + values: + - 1 + - 1 + operator: operator + properties: + operator: + description: |- + Represents the relationship between the container exit code(s) and the specified values. Possible values are: - In: the requirement is satisfied if the container exit code is in the + set of specified values. + - NotIn: the requirement is satisfied if the container exit code is + not in the set of specified values. + type: string + values: + description: Specifies the set of values to check for container exit codes. + At most 255 elements are allowed. + items: + format: int32 + type: integer + type: array + x-kubernetes-list-type: set + required: + - operator + type: object v1.ContainerState: description: ContainerState holds a possible state of container. Only one of its members may be specified. If none of them is specified, the default one @@ -185227,7 +191544,7 @@ components: startedAt: 2000-01-23T04:56:07.000+00:00 containerID: containerID message: message - signal: 0 + signal: 6 finishedAt: 2000-01-23T04:56:07.000+00:00 properties: running: @@ -185255,7 +191572,7 @@ components: startedAt: 2000-01-23T04:56:07.000+00:00 containerID: containerID message: message - signal: 0 + signal: 6 finishedAt: 2000-01-23T04:56:07.000+00:00 properties: containerID: @@ -185318,7 +191635,7 @@ components: health: health image: image imageID: imageID - restartCount: 7 + restartCount: 0 resources: claims: - request: request @@ -185340,7 +191657,7 @@ components: startedAt: 2000-01-23T04:56:07.000+00:00 containerID: containerID message: message - signal: 0 + signal: 6 finishedAt: 2000-01-23T04:56:07.000+00:00 volumeMounts: - mountPath: mountPath @@ -185366,17 +191683,17 @@ components: startedAt: 2000-01-23T04:56:07.000+00:00 containerID: containerID message: message - signal: 0 + signal: 6 finishedAt: 2000-01-23T04:56:07.000+00:00 containerID: containerID stopSignal: stopSignal user: linux: - uid: 4 - gid: 6 + uid: 7 + gid: 4 supplementalGroups: - - 0 - - 0 + - 8 + - 8 properties: allocatedResources: additionalProperties: @@ -185471,11 +191788,11 @@ components: description: ContainerUser represents user identity information example: linux: - uid: 4 - gid: 6 + uid: 7 + gid: 4 supplementalGroups: - - 0 - - 0 + - 8 + - 8 properties: linux: $ref: '#/components/schemas/v1.LinuxContainerUser' @@ -185498,7 +191815,7 @@ components: mode. example: items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -185507,7 +191824,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -185528,7 +191845,7 @@ components: description: DownwardAPIVolumeFile represents information to create the file containing the pod field example: - mode: 1 + mode: 2 path: path resourceFieldRef: divisor: divisor @@ -185563,9 +191880,9 @@ components: description: DownwardAPIVolumeSource represents a volume containing downward API info. Downward API volumes support ownership management and SELinux relabeling. example: - defaultMode: 6 + defaultMode: 1 items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -185574,7 +191891,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -186389,7 +192706,7 @@ components: $ref: '#/components/schemas/v1.ConfigMapEnvSource' prefix: description: Optional text to prepend to the name of each environment variable. - Must be a C_IDENTIFIER. + May consist of any printable ASCII characters except '='. type: string secretRef: $ref: '#/components/schemas/v1.SecretEnvSource' @@ -186415,9 +192732,15 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key properties: name: - description: Name of the environment variable. Must be a C_IDENTIFIER. + description: Name of the environment variable. May consist of any printable + ASCII characters except '='. type: string value: description: 'Variable references $(VAR_NAME) are expanded using the previously @@ -186451,11 +192774,18 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key properties: configMapKeyRef: $ref: '#/components/schemas/v1.ConfigMapKeySelector' fieldRef: $ref: '#/components/schemas/v1.ObjectFieldSelector' + fileKeyRef: + $ref: '#/components/schemas/v1.FileKeySelector' resourceFieldRef: $ref: '#/components/schemas/v1.ResourceFieldSelector' secretKeyRef: @@ -186472,11 +192802,24 @@ components: name: name - devicePath: devicePath name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator stdin: true terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -186706,6 +193049,11 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key - name: name value: value valueFrom: @@ -186724,6 +193072,11 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key restartPolicy: restartPolicy command: - command @@ -186774,11 +193127,10 @@ components: x-kubernetes-patch-merge-key: name envFrom: description: List of sources to populate environment variables in the container. - The keys defined within a source must be a C_IDENTIFIER. All invalid keys - will be reported as an event when the container is starting. When a key - exists in multiple sources, the value associated with the last source - will take precedence. Values defined by an Env with a duplicate key will - take precedence. Cannot be updated. + The keys defined within a source may consist of any printable ASCII characters + except '='. When a key exists in multiple sources, the value associated + with the last source will take precedence. Values defined by an Env with + a duplicate key will take precedence. Cannot be updated. items: $ref: '#/components/schemas/v1.EnvFromSource' type: array @@ -186823,9 +193175,17 @@ components: $ref: '#/components/schemas/v1.ResourceRequirements' restartPolicy: description: Restart policy for the container to manage the restart behavior - of each container within a pod. This may only be set for init containers. - You cannot set this field on ephemeral containers. + of each container within a pod. You cannot set this field on ephemeral + containers. type: string + restartPolicyRules: + description: Represents a list of rules to be checked to determine if the + container should be restarted on exit. You cannot set this field on ephemeral + containers. + items: + $ref: '#/components/schemas/v1.ContainerRestartRule' + type: array + x-kubernetes-list-type: atomic securityContext: $ref: '#/components/schemas/v1.SecurityContext' startupProbe: @@ -187401,7 +193761,7 @@ components: be mounted as read/write once. Fibre Channel volumes support ownership management and SELinux relabeling. example: - lun: 2 + lun: 6 targetWWNs: - targetWWNs - targetWWNs @@ -187438,6 +193798,39 @@ components: type: array x-kubernetes-list-type: atomic type: object + v1.FileKeySelector: + description: FileKeySelector selects a key of the env file. + example: + path: path + volumeName: volumeName + optional: true + key: key + properties: + key: + description: The key within the env file. An invalid key will prevent the + pod from starting. The keys defined within a source may consist of any + printable ASCII characters except '='. During Alpha stage of the EnvFiles + feature gate, the key size is limited to 128 characters. + type: string + optional: + description: |- + Specify whether the file or its key must be defined. If the file or key does not exist, then the env var is not published. If optional is set to true and the specified key does not exist, the environment variable will not be set in the Pod's containers. + + If optional is set to false and the specified key does not exist, an error will be returned during Pod creation. + type: boolean + path: + description: The path within the volume from which to select the file. Must + be relative and may not contain the '..' path or start with '..'. + type: string + volumeName: + description: The name of the volume mount containing the env file. + type: string + required: + - key + - path + - volumeName + type: object + x-kubernetes-map-type: atomic v1.FlexPersistentVolumeSource: description: FlexPersistentVolumeSource represents a generic persistent volume resource that is provisioned/attached using an exec based plugin. @@ -187645,8 +194038,7 @@ components: readOnly: true properties: endpoints: - description: 'endpoints is the endpoint name that details Glusterfs topology. - More info: https://examples.k8s.io/volumes/glusterfs/README.md#create-a-pod' + description: endpoints is the endpoint name that details Glusterfs topology. type: string path: description: 'path is the Glusterfs volume path. More info: https://examples.k8s.io/volumes/glusterfs/README.md#create-a-pod' @@ -187846,7 +194238,7 @@ components: example: chapAuthSession: true iscsiInterface: iscsiInterface - lun: 6 + lun: 5 chapAuthDiscovery: true iqn: iqn portals: @@ -187942,7 +194334,7 @@ components: v1.KeyToPath: description: Maps a string key to a path within a volume. example: - mode: 3 + mode: 6 path: path key: key properties: @@ -188388,11 +194780,11 @@ components: description: LinuxContainerUser represents user identity information in Linux containers example: - uid: 4 - gid: 6 + uid: 7 + gid: 4 supplementalGroups: - - 0 - - 0 + - 8 + - 8 properties: gid: description: GID is the primary gid initially attached to the first process @@ -190388,7 +196780,7 @@ components: readOnly: true fsType: fsType awsElasticBlockStore: - partition: 9 + partition: 6 volumeID: volumeID readOnly: true fsType: fsType @@ -190523,7 +196915,7 @@ components: volumePath: volumePath fsType: fsType fc: - lun: 2 + lun: 6 targetWWNs: - targetWWNs - targetWWNs @@ -191056,16 +197448,13 @@ components: used by this claim. If specified, the CSI driver will create or update the volume with the attributes defined in the corresponding VolumeAttributesClass. This has a different purpose than storageClassName, it can be changed - after the claim is created. An empty string value means that no VolumeAttributesClass - will be applied to the claim but it''s not allowed to reset this field - to empty string once it is set. If unspecified and the PersistentVolumeClaim - is unbound, the default VolumeAttributesClass will be set by the persistentvolume - controller if it exists. If the resource referred to by volumeAttributesClass - does not exist, this PersistentVolumeClaim will be set to a Pending state, - as reflected by the modifyVolumeStatus field, until such as a resource - exists. More info: https://kubernetes.io/docs/concepts/storage/volume-attributes-classes/ - (Beta) Using this field requires the VolumeAttributesClass feature gate - to be enabled (off by default).' + after the claim is created. An empty string or nil value indicates that + no VolumeAttributesClass will be applied to the claim. If the claim enters + an Infeasible error state, this field can be reset to its previous value + (including nil) to cancel the modification. If the resource referred to + by volumeAttributesClass does not exist, this PersistentVolumeClaim will + be set to a Pending state, as reflected by the modifyVolumeStatus field, + until such as a resource exists. More info: https://kubernetes.io/docs/concepts/storage/volume-attributes-classes/' type: string volumeMode: description: volumeMode defines what type of volume is required by the claim. @@ -191193,8 +197582,7 @@ components: currentVolumeAttributesClassName: description: currentVolumeAttributesClassName is the current name of the VolumeAttributesClass the PVC is using. When unset, there is no VolumeAttributeClass - applied to this PersistentVolumeClaim This is a beta field and requires - enabling VolumeAttributesClass feature (off by default). + applied to this PersistentVolumeClaim type: string modifyVolumeStatus: $ref: '#/components/schemas/v1.ModifyVolumeStatus' @@ -191466,7 +197854,7 @@ components: readOnly: true fsType: fsType awsElasticBlockStore: - partition: 9 + partition: 6 volumeID: volumeID readOnly: true fsType: fsType @@ -191601,7 +197989,7 @@ components: volumePath: volumePath fsType: fsType fc: - lun: 2 + lun: 6 targetWWNs: - targetWWNs - targetWWNs @@ -191759,7 +198147,7 @@ components: readOnly: true fsType: fsType awsElasticBlockStore: - partition: 9 + partition: 6 volumeID: volumeID readOnly: true fsType: fsType @@ -191894,7 +198282,7 @@ components: volumePath: volumePath fsType: fsType fc: - lun: 2 + lun: 6 targetWWNs: - targetWWNs - targetWWNs @@ -192033,7 +198421,7 @@ components: readOnly: true fsType: fsType awsElasticBlockStore: - partition: 9 + partition: 6 volumeID: volumeID readOnly: true fsType: fsType @@ -192168,7 +198556,7 @@ components: volumePath: volumePath fsType: fsType fc: - lun: 2 + lun: 6 targetWWNs: - targetWWNs - targetWWNs @@ -192267,8 +198655,7 @@ components: is mutable and can be changed by the CSI driver after a volume has been updated successfully to a new class. For an unbound PersistentVolume, the volumeAttributesClassName will be matched with unbound PersistentVolumeClaims - during the binding process. This is a beta field and requires enabling - VolumeAttributesClass feature (off by default). + during the binding process. type: string volumeMode: description: volumeMode defines if a volume is intended to be used with @@ -192396,6 +198783,7 @@ components: - conditionType: conditionType - conditionType: conditionType serviceAccountName: serviceAccountName + hostnameOverride: hostnameOverride imagePullSecrets: - name: name - name: name @@ -192418,17 +198806,17 @@ components: appArmorProfile: localhostProfile: localhostProfile type: type - fsGroup: 7 + fsGroup: 1 fsGroupChangePolicy: fsGroupChangePolicy seLinuxChangePolicy: seLinuxChangePolicy - runAsGroup: 1 + runAsGroup: 4 runAsNonRoot: true sysctls: - name: name value: value - name: name value: value - runAsUser: 4 + runAsUser: 5 seccompProfile: localhostProfile: localhostProfile type: type @@ -192438,8 +198826,8 @@ components: hostProcess: true gmsaCredentialSpecName: gmsaCredentialSpecName supplementalGroups: - - 5 - - 5 + - 9 + - 9 supplementalGroupsPolicy: supplementalGroupsPolicy preemptionPolicy: preemptionPolicy nodeSelector: @@ -192448,12 +198836,12 @@ components: runtimeClassName: runtimeClassName tolerations: - effect: effect - tolerationSeconds: 9 + tolerationSeconds: 6 value: value key: key operator: operator - effect: effect - tolerationSeconds: 9 + tolerationSeconds: 6 value: value key: key operator: operator @@ -192472,7 +198860,7 @@ components: topologySpreadConstraints: - nodeTaintsPolicy: nodeTaintsPolicy whenUnsatisfiable: whenUnsatisfiable - maxSkew: 6 + maxSkew: 8 nodeAffinityPolicy: nodeAffinityPolicy labelSelector: matchExpressions: @@ -192488,14 +198876,14 @@ components: operator: operator matchLabels: key: matchLabels - minDomains: 8 + minDomains: 9 topologyKey: topologyKey matchLabelKeys: - matchLabelKeys - matchLabelKeys - nodeTaintsPolicy: nodeTaintsPolicy whenUnsatisfiable: whenUnsatisfiable - maxSkew: 6 + maxSkew: 8 nodeAffinityPolicy: nodeAffinityPolicy labelSelector: matchExpressions: @@ -192511,7 +198899,7 @@ components: operator: operator matchLabels: key: matchLabels - minDomains: 8 + minDomains: 9 topologyKey: topologyKey matchLabelKeys: - matchLabelKeys @@ -192620,20 +199008,20 @@ components: volumeMode: volumeMode secret: secretName: secretName - defaultMode: 3 + defaultMode: 7 optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key projected: sources: - downwardAPI: items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -192642,7 +199030,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -192655,26 +199043,33 @@ components: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key + podCertificate: + certificateChainPath: certificateChainPath + keyPath: keyPath + maxExpirationSeconds: 3 + keyType: keyType + credentialBundlePath: credentialBundlePath + signerName: signerName secret: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key serviceAccountToken: path: path audience: audience - expirationSeconds: 6 + expirationSeconds: 3 clusterTrustBundle: path: path labelSelector: @@ -192696,7 +199091,7 @@ components: signerName: signerName - downwardAPI: items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -192705,7 +199100,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -192718,26 +199113,33 @@ components: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key + podCertificate: + certificateChainPath: certificateChainPath + keyPath: keyPath + maxExpirationSeconds: 3 + keyType: keyType + credentialBundlePath: credentialBundlePath + signerName: signerName secret: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key serviceAccountToken: path: path audience: audience - expirationSeconds: 6 + expirationSeconds: 3 clusterTrustBundle: path: path labelSelector: @@ -192757,7 +199159,7 @@ components: name: name optional: true signerName: signerName - defaultMode: 5 + defaultMode: 6 cephfs: path: path secretRef: @@ -192812,9 +199214,9 @@ components: readOnly: true fsType: fsType downwardAPI: - defaultMode: 6 + defaultMode: 1 items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -192823,7 +199225,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -192833,7 +199235,7 @@ components: apiVersion: apiVersion fieldPath: fieldPath awsElasticBlockStore: - partition: 9 + partition: 6 volumeID: volumeID readOnly: true fsType: fsType @@ -192843,7 +199245,7 @@ components: iscsi: chapAuthSession: true iscsiInterface: iscsiInterface - lun: 6 + lun: 5 chapAuthDiscovery: true iqn: iqn portals: @@ -192868,14 +199270,14 @@ components: - monitors - monitors configMap: - defaultMode: 6 + defaultMode: 3 name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key storageos: @@ -192915,7 +199317,7 @@ components: volumePath: volumePath fsType: fsType fc: - lun: 2 + lun: 6 targetWWNs: - targetWWNs - targetWWNs @@ -193030,20 +199432,20 @@ components: volumeMode: volumeMode secret: secretName: secretName - defaultMode: 3 + defaultMode: 7 optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key projected: sources: - downwardAPI: items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -193052,7 +199454,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -193065,26 +199467,33 @@ components: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key + podCertificate: + certificateChainPath: certificateChainPath + keyPath: keyPath + maxExpirationSeconds: 3 + keyType: keyType + credentialBundlePath: credentialBundlePath + signerName: signerName secret: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key serviceAccountToken: path: path audience: audience - expirationSeconds: 6 + expirationSeconds: 3 clusterTrustBundle: path: path labelSelector: @@ -193106,7 +199515,7 @@ components: signerName: signerName - downwardAPI: items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -193115,7 +199524,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -193128,26 +199537,33 @@ components: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key + podCertificate: + certificateChainPath: certificateChainPath + keyPath: keyPath + maxExpirationSeconds: 3 + keyType: keyType + credentialBundlePath: credentialBundlePath + signerName: signerName secret: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key serviceAccountToken: path: path audience: audience - expirationSeconds: 6 + expirationSeconds: 3 clusterTrustBundle: path: path labelSelector: @@ -193167,7 +199583,7 @@ components: name: name optional: true signerName: signerName - defaultMode: 5 + defaultMode: 6 cephfs: path: path secretRef: @@ -193222,9 +199638,9 @@ components: readOnly: true fsType: fsType downwardAPI: - defaultMode: 6 + defaultMode: 1 items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -193233,7 +199649,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -193243,7 +199659,7 @@ components: apiVersion: apiVersion fieldPath: fieldPath awsElasticBlockStore: - partition: 9 + partition: 6 volumeID: volumeID readOnly: true fsType: fsType @@ -193253,7 +199669,7 @@ components: iscsi: chapAuthSession: true iscsiInterface: iscsiInterface - lun: 6 + lun: 5 chapAuthDiscovery: true iqn: iqn portals: @@ -193278,14 +199694,14 @@ components: - monitors - monitors configMap: - defaultMode: 6 + defaultMode: 3 name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key storageos: @@ -193325,7 +199741,7 @@ components: volumePath: volumePath fsType: fsType fc: - lun: 2 + lun: 6 targetWWNs: - targetWWNs - targetWWNs @@ -193351,11 +199767,24 @@ components: name: name - devicePath: devicePath name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator stdin: true terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -193585,6 +200014,11 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key - name: name value: value valueFrom: @@ -193603,6 +200037,11 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key restartPolicy: restartPolicy command: - command @@ -193618,11 +200057,24 @@ components: name: name - devicePath: devicePath name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator stdin: true terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -193852,6 +200304,11 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key - name: name value: value valueFrom: @@ -193870,6 +200327,11 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key restartPolicy: restartPolicy command: - command @@ -193881,7 +200343,7 @@ components: tty: true stdinOnce: true serviceAccount: serviceAccount - priority: 6 + priority: 7 restartPolicy: restartPolicy shareProcessNamespace: true hostUsers: true @@ -193899,50 +200361,24 @@ components: name: name - devicePath: devicePath name: name - image: image - imagePullPolicy: imagePullPolicy - livenessProbe: - terminationGracePeriodSeconds: 2 - failureThreshold: 5 - periodSeconds: 9 - tcpSocket: - port: port - host: host - timeoutSeconds: 4 - successThreshold: 3 - initialDelaySeconds: 7 - exec: - command: - - command - - command - grpc: - port: 2 - service: service - httpGet: - path: path - scheme: scheme - port: port - host: host - httpHeaders: - - name: name - value: value - - name: name - value: value + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator stdin: true terminationMessagePolicy: terminationMessagePolicy - terminationMessagePath: terminationMessagePath - workingDir: workingDir - resources: - claims: - - request: request - name: name - - request: request - name: name - requests: {} - limits: {} securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -193998,43 +200434,6 @@ components: value: value - name: name value: value - env: - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath ports: - protocol: protocol hostIP: hostIP @@ -194046,10 +200445,6 @@ components: name: name containerPort: 7 hostPort: 1 - restartPolicy: restartPolicy - command: - - command - - command volumeMounts: - mountPath: mountPath mountPropagation: mountPropagation @@ -194065,9 +200460,6 @@ components: subPath: subPath recursiveReadOnly: recursiveReadOnly subPathExpr: subPathExpr - args: - - args - - args lifecycle: postStart: sleep: @@ -194110,8 +200502,6 @@ components: - name: name value: value stopSignal: stopSignal - name: name - tty: true readinessProbe: terminationGracePeriodSeconds: 2 failureThreshold: 5 @@ -194144,7 +200534,6 @@ components: restartPolicy: restartPolicy - resourceName: resourceName restartPolicy: restartPolicy - stdinOnce: true envFrom: - configMapRef: name: name @@ -194160,11 +200549,6 @@ components: secretRef: name: name optional: true - - volumeDevices: - - devicePath: devicePath - name: name - - devicePath: devicePath - name: name image: image imagePullPolicy: imagePullPolicy livenessProbe: @@ -194194,8 +200578,6 @@ components: value: value - name: name value: value - stdin: true - terminationMessagePolicy: terminationMessagePolicy terminationMessagePath: terminationMessagePath workingDir: workingDir resources: @@ -194206,9 +200588,86 @@ components: name: name requests: {} limits: {} + env: + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + restartPolicy: restartPolicy + command: + - command + - command + args: + - args + - args + name: name + tty: true + stdinOnce: true + - volumeDevices: + - devicePath: devicePath + name: name + - devicePath: devicePath + name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + stdin: true + terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -194264,43 +200723,6 @@ components: value: value - name: name value: value - env: - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath ports: - protocol: protocol hostIP: hostIP @@ -194312,10 +200734,6 @@ components: name: name containerPort: 7 hostPort: 1 - restartPolicy: restartPolicy - command: - - command - - command volumeMounts: - mountPath: mountPath mountPropagation: mountPropagation @@ -194331,9 +200749,6 @@ components: subPath: subPath recursiveReadOnly: recursiveReadOnly subPathExpr: subPathExpr - args: - - args - - args lifecycle: postStart: sleep: @@ -194376,8 +200791,6 @@ components: - name: name value: value stopSignal: stopSignal - name: name - tty: true readinessProbe: terminationGracePeriodSeconds: 2 failureThreshold: 5 @@ -194410,7 +200823,6 @@ components: restartPolicy: restartPolicy - resourceName: resourceName restartPolicy: restartPolicy - stdinOnce: true envFrom: - configMapRef: name: name @@ -194426,12 +200838,6 @@ components: secretRef: name: name optional: true - initContainers: - - volumeDevices: - - devicePath: devicePath - name: name - - devicePath: devicePath - name: name image: image imagePullPolicy: imagePullPolicy livenessProbe: @@ -194461,8 +200867,6 @@ components: value: value - name: name value: value - stdin: true - terminationMessagePolicy: terminationMessagePolicy terminationMessagePath: terminationMessagePath workingDir: workingDir resources: @@ -194473,9 +200877,87 @@ components: name: name requests: {} limits: {} + env: + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + restartPolicy: restartPolicy + command: + - command + - command + args: + - args + - args + name: name + tty: true + stdinOnce: true + initContainers: + - volumeDevices: + - devicePath: devicePath + name: name + - devicePath: devicePath + name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + stdin: true + terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -194531,43 +201013,6 @@ components: value: value - name: name value: value - env: - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath ports: - protocol: protocol hostIP: hostIP @@ -194579,10 +201024,6 @@ components: name: name containerPort: 7 hostPort: 1 - restartPolicy: restartPolicy - command: - - command - - command volumeMounts: - mountPath: mountPath mountPropagation: mountPropagation @@ -194598,9 +201039,6 @@ components: subPath: subPath recursiveReadOnly: recursiveReadOnly subPathExpr: subPathExpr - args: - - args - - args lifecycle: postStart: sleep: @@ -194643,8 +201081,6 @@ components: - name: name value: value stopSignal: stopSignal - name: name - tty: true readinessProbe: terminationGracePeriodSeconds: 2 failureThreshold: 5 @@ -194677,7 +201113,6 @@ components: restartPolicy: restartPolicy - resourceName: resourceName restartPolicy: restartPolicy - stdinOnce: true envFrom: - configMapRef: name: name @@ -194693,11 +201128,6 @@ components: secretRef: name: name optional: true - - volumeDevices: - - devicePath: devicePath - name: name - - devicePath: devicePath - name: name image: image imagePullPolicy: imagePullPolicy livenessProbe: @@ -194727,8 +201157,6 @@ components: value: value - name: name value: value - stdin: true - terminationMessagePolicy: terminationMessagePolicy terminationMessagePath: terminationMessagePath workingDir: workingDir resources: @@ -194739,9 +201167,86 @@ components: name: name requests: {} limits: {} + env: + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + restartPolicy: restartPolicy + command: + - command + - command + args: + - args + - args + name: name + tty: true + stdinOnce: true + - volumeDevices: + - devicePath: devicePath + name: name + - devicePath: devicePath + name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + stdin: true + terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -194797,43 +201302,6 @@ components: value: value - name: name value: value - env: - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath ports: - protocol: protocol hostIP: hostIP @@ -194845,10 +201313,6 @@ components: name: name containerPort: 7 hostPort: 1 - restartPolicy: restartPolicy - command: - - command - - command volumeMounts: - mountPath: mountPath mountPropagation: mountPropagation @@ -194864,9 +201328,6 @@ components: subPath: subPath recursiveReadOnly: recursiveReadOnly subPathExpr: subPathExpr - args: - - args - - args lifecycle: postStart: sleep: @@ -194909,8 +201370,6 @@ components: - name: name value: value stopSignal: stopSignal - name: name - tty: true readinessProbe: terminationGracePeriodSeconds: 2 failureThreshold: 5 @@ -194943,7 +201402,6 @@ components: restartPolicy: restartPolicy - resourceName: resourceName restartPolicy: restartPolicy - stdinOnce: true envFrom: - configMapRef: name: name @@ -194959,6 +201417,102 @@ components: secretRef: name: name optional: true + image: image + imagePullPolicy: imagePullPolicy + livenessProbe: + terminationGracePeriodSeconds: 2 + failureThreshold: 5 + periodSeconds: 9 + tcpSocket: + port: port + host: host + timeoutSeconds: 4 + successThreshold: 3 + initialDelaySeconds: 7 + exec: + command: + - command + - command + grpc: + port: 2 + service: service + httpGet: + path: path + scheme: scheme + port: port + host: host + httpHeaders: + - name: name + value: value + - name: name + value: value + terminationMessagePath: terminationMessagePath + workingDir: workingDir + resources: + claims: + - request: request + name: name + - request: request + name: name + requests: {} + limits: {} + env: + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + restartPolicy: restartPolicy + command: + - command + - command + args: + - args + - args + name: name + tty: true + stdinOnce: true affinity: nodeAffinity: requiredDuringSchedulingIgnoredDuringExecution: @@ -195399,7 +201953,7 @@ components: health: health image: image imageID: imageID - restartCount: 7 + restartCount: 0 resources: claims: - request: request @@ -195421,7 +201975,7 @@ components: startedAt: 2000-01-23T04:56:07.000+00:00 containerID: containerID message: message - signal: 0 + signal: 6 finishedAt: 2000-01-23T04:56:07.000+00:00 volumeMounts: - mountPath: mountPath @@ -195447,17 +202001,17 @@ components: startedAt: 2000-01-23T04:56:07.000+00:00 containerID: containerID message: message - signal: 0 + signal: 6 finishedAt: 2000-01-23T04:56:07.000+00:00 containerID: containerID stopSignal: stopSignal user: linux: - uid: 4 - gid: 6 + uid: 7 + gid: 4 supplementalGroups: - - 0 - - 0 + - 8 + - 8 - allocatedResourcesStatus: - name: name resources: @@ -195473,7 +202027,7 @@ components: health: health image: image imageID: imageID - restartCount: 7 + restartCount: 0 resources: claims: - request: request @@ -195495,7 +202049,7 @@ components: startedAt: 2000-01-23T04:56:07.000+00:00 containerID: containerID message: message - signal: 0 + signal: 6 finishedAt: 2000-01-23T04:56:07.000+00:00 volumeMounts: - mountPath: mountPath @@ -195521,18 +202075,27 @@ components: startedAt: 2000-01-23T04:56:07.000+00:00 containerID: containerID message: message - signal: 0 + signal: 6 finishedAt: 2000-01-23T04:56:07.000+00:00 containerID: containerID stopSignal: stopSignal user: linux: - uid: 4 - gid: 6 + uid: 7 + gid: 4 supplementalGroups: - - 0 - - 0 + - 8 + - 8 hostIP: hostIP + extendedResourceClaimStatus: + resourceClaimName: resourceClaimName + requestMappings: + - requestName: requestName + containerName: containerName + resourceName: resourceName + - requestName: requestName + containerName: containerName + resourceName: resourceName nominatedNodeName: nominatedNodeName message: message podIPs: @@ -195555,7 +202118,7 @@ components: health: health image: image imageID: imageID - restartCount: 7 + restartCount: 0 resources: claims: - request: request @@ -195577,7 +202140,7 @@ components: startedAt: 2000-01-23T04:56:07.000+00:00 containerID: containerID message: message - signal: 0 + signal: 6 finishedAt: 2000-01-23T04:56:07.000+00:00 volumeMounts: - mountPath: mountPath @@ -195603,17 +202166,17 @@ components: startedAt: 2000-01-23T04:56:07.000+00:00 containerID: containerID message: message - signal: 0 + signal: 6 finishedAt: 2000-01-23T04:56:07.000+00:00 containerID: containerID stopSignal: stopSignal user: linux: - uid: 4 - gid: 6 + uid: 7 + gid: 4 supplementalGroups: - - 0 - - 0 + - 8 + - 8 - allocatedResourcesStatus: - name: name resources: @@ -195629,7 +202192,7 @@ components: health: health image: image imageID: imageID - restartCount: 7 + restartCount: 0 resources: claims: - request: request @@ -195651,7 +202214,7 @@ components: startedAt: 2000-01-23T04:56:07.000+00:00 containerID: containerID message: message - signal: 0 + signal: 6 finishedAt: 2000-01-23T04:56:07.000+00:00 volumeMounts: - mountPath: mountPath @@ -195677,17 +202240,17 @@ components: startedAt: 2000-01-23T04:56:07.000+00:00 containerID: containerID message: message - signal: 0 + signal: 6 finishedAt: 2000-01-23T04:56:07.000+00:00 containerID: containerID stopSignal: stopSignal user: linux: - uid: 4 - gid: 6 + uid: 7 + gid: 4 supplementalGroups: - - 0 - - 0 + - 8 + - 8 hostIPs: - ip: ip - ip: ip @@ -195699,14 +202262,14 @@ components: lastTransitionTime: 2000-01-23T04:56:07.000+00:00 message: message type: type - observedGeneration: 3 + observedGeneration: 0 lastProbeTime: 2000-01-23T04:56:07.000+00:00 status: status - reason: reason lastTransitionTime: 2000-01-23T04:56:07.000+00:00 message: message type: type - observedGeneration: 3 + observedGeneration: 0 lastProbeTime: 2000-01-23T04:56:07.000+00:00 status: status initContainerStatuses: @@ -195725,7 +202288,7 @@ components: health: health image: image imageID: imageID - restartCount: 7 + restartCount: 0 resources: claims: - request: request @@ -195747,7 +202310,7 @@ components: startedAt: 2000-01-23T04:56:07.000+00:00 containerID: containerID message: message - signal: 0 + signal: 6 finishedAt: 2000-01-23T04:56:07.000+00:00 volumeMounts: - mountPath: mountPath @@ -195773,17 +202336,17 @@ components: startedAt: 2000-01-23T04:56:07.000+00:00 containerID: containerID message: message - signal: 0 + signal: 6 finishedAt: 2000-01-23T04:56:07.000+00:00 containerID: containerID stopSignal: stopSignal user: linux: - uid: 4 - gid: 6 + uid: 7 + gid: 4 supplementalGroups: - - 0 - - 0 + - 8 + - 8 - allocatedResourcesStatus: - name: name resources: @@ -195799,7 +202362,7 @@ components: health: health image: image imageID: imageID - restartCount: 7 + restartCount: 0 resources: claims: - request: request @@ -195821,7 +202384,7 @@ components: startedAt: 2000-01-23T04:56:07.000+00:00 containerID: containerID message: message - signal: 0 + signal: 6 finishedAt: 2000-01-23T04:56:07.000+00:00 volumeMounts: - mountPath: mountPath @@ -195847,18 +202410,18 @@ components: startedAt: 2000-01-23T04:56:07.000+00:00 containerID: containerID message: message - signal: 0 + signal: 6 finishedAt: 2000-01-23T04:56:07.000+00:00 containerID: containerID stopSignal: stopSignal user: linux: - uid: 4 - gid: 6 + uid: 7 + gid: 4 supplementalGroups: - - 0 - - 0 - observedGeneration: 8 + - 8 + - 8 + observedGeneration: 3 properties: apiVersion: description: 'APIVersion defines the versioned schema of this representation @@ -196340,8 +202903,8 @@ components: most preferred is the one with the greatest sum of weights, i.e. for each node that meets all of the scheduling requirements (resource request, requiredDuringScheduling anti-affinity expressions, etc.), compute a sum - by iterating through the elements of this field and adding "weight" to - the sum if the node has pods which matches the corresponding podAffinityTerm; + by iterating through the elements of this field and subtracting "weight" + from the sum if the node has pods which matches the corresponding podAffinityTerm; the node(s) with the highest sum are the most preferred. items: $ref: '#/components/schemas/v1.WeightedPodAffinityTerm' @@ -196360,6 +202923,63 @@ components: type: array x-kubernetes-list-type: atomic type: object + v1.PodCertificateProjection: + description: PodCertificateProjection provides a private key and X.509 certificate + in the pod filesystem. + example: + certificateChainPath: certificateChainPath + keyPath: keyPath + maxExpirationSeconds: 3 + keyType: keyType + credentialBundlePath: credentialBundlePath + signerName: signerName + properties: + certificateChainPath: + description: |- + Write the certificate chain at this path in the projected volume. + + Most applications should use credentialBundlePath. When using keyPath and certificateChainPath, your application needs to check that the key and leaf certificate are consistent, because it is possible to read the files mid-rotation. + type: string + credentialBundlePath: + description: |- + Write the credential bundle at this path in the projected volume. + + The credential bundle is a single file that contains multiple PEM blocks. The first PEM block is a PRIVATE KEY block, containing a PKCS#8 private key. + + The remaining blocks are CERTIFICATE blocks, containing the issued certificate chain from the signer (leaf and any intermediates). + + Using credentialBundlePath lets your Pod's application code make a single atomic read that retrieves a consistent key and certificate chain. If you project them to separate files, your application code will need to additionally check that the leaf certificate was issued to the key. + type: string + keyPath: + description: |- + Write the key at this path in the projected volume. + + Most applications should use credentialBundlePath. When using keyPath and certificateChainPath, your application needs to check that the key and leaf certificate are consistent, because it is possible to read the files mid-rotation. + type: string + keyType: + description: |- + The type of keypair Kubelet will generate for the pod. + + Valid values are "RSA3072", "RSA4096", "ECDSAP256", "ECDSAP384", "ECDSAP521", and "ED25519". + type: string + maxExpirationSeconds: + description: |- + maxExpirationSeconds is the maximum lifetime permitted for the certificate. + + Kubelet copies this value verbatim into the PodCertificateRequests it generates for this projection. + + If omitted, kube-apiserver will set it to 86400(24 hours). kube-apiserver will reject values shorter than 3600 (1 hour). The maximum allowable value is 7862400 (91 days). + + The signer implementation is then free to issue a certificate with any lifetime *shorter* than MaxExpirationSeconds, but no shorter than 3600 seconds (1 hour). This constraint is enforced by kube-apiserver. `kubernetes.io` signers will never issue certificates with a lifetime longer than 24 hours. + format: int32 + type: integer + signerName: + description: Kubelet's generated CSRs will be addressed to this signer. + type: string + required: + - keyType + - signerName + type: object v1.PodCondition: description: PodCondition contains details for the current condition of this pod. @@ -196368,7 +202988,7 @@ components: lastTransitionTime: 2000-01-23T04:56:07.000+00:00 message: message type: type - observedGeneration: 3 + observedGeneration: 0 lastProbeTime: 2000-01-23T04:56:07.000+00:00 status: status properties: @@ -196459,6 +203079,35 @@ components: description: Value is this DNS resolver option's value. type: string type: object + v1.PodExtendedResourceClaimStatus: + description: PodExtendedResourceClaimStatus is stored in the PodStatus for the + extended resource requests backed by DRA. It stores the generated name for + the corresponding special ResourceClaim created by the scheduler. + example: + resourceClaimName: resourceClaimName + requestMappings: + - requestName: requestName + containerName: containerName + resourceName: resourceName + - requestName: requestName + containerName: containerName + resourceName: resourceName + properties: + requestMappings: + description: RequestMappings identifies the mapping of to device request in the generated ResourceClaim. + items: + $ref: '#/components/schemas/v1.ContainerExtendedResourceRequest' + type: array + x-kubernetes-list-type: atomic + resourceClaimName: + description: ResourceClaimName is the name of the ResourceClaim that was + generated for the Pod in the namespace of the Pod. + type: string + required: + - requestMappings + - resourceClaimName + type: object v1.PodIP: description: PodIP represents a single IP address allocated to the pod. example: @@ -196550,6 +203199,7 @@ components: - conditionType: conditionType - conditionType: conditionType serviceAccountName: serviceAccountName + hostnameOverride: hostnameOverride imagePullSecrets: - name: name - name: name @@ -196572,17 +203222,17 @@ components: appArmorProfile: localhostProfile: localhostProfile type: type - fsGroup: 7 + fsGroup: 1 fsGroupChangePolicy: fsGroupChangePolicy seLinuxChangePolicy: seLinuxChangePolicy - runAsGroup: 1 + runAsGroup: 4 runAsNonRoot: true sysctls: - name: name value: value - name: name value: value - runAsUser: 4 + runAsUser: 5 seccompProfile: localhostProfile: localhostProfile type: type @@ -196592,8 +203242,8 @@ components: hostProcess: true gmsaCredentialSpecName: gmsaCredentialSpecName supplementalGroups: - - 5 - - 5 + - 9 + - 9 supplementalGroupsPolicy: supplementalGroupsPolicy preemptionPolicy: preemptionPolicy nodeSelector: @@ -196602,12 +203252,12 @@ components: runtimeClassName: runtimeClassName tolerations: - effect: effect - tolerationSeconds: 9 + tolerationSeconds: 6 value: value key: key operator: operator - effect: effect - tolerationSeconds: 9 + tolerationSeconds: 6 value: value key: key operator: operator @@ -196626,7 +203276,7 @@ components: topologySpreadConstraints: - nodeTaintsPolicy: nodeTaintsPolicy whenUnsatisfiable: whenUnsatisfiable - maxSkew: 6 + maxSkew: 8 nodeAffinityPolicy: nodeAffinityPolicy labelSelector: matchExpressions: @@ -196642,14 +203292,14 @@ components: operator: operator matchLabels: key: matchLabels - minDomains: 8 + minDomains: 9 topologyKey: topologyKey matchLabelKeys: - matchLabelKeys - matchLabelKeys - nodeTaintsPolicy: nodeTaintsPolicy whenUnsatisfiable: whenUnsatisfiable - maxSkew: 6 + maxSkew: 8 nodeAffinityPolicy: nodeAffinityPolicy labelSelector: matchExpressions: @@ -196665,7 +203315,7 @@ components: operator: operator matchLabels: key: matchLabels - minDomains: 8 + minDomains: 9 topologyKey: topologyKey matchLabelKeys: - matchLabelKeys @@ -196774,20 +203424,20 @@ components: volumeMode: volumeMode secret: secretName: secretName - defaultMode: 3 + defaultMode: 7 optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key projected: sources: - downwardAPI: items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -196796,7 +203446,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -196809,26 +203459,33 @@ components: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key + podCertificate: + certificateChainPath: certificateChainPath + keyPath: keyPath + maxExpirationSeconds: 3 + keyType: keyType + credentialBundlePath: credentialBundlePath + signerName: signerName secret: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key serviceAccountToken: path: path audience: audience - expirationSeconds: 6 + expirationSeconds: 3 clusterTrustBundle: path: path labelSelector: @@ -196850,7 +203507,7 @@ components: signerName: signerName - downwardAPI: items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -196859,7 +203516,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -196872,26 +203529,33 @@ components: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key + podCertificate: + certificateChainPath: certificateChainPath + keyPath: keyPath + maxExpirationSeconds: 3 + keyType: keyType + credentialBundlePath: credentialBundlePath + signerName: signerName secret: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key serviceAccountToken: path: path audience: audience - expirationSeconds: 6 + expirationSeconds: 3 clusterTrustBundle: path: path labelSelector: @@ -196911,7 +203575,7 @@ components: name: name optional: true signerName: signerName - defaultMode: 5 + defaultMode: 6 cephfs: path: path secretRef: @@ -196966,9 +203630,9 @@ components: readOnly: true fsType: fsType downwardAPI: - defaultMode: 6 + defaultMode: 1 items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -196977,7 +203641,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -196987,7 +203651,7 @@ components: apiVersion: apiVersion fieldPath: fieldPath awsElasticBlockStore: - partition: 9 + partition: 6 volumeID: volumeID readOnly: true fsType: fsType @@ -196997,7 +203661,7 @@ components: iscsi: chapAuthSession: true iscsiInterface: iscsiInterface - lun: 6 + lun: 5 chapAuthDiscovery: true iqn: iqn portals: @@ -197022,14 +203686,14 @@ components: - monitors - monitors configMap: - defaultMode: 6 + defaultMode: 3 name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key storageos: @@ -197069,7 +203733,7 @@ components: volumePath: volumePath fsType: fsType fc: - lun: 2 + lun: 6 targetWWNs: - targetWWNs - targetWWNs @@ -197184,20 +203848,20 @@ components: volumeMode: volumeMode secret: secretName: secretName - defaultMode: 3 + defaultMode: 7 optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key projected: sources: - downwardAPI: items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -197206,7 +203870,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -197219,26 +203883,33 @@ components: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key + podCertificate: + certificateChainPath: certificateChainPath + keyPath: keyPath + maxExpirationSeconds: 3 + keyType: keyType + credentialBundlePath: credentialBundlePath + signerName: signerName secret: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key serviceAccountToken: path: path audience: audience - expirationSeconds: 6 + expirationSeconds: 3 clusterTrustBundle: path: path labelSelector: @@ -197260,7 +203931,7 @@ components: signerName: signerName - downwardAPI: items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -197269,7 +203940,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -197282,26 +203953,33 @@ components: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key + podCertificate: + certificateChainPath: certificateChainPath + keyPath: keyPath + maxExpirationSeconds: 3 + keyType: keyType + credentialBundlePath: credentialBundlePath + signerName: signerName secret: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key serviceAccountToken: path: path audience: audience - expirationSeconds: 6 + expirationSeconds: 3 clusterTrustBundle: path: path labelSelector: @@ -197321,7 +203999,7 @@ components: name: name optional: true signerName: signerName - defaultMode: 5 + defaultMode: 6 cephfs: path: path secretRef: @@ -197376,9 +204054,9 @@ components: readOnly: true fsType: fsType downwardAPI: - defaultMode: 6 + defaultMode: 1 items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -197387,7 +204065,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -197397,7 +204075,7 @@ components: apiVersion: apiVersion fieldPath: fieldPath awsElasticBlockStore: - partition: 9 + partition: 6 volumeID: volumeID readOnly: true fsType: fsType @@ -197407,7 +204085,7 @@ components: iscsi: chapAuthSession: true iscsiInterface: iscsiInterface - lun: 6 + lun: 5 chapAuthDiscovery: true iqn: iqn portals: @@ -197432,14 +204110,14 @@ components: - monitors - monitors configMap: - defaultMode: 6 + defaultMode: 3 name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key storageos: @@ -197479,7 +204157,7 @@ components: volumePath: volumePath fsType: fsType fc: - lun: 2 + lun: 6 targetWWNs: - targetWWNs - targetWWNs @@ -197505,11 +204183,24 @@ components: name: name - devicePath: devicePath name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator stdin: true terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -197739,6 +204430,11 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key - name: name value: value valueFrom: @@ -197757,6 +204453,11 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key restartPolicy: restartPolicy command: - command @@ -197772,11 +204473,24 @@ components: name: name - devicePath: devicePath name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator stdin: true terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -198006,6 +204720,11 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key - name: name value: value valueFrom: @@ -198024,6 +204743,11 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key restartPolicy: restartPolicy command: - command @@ -198035,7 +204759,7 @@ components: tty: true stdinOnce: true serviceAccount: serviceAccount - priority: 6 + priority: 7 restartPolicy: restartPolicy shareProcessNamespace: true hostUsers: true @@ -198053,50 +204777,24 @@ components: name: name - devicePath: devicePath name: name - image: image - imagePullPolicy: imagePullPolicy - livenessProbe: - terminationGracePeriodSeconds: 2 - failureThreshold: 5 - periodSeconds: 9 - tcpSocket: - port: port - host: host - timeoutSeconds: 4 - successThreshold: 3 - initialDelaySeconds: 7 - exec: - command: - - command - - command - grpc: - port: 2 - service: service - httpGet: - path: path - scheme: scheme - port: port - host: host - httpHeaders: - - name: name - value: value - - name: name - value: value + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator stdin: true terminationMessagePolicy: terminationMessagePolicy - terminationMessagePath: terminationMessagePath - workingDir: workingDir - resources: - claims: - - request: request - name: name - - request: request - name: name - requests: {} - limits: {} securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -198152,43 +204850,6 @@ components: value: value - name: name value: value - env: - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath ports: - protocol: protocol hostIP: hostIP @@ -198200,10 +204861,6 @@ components: name: name containerPort: 7 hostPort: 1 - restartPolicy: restartPolicy - command: - - command - - command volumeMounts: - mountPath: mountPath mountPropagation: mountPropagation @@ -198219,9 +204876,6 @@ components: subPath: subPath recursiveReadOnly: recursiveReadOnly subPathExpr: subPathExpr - args: - - args - - args lifecycle: postStart: sleep: @@ -198264,8 +204918,6 @@ components: - name: name value: value stopSignal: stopSignal - name: name - tty: true readinessProbe: terminationGracePeriodSeconds: 2 failureThreshold: 5 @@ -198298,7 +204950,6 @@ components: restartPolicy: restartPolicy - resourceName: resourceName restartPolicy: restartPolicy - stdinOnce: true envFrom: - configMapRef: name: name @@ -198314,11 +204965,6 @@ components: secretRef: name: name optional: true - - volumeDevices: - - devicePath: devicePath - name: name - - devicePath: devicePath - name: name image: image imagePullPolicy: imagePullPolicy livenessProbe: @@ -198348,8 +204994,6 @@ components: value: value - name: name value: value - stdin: true - terminationMessagePolicy: terminationMessagePolicy terminationMessagePath: terminationMessagePath workingDir: workingDir resources: @@ -198360,9 +205004,86 @@ components: name: name requests: {} limits: {} + env: + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + restartPolicy: restartPolicy + command: + - command + - command + args: + - args + - args + name: name + tty: true + stdinOnce: true + - volumeDevices: + - devicePath: devicePath + name: name + - devicePath: devicePath + name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + stdin: true + terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -198418,43 +205139,6 @@ components: value: value - name: name value: value - env: - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath ports: - protocol: protocol hostIP: hostIP @@ -198466,10 +205150,6 @@ components: name: name containerPort: 7 hostPort: 1 - restartPolicy: restartPolicy - command: - - command - - command volumeMounts: - mountPath: mountPath mountPropagation: mountPropagation @@ -198485,9 +205165,6 @@ components: subPath: subPath recursiveReadOnly: recursiveReadOnly subPathExpr: subPathExpr - args: - - args - - args lifecycle: postStart: sleep: @@ -198530,8 +205207,6 @@ components: - name: name value: value stopSignal: stopSignal - name: name - tty: true readinessProbe: terminationGracePeriodSeconds: 2 failureThreshold: 5 @@ -198564,7 +205239,6 @@ components: restartPolicy: restartPolicy - resourceName: resourceName restartPolicy: restartPolicy - stdinOnce: true envFrom: - configMapRef: name: name @@ -198580,12 +205254,6 @@ components: secretRef: name: name optional: true - initContainers: - - volumeDevices: - - devicePath: devicePath - name: name - - devicePath: devicePath - name: name image: image imagePullPolicy: imagePullPolicy livenessProbe: @@ -198615,8 +205283,6 @@ components: value: value - name: name value: value - stdin: true - terminationMessagePolicy: terminationMessagePolicy terminationMessagePath: terminationMessagePath workingDir: workingDir resources: @@ -198627,9 +205293,87 @@ components: name: name requests: {} limits: {} + env: + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + restartPolicy: restartPolicy + command: + - command + - command + args: + - args + - args + name: name + tty: true + stdinOnce: true + initContainers: + - volumeDevices: + - devicePath: devicePath + name: name + - devicePath: devicePath + name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + stdin: true + terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -198685,43 +205429,6 @@ components: value: value - name: name value: value - env: - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath ports: - protocol: protocol hostIP: hostIP @@ -198733,10 +205440,6 @@ components: name: name containerPort: 7 hostPort: 1 - restartPolicy: restartPolicy - command: - - command - - command volumeMounts: - mountPath: mountPath mountPropagation: mountPropagation @@ -198752,9 +205455,6 @@ components: subPath: subPath recursiveReadOnly: recursiveReadOnly subPathExpr: subPathExpr - args: - - args - - args lifecycle: postStart: sleep: @@ -198797,8 +205497,6 @@ components: - name: name value: value stopSignal: stopSignal - name: name - tty: true readinessProbe: terminationGracePeriodSeconds: 2 failureThreshold: 5 @@ -198831,7 +205529,6 @@ components: restartPolicy: restartPolicy - resourceName: resourceName restartPolicy: restartPolicy - stdinOnce: true envFrom: - configMapRef: name: name @@ -198847,11 +205544,6 @@ components: secretRef: name: name optional: true - - volumeDevices: - - devicePath: devicePath - name: name - - devicePath: devicePath - name: name image: image imagePullPolicy: imagePullPolicy livenessProbe: @@ -198881,8 +205573,6 @@ components: value: value - name: name value: value - stdin: true - terminationMessagePolicy: terminationMessagePolicy terminationMessagePath: terminationMessagePath workingDir: workingDir resources: @@ -198893,9 +205583,86 @@ components: name: name requests: {} limits: {} + env: + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + restartPolicy: restartPolicy + command: + - command + - command + args: + - args + - args + name: name + tty: true + stdinOnce: true + - volumeDevices: + - devicePath: devicePath + name: name + - devicePath: devicePath + name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + stdin: true + terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -198951,43 +205718,6 @@ components: value: value - name: name value: value - env: - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath ports: - protocol: protocol hostIP: hostIP @@ -198999,10 +205729,6 @@ components: name: name containerPort: 7 hostPort: 1 - restartPolicy: restartPolicy - command: - - command - - command volumeMounts: - mountPath: mountPath mountPropagation: mountPropagation @@ -199018,9 +205744,6 @@ components: subPath: subPath recursiveReadOnly: recursiveReadOnly subPathExpr: subPathExpr - args: - - args - - args lifecycle: postStart: sleep: @@ -199063,8 +205786,6 @@ components: - name: name value: value stopSignal: stopSignal - name: name - tty: true readinessProbe: terminationGracePeriodSeconds: 2 failureThreshold: 5 @@ -199097,7 +205818,6 @@ components: restartPolicy: restartPolicy - resourceName: resourceName restartPolicy: restartPolicy - stdinOnce: true envFrom: - configMapRef: name: name @@ -199113,6 +205833,102 @@ components: secretRef: name: name optional: true + image: image + imagePullPolicy: imagePullPolicy + livenessProbe: + terminationGracePeriodSeconds: 2 + failureThreshold: 5 + periodSeconds: 9 + tcpSocket: + port: port + host: host + timeoutSeconds: 4 + successThreshold: 3 + initialDelaySeconds: 7 + exec: + command: + - command + - command + grpc: + port: 2 + service: service + httpGet: + path: path + scheme: scheme + port: port + host: host + httpHeaders: + - name: name + value: value + - name: name + value: value + terminationMessagePath: terminationMessagePath + workingDir: workingDir + resources: + claims: + - request: request + name: name + - request: request + name: name + requests: {} + limits: {} + env: + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + restartPolicy: restartPolicy + command: + - command + - command + args: + - args + - args + name: name + tty: true + stdinOnce: true affinity: nodeAffinity: requiredDuringSchedulingIgnoredDuringExecution: @@ -199553,7 +206369,7 @@ components: health: health image: image imageID: imageID - restartCount: 7 + restartCount: 0 resources: claims: - request: request @@ -199575,7 +206391,7 @@ components: startedAt: 2000-01-23T04:56:07.000+00:00 containerID: containerID message: message - signal: 0 + signal: 6 finishedAt: 2000-01-23T04:56:07.000+00:00 volumeMounts: - mountPath: mountPath @@ -199601,17 +206417,17 @@ components: startedAt: 2000-01-23T04:56:07.000+00:00 containerID: containerID message: message - signal: 0 + signal: 6 finishedAt: 2000-01-23T04:56:07.000+00:00 containerID: containerID stopSignal: stopSignal user: linux: - uid: 4 - gid: 6 + uid: 7 + gid: 4 supplementalGroups: - - 0 - - 0 + - 8 + - 8 - allocatedResourcesStatus: - name: name resources: @@ -199627,7 +206443,7 @@ components: health: health image: image imageID: imageID - restartCount: 7 + restartCount: 0 resources: claims: - request: request @@ -199649,7 +206465,7 @@ components: startedAt: 2000-01-23T04:56:07.000+00:00 containerID: containerID message: message - signal: 0 + signal: 6 finishedAt: 2000-01-23T04:56:07.000+00:00 volumeMounts: - mountPath: mountPath @@ -199675,18 +206491,27 @@ components: startedAt: 2000-01-23T04:56:07.000+00:00 containerID: containerID message: message - signal: 0 + signal: 6 finishedAt: 2000-01-23T04:56:07.000+00:00 containerID: containerID stopSignal: stopSignal user: linux: - uid: 4 - gid: 6 + uid: 7 + gid: 4 supplementalGroups: - - 0 - - 0 + - 8 + - 8 hostIP: hostIP + extendedResourceClaimStatus: + resourceClaimName: resourceClaimName + requestMappings: + - requestName: requestName + containerName: containerName + resourceName: resourceName + - requestName: requestName + containerName: containerName + resourceName: resourceName nominatedNodeName: nominatedNodeName message: message podIPs: @@ -199709,7 +206534,7 @@ components: health: health image: image imageID: imageID - restartCount: 7 + restartCount: 0 resources: claims: - request: request @@ -199731,7 +206556,7 @@ components: startedAt: 2000-01-23T04:56:07.000+00:00 containerID: containerID message: message - signal: 0 + signal: 6 finishedAt: 2000-01-23T04:56:07.000+00:00 volumeMounts: - mountPath: mountPath @@ -199757,17 +206582,17 @@ components: startedAt: 2000-01-23T04:56:07.000+00:00 containerID: containerID message: message - signal: 0 + signal: 6 finishedAt: 2000-01-23T04:56:07.000+00:00 containerID: containerID stopSignal: stopSignal user: linux: - uid: 4 - gid: 6 + uid: 7 + gid: 4 supplementalGroups: - - 0 - - 0 + - 8 + - 8 - allocatedResourcesStatus: - name: name resources: @@ -199783,7 +206608,7 @@ components: health: health image: image imageID: imageID - restartCount: 7 + restartCount: 0 resources: claims: - request: request @@ -199805,7 +206630,7 @@ components: startedAt: 2000-01-23T04:56:07.000+00:00 containerID: containerID message: message - signal: 0 + signal: 6 finishedAt: 2000-01-23T04:56:07.000+00:00 volumeMounts: - mountPath: mountPath @@ -199831,17 +206656,17 @@ components: startedAt: 2000-01-23T04:56:07.000+00:00 containerID: containerID message: message - signal: 0 + signal: 6 finishedAt: 2000-01-23T04:56:07.000+00:00 containerID: containerID stopSignal: stopSignal user: linux: - uid: 4 - gid: 6 + uid: 7 + gid: 4 supplementalGroups: - - 0 - - 0 + - 8 + - 8 hostIPs: - ip: ip - ip: ip @@ -199853,14 +206678,14 @@ components: lastTransitionTime: 2000-01-23T04:56:07.000+00:00 message: message type: type - observedGeneration: 3 + observedGeneration: 0 lastProbeTime: 2000-01-23T04:56:07.000+00:00 status: status - reason: reason lastTransitionTime: 2000-01-23T04:56:07.000+00:00 message: message type: type - observedGeneration: 3 + observedGeneration: 0 lastProbeTime: 2000-01-23T04:56:07.000+00:00 status: status initContainerStatuses: @@ -199879,7 +206704,7 @@ components: health: health image: image imageID: imageID - restartCount: 7 + restartCount: 0 resources: claims: - request: request @@ -199901,7 +206726,7 @@ components: startedAt: 2000-01-23T04:56:07.000+00:00 containerID: containerID message: message - signal: 0 + signal: 6 finishedAt: 2000-01-23T04:56:07.000+00:00 volumeMounts: - mountPath: mountPath @@ -199927,17 +206752,17 @@ components: startedAt: 2000-01-23T04:56:07.000+00:00 containerID: containerID message: message - signal: 0 + signal: 6 finishedAt: 2000-01-23T04:56:07.000+00:00 containerID: containerID stopSignal: stopSignal user: linux: - uid: 4 - gid: 6 + uid: 7 + gid: 4 supplementalGroups: - - 0 - - 0 + - 8 + - 8 - allocatedResourcesStatus: - name: name resources: @@ -199953,7 +206778,7 @@ components: health: health image: image imageID: imageID - restartCount: 7 + restartCount: 0 resources: claims: - request: request @@ -199975,7 +206800,7 @@ components: startedAt: 2000-01-23T04:56:07.000+00:00 containerID: containerID message: message - signal: 0 + signal: 6 finishedAt: 2000-01-23T04:56:07.000+00:00 volumeMounts: - mountPath: mountPath @@ -200001,18 +206826,18 @@ components: startedAt: 2000-01-23T04:56:07.000+00:00 containerID: containerID message: message - signal: 0 + signal: 6 finishedAt: 2000-01-23T04:56:07.000+00:00 containerID: containerID stopSignal: stopSignal user: linux: - uid: 4 - gid: 6 + uid: 7 + gid: 4 supplementalGroups: - - 0 - - 0 - observedGeneration: 8 + - 8 + - 8 + observedGeneration: 3 - metadata: generation: 6 finalizers: @@ -200082,6 +206907,7 @@ components: - conditionType: conditionType - conditionType: conditionType serviceAccountName: serviceAccountName + hostnameOverride: hostnameOverride imagePullSecrets: - name: name - name: name @@ -200104,17 +206930,17 @@ components: appArmorProfile: localhostProfile: localhostProfile type: type - fsGroup: 7 + fsGroup: 1 fsGroupChangePolicy: fsGroupChangePolicy seLinuxChangePolicy: seLinuxChangePolicy - runAsGroup: 1 + runAsGroup: 4 runAsNonRoot: true sysctls: - name: name value: value - name: name value: value - runAsUser: 4 + runAsUser: 5 seccompProfile: localhostProfile: localhostProfile type: type @@ -200124,8 +206950,8 @@ components: hostProcess: true gmsaCredentialSpecName: gmsaCredentialSpecName supplementalGroups: - - 5 - - 5 + - 9 + - 9 supplementalGroupsPolicy: supplementalGroupsPolicy preemptionPolicy: preemptionPolicy nodeSelector: @@ -200134,12 +206960,12 @@ components: runtimeClassName: runtimeClassName tolerations: - effect: effect - tolerationSeconds: 9 + tolerationSeconds: 6 value: value key: key operator: operator - effect: effect - tolerationSeconds: 9 + tolerationSeconds: 6 value: value key: key operator: operator @@ -200158,7 +206984,7 @@ components: topologySpreadConstraints: - nodeTaintsPolicy: nodeTaintsPolicy whenUnsatisfiable: whenUnsatisfiable - maxSkew: 6 + maxSkew: 8 nodeAffinityPolicy: nodeAffinityPolicy labelSelector: matchExpressions: @@ -200174,14 +207000,14 @@ components: operator: operator matchLabels: key: matchLabels - minDomains: 8 + minDomains: 9 topologyKey: topologyKey matchLabelKeys: - matchLabelKeys - matchLabelKeys - nodeTaintsPolicy: nodeTaintsPolicy whenUnsatisfiable: whenUnsatisfiable - maxSkew: 6 + maxSkew: 8 nodeAffinityPolicy: nodeAffinityPolicy labelSelector: matchExpressions: @@ -200197,7 +207023,7 @@ components: operator: operator matchLabels: key: matchLabels - minDomains: 8 + minDomains: 9 topologyKey: topologyKey matchLabelKeys: - matchLabelKeys @@ -200306,20 +207132,20 @@ components: volumeMode: volumeMode secret: secretName: secretName - defaultMode: 3 + defaultMode: 7 optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key projected: sources: - downwardAPI: items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -200328,7 +207154,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -200341,26 +207167,33 @@ components: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key + podCertificate: + certificateChainPath: certificateChainPath + keyPath: keyPath + maxExpirationSeconds: 3 + keyType: keyType + credentialBundlePath: credentialBundlePath + signerName: signerName secret: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key serviceAccountToken: path: path audience: audience - expirationSeconds: 6 + expirationSeconds: 3 clusterTrustBundle: path: path labelSelector: @@ -200382,7 +207215,7 @@ components: signerName: signerName - downwardAPI: items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -200391,7 +207224,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -200404,26 +207237,33 @@ components: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key + podCertificate: + certificateChainPath: certificateChainPath + keyPath: keyPath + maxExpirationSeconds: 3 + keyType: keyType + credentialBundlePath: credentialBundlePath + signerName: signerName secret: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key serviceAccountToken: path: path audience: audience - expirationSeconds: 6 + expirationSeconds: 3 clusterTrustBundle: path: path labelSelector: @@ -200443,7 +207283,7 @@ components: name: name optional: true signerName: signerName - defaultMode: 5 + defaultMode: 6 cephfs: path: path secretRef: @@ -200498,9 +207338,9 @@ components: readOnly: true fsType: fsType downwardAPI: - defaultMode: 6 + defaultMode: 1 items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -200509,7 +207349,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -200519,7 +207359,7 @@ components: apiVersion: apiVersion fieldPath: fieldPath awsElasticBlockStore: - partition: 9 + partition: 6 volumeID: volumeID readOnly: true fsType: fsType @@ -200529,7 +207369,7 @@ components: iscsi: chapAuthSession: true iscsiInterface: iscsiInterface - lun: 6 + lun: 5 chapAuthDiscovery: true iqn: iqn portals: @@ -200554,14 +207394,14 @@ components: - monitors - monitors configMap: - defaultMode: 6 + defaultMode: 3 name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key storageos: @@ -200601,7 +207441,7 @@ components: volumePath: volumePath fsType: fsType fc: - lun: 2 + lun: 6 targetWWNs: - targetWWNs - targetWWNs @@ -200716,20 +207556,20 @@ components: volumeMode: volumeMode secret: secretName: secretName - defaultMode: 3 + defaultMode: 7 optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key projected: sources: - downwardAPI: items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -200738,7 +207578,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -200751,26 +207591,33 @@ components: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key + podCertificate: + certificateChainPath: certificateChainPath + keyPath: keyPath + maxExpirationSeconds: 3 + keyType: keyType + credentialBundlePath: credentialBundlePath + signerName: signerName secret: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key serviceAccountToken: path: path audience: audience - expirationSeconds: 6 + expirationSeconds: 3 clusterTrustBundle: path: path labelSelector: @@ -200792,7 +207639,7 @@ components: signerName: signerName - downwardAPI: items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -200801,7 +207648,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -200814,26 +207661,33 @@ components: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key + podCertificate: + certificateChainPath: certificateChainPath + keyPath: keyPath + maxExpirationSeconds: 3 + keyType: keyType + credentialBundlePath: credentialBundlePath + signerName: signerName secret: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key serviceAccountToken: path: path audience: audience - expirationSeconds: 6 + expirationSeconds: 3 clusterTrustBundle: path: path labelSelector: @@ -200853,7 +207707,7 @@ components: name: name optional: true signerName: signerName - defaultMode: 5 + defaultMode: 6 cephfs: path: path secretRef: @@ -200908,9 +207762,9 @@ components: readOnly: true fsType: fsType downwardAPI: - defaultMode: 6 + defaultMode: 1 items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -200919,7 +207773,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -200929,7 +207783,7 @@ components: apiVersion: apiVersion fieldPath: fieldPath awsElasticBlockStore: - partition: 9 + partition: 6 volumeID: volumeID readOnly: true fsType: fsType @@ -200939,7 +207793,7 @@ components: iscsi: chapAuthSession: true iscsiInterface: iscsiInterface - lun: 6 + lun: 5 chapAuthDiscovery: true iqn: iqn portals: @@ -200964,14 +207818,14 @@ components: - monitors - monitors configMap: - defaultMode: 6 + defaultMode: 3 name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key storageos: @@ -201011,7 +207865,7 @@ components: volumePath: volumePath fsType: fsType fc: - lun: 2 + lun: 6 targetWWNs: - targetWWNs - targetWWNs @@ -201037,11 +207891,24 @@ components: name: name - devicePath: devicePath name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator stdin: true terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -201271,6 +208138,11 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key - name: name value: value valueFrom: @@ -201289,6 +208161,11 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key restartPolicy: restartPolicy command: - command @@ -201304,11 +208181,24 @@ components: name: name - devicePath: devicePath name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator stdin: true terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -201538,6 +208428,11 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key - name: name value: value valueFrom: @@ -201556,6 +208451,11 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key restartPolicy: restartPolicy command: - command @@ -201567,7 +208467,7 @@ components: tty: true stdinOnce: true serviceAccount: serviceAccount - priority: 6 + priority: 7 restartPolicy: restartPolicy shareProcessNamespace: true hostUsers: true @@ -201585,50 +208485,24 @@ components: name: name - devicePath: devicePath name: name - image: image - imagePullPolicy: imagePullPolicy - livenessProbe: - terminationGracePeriodSeconds: 2 - failureThreshold: 5 - periodSeconds: 9 - tcpSocket: - port: port - host: host - timeoutSeconds: 4 - successThreshold: 3 - initialDelaySeconds: 7 - exec: - command: - - command - - command - grpc: - port: 2 - service: service - httpGet: - path: path - scheme: scheme - port: port - host: host - httpHeaders: - - name: name - value: value - - name: name - value: value + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator stdin: true terminationMessagePolicy: terminationMessagePolicy - terminationMessagePath: terminationMessagePath - workingDir: workingDir - resources: - claims: - - request: request - name: name - - request: request - name: name - requests: {} - limits: {} securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -201684,43 +208558,6 @@ components: value: value - name: name value: value - env: - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath ports: - protocol: protocol hostIP: hostIP @@ -201732,10 +208569,6 @@ components: name: name containerPort: 7 hostPort: 1 - restartPolicy: restartPolicy - command: - - command - - command volumeMounts: - mountPath: mountPath mountPropagation: mountPropagation @@ -201751,9 +208584,6 @@ components: subPath: subPath recursiveReadOnly: recursiveReadOnly subPathExpr: subPathExpr - args: - - args - - args lifecycle: postStart: sleep: @@ -201796,8 +208626,6 @@ components: - name: name value: value stopSignal: stopSignal - name: name - tty: true readinessProbe: terminationGracePeriodSeconds: 2 failureThreshold: 5 @@ -201830,7 +208658,6 @@ components: restartPolicy: restartPolicy - resourceName: resourceName restartPolicy: restartPolicy - stdinOnce: true envFrom: - configMapRef: name: name @@ -201846,11 +208673,6 @@ components: secretRef: name: name optional: true - - volumeDevices: - - devicePath: devicePath - name: name - - devicePath: devicePath - name: name image: image imagePullPolicy: imagePullPolicy livenessProbe: @@ -201880,8 +208702,6 @@ components: value: value - name: name value: value - stdin: true - terminationMessagePolicy: terminationMessagePolicy terminationMessagePath: terminationMessagePath workingDir: workingDir resources: @@ -201892,9 +208712,86 @@ components: name: name requests: {} limits: {} + env: + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + restartPolicy: restartPolicy + command: + - command + - command + args: + - args + - args + name: name + tty: true + stdinOnce: true + - volumeDevices: + - devicePath: devicePath + name: name + - devicePath: devicePath + name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + stdin: true + terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -201950,43 +208847,6 @@ components: value: value - name: name value: value - env: - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath ports: - protocol: protocol hostIP: hostIP @@ -201998,10 +208858,6 @@ components: name: name containerPort: 7 hostPort: 1 - restartPolicy: restartPolicy - command: - - command - - command volumeMounts: - mountPath: mountPath mountPropagation: mountPropagation @@ -202017,9 +208873,6 @@ components: subPath: subPath recursiveReadOnly: recursiveReadOnly subPathExpr: subPathExpr - args: - - args - - args lifecycle: postStart: sleep: @@ -202062,8 +208915,6 @@ components: - name: name value: value stopSignal: stopSignal - name: name - tty: true readinessProbe: terminationGracePeriodSeconds: 2 failureThreshold: 5 @@ -202096,7 +208947,6 @@ components: restartPolicy: restartPolicy - resourceName: resourceName restartPolicy: restartPolicy - stdinOnce: true envFrom: - configMapRef: name: name @@ -202112,12 +208962,6 @@ components: secretRef: name: name optional: true - initContainers: - - volumeDevices: - - devicePath: devicePath - name: name - - devicePath: devicePath - name: name image: image imagePullPolicy: imagePullPolicy livenessProbe: @@ -202147,8 +208991,6 @@ components: value: value - name: name value: value - stdin: true - terminationMessagePolicy: terminationMessagePolicy terminationMessagePath: terminationMessagePath workingDir: workingDir resources: @@ -202159,9 +209001,87 @@ components: name: name requests: {} limits: {} + env: + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + restartPolicy: restartPolicy + command: + - command + - command + args: + - args + - args + name: name + tty: true + stdinOnce: true + initContainers: + - volumeDevices: + - devicePath: devicePath + name: name + - devicePath: devicePath + name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + stdin: true + terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -202217,43 +209137,6 @@ components: value: value - name: name value: value - env: - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath ports: - protocol: protocol hostIP: hostIP @@ -202265,10 +209148,6 @@ components: name: name containerPort: 7 hostPort: 1 - restartPolicy: restartPolicy - command: - - command - - command volumeMounts: - mountPath: mountPath mountPropagation: mountPropagation @@ -202284,9 +209163,6 @@ components: subPath: subPath recursiveReadOnly: recursiveReadOnly subPathExpr: subPathExpr - args: - - args - - args lifecycle: postStart: sleep: @@ -202329,8 +209205,6 @@ components: - name: name value: value stopSignal: stopSignal - name: name - tty: true readinessProbe: terminationGracePeriodSeconds: 2 failureThreshold: 5 @@ -202363,7 +209237,6 @@ components: restartPolicy: restartPolicy - resourceName: resourceName restartPolicy: restartPolicy - stdinOnce: true envFrom: - configMapRef: name: name @@ -202379,11 +209252,6 @@ components: secretRef: name: name optional: true - - volumeDevices: - - devicePath: devicePath - name: name - - devicePath: devicePath - name: name image: image imagePullPolicy: imagePullPolicy livenessProbe: @@ -202413,8 +209281,6 @@ components: value: value - name: name value: value - stdin: true - terminationMessagePolicy: terminationMessagePolicy terminationMessagePath: terminationMessagePath workingDir: workingDir resources: @@ -202425,9 +209291,86 @@ components: name: name requests: {} limits: {} + env: + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + restartPolicy: restartPolicy + command: + - command + - command + args: + - args + - args + name: name + tty: true + stdinOnce: true + - volumeDevices: + - devicePath: devicePath + name: name + - devicePath: devicePath + name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + stdin: true + terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -202483,43 +209426,6 @@ components: value: value - name: name value: value - env: - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath ports: - protocol: protocol hostIP: hostIP @@ -202531,10 +209437,6 @@ components: name: name containerPort: 7 hostPort: 1 - restartPolicy: restartPolicy - command: - - command - - command volumeMounts: - mountPath: mountPath mountPropagation: mountPropagation @@ -202550,9 +209452,6 @@ components: subPath: subPath recursiveReadOnly: recursiveReadOnly subPathExpr: subPathExpr - args: - - args - - args lifecycle: postStart: sleep: @@ -202595,8 +209494,6 @@ components: - name: name value: value stopSignal: stopSignal - name: name - tty: true readinessProbe: terminationGracePeriodSeconds: 2 failureThreshold: 5 @@ -202629,7 +209526,6 @@ components: restartPolicy: restartPolicy - resourceName: resourceName restartPolicy: restartPolicy - stdinOnce: true envFrom: - configMapRef: name: name @@ -202645,6 +209541,102 @@ components: secretRef: name: name optional: true + image: image + imagePullPolicy: imagePullPolicy + livenessProbe: + terminationGracePeriodSeconds: 2 + failureThreshold: 5 + periodSeconds: 9 + tcpSocket: + port: port + host: host + timeoutSeconds: 4 + successThreshold: 3 + initialDelaySeconds: 7 + exec: + command: + - command + - command + grpc: + port: 2 + service: service + httpGet: + path: path + scheme: scheme + port: port + host: host + httpHeaders: + - name: name + value: value + - name: name + value: value + terminationMessagePath: terminationMessagePath + workingDir: workingDir + resources: + claims: + - request: request + name: name + - request: request + name: name + requests: {} + limits: {} + env: + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + restartPolicy: restartPolicy + command: + - command + - command + args: + - args + - args + name: name + tty: true + stdinOnce: true affinity: nodeAffinity: requiredDuringSchedulingIgnoredDuringExecution: @@ -203085,7 +210077,7 @@ components: health: health image: image imageID: imageID - restartCount: 7 + restartCount: 0 resources: claims: - request: request @@ -203107,7 +210099,7 @@ components: startedAt: 2000-01-23T04:56:07.000+00:00 containerID: containerID message: message - signal: 0 + signal: 6 finishedAt: 2000-01-23T04:56:07.000+00:00 volumeMounts: - mountPath: mountPath @@ -203133,17 +210125,17 @@ components: startedAt: 2000-01-23T04:56:07.000+00:00 containerID: containerID message: message - signal: 0 + signal: 6 finishedAt: 2000-01-23T04:56:07.000+00:00 containerID: containerID stopSignal: stopSignal user: linux: - uid: 4 - gid: 6 + uid: 7 + gid: 4 supplementalGroups: - - 0 - - 0 + - 8 + - 8 - allocatedResourcesStatus: - name: name resources: @@ -203159,7 +210151,7 @@ components: health: health image: image imageID: imageID - restartCount: 7 + restartCount: 0 resources: claims: - request: request @@ -203181,7 +210173,7 @@ components: startedAt: 2000-01-23T04:56:07.000+00:00 containerID: containerID message: message - signal: 0 + signal: 6 finishedAt: 2000-01-23T04:56:07.000+00:00 volumeMounts: - mountPath: mountPath @@ -203207,18 +210199,27 @@ components: startedAt: 2000-01-23T04:56:07.000+00:00 containerID: containerID message: message - signal: 0 + signal: 6 finishedAt: 2000-01-23T04:56:07.000+00:00 containerID: containerID stopSignal: stopSignal user: linux: - uid: 4 - gid: 6 + uid: 7 + gid: 4 supplementalGroups: - - 0 - - 0 + - 8 + - 8 hostIP: hostIP + extendedResourceClaimStatus: + resourceClaimName: resourceClaimName + requestMappings: + - requestName: requestName + containerName: containerName + resourceName: resourceName + - requestName: requestName + containerName: containerName + resourceName: resourceName nominatedNodeName: nominatedNodeName message: message podIPs: @@ -203241,7 +210242,7 @@ components: health: health image: image imageID: imageID - restartCount: 7 + restartCount: 0 resources: claims: - request: request @@ -203263,7 +210264,7 @@ components: startedAt: 2000-01-23T04:56:07.000+00:00 containerID: containerID message: message - signal: 0 + signal: 6 finishedAt: 2000-01-23T04:56:07.000+00:00 volumeMounts: - mountPath: mountPath @@ -203289,17 +210290,17 @@ components: startedAt: 2000-01-23T04:56:07.000+00:00 containerID: containerID message: message - signal: 0 + signal: 6 finishedAt: 2000-01-23T04:56:07.000+00:00 containerID: containerID stopSignal: stopSignal user: linux: - uid: 4 - gid: 6 + uid: 7 + gid: 4 supplementalGroups: - - 0 - - 0 + - 8 + - 8 - allocatedResourcesStatus: - name: name resources: @@ -203315,7 +210316,7 @@ components: health: health image: image imageID: imageID - restartCount: 7 + restartCount: 0 resources: claims: - request: request @@ -203337,7 +210338,7 @@ components: startedAt: 2000-01-23T04:56:07.000+00:00 containerID: containerID message: message - signal: 0 + signal: 6 finishedAt: 2000-01-23T04:56:07.000+00:00 volumeMounts: - mountPath: mountPath @@ -203363,17 +210364,17 @@ components: startedAt: 2000-01-23T04:56:07.000+00:00 containerID: containerID message: message - signal: 0 + signal: 6 finishedAt: 2000-01-23T04:56:07.000+00:00 containerID: containerID stopSignal: stopSignal user: linux: - uid: 4 - gid: 6 + uid: 7 + gid: 4 supplementalGroups: - - 0 - - 0 + - 8 + - 8 hostIPs: - ip: ip - ip: ip @@ -203385,14 +210386,14 @@ components: lastTransitionTime: 2000-01-23T04:56:07.000+00:00 message: message type: type - observedGeneration: 3 + observedGeneration: 0 lastProbeTime: 2000-01-23T04:56:07.000+00:00 status: status - reason: reason lastTransitionTime: 2000-01-23T04:56:07.000+00:00 message: message type: type - observedGeneration: 3 + observedGeneration: 0 lastProbeTime: 2000-01-23T04:56:07.000+00:00 status: status initContainerStatuses: @@ -203411,7 +210412,7 @@ components: health: health image: image imageID: imageID - restartCount: 7 + restartCount: 0 resources: claims: - request: request @@ -203433,7 +210434,7 @@ components: startedAt: 2000-01-23T04:56:07.000+00:00 containerID: containerID message: message - signal: 0 + signal: 6 finishedAt: 2000-01-23T04:56:07.000+00:00 volumeMounts: - mountPath: mountPath @@ -203459,17 +210460,17 @@ components: startedAt: 2000-01-23T04:56:07.000+00:00 containerID: containerID message: message - signal: 0 + signal: 6 finishedAt: 2000-01-23T04:56:07.000+00:00 containerID: containerID stopSignal: stopSignal user: linux: - uid: 4 - gid: 6 + uid: 7 + gid: 4 supplementalGroups: - - 0 - - 0 + - 8 + - 8 - allocatedResourcesStatus: - name: name resources: @@ -203485,7 +210486,7 @@ components: health: health image: image imageID: imageID - restartCount: 7 + restartCount: 0 resources: claims: - request: request @@ -203507,7 +210508,7 @@ components: startedAt: 2000-01-23T04:56:07.000+00:00 containerID: containerID message: message - signal: 0 + signal: 6 finishedAt: 2000-01-23T04:56:07.000+00:00 volumeMounts: - mountPath: mountPath @@ -203533,18 +210534,18 @@ components: startedAt: 2000-01-23T04:56:07.000+00:00 containerID: containerID message: message - signal: 0 + signal: 6 finishedAt: 2000-01-23T04:56:07.000+00:00 containerID: containerID stopSignal: stopSignal user: linux: - uid: 4 - gid: 6 + uid: 7 + gid: 4 supplementalGroups: - - 0 - - 0 - observedGeneration: 8 + - 8 + - 8 + observedGeneration: 3 properties: apiVersion: description: 'APIVersion defines the versioned schema of this representation @@ -203679,17 +210680,17 @@ components: appArmorProfile: localhostProfile: localhostProfile type: type - fsGroup: 7 + fsGroup: 1 fsGroupChangePolicy: fsGroupChangePolicy seLinuxChangePolicy: seLinuxChangePolicy - runAsGroup: 1 + runAsGroup: 4 runAsNonRoot: true sysctls: - name: name value: value - name: name value: value - runAsUser: 4 + runAsUser: 5 seccompProfile: localhostProfile: localhostProfile type: type @@ -203699,8 +210700,8 @@ components: hostProcess: true gmsaCredentialSpecName: gmsaCredentialSpecName supplementalGroups: - - 5 - - 5 + - 9 + - 9 supplementalGroupsPolicy: supplementalGroupsPolicy properties: appArmorProfile: @@ -203821,6 +210822,7 @@ components: - conditionType: conditionType - conditionType: conditionType serviceAccountName: serviceAccountName + hostnameOverride: hostnameOverride imagePullSecrets: - name: name - name: name @@ -203843,17 +210845,17 @@ components: appArmorProfile: localhostProfile: localhostProfile type: type - fsGroup: 7 + fsGroup: 1 fsGroupChangePolicy: fsGroupChangePolicy seLinuxChangePolicy: seLinuxChangePolicy - runAsGroup: 1 + runAsGroup: 4 runAsNonRoot: true sysctls: - name: name value: value - name: name value: value - runAsUser: 4 + runAsUser: 5 seccompProfile: localhostProfile: localhostProfile type: type @@ -203863,8 +210865,8 @@ components: hostProcess: true gmsaCredentialSpecName: gmsaCredentialSpecName supplementalGroups: - - 5 - - 5 + - 9 + - 9 supplementalGroupsPolicy: supplementalGroupsPolicy preemptionPolicy: preemptionPolicy nodeSelector: @@ -203873,12 +210875,12 @@ components: runtimeClassName: runtimeClassName tolerations: - effect: effect - tolerationSeconds: 9 + tolerationSeconds: 6 value: value key: key operator: operator - effect: effect - tolerationSeconds: 9 + tolerationSeconds: 6 value: value key: key operator: operator @@ -203897,7 +210899,7 @@ components: topologySpreadConstraints: - nodeTaintsPolicy: nodeTaintsPolicy whenUnsatisfiable: whenUnsatisfiable - maxSkew: 6 + maxSkew: 8 nodeAffinityPolicy: nodeAffinityPolicy labelSelector: matchExpressions: @@ -203913,14 +210915,14 @@ components: operator: operator matchLabels: key: matchLabels - minDomains: 8 + minDomains: 9 topologyKey: topologyKey matchLabelKeys: - matchLabelKeys - matchLabelKeys - nodeTaintsPolicy: nodeTaintsPolicy whenUnsatisfiable: whenUnsatisfiable - maxSkew: 6 + maxSkew: 8 nodeAffinityPolicy: nodeAffinityPolicy labelSelector: matchExpressions: @@ -203936,7 +210938,7 @@ components: operator: operator matchLabels: key: matchLabels - minDomains: 8 + minDomains: 9 topologyKey: topologyKey matchLabelKeys: - matchLabelKeys @@ -204045,20 +211047,20 @@ components: volumeMode: volumeMode secret: secretName: secretName - defaultMode: 3 + defaultMode: 7 optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key projected: sources: - downwardAPI: items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -204067,7 +211069,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -204080,26 +211082,33 @@ components: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key + podCertificate: + certificateChainPath: certificateChainPath + keyPath: keyPath + maxExpirationSeconds: 3 + keyType: keyType + credentialBundlePath: credentialBundlePath + signerName: signerName secret: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key serviceAccountToken: path: path audience: audience - expirationSeconds: 6 + expirationSeconds: 3 clusterTrustBundle: path: path labelSelector: @@ -204121,7 +211130,7 @@ components: signerName: signerName - downwardAPI: items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -204130,7 +211139,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -204143,26 +211152,33 @@ components: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key + podCertificate: + certificateChainPath: certificateChainPath + keyPath: keyPath + maxExpirationSeconds: 3 + keyType: keyType + credentialBundlePath: credentialBundlePath + signerName: signerName secret: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key serviceAccountToken: path: path audience: audience - expirationSeconds: 6 + expirationSeconds: 3 clusterTrustBundle: path: path labelSelector: @@ -204182,7 +211198,7 @@ components: name: name optional: true signerName: signerName - defaultMode: 5 + defaultMode: 6 cephfs: path: path secretRef: @@ -204237,9 +211253,9 @@ components: readOnly: true fsType: fsType downwardAPI: - defaultMode: 6 + defaultMode: 1 items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -204248,7 +211264,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -204258,7 +211274,7 @@ components: apiVersion: apiVersion fieldPath: fieldPath awsElasticBlockStore: - partition: 9 + partition: 6 volumeID: volumeID readOnly: true fsType: fsType @@ -204268,7 +211284,7 @@ components: iscsi: chapAuthSession: true iscsiInterface: iscsiInterface - lun: 6 + lun: 5 chapAuthDiscovery: true iqn: iqn portals: @@ -204293,14 +211309,14 @@ components: - monitors - monitors configMap: - defaultMode: 6 + defaultMode: 3 name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key storageos: @@ -204340,7 +211356,7 @@ components: volumePath: volumePath fsType: fsType fc: - lun: 2 + lun: 6 targetWWNs: - targetWWNs - targetWWNs @@ -204455,20 +211471,20 @@ components: volumeMode: volumeMode secret: secretName: secretName - defaultMode: 3 + defaultMode: 7 optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key projected: sources: - downwardAPI: items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -204477,7 +211493,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -204490,26 +211506,33 @@ components: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key + podCertificate: + certificateChainPath: certificateChainPath + keyPath: keyPath + maxExpirationSeconds: 3 + keyType: keyType + credentialBundlePath: credentialBundlePath + signerName: signerName secret: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key serviceAccountToken: path: path audience: audience - expirationSeconds: 6 + expirationSeconds: 3 clusterTrustBundle: path: path labelSelector: @@ -204531,7 +211554,7 @@ components: signerName: signerName - downwardAPI: items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -204540,7 +211563,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -204553,26 +211576,33 @@ components: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key + podCertificate: + certificateChainPath: certificateChainPath + keyPath: keyPath + maxExpirationSeconds: 3 + keyType: keyType + credentialBundlePath: credentialBundlePath + signerName: signerName secret: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key serviceAccountToken: path: path audience: audience - expirationSeconds: 6 + expirationSeconds: 3 clusterTrustBundle: path: path labelSelector: @@ -204592,7 +211622,7 @@ components: name: name optional: true signerName: signerName - defaultMode: 5 + defaultMode: 6 cephfs: path: path secretRef: @@ -204647,9 +211677,9 @@ components: readOnly: true fsType: fsType downwardAPI: - defaultMode: 6 + defaultMode: 1 items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -204658,7 +211688,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -204668,7 +211698,7 @@ components: apiVersion: apiVersion fieldPath: fieldPath awsElasticBlockStore: - partition: 9 + partition: 6 volumeID: volumeID readOnly: true fsType: fsType @@ -204678,7 +211708,7 @@ components: iscsi: chapAuthSession: true iscsiInterface: iscsiInterface - lun: 6 + lun: 5 chapAuthDiscovery: true iqn: iqn portals: @@ -204703,14 +211733,14 @@ components: - monitors - monitors configMap: - defaultMode: 6 + defaultMode: 3 name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key storageos: @@ -204750,7 +211780,7 @@ components: volumePath: volumePath fsType: fsType fc: - lun: 2 + lun: 6 targetWWNs: - targetWWNs - targetWWNs @@ -204776,11 +211806,24 @@ components: name: name - devicePath: devicePath name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator stdin: true terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -205010,6 +212053,11 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key - name: name value: value valueFrom: @@ -205028,6 +212076,11 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key restartPolicy: restartPolicy command: - command @@ -205043,11 +212096,24 @@ components: name: name - devicePath: devicePath name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator stdin: true terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -205277,6 +212343,11 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key - name: name value: value valueFrom: @@ -205295,6 +212366,11 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key restartPolicy: restartPolicy command: - command @@ -205306,7 +212382,7 @@ components: tty: true stdinOnce: true serviceAccount: serviceAccount - priority: 6 + priority: 7 restartPolicy: restartPolicy shareProcessNamespace: true hostUsers: true @@ -205324,50 +212400,24 @@ components: name: name - devicePath: devicePath name: name - image: image - imagePullPolicy: imagePullPolicy - livenessProbe: - terminationGracePeriodSeconds: 2 - failureThreshold: 5 - periodSeconds: 9 - tcpSocket: - port: port - host: host - timeoutSeconds: 4 - successThreshold: 3 - initialDelaySeconds: 7 - exec: - command: - - command - - command - grpc: - port: 2 - service: service - httpGet: - path: path - scheme: scheme - port: port - host: host - httpHeaders: - - name: name - value: value - - name: name - value: value + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator stdin: true terminationMessagePolicy: terminationMessagePolicy - terminationMessagePath: terminationMessagePath - workingDir: workingDir - resources: - claims: - - request: request - name: name - - request: request - name: name - requests: {} - limits: {} securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -205423,43 +212473,6 @@ components: value: value - name: name value: value - env: - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath ports: - protocol: protocol hostIP: hostIP @@ -205471,10 +212484,6 @@ components: name: name containerPort: 7 hostPort: 1 - restartPolicy: restartPolicy - command: - - command - - command volumeMounts: - mountPath: mountPath mountPropagation: mountPropagation @@ -205490,9 +212499,6 @@ components: subPath: subPath recursiveReadOnly: recursiveReadOnly subPathExpr: subPathExpr - args: - - args - - args lifecycle: postStart: sleep: @@ -205535,8 +212541,6 @@ components: - name: name value: value stopSignal: stopSignal - name: name - tty: true readinessProbe: terminationGracePeriodSeconds: 2 failureThreshold: 5 @@ -205569,7 +212573,6 @@ components: restartPolicy: restartPolicy - resourceName: resourceName restartPolicy: restartPolicy - stdinOnce: true envFrom: - configMapRef: name: name @@ -205585,11 +212588,6 @@ components: secretRef: name: name optional: true - - volumeDevices: - - devicePath: devicePath - name: name - - devicePath: devicePath - name: name image: image imagePullPolicy: imagePullPolicy livenessProbe: @@ -205619,8 +212617,6 @@ components: value: value - name: name value: value - stdin: true - terminationMessagePolicy: terminationMessagePolicy terminationMessagePath: terminationMessagePath workingDir: workingDir resources: @@ -205631,9 +212627,86 @@ components: name: name requests: {} limits: {} + env: + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + restartPolicy: restartPolicy + command: + - command + - command + args: + - args + - args + name: name + tty: true + stdinOnce: true + - volumeDevices: + - devicePath: devicePath + name: name + - devicePath: devicePath + name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + stdin: true + terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -205689,43 +212762,6 @@ components: value: value - name: name value: value - env: - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath ports: - protocol: protocol hostIP: hostIP @@ -205737,10 +212773,6 @@ components: name: name containerPort: 7 hostPort: 1 - restartPolicy: restartPolicy - command: - - command - - command volumeMounts: - mountPath: mountPath mountPropagation: mountPropagation @@ -205756,9 +212788,6 @@ components: subPath: subPath recursiveReadOnly: recursiveReadOnly subPathExpr: subPathExpr - args: - - args - - args lifecycle: postStart: sleep: @@ -205801,8 +212830,6 @@ components: - name: name value: value stopSignal: stopSignal - name: name - tty: true readinessProbe: terminationGracePeriodSeconds: 2 failureThreshold: 5 @@ -205835,7 +212862,6 @@ components: restartPolicy: restartPolicy - resourceName: resourceName restartPolicy: restartPolicy - stdinOnce: true envFrom: - configMapRef: name: name @@ -205851,12 +212877,6 @@ components: secretRef: name: name optional: true - initContainers: - - volumeDevices: - - devicePath: devicePath - name: name - - devicePath: devicePath - name: name image: image imagePullPolicy: imagePullPolicy livenessProbe: @@ -205886,8 +212906,6 @@ components: value: value - name: name value: value - stdin: true - terminationMessagePolicy: terminationMessagePolicy terminationMessagePath: terminationMessagePath workingDir: workingDir resources: @@ -205898,9 +212916,87 @@ components: name: name requests: {} limits: {} + env: + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + restartPolicy: restartPolicy + command: + - command + - command + args: + - args + - args + name: name + tty: true + stdinOnce: true + initContainers: + - volumeDevices: + - devicePath: devicePath + name: name + - devicePath: devicePath + name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + stdin: true + terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -205956,43 +213052,6 @@ components: value: value - name: name value: value - env: - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath ports: - protocol: protocol hostIP: hostIP @@ -206004,10 +213063,6 @@ components: name: name containerPort: 7 hostPort: 1 - restartPolicy: restartPolicy - command: - - command - - command volumeMounts: - mountPath: mountPath mountPropagation: mountPropagation @@ -206023,9 +213078,6 @@ components: subPath: subPath recursiveReadOnly: recursiveReadOnly subPathExpr: subPathExpr - args: - - args - - args lifecycle: postStart: sleep: @@ -206068,8 +213120,6 @@ components: - name: name value: value stopSignal: stopSignal - name: name - tty: true readinessProbe: terminationGracePeriodSeconds: 2 failureThreshold: 5 @@ -206102,7 +213152,6 @@ components: restartPolicy: restartPolicy - resourceName: resourceName restartPolicy: restartPolicy - stdinOnce: true envFrom: - configMapRef: name: name @@ -206118,11 +213167,6 @@ components: secretRef: name: name optional: true - - volumeDevices: - - devicePath: devicePath - name: name - - devicePath: devicePath - name: name image: image imagePullPolicy: imagePullPolicy livenessProbe: @@ -206152,8 +213196,6 @@ components: value: value - name: name value: value - stdin: true - terminationMessagePolicy: terminationMessagePolicy terminationMessagePath: terminationMessagePath workingDir: workingDir resources: @@ -206164,9 +213206,86 @@ components: name: name requests: {} limits: {} + env: + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + restartPolicy: restartPolicy + command: + - command + - command + args: + - args + - args + name: name + tty: true + stdinOnce: true + - volumeDevices: + - devicePath: devicePath + name: name + - devicePath: devicePath + name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + stdin: true + terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -206222,43 +213341,6 @@ components: value: value - name: name value: value - env: - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath ports: - protocol: protocol hostIP: hostIP @@ -206270,10 +213352,6 @@ components: name: name containerPort: 7 hostPort: 1 - restartPolicy: restartPolicy - command: - - command - - command volumeMounts: - mountPath: mountPath mountPropagation: mountPropagation @@ -206289,9 +213367,6 @@ components: subPath: subPath recursiveReadOnly: recursiveReadOnly subPathExpr: subPathExpr - args: - - args - - args lifecycle: postStart: sleep: @@ -206334,8 +213409,6 @@ components: - name: name value: value stopSignal: stopSignal - name: name - tty: true readinessProbe: terminationGracePeriodSeconds: 2 failureThreshold: 5 @@ -206368,7 +213441,6 @@ components: restartPolicy: restartPolicy - resourceName: resourceName restartPolicy: restartPolicy - stdinOnce: true envFrom: - configMapRef: name: name @@ -206384,6 +213456,102 @@ components: secretRef: name: name optional: true + image: image + imagePullPolicy: imagePullPolicy + livenessProbe: + terminationGracePeriodSeconds: 2 + failureThreshold: 5 + periodSeconds: 9 + tcpSocket: + port: port + host: host + timeoutSeconds: 4 + successThreshold: 3 + initialDelaySeconds: 7 + exec: + command: + - command + - command + grpc: + port: 2 + service: service + httpGet: + path: path + scheme: scheme + port: port + host: host + httpHeaders: + - name: name + value: value + - name: name + value: value + terminationMessagePath: terminationMessagePath + workingDir: workingDir + resources: + claims: + - request: request + name: name + - request: request + name: name + requests: {} + limits: {} + env: + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + restartPolicy: restartPolicy + command: + - command + - command + args: + - args + - args + name: name + tty: true + stdinOnce: true affinity: nodeAffinity: requiredDuringSchedulingIgnoredDuringExecution: @@ -206869,8 +214037,11 @@ components: type: boolean hostNetwork: description: Host networking requested for this pod. Use the host's network - namespace. If this option is set, the ports that will be used must be - specified. Default to false. + namespace. When using HostNetwork you should specify ports so the scheduler + is aware. When `hostNetwork` is true, specified `hostPort` fields in port + definitions must match `containerPort`, and unspecified `hostPort` fields + in port definitions are defaulted to match `containerPort`. Default to + false. type: boolean hostPID: description: 'Use the host''s pid namespace. Optional: Default to false.' @@ -206890,6 +214061,12 @@ components: description: Specifies the hostname of the Pod If not specified, the pod's hostname will be set to a system-defined value. type: string + hostnameOverride: + description: |- + HostnameOverride specifies an explicit override for the pod's hostname as perceived by the pod. This field only specifies the pod's hostname and does not affect its DNS records. When this field is set to a non-empty string: - It takes precedence over the values set in `hostname` and `subdomain`. - The Pod's hostname will be set to this value. - `setHostnameAsFQDN` must be nil or set to false. - `hostNetwork` must be set to false. + + This field must be a valid DNS subdomain as defined in RFC 1123 and contain at most 64 characters. Requires the HostnameOverride feature gate to be enabled. + type: string imagePullSecrets: description: 'ImagePullSecrets is an optional list of references to secrets in the same namespace to use for pulling any of the images used by this @@ -207132,7 +214309,7 @@ components: health: health image: image imageID: imageID - restartCount: 7 + restartCount: 0 resources: claims: - request: request @@ -207154,7 +214331,7 @@ components: startedAt: 2000-01-23T04:56:07.000+00:00 containerID: containerID message: message - signal: 0 + signal: 6 finishedAt: 2000-01-23T04:56:07.000+00:00 volumeMounts: - mountPath: mountPath @@ -207180,17 +214357,17 @@ components: startedAt: 2000-01-23T04:56:07.000+00:00 containerID: containerID message: message - signal: 0 + signal: 6 finishedAt: 2000-01-23T04:56:07.000+00:00 containerID: containerID stopSignal: stopSignal user: linux: - uid: 4 - gid: 6 + uid: 7 + gid: 4 supplementalGroups: - - 0 - - 0 + - 8 + - 8 - allocatedResourcesStatus: - name: name resources: @@ -207206,7 +214383,7 @@ components: health: health image: image imageID: imageID - restartCount: 7 + restartCount: 0 resources: claims: - request: request @@ -207228,7 +214405,7 @@ components: startedAt: 2000-01-23T04:56:07.000+00:00 containerID: containerID message: message - signal: 0 + signal: 6 finishedAt: 2000-01-23T04:56:07.000+00:00 volumeMounts: - mountPath: mountPath @@ -207254,18 +214431,27 @@ components: startedAt: 2000-01-23T04:56:07.000+00:00 containerID: containerID message: message - signal: 0 + signal: 6 finishedAt: 2000-01-23T04:56:07.000+00:00 containerID: containerID stopSignal: stopSignal user: linux: - uid: 4 - gid: 6 + uid: 7 + gid: 4 supplementalGroups: - - 0 - - 0 + - 8 + - 8 hostIP: hostIP + extendedResourceClaimStatus: + resourceClaimName: resourceClaimName + requestMappings: + - requestName: requestName + containerName: containerName + resourceName: resourceName + - requestName: requestName + containerName: containerName + resourceName: resourceName nominatedNodeName: nominatedNodeName message: message podIPs: @@ -207288,7 +214474,7 @@ components: health: health image: image imageID: imageID - restartCount: 7 + restartCount: 0 resources: claims: - request: request @@ -207310,7 +214496,7 @@ components: startedAt: 2000-01-23T04:56:07.000+00:00 containerID: containerID message: message - signal: 0 + signal: 6 finishedAt: 2000-01-23T04:56:07.000+00:00 volumeMounts: - mountPath: mountPath @@ -207336,17 +214522,17 @@ components: startedAt: 2000-01-23T04:56:07.000+00:00 containerID: containerID message: message - signal: 0 + signal: 6 finishedAt: 2000-01-23T04:56:07.000+00:00 containerID: containerID stopSignal: stopSignal user: linux: - uid: 4 - gid: 6 + uid: 7 + gid: 4 supplementalGroups: - - 0 - - 0 + - 8 + - 8 - allocatedResourcesStatus: - name: name resources: @@ -207362,7 +214548,7 @@ components: health: health image: image imageID: imageID - restartCount: 7 + restartCount: 0 resources: claims: - request: request @@ -207384,7 +214570,7 @@ components: startedAt: 2000-01-23T04:56:07.000+00:00 containerID: containerID message: message - signal: 0 + signal: 6 finishedAt: 2000-01-23T04:56:07.000+00:00 volumeMounts: - mountPath: mountPath @@ -207410,17 +214596,17 @@ components: startedAt: 2000-01-23T04:56:07.000+00:00 containerID: containerID message: message - signal: 0 + signal: 6 finishedAt: 2000-01-23T04:56:07.000+00:00 containerID: containerID stopSignal: stopSignal user: linux: - uid: 4 - gid: 6 + uid: 7 + gid: 4 supplementalGroups: - - 0 - - 0 + - 8 + - 8 hostIPs: - ip: ip - ip: ip @@ -207432,14 +214618,14 @@ components: lastTransitionTime: 2000-01-23T04:56:07.000+00:00 message: message type: type - observedGeneration: 3 + observedGeneration: 0 lastProbeTime: 2000-01-23T04:56:07.000+00:00 status: status - reason: reason lastTransitionTime: 2000-01-23T04:56:07.000+00:00 message: message type: type - observedGeneration: 3 + observedGeneration: 0 lastProbeTime: 2000-01-23T04:56:07.000+00:00 status: status initContainerStatuses: @@ -207458,7 +214644,7 @@ components: health: health image: image imageID: imageID - restartCount: 7 + restartCount: 0 resources: claims: - request: request @@ -207480,7 +214666,7 @@ components: startedAt: 2000-01-23T04:56:07.000+00:00 containerID: containerID message: message - signal: 0 + signal: 6 finishedAt: 2000-01-23T04:56:07.000+00:00 volumeMounts: - mountPath: mountPath @@ -207506,17 +214692,17 @@ components: startedAt: 2000-01-23T04:56:07.000+00:00 containerID: containerID message: message - signal: 0 + signal: 6 finishedAt: 2000-01-23T04:56:07.000+00:00 containerID: containerID stopSignal: stopSignal user: linux: - uid: 4 - gid: 6 + uid: 7 + gid: 4 supplementalGroups: - - 0 - - 0 + - 8 + - 8 - allocatedResourcesStatus: - name: name resources: @@ -207532,7 +214718,7 @@ components: health: health image: image imageID: imageID - restartCount: 7 + restartCount: 0 resources: claims: - request: request @@ -207554,7 +214740,7 @@ components: startedAt: 2000-01-23T04:56:07.000+00:00 containerID: containerID message: message - signal: 0 + signal: 6 finishedAt: 2000-01-23T04:56:07.000+00:00 volumeMounts: - mountPath: mountPath @@ -207580,18 +214766,18 @@ components: startedAt: 2000-01-23T04:56:07.000+00:00 containerID: containerID message: message - signal: 0 + signal: 6 finishedAt: 2000-01-23T04:56:07.000+00:00 containerID: containerID stopSignal: stopSignal user: linux: - uid: 4 - gid: 6 + uid: 7 + gid: 4 supplementalGroups: - - 0 - - 0 - observedGeneration: 8 + - 8 + - 8 + observedGeneration: 3 properties: conditions: description: 'Current service state of pod. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#pod-conditions' @@ -207626,6 +214812,8 @@ components: $ref: '#/components/schemas/v1.ContainerStatus' type: array x-kubernetes-list-type: atomic + extendedResourceClaimStatus: + $ref: '#/components/schemas/v1.PodExtendedResourceClaimStatus' hostIP: description: hostIP holds the IP address of the host to which the pod is assigned. Empty if the pod has not started yet. A pod can be assigned @@ -207810,6 +214998,7 @@ components: - conditionType: conditionType - conditionType: conditionType serviceAccountName: serviceAccountName + hostnameOverride: hostnameOverride imagePullSecrets: - name: name - name: name @@ -207832,17 +215021,17 @@ components: appArmorProfile: localhostProfile: localhostProfile type: type - fsGroup: 7 + fsGroup: 1 fsGroupChangePolicy: fsGroupChangePolicy seLinuxChangePolicy: seLinuxChangePolicy - runAsGroup: 1 + runAsGroup: 4 runAsNonRoot: true sysctls: - name: name value: value - name: name value: value - runAsUser: 4 + runAsUser: 5 seccompProfile: localhostProfile: localhostProfile type: type @@ -207852,8 +215041,8 @@ components: hostProcess: true gmsaCredentialSpecName: gmsaCredentialSpecName supplementalGroups: - - 5 - - 5 + - 9 + - 9 supplementalGroupsPolicy: supplementalGroupsPolicy preemptionPolicy: preemptionPolicy nodeSelector: @@ -207862,12 +215051,12 @@ components: runtimeClassName: runtimeClassName tolerations: - effect: effect - tolerationSeconds: 9 + tolerationSeconds: 6 value: value key: key operator: operator - effect: effect - tolerationSeconds: 9 + tolerationSeconds: 6 value: value key: key operator: operator @@ -207886,7 +215075,7 @@ components: topologySpreadConstraints: - nodeTaintsPolicy: nodeTaintsPolicy whenUnsatisfiable: whenUnsatisfiable - maxSkew: 6 + maxSkew: 8 nodeAffinityPolicy: nodeAffinityPolicy labelSelector: matchExpressions: @@ -207902,14 +215091,14 @@ components: operator: operator matchLabels: key: matchLabels - minDomains: 8 + minDomains: 9 topologyKey: topologyKey matchLabelKeys: - matchLabelKeys - matchLabelKeys - nodeTaintsPolicy: nodeTaintsPolicy whenUnsatisfiable: whenUnsatisfiable - maxSkew: 6 + maxSkew: 8 nodeAffinityPolicy: nodeAffinityPolicy labelSelector: matchExpressions: @@ -207925,7 +215114,7 @@ components: operator: operator matchLabels: key: matchLabels - minDomains: 8 + minDomains: 9 topologyKey: topologyKey matchLabelKeys: - matchLabelKeys @@ -208034,20 +215223,20 @@ components: volumeMode: volumeMode secret: secretName: secretName - defaultMode: 3 + defaultMode: 7 optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key projected: sources: - downwardAPI: items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -208056,7 +215245,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -208069,26 +215258,33 @@ components: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key + podCertificate: + certificateChainPath: certificateChainPath + keyPath: keyPath + maxExpirationSeconds: 3 + keyType: keyType + credentialBundlePath: credentialBundlePath + signerName: signerName secret: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key serviceAccountToken: path: path audience: audience - expirationSeconds: 6 + expirationSeconds: 3 clusterTrustBundle: path: path labelSelector: @@ -208110,7 +215306,7 @@ components: signerName: signerName - downwardAPI: items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -208119,7 +215315,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -208132,26 +215328,33 @@ components: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key + podCertificate: + certificateChainPath: certificateChainPath + keyPath: keyPath + maxExpirationSeconds: 3 + keyType: keyType + credentialBundlePath: credentialBundlePath + signerName: signerName secret: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key serviceAccountToken: path: path audience: audience - expirationSeconds: 6 + expirationSeconds: 3 clusterTrustBundle: path: path labelSelector: @@ -208171,7 +215374,7 @@ components: name: name optional: true signerName: signerName - defaultMode: 5 + defaultMode: 6 cephfs: path: path secretRef: @@ -208226,9 +215429,9 @@ components: readOnly: true fsType: fsType downwardAPI: - defaultMode: 6 + defaultMode: 1 items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -208237,7 +215440,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -208247,7 +215450,7 @@ components: apiVersion: apiVersion fieldPath: fieldPath awsElasticBlockStore: - partition: 9 + partition: 6 volumeID: volumeID readOnly: true fsType: fsType @@ -208257,7 +215460,7 @@ components: iscsi: chapAuthSession: true iscsiInterface: iscsiInterface - lun: 6 + lun: 5 chapAuthDiscovery: true iqn: iqn portals: @@ -208282,14 +215485,14 @@ components: - monitors - monitors configMap: - defaultMode: 6 + defaultMode: 3 name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key storageos: @@ -208329,7 +215532,7 @@ components: volumePath: volumePath fsType: fsType fc: - lun: 2 + lun: 6 targetWWNs: - targetWWNs - targetWWNs @@ -208444,20 +215647,20 @@ components: volumeMode: volumeMode secret: secretName: secretName - defaultMode: 3 + defaultMode: 7 optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key projected: sources: - downwardAPI: items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -208466,7 +215669,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -208479,26 +215682,33 @@ components: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key + podCertificate: + certificateChainPath: certificateChainPath + keyPath: keyPath + maxExpirationSeconds: 3 + keyType: keyType + credentialBundlePath: credentialBundlePath + signerName: signerName secret: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key serviceAccountToken: path: path audience: audience - expirationSeconds: 6 + expirationSeconds: 3 clusterTrustBundle: path: path labelSelector: @@ -208520,7 +215730,7 @@ components: signerName: signerName - downwardAPI: items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -208529,7 +215739,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -208542,26 +215752,33 @@ components: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key + podCertificate: + certificateChainPath: certificateChainPath + keyPath: keyPath + maxExpirationSeconds: 3 + keyType: keyType + credentialBundlePath: credentialBundlePath + signerName: signerName secret: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key serviceAccountToken: path: path audience: audience - expirationSeconds: 6 + expirationSeconds: 3 clusterTrustBundle: path: path labelSelector: @@ -208581,7 +215798,7 @@ components: name: name optional: true signerName: signerName - defaultMode: 5 + defaultMode: 6 cephfs: path: path secretRef: @@ -208636,9 +215853,9 @@ components: readOnly: true fsType: fsType downwardAPI: - defaultMode: 6 + defaultMode: 1 items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -208647,7 +215864,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -208657,7 +215874,7 @@ components: apiVersion: apiVersion fieldPath: fieldPath awsElasticBlockStore: - partition: 9 + partition: 6 volumeID: volumeID readOnly: true fsType: fsType @@ -208667,7 +215884,7 @@ components: iscsi: chapAuthSession: true iscsiInterface: iscsiInterface - lun: 6 + lun: 5 chapAuthDiscovery: true iqn: iqn portals: @@ -208692,14 +215909,14 @@ components: - monitors - monitors configMap: - defaultMode: 6 + defaultMode: 3 name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key storageos: @@ -208739,7 +215956,7 @@ components: volumePath: volumePath fsType: fsType fc: - lun: 2 + lun: 6 targetWWNs: - targetWWNs - targetWWNs @@ -208765,11 +215982,24 @@ components: name: name - devicePath: devicePath name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator stdin: true terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -208999,6 +216229,11 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key - name: name value: value valueFrom: @@ -209017,6 +216252,11 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key restartPolicy: restartPolicy command: - command @@ -209032,11 +216272,24 @@ components: name: name - devicePath: devicePath name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator stdin: true terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -209266,6 +216519,11 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key - name: name value: value valueFrom: @@ -209284,6 +216542,11 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key restartPolicy: restartPolicy command: - command @@ -209295,7 +216558,7 @@ components: tty: true stdinOnce: true serviceAccount: serviceAccount - priority: 6 + priority: 7 restartPolicy: restartPolicy shareProcessNamespace: true hostUsers: true @@ -209313,50 +216576,24 @@ components: name: name - devicePath: devicePath name: name - image: image - imagePullPolicy: imagePullPolicy - livenessProbe: - terminationGracePeriodSeconds: 2 - failureThreshold: 5 - periodSeconds: 9 - tcpSocket: - port: port - host: host - timeoutSeconds: 4 - successThreshold: 3 - initialDelaySeconds: 7 - exec: - command: - - command - - command - grpc: - port: 2 - service: service - httpGet: - path: path - scheme: scheme - port: port - host: host - httpHeaders: - - name: name - value: value - - name: name - value: value + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator stdin: true terminationMessagePolicy: terminationMessagePolicy - terminationMessagePath: terminationMessagePath - workingDir: workingDir - resources: - claims: - - request: request - name: name - - request: request - name: name - requests: {} - limits: {} securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -209412,43 +216649,6 @@ components: value: value - name: name value: value - env: - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath ports: - protocol: protocol hostIP: hostIP @@ -209460,10 +216660,6 @@ components: name: name containerPort: 7 hostPort: 1 - restartPolicy: restartPolicy - command: - - command - - command volumeMounts: - mountPath: mountPath mountPropagation: mountPropagation @@ -209479,9 +216675,6 @@ components: subPath: subPath recursiveReadOnly: recursiveReadOnly subPathExpr: subPathExpr - args: - - args - - args lifecycle: postStart: sleep: @@ -209524,8 +216717,6 @@ components: - name: name value: value stopSignal: stopSignal - name: name - tty: true readinessProbe: terminationGracePeriodSeconds: 2 failureThreshold: 5 @@ -209558,7 +216749,6 @@ components: restartPolicy: restartPolicy - resourceName: resourceName restartPolicy: restartPolicy - stdinOnce: true envFrom: - configMapRef: name: name @@ -209574,11 +216764,6 @@ components: secretRef: name: name optional: true - - volumeDevices: - - devicePath: devicePath - name: name - - devicePath: devicePath - name: name image: image imagePullPolicy: imagePullPolicy livenessProbe: @@ -209608,8 +216793,6 @@ components: value: value - name: name value: value - stdin: true - terminationMessagePolicy: terminationMessagePolicy terminationMessagePath: terminationMessagePath workingDir: workingDir resources: @@ -209620,9 +216803,86 @@ components: name: name requests: {} limits: {} + env: + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + restartPolicy: restartPolicy + command: + - command + - command + args: + - args + - args + name: name + tty: true + stdinOnce: true + - volumeDevices: + - devicePath: devicePath + name: name + - devicePath: devicePath + name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + stdin: true + terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -209678,43 +216938,6 @@ components: value: value - name: name value: value - env: - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath ports: - protocol: protocol hostIP: hostIP @@ -209726,10 +216949,6 @@ components: name: name containerPort: 7 hostPort: 1 - restartPolicy: restartPolicy - command: - - command - - command volumeMounts: - mountPath: mountPath mountPropagation: mountPropagation @@ -209745,9 +216964,6 @@ components: subPath: subPath recursiveReadOnly: recursiveReadOnly subPathExpr: subPathExpr - args: - - args - - args lifecycle: postStart: sleep: @@ -209790,8 +217006,6 @@ components: - name: name value: value stopSignal: stopSignal - name: name - tty: true readinessProbe: terminationGracePeriodSeconds: 2 failureThreshold: 5 @@ -209824,7 +217038,6 @@ components: restartPolicy: restartPolicy - resourceName: resourceName restartPolicy: restartPolicy - stdinOnce: true envFrom: - configMapRef: name: name @@ -209840,12 +217053,6 @@ components: secretRef: name: name optional: true - initContainers: - - volumeDevices: - - devicePath: devicePath - name: name - - devicePath: devicePath - name: name image: image imagePullPolicy: imagePullPolicy livenessProbe: @@ -209875,8 +217082,6 @@ components: value: value - name: name value: value - stdin: true - terminationMessagePolicy: terminationMessagePolicy terminationMessagePath: terminationMessagePath workingDir: workingDir resources: @@ -209887,9 +217092,87 @@ components: name: name requests: {} limits: {} + env: + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + restartPolicy: restartPolicy + command: + - command + - command + args: + - args + - args + name: name + tty: true + stdinOnce: true + initContainers: + - volumeDevices: + - devicePath: devicePath + name: name + - devicePath: devicePath + name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + stdin: true + terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -209945,43 +217228,6 @@ components: value: value - name: name value: value - env: - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath ports: - protocol: protocol hostIP: hostIP @@ -209993,10 +217239,6 @@ components: name: name containerPort: 7 hostPort: 1 - restartPolicy: restartPolicy - command: - - command - - command volumeMounts: - mountPath: mountPath mountPropagation: mountPropagation @@ -210012,9 +217254,6 @@ components: subPath: subPath recursiveReadOnly: recursiveReadOnly subPathExpr: subPathExpr - args: - - args - - args lifecycle: postStart: sleep: @@ -210057,8 +217296,6 @@ components: - name: name value: value stopSignal: stopSignal - name: name - tty: true readinessProbe: terminationGracePeriodSeconds: 2 failureThreshold: 5 @@ -210091,7 +217328,6 @@ components: restartPolicy: restartPolicy - resourceName: resourceName restartPolicy: restartPolicy - stdinOnce: true envFrom: - configMapRef: name: name @@ -210107,11 +217343,6 @@ components: secretRef: name: name optional: true - - volumeDevices: - - devicePath: devicePath - name: name - - devicePath: devicePath - name: name image: image imagePullPolicy: imagePullPolicy livenessProbe: @@ -210141,8 +217372,6 @@ components: value: value - name: name value: value - stdin: true - terminationMessagePolicy: terminationMessagePolicy terminationMessagePath: terminationMessagePath workingDir: workingDir resources: @@ -210153,9 +217382,86 @@ components: name: name requests: {} limits: {} + env: + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + restartPolicy: restartPolicy + command: + - command + - command + args: + - args + - args + name: name + tty: true + stdinOnce: true + - volumeDevices: + - devicePath: devicePath + name: name + - devicePath: devicePath + name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + stdin: true + terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -210211,43 +217517,6 @@ components: value: value - name: name value: value - env: - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath ports: - protocol: protocol hostIP: hostIP @@ -210259,10 +217528,6 @@ components: name: name containerPort: 7 hostPort: 1 - restartPolicy: restartPolicy - command: - - command - - command volumeMounts: - mountPath: mountPath mountPropagation: mountPropagation @@ -210278,9 +217543,6 @@ components: subPath: subPath recursiveReadOnly: recursiveReadOnly subPathExpr: subPathExpr - args: - - args - - args lifecycle: postStart: sleep: @@ -210323,8 +217585,6 @@ components: - name: name value: value stopSignal: stopSignal - name: name - tty: true readinessProbe: terminationGracePeriodSeconds: 2 failureThreshold: 5 @@ -210357,7 +217617,6 @@ components: restartPolicy: restartPolicy - resourceName: resourceName restartPolicy: restartPolicy - stdinOnce: true envFrom: - configMapRef: name: name @@ -210373,6 +217632,102 @@ components: secretRef: name: name optional: true + image: image + imagePullPolicy: imagePullPolicy + livenessProbe: + terminationGracePeriodSeconds: 2 + failureThreshold: 5 + periodSeconds: 9 + tcpSocket: + port: port + host: host + timeoutSeconds: 4 + successThreshold: 3 + initialDelaySeconds: 7 + exec: + command: + - command + - command + grpc: + port: 2 + service: service + httpGet: + path: path + scheme: scheme + port: port + host: host + httpHeaders: + - name: name + value: value + - name: name + value: value + terminationMessagePath: terminationMessagePath + workingDir: workingDir + resources: + claims: + - request: request + name: name + - request: request + name: name + requests: {} + limits: {} + env: + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + restartPolicy: restartPolicy + command: + - command + - command + args: + - args + - args + name: name + tty: true + stdinOnce: true affinity: nodeAffinity: requiredDuringSchedulingIgnoredDuringExecution: @@ -210938,6 +218293,7 @@ components: - conditionType: conditionType - conditionType: conditionType serviceAccountName: serviceAccountName + hostnameOverride: hostnameOverride imagePullSecrets: - name: name - name: name @@ -210960,17 +218316,17 @@ components: appArmorProfile: localhostProfile: localhostProfile type: type - fsGroup: 7 + fsGroup: 1 fsGroupChangePolicy: fsGroupChangePolicy seLinuxChangePolicy: seLinuxChangePolicy - runAsGroup: 1 + runAsGroup: 4 runAsNonRoot: true sysctls: - name: name value: value - name: name value: value - runAsUser: 4 + runAsUser: 5 seccompProfile: localhostProfile: localhostProfile type: type @@ -210980,8 +218336,8 @@ components: hostProcess: true gmsaCredentialSpecName: gmsaCredentialSpecName supplementalGroups: - - 5 - - 5 + - 9 + - 9 supplementalGroupsPolicy: supplementalGroupsPolicy preemptionPolicy: preemptionPolicy nodeSelector: @@ -210990,12 +218346,12 @@ components: runtimeClassName: runtimeClassName tolerations: - effect: effect - tolerationSeconds: 9 + tolerationSeconds: 6 value: value key: key operator: operator - effect: effect - tolerationSeconds: 9 + tolerationSeconds: 6 value: value key: key operator: operator @@ -211014,7 +218370,7 @@ components: topologySpreadConstraints: - nodeTaintsPolicy: nodeTaintsPolicy whenUnsatisfiable: whenUnsatisfiable - maxSkew: 6 + maxSkew: 8 nodeAffinityPolicy: nodeAffinityPolicy labelSelector: matchExpressions: @@ -211030,14 +218386,14 @@ components: operator: operator matchLabels: key: matchLabels - minDomains: 8 + minDomains: 9 topologyKey: topologyKey matchLabelKeys: - matchLabelKeys - matchLabelKeys - nodeTaintsPolicy: nodeTaintsPolicy whenUnsatisfiable: whenUnsatisfiable - maxSkew: 6 + maxSkew: 8 nodeAffinityPolicy: nodeAffinityPolicy labelSelector: matchExpressions: @@ -211053,7 +218409,7 @@ components: operator: operator matchLabels: key: matchLabels - minDomains: 8 + minDomains: 9 topologyKey: topologyKey matchLabelKeys: - matchLabelKeys @@ -211162,20 +218518,20 @@ components: volumeMode: volumeMode secret: secretName: secretName - defaultMode: 3 + defaultMode: 7 optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key projected: sources: - downwardAPI: items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -211184,7 +218540,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -211197,26 +218553,33 @@ components: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key + podCertificate: + certificateChainPath: certificateChainPath + keyPath: keyPath + maxExpirationSeconds: 3 + keyType: keyType + credentialBundlePath: credentialBundlePath + signerName: signerName secret: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key serviceAccountToken: path: path audience: audience - expirationSeconds: 6 + expirationSeconds: 3 clusterTrustBundle: path: path labelSelector: @@ -211238,7 +218601,7 @@ components: signerName: signerName - downwardAPI: items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -211247,7 +218610,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -211260,26 +218623,33 @@ components: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key + podCertificate: + certificateChainPath: certificateChainPath + keyPath: keyPath + maxExpirationSeconds: 3 + keyType: keyType + credentialBundlePath: credentialBundlePath + signerName: signerName secret: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key serviceAccountToken: path: path audience: audience - expirationSeconds: 6 + expirationSeconds: 3 clusterTrustBundle: path: path labelSelector: @@ -211299,7 +218669,7 @@ components: name: name optional: true signerName: signerName - defaultMode: 5 + defaultMode: 6 cephfs: path: path secretRef: @@ -211354,9 +218724,9 @@ components: readOnly: true fsType: fsType downwardAPI: - defaultMode: 6 + defaultMode: 1 items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -211365,7 +218735,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -211375,7 +218745,7 @@ components: apiVersion: apiVersion fieldPath: fieldPath awsElasticBlockStore: - partition: 9 + partition: 6 volumeID: volumeID readOnly: true fsType: fsType @@ -211385,7 +218755,7 @@ components: iscsi: chapAuthSession: true iscsiInterface: iscsiInterface - lun: 6 + lun: 5 chapAuthDiscovery: true iqn: iqn portals: @@ -211410,14 +218780,14 @@ components: - monitors - monitors configMap: - defaultMode: 6 + defaultMode: 3 name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key storageos: @@ -211457,7 +218827,7 @@ components: volumePath: volumePath fsType: fsType fc: - lun: 2 + lun: 6 targetWWNs: - targetWWNs - targetWWNs @@ -211572,20 +218942,20 @@ components: volumeMode: volumeMode secret: secretName: secretName - defaultMode: 3 + defaultMode: 7 optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key projected: sources: - downwardAPI: items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -211594,7 +218964,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -211607,26 +218977,33 @@ components: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key + podCertificate: + certificateChainPath: certificateChainPath + keyPath: keyPath + maxExpirationSeconds: 3 + keyType: keyType + credentialBundlePath: credentialBundlePath + signerName: signerName secret: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key serviceAccountToken: path: path audience: audience - expirationSeconds: 6 + expirationSeconds: 3 clusterTrustBundle: path: path labelSelector: @@ -211648,7 +219025,7 @@ components: signerName: signerName - downwardAPI: items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -211657,7 +219034,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -211670,26 +219047,33 @@ components: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key + podCertificate: + certificateChainPath: certificateChainPath + keyPath: keyPath + maxExpirationSeconds: 3 + keyType: keyType + credentialBundlePath: credentialBundlePath + signerName: signerName secret: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key serviceAccountToken: path: path audience: audience - expirationSeconds: 6 + expirationSeconds: 3 clusterTrustBundle: path: path labelSelector: @@ -211709,7 +219093,7 @@ components: name: name optional: true signerName: signerName - defaultMode: 5 + defaultMode: 6 cephfs: path: path secretRef: @@ -211764,9 +219148,9 @@ components: readOnly: true fsType: fsType downwardAPI: - defaultMode: 6 + defaultMode: 1 items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -211775,7 +219159,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -211785,7 +219169,7 @@ components: apiVersion: apiVersion fieldPath: fieldPath awsElasticBlockStore: - partition: 9 + partition: 6 volumeID: volumeID readOnly: true fsType: fsType @@ -211795,7 +219179,7 @@ components: iscsi: chapAuthSession: true iscsiInterface: iscsiInterface - lun: 6 + lun: 5 chapAuthDiscovery: true iqn: iqn portals: @@ -211820,14 +219204,14 @@ components: - monitors - monitors configMap: - defaultMode: 6 + defaultMode: 3 name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key storageos: @@ -211867,7 +219251,7 @@ components: volumePath: volumePath fsType: fsType fc: - lun: 2 + lun: 6 targetWWNs: - targetWWNs - targetWWNs @@ -211893,11 +219277,24 @@ components: name: name - devicePath: devicePath name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator stdin: true terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -212127,6 +219524,11 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key - name: name value: value valueFrom: @@ -212145,6 +219547,11 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key restartPolicy: restartPolicy command: - command @@ -212160,11 +219567,24 @@ components: name: name - devicePath: devicePath name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator stdin: true terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -212394,6 +219814,11 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key - name: name value: value valueFrom: @@ -212412,6 +219837,11 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key restartPolicy: restartPolicy command: - command @@ -212423,7 +219853,7 @@ components: tty: true stdinOnce: true serviceAccount: serviceAccount - priority: 6 + priority: 7 restartPolicy: restartPolicy shareProcessNamespace: true hostUsers: true @@ -212441,50 +219871,24 @@ components: name: name - devicePath: devicePath name: name - image: image - imagePullPolicy: imagePullPolicy - livenessProbe: - terminationGracePeriodSeconds: 2 - failureThreshold: 5 - periodSeconds: 9 - tcpSocket: - port: port - host: host - timeoutSeconds: 4 - successThreshold: 3 - initialDelaySeconds: 7 - exec: - command: - - command - - command - grpc: - port: 2 - service: service - httpGet: - path: path - scheme: scheme - port: port - host: host - httpHeaders: - - name: name - value: value - - name: name - value: value + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator stdin: true terminationMessagePolicy: terminationMessagePolicy - terminationMessagePath: terminationMessagePath - workingDir: workingDir - resources: - claims: - - request: request - name: name - - request: request - name: name - requests: {} - limits: {} securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -212540,43 +219944,6 @@ components: value: value - name: name value: value - env: - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath ports: - protocol: protocol hostIP: hostIP @@ -212588,10 +219955,6 @@ components: name: name containerPort: 7 hostPort: 1 - restartPolicy: restartPolicy - command: - - command - - command volumeMounts: - mountPath: mountPath mountPropagation: mountPropagation @@ -212607,9 +219970,6 @@ components: subPath: subPath recursiveReadOnly: recursiveReadOnly subPathExpr: subPathExpr - args: - - args - - args lifecycle: postStart: sleep: @@ -212652,8 +220012,6 @@ components: - name: name value: value stopSignal: stopSignal - name: name - tty: true readinessProbe: terminationGracePeriodSeconds: 2 failureThreshold: 5 @@ -212686,7 +220044,6 @@ components: restartPolicy: restartPolicy - resourceName: resourceName restartPolicy: restartPolicy - stdinOnce: true envFrom: - configMapRef: name: name @@ -212702,11 +220059,6 @@ components: secretRef: name: name optional: true - - volumeDevices: - - devicePath: devicePath - name: name - - devicePath: devicePath - name: name image: image imagePullPolicy: imagePullPolicy livenessProbe: @@ -212736,8 +220088,6 @@ components: value: value - name: name value: value - stdin: true - terminationMessagePolicy: terminationMessagePolicy terminationMessagePath: terminationMessagePath workingDir: workingDir resources: @@ -212748,9 +220098,86 @@ components: name: name requests: {} limits: {} + env: + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + restartPolicy: restartPolicy + command: + - command + - command + args: + - args + - args + name: name + tty: true + stdinOnce: true + - volumeDevices: + - devicePath: devicePath + name: name + - devicePath: devicePath + name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + stdin: true + terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -212806,43 +220233,6 @@ components: value: value - name: name value: value - env: - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath ports: - protocol: protocol hostIP: hostIP @@ -212854,10 +220244,6 @@ components: name: name containerPort: 7 hostPort: 1 - restartPolicy: restartPolicy - command: - - command - - command volumeMounts: - mountPath: mountPath mountPropagation: mountPropagation @@ -212873,9 +220259,6 @@ components: subPath: subPath recursiveReadOnly: recursiveReadOnly subPathExpr: subPathExpr - args: - - args - - args lifecycle: postStart: sleep: @@ -212918,8 +220301,6 @@ components: - name: name value: value stopSignal: stopSignal - name: name - tty: true readinessProbe: terminationGracePeriodSeconds: 2 failureThreshold: 5 @@ -212952,7 +220333,6 @@ components: restartPolicy: restartPolicy - resourceName: resourceName restartPolicy: restartPolicy - stdinOnce: true envFrom: - configMapRef: name: name @@ -212968,12 +220348,6 @@ components: secretRef: name: name optional: true - initContainers: - - volumeDevices: - - devicePath: devicePath - name: name - - devicePath: devicePath - name: name image: image imagePullPolicy: imagePullPolicy livenessProbe: @@ -213003,8 +220377,6 @@ components: value: value - name: name value: value - stdin: true - terminationMessagePolicy: terminationMessagePolicy terminationMessagePath: terminationMessagePath workingDir: workingDir resources: @@ -213015,9 +220387,87 @@ components: name: name requests: {} limits: {} + env: + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + restartPolicy: restartPolicy + command: + - command + - command + args: + - args + - args + name: name + tty: true + stdinOnce: true + initContainers: + - volumeDevices: + - devicePath: devicePath + name: name + - devicePath: devicePath + name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + stdin: true + terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -213073,43 +220523,6 @@ components: value: value - name: name value: value - env: - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath ports: - protocol: protocol hostIP: hostIP @@ -213121,10 +220534,6 @@ components: name: name containerPort: 7 hostPort: 1 - restartPolicy: restartPolicy - command: - - command - - command volumeMounts: - mountPath: mountPath mountPropagation: mountPropagation @@ -213140,9 +220549,6 @@ components: subPath: subPath recursiveReadOnly: recursiveReadOnly subPathExpr: subPathExpr - args: - - args - - args lifecycle: postStart: sleep: @@ -213185,8 +220591,6 @@ components: - name: name value: value stopSignal: stopSignal - name: name - tty: true readinessProbe: terminationGracePeriodSeconds: 2 failureThreshold: 5 @@ -213219,7 +220623,6 @@ components: restartPolicy: restartPolicy - resourceName: resourceName restartPolicy: restartPolicy - stdinOnce: true envFrom: - configMapRef: name: name @@ -213235,11 +220638,6 @@ components: secretRef: name: name optional: true - - volumeDevices: - - devicePath: devicePath - name: name - - devicePath: devicePath - name: name image: image imagePullPolicy: imagePullPolicy livenessProbe: @@ -213269,8 +220667,6 @@ components: value: value - name: name value: value - stdin: true - terminationMessagePolicy: terminationMessagePolicy terminationMessagePath: terminationMessagePath workingDir: workingDir resources: @@ -213281,9 +220677,86 @@ components: name: name requests: {} limits: {} + env: + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + restartPolicy: restartPolicy + command: + - command + - command + args: + - args + - args + name: name + tty: true + stdinOnce: true + - volumeDevices: + - devicePath: devicePath + name: name + - devicePath: devicePath + name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + stdin: true + terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -213339,43 +220812,6 @@ components: value: value - name: name value: value - env: - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath ports: - protocol: protocol hostIP: hostIP @@ -213387,10 +220823,6 @@ components: name: name containerPort: 7 hostPort: 1 - restartPolicy: restartPolicy - command: - - command - - command volumeMounts: - mountPath: mountPath mountPropagation: mountPropagation @@ -213406,9 +220838,6 @@ components: subPath: subPath recursiveReadOnly: recursiveReadOnly subPathExpr: subPathExpr - args: - - args - - args lifecycle: postStart: sleep: @@ -213451,8 +220880,6 @@ components: - name: name value: value stopSignal: stopSignal - name: name - tty: true readinessProbe: terminationGracePeriodSeconds: 2 failureThreshold: 5 @@ -213485,7 +220912,6 @@ components: restartPolicy: restartPolicy - resourceName: resourceName restartPolicy: restartPolicy - stdinOnce: true envFrom: - configMapRef: name: name @@ -213501,6 +220927,102 @@ components: secretRef: name: name optional: true + image: image + imagePullPolicy: imagePullPolicy + livenessProbe: + terminationGracePeriodSeconds: 2 + failureThreshold: 5 + periodSeconds: 9 + tcpSocket: + port: port + host: host + timeoutSeconds: 4 + successThreshold: 3 + initialDelaySeconds: 7 + exec: + command: + - command + - command + grpc: + port: 2 + service: service + httpGet: + path: path + scheme: scheme + port: port + host: host + httpHeaders: + - name: name + value: value + - name: name + value: value + terminationMessagePath: terminationMessagePath + workingDir: workingDir + resources: + claims: + - request: request + name: name + - request: request + name: name + requests: {} + limits: {} + env: + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + restartPolicy: restartPolicy + command: + - command + - command + args: + - args + - args + name: name + tty: true + stdinOnce: true affinity: nodeAffinity: requiredDuringSchedulingIgnoredDuringExecution: @@ -214033,6 +221555,7 @@ components: - conditionType: conditionType - conditionType: conditionType serviceAccountName: serviceAccountName + hostnameOverride: hostnameOverride imagePullSecrets: - name: name - name: name @@ -214055,17 +221578,17 @@ components: appArmorProfile: localhostProfile: localhostProfile type: type - fsGroup: 7 + fsGroup: 1 fsGroupChangePolicy: fsGroupChangePolicy seLinuxChangePolicy: seLinuxChangePolicy - runAsGroup: 1 + runAsGroup: 4 runAsNonRoot: true sysctls: - name: name value: value - name: name value: value - runAsUser: 4 + runAsUser: 5 seccompProfile: localhostProfile: localhostProfile type: type @@ -214075,8 +221598,8 @@ components: hostProcess: true gmsaCredentialSpecName: gmsaCredentialSpecName supplementalGroups: - - 5 - - 5 + - 9 + - 9 supplementalGroupsPolicy: supplementalGroupsPolicy preemptionPolicy: preemptionPolicy nodeSelector: @@ -214085,12 +221608,12 @@ components: runtimeClassName: runtimeClassName tolerations: - effect: effect - tolerationSeconds: 9 + tolerationSeconds: 6 value: value key: key operator: operator - effect: effect - tolerationSeconds: 9 + tolerationSeconds: 6 value: value key: key operator: operator @@ -214109,7 +221632,7 @@ components: topologySpreadConstraints: - nodeTaintsPolicy: nodeTaintsPolicy whenUnsatisfiable: whenUnsatisfiable - maxSkew: 6 + maxSkew: 8 nodeAffinityPolicy: nodeAffinityPolicy labelSelector: matchExpressions: @@ -214125,14 +221648,14 @@ components: operator: operator matchLabels: key: matchLabels - minDomains: 8 + minDomains: 9 topologyKey: topologyKey matchLabelKeys: - matchLabelKeys - matchLabelKeys - nodeTaintsPolicy: nodeTaintsPolicy whenUnsatisfiable: whenUnsatisfiable - maxSkew: 6 + maxSkew: 8 nodeAffinityPolicy: nodeAffinityPolicy labelSelector: matchExpressions: @@ -214148,7 +221671,7 @@ components: operator: operator matchLabels: key: matchLabels - minDomains: 8 + minDomains: 9 topologyKey: topologyKey matchLabelKeys: - matchLabelKeys @@ -214257,20 +221780,20 @@ components: volumeMode: volumeMode secret: secretName: secretName - defaultMode: 3 + defaultMode: 7 optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key projected: sources: - downwardAPI: items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -214279,7 +221802,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -214292,26 +221815,33 @@ components: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key + podCertificate: + certificateChainPath: certificateChainPath + keyPath: keyPath + maxExpirationSeconds: 3 + keyType: keyType + credentialBundlePath: credentialBundlePath + signerName: signerName secret: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key serviceAccountToken: path: path audience: audience - expirationSeconds: 6 + expirationSeconds: 3 clusterTrustBundle: path: path labelSelector: @@ -214333,7 +221863,7 @@ components: signerName: signerName - downwardAPI: items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -214342,7 +221872,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -214355,26 +221885,33 @@ components: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key + podCertificate: + certificateChainPath: certificateChainPath + keyPath: keyPath + maxExpirationSeconds: 3 + keyType: keyType + credentialBundlePath: credentialBundlePath + signerName: signerName secret: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key serviceAccountToken: path: path audience: audience - expirationSeconds: 6 + expirationSeconds: 3 clusterTrustBundle: path: path labelSelector: @@ -214394,7 +221931,7 @@ components: name: name optional: true signerName: signerName - defaultMode: 5 + defaultMode: 6 cephfs: path: path secretRef: @@ -214449,9 +221986,9 @@ components: readOnly: true fsType: fsType downwardAPI: - defaultMode: 6 + defaultMode: 1 items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -214460,7 +221997,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -214470,7 +222007,7 @@ components: apiVersion: apiVersion fieldPath: fieldPath awsElasticBlockStore: - partition: 9 + partition: 6 volumeID: volumeID readOnly: true fsType: fsType @@ -214480,7 +222017,7 @@ components: iscsi: chapAuthSession: true iscsiInterface: iscsiInterface - lun: 6 + lun: 5 chapAuthDiscovery: true iqn: iqn portals: @@ -214505,14 +222042,14 @@ components: - monitors - monitors configMap: - defaultMode: 6 + defaultMode: 3 name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key storageos: @@ -214552,7 +222089,7 @@ components: volumePath: volumePath fsType: fsType fc: - lun: 2 + lun: 6 targetWWNs: - targetWWNs - targetWWNs @@ -214667,20 +222204,20 @@ components: volumeMode: volumeMode secret: secretName: secretName - defaultMode: 3 + defaultMode: 7 optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key projected: sources: - downwardAPI: items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -214689,7 +222226,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -214702,26 +222239,33 @@ components: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key + podCertificate: + certificateChainPath: certificateChainPath + keyPath: keyPath + maxExpirationSeconds: 3 + keyType: keyType + credentialBundlePath: credentialBundlePath + signerName: signerName secret: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key serviceAccountToken: path: path audience: audience - expirationSeconds: 6 + expirationSeconds: 3 clusterTrustBundle: path: path labelSelector: @@ -214743,7 +222287,7 @@ components: signerName: signerName - downwardAPI: items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -214752,7 +222296,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -214765,26 +222309,33 @@ components: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key + podCertificate: + certificateChainPath: certificateChainPath + keyPath: keyPath + maxExpirationSeconds: 3 + keyType: keyType + credentialBundlePath: credentialBundlePath + signerName: signerName secret: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key serviceAccountToken: path: path audience: audience - expirationSeconds: 6 + expirationSeconds: 3 clusterTrustBundle: path: path labelSelector: @@ -214804,7 +222355,7 @@ components: name: name optional: true signerName: signerName - defaultMode: 5 + defaultMode: 6 cephfs: path: path secretRef: @@ -214859,9 +222410,9 @@ components: readOnly: true fsType: fsType downwardAPI: - defaultMode: 6 + defaultMode: 1 items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -214870,7 +222421,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -214880,7 +222431,7 @@ components: apiVersion: apiVersion fieldPath: fieldPath awsElasticBlockStore: - partition: 9 + partition: 6 volumeID: volumeID readOnly: true fsType: fsType @@ -214890,7 +222441,7 @@ components: iscsi: chapAuthSession: true iscsiInterface: iscsiInterface - lun: 6 + lun: 5 chapAuthDiscovery: true iqn: iqn portals: @@ -214915,14 +222466,14 @@ components: - monitors - monitors configMap: - defaultMode: 6 + defaultMode: 3 name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key storageos: @@ -214962,7 +222513,7 @@ components: volumePath: volumePath fsType: fsType fc: - lun: 2 + lun: 6 targetWWNs: - targetWWNs - targetWWNs @@ -214988,11 +222539,24 @@ components: name: name - devicePath: devicePath name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator stdin: true terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -215222,6 +222786,11 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key - name: name value: value valueFrom: @@ -215240,6 +222809,11 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key restartPolicy: restartPolicy command: - command @@ -215255,11 +222829,24 @@ components: name: name - devicePath: devicePath name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator stdin: true terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -215489,6 +223076,11 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key - name: name value: value valueFrom: @@ -215507,6 +223099,11 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key restartPolicy: restartPolicy command: - command @@ -215518,7 +223115,7 @@ components: tty: true stdinOnce: true serviceAccount: serviceAccount - priority: 6 + priority: 7 restartPolicy: restartPolicy shareProcessNamespace: true hostUsers: true @@ -215536,50 +223133,24 @@ components: name: name - devicePath: devicePath name: name - image: image - imagePullPolicy: imagePullPolicy - livenessProbe: - terminationGracePeriodSeconds: 2 - failureThreshold: 5 - periodSeconds: 9 - tcpSocket: - port: port - host: host - timeoutSeconds: 4 - successThreshold: 3 - initialDelaySeconds: 7 - exec: - command: - - command - - command - grpc: - port: 2 - service: service - httpGet: - path: path - scheme: scheme - port: port - host: host - httpHeaders: - - name: name - value: value - - name: name - value: value + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator stdin: true terminationMessagePolicy: terminationMessagePolicy - terminationMessagePath: terminationMessagePath - workingDir: workingDir - resources: - claims: - - request: request - name: name - - request: request - name: name - requests: {} - limits: {} securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -215635,43 +223206,6 @@ components: value: value - name: name value: value - env: - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath ports: - protocol: protocol hostIP: hostIP @@ -215683,10 +223217,6 @@ components: name: name containerPort: 7 hostPort: 1 - restartPolicy: restartPolicy - command: - - command - - command volumeMounts: - mountPath: mountPath mountPropagation: mountPropagation @@ -215702,9 +223232,6 @@ components: subPath: subPath recursiveReadOnly: recursiveReadOnly subPathExpr: subPathExpr - args: - - args - - args lifecycle: postStart: sleep: @@ -215747,8 +223274,6 @@ components: - name: name value: value stopSignal: stopSignal - name: name - tty: true readinessProbe: terminationGracePeriodSeconds: 2 failureThreshold: 5 @@ -215781,7 +223306,6 @@ components: restartPolicy: restartPolicy - resourceName: resourceName restartPolicy: restartPolicy - stdinOnce: true envFrom: - configMapRef: name: name @@ -215797,11 +223321,6 @@ components: secretRef: name: name optional: true - - volumeDevices: - - devicePath: devicePath - name: name - - devicePath: devicePath - name: name image: image imagePullPolicy: imagePullPolicy livenessProbe: @@ -215831,8 +223350,6 @@ components: value: value - name: name value: value - stdin: true - terminationMessagePolicy: terminationMessagePolicy terminationMessagePath: terminationMessagePath workingDir: workingDir resources: @@ -215843,9 +223360,86 @@ components: name: name requests: {} limits: {} + env: + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + restartPolicy: restartPolicy + command: + - command + - command + args: + - args + - args + name: name + tty: true + stdinOnce: true + - volumeDevices: + - devicePath: devicePath + name: name + - devicePath: devicePath + name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + stdin: true + terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -215901,43 +223495,6 @@ components: value: value - name: name value: value - env: - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath ports: - protocol: protocol hostIP: hostIP @@ -215949,10 +223506,6 @@ components: name: name containerPort: 7 hostPort: 1 - restartPolicy: restartPolicy - command: - - command - - command volumeMounts: - mountPath: mountPath mountPropagation: mountPropagation @@ -215968,9 +223521,6 @@ components: subPath: subPath recursiveReadOnly: recursiveReadOnly subPathExpr: subPathExpr - args: - - args - - args lifecycle: postStart: sleep: @@ -216013,8 +223563,6 @@ components: - name: name value: value stopSignal: stopSignal - name: name - tty: true readinessProbe: terminationGracePeriodSeconds: 2 failureThreshold: 5 @@ -216047,7 +223595,6 @@ components: restartPolicy: restartPolicy - resourceName: resourceName restartPolicy: restartPolicy - stdinOnce: true envFrom: - configMapRef: name: name @@ -216063,12 +223610,6 @@ components: secretRef: name: name optional: true - initContainers: - - volumeDevices: - - devicePath: devicePath - name: name - - devicePath: devicePath - name: name image: image imagePullPolicy: imagePullPolicy livenessProbe: @@ -216098,8 +223639,6 @@ components: value: value - name: name value: value - stdin: true - terminationMessagePolicy: terminationMessagePolicy terminationMessagePath: terminationMessagePath workingDir: workingDir resources: @@ -216110,9 +223649,87 @@ components: name: name requests: {} limits: {} + env: + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + restartPolicy: restartPolicy + command: + - command + - command + args: + - args + - args + name: name + tty: true + stdinOnce: true + initContainers: + - volumeDevices: + - devicePath: devicePath + name: name + - devicePath: devicePath + name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + stdin: true + terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -216168,43 +223785,6 @@ components: value: value - name: name value: value - env: - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath ports: - protocol: protocol hostIP: hostIP @@ -216216,10 +223796,6 @@ components: name: name containerPort: 7 hostPort: 1 - restartPolicy: restartPolicy - command: - - command - - command volumeMounts: - mountPath: mountPath mountPropagation: mountPropagation @@ -216235,9 +223811,6 @@ components: subPath: subPath recursiveReadOnly: recursiveReadOnly subPathExpr: subPathExpr - args: - - args - - args lifecycle: postStart: sleep: @@ -216280,8 +223853,6 @@ components: - name: name value: value stopSignal: stopSignal - name: name - tty: true readinessProbe: terminationGracePeriodSeconds: 2 failureThreshold: 5 @@ -216314,7 +223885,6 @@ components: restartPolicy: restartPolicy - resourceName: resourceName restartPolicy: restartPolicy - stdinOnce: true envFrom: - configMapRef: name: name @@ -216330,11 +223900,6 @@ components: secretRef: name: name optional: true - - volumeDevices: - - devicePath: devicePath - name: name - - devicePath: devicePath - name: name image: image imagePullPolicy: imagePullPolicy livenessProbe: @@ -216364,8 +223929,6 @@ components: value: value - name: name value: value - stdin: true - terminationMessagePolicy: terminationMessagePolicy terminationMessagePath: terminationMessagePath workingDir: workingDir resources: @@ -216376,9 +223939,86 @@ components: name: name requests: {} limits: {} + env: + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + restartPolicy: restartPolicy + command: + - command + - command + args: + - args + - args + name: name + tty: true + stdinOnce: true + - volumeDevices: + - devicePath: devicePath + name: name + - devicePath: devicePath + name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + stdin: true + terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -216434,43 +224074,6 @@ components: value: value - name: name value: value - env: - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath ports: - protocol: protocol hostIP: hostIP @@ -216482,10 +224085,6 @@ components: name: name containerPort: 7 hostPort: 1 - restartPolicy: restartPolicy - command: - - command - - command volumeMounts: - mountPath: mountPath mountPropagation: mountPropagation @@ -216501,9 +224100,6 @@ components: subPath: subPath recursiveReadOnly: recursiveReadOnly subPathExpr: subPathExpr - args: - - args - - args lifecycle: postStart: sleep: @@ -216546,8 +224142,6 @@ components: - name: name value: value stopSignal: stopSignal - name: name - tty: true readinessProbe: terminationGracePeriodSeconds: 2 failureThreshold: 5 @@ -216580,7 +224174,6 @@ components: restartPolicy: restartPolicy - resourceName: resourceName restartPolicy: restartPolicy - stdinOnce: true envFrom: - configMapRef: name: name @@ -216596,6 +224189,102 @@ components: secretRef: name: name optional: true + image: image + imagePullPolicy: imagePullPolicy + livenessProbe: + terminationGracePeriodSeconds: 2 + failureThreshold: 5 + periodSeconds: 9 + tcpSocket: + port: port + host: host + timeoutSeconds: 4 + successThreshold: 3 + initialDelaySeconds: 7 + exec: + command: + - command + - command + grpc: + port: 2 + service: service + httpGet: + path: path + scheme: scheme + port: port + host: host + httpHeaders: + - name: name + value: value + - name: name + value: value + terminationMessagePath: terminationMessagePath + workingDir: workingDir + resources: + claims: + - request: request + name: name + - request: request + name: name + requests: {} + limits: {} + env: + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + restartPolicy: restartPolicy + command: + - command + - command + args: + - args + - args + name: name + tty: true + stdinOnce: true affinity: nodeAffinity: requiredDuringSchedulingIgnoredDuringExecution: @@ -217158,6 +224847,7 @@ components: - conditionType: conditionType - conditionType: conditionType serviceAccountName: serviceAccountName + hostnameOverride: hostnameOverride imagePullSecrets: - name: name - name: name @@ -217180,17 +224870,17 @@ components: appArmorProfile: localhostProfile: localhostProfile type: type - fsGroup: 7 + fsGroup: 1 fsGroupChangePolicy: fsGroupChangePolicy seLinuxChangePolicy: seLinuxChangePolicy - runAsGroup: 1 + runAsGroup: 4 runAsNonRoot: true sysctls: - name: name value: value - name: name value: value - runAsUser: 4 + runAsUser: 5 seccompProfile: localhostProfile: localhostProfile type: type @@ -217200,8 +224890,8 @@ components: hostProcess: true gmsaCredentialSpecName: gmsaCredentialSpecName supplementalGroups: - - 5 - - 5 + - 9 + - 9 supplementalGroupsPolicy: supplementalGroupsPolicy preemptionPolicy: preemptionPolicy nodeSelector: @@ -217210,12 +224900,12 @@ components: runtimeClassName: runtimeClassName tolerations: - effect: effect - tolerationSeconds: 9 + tolerationSeconds: 6 value: value key: key operator: operator - effect: effect - tolerationSeconds: 9 + tolerationSeconds: 6 value: value key: key operator: operator @@ -217234,7 +224924,7 @@ components: topologySpreadConstraints: - nodeTaintsPolicy: nodeTaintsPolicy whenUnsatisfiable: whenUnsatisfiable - maxSkew: 6 + maxSkew: 8 nodeAffinityPolicy: nodeAffinityPolicy labelSelector: matchExpressions: @@ -217250,14 +224940,14 @@ components: operator: operator matchLabels: key: matchLabels - minDomains: 8 + minDomains: 9 topologyKey: topologyKey matchLabelKeys: - matchLabelKeys - matchLabelKeys - nodeTaintsPolicy: nodeTaintsPolicy whenUnsatisfiable: whenUnsatisfiable - maxSkew: 6 + maxSkew: 8 nodeAffinityPolicy: nodeAffinityPolicy labelSelector: matchExpressions: @@ -217273,7 +224963,7 @@ components: operator: operator matchLabels: key: matchLabels - minDomains: 8 + minDomains: 9 topologyKey: topologyKey matchLabelKeys: - matchLabelKeys @@ -217382,20 +225072,20 @@ components: volumeMode: volumeMode secret: secretName: secretName - defaultMode: 3 + defaultMode: 7 optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key projected: sources: - downwardAPI: items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -217404,7 +225094,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -217417,26 +225107,33 @@ components: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key + podCertificate: + certificateChainPath: certificateChainPath + keyPath: keyPath + maxExpirationSeconds: 3 + keyType: keyType + credentialBundlePath: credentialBundlePath + signerName: signerName secret: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key serviceAccountToken: path: path audience: audience - expirationSeconds: 6 + expirationSeconds: 3 clusterTrustBundle: path: path labelSelector: @@ -217458,7 +225155,7 @@ components: signerName: signerName - downwardAPI: items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -217467,7 +225164,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -217480,26 +225177,33 @@ components: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key + podCertificate: + certificateChainPath: certificateChainPath + keyPath: keyPath + maxExpirationSeconds: 3 + keyType: keyType + credentialBundlePath: credentialBundlePath + signerName: signerName secret: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key serviceAccountToken: path: path audience: audience - expirationSeconds: 6 + expirationSeconds: 3 clusterTrustBundle: path: path labelSelector: @@ -217519,7 +225223,7 @@ components: name: name optional: true signerName: signerName - defaultMode: 5 + defaultMode: 6 cephfs: path: path secretRef: @@ -217574,9 +225278,9 @@ components: readOnly: true fsType: fsType downwardAPI: - defaultMode: 6 + defaultMode: 1 items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -217585,7 +225289,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -217595,7 +225299,7 @@ components: apiVersion: apiVersion fieldPath: fieldPath awsElasticBlockStore: - partition: 9 + partition: 6 volumeID: volumeID readOnly: true fsType: fsType @@ -217605,7 +225309,7 @@ components: iscsi: chapAuthSession: true iscsiInterface: iscsiInterface - lun: 6 + lun: 5 chapAuthDiscovery: true iqn: iqn portals: @@ -217630,14 +225334,14 @@ components: - monitors - monitors configMap: - defaultMode: 6 + defaultMode: 3 name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key storageos: @@ -217677,7 +225381,7 @@ components: volumePath: volumePath fsType: fsType fc: - lun: 2 + lun: 6 targetWWNs: - targetWWNs - targetWWNs @@ -217792,20 +225496,20 @@ components: volumeMode: volumeMode secret: secretName: secretName - defaultMode: 3 + defaultMode: 7 optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key projected: sources: - downwardAPI: items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -217814,7 +225518,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -217827,26 +225531,33 @@ components: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key + podCertificate: + certificateChainPath: certificateChainPath + keyPath: keyPath + maxExpirationSeconds: 3 + keyType: keyType + credentialBundlePath: credentialBundlePath + signerName: signerName secret: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key serviceAccountToken: path: path audience: audience - expirationSeconds: 6 + expirationSeconds: 3 clusterTrustBundle: path: path labelSelector: @@ -217868,7 +225579,7 @@ components: signerName: signerName - downwardAPI: items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -217877,7 +225588,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -217890,26 +225601,33 @@ components: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key + podCertificate: + certificateChainPath: certificateChainPath + keyPath: keyPath + maxExpirationSeconds: 3 + keyType: keyType + credentialBundlePath: credentialBundlePath + signerName: signerName secret: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key serviceAccountToken: path: path audience: audience - expirationSeconds: 6 + expirationSeconds: 3 clusterTrustBundle: path: path labelSelector: @@ -217929,7 +225647,7 @@ components: name: name optional: true signerName: signerName - defaultMode: 5 + defaultMode: 6 cephfs: path: path secretRef: @@ -217984,9 +225702,9 @@ components: readOnly: true fsType: fsType downwardAPI: - defaultMode: 6 + defaultMode: 1 items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -217995,7 +225713,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -218005,7 +225723,7 @@ components: apiVersion: apiVersion fieldPath: fieldPath awsElasticBlockStore: - partition: 9 + partition: 6 volumeID: volumeID readOnly: true fsType: fsType @@ -218015,7 +225733,7 @@ components: iscsi: chapAuthSession: true iscsiInterface: iscsiInterface - lun: 6 + lun: 5 chapAuthDiscovery: true iqn: iqn portals: @@ -218040,14 +225758,14 @@ components: - monitors - monitors configMap: - defaultMode: 6 + defaultMode: 3 name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key storageos: @@ -218087,7 +225805,7 @@ components: volumePath: volumePath fsType: fsType fc: - lun: 2 + lun: 6 targetWWNs: - targetWWNs - targetWWNs @@ -218113,11 +225831,24 @@ components: name: name - devicePath: devicePath name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator stdin: true terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -218347,6 +226078,11 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key - name: name value: value valueFrom: @@ -218365,6 +226101,11 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key restartPolicy: restartPolicy command: - command @@ -218380,11 +226121,24 @@ components: name: name - devicePath: devicePath name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator stdin: true terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -218614,6 +226368,11 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key - name: name value: value valueFrom: @@ -218632,6 +226391,11 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key restartPolicy: restartPolicy command: - command @@ -218643,7 +226407,7 @@ components: tty: true stdinOnce: true serviceAccount: serviceAccount - priority: 6 + priority: 7 restartPolicy: restartPolicy shareProcessNamespace: true hostUsers: true @@ -218661,50 +226425,24 @@ components: name: name - devicePath: devicePath name: name - image: image - imagePullPolicy: imagePullPolicy - livenessProbe: - terminationGracePeriodSeconds: 2 - failureThreshold: 5 - periodSeconds: 9 - tcpSocket: - port: port - host: host - timeoutSeconds: 4 - successThreshold: 3 - initialDelaySeconds: 7 - exec: - command: - - command - - command - grpc: - port: 2 - service: service - httpGet: - path: path - scheme: scheme - port: port - host: host - httpHeaders: - - name: name - value: value - - name: name - value: value + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator stdin: true terminationMessagePolicy: terminationMessagePolicy - terminationMessagePath: terminationMessagePath - workingDir: workingDir - resources: - claims: - - request: request - name: name - - request: request - name: name - requests: {} - limits: {} securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -218760,43 +226498,6 @@ components: value: value - name: name value: value - env: - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath ports: - protocol: protocol hostIP: hostIP @@ -218808,10 +226509,6 @@ components: name: name containerPort: 7 hostPort: 1 - restartPolicy: restartPolicy - command: - - command - - command volumeMounts: - mountPath: mountPath mountPropagation: mountPropagation @@ -218827,9 +226524,6 @@ components: subPath: subPath recursiveReadOnly: recursiveReadOnly subPathExpr: subPathExpr - args: - - args - - args lifecycle: postStart: sleep: @@ -218872,8 +226566,6 @@ components: - name: name value: value stopSignal: stopSignal - name: name - tty: true readinessProbe: terminationGracePeriodSeconds: 2 failureThreshold: 5 @@ -218906,7 +226598,6 @@ components: restartPolicy: restartPolicy - resourceName: resourceName restartPolicy: restartPolicy - stdinOnce: true envFrom: - configMapRef: name: name @@ -218922,11 +226613,6 @@ components: secretRef: name: name optional: true - - volumeDevices: - - devicePath: devicePath - name: name - - devicePath: devicePath - name: name image: image imagePullPolicy: imagePullPolicy livenessProbe: @@ -218956,8 +226642,6 @@ components: value: value - name: name value: value - stdin: true - terminationMessagePolicy: terminationMessagePolicy terminationMessagePath: terminationMessagePath workingDir: workingDir resources: @@ -218968,9 +226652,86 @@ components: name: name requests: {} limits: {} + env: + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + restartPolicy: restartPolicy + command: + - command + - command + args: + - args + - args + name: name + tty: true + stdinOnce: true + - volumeDevices: + - devicePath: devicePath + name: name + - devicePath: devicePath + name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + stdin: true + terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -219026,43 +226787,6 @@ components: value: value - name: name value: value - env: - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath ports: - protocol: protocol hostIP: hostIP @@ -219074,10 +226798,6 @@ components: name: name containerPort: 7 hostPort: 1 - restartPolicy: restartPolicy - command: - - command - - command volumeMounts: - mountPath: mountPath mountPropagation: mountPropagation @@ -219093,9 +226813,6 @@ components: subPath: subPath recursiveReadOnly: recursiveReadOnly subPathExpr: subPathExpr - args: - - args - - args lifecycle: postStart: sleep: @@ -219138,8 +226855,6 @@ components: - name: name value: value stopSignal: stopSignal - name: name - tty: true readinessProbe: terminationGracePeriodSeconds: 2 failureThreshold: 5 @@ -219172,7 +226887,6 @@ components: restartPolicy: restartPolicy - resourceName: resourceName restartPolicy: restartPolicy - stdinOnce: true envFrom: - configMapRef: name: name @@ -219188,12 +226902,6 @@ components: secretRef: name: name optional: true - initContainers: - - volumeDevices: - - devicePath: devicePath - name: name - - devicePath: devicePath - name: name image: image imagePullPolicy: imagePullPolicy livenessProbe: @@ -219223,8 +226931,6 @@ components: value: value - name: name value: value - stdin: true - terminationMessagePolicy: terminationMessagePolicy terminationMessagePath: terminationMessagePath workingDir: workingDir resources: @@ -219235,9 +226941,87 @@ components: name: name requests: {} limits: {} + env: + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + restartPolicy: restartPolicy + command: + - command + - command + args: + - args + - args + name: name + tty: true + stdinOnce: true + initContainers: + - volumeDevices: + - devicePath: devicePath + name: name + - devicePath: devicePath + name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + stdin: true + terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -219293,43 +227077,6 @@ components: value: value - name: name value: value - env: - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath ports: - protocol: protocol hostIP: hostIP @@ -219341,10 +227088,6 @@ components: name: name containerPort: 7 hostPort: 1 - restartPolicy: restartPolicy - command: - - command - - command volumeMounts: - mountPath: mountPath mountPropagation: mountPropagation @@ -219360,9 +227103,6 @@ components: subPath: subPath recursiveReadOnly: recursiveReadOnly subPathExpr: subPathExpr - args: - - args - - args lifecycle: postStart: sleep: @@ -219405,8 +227145,6 @@ components: - name: name value: value stopSignal: stopSignal - name: name - tty: true readinessProbe: terminationGracePeriodSeconds: 2 failureThreshold: 5 @@ -219439,7 +227177,6 @@ components: restartPolicy: restartPolicy - resourceName: resourceName restartPolicy: restartPolicy - stdinOnce: true envFrom: - configMapRef: name: name @@ -219455,11 +227192,6 @@ components: secretRef: name: name optional: true - - volumeDevices: - - devicePath: devicePath - name: name - - devicePath: devicePath - name: name image: image imagePullPolicy: imagePullPolicy livenessProbe: @@ -219489,8 +227221,6 @@ components: value: value - name: name value: value - stdin: true - terminationMessagePolicy: terminationMessagePolicy terminationMessagePath: terminationMessagePath workingDir: workingDir resources: @@ -219501,9 +227231,86 @@ components: name: name requests: {} limits: {} + env: + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + restartPolicy: restartPolicy + command: + - command + - command + args: + - args + - args + name: name + tty: true + stdinOnce: true + - volumeDevices: + - devicePath: devicePath + name: name + - devicePath: devicePath + name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + stdin: true + terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -219559,43 +227366,6 @@ components: value: value - name: name value: value - env: - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath ports: - protocol: protocol hostIP: hostIP @@ -219607,10 +227377,6 @@ components: name: name containerPort: 7 hostPort: 1 - restartPolicy: restartPolicy - command: - - command - - command volumeMounts: - mountPath: mountPath mountPropagation: mountPropagation @@ -219626,9 +227392,6 @@ components: subPath: subPath recursiveReadOnly: recursiveReadOnly subPathExpr: subPathExpr - args: - - args - - args lifecycle: postStart: sleep: @@ -219671,8 +227434,6 @@ components: - name: name value: value stopSignal: stopSignal - name: name - tty: true readinessProbe: terminationGracePeriodSeconds: 2 failureThreshold: 5 @@ -219705,7 +227466,6 @@ components: restartPolicy: restartPolicy - resourceName: resourceName restartPolicy: restartPolicy - stdinOnce: true envFrom: - configMapRef: name: name @@ -219721,6 +227481,102 @@ components: secretRef: name: name optional: true + image: image + imagePullPolicy: imagePullPolicy + livenessProbe: + terminationGracePeriodSeconds: 2 + failureThreshold: 5 + periodSeconds: 9 + tcpSocket: + port: port + host: host + timeoutSeconds: 4 + successThreshold: 3 + initialDelaySeconds: 7 + exec: + command: + - command + - command + grpc: + port: 2 + service: service + httpGet: + path: path + scheme: scheme + port: port + host: host + httpHeaders: + - name: name + value: value + - name: name + value: value + terminationMessagePath: terminationMessagePath + workingDir: workingDir + resources: + claims: + - request: request + name: name + - request: request + name: name + requests: {} + limits: {} + env: + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + restartPolicy: restartPolicy + command: + - command + - command + args: + - args + - args + name: name + tty: true + stdinOnce: true affinity: nodeAffinity: requiredDuringSchedulingIgnoredDuringExecution: @@ -220319,7 +228175,7 @@ components: sources: - downwardAPI: items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -220328,7 +228184,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -220341,26 +228197,33 @@ components: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key + podCertificate: + certificateChainPath: certificateChainPath + keyPath: keyPath + maxExpirationSeconds: 3 + keyType: keyType + credentialBundlePath: credentialBundlePath + signerName: signerName secret: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key serviceAccountToken: path: path audience: audience - expirationSeconds: 6 + expirationSeconds: 3 clusterTrustBundle: path: path labelSelector: @@ -220382,7 +228245,7 @@ components: signerName: signerName - downwardAPI: items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -220391,7 +228254,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -220404,26 +228267,33 @@ components: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key + podCertificate: + certificateChainPath: certificateChainPath + keyPath: keyPath + maxExpirationSeconds: 3 + keyType: keyType + credentialBundlePath: credentialBundlePath + signerName: signerName secret: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key serviceAccountToken: path: path audience: audience - expirationSeconds: 6 + expirationSeconds: 3 clusterTrustBundle: path: path labelSelector: @@ -220443,7 +228313,7 @@ components: name: name optional: true signerName: signerName - defaultMode: 5 + defaultMode: 6 properties: defaultMode: description: defaultMode are the mode bits used to set permissions on created @@ -220727,6 +228597,7 @@ components: - conditionType: conditionType - conditionType: conditionType serviceAccountName: serviceAccountName + hostnameOverride: hostnameOverride imagePullSecrets: - name: name - name: name @@ -220749,17 +228620,17 @@ components: appArmorProfile: localhostProfile: localhostProfile type: type - fsGroup: 7 + fsGroup: 1 fsGroupChangePolicy: fsGroupChangePolicy seLinuxChangePolicy: seLinuxChangePolicy - runAsGroup: 1 + runAsGroup: 4 runAsNonRoot: true sysctls: - name: name value: value - name: name value: value - runAsUser: 4 + runAsUser: 5 seccompProfile: localhostProfile: localhostProfile type: type @@ -220769,8 +228640,8 @@ components: hostProcess: true gmsaCredentialSpecName: gmsaCredentialSpecName supplementalGroups: - - 5 - - 5 + - 9 + - 9 supplementalGroupsPolicy: supplementalGroupsPolicy preemptionPolicy: preemptionPolicy nodeSelector: @@ -220779,12 +228650,12 @@ components: runtimeClassName: runtimeClassName tolerations: - effect: effect - tolerationSeconds: 9 + tolerationSeconds: 6 value: value key: key operator: operator - effect: effect - tolerationSeconds: 9 + tolerationSeconds: 6 value: value key: key operator: operator @@ -220803,7 +228674,7 @@ components: topologySpreadConstraints: - nodeTaintsPolicy: nodeTaintsPolicy whenUnsatisfiable: whenUnsatisfiable - maxSkew: 6 + maxSkew: 8 nodeAffinityPolicy: nodeAffinityPolicy labelSelector: matchExpressions: @@ -220819,14 +228690,14 @@ components: operator: operator matchLabels: key: matchLabels - minDomains: 8 + minDomains: 9 topologyKey: topologyKey matchLabelKeys: - matchLabelKeys - matchLabelKeys - nodeTaintsPolicy: nodeTaintsPolicy whenUnsatisfiable: whenUnsatisfiable - maxSkew: 6 + maxSkew: 8 nodeAffinityPolicy: nodeAffinityPolicy labelSelector: matchExpressions: @@ -220842,7 +228713,7 @@ components: operator: operator matchLabels: key: matchLabels - minDomains: 8 + minDomains: 9 topologyKey: topologyKey matchLabelKeys: - matchLabelKeys @@ -220951,20 +228822,20 @@ components: volumeMode: volumeMode secret: secretName: secretName - defaultMode: 3 + defaultMode: 7 optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key projected: sources: - downwardAPI: items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -220973,7 +228844,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -220986,26 +228857,33 @@ components: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key + podCertificate: + certificateChainPath: certificateChainPath + keyPath: keyPath + maxExpirationSeconds: 3 + keyType: keyType + credentialBundlePath: credentialBundlePath + signerName: signerName secret: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key serviceAccountToken: path: path audience: audience - expirationSeconds: 6 + expirationSeconds: 3 clusterTrustBundle: path: path labelSelector: @@ -221027,7 +228905,7 @@ components: signerName: signerName - downwardAPI: items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -221036,7 +228914,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -221049,26 +228927,33 @@ components: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key + podCertificate: + certificateChainPath: certificateChainPath + keyPath: keyPath + maxExpirationSeconds: 3 + keyType: keyType + credentialBundlePath: credentialBundlePath + signerName: signerName secret: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key serviceAccountToken: path: path audience: audience - expirationSeconds: 6 + expirationSeconds: 3 clusterTrustBundle: path: path labelSelector: @@ -221088,7 +228973,7 @@ components: name: name optional: true signerName: signerName - defaultMode: 5 + defaultMode: 6 cephfs: path: path secretRef: @@ -221143,9 +229028,9 @@ components: readOnly: true fsType: fsType downwardAPI: - defaultMode: 6 + defaultMode: 1 items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -221154,7 +229039,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -221164,7 +229049,7 @@ components: apiVersion: apiVersion fieldPath: fieldPath awsElasticBlockStore: - partition: 9 + partition: 6 volumeID: volumeID readOnly: true fsType: fsType @@ -221174,7 +229059,7 @@ components: iscsi: chapAuthSession: true iscsiInterface: iscsiInterface - lun: 6 + lun: 5 chapAuthDiscovery: true iqn: iqn portals: @@ -221199,14 +229084,14 @@ components: - monitors - monitors configMap: - defaultMode: 6 + defaultMode: 3 name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key storageos: @@ -221246,7 +229131,7 @@ components: volumePath: volumePath fsType: fsType fc: - lun: 2 + lun: 6 targetWWNs: - targetWWNs - targetWWNs @@ -221361,20 +229246,20 @@ components: volumeMode: volumeMode secret: secretName: secretName - defaultMode: 3 + defaultMode: 7 optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key projected: sources: - downwardAPI: items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -221383,7 +229268,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -221396,26 +229281,33 @@ components: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key + podCertificate: + certificateChainPath: certificateChainPath + keyPath: keyPath + maxExpirationSeconds: 3 + keyType: keyType + credentialBundlePath: credentialBundlePath + signerName: signerName secret: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key serviceAccountToken: path: path audience: audience - expirationSeconds: 6 + expirationSeconds: 3 clusterTrustBundle: path: path labelSelector: @@ -221437,7 +229329,7 @@ components: signerName: signerName - downwardAPI: items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -221446,7 +229338,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -221459,26 +229351,33 @@ components: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key + podCertificate: + certificateChainPath: certificateChainPath + keyPath: keyPath + maxExpirationSeconds: 3 + keyType: keyType + credentialBundlePath: credentialBundlePath + signerName: signerName secret: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key serviceAccountToken: path: path audience: audience - expirationSeconds: 6 + expirationSeconds: 3 clusterTrustBundle: path: path labelSelector: @@ -221498,7 +229397,7 @@ components: name: name optional: true signerName: signerName - defaultMode: 5 + defaultMode: 6 cephfs: path: path secretRef: @@ -221553,9 +229452,9 @@ components: readOnly: true fsType: fsType downwardAPI: - defaultMode: 6 + defaultMode: 1 items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -221564,7 +229463,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -221574,7 +229473,7 @@ components: apiVersion: apiVersion fieldPath: fieldPath awsElasticBlockStore: - partition: 9 + partition: 6 volumeID: volumeID readOnly: true fsType: fsType @@ -221584,7 +229483,7 @@ components: iscsi: chapAuthSession: true iscsiInterface: iscsiInterface - lun: 6 + lun: 5 chapAuthDiscovery: true iqn: iqn portals: @@ -221609,14 +229508,14 @@ components: - monitors - monitors configMap: - defaultMode: 6 + defaultMode: 3 name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key storageos: @@ -221656,7 +229555,7 @@ components: volumePath: volumePath fsType: fsType fc: - lun: 2 + lun: 6 targetWWNs: - targetWWNs - targetWWNs @@ -221682,11 +229581,24 @@ components: name: name - devicePath: devicePath name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator stdin: true terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -221916,6 +229828,11 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key - name: name value: value valueFrom: @@ -221934,6 +229851,11 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key restartPolicy: restartPolicy command: - command @@ -221949,11 +229871,24 @@ components: name: name - devicePath: devicePath name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator stdin: true terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -222183,6 +230118,11 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key - name: name value: value valueFrom: @@ -222201,6 +230141,11 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key restartPolicy: restartPolicy command: - command @@ -222212,7 +230157,7 @@ components: tty: true stdinOnce: true serviceAccount: serviceAccount - priority: 6 + priority: 7 restartPolicy: restartPolicy shareProcessNamespace: true hostUsers: true @@ -222230,50 +230175,24 @@ components: name: name - devicePath: devicePath name: name - image: image - imagePullPolicy: imagePullPolicy - livenessProbe: - terminationGracePeriodSeconds: 2 - failureThreshold: 5 - periodSeconds: 9 - tcpSocket: - port: port - host: host - timeoutSeconds: 4 - successThreshold: 3 - initialDelaySeconds: 7 - exec: - command: - - command - - command - grpc: - port: 2 - service: service - httpGet: - path: path - scheme: scheme - port: port - host: host - httpHeaders: - - name: name - value: value - - name: name - value: value + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator stdin: true terminationMessagePolicy: terminationMessagePolicy - terminationMessagePath: terminationMessagePath - workingDir: workingDir - resources: - claims: - - request: request - name: name - - request: request - name: name - requests: {} - limits: {} securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -222329,43 +230248,6 @@ components: value: value - name: name value: value - env: - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath ports: - protocol: protocol hostIP: hostIP @@ -222377,10 +230259,6 @@ components: name: name containerPort: 7 hostPort: 1 - restartPolicy: restartPolicy - command: - - command - - command volumeMounts: - mountPath: mountPath mountPropagation: mountPropagation @@ -222396,9 +230274,6 @@ components: subPath: subPath recursiveReadOnly: recursiveReadOnly subPathExpr: subPathExpr - args: - - args - - args lifecycle: postStart: sleep: @@ -222441,8 +230316,6 @@ components: - name: name value: value stopSignal: stopSignal - name: name - tty: true readinessProbe: terminationGracePeriodSeconds: 2 failureThreshold: 5 @@ -222475,7 +230348,6 @@ components: restartPolicy: restartPolicy - resourceName: resourceName restartPolicy: restartPolicy - stdinOnce: true envFrom: - configMapRef: name: name @@ -222491,11 +230363,6 @@ components: secretRef: name: name optional: true - - volumeDevices: - - devicePath: devicePath - name: name - - devicePath: devicePath - name: name image: image imagePullPolicy: imagePullPolicy livenessProbe: @@ -222525,8 +230392,6 @@ components: value: value - name: name value: value - stdin: true - terminationMessagePolicy: terminationMessagePolicy terminationMessagePath: terminationMessagePath workingDir: workingDir resources: @@ -222537,9 +230402,86 @@ components: name: name requests: {} limits: {} + env: + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + restartPolicy: restartPolicy + command: + - command + - command + args: + - args + - args + name: name + tty: true + stdinOnce: true + - volumeDevices: + - devicePath: devicePath + name: name + - devicePath: devicePath + name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + stdin: true + terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -222595,43 +230537,6 @@ components: value: value - name: name value: value - env: - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath ports: - protocol: protocol hostIP: hostIP @@ -222643,10 +230548,6 @@ components: name: name containerPort: 7 hostPort: 1 - restartPolicy: restartPolicy - command: - - command - - command volumeMounts: - mountPath: mountPath mountPropagation: mountPropagation @@ -222662,9 +230563,6 @@ components: subPath: subPath recursiveReadOnly: recursiveReadOnly subPathExpr: subPathExpr - args: - - args - - args lifecycle: postStart: sleep: @@ -222707,8 +230605,6 @@ components: - name: name value: value stopSignal: stopSignal - name: name - tty: true readinessProbe: terminationGracePeriodSeconds: 2 failureThreshold: 5 @@ -222741,7 +230637,6 @@ components: restartPolicy: restartPolicy - resourceName: resourceName restartPolicy: restartPolicy - stdinOnce: true envFrom: - configMapRef: name: name @@ -222757,12 +230652,6 @@ components: secretRef: name: name optional: true - initContainers: - - volumeDevices: - - devicePath: devicePath - name: name - - devicePath: devicePath - name: name image: image imagePullPolicy: imagePullPolicy livenessProbe: @@ -222792,8 +230681,6 @@ components: value: value - name: name value: value - stdin: true - terminationMessagePolicy: terminationMessagePolicy terminationMessagePath: terminationMessagePath workingDir: workingDir resources: @@ -222804,9 +230691,87 @@ components: name: name requests: {} limits: {} + env: + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + restartPolicy: restartPolicy + command: + - command + - command + args: + - args + - args + name: name + tty: true + stdinOnce: true + initContainers: + - volumeDevices: + - devicePath: devicePath + name: name + - devicePath: devicePath + name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + stdin: true + terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -222862,43 +230827,6 @@ components: value: value - name: name value: value - env: - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath ports: - protocol: protocol hostIP: hostIP @@ -222910,10 +230838,6 @@ components: name: name containerPort: 7 hostPort: 1 - restartPolicy: restartPolicy - command: - - command - - command volumeMounts: - mountPath: mountPath mountPropagation: mountPropagation @@ -222929,9 +230853,6 @@ components: subPath: subPath recursiveReadOnly: recursiveReadOnly subPathExpr: subPathExpr - args: - - args - - args lifecycle: postStart: sleep: @@ -222974,8 +230895,6 @@ components: - name: name value: value stopSignal: stopSignal - name: name - tty: true readinessProbe: terminationGracePeriodSeconds: 2 failureThreshold: 5 @@ -223008,7 +230927,6 @@ components: restartPolicy: restartPolicy - resourceName: resourceName restartPolicy: restartPolicy - stdinOnce: true envFrom: - configMapRef: name: name @@ -223024,11 +230942,6 @@ components: secretRef: name: name optional: true - - volumeDevices: - - devicePath: devicePath - name: name - - devicePath: devicePath - name: name image: image imagePullPolicy: imagePullPolicy livenessProbe: @@ -223058,8 +230971,6 @@ components: value: value - name: name value: value - stdin: true - terminationMessagePolicy: terminationMessagePolicy terminationMessagePath: terminationMessagePath workingDir: workingDir resources: @@ -223070,9 +230981,86 @@ components: name: name requests: {} limits: {} + env: + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + restartPolicy: restartPolicy + command: + - command + - command + args: + - args + - args + name: name + tty: true + stdinOnce: true + - volumeDevices: + - devicePath: devicePath + name: name + - devicePath: devicePath + name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + stdin: true + terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -223128,43 +231116,6 @@ components: value: value - name: name value: value - env: - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath ports: - protocol: protocol hostIP: hostIP @@ -223176,10 +231127,6 @@ components: name: name containerPort: 7 hostPort: 1 - restartPolicy: restartPolicy - command: - - command - - command volumeMounts: - mountPath: mountPath mountPropagation: mountPropagation @@ -223195,9 +231142,6 @@ components: subPath: subPath recursiveReadOnly: recursiveReadOnly subPathExpr: subPathExpr - args: - - args - - args lifecycle: postStart: sleep: @@ -223240,8 +231184,6 @@ components: - name: name value: value stopSignal: stopSignal - name: name - tty: true readinessProbe: terminationGracePeriodSeconds: 2 failureThreshold: 5 @@ -223274,7 +231216,6 @@ components: restartPolicy: restartPolicy - resourceName: resourceName restartPolicy: restartPolicy - stdinOnce: true envFrom: - configMapRef: name: name @@ -223290,6 +231231,102 @@ components: secretRef: name: name optional: true + image: image + imagePullPolicy: imagePullPolicy + livenessProbe: + terminationGracePeriodSeconds: 2 + failureThreshold: 5 + periodSeconds: 9 + tcpSocket: + port: port + host: host + timeoutSeconds: 4 + successThreshold: 3 + initialDelaySeconds: 7 + exec: + command: + - command + - command + grpc: + port: 2 + service: service + httpGet: + path: path + scheme: scheme + port: port + host: host + httpHeaders: + - name: name + value: value + - name: name + value: value + terminationMessagePath: terminationMessagePath + workingDir: workingDir + resources: + claims: + - request: request + name: name + - request: request + name: name + requests: {} + limits: {} + env: + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + restartPolicy: restartPolicy + command: + - command + - command + args: + - args + - args + name: name + tty: true + stdinOnce: true affinity: nodeAffinity: requiredDuringSchedulingIgnoredDuringExecution: @@ -223910,6 +231947,7 @@ components: - conditionType: conditionType - conditionType: conditionType serviceAccountName: serviceAccountName + hostnameOverride: hostnameOverride imagePullSecrets: - name: name - name: name @@ -223932,17 +231970,17 @@ components: appArmorProfile: localhostProfile: localhostProfile type: type - fsGroup: 7 + fsGroup: 1 fsGroupChangePolicy: fsGroupChangePolicy seLinuxChangePolicy: seLinuxChangePolicy - runAsGroup: 1 + runAsGroup: 4 runAsNonRoot: true sysctls: - name: name value: value - name: name value: value - runAsUser: 4 + runAsUser: 5 seccompProfile: localhostProfile: localhostProfile type: type @@ -223952,8 +231990,8 @@ components: hostProcess: true gmsaCredentialSpecName: gmsaCredentialSpecName supplementalGroups: - - 5 - - 5 + - 9 + - 9 supplementalGroupsPolicy: supplementalGroupsPolicy preemptionPolicy: preemptionPolicy nodeSelector: @@ -223962,12 +232000,12 @@ components: runtimeClassName: runtimeClassName tolerations: - effect: effect - tolerationSeconds: 9 + tolerationSeconds: 6 value: value key: key operator: operator - effect: effect - tolerationSeconds: 9 + tolerationSeconds: 6 value: value key: key operator: operator @@ -223986,7 +232024,7 @@ components: topologySpreadConstraints: - nodeTaintsPolicy: nodeTaintsPolicy whenUnsatisfiable: whenUnsatisfiable - maxSkew: 6 + maxSkew: 8 nodeAffinityPolicy: nodeAffinityPolicy labelSelector: matchExpressions: @@ -224002,14 +232040,14 @@ components: operator: operator matchLabels: key: matchLabels - minDomains: 8 + minDomains: 9 topologyKey: topologyKey matchLabelKeys: - matchLabelKeys - matchLabelKeys - nodeTaintsPolicy: nodeTaintsPolicy whenUnsatisfiable: whenUnsatisfiable - maxSkew: 6 + maxSkew: 8 nodeAffinityPolicy: nodeAffinityPolicy labelSelector: matchExpressions: @@ -224025,7 +232063,7 @@ components: operator: operator matchLabels: key: matchLabels - minDomains: 8 + minDomains: 9 topologyKey: topologyKey matchLabelKeys: - matchLabelKeys @@ -224134,20 +232172,20 @@ components: volumeMode: volumeMode secret: secretName: secretName - defaultMode: 3 + defaultMode: 7 optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key projected: sources: - downwardAPI: items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -224156,7 +232194,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -224169,26 +232207,33 @@ components: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key + podCertificate: + certificateChainPath: certificateChainPath + keyPath: keyPath + maxExpirationSeconds: 3 + keyType: keyType + credentialBundlePath: credentialBundlePath + signerName: signerName secret: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key serviceAccountToken: path: path audience: audience - expirationSeconds: 6 + expirationSeconds: 3 clusterTrustBundle: path: path labelSelector: @@ -224210,7 +232255,7 @@ components: signerName: signerName - downwardAPI: items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -224219,7 +232264,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -224232,26 +232277,33 @@ components: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key + podCertificate: + certificateChainPath: certificateChainPath + keyPath: keyPath + maxExpirationSeconds: 3 + keyType: keyType + credentialBundlePath: credentialBundlePath + signerName: signerName secret: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key serviceAccountToken: path: path audience: audience - expirationSeconds: 6 + expirationSeconds: 3 clusterTrustBundle: path: path labelSelector: @@ -224271,7 +232323,7 @@ components: name: name optional: true signerName: signerName - defaultMode: 5 + defaultMode: 6 cephfs: path: path secretRef: @@ -224326,9 +232378,9 @@ components: readOnly: true fsType: fsType downwardAPI: - defaultMode: 6 + defaultMode: 1 items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -224337,7 +232389,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -224347,7 +232399,7 @@ components: apiVersion: apiVersion fieldPath: fieldPath awsElasticBlockStore: - partition: 9 + partition: 6 volumeID: volumeID readOnly: true fsType: fsType @@ -224357,7 +232409,7 @@ components: iscsi: chapAuthSession: true iscsiInterface: iscsiInterface - lun: 6 + lun: 5 chapAuthDiscovery: true iqn: iqn portals: @@ -224382,14 +232434,14 @@ components: - monitors - monitors configMap: - defaultMode: 6 + defaultMode: 3 name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key storageos: @@ -224429,7 +232481,7 @@ components: volumePath: volumePath fsType: fsType fc: - lun: 2 + lun: 6 targetWWNs: - targetWWNs - targetWWNs @@ -224544,20 +232596,20 @@ components: volumeMode: volumeMode secret: secretName: secretName - defaultMode: 3 + defaultMode: 7 optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key projected: sources: - downwardAPI: items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -224566,7 +232618,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -224579,26 +232631,33 @@ components: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key + podCertificate: + certificateChainPath: certificateChainPath + keyPath: keyPath + maxExpirationSeconds: 3 + keyType: keyType + credentialBundlePath: credentialBundlePath + signerName: signerName secret: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key serviceAccountToken: path: path audience: audience - expirationSeconds: 6 + expirationSeconds: 3 clusterTrustBundle: path: path labelSelector: @@ -224620,7 +232679,7 @@ components: signerName: signerName - downwardAPI: items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -224629,7 +232688,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -224642,26 +232701,33 @@ components: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key + podCertificate: + certificateChainPath: certificateChainPath + keyPath: keyPath + maxExpirationSeconds: 3 + keyType: keyType + credentialBundlePath: credentialBundlePath + signerName: signerName secret: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key serviceAccountToken: path: path audience: audience - expirationSeconds: 6 + expirationSeconds: 3 clusterTrustBundle: path: path labelSelector: @@ -224681,7 +232747,7 @@ components: name: name optional: true signerName: signerName - defaultMode: 5 + defaultMode: 6 cephfs: path: path secretRef: @@ -224736,9 +232802,9 @@ components: readOnly: true fsType: fsType downwardAPI: - defaultMode: 6 + defaultMode: 1 items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -224747,7 +232813,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -224757,7 +232823,7 @@ components: apiVersion: apiVersion fieldPath: fieldPath awsElasticBlockStore: - partition: 9 + partition: 6 volumeID: volumeID readOnly: true fsType: fsType @@ -224767,7 +232833,7 @@ components: iscsi: chapAuthSession: true iscsiInterface: iscsiInterface - lun: 6 + lun: 5 chapAuthDiscovery: true iqn: iqn portals: @@ -224792,14 +232858,14 @@ components: - monitors - monitors configMap: - defaultMode: 6 + defaultMode: 3 name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key storageos: @@ -224839,7 +232905,7 @@ components: volumePath: volumePath fsType: fsType fc: - lun: 2 + lun: 6 targetWWNs: - targetWWNs - targetWWNs @@ -224865,11 +232931,24 @@ components: name: name - devicePath: devicePath name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator stdin: true terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -225099,6 +233178,11 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key - name: name value: value valueFrom: @@ -225117,6 +233201,11 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key restartPolicy: restartPolicy command: - command @@ -225132,11 +233221,24 @@ components: name: name - devicePath: devicePath name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator stdin: true terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -225366,6 +233468,11 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key - name: name value: value valueFrom: @@ -225384,6 +233491,11 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key restartPolicy: restartPolicy command: - command @@ -225395,7 +233507,7 @@ components: tty: true stdinOnce: true serviceAccount: serviceAccount - priority: 6 + priority: 7 restartPolicy: restartPolicy shareProcessNamespace: true hostUsers: true @@ -225413,50 +233525,24 @@ components: name: name - devicePath: devicePath name: name - image: image - imagePullPolicy: imagePullPolicy - livenessProbe: - terminationGracePeriodSeconds: 2 - failureThreshold: 5 - periodSeconds: 9 - tcpSocket: - port: port - host: host - timeoutSeconds: 4 - successThreshold: 3 - initialDelaySeconds: 7 - exec: - command: - - command - - command - grpc: - port: 2 - service: service - httpGet: - path: path - scheme: scheme - port: port - host: host - httpHeaders: - - name: name - value: value - - name: name - value: value + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator stdin: true terminationMessagePolicy: terminationMessagePolicy - terminationMessagePath: terminationMessagePath - workingDir: workingDir - resources: - claims: - - request: request - name: name - - request: request - name: name - requests: {} - limits: {} securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -225512,43 +233598,6 @@ components: value: value - name: name value: value - env: - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath ports: - protocol: protocol hostIP: hostIP @@ -225560,10 +233609,6 @@ components: name: name containerPort: 7 hostPort: 1 - restartPolicy: restartPolicy - command: - - command - - command volumeMounts: - mountPath: mountPath mountPropagation: mountPropagation @@ -225579,9 +233624,6 @@ components: subPath: subPath recursiveReadOnly: recursiveReadOnly subPathExpr: subPathExpr - args: - - args - - args lifecycle: postStart: sleep: @@ -225624,8 +233666,6 @@ components: - name: name value: value stopSignal: stopSignal - name: name - tty: true readinessProbe: terminationGracePeriodSeconds: 2 failureThreshold: 5 @@ -225658,7 +233698,6 @@ components: restartPolicy: restartPolicy - resourceName: resourceName restartPolicy: restartPolicy - stdinOnce: true envFrom: - configMapRef: name: name @@ -225674,11 +233713,6 @@ components: secretRef: name: name optional: true - - volumeDevices: - - devicePath: devicePath - name: name - - devicePath: devicePath - name: name image: image imagePullPolicy: imagePullPolicy livenessProbe: @@ -225708,8 +233742,6 @@ components: value: value - name: name value: value - stdin: true - terminationMessagePolicy: terminationMessagePolicy terminationMessagePath: terminationMessagePath workingDir: workingDir resources: @@ -225720,9 +233752,86 @@ components: name: name requests: {} limits: {} + env: + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + restartPolicy: restartPolicy + command: + - command + - command + args: + - args + - args + name: name + tty: true + stdinOnce: true + - volumeDevices: + - devicePath: devicePath + name: name + - devicePath: devicePath + name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + stdin: true + terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -225778,43 +233887,6 @@ components: value: value - name: name value: value - env: - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath ports: - protocol: protocol hostIP: hostIP @@ -225826,10 +233898,6 @@ components: name: name containerPort: 7 hostPort: 1 - restartPolicy: restartPolicy - command: - - command - - command volumeMounts: - mountPath: mountPath mountPropagation: mountPropagation @@ -225845,9 +233913,6 @@ components: subPath: subPath recursiveReadOnly: recursiveReadOnly subPathExpr: subPathExpr - args: - - args - - args lifecycle: postStart: sleep: @@ -225890,8 +233955,6 @@ components: - name: name value: value stopSignal: stopSignal - name: name - tty: true readinessProbe: terminationGracePeriodSeconds: 2 failureThreshold: 5 @@ -225924,7 +233987,6 @@ components: restartPolicy: restartPolicy - resourceName: resourceName restartPolicy: restartPolicy - stdinOnce: true envFrom: - configMapRef: name: name @@ -225940,12 +234002,6 @@ components: secretRef: name: name optional: true - initContainers: - - volumeDevices: - - devicePath: devicePath - name: name - - devicePath: devicePath - name: name image: image imagePullPolicy: imagePullPolicy livenessProbe: @@ -225975,8 +234031,6 @@ components: value: value - name: name value: value - stdin: true - terminationMessagePolicy: terminationMessagePolicy terminationMessagePath: terminationMessagePath workingDir: workingDir resources: @@ -225987,9 +234041,87 @@ components: name: name requests: {} limits: {} + env: + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + restartPolicy: restartPolicy + command: + - command + - command + args: + - args + - args + name: name + tty: true + stdinOnce: true + initContainers: + - volumeDevices: + - devicePath: devicePath + name: name + - devicePath: devicePath + name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + stdin: true + terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -226045,43 +234177,6 @@ components: value: value - name: name value: value - env: - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath ports: - protocol: protocol hostIP: hostIP @@ -226093,10 +234188,6 @@ components: name: name containerPort: 7 hostPort: 1 - restartPolicy: restartPolicy - command: - - command - - command volumeMounts: - mountPath: mountPath mountPropagation: mountPropagation @@ -226112,9 +234203,6 @@ components: subPath: subPath recursiveReadOnly: recursiveReadOnly subPathExpr: subPathExpr - args: - - args - - args lifecycle: postStart: sleep: @@ -226157,8 +234245,6 @@ components: - name: name value: value stopSignal: stopSignal - name: name - tty: true readinessProbe: terminationGracePeriodSeconds: 2 failureThreshold: 5 @@ -226191,7 +234277,6 @@ components: restartPolicy: restartPolicy - resourceName: resourceName restartPolicy: restartPolicy - stdinOnce: true envFrom: - configMapRef: name: name @@ -226207,11 +234292,6 @@ components: secretRef: name: name optional: true - - volumeDevices: - - devicePath: devicePath - name: name - - devicePath: devicePath - name: name image: image imagePullPolicy: imagePullPolicy livenessProbe: @@ -226241,8 +234321,6 @@ components: value: value - name: name value: value - stdin: true - terminationMessagePolicy: terminationMessagePolicy terminationMessagePath: terminationMessagePath workingDir: workingDir resources: @@ -226253,9 +234331,86 @@ components: name: name requests: {} limits: {} + env: + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + restartPolicy: restartPolicy + command: + - command + - command + args: + - args + - args + name: name + tty: true + stdinOnce: true + - volumeDevices: + - devicePath: devicePath + name: name + - devicePath: devicePath + name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + stdin: true + terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -226311,43 +234466,6 @@ components: value: value - name: name value: value - env: - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath ports: - protocol: protocol hostIP: hostIP @@ -226359,10 +234477,6 @@ components: name: name containerPort: 7 hostPort: 1 - restartPolicy: restartPolicy - command: - - command - - command volumeMounts: - mountPath: mountPath mountPropagation: mountPropagation @@ -226378,9 +234492,6 @@ components: subPath: subPath recursiveReadOnly: recursiveReadOnly subPathExpr: subPathExpr - args: - - args - - args lifecycle: postStart: sleep: @@ -226423,8 +234534,6 @@ components: - name: name value: value stopSignal: stopSignal - name: name - tty: true readinessProbe: terminationGracePeriodSeconds: 2 failureThreshold: 5 @@ -226457,7 +234566,6 @@ components: restartPolicy: restartPolicy - resourceName: resourceName restartPolicy: restartPolicy - stdinOnce: true envFrom: - configMapRef: name: name @@ -226473,6 +234581,102 @@ components: secretRef: name: name optional: true + image: image + imagePullPolicy: imagePullPolicy + livenessProbe: + terminationGracePeriodSeconds: 2 + failureThreshold: 5 + periodSeconds: 9 + tcpSocket: + port: port + host: host + timeoutSeconds: 4 + successThreshold: 3 + initialDelaySeconds: 7 + exec: + command: + - command + - command + grpc: + port: 2 + service: service + httpGet: + path: path + scheme: scheme + port: port + host: host + httpHeaders: + - name: name + value: value + - name: name + value: value + terminationMessagePath: terminationMessagePath + workingDir: workingDir + resources: + claims: + - request: request + name: name + - request: request + name: name + requests: {} + limits: {} + env: + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + restartPolicy: restartPolicy + command: + - command + - command + args: + - args + - args + name: name + tty: true + stdinOnce: true affinity: nodeAffinity: requiredDuringSchedulingIgnoredDuringExecution: @@ -227027,6 +235231,7 @@ components: - conditionType: conditionType - conditionType: conditionType serviceAccountName: serviceAccountName + hostnameOverride: hostnameOverride imagePullSecrets: - name: name - name: name @@ -227049,17 +235254,17 @@ components: appArmorProfile: localhostProfile: localhostProfile type: type - fsGroup: 7 + fsGroup: 1 fsGroupChangePolicy: fsGroupChangePolicy seLinuxChangePolicy: seLinuxChangePolicy - runAsGroup: 1 + runAsGroup: 4 runAsNonRoot: true sysctls: - name: name value: value - name: name value: value - runAsUser: 4 + runAsUser: 5 seccompProfile: localhostProfile: localhostProfile type: type @@ -227069,8 +235274,8 @@ components: hostProcess: true gmsaCredentialSpecName: gmsaCredentialSpecName supplementalGroups: - - 5 - - 5 + - 9 + - 9 supplementalGroupsPolicy: supplementalGroupsPolicy preemptionPolicy: preemptionPolicy nodeSelector: @@ -227079,12 +235284,12 @@ components: runtimeClassName: runtimeClassName tolerations: - effect: effect - tolerationSeconds: 9 + tolerationSeconds: 6 value: value key: key operator: operator - effect: effect - tolerationSeconds: 9 + tolerationSeconds: 6 value: value key: key operator: operator @@ -227103,7 +235308,7 @@ components: topologySpreadConstraints: - nodeTaintsPolicy: nodeTaintsPolicy whenUnsatisfiable: whenUnsatisfiable - maxSkew: 6 + maxSkew: 8 nodeAffinityPolicy: nodeAffinityPolicy labelSelector: matchExpressions: @@ -227119,14 +235324,14 @@ components: operator: operator matchLabels: key: matchLabels - minDomains: 8 + minDomains: 9 topologyKey: topologyKey matchLabelKeys: - matchLabelKeys - matchLabelKeys - nodeTaintsPolicy: nodeTaintsPolicy whenUnsatisfiable: whenUnsatisfiable - maxSkew: 6 + maxSkew: 8 nodeAffinityPolicy: nodeAffinityPolicy labelSelector: matchExpressions: @@ -227142,7 +235347,7 @@ components: operator: operator matchLabels: key: matchLabels - minDomains: 8 + minDomains: 9 topologyKey: topologyKey matchLabelKeys: - matchLabelKeys @@ -227251,20 +235456,20 @@ components: volumeMode: volumeMode secret: secretName: secretName - defaultMode: 3 + defaultMode: 7 optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key projected: sources: - downwardAPI: items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -227273,7 +235478,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -227286,26 +235491,33 @@ components: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key + podCertificate: + certificateChainPath: certificateChainPath + keyPath: keyPath + maxExpirationSeconds: 3 + keyType: keyType + credentialBundlePath: credentialBundlePath + signerName: signerName secret: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key serviceAccountToken: path: path audience: audience - expirationSeconds: 6 + expirationSeconds: 3 clusterTrustBundle: path: path labelSelector: @@ -227327,7 +235539,7 @@ components: signerName: signerName - downwardAPI: items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -227336,7 +235548,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -227349,26 +235561,33 @@ components: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key + podCertificate: + certificateChainPath: certificateChainPath + keyPath: keyPath + maxExpirationSeconds: 3 + keyType: keyType + credentialBundlePath: credentialBundlePath + signerName: signerName secret: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key serviceAccountToken: path: path audience: audience - expirationSeconds: 6 + expirationSeconds: 3 clusterTrustBundle: path: path labelSelector: @@ -227388,7 +235607,7 @@ components: name: name optional: true signerName: signerName - defaultMode: 5 + defaultMode: 6 cephfs: path: path secretRef: @@ -227443,9 +235662,9 @@ components: readOnly: true fsType: fsType downwardAPI: - defaultMode: 6 + defaultMode: 1 items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -227454,7 +235673,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -227464,7 +235683,7 @@ components: apiVersion: apiVersion fieldPath: fieldPath awsElasticBlockStore: - partition: 9 + partition: 6 volumeID: volumeID readOnly: true fsType: fsType @@ -227474,7 +235693,7 @@ components: iscsi: chapAuthSession: true iscsiInterface: iscsiInterface - lun: 6 + lun: 5 chapAuthDiscovery: true iqn: iqn portals: @@ -227499,14 +235718,14 @@ components: - monitors - monitors configMap: - defaultMode: 6 + defaultMode: 3 name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key storageos: @@ -227546,7 +235765,7 @@ components: volumePath: volumePath fsType: fsType fc: - lun: 2 + lun: 6 targetWWNs: - targetWWNs - targetWWNs @@ -227661,20 +235880,20 @@ components: volumeMode: volumeMode secret: secretName: secretName - defaultMode: 3 + defaultMode: 7 optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key projected: sources: - downwardAPI: items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -227683,7 +235902,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -227696,26 +235915,33 @@ components: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key + podCertificate: + certificateChainPath: certificateChainPath + keyPath: keyPath + maxExpirationSeconds: 3 + keyType: keyType + credentialBundlePath: credentialBundlePath + signerName: signerName secret: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key serviceAccountToken: path: path audience: audience - expirationSeconds: 6 + expirationSeconds: 3 clusterTrustBundle: path: path labelSelector: @@ -227737,7 +235963,7 @@ components: signerName: signerName - downwardAPI: items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -227746,7 +235972,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -227759,26 +235985,33 @@ components: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key + podCertificate: + certificateChainPath: certificateChainPath + keyPath: keyPath + maxExpirationSeconds: 3 + keyType: keyType + credentialBundlePath: credentialBundlePath + signerName: signerName secret: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key serviceAccountToken: path: path audience: audience - expirationSeconds: 6 + expirationSeconds: 3 clusterTrustBundle: path: path labelSelector: @@ -227798,7 +236031,7 @@ components: name: name optional: true signerName: signerName - defaultMode: 5 + defaultMode: 6 cephfs: path: path secretRef: @@ -227853,9 +236086,9 @@ components: readOnly: true fsType: fsType downwardAPI: - defaultMode: 6 + defaultMode: 1 items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -227864,7 +236097,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -227874,7 +236107,7 @@ components: apiVersion: apiVersion fieldPath: fieldPath awsElasticBlockStore: - partition: 9 + partition: 6 volumeID: volumeID readOnly: true fsType: fsType @@ -227884,7 +236117,7 @@ components: iscsi: chapAuthSession: true iscsiInterface: iscsiInterface - lun: 6 + lun: 5 chapAuthDiscovery: true iqn: iqn portals: @@ -227909,14 +236142,14 @@ components: - monitors - monitors configMap: - defaultMode: 6 + defaultMode: 3 name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key storageos: @@ -227956,7 +236189,7 @@ components: volumePath: volumePath fsType: fsType fc: - lun: 2 + lun: 6 targetWWNs: - targetWWNs - targetWWNs @@ -227982,11 +236215,24 @@ components: name: name - devicePath: devicePath name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator stdin: true terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -228216,6 +236462,11 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key - name: name value: value valueFrom: @@ -228234,6 +236485,11 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key restartPolicy: restartPolicy command: - command @@ -228249,11 +236505,24 @@ components: name: name - devicePath: devicePath name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator stdin: true terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -228483,6 +236752,11 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key - name: name value: value valueFrom: @@ -228501,6 +236775,11 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key restartPolicy: restartPolicy command: - command @@ -228512,7 +236791,7 @@ components: tty: true stdinOnce: true serviceAccount: serviceAccount - priority: 6 + priority: 7 restartPolicy: restartPolicy shareProcessNamespace: true hostUsers: true @@ -228530,50 +236809,24 @@ components: name: name - devicePath: devicePath name: name - image: image - imagePullPolicy: imagePullPolicy - livenessProbe: - terminationGracePeriodSeconds: 2 - failureThreshold: 5 - periodSeconds: 9 - tcpSocket: - port: port - host: host - timeoutSeconds: 4 - successThreshold: 3 - initialDelaySeconds: 7 - exec: - command: - - command - - command - grpc: - port: 2 - service: service - httpGet: - path: path - scheme: scheme - port: port - host: host - httpHeaders: - - name: name - value: value - - name: name - value: value + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator stdin: true terminationMessagePolicy: terminationMessagePolicy - terminationMessagePath: terminationMessagePath - workingDir: workingDir - resources: - claims: - - request: request - name: name - - request: request - name: name - requests: {} - limits: {} securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -228629,43 +236882,6 @@ components: value: value - name: name value: value - env: - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath ports: - protocol: protocol hostIP: hostIP @@ -228677,10 +236893,6 @@ components: name: name containerPort: 7 hostPort: 1 - restartPolicy: restartPolicy - command: - - command - - command volumeMounts: - mountPath: mountPath mountPropagation: mountPropagation @@ -228696,9 +236908,6 @@ components: subPath: subPath recursiveReadOnly: recursiveReadOnly subPathExpr: subPathExpr - args: - - args - - args lifecycle: postStart: sleep: @@ -228741,8 +236950,6 @@ components: - name: name value: value stopSignal: stopSignal - name: name - tty: true readinessProbe: terminationGracePeriodSeconds: 2 failureThreshold: 5 @@ -228775,7 +236982,6 @@ components: restartPolicy: restartPolicy - resourceName: resourceName restartPolicy: restartPolicy - stdinOnce: true envFrom: - configMapRef: name: name @@ -228791,11 +236997,6 @@ components: secretRef: name: name optional: true - - volumeDevices: - - devicePath: devicePath - name: name - - devicePath: devicePath - name: name image: image imagePullPolicy: imagePullPolicy livenessProbe: @@ -228825,8 +237026,6 @@ components: value: value - name: name value: value - stdin: true - terminationMessagePolicy: terminationMessagePolicy terminationMessagePath: terminationMessagePath workingDir: workingDir resources: @@ -228837,9 +237036,86 @@ components: name: name requests: {} limits: {} + env: + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + restartPolicy: restartPolicy + command: + - command + - command + args: + - args + - args + name: name + tty: true + stdinOnce: true + - volumeDevices: + - devicePath: devicePath + name: name + - devicePath: devicePath + name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + stdin: true + terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -228895,43 +237171,6 @@ components: value: value - name: name value: value - env: - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath ports: - protocol: protocol hostIP: hostIP @@ -228943,10 +237182,6 @@ components: name: name containerPort: 7 hostPort: 1 - restartPolicy: restartPolicy - command: - - command - - command volumeMounts: - mountPath: mountPath mountPropagation: mountPropagation @@ -228962,9 +237197,6 @@ components: subPath: subPath recursiveReadOnly: recursiveReadOnly subPathExpr: subPathExpr - args: - - args - - args lifecycle: postStart: sleep: @@ -229007,8 +237239,6 @@ components: - name: name value: value stopSignal: stopSignal - name: name - tty: true readinessProbe: terminationGracePeriodSeconds: 2 failureThreshold: 5 @@ -229041,7 +237271,6 @@ components: restartPolicy: restartPolicy - resourceName: resourceName restartPolicy: restartPolicy - stdinOnce: true envFrom: - configMapRef: name: name @@ -229057,12 +237286,6 @@ components: secretRef: name: name optional: true - initContainers: - - volumeDevices: - - devicePath: devicePath - name: name - - devicePath: devicePath - name: name image: image imagePullPolicy: imagePullPolicy livenessProbe: @@ -229092,8 +237315,6 @@ components: value: value - name: name value: value - stdin: true - terminationMessagePolicy: terminationMessagePolicy terminationMessagePath: terminationMessagePath workingDir: workingDir resources: @@ -229104,9 +237325,87 @@ components: name: name requests: {} limits: {} + env: + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + restartPolicy: restartPolicy + command: + - command + - command + args: + - args + - args + name: name + tty: true + stdinOnce: true + initContainers: + - volumeDevices: + - devicePath: devicePath + name: name + - devicePath: devicePath + name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + stdin: true + terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -229162,43 +237461,6 @@ components: value: value - name: name value: value - env: - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath ports: - protocol: protocol hostIP: hostIP @@ -229210,10 +237472,6 @@ components: name: name containerPort: 7 hostPort: 1 - restartPolicy: restartPolicy - command: - - command - - command volumeMounts: - mountPath: mountPath mountPropagation: mountPropagation @@ -229229,9 +237487,6 @@ components: subPath: subPath recursiveReadOnly: recursiveReadOnly subPathExpr: subPathExpr - args: - - args - - args lifecycle: postStart: sleep: @@ -229274,8 +237529,6 @@ components: - name: name value: value stopSignal: stopSignal - name: name - tty: true readinessProbe: terminationGracePeriodSeconds: 2 failureThreshold: 5 @@ -229308,7 +237561,6 @@ components: restartPolicy: restartPolicy - resourceName: resourceName restartPolicy: restartPolicy - stdinOnce: true envFrom: - configMapRef: name: name @@ -229324,11 +237576,6 @@ components: secretRef: name: name optional: true - - volumeDevices: - - devicePath: devicePath - name: name - - devicePath: devicePath - name: name image: image imagePullPolicy: imagePullPolicy livenessProbe: @@ -229358,8 +237605,6 @@ components: value: value - name: name value: value - stdin: true - terminationMessagePolicy: terminationMessagePolicy terminationMessagePath: terminationMessagePath workingDir: workingDir resources: @@ -229370,9 +237615,86 @@ components: name: name requests: {} limits: {} + env: + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + restartPolicy: restartPolicy + command: + - command + - command + args: + - args + - args + name: name + tty: true + stdinOnce: true + - volumeDevices: + - devicePath: devicePath + name: name + - devicePath: devicePath + name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + stdin: true + terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -229428,43 +237750,6 @@ components: value: value - name: name value: value - env: - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath ports: - protocol: protocol hostIP: hostIP @@ -229476,10 +237761,6 @@ components: name: name containerPort: 7 hostPort: 1 - restartPolicy: restartPolicy - command: - - command - - command volumeMounts: - mountPath: mountPath mountPropagation: mountPropagation @@ -229495,9 +237776,6 @@ components: subPath: subPath recursiveReadOnly: recursiveReadOnly subPathExpr: subPathExpr - args: - - args - - args lifecycle: postStart: sleep: @@ -229540,8 +237818,6 @@ components: - name: name value: value stopSignal: stopSignal - name: name - tty: true readinessProbe: terminationGracePeriodSeconds: 2 failureThreshold: 5 @@ -229574,7 +237850,6 @@ components: restartPolicy: restartPolicy - resourceName: resourceName restartPolicy: restartPolicy - stdinOnce: true envFrom: - configMapRef: name: name @@ -229590,6 +237865,102 @@ components: secretRef: name: name optional: true + image: image + imagePullPolicy: imagePullPolicy + livenessProbe: + terminationGracePeriodSeconds: 2 + failureThreshold: 5 + periodSeconds: 9 + tcpSocket: + port: port + host: host + timeoutSeconds: 4 + successThreshold: 3 + initialDelaySeconds: 7 + exec: + command: + - command + - command + grpc: + port: 2 + service: service + httpGet: + path: path + scheme: scheme + port: port + host: host + httpHeaders: + - name: name + value: value + - name: name + value: value + terminationMessagePath: terminationMessagePath + workingDir: workingDir + resources: + claims: + - request: request + name: name + - request: request + name: name + requests: {} + limits: {} + env: + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + restartPolicy: restartPolicy + command: + - command + - command + args: + - args + - args + name: name + tty: true + stdinOnce: true affinity: nodeAffinity: requiredDuringSchedulingIgnoredDuringExecution: @@ -230126,6 +238497,7 @@ components: - conditionType: conditionType - conditionType: conditionType serviceAccountName: serviceAccountName + hostnameOverride: hostnameOverride imagePullSecrets: - name: name - name: name @@ -230148,17 +238520,17 @@ components: appArmorProfile: localhostProfile: localhostProfile type: type - fsGroup: 7 + fsGroup: 1 fsGroupChangePolicy: fsGroupChangePolicy seLinuxChangePolicy: seLinuxChangePolicy - runAsGroup: 1 + runAsGroup: 4 runAsNonRoot: true sysctls: - name: name value: value - name: name value: value - runAsUser: 4 + runAsUser: 5 seccompProfile: localhostProfile: localhostProfile type: type @@ -230168,8 +238540,8 @@ components: hostProcess: true gmsaCredentialSpecName: gmsaCredentialSpecName supplementalGroups: - - 5 - - 5 + - 9 + - 9 supplementalGroupsPolicy: supplementalGroupsPolicy preemptionPolicy: preemptionPolicy nodeSelector: @@ -230178,12 +238550,12 @@ components: runtimeClassName: runtimeClassName tolerations: - effect: effect - tolerationSeconds: 9 + tolerationSeconds: 6 value: value key: key operator: operator - effect: effect - tolerationSeconds: 9 + tolerationSeconds: 6 value: value key: key operator: operator @@ -230202,7 +238574,7 @@ components: topologySpreadConstraints: - nodeTaintsPolicy: nodeTaintsPolicy whenUnsatisfiable: whenUnsatisfiable - maxSkew: 6 + maxSkew: 8 nodeAffinityPolicy: nodeAffinityPolicy labelSelector: matchExpressions: @@ -230218,14 +238590,14 @@ components: operator: operator matchLabels: key: matchLabels - minDomains: 8 + minDomains: 9 topologyKey: topologyKey matchLabelKeys: - matchLabelKeys - matchLabelKeys - nodeTaintsPolicy: nodeTaintsPolicy whenUnsatisfiable: whenUnsatisfiable - maxSkew: 6 + maxSkew: 8 nodeAffinityPolicy: nodeAffinityPolicy labelSelector: matchExpressions: @@ -230241,7 +238613,7 @@ components: operator: operator matchLabels: key: matchLabels - minDomains: 8 + minDomains: 9 topologyKey: topologyKey matchLabelKeys: - matchLabelKeys @@ -230350,20 +238722,20 @@ components: volumeMode: volumeMode secret: secretName: secretName - defaultMode: 3 + defaultMode: 7 optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key projected: sources: - downwardAPI: items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -230372,7 +238744,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -230385,26 +238757,33 @@ components: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key + podCertificate: + certificateChainPath: certificateChainPath + keyPath: keyPath + maxExpirationSeconds: 3 + keyType: keyType + credentialBundlePath: credentialBundlePath + signerName: signerName secret: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key serviceAccountToken: path: path audience: audience - expirationSeconds: 6 + expirationSeconds: 3 clusterTrustBundle: path: path labelSelector: @@ -230426,7 +238805,7 @@ components: signerName: signerName - downwardAPI: items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -230435,7 +238814,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -230448,26 +238827,33 @@ components: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key + podCertificate: + certificateChainPath: certificateChainPath + keyPath: keyPath + maxExpirationSeconds: 3 + keyType: keyType + credentialBundlePath: credentialBundlePath + signerName: signerName secret: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key serviceAccountToken: path: path audience: audience - expirationSeconds: 6 + expirationSeconds: 3 clusterTrustBundle: path: path labelSelector: @@ -230487,7 +238873,7 @@ components: name: name optional: true signerName: signerName - defaultMode: 5 + defaultMode: 6 cephfs: path: path secretRef: @@ -230542,9 +238928,9 @@ components: readOnly: true fsType: fsType downwardAPI: - defaultMode: 6 + defaultMode: 1 items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -230553,7 +238939,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -230563,7 +238949,7 @@ components: apiVersion: apiVersion fieldPath: fieldPath awsElasticBlockStore: - partition: 9 + partition: 6 volumeID: volumeID readOnly: true fsType: fsType @@ -230573,7 +238959,7 @@ components: iscsi: chapAuthSession: true iscsiInterface: iscsiInterface - lun: 6 + lun: 5 chapAuthDiscovery: true iqn: iqn portals: @@ -230598,14 +238984,14 @@ components: - monitors - monitors configMap: - defaultMode: 6 + defaultMode: 3 name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key storageos: @@ -230645,7 +239031,7 @@ components: volumePath: volumePath fsType: fsType fc: - lun: 2 + lun: 6 targetWWNs: - targetWWNs - targetWWNs @@ -230760,20 +239146,20 @@ components: volumeMode: volumeMode secret: secretName: secretName - defaultMode: 3 + defaultMode: 7 optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key projected: sources: - downwardAPI: items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -230782,7 +239168,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -230795,26 +239181,33 @@ components: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key + podCertificate: + certificateChainPath: certificateChainPath + keyPath: keyPath + maxExpirationSeconds: 3 + keyType: keyType + credentialBundlePath: credentialBundlePath + signerName: signerName secret: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key serviceAccountToken: path: path audience: audience - expirationSeconds: 6 + expirationSeconds: 3 clusterTrustBundle: path: path labelSelector: @@ -230836,7 +239229,7 @@ components: signerName: signerName - downwardAPI: items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -230845,7 +239238,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -230858,26 +239251,33 @@ components: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key + podCertificate: + certificateChainPath: certificateChainPath + keyPath: keyPath + maxExpirationSeconds: 3 + keyType: keyType + credentialBundlePath: credentialBundlePath + signerName: signerName secret: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key serviceAccountToken: path: path audience: audience - expirationSeconds: 6 + expirationSeconds: 3 clusterTrustBundle: path: path labelSelector: @@ -230897,7 +239297,7 @@ components: name: name optional: true signerName: signerName - defaultMode: 5 + defaultMode: 6 cephfs: path: path secretRef: @@ -230952,9 +239352,9 @@ components: readOnly: true fsType: fsType downwardAPI: - defaultMode: 6 + defaultMode: 1 items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -230963,7 +239363,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -230973,7 +239373,7 @@ components: apiVersion: apiVersion fieldPath: fieldPath awsElasticBlockStore: - partition: 9 + partition: 6 volumeID: volumeID readOnly: true fsType: fsType @@ -230983,7 +239383,7 @@ components: iscsi: chapAuthSession: true iscsiInterface: iscsiInterface - lun: 6 + lun: 5 chapAuthDiscovery: true iqn: iqn portals: @@ -231008,14 +239408,14 @@ components: - monitors - monitors configMap: - defaultMode: 6 + defaultMode: 3 name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key storageos: @@ -231055,7 +239455,7 @@ components: volumePath: volumePath fsType: fsType fc: - lun: 2 + lun: 6 targetWWNs: - targetWWNs - targetWWNs @@ -231081,11 +239481,24 @@ components: name: name - devicePath: devicePath name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator stdin: true terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -231315,6 +239728,11 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key - name: name value: value valueFrom: @@ -231333,6 +239751,11 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key restartPolicy: restartPolicy command: - command @@ -231348,11 +239771,24 @@ components: name: name - devicePath: devicePath name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator stdin: true terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -231582,6 +240018,11 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key - name: name value: value valueFrom: @@ -231600,6 +240041,11 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key restartPolicy: restartPolicy command: - command @@ -231611,7 +240057,7 @@ components: tty: true stdinOnce: true serviceAccount: serviceAccount - priority: 6 + priority: 7 restartPolicy: restartPolicy shareProcessNamespace: true hostUsers: true @@ -231629,50 +240075,24 @@ components: name: name - devicePath: devicePath name: name - image: image - imagePullPolicy: imagePullPolicy - livenessProbe: - terminationGracePeriodSeconds: 2 - failureThreshold: 5 - periodSeconds: 9 - tcpSocket: - port: port - host: host - timeoutSeconds: 4 - successThreshold: 3 - initialDelaySeconds: 7 - exec: - command: - - command - - command - grpc: - port: 2 - service: service - httpGet: - path: path - scheme: scheme - port: port - host: host - httpHeaders: - - name: name - value: value - - name: name - value: value + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator stdin: true terminationMessagePolicy: terminationMessagePolicy - terminationMessagePath: terminationMessagePath - workingDir: workingDir - resources: - claims: - - request: request - name: name - - request: request - name: name - requests: {} - limits: {} securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -231728,43 +240148,6 @@ components: value: value - name: name value: value - env: - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath ports: - protocol: protocol hostIP: hostIP @@ -231776,10 +240159,6 @@ components: name: name containerPort: 7 hostPort: 1 - restartPolicy: restartPolicy - command: - - command - - command volumeMounts: - mountPath: mountPath mountPropagation: mountPropagation @@ -231795,9 +240174,6 @@ components: subPath: subPath recursiveReadOnly: recursiveReadOnly subPathExpr: subPathExpr - args: - - args - - args lifecycle: postStart: sleep: @@ -231840,8 +240216,6 @@ components: - name: name value: value stopSignal: stopSignal - name: name - tty: true readinessProbe: terminationGracePeriodSeconds: 2 failureThreshold: 5 @@ -231874,7 +240248,6 @@ components: restartPolicy: restartPolicy - resourceName: resourceName restartPolicy: restartPolicy - stdinOnce: true envFrom: - configMapRef: name: name @@ -231890,11 +240263,6 @@ components: secretRef: name: name optional: true - - volumeDevices: - - devicePath: devicePath - name: name - - devicePath: devicePath - name: name image: image imagePullPolicy: imagePullPolicy livenessProbe: @@ -231924,8 +240292,6 @@ components: value: value - name: name value: value - stdin: true - terminationMessagePolicy: terminationMessagePolicy terminationMessagePath: terminationMessagePath workingDir: workingDir resources: @@ -231936,9 +240302,86 @@ components: name: name requests: {} limits: {} + env: + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + restartPolicy: restartPolicy + command: + - command + - command + args: + - args + - args + name: name + tty: true + stdinOnce: true + - volumeDevices: + - devicePath: devicePath + name: name + - devicePath: devicePath + name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + stdin: true + terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -231994,43 +240437,6 @@ components: value: value - name: name value: value - env: - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath ports: - protocol: protocol hostIP: hostIP @@ -232042,10 +240448,6 @@ components: name: name containerPort: 7 hostPort: 1 - restartPolicy: restartPolicy - command: - - command - - command volumeMounts: - mountPath: mountPath mountPropagation: mountPropagation @@ -232061,9 +240463,6 @@ components: subPath: subPath recursiveReadOnly: recursiveReadOnly subPathExpr: subPathExpr - args: - - args - - args lifecycle: postStart: sleep: @@ -232106,8 +240505,6 @@ components: - name: name value: value stopSignal: stopSignal - name: name - tty: true readinessProbe: terminationGracePeriodSeconds: 2 failureThreshold: 5 @@ -232140,7 +240537,6 @@ components: restartPolicy: restartPolicy - resourceName: resourceName restartPolicy: restartPolicy - stdinOnce: true envFrom: - configMapRef: name: name @@ -232156,12 +240552,6 @@ components: secretRef: name: name optional: true - initContainers: - - volumeDevices: - - devicePath: devicePath - name: name - - devicePath: devicePath - name: name image: image imagePullPolicy: imagePullPolicy livenessProbe: @@ -232191,8 +240581,6 @@ components: value: value - name: name value: value - stdin: true - terminationMessagePolicy: terminationMessagePolicy terminationMessagePath: terminationMessagePath workingDir: workingDir resources: @@ -232203,9 +240591,87 @@ components: name: name requests: {} limits: {} + env: + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + restartPolicy: restartPolicy + command: + - command + - command + args: + - args + - args + name: name + tty: true + stdinOnce: true + initContainers: + - volumeDevices: + - devicePath: devicePath + name: name + - devicePath: devicePath + name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + stdin: true + terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -232261,43 +240727,6 @@ components: value: value - name: name value: value - env: - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath ports: - protocol: protocol hostIP: hostIP @@ -232309,10 +240738,6 @@ components: name: name containerPort: 7 hostPort: 1 - restartPolicy: restartPolicy - command: - - command - - command volumeMounts: - mountPath: mountPath mountPropagation: mountPropagation @@ -232328,9 +240753,6 @@ components: subPath: subPath recursiveReadOnly: recursiveReadOnly subPathExpr: subPathExpr - args: - - args - - args lifecycle: postStart: sleep: @@ -232373,8 +240795,6 @@ components: - name: name value: value