pulumiTypes.go

// Code generated by pulumigen DO NOT EDIT.
// *** WARNING: Do not edit by hand unless you're certain you know what you are doing! ***

package v1beta1

import (
	"context"
	"reflect"

	corev1 "github.com/pulumi/pulumi-kubernetes/sdk/v4/go/kubernetes/core/v1"
	metav1 "github.com/pulumi/pulumi-kubernetes/sdk/v4/go/kubernetes/meta/v1"
	"github.com/pulumi/pulumi-kubernetes/sdk/v4/go/kubernetes/utilities"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

var _ = utilities.GetEnvOrDefault

// AllowedCSIDriver represents a single inline CSI Driver that is allowed to be used.
type AllowedCSIDriver struct {
	// Name is the registered name of the CSI driver
	Name string `pulumi:"name"`
}

// AllowedCSIDriverInput is an input type that accepts AllowedCSIDriverArgs and AllowedCSIDriverOutput values.
// You can construct a concrete instance of `AllowedCSIDriverInput` via:
//
//	AllowedCSIDriverArgs{...}
type AllowedCSIDriverInput interface {
	pulumi.Input

	ToAllowedCSIDriverOutput() AllowedCSIDriverOutput
	ToAllowedCSIDriverOutputWithContext(context.Context) AllowedCSIDriverOutput
}

// AllowedCSIDriver represents a single inline CSI Driver that is allowed to be used.
type AllowedCSIDriverArgs struct {
	// Name is the registered name of the CSI driver
	Name pulumi.StringInput `pulumi:"name"`
}

func (AllowedCSIDriverArgs) ElementType() reflect.Type {
	return reflect.TypeOf((*AllowedCSIDriver)(nil)).Elem()
}

func (i AllowedCSIDriverArgs) ToAllowedCSIDriverOutput() AllowedCSIDriverOutput {
	return i.ToAllowedCSIDriverOutputWithContext(context.Background())
}

func (i AllowedCSIDriverArgs) ToAllowedCSIDriverOutputWithContext(ctx context.Context) AllowedCSIDriverOutput {
	return pulumi.ToOutputWithContext(ctx, i).(AllowedCSIDriverOutput)
}

// AllowedCSIDriverArrayInput is an input type that accepts AllowedCSIDriverArray and AllowedCSIDriverArrayOutput values.
// You can construct a concrete instance of `AllowedCSIDriverArrayInput` via:
//
//	AllowedCSIDriverArray{ AllowedCSIDriverArgs{...} }
type AllowedCSIDriverArrayInput interface {
	pulumi.Input

	ToAllowedCSIDriverArrayOutput() AllowedCSIDriverArrayOutput
	ToAllowedCSIDriverArrayOutputWithContext(context.Context) AllowedCSIDriverArrayOutput
}

type AllowedCSIDriverArray []AllowedCSIDriverInput

func (AllowedCSIDriverArray) ElementType() reflect.Type {
	return reflect.TypeOf((*[]AllowedCSIDriver)(nil)).Elem()
}

func (i AllowedCSIDriverArray) ToAllowedCSIDriverArrayOutput() AllowedCSIDriverArrayOutput {
	return i.ToAllowedCSIDriverArrayOutputWithContext(context.Background())
}

func (i AllowedCSIDriverArray) ToAllowedCSIDriverArrayOutputWithContext(ctx context.Context) AllowedCSIDriverArrayOutput {
	return pulumi.ToOutputWithContext(ctx, i).(AllowedCSIDriverArrayOutput)
}

// AllowedCSIDriver represents a single inline CSI Driver that is allowed to be used.
type AllowedCSIDriverOutput struct{ *pulumi.OutputState }

func (AllowedCSIDriverOutput) ElementType() reflect.Type {
	return reflect.TypeOf((*AllowedCSIDriver)(nil)).Elem()
}

func (o AllowedCSIDriverOutput) ToAllowedCSIDriverOutput() AllowedCSIDriverOutput {
	return o
}

func (o AllowedCSIDriverOutput) ToAllowedCSIDriverOutputWithContext(ctx context.Context) AllowedCSIDriverOutput {
	return o
}