stopSignal: stopSignal - name: name - tty: true readinessProbe: terminationGracePeriodSeconds: 2 failureThreshold: 5 @@ -232407,7 +240827,6 @@ components: restartPolicy: restartPolicy - resourceName: resourceName restartPolicy: restartPolicy - stdinOnce: true envFrom: - configMapRef: name: name @@ -232423,11 +240842,6 @@ components: secretRef: name: name optional: true - - volumeDevices: - - devicePath: devicePath - name: name - - devicePath: devicePath - name: name image: image imagePullPolicy: imagePullPolicy livenessProbe: @@ -232457,8 +240871,6 @@ components: value: value - name: name value: value - stdin: true - terminationMessagePolicy: terminationMessagePolicy terminationMessagePath: terminationMessagePath workingDir: workingDir resources: @@ -232469,9 +240881,86 @@ components: name: name requests: {} limits: {} + env: + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + restartPolicy: restartPolicy + command: + - command + - command + args: + - args + - args + name: name + tty: true + stdinOnce: true + - volumeDevices: + - devicePath: devicePath + name: name + - devicePath: devicePath + name: name + restartPolicyRules: + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + - action: action + exitCodes: + values: + - 1 + - 1 + operator: operator + stdin: true + terminationMessagePolicy: terminationMessagePolicy securityContext: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -232527,43 +241016,6 @@ components: value: value - name: name value: value - env: - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath - - name: name - value: value - valueFrom: - secretKeyRef: - name: name - optional: true - key: key - resourceFieldRef: - divisor: divisor - resource: resource - containerName: containerName - configMapKeyRef: - name: name - optional: true - key: key - fieldRef: - apiVersion: apiVersion - fieldPath: fieldPath ports: - protocol: protocol hostIP: hostIP @@ -232575,10 +241027,6 @@ components: name: name containerPort: 7 hostPort: 1 - restartPolicy: restartPolicy - command: - - command - - command volumeMounts: - mountPath: mountPath mountPropagation: mountPropagation @@ -232594,9 +241042,6 @@ components: subPath: subPath recursiveReadOnly: recursiveReadOnly subPathExpr: subPathExpr - args: - - args - - args lifecycle: postStart: sleep: @@ -232639,8 +241084,6 @@ components: - name: name value: value stopSignal: stopSignal - name: name - tty: true readinessProbe: terminationGracePeriodSeconds: 2 failureThreshold: 5 @@ -232673,7 +241116,6 @@ components: restartPolicy: restartPolicy - resourceName: resourceName restartPolicy: restartPolicy - stdinOnce: true envFrom: - configMapRef: name: name @@ -232689,6 +241131,102 @@ components: secretRef: name: name optional: true + image: image + imagePullPolicy: imagePullPolicy + livenessProbe: + terminationGracePeriodSeconds: 2 + failureThreshold: 5 + periodSeconds: 9 + tcpSocket: + port: port + host: host + timeoutSeconds: 4 + successThreshold: 3 + initialDelaySeconds: 7 + exec: + command: + - command + - command + grpc: + port: 2 + service: service + httpGet: + path: path + scheme: scheme + port: port + host: host + httpHeaders: + - name: name + value: value + - name: name + value: value + terminationMessagePath: terminationMessagePath + workingDir: workingDir + resources: + claims: + - request: request + name: name + - request: request + name: name + requests: {} + limits: {} + env: + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + - name: name + value: value + valueFrom: + secretKeyRef: + name: name + optional: true + key: key + resourceFieldRef: + divisor: divisor + resource: resource + containerName: containerName + configMapKeyRef: + name: name + optional: true + key: key + fieldRef: + apiVersion: apiVersion + fieldPath: fieldPath + fileKeyRef: + path: path + volumeName: volumeName + optional: true + key: key + restartPolicy: restartPolicy + command: + - command + - command + args: + - args + - args + name: name + tty: true + stdinOnce: true affinity: nodeAffinity: requiredDuringSchedulingIgnoredDuringExecution: @@ -233195,7 +241733,7 @@ components: required: - replicas type: object - v1.ResourceClaim: + core.v1.ResourceClaim: description: ResourceClaim references one entry in PodSpec.ResourceClaims. example: request: request @@ -233637,11 +242175,11 @@ components: description: |- Claims lists the names of resources, defined in spec.resourceClaims, that are used by this container. - This is an alpha field and requires enabling the DynamicResourceAllocation feature gate. + This field depends on the DynamicResourceAllocation feature gate. This field is immutable. It can only be set for containers. items: - $ref: '#/components/schemas/v1.ResourceClaim' + $ref: '#/components/schemas/core.v1.ResourceClaim' type: array x-kubernetes-list-type: map x-kubernetes-list-map-keys: @@ -234216,10 +242754,10 @@ components: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key properties: @@ -234269,13 +242807,13 @@ components: The contents of the target Secret's Data field will be presented in a volume as files using the keys in the Data field as the file names. Secret volumes support ownership management and SELinux relabeling. example: secretName: secretName - defaultMode: 3 + defaultMode: 7 optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key properties: @@ -234316,7 +242854,7 @@ components: both are set, the values in SecurityContext take precedence. example: privileged: true - runAsUser: 1 + runAsUser: 6 capabilities: add: - add @@ -234867,7 +243405,7 @@ components: example: path: path audience: audience - expirationSeconds: 6 + expirationSeconds: 3 properties: audience: description: audience is the intended audience of the token. A recipient @@ -235694,7 +244232,6 @@ components: type: string timeAdded: description: TimeAdded represents the time at which the taint was added. - It is only written for NoExecute taints. format: date-time type: string value: @@ -235709,7 +244246,7 @@ components: matches the triple using the matching operator . example: effect: effect - tolerationSeconds: 9 + tolerationSeconds: 6 value: value key: key operator: operator @@ -235797,7 +244334,7 @@ components: example: nodeTaintsPolicy: nodeTaintsPolicy whenUnsatisfiable: whenUnsatisfiable - maxSkew: 6 + maxSkew: 8 nodeAffinityPolicy: nodeAffinityPolicy labelSelector: matchExpressions: @@ -235813,7 +244350,7 @@ components: operator: operator matchLabels: key: matchLabels - minDomains: 8 + minDomains: 9 topologyKey: topologyKey matchLabelKeys: - matchLabelKeys @@ -236052,20 +244589,20 @@ components: volumeMode: volumeMode secret: secretName: secretName - defaultMode: 3 + defaultMode: 7 optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key projected: sources: - downwardAPI: items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -236074,7 +244611,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -236087,26 +244624,33 @@ components: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key + podCertificate: + certificateChainPath: certificateChainPath + keyPath: keyPath + maxExpirationSeconds: 3 + keyType: keyType + credentialBundlePath: credentialBundlePath + signerName: signerName secret: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key serviceAccountToken: path: path audience: audience - expirationSeconds: 6 + expirationSeconds: 3 clusterTrustBundle: path: path labelSelector: @@ -236128,7 +244672,7 @@ components: signerName: signerName - downwardAPI: items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -236137,7 +244681,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -236150,26 +244694,33 @@ components: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key + podCertificate: + certificateChainPath: certificateChainPath + keyPath: keyPath + maxExpirationSeconds: 3 + keyType: keyType + credentialBundlePath: credentialBundlePath + signerName: signerName secret: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key serviceAccountToken: path: path audience: audience - expirationSeconds: 6 + expirationSeconds: 3 clusterTrustBundle: path: path labelSelector: @@ -236189,7 +244740,7 @@ components: name: name optional: true signerName: signerName - defaultMode: 5 + defaultMode: 6 cephfs: path: path secretRef: @@ -236244,9 +244795,9 @@ components: readOnly: true fsType: fsType downwardAPI: - defaultMode: 6 + defaultMode: 1 items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -236255,7 +244806,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -236265,7 +244816,7 @@ components: apiVersion: apiVersion fieldPath: fieldPath awsElasticBlockStore: - partition: 9 + partition: 6 volumeID: volumeID readOnly: true fsType: fsType @@ -236275,7 +244826,7 @@ components: iscsi: chapAuthSession: true iscsiInterface: iscsiInterface - lun: 6 + lun: 5 chapAuthDiscovery: true iqn: iqn portals: @@ -236300,14 +244851,14 @@ components: - monitors - monitors configMap: - defaultMode: 6 + defaultMode: 3 name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key storageos: @@ -236347,7 +244898,7 @@ components: volumePath: volumePath fsType: fsType fc: - lun: 2 + lun: 6 targetWWNs: - targetWWNs - targetWWNs @@ -236587,7 +245138,7 @@ components: example: downwardAPI: items: - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -236596,7 +245147,7 @@ components: fieldRef: apiVersion: apiVersion fieldPath: fieldPath - - mode: 1 + - mode: 2 path: path resourceFieldRef: divisor: divisor @@ -236609,26 +245160,33 @@ components: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key + podCertificate: + certificateChainPath: certificateChainPath + keyPath: keyPath + maxExpirationSeconds: 3 + keyType: keyType + credentialBundlePath: credentialBundlePath + signerName: signerName secret: name: name optional: true items: - - mode: 3 + - mode: 6 path: path key: key - - mode: 3 + - mode: 6 path: path key: key serviceAccountToken: path: path audience: audience - expirationSeconds: 6 + expirationSeconds: 3 clusterTrustBundle: path: path labelSelector: @@ -236655,6 +245213,8 @@ components: $ref: '#/components/schemas/v1.ConfigMapProjection' downwardAPI: $ref: '#/components/schemas/v1.DownwardAPIProjection' + podCertificate: + $ref: '#/components/schemas/v1.PodCertificateProjection' secret: $ref: '#/components/schemas/v1.SecretProjection' serviceAccountToken: @@ -242756,8 +251316,6 @@ components: type: string type: array x-kubernetes-list-type: atomic - required: - - podSelector type: object v1.ParentReference: description: ParentReference describes a reference to a parent object. @@ -243767,12 +252325,12 @@ components: scheduling: tolerations: - effect: effect - tolerationSeconds: 9 + tolerationSeconds: 6 value: value key: key operator: operator - effect: effect - tolerationSeconds: 9 + tolerationSeconds: 6 value: value key: key operator: operator @@ -243879,12 +252437,12 @@ components: scheduling: tolerations: - effect: effect - tolerationSeconds: 9 + tolerationSeconds: 6 value: value key: key operator: operator - effect: effect - tolerationSeconds: 9 + tolerationSeconds: 6 value: value key: key operator: operator @@ -243944,12 +252502,12 @@ components: scheduling: tolerations: - effect: effect - tolerationSeconds: 9 + tolerationSeconds: 6 value: value key: key operator: operator - effect: effect - tolerationSeconds: 9 + tolerationSeconds: 6 value: value key: key operator: operator @@ -243988,12 +252546,12 @@ components: example: tolerations: - effect: effect - tolerationSeconds: 9 + tolerationSeconds: 6 value: value key: key operator: operator - effect: effect - tolerationSeconds: 9 + tolerationSeconds: 6 value: value key: key operator: operator @@ -245947,9 +254505,11 @@ components: - name type: object x-kubernetes-map-type: atomic - v1alpha3.AllocatedDeviceStatus: - description: AllocatedDeviceStatus contains the status of an allocated device, - if the driver chooses to report it. This may include driver-specific information. + v1.AllocatedDeviceStatus: + description: |- + AllocatedDeviceStatus contains the status of an allocated device, if the driver chooses to report it. This may include driver-specific information. + + The combination of Driver, Pool, Device, and ShareID must match the corresponding key in Status.Allocation.Devices. example: data: '{}' driver: driver @@ -245960,6 +254520,7 @@ components: - ips - ips pool: pool + shareID: shareID conditions: - reason: reason lastTransitionTime: 2000-01-23T04:56:07.000+00:00 @@ -246004,21 +254565,26 @@ components: Must be a DNS subdomain and should end with a DNS domain owned by the vendor of the driver. type: string networkData: - $ref: '#/components/schemas/v1alpha3.NetworkDeviceData' + $ref: '#/components/schemas/v1.NetworkDeviceData' pool: description: |- This name together with the driver name and the device name field identify which device was allocated (`//`). Must not be longer than 253 characters and may contain one or more DNS sub-domains separated by slashes. type: string + shareID: + description: ShareID uniquely identifies an individual allocation share + of the device. + type: string required: - device - driver - pool type: object - v1alpha3.AllocationResult: + v1.AllocationResult: description: AllocationResult contains attributes of an allocated resource. example: + allocationTimestamp: 2000-01-23T04:56:07.000+00:00 devices: config: - opaque: @@ -246040,34 +254606,50 @@ components: adminAccess: true tolerations: - effect: effect - tolerationSeconds: 1 + tolerationSeconds: 6 value: value key: key operator: operator - effect: effect - tolerationSeconds: 1 + tolerationSeconds: 6 value: value key: key operator: operator driver: driver + bindingFailureConditions: + - bindingFailureConditions + - bindingFailureConditions pool: pool + shareID: shareID + consumedCapacity: {} device: device + bindingConditions: + - bindingConditions + - bindingConditions - request: request adminAccess: true tolerations: - effect: effect - tolerationSeconds: 1 + tolerationSeconds: 6 value: value key: key operator: operator - effect: effect - tolerationSeconds: 1 + tolerationSeconds: 6 value: value key: key operator: operator driver: driver + bindingFailureConditions: + - bindingFailureConditions + - bindingFailureConditions pool: pool + shareID: shareID + consumedCapacity: {} device: device + bindingConditions: + - bindingConditions + - bindingConditions nodeSelector: nodeSelectorTerms: - matchExpressions: @@ -246115,142 +254697,19 @@ components: key: key operator: operator properties: - devices: - $ref: '#/components/schemas/v1alpha3.DeviceAllocationResult' - nodeSelector: - $ref: '#/components/schemas/v1.NodeSelector' - type: object - v1alpha3.BasicDevice: - description: BasicDevice defines one device instance. - example: - nodeName: nodeName - consumesCounters: - - counters: - key: - value: value - counterSet: counterSet - - counters: - key: - value: value - counterSet: counterSet - attributes: - key: - bool: true - string: string - version: version - int: 0 - taints: - - timeAdded: 2000-01-23T04:56:07.000+00:00 - effect: effect - value: value - key: key - - timeAdded: 2000-01-23T04:56:07.000+00:00 - effect: effect - value: value - key: key - allNodes: true - capacity: {} - nodeSelector: - nodeSelectorTerms: - - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchFields: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchFields: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - properties: - allNodes: - description: |- - AllNodes indicates that all nodes have access to the device. - - Must only be set if Spec.PerDeviceNodeSelection is set to true. At most one of NodeName, NodeSelector and AllNodes can be set. - type: boolean - attributes: - additionalProperties: - $ref: '#/components/schemas/v1alpha3.DeviceAttribute' + allocationTimestamp: description: |- - Attributes defines the set of attributes for this device. The name of each attribute must be unique in that set. + AllocationTimestamp stores the time when the resources were allocated. This field is not guaranteed to be set, in which case that time is unknown. - The maximum number of attributes and capacities combined is 32. - type: object - capacity: - additionalProperties: - $ref: '#/components/schemas/resource.Quantity' - description: |- - Capacity defines the set of capacities for this device. The name of each capacity must be unique in that set. - - The maximum number of attributes and capacities combined is 32. - type: object - consumesCounters: - description: |- - ConsumesCounters defines a list of references to sharedCounters and the set of counters that the device will consume from those counter sets. - - There can only be a single entry per counterSet. - - The total number of device counter consumption entries must be <= 32. In addition, the total number in the entire ResourceSlice must be <= 1024 (for example, 64 devices with 16 counters each). - items: - $ref: '#/components/schemas/v1alpha3.DeviceCounterConsumption' - type: array - x-kubernetes-list-type: atomic - nodeName: - description: |- - NodeName identifies the node where the device is available. - - Must only be set if Spec.PerDeviceNodeSelection is set to true. At most one of NodeName, NodeSelector and AllNodes can be set. + This is an alpha field and requires enabling the DRADeviceBindingConditions and DRAResourceClaimDeviceStatus feature gate. + format: date-time type: string + devices: + $ref: '#/components/schemas/v1.DeviceAllocationResult' nodeSelector: $ref: '#/components/schemas/v1.NodeSelector' - taints: - description: |- - If specified, these are the driver-defined taints. - - The maximum number of taints is 4. - - This is an alpha field and requires enabling the DRADeviceTaints feature gate. - items: - $ref: '#/components/schemas/v1alpha3.DeviceTaint' - type: array - x-kubernetes-list-type: atomic type: object - v1alpha3.CELDeviceSelector: + v1.CELDeviceSelector: description: CELDeviceSelector contains a CEL expression for selecting a device. example: expression: expression @@ -246265,6 +254724,8 @@ components: (e.g. device.attributes["dra.example.com"] evaluates to an object with all of the attributes which were prefixed by "dra.example.com". - capacity (map[string]object): the device's capacities, grouped by prefix. + - allowMultipleAllocations (bool): the allowMultipleAllocations property of the device + (v1.34+ with the DRAConsumableCapacity feature enabled). Example: Consider a device with driver="dra.example.com", which exposes two attributes named "model" and "ext.example.com/family" and which exposes one capacity named "modules". This input to this expression would have the following fields: @@ -246290,7 +254751,233 @@ components: required: - expression type: object - v1alpha3.Counter: + v1.CapacityRequestPolicy: + description: |- + CapacityRequestPolicy defines how requests consume device capacity. + + Must not set more than one ValidRequestValues. + example: + default: default + validRange: + min: min + max: max + step: step + validValues: + - null + - null + properties: + default: + description: "Quantity is a fixed-point representation of a number. It provides\ + \ convenient marshaling/unmarshaling in JSON and YAML, in addition to\ + \ String() and AsInt64() accessors.\n\nThe serialization format is:\n\n\ + ``` ::= \n\n\t(Note that \ + \ may be empty, from the \"\" case in .)\n\n \ + \ ::= 0 | 1 | ... | 9 ::= | \ + \ ::= | . | . | .\ + \ ::= \"+\" | \"-\" ::= |\ + \ ::= | \ + \ | ::= Ki | Mi | Gi | Ti | Pi | Ei\n\n\t\ + (International System of units; See: http://physics.nist.gov/cuu/Units/binary.html)\n\ + \n ::= m | \"\" | k | M | G | T | P | E\n\n\t(Note that\ + \ 1024 = 1Ki but 1000 = 1k; I didn't choose the capitalization.)\n\n\ + \ ::= \"e\" | \"E\" ```\n\nNo matter which\ + \ of the three exponent forms is used, no quantity may represent a number\ + \ greater than 2^63-1 in magnitude, nor may it have more than 3 decimal\ + \ places. Numbers larger or more precise will be capped or rounded up.\ + \ (E.g.: 0.1m will rounded up to 1m.) This may be extended in the future\ + \ if we require larger or smaller quantities.\n\nWhen a Quantity is parsed\ + \ from a string, it will remember the type of suffix it had, and will\ + \ use the same type again when it is serialized.\n\nBefore serializing,\ + \ Quantity will be put in \"canonical form\". This means that Exponent/suffix\ + \ will be adjusted up or down (with a corresponding increase or decrease\ + \ in Mantissa) such that:\n\n- No precision is lost - No fractional digits\ + \ will be emitted - The exponent (or suffix) is as large as possible.\n\ + \nThe sign will be omitted unless the number is negative.\n\nExamples:\n\ + \n- 1.5 will be serialized as \"1500m\" - 1.5Gi will be serialized as\ + \ \"1536Mi\"\n\nNote that the quantity will NEVER be internally represented\ + \ by a floating point number. That is the whole point of this exercise.\n\ + \nNon-canonical values will still parse as long as they are well formed,\ + \ but will be re-emitted in their canonical form. (So always use canonical\ + \ form, or don't diff.)\n\nThis format is intended to make it difficult\ + \ to use these numbers without writing some sort of special handling code\ + \ in the hopes that that will cause implementors to also use a fixed point\ + \ implementation." + format: quantity + type: string + validRange: + $ref: '#/components/schemas/v1.CapacityRequestPolicyRange' + validValues: + description: |- + ValidValues defines a set of acceptable quantity values in consuming requests. + + Must not contain more than 10 entries. Must be sorted in ascending order. + + If this field is set, Default must be defined and it must be included in ValidValues list. + + If the requested amount does not match any valid value but smaller than some valid values, the scheduler calculates the smallest valid value that is greater than or equal to the request. That is: min(ceil(requestedValue) ∈ validValues), where requestedValue ≤ max(validValues). + + If the requested amount exceeds all valid values, the request violates the policy, and this device cannot be allocated. + items: + $ref: '#/components/schemas/resource.Quantity' + type: array + x-kubernetes-list-type: atomic + type: object + v1.CapacityRequestPolicyRange: + description: |- + CapacityRequestPolicyRange defines a valid range for consumable capacity values. + + - If the requested amount is less than Min, it is rounded up to the Min value. + - If Step is set and the requested amount is between Min and Max but not aligned with Step, + it will be rounded up to the next value equal to Min + (n * Step). + - If Step is not set, the requested amount is used as-is if it falls within the range Min to Max (if set). + - If the requested or rounded amount exceeds Max (if set), the request does not satisfy the policy, + and the device cannot be allocated. + example: + min: min + max: max + step: step + properties: + max: + description: "Quantity is a fixed-point representation of a number. It provides\ + \ convenient marshaling/unmarshaling in JSON and YAML, in addition to\ + \ String() and AsInt64() accessors.\n\nThe serialization format is:\n\n\ + ``` ::= \n\n\t(Note that \ + \ may be empty, from the \"\" case in .)\n\n \ + \ ::= 0 | 1 | ... | 9 ::= | \ + \ ::= | . | . | .\ + \ ::= \"+\" | \"-\" ::= |\ + \ ::= | \ + \ | ::= Ki | Mi | Gi | Ti | Pi | Ei\n\n\t\ + (International System of units; See: http://physics.nist.gov/cuu/Units/binary.html)\n\ + \n ::= m | \"\" | k | M | G | T | P | E\n\n\t(Note that\ + \ 1024 = 1Ki but 1000 = 1k; I didn't choose the capitalization.)\n\n\ + \ ::= \"e\" | \"E\" ```\n\nNo matter which\ + \ of the three exponent forms is used, no quantity may represent a number\ + \ greater than 2^63-1 in magnitude, nor may it have more than 3 decimal\ + \ places. Numbers larger or more precise will be capped or rounded up.\ + \ (E.g.: 0.1m will rounded up to 1m.) This may be extended in the future\ + \ if we require larger or smaller quantities.\n\nWhen a Quantity is parsed\ + \ from a string, it will remember the type of suffix it had, and will\ + \ use the same type again when it is serialized.\n\nBefore serializing,\ + \ Quantity will be put in \"canonical form\". This means that Exponent/suffix\ + \ will be adjusted up or down (with a corresponding increase or decrease\ + \ in Mantissa) such that:\n\n- No precision is lost - No fractional digits\ + \ will be emitted - The exponent (or suffix) is as large as possible.\n\ + \nThe sign will be omitted unless the number is negative.\n\nExamples:\n\ + \n- 1.5 will be serialized as \"1500m\" - 1.5Gi will be serialized as\ + \ \"1536Mi\"\n\nNote that the quantity will NEVER be internally represented\ + \ by a floating point number. That is the whole point of this exercise.\n\ + \nNon-canonical values will still parse as long as they are well formed,\ + \ but will be re-emitted in their canonical form. (So always use canonical\ + \ form, or don't diff.)\n\nThis format is intended to make it difficult\ + \ to use these numbers without writing some sort of special handling code\ + \ in the hopes that that will cause implementors to also use a fixed point\ + \ implementation." + format: quantity + type: string + min: + description: "Quantity is a fixed-point representation of a number. It provides\ + \ convenient marshaling/unmarshaling in JSON and YAML, in addition to\ + \ String() and AsInt64() accessors.\n\nThe serialization format is:\n\n\ + ``` ::= \n\n\t(Note that \ + \ may be empty, from the \"\" case in .)\n\n \ + \ ::= 0 | 1 | ... | 9 ::= | \ + \ ::= | . | . | .\ + \ ::= \"+\" | \"-\" ::= |\ + \ ::= | \ + \ | ::= Ki | Mi | Gi | Ti | Pi | Ei\n\n\t\ + (International System of units; See: http://physics.nist.gov/cuu/Units/binary.html)\n\ + \n ::= m | \"\" | k | M | G | T | P | E\n\n\t(Note that\ + \ 1024 = 1Ki but 1000 = 1k; I didn't choose the capitalization.)\n\n\ + \ ::= \"e\" | \"E\" ```\n\nNo matter which\ + \ of the three exponent forms is used, no quantity may represent a number\ + \ greater than 2^63-1 in magnitude, nor may it have more than 3 decimal\ + \ places. Numbers larger or more precise will be capped or rounded up.\ + \ (E.g.: 0.1m will rounded up to 1m.) This may be extended in the future\ + \ if we require larger or smaller quantities.\n\nWhen a Quantity is parsed\ + \ from a string, it will remember the type of suffix it had, and will\ + \ use the same type again when it is serialized.\n\nBefore serializing,\ + \ Quantity will be put in \"canonical form\". This means that Exponent/suffix\ + \ will be adjusted up or down (with a corresponding increase or decrease\ + \ in Mantissa) such that:\n\n- No precision is lost - No fractional digits\ + \ will be emitted - The exponent (or suffix) is as large as possible.\n\ + \nThe sign will be omitted unless the number is negative.\n\nExamples:\n\ + \n- 1.5 will be serialized as \"1500m\" - 1.5Gi will be serialized as\ + \ \"1536Mi\"\n\nNote that the quantity will NEVER be internally represented\ + \ by a floating point number. That is the whole point of this exercise.\n\ + \nNon-canonical values will still parse as long as they are well formed,\ + \ but will be re-emitted in their canonical form. (So always use canonical\ + \ form, or don't diff.)\n\nThis format is intended to make it difficult\ + \ to use these numbers without writing some sort of special handling code\ + \ in the hopes that that will cause implementors to also use a fixed point\ + \ implementation." + format: quantity + type: string + step: + description: "Quantity is a fixed-point representation of a number. It provides\ + \ convenient marshaling/unmarshaling in JSON and YAML, in addition to\ + \ String() and AsInt64() accessors.\n\nThe serialization format is:\n\n\ + ``` ::= \n\n\t(Note that \ + \ may be empty, from the \"\" case in .)\n\n \ + \ ::= 0 | 1 | ... | 9 ::= | \ + \ ::= | . | . | .\ + \ ::= \"+\" | \"-\" ::= |\ + \ ::= | \ + \ | ::= Ki | Mi | Gi | Ti | Pi | Ei\n\n\t\ + (International System of units; See: http://physics.nist.gov/cuu/Units/binary.html)\n\ + \n ::= m | \"\" | k | M | G | T | P | E\n\n\t(Note that\ + \ 1024 = 1Ki but 1000 = 1k; I didn't choose the capitalization.)\n\n\ + \ ::= \"e\" | \"E\" ```\n\nNo matter which\ + \ of the three exponent forms is used, no quantity may represent a number\ + \ greater than 2^63-1 in magnitude, nor may it have more than 3 decimal\ + \ places. Numbers larger or more precise will be capped or rounded up.\ + \ (E.g.: 0.1m will rounded up to 1m.) This may be extended in the future\ + \ if we require larger or smaller quantities.\n\nWhen a Quantity is parsed\ + \ from a string, it will remember the type of suffix it had, and will\ + \ use the same type again when it is serialized.\n\nBefore serializing,\ + \ Quantity will be put in \"canonical form\". This means that Exponent/suffix\ + \ will be adjusted up or down (with a corresponding increase or decrease\ + \ in Mantissa) such that:\n\n- No precision is lost - No fractional digits\ + \ will be emitted - The exponent (or suffix) is as large as possible.\n\ + \nThe sign will be omitted unless the number is negative.\n\nExamples:\n\ + \n- 1.5 will be serialized as \"1500m\" - 1.5Gi will be serialized as\ + \ \"1536Mi\"\n\nNote that the quantity will NEVER be internally represented\ + \ by a floating point number. That is the whole point of this exercise.\n\ + \nNon-canonical values will still parse as long as they are well formed,\ + \ but will be re-emitted in their canonical form. (So always use canonical\ + \ form, or don't diff.)\n\nThis format is intended to make it difficult\ + \ to use these numbers without writing some sort of special handling code\ + \ in the hopes that that will cause implementors to also use a fixed point\ + \ implementation." + format: quantity + type: string + required: + - min + type: object + v1.CapacityRequirements: + description: CapacityRequirements defines the capacity requirements for a specific + device request. + example: + requests: {} + properties: + requests: + additionalProperties: + $ref: '#/components/schemas/resource.Quantity' + description: |- + Requests represent individual device resource requests for distinct resources, all of which must be provided by the device. + + This value is used as an additional filtering condition against the available capacity on the device. This is semantically equivalent to a CEL selector with `device.capacity[]..compareTo(quantity()) >= 0`. For example, device.capacity['test-driver.cdi.k8s.io'].counters.compareTo(quantity('2')) >= 0. + + When a requestPolicy is defined, the requested amount is adjusted upward to the nearest valid value based on the policy. If the requested amount cannot be adjusted to a valid value—because it exceeds what the requestPolicy allows— the device is considered ineligible for allocation. + + For any capacity that is not explicitly requested: - If no requestPolicy is set, the default consumed capacity is equal to the full device capacity + (i.e., the whole device is claimed). + - If a requestPolicy is set, the default consumed capacity is determined according to that policy. + + If the device allows multiple allocation, the aggregated amount across all requests must not exceed the capacity value. The consumed capacity, which may be adjusted based on the requestPolicy if defined, is recorded in the resource claim’s status.devices[*].consumedCapacity field. + type: object + type: object + v1.Counter: description: Counter describes a quantity associated with a device. example: value: value @@ -246336,7 +255023,7 @@ components: required: - value type: object - v1alpha3.CounterSet: + v1.CounterSet: description: |- CounterSet defines a named set of counters that are available to be used by devices defined in the ResourceSlice. @@ -246349,113 +255036,217 @@ components: properties: counters: additionalProperties: - $ref: '#/components/schemas/v1alpha3.Counter' + $ref: '#/components/schemas/v1.Counter' description: |- - Counters defines the counters that will be consumed by the device. The name of each counter must be unique in that set and must be a DNS label. - - To ensure this uniqueness, capacities defined by the vendor must be listed without the driver name as domain prefix in their name. All others must be listed with their domain prefix. + Counters defines the set of counters for this CounterSet The name of each counter must be unique in that set and must be a DNS label. - The maximum number of counters is 32. + The maximum number of counters in all sets is 32. type: object name: - description: CounterSet is the name of the set from which the counters defined - will be consumed. + description: Name defines the name of the counter set. It must be a DNS + label. type: string required: - counters - name type: object - v1alpha3.Device: + v1.Device: description: Device represents one individual hardware instance that can be selected based on its attributes. Besides the name, exactly one field must be set. example: - name: name - basic: - nodeName: nodeName - consumesCounters: - - counters: - key: - value: value - counterSet: counterSet - - counters: - key: - value: value - counterSet: counterSet - attributes: + nodeName: nodeName + allowMultipleAllocations: true + consumesCounters: + - counters: key: - bool: true - string: string - version: version - int: 0 - taints: - - timeAdded: 2000-01-23T04:56:07.000+00:00 - effect: effect - value: value - key: key - - timeAdded: 2000-01-23T04:56:07.000+00:00 - effect: effect + value: value + counterSet: counterSet + - counters: + key: + value: value + counterSet: counterSet + bindingFailureConditions: + - bindingFailureConditions + - bindingFailureConditions + name: name + attributes: + key: + bool: true + string: string + version: version + int: 0 + taints: + - timeAdded: 2000-01-23T04:56:07.000+00:00 + effect: effect + value: value + key: key + - timeAdded: 2000-01-23T04:56:07.000+00:00 + effect: effect + value: value + key: key + allNodes: true + bindsToNode: true + bindingConditions: + - bindingConditions + - bindingConditions + capacity: + key: value: value - key: key - allNodes: true - capacity: {} - nodeSelector: - nodeSelectorTerms: - - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchFields: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - - matchExpressions: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator - matchFields: - - values: - - values - - values - key: key - operator: operator - - values: - - values - - values - key: key - operator: operator + requestPolicy: + default: default + validRange: + min: min + max: max + step: step + validValues: + - null + - null + nodeSelector: + nodeSelectorTerms: + - matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchFields: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + - matchExpressions: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator + matchFields: + - values: + - values + - values + key: key + operator: operator + - values: + - values + - values + key: key + operator: operator properties: - basic: - $ref: '#/components/schemas/v1alpha3.BasicDevice' + allNodes: + description: |- + AllNodes indicates that all nodes have access to the device. + + Must only be set if Spec.PerDeviceNodeSelection is set to true. At most one of NodeName, NodeSelector and AllNodes can be set. + type: boolean + allowMultipleAllocations: + description: |- + AllowMultipleAllocations marks whether the device is allowed to be allocated to multiple DeviceRequests. + + If AllowMultipleAllocations is set to true, the device can be allocated more than once, and all of its capacity is consumable, regardless of whether the requestPolicy is defined or not. + type: boolean + attributes: + additionalProperties: + $ref: '#/components/schemas/v1.DeviceAttribute' + description: |- + Attributes defines the set of attributes for this device. The name of each attribute must be unique in that set. + + The maximum number of attributes and capacities combined is 32. + type: object + bindingConditions: + description: |- + BindingConditions defines the conditions for proceeding with binding. All of these conditions must be set in the per-device status conditions with a value of True to proceed with binding the pod to the node while scheduling the pod. + + The maximum number of binding conditions is 4. + + The conditions must be a valid condition type string. + + This is an alpha field and requires enabling the DRADeviceBindingConditions and DRAResourceClaimDeviceStatus feature gates. + items: + type: string + type: array + x-kubernetes-list-type: atomic + bindingFailureConditions: + description: |- + BindingFailureConditions defines the conditions for binding failure. They may be set in the per-device status conditions. If any is set to "True", a binding failure occurred. + + The maximum number of binding failure conditions is 4. + + The conditions must be a valid condition type string. + + This is an alpha field and requires enabling the DRADeviceBindingConditions and DRAResourceClaimDeviceStatus feature gates. + items: + type: string + type: array + x-kubernetes-list-type: atomic + bindsToNode: + description: |- + BindsToNode indicates if the usage of an allocation involving this device has to be limited to exactly the node that was chosen when allocating the claim. If set to true, the scheduler will set the ResourceClaim.Status.Allocation.NodeSelector to match the node where the allocation was made. + + This is an alpha field and requires enabling the DRADeviceBindingConditions and DRAResourceClaimDeviceStatus feature gates. + type: boolean + capacity: + additionalProperties: + $ref: '#/components/schemas/v1.DeviceCapacity' + description: |- + Capacity defines the set of capacities for this device. The name of each capacity must be unique in that set. + + The maximum number of attributes and capacities combined is 32. + type: object + consumesCounters: + description: |- + ConsumesCounters defines a list of references to sharedCounters and the set of counters that the device will consume from those counter sets. + + There can only be a single entry per counterSet. + + The total number of device counter consumption entries must be <= 32. In addition, the total number in the entire ResourceSlice must be <= 1024 (for example, 64 devices with 16 counters each). + items: + $ref: '#/components/schemas/v1.DeviceCounterConsumption' + type: array + x-kubernetes-list-type: atomic name: description: Name is unique identifier among all devices managed by the driver in the pool. It must be a DNS label. type: string + nodeName: + description: |- + NodeName identifies the node where the device is available. + + Must only be set if Spec.PerDeviceNodeSelection is set to true. At most one of NodeName, NodeSelector and AllNodes can be set. + type: string + nodeSelector: + $ref: '#/components/schemas/v1.NodeSelector' + taints: + description: |- + If specified, these are the driver-defined taints. + + The maximum number of taints is 4. + + This is an alpha field and requires enabling the DRADeviceTaints feature gate. + items: + $ref: '#/components/schemas/v1.DeviceTaint' + type: array + x-kubernetes-list-type: atomic required: - name type: object - v1alpha3.DeviceAllocationConfiguration: + v1.DeviceAllocationConfiguration: description: DeviceAllocationConfiguration gets embedded in an AllocationResult. example: opaque: @@ -246467,7 +255258,7 @@ components: source: source properties: opaque: - $ref: '#/components/schemas/v1alpha3.OpaqueDeviceConfiguration' + $ref: '#/components/schemas/v1.OpaqueDeviceConfiguration' requests: description: |- Requests lists the names of requests where the configuration applies. If empty, its applies to all requests. @@ -246485,7 +255276,7 @@ components: required: - source type: object - v1alpha3.DeviceAllocationResult: + v1.DeviceAllocationResult: description: DeviceAllocationResult is the result of allocating devices. example: config: @@ -246508,34 +255299,50 @@ components: adminAccess: true tolerations: - effect: effect - tolerationSeconds: 1 + tolerationSeconds: 6 value: value key: key operator: operator - effect: effect - tolerationSeconds: 1 + tolerationSeconds: 6 value: value key: key operator: operator driver: driver + bindingFailureConditions: + - bindingFailureConditions + - bindingFailureConditions pool: pool + shareID: shareID + consumedCapacity: {} device: device + bindingConditions: + - bindingConditions + - bindingConditions - request: request adminAccess: true tolerations: - effect: effect - tolerationSeconds: 1 + tolerationSeconds: 6 value: value key: key operator: operator - effect: effect - tolerationSeconds: 1 + tolerationSeconds: 6 value: value key: key operator: operator driver: driver + bindingFailureConditions: + - bindingFailureConditions + - bindingFailureConditions pool: pool + shareID: shareID + consumedCapacity: {} device: device + bindingConditions: + - bindingConditions + - bindingConditions properties: config: description: |- @@ -246543,17 +255350,17 @@ components: This includes configuration parameters for drivers which have no allocated devices in the result because it is up to the drivers which configuration parameters they support. They can silently ignore unknown configuration parameters. items: - $ref: '#/components/schemas/v1alpha3.DeviceAllocationConfiguration' + $ref: '#/components/schemas/v1.DeviceAllocationConfiguration' type: array x-kubernetes-list-type: atomic results: description: Results lists all allocated devices. items: - $ref: '#/components/schemas/v1alpha3.DeviceRequestAllocationResult' + $ref: '#/components/schemas/v1.DeviceRequestAllocationResult' type: array x-kubernetes-list-type: atomic type: object - v1alpha3.DeviceAttribute: + v1.DeviceAttribute: description: DeviceAttribute must have exactly one field set. example: bool: true @@ -246576,134 +255383,205 @@ components: spec 2.0.0. Must not be longer than 64 characters. type: string type: object - v1alpha3.DeviceClaim: + v1.DeviceCapacity: + description: DeviceCapacity describes a quantity associated with a device. + example: + value: value + requestPolicy: + default: default + validRange: + min: min + max: max + step: step + validValues: + - null + - null + properties: + requestPolicy: + $ref: '#/components/schemas/v1.CapacityRequestPolicy' + value: + description: "Quantity is a fixed-point representation of a number. It provides\ + \ convenient marshaling/unmarshaling in JSON and YAML, in addition to\ + \ String() and AsInt64() accessors.\n\nThe serialization format is:\n\n\ + ``` ::= \n\n\t(Note that \ + \ may be empty, from the \"\" case in .)\n\n \ + \ ::= 0 | 1 | ... | 9 ::= | \ + \ ::= | . | . | .\ + \ ::= \"+\" | \"-\" ::= |\ + \ ::= | \ + \ | ::= Ki | Mi | Gi | Ti | Pi | Ei\n\n\t\ + (International System of units; See: http://physics.nist.gov/cuu/Units/binary.html)\n\ + \n ::= m | \"\" | k | M | G | T | P | E\n\n\t(Note that\ + \ 1024 = 1Ki but 1000 = 1k; I didn't choose the capitalization.)\n\n\ + \ ::= \"e\" | \"E\" ```\n\nNo matter which\ + \ of the three exponent forms is used, no quantity may represent a number\ + \ greater than 2^63-1 in magnitude, nor may it have more than 3 decimal\ + \ places. Numbers larger or more precise will be capped or rounded up.\ + \ (E.g.: 0.1m will rounded up to 1m.) This may be extended in the future\ + \ if we require larger or smaller quantities.\n\nWhen a Quantity is parsed\ + \ from a string, it will remember the type of suffix it had, and will\ + \ use the same type again when it is serialized.\n\nBefore serializing,\ + \ Quantity will be put in \"canonical form\". This means that Exponent/suffix\ + \ will be adjusted up or down (with a corresponding increase or decrease\ + \ in Mantissa) such that:\n\n- No precision is lost - No fractional digits\ + \ will be emitted - The exponent (or suffix) is as large as possible.\n\ + \nThe sign will be omitted unless the number is negative.\n\nExamples:\n\ + \n- 1.5 will be serialized as \"1500m\" - 1.5Gi will be serialized as\ + \ \"1536Mi\"\n\nNote that the quantity will NEVER be internally represented\ + \ by a floating point number. That is the whole point of this exercise.\n\ + \nNon-canonical values will still parse as long as they are well formed,\ + \ but will be re-emitted in their canonical form. (So always use canonical\ + \ form, or don't diff.)\n\nThis format is intended to make it difficult\ + \ to use these numbers without writing some sort of special handling code\ + \ in the hopes that that will cause implementors to also use a fixed point\ + \ implementation." + format: quantity + type: string + required: + - value + type: object + v1.DeviceClaim: description: DeviceClaim defines how to request devices with a ResourceClaim. example: requests: - - allocationMode: allocationMode - deviceClassName: deviceClassName - adminAccess: true - tolerations: - - effect: effect - tolerationSeconds: 1 - value: value - key: key - operator: operator - - effect: effect - tolerationSeconds: 1 - value: value - key: key - operator: operator - firstAvailable: + - firstAvailable: - allocationMode: allocationMode deviceClassName: deviceClassName tolerations: - effect: effect - tolerationSeconds: 1 + tolerationSeconds: 6 value: value key: key operator: operator - effect: effect - tolerationSeconds: 1 + tolerationSeconds: 6 value: value key: key operator: operator - count: 6 + count: 1 name: name selectors: - cel: expression: expression - cel: expression: expression + capacity: + requests: {} - allocationMode: allocationMode deviceClassName: deviceClassName tolerations: - effect: effect - tolerationSeconds: 1 + tolerationSeconds: 6 value: value key: key operator: operator - effect: effect - tolerationSeconds: 1 + tolerationSeconds: 6 value: value key: key operator: operator - count: 6 + count: 1 name: name selectors: - cel: expression: expression - cel: expression: expression - count: 0 + capacity: + requests: {} name: name - selectors: - - cel: - expression: expression - - cel: - expression: expression - - allocationMode: allocationMode - deviceClassName: deviceClassName - adminAccess: true - tolerations: - - effect: effect - tolerationSeconds: 1 - value: value - key: key - operator: operator - - effect: effect - tolerationSeconds: 1 - value: value - key: key - operator: operator - firstAvailable: + exactly: + allocationMode: allocationMode + deviceClassName: deviceClassName + adminAccess: true + tolerations: + - effect: effect + tolerationSeconds: 6 + value: value + key: key + operator: operator + - effect: effect + tolerationSeconds: 6 + value: value + key: key + operator: operator + count: 0 + selectors: + - cel: + expression: expression + - cel: + expression: expression + capacity: + requests: {} + - firstAvailable: - allocationMode: allocationMode deviceClassName: deviceClassName tolerations: - effect: effect - tolerationSeconds: 1 + tolerationSeconds: 6 value: value key: key operator: operator - effect: effect - tolerationSeconds: 1 + tolerationSeconds: 6 value: value key: key operator: operator - count: 6 + count: 1 name: name selectors: - cel: expression: expression - cel: expression: expression + capacity: + requests: {} - allocationMode: allocationMode deviceClassName: deviceClassName tolerations: - effect: effect - tolerationSeconds: 1 + tolerationSeconds: 6 value: value key: key operator: operator - effect: effect - tolerationSeconds: 1 + tolerationSeconds: 6 value: value key: key operator: operator - count: 6 + count: 1 name: name selectors: - cel: expression: expression - cel: expression: expression - count: 0 + capacity: + requests: {} name: name - selectors: - - cel: - expression: expression - - cel: - expression: expression + exactly: + allocationMode: allocationMode + deviceClassName: deviceClassName + adminAccess: true + tolerations: + - effect: effect + tolerationSeconds: 6 + value: value + key: key + operator: operator + - effect: effect + tolerationSeconds: 6 + value: value + key: key + operator: operator + count: 0 + selectors: + - cel: + expression: expression + - cel: + expression: expression + capacity: + requests: {} config: - opaque: driver: driver @@ -246718,11 +255596,13 @@ components: - requests - requests constraints: - - matchAttribute: matchAttribute + - distinctAttribute: distinctAttribute + matchAttribute: matchAttribute requests: - requests - requests - - matchAttribute: matchAttribute + - distinctAttribute: distinctAttribute + matchAttribute: matchAttribute requests: - requests - requests @@ -246732,25 +255612,25 @@ components: which could satisfy requests in this claim. It is ignored while allocating the claim. items: - $ref: '#/components/schemas/v1alpha3.DeviceClaimConfiguration' + $ref: '#/components/schemas/v1.DeviceClaimConfiguration' type: array x-kubernetes-list-type: atomic constraints: description: These constraints must be satisfied by the set of devices that get allocated for the claim. items: - $ref: '#/components/schemas/v1alpha3.DeviceConstraint' + $ref: '#/components/schemas/v1.DeviceConstraint' type: array x-kubernetes-list-type: atomic requests: description: Requests represent individual requests for distinct devices which must all be satisfied. If empty, nothing needs to be allocated. items: - $ref: '#/components/schemas/v1alpha3.DeviceRequest' + $ref: '#/components/schemas/v1.DeviceRequest' type: array x-kubernetes-list-type: atomic type: object - v1alpha3.DeviceClaimConfiguration: + v1.DeviceClaimConfiguration: description: DeviceClaimConfiguration is used for configuration parameters in DeviceClaim. example: @@ -246762,7 +255642,7 @@ components: - requests properties: opaque: - $ref: '#/components/schemas/v1alpha3.OpaqueDeviceConfiguration' + $ref: '#/components/schemas/v1.OpaqueDeviceConfiguration' requests: description: |- Requests lists the names of requests where the configuration applies. If empty, it applies to all requests. @@ -246773,7 +255653,7 @@ components: type: array x-kubernetes-list-type: atomic type: object - v1alpha3.DeviceClass: + v1.DeviceClass: description: |- DeviceClass is a vendor- or admin-provided resource that contains device configuration and selectors. It can be referenced in the device requests of a claim to apply these presets. Cluster scoped. @@ -246828,6 +255708,7 @@ components: apiVersion: apiVersion kind: kind spec: + extendedResourceName: extendedResourceName selectors: - cel: expression: expression @@ -246854,17 +255735,17 @@ components: metadata: $ref: '#/components/schemas/v1.ObjectMeta' spec: - $ref: '#/components/schemas/v1alpha3.DeviceClassSpec' + $ref: '#/components/schemas/v1.DeviceClassSpec' required: - spec type: object x-kubernetes-group-version-kind: - group: resource.k8s.io kind: DeviceClass - version: v1alpha3 + version: v1 x-implements: - io.kubernetes.client.common.KubernetesObject - v1alpha3.DeviceClassConfiguration: + v1.DeviceClassConfiguration: description: DeviceClassConfiguration is used in DeviceClass. example: opaque: @@ -246872,9 +255753,9 @@ components: parameters: '{}' properties: opaque: - $ref: '#/components/schemas/v1alpha3.OpaqueDeviceConfiguration' + $ref: '#/components/schemas/v1.OpaqueDeviceConfiguration' type: object - v1alpha3.DeviceClassList: + v1.DeviceClassList: description: DeviceClassList is a collection of classes. example: metadata: @@ -246934,6 +255815,7 @@ components: apiVersion: apiVersion kind: kind spec: + extendedResourceName: extendedResourceName selectors: - cel: expression: expression @@ -246995,6 +255877,7 @@ components: apiVersion: apiVersion kind: kind spec: + extendedResourceName: extendedResourceName selectors: - cel: expression: expression @@ -247016,7 +255899,7 @@ components: items: description: Items is the list of resource classes. items: - $ref: '#/components/schemas/v1alpha3.DeviceClass' + $ref: '#/components/schemas/v1.DeviceClass' type: array kind: description: 'Kind is a string value representing the REST resource this @@ -247031,13 +255914,14 @@ components: x-kubernetes-group-version-kind: - group: resource.k8s.io kind: DeviceClassList - version: v1alpha3 + version: v1 x-implements: - io.kubernetes.client.common.KubernetesListObject - v1alpha3.DeviceClassSpec: + v1.DeviceClassSpec: description: DeviceClassSpec is used in a [DeviceClass] to define what can be allocated and how to configure it. example: + extendedResourceName: extendedResourceName selectors: - cel: expression: expression @@ -247057,25 +255941,42 @@ components: They are passed to the driver, but are not considered while allocating the claim. items: - $ref: '#/components/schemas/v1alpha3.DeviceClassConfiguration' + $ref: '#/components/schemas/v1.DeviceClassConfiguration' type: array x-kubernetes-list-type: atomic + extendedResourceName: + description: |- + ExtendedResourceName is the extended resource name for the devices of this class. The devices of this class can be used to satisfy a pod's extended resource requests. It has the same format as the name of a pod's extended resource. It should be unique among all the device classes in a cluster. If two device classes have the same name, then the class created later is picked to satisfy a pod's extended resource requests. If two classes are created at the same time, then the name of the class lexicographically sorted first is picked. + + This is an alpha field. + type: string selectors: description: Each selector must be satisfied by a device which is claimed via this class. items: - $ref: '#/components/schemas/v1alpha3.DeviceSelector' + $ref: '#/components/schemas/v1.DeviceSelector' type: array x-kubernetes-list-type: atomic type: object - v1alpha3.DeviceConstraint: + v1.DeviceConstraint: description: DeviceConstraint must have exactly one field set besides Requests. example: + distinctAttribute: distinctAttribute matchAttribute: matchAttribute requests: - requests - requests properties: + distinctAttribute: + description: |- + DistinctAttribute requires that all devices in question have this attribute and that its type and value are unique across those devices. + + This acts as the inverse of MatchAttribute. + + This constraint is used to avoid allocating multiple requests to the same device by ensuring attribute-level differentiation. + + This is useful for scenarios where resource requests must be fulfilled by separate physical devices. For example, a container requests two network interfaces that must be allocated from two different physical NICs. + type: string matchAttribute: description: |- MatchAttribute requires that all devices in question have this attribute and that its type and value are the same across those devices. @@ -247094,7 +255995,7 @@ components: type: array x-kubernetes-list-type: atomic type: object - v1alpha3.DeviceCounterConsumption: + v1.DeviceCounterConsumption: description: DeviceCounterConsumption defines a set of counters that a device will consume from a CounterSet. example: @@ -247104,14 +256005,14 @@ components: counterSet: counterSet properties: counterSet: - description: CounterSet defines the set from which the counters defined + description: CounterSet is the name of the set from which the counters defined will be consumed. type: string counters: additionalProperties: - $ref: '#/components/schemas/v1alpha3.Counter' + $ref: '#/components/schemas/v1.Counter' description: |- - Counters defines the Counter that will be consumed by the device. + Counters defines the counters that will be consumed by the device. The maximum number counters in a device is 32. In addition, the maximum number of all counters in all devices is 1024 (for example, 64 devices with 16 counters each). type: object @@ -247119,163 +256020,105 @@ components: - counterSet - counters type: object - v1alpha3.DeviceRequest: + v1.DeviceRequest: description: DeviceRequest is a request for devices required for a claim. This is typically a request for a single resource like a device, but can also ask - for several identical devices. + for several identical devices. With FirstAvailable it is also possible to + provide a prioritized list of requests. example: - allocationMode: allocationMode - deviceClassName: deviceClassName - adminAccess: true - tolerations: - - effect: effect - tolerationSeconds: 1 - value: value - key: key - operator: operator - - effect: effect - tolerationSeconds: 1 - value: value - key: key - operator: operator firstAvailable: - allocationMode: allocationMode deviceClassName: deviceClassName tolerations: - effect: effect - tolerationSeconds: 1 + tolerationSeconds: 6 value: value key: key operator: operator - effect: effect - tolerationSeconds: 1 + tolerationSeconds: 6 value: value key: key operator: operator - count: 6 + count: 1 name: name selectors: - cel: expression: expression - cel: expression: expression + capacity: + requests: {} - allocationMode: allocationMode deviceClassName: deviceClassName tolerations: - effect: effect - tolerationSeconds: 1 + tolerationSeconds: 6 value: value key: key operator: operator - effect: effect - tolerationSeconds: 1 + tolerationSeconds: 6 value: value key: key operator: operator - count: 6 + count: 1 name: name selectors: - cel: expression: expression - cel: expression: expression - count: 0 + capacity: + requests: {} name: name - selectors: - - cel: - expression: expression - - cel: - expression: expression + exactly: + allocationMode: allocationMode + deviceClassName: deviceClassName + adminAccess: true + tolerations: + - effect: effect + tolerationSeconds: 6 + value: value + key: key + operator: operator + - effect: effect + tolerationSeconds: 6 + value: value + key: key + operator: operator + count: 0 + selectors: + - cel: + expression: expression + - cel: + expression: expression + capacity: + requests: {} properties: - adminAccess: - description: |- - AdminAccess indicates that this is a claim for administrative access to the device(s). Claims with AdminAccess are expected to be used for monitoring or other management services for a device. They ignore all ordinary claims to the device with respect to access modes and any resource allocations. - - This field can only be set when deviceClassName is set and no subrequests are specified in the firstAvailable list. - - This is an alpha field and requires enabling the DRAAdminAccess feature gate. Admin access is disabled if this field is unset or set to false, otherwise it is enabled. - type: boolean - allocationMode: - description: |- - AllocationMode and its related fields define how devices are allocated to satisfy this request. Supported values are: - - - ExactCount: This request is for a specific number of devices. - This is the default. The exact number is provided in the - count field. - - - All: This request is for all of the matching devices in a pool. - At least one device must exist on the node for the allocation to succeed. - Allocation will fail if some devices are already allocated, - unless adminAccess is requested. - - If AllocationMode is not specified, the default mode is ExactCount. If the mode is ExactCount and count is not specified, the default count is one. Any other requests must specify this field. - - This field can only be set when deviceClassName is set and no subrequests are specified in the firstAvailable list. - - More modes may get added in the future. Clients must refuse to handle requests with unknown modes. - type: string - count: - description: |- - Count is used only when the count mode is "ExactCount". Must be greater than zero. If AllocationMode is ExactCount and this field is not specified, the default is one. - - This field can only be set when deviceClassName is set and no subrequests are specified in the firstAvailable list. - format: int64 - type: integer - deviceClassName: - description: |- - DeviceClassName references a specific DeviceClass, which can define additional configuration and selectors to be inherited by this request. - - A class is required if no subrequests are specified in the firstAvailable list and no class can be set if subrequests are specified in the firstAvailable list. Which classes are available depends on the cluster. - - Administrators may use this to restrict which devices may get requested by only installing classes with selectors for permitted devices. If users are free to request anything without restrictions, then administrators can create an empty DeviceClass for users to reference. - type: string + exactly: + $ref: '#/components/schemas/v1.ExactDeviceRequest' firstAvailable: description: |- - FirstAvailable contains subrequests, of which exactly one will be satisfied by the scheduler to satisfy this request. It tries to satisfy them in the order in which they are listed here. So if there are two entries in the list, the scheduler will only check the second one if it determines that the first one cannot be used. - - This field may only be set in the entries of DeviceClaim.Requests. + FirstAvailable contains subrequests, of which exactly one will be selected by the scheduler. It tries to satisfy them in the order in which they are listed here. So if there are two entries in the list, the scheduler will only check the second one if it determines that the first one can not be used. DRA does not yet implement scoring, so the scheduler will select the first set of devices that satisfies all the requests in the claim. And if the requirements can be satisfied on more than one node, other scheduling features will determine which node is chosen. This means that the set of devices allocated to a claim might not be the optimal set available to the cluster. Scoring will be implemented later. items: - $ref: '#/components/schemas/v1alpha3.DeviceSubRequest' + $ref: '#/components/schemas/v1.DeviceSubRequest' type: array x-kubernetes-list-type: atomic name: description: |- Name can be used to reference this request in a pod.spec.containers[].resources.claims entry and in a constraint of the claim. + References using the name in the DeviceRequest will uniquely identify a request when the Exactly field is set. When the FirstAvailable field is set, a reference to the name of the DeviceRequest will match whatever subrequest is chosen by the scheduler. + Must be a DNS label. type: string - selectors: - description: |- - Selectors define criteria which must be satisfied by a specific device in order for that device to be considered for this request. All selectors must be satisfied for a device to be considered. - - This field can only be set when deviceClassName is set and no subrequests are specified in the firstAvailable list. - items: - $ref: '#/components/schemas/v1alpha3.DeviceSelector' - type: array - x-kubernetes-list-type: atomic - tolerations: - description: |- - If specified, the request's tolerations. - - Tolerations for NoSchedule are required to allocate a device which has a taint with that effect. The same applies to NoExecute. - - In addition, should any of the allocated devices get tainted with NoExecute after allocation and that effect is not tolerated, then all pods consuming the ResourceClaim get deleted to evict them. The scheduler will not let new pods reserve the claim while it has these tainted devices. Once all pods are evicted, the claim will get deallocated. - - The maximum number of tolerations is 16. - - This field can only be set when deviceClassName is set and no subrequests are specified in the firstAvailable list. - - This is an alpha field and requires enabling the DRADeviceTaints feature gate. - items: - $ref: '#/components/schemas/v1alpha3.DeviceToleration' - type: array - x-kubernetes-list-type: atomic required: - name type: object - v1alpha3.DeviceRequestAllocationResult: + v1.DeviceRequestAllocationResult: description: DeviceRequestAllocationResult contains the allocation result for one request. example: @@ -247283,18 +256126,26 @@ components: adminAccess: true tolerations: - effect: effect - tolerationSeconds: 1 + tolerationSeconds: 6 value: value key: key operator: operator - effect: effect - tolerationSeconds: 1 + tolerationSeconds: 6 value: value key: key operator: operator driver: driver + bindingFailureConditions: + - bindingFailureConditions + - bindingFailureConditions pool: pool + shareID: shareID + consumedCapacity: {} device: device + bindingConditions: + - bindingConditions + - bindingConditions properties: adminAccess: description: |- @@ -247302,6 +256153,34 @@ components: This is an alpha field and requires enabling the DRAAdminAccess feature gate. Admin access is disabled if this field is unset or set to false, otherwise it is enabled. type: boolean + bindingConditions: + description: |- + BindingConditions contains a copy of the BindingConditions from the corresponding ResourceSlice at the time of allocation. + + This is an alpha field and requires enabling the DRADeviceBindingConditions and DRAResourceClaimDeviceStatus feature gates. + items: + type: string + type: array + x-kubernetes-list-type: atomic + bindingFailureConditions: + description: |- + BindingFailureConditions contains a copy of the BindingFailureConditions from the corresponding ResourceSlice at the time of allocation. + + This is an alpha field and requires enabling the DRADeviceBindingConditions and DRAResourceClaimDeviceStatus feature gates. + items: + type: string + type: array + x-kubernetes-list-type: atomic + consumedCapacity: + additionalProperties: + $ref: '#/components/schemas/resource.Quantity' + description: |- + ConsumedCapacity tracks the amount of capacity consumed per device as part of the claim request. The consumed amount may differ from the requested amount: it is rounded up to the nearest valid value based on the device’s requestPolicy if applicable (i.e., may not be less than the requested amount). + + The total consumed capacity for each device must not exceed the DeviceCapacity's Value. + + This field is populated only for devices that allow multiple allocations. All capacity entries are included, even if the consumed amount is zero. + type: object device: description: Device references one device instance via its name in the driver's resource pool. It must be a DNS label. @@ -247324,6 +256203,12 @@ components: Multiple devices may have been allocated per request. type: string + shareID: + description: ShareID uniquely identifies an individual allocation share + of the device, used when the device supports multiple simultaneous allocations. + It serves as an additional map key to differentiate concurrent shares + of the same device. + type: string tolerations: description: |- A copy of all tolerations specified in the request at the time when the device got allocated. @@ -247332,7 +256217,7 @@ components: This is an alpha field and requires enabling the DRADeviceTaints feature gate. items: - $ref: '#/components/schemas/v1alpha3.DeviceToleration' + $ref: '#/components/schemas/v1.DeviceToleration' type: array x-kubernetes-list-type: atomic required: @@ -247341,58 +256226,62 @@ components: - pool - request type: object - v1alpha3.DeviceSelector: + v1.DeviceSelector: description: DeviceSelector must have exactly one field set. example: cel: expression: expression properties: cel: - $ref: '#/components/schemas/v1alpha3.CELDeviceSelector' + $ref: '#/components/schemas/v1.CELDeviceSelector' type: object - v1alpha3.DeviceSubRequest: + v1.DeviceSubRequest: description: |- DeviceSubRequest describes a request for device provided in the claim.spec.devices.requests[].firstAvailable array. Each is typically a request for a single resource like a device, but can also ask for several identical devices. - DeviceSubRequest is similar to Request, but doesn't expose the AdminAccess or FirstAvailable fields, as those can only be set on the top-level request. AdminAccess is not supported for requests with a prioritized list, and recursive FirstAvailable fields are not supported. + DeviceSubRequest is similar to ExactDeviceRequest, but doesn't expose the AdminAccess field as that one is only supported when requesting a specific device. example: allocationMode: allocationMode deviceClassName: deviceClassName tolerations: - effect: effect - tolerationSeconds: 1 + tolerationSeconds: 6 value: value key: key operator: operator - effect: effect - tolerationSeconds: 1 + tolerationSeconds: 6 value: value key: key operator: operator - count: 6 + count: 1 name: name selectors: - cel: expression: expression - cel: expression: expression + capacity: + requests: {} properties: allocationMode: description: |- - AllocationMode and its related fields define how devices are allocated to satisfy this request. Supported values are: + AllocationMode and its related fields define how devices are allocated to satisfy this subrequest. Supported values are: - ExactCount: This request is for a specific number of devices. This is the default. The exact number is provided in the count field. - - All: This request is for all of the matching devices in a pool. + - All: This subrequest is for all of the matching devices in a pool. Allocation will fail if some devices are already allocated, unless adminAccess is requested. - If AllocationMode is not specified, the default mode is ExactCount. If the mode is ExactCount and count is not specified, the default count is one. Any other requests must specify this field. + If AllocationMode is not specified, the default mode is ExactCount. If the mode is ExactCount and count is not specified, the default count is one. Any other subrequests must specify this field. More modes may get added in the future. Clients must refuse to handle requests with unknown modes. type: string + capacity: + $ref: '#/components/schemas/v1.CapacityRequirements' count: description: Count is used only when the count mode is "ExactCount". Must be greater than zero. If AllocationMode is ExactCount and this field is @@ -247415,10 +256304,10 @@ components: type: string selectors: description: Selectors define criteria which must be satisfied by a specific - device in order for that device to be considered for this request. All - selectors must be satisfied for a device to be considered. + device in order for that device to be considered for this subrequest. + All selectors must be satisfied for a device to be considered. items: - $ref: '#/components/schemas/v1alpha3.DeviceSelector' + $ref: '#/components/schemas/v1.DeviceSelector' type: array x-kubernetes-list-type: atomic tolerations: @@ -247433,14 +256322,14 @@ components: This is an alpha field and requires enabling the DRADeviceTaints feature gate. items: - $ref: '#/components/schemas/v1alpha3.DeviceToleration' + $ref: '#/components/schemas/v1.DeviceToleration' type: array x-kubernetes-list-type: atomic required: - deviceClassName - name type: object - v1alpha3.DeviceTaint: + v1.DeviceTaint: description: The device this taint is attached to has the "effect" on any claim which does not tolerate the taint and, through the claim, to pods using the claim. @@ -247472,441 +256361,204 @@ components: - effect - key type: object - v1alpha3.DeviceTaintRule: - description: DeviceTaintRule adds one taint to all devices which match the selector. - This has the same effect as if the taint was specified directly in the ResourceSlice - by the DRA driver. - example: - metadata: - generation: 6 - finalizers: - - finalizers - - finalizers - resourceVersion: resourceVersion - annotations: - key: annotations - generateName: generateName - deletionTimestamp: 2000-01-23T04:56:07.000+00:00 - labels: - key: labels - ownerReferences: - - uid: uid - controller: true - apiVersion: apiVersion - kind: kind - name: name - blockOwnerDeletion: true - - uid: uid - controller: true - apiVersion: apiVersion - kind: kind - name: name - blockOwnerDeletion: true - selfLink: selfLink - deletionGracePeriodSeconds: 0 - uid: uid - managedFields: - - apiVersion: apiVersion - fieldsV1: '{}' - manager: manager - subresource: subresource - time: 2000-01-23T04:56:07.000+00:00 - operation: operation - fieldsType: fieldsType - - apiVersion: apiVersion - fieldsV1: '{}' - manager: manager - subresource: subresource - time: 2000-01-23T04:56:07.000+00:00 - operation: operation - fieldsType: fieldsType - creationTimestamp: 2000-01-23T04:56:07.000+00:00 - name: name - namespace: namespace - apiVersion: apiVersion - kind: kind - spec: - taint: - timeAdded: 2000-01-23T04:56:07.000+00:00 - effect: effect - value: value - key: key - deviceSelector: - deviceClassName: deviceClassName - driver: driver - pool: pool - selectors: - - cel: - expression: expression - - cel: - expression: expression - device: device - properties: - apiVersion: - description: 'APIVersion defines the versioned schema of this representation - of an object. Servers should convert recognized schemas to the latest - internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources' - type: string - kind: - description: 'Kind is a string value representing the REST resource this - object represents. Servers may infer this from the endpoint the client - submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds' - type: string - metadata: - $ref: '#/components/schemas/v1.ObjectMeta' - spec: - $ref: '#/components/schemas/v1alpha3.DeviceTaintRuleSpec' - required: - - spec - type: object - x-kubernetes-group-version-kind: - - group: resource.k8s.io - kind: DeviceTaintRule - version: v1alpha3 - x-implements: - - io.kubernetes.client.common.KubernetesObject - v1alpha3.DeviceTaintRuleList: - description: DeviceTaintRuleList is a collection of DeviceTaintRules. - example: - metadata: - remainingItemCount: 1 - continue: continue - resourceVersion: resourceVersion - selfLink: selfLink - apiVersion: apiVersion - kind: kind - items: - - metadata: - generation: 6 - finalizers: - - finalizers - - finalizers - resourceVersion: resourceVersion - annotations: - key: annotations - generateName: generateName - deletionTimestamp: 2000-01-23T04:56:07.000+00:00 - labels: - key: labels - ownerReferences: - - uid: uid - controller: true - apiVersion: apiVersion - kind: kind - name: name - blockOwnerDeletion: true - - uid: uid - controller: true - apiVersion: apiVersion - kind: kind - name: name - blockOwnerDeletion: true - selfLink: selfLink - deletionGracePeriodSeconds: 0 - uid: uid - managedFields: - - apiVersion: apiVersion - fieldsV1: '{}' - manager: manager - subresource: subresource - time: 2000-01-23T04:56:07.000+00:00 - operation: operation - fieldsType: fieldsType - - apiVersion: apiVersion - fieldsV1: '{}' - manager: manager - subresource: subresource - time: 2000-01-23T04:56:07.000+00:00 - operation: operation - fieldsType: fieldsType - creationTimestamp: 2000-01-23T04:56:07.000+00:00 - name: name - namespace: namespace - apiVersion: apiVersion - kind: kind - spec: - taint: - timeAdded: 2000-01-23T04:56:07.000+00:00 - effect: effect - value: value - key: key - deviceSelector: - deviceClassName: deviceClassName - driver: driver - pool: pool - selectors: - - cel: - expression: expression - - cel: - expression: expression - device: device - - metadata: - generation: 6 - finalizers: - - finalizers - - finalizers - resourceVersion: resourceVersion - annotations: - key: annotations - generateName: generateName - deletionTimestamp: 2000-01-23T04:56:07.000+00:00 - labels: - key: labels - ownerReferences: - - uid: uid - controller: true - apiVersion: apiVersion - kind: kind - name: name - blockOwnerDeletion: true - - uid: uid - controller: true - apiVersion: apiVersion - kind: kind - name: name - blockOwnerDeletion: true - selfLink: selfLink - deletionGracePeriodSeconds: 0 - uid: uid - managedFields: - - apiVersion: apiVersion - fieldsV1: '{}' - manager: manager - subresource: subresource - time: 2000-01-23T04:56:07.000+00:00 - operation: operation - fieldsType: fieldsType - - apiVersion: apiVersion - fieldsV1: '{}' - manager: manager - subresource: subresource - time: 2000-01-23T04:56:07.000+00:00 - operation: operation - fieldsType: fieldsType - creationTimestamp: 2000-01-23T04:56:07.000+00:00 - name: name - namespace: namespace - apiVersion: apiVersion - kind: kind - spec: - taint: - timeAdded: 2000-01-23T04:56:07.000+00:00 - effect: effect - value: value - key: key - deviceSelector: - deviceClassName: deviceClassName - driver: driver - pool: pool - selectors: - - cel: - expression: expression - - cel: - expression: expression - device: device - properties: - apiVersion: - description: 'APIVersion defines the versioned schema of this representation - of an object. Servers should convert recognized schemas to the latest - internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources' - type: string - items: - description: Items is the list of DeviceTaintRules. - items: - $ref: '#/components/schemas/v1alpha3.DeviceTaintRule' - type: array - kind: - description: 'Kind is a string value representing the REST resource this - object represents. Servers may infer this from the endpoint the client - submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds' - type: string - metadata: - $ref: '#/components/schemas/v1.ListMeta' - required: - - items - type: object - x-kubernetes-group-version-kind: - - group: resource.k8s.io - kind: DeviceTaintRuleList - version: v1alpha3 - x-implements: - - io.kubernetes.client.common.KubernetesListObject - v1alpha3.DeviceTaintRuleSpec: - description: DeviceTaintRuleSpec specifies the selector and one taint. - example: - taint: - timeAdded: 2000-01-23T04:56:07.000+00:00 - effect: effect - value: value - key: key - deviceSelector: - deviceClassName: deviceClassName - driver: driver - pool: pool - selectors: - - cel: - expression: expression - - cel: - expression: expression - device: device - properties: - deviceSelector: - $ref: '#/components/schemas/v1alpha3.DeviceTaintSelector' - taint: - $ref: '#/components/schemas/v1alpha3.DeviceTaint' - required: - - taint - type: object - v1alpha3.DeviceTaintSelector: - description: DeviceTaintSelector defines which device(s) a DeviceTaintRule applies - to. The empty selector matches all devices. Without a selector, no devices - are matched. - example: - deviceClassName: deviceClassName - driver: driver - pool: pool - selectors: - - cel: - expression: expression - - cel: - expression: expression - device: device - properties: - device: - description: |- - If device is set, only devices with that name are selected. This field corresponds to slice.spec.devices[].name. - - Setting also driver and pool may be required to avoid ambiguity, but is not required. - type: string - deviceClassName: - description: If DeviceClassName is set, the selectors defined there must - be satisfied by a device to be selected. This field corresponds to class.metadata.name. - type: string - driver: - description: If driver is set, only devices from that driver are selected. - This fields corresponds to slice.spec.driver. - type: string - pool: - description: |- - If pool is set, only devices in that pool are selected. - - Also setting the driver name may be useful to avoid ambiguity when different drivers use the same pool name, but this is not required because selecting pools from different drivers may also be useful, for example when drivers with node-local devices use the node name as their pool name. - type: string - selectors: - description: Selectors contains the same selection criteria as a ResourceClaim. - Currently, CEL expressions are supported. All of these selectors must - be satisfied. - items: - $ref: '#/components/schemas/v1alpha3.DeviceSelector' - type: array - x-kubernetes-list-type: atomic - type: object - v1alpha3.DeviceToleration: - description: The ResourceClaim this DeviceToleration is attached to tolerates - any taint that matches the triple using the matching operator - . - example: - effect: effect - tolerationSeconds: 1 - value: value - key: key - operator: operator - properties: - effect: - description: Effect indicates the taint effect to match. Empty means match - all taint effects. When specified, allowed values are NoSchedule and NoExecute. - type: string - key: - description: Key is the taint key that the toleration applies to. Empty - means match all taint keys. If the key is empty, operator must be Exists; - this combination means to match all values and all keys. Must be a label - name. - type: string - operator: - description: Operator represents a key's relationship to the value. Valid - operators are Exists and Equal. Defaults to Equal. Exists is equivalent - to wildcard for value, so that a ResourceClaim can tolerate all taints - of a particular category. - type: string - tolerationSeconds: - description: TolerationSeconds represents the period of time the toleration - (which must be of effect NoExecute, otherwise this field is ignored) tolerates - the taint. By default, it is not set, which means tolerate the taint forever - (do not evict). Zero and negative values will be treated as 0 (evict immediately) - by the system. If larger than zero, the time when the pod needs to be - evicted is calculated as