// Name is the registered name of the CSI driver
func (o AllowedCSIDriverOutput) Name() pulumi.StringOutput {
	return o.ApplyT(func(v AllowedCSIDriver) string { return v.Name }).(pulumi.StringOutput)
}

type AllowedCSIDriverArrayOutput struct{ *pulumi.OutputState }

func (AllowedCSIDriverArrayOutput) ElementType() reflect.Type {
	return reflect.TypeOf((*[]AllowedCSIDriver)(nil)).Elem()
}

func (o AllowedCSIDriverArrayOutput) ToAllowedCSIDriverArrayOutput() AllowedCSIDriverArrayOutput {
	return o
}

func (o AllowedCSIDriverArrayOutput) ToAllowedCSIDriverArrayOutputWithContext(ctx context.Context) AllowedCSIDriverArrayOutput {
	return o
}

func (o AllowedCSIDriverArrayOutput) Index(i pulumi.IntInput) AllowedCSIDriverOutput {
	return pulumi.All(o, i).ApplyT(func(vs []interface{}) AllowedCSIDriver {
		return vs[0].([]AllowedCSIDriver)[vs[1].(int)]
	}).(AllowedCSIDriverOutput)
}

// AllowedCSIDriver represents a single inline CSI Driver that is allowed to be used.
type AllowedCSIDriverPatch struct {
	// Name is the registered name of the CSI driver
	Name *string `pulumi:"name"`
}

// AllowedCSIDriverPatchInput is an input type that accepts AllowedCSIDriverPatchArgs and AllowedCSIDriverPatchOutput values.
// You can construct a concrete instance of `AllowedCSIDriverPatchInput` via:
//
//	AllowedCSIDriverPatchArgs{...}
type AllowedCSIDriverPatchInput interface {
	pulumi.Input

	ToAllowedCSIDriverPatchOutput() AllowedCSIDriverPatchOutput
	ToAllowedCSIDriverPatchOutputWithContext(context.Context) AllowedCSIDriverPatchOutput
}

// AllowedCSIDriver represents a single inline CSI Driver that is allowed to be used.
type AllowedCSIDriverPatchArgs struct {
	// Name is the registered name of the CSI driver
	Name pulumi.StringPtrInput `pulumi:"name"`
}

func (AllowedCSIDriverPatchArgs) ElementType() reflect.Type {
	return reflect.TypeOf((*AllowedCSIDriverPatch)(nil)).Elem()
}

func (i AllowedCSIDriverPatchArgs) ToAllowedCSIDriverPatchOutput() AllowedCSIDriverPatchOutput {
	return i.ToAllowedCSIDriverPatchOutputWithContext(context.Background())
}

func (i AllowedCSIDriverPatchArgs) ToAllowedCSIDriverPatchOutputWithContext(ctx context.Context) AllowedCSIDriverPatchOutput {
	return pulumi.ToOutputWithContext(ctx, i).(AllowedCSIDriverPatchOutput)
}

// AllowedCSIDriverPatchArrayInput is an input type that accepts AllowedCSIDriverPatchArray and AllowedCSIDriverPatchArrayOutput values.
// You can construct a concrete instance of `AllowedCSIDriverPatchArrayInput` via:
//
//	AllowedCSIDriverPatchArray{ AllowedCSIDriverPatchArgs{...} }
type AllowedCSIDriverPatchArrayInput interface {
	pulumi.Input

	ToAllowedCSIDriverPatchArrayOutput() AllowedCSIDriverPatchArrayOutput
	ToAllowedCSIDriverPatchArrayOutputWithContext(context.Context) AllowedCSIDriverPatchArrayOutput
}

type AllowedCSIDriverPatchArray []AllowedCSIDriverPatchInput

func (AllowedCSIDriverPatchArray) ElementType() reflect.Type {
	return reflect.TypeOf((*[]AllowedCSIDriverPatch)(nil)).Elem()
}

func (i AllowedCSIDriverPatchArray) ToAllowedCSIDriverPatchArrayOutput() AllowedCSIDriverPatchArrayOutput {
	return i.ToAllowedCSIDriverPatchArrayOutputWithContext(context.Background())
}

func (i AllowedCSIDriverPatchArray) ToAllowedCSIDriverPatchArrayOutputWithContext(ctx context.Context) AllowedCSIDriverPatchArrayOutput {
	return pulumi.ToOutputWithContext(ctx, i).(AllowedCSIDriverPatchArrayOutput)
}

// AllowedCSIDriver represents a single inline CSI Driver that is allowed to be used.
type AllowedCSIDriverPatchOutput struct{ *pulumi.OutputState }

func (AllowedCSIDriverPatchOutput) ElementType() reflect.Type {
	return reflect.TypeOf((*AllowedCSIDriverPatch)(nil)).Elem()
}

func (o AllowedCSIDriverPatchOutput) ToAllowedCSIDriverPatchOutput() AllowedCSIDriverPatchOutput {
	return o
}

func (o AllowedCSIDriverPatchOutput) ToAllowedCSIDriverPatchOutputWithContext(ctx context.Context) AllowedCSIDriverPatchOutput {
	return o
}

// Name is the registered name of the CSI driver
func (o AllowedCSIDriverPatchOutput) Name() pulumi.StringPtrOutput {
	return o.ApplyT(func(v AllowedCSIDriverPatch) *string { return v.Name }).(pulumi.StringPtrOutput)
}

type AllowedCSIDriverPatchArrayOutput struct{ *pulumi.OutputState }

func (AllowedCSIDriverPatchArrayOutput) ElementType() reflect.Type {
	return reflect.TypeOf((*[]AllowedCSIDriverPatch)(nil)).Elem()
}

func (o AllowedCSIDriverPatchArrayOutput) ToAllowedCSIDriverPatchArrayOutput() AllowedCSIDriverPatchArrayOutput {
	return o
}

func (o AllowedCSIDriverPatchArrayOutput) ToAllowedCSIDriverPatchArrayOutputWithContext(ctx context.Context) AllowedCSIDriverPatchArrayOutput {
	return o
}

func (o AllowedCSIDriverPatchArrayOutput) Index(i pulumi.IntInput) AllowedCSIDriverPatchOutput {
	return pulumi.All(o, i).ApplyT(func(vs []interface{}) AllowedCSIDriverPatch {
		return vs[0].([]AllowedCSIDriverPatch)[vs[1].(int)]
	}).(AllowedCSIDriverPatchOutput)
}

// AllowedFlexVolume represents a single Flexvolume that is allowed to be used.
type AllowedFlexVolume struct {
	// driver is the name of the Flexvolume driver.
	Driver string `pulumi:"driver"`
}

// AllowedFlexVolumeInput is an input type that accepts AllowedFlexVolumeArgs and AllowedFlexVolumeOutput values.
// You can construct a concrete instance of `AllowedFlexVolumeInput` via:
//
//	AllowedFlexVolumeArgs{...}
type AllowedFlexVolumeInput interface {
	pulumi.Input

	ToAllowedFlexVolumeOutput() AllowedFlexVolumeOutput
	ToAllowedFlexVolumeOutputWithContext(context.Context) AllowedFlexVolumeOutput
}

// AllowedFlexVolume represents a single Flexvolume that is allowed to be used.
type AllowedFlexVolumeArgs struct {
	// driver is the name of the Flexvolume driver.
	Driver pulumi.StringInput `pulumi:"driver"`
}

func (AllowedFlexVolumeArgs) ElementType() reflect.Type {
	return reflect.TypeOf((*AllowedFlexVolume)(nil)).Elem()
}

func (i AllowedFlexVolumeArgs) ToAllowedFlexVolumeOutput() AllowedFlexVolumeOutput {
	return i.ToAllowedFlexVolumeOutputWithContext(context.Background())
}

func (i AllowedFlexVolumeArgs) ToAllowedFlexVolumeOutputWithContext(ctx context.Context) AllowedFlexVolumeOutput {
	return pulumi.ToOutputWithContext(ctx, i).(AllowedFlexVolumeOutput)
}

// AllowedFlexVolumeArrayInput is an input type that accepts AllowedFlexVolumeArray and AllowedFlexVolumeArrayOutput values.
// You can construct a concrete instance of `AllowedFlexVolumeArrayInput` via:
//
//	AllowedFlexVolumeArray{ AllowedFlexVolumeArgs{...} }
type AllowedFlexVolumeArrayInput interface {
	pulumi.Input

	ToAllowedFlexVolumeArrayOutput() AllowedFlexVolumeArrayOutput
	ToAllowedFlexVolumeArrayOutputWithContext(context.Context) AllowedFlexVolumeArrayOutput
}

type AllowedFlexVolumeArray []AllowedFlexVolumeInput

func (AllowedFlexVolumeArray) ElementType() reflect.Type {
	return reflect.TypeOf((*[]AllowedFlexVolume)(nil)).Elem()
}

func (i AllowedFlexVolumeArray) ToAllowedFlexVolumeArrayOutput() AllowedFlexVolumeArrayOutput {
	return i.ToAllowedFlexVolumeArrayOutputWithContext(context.Background())
}

func (i AllowedFlexVolumeArray) ToAllowedFlexVolumeArrayOutputWithContext(ctx context.Context) AllowedFlexVolumeArrayOutput {
	return pulumi.ToOutputWithContext(ctx, i).(AllowedFlexVolumeArrayOutput)
}

// AllowedFlexVolume represents a single Flexvolume that is allowed to be used.
type AllowedFlexVolumeOutput struct{ *pulumi.OutputState }

func (AllowedFlexVolumeOutput) ElementType() reflect.Type {
	return reflect.TypeOf((*AllowedFlexVolume)(nil)).Elem()
}

func (o AllowedFlexVolumeOutput) ToAllowedFlexVolumeOutput() AllowedFlexVolumeOutput {
	return o
}

func (o AllowedFlexVolumeOutput) ToAllowedFlexVolumeOutputWithContext(ctx context.Context) AllowedFlexVolumeOutput {
	return o
}

// driver is the name of the Flexvolume driver.
func (o AllowedFlexVolumeOutput) Driver() pulumi.StringOutput {
	return o.ApplyT(func(v AllowedFlexVolume) string { return v.Driver }).(pulumi.StringOutput)
}

type AllowedFlexVolumeArrayOutput struct{ *pulumi.OutputState }

func (AllowedFlexVolumeArrayOutput) ElementType() reflect.Type {
	return reflect.TypeOf((*[]AllowedFlexVolume)(nil)).Elem()
}

func (o AllowedFlexVolumeArrayOutput) ToAllowedFlexVolumeArrayOutput() AllowedFlexVolumeArrayOutput {
	return o
}

func (o AllowedFlexVolumeArrayOutput) ToAllowedFlexVolumeArrayOutputWithContext(ctx context.Context) AllowedFlexVolumeArrayOutput {
	return o
}

func (o AllowedFlexVolumeArrayOutput) Index(i pulumi.IntInput) AllowedFlexVolumeOutput {
	return pulumi.All(o, i).ApplyT(func(vs []interface{}) AllowedFlexVolume {
		return vs[0].([]AllowedFlexVolume)[vs[1].(int)]
	}).(AllowedFlexVolumeOutput)
}

// AllowedFlexVolume represents a single Flexvolume that is allowed to be used.
type AllowedFlexVolumePatch struct {
	// driver is the name of the Flexvolume driver.
	Driver *string `pulumi:"driver"`
}

// AllowedFlexVolumePatchInput is an input type that accepts AllowedFlexVolumePatchArgs and AllowedFlexVolumePatchOutput values.
// You can construct a concrete instance of `AllowedFlexVolumePatchInput` via:
//
//	AllowedFlexVolumePatchArgs{...}
type AllowedFlexVolumePatchInput interface {
	pulumi.Input

	ToAllowedFlexVolumePatchOutput() AllowedFlexVolumePatchOutput
	ToAllowedFlexVolumePatchOutputWithContext(context.Context) AllowedFlexVolumePatchOutput
}

// AllowedFlexVolume represents a single Flexvolume that is allowed to be used.
type AllowedFlexVolumePatchArgs struct {
	// driver is the name of the Flexvolume driver.
	Driver pulumi.StringPtrInput `pulumi:"driver"`
}

func (AllowedFlexVolumePatchArgs) ElementType() reflect.Type {
	return reflect.TypeOf((*AllowedFlexVolumePatch)(nil)).Elem()
}

func (i AllowedFlexVolumePatchArgs) ToAllowedFlexVolumePatchOutput() AllowedFlexVolumePatchOutput {
	return i.ToAllowedFlexVolumePatchOutputWithContext(context.Background())
}

func (i AllowedFlexVolumePatchArgs) ToAllowedFlexVolumePatchOutputWithContext(ctx context.Context) AllowedFlexVolumePatchOutput {
	return pulumi.ToOutputWithContext(ctx, i).(AllowedFlexVolumePatchOutput)
}

// AllowedFlexVolumePatchArrayInput is an input type that accepts AllowedFlexVolumePatchArray and AllowedFlexVolumePatchArrayOutput values.
// You can construct a concrete instance of `AllowedFlexVolumePatchArrayInput` via:
//
//	AllowedFlexVolumePatchArray{ AllowedFlexVolumePatchArgs{...} }
type AllowedFlexVolumePatchArrayInput interface {
	pulumi.Input

	ToAllowedFlexVolumePatchArrayOutput() AllowedFlexVolumePatchArrayOutput
	ToAllowedFlexVolumePatchArrayOutputWithContext(context.Context) AllowedFlexVolumePatchArrayOutput
}

type AllowedFlexVolumePatchArray []AllowedFlexVolumePatchInput

func (AllowedFlexVolumePatchArray) ElementType() reflect.Type {
	return reflect.TypeOf((*[]AllowedFlexVolumePatch)(nil)).Elem()
}

func (i AllowedFlexVolumePatchArray) ToAllowedFlexVolumePatchArrayOutput() AllowedFlexVolumePatchArrayOutput {
	return i.ToAllowedFlexVolumePatchArrayOutputWithContext(context.Background())
}

func (i AllowedFlexVolumePatchArray) ToAllowedFlexVolumePatchArrayOutputWithContext(ctx context.Context) AllowedFlexVolumePatchArrayOutput {
	return pulumi.ToOutputWithContext(ctx, i).(AllowedFlexVolumePatchArrayOutput)
}

// AllowedFlexVolume represents a single Flexvolume that is allowed to be used.
type AllowedFlexVolumePatchOutput struct{ *pulumi.OutputState }

func (AllowedFlexVolumePatchOutput) ElementType() reflect.Type {
	return reflect.TypeOf((*AllowedFlexVolumePatch)(nil)).Elem()
}

func (o AllowedFlexVolumePatchOutput) ToAllowedFlexVolumePatchOutput() AllowedFlexVolumePatchOutput {
	return o
}

func (o AllowedFlexVolumePatchOutput) ToAllowedFlexVolumePatchOutputWithContext(ctx context.Context) AllowedFlexVolumePatchOutput {
	return o
}

// driver is the name of the Flexvolume driver.
func (o AllowedFlexVolumePatchOutput) Driver() pulumi.StringPtrOutput {
	return o.ApplyT(func(v AllowedFlexVolumePatch) *string { return v.Driver }).(pulumi.StringPtrOutput)
}

type AllowedFlexVolumePatchArrayOutput struct{ *pulumi.OutputState }

func (AllowedFlexVolumePatchArrayOutput) ElementType() reflect.Type {
	return reflect.TypeOf((*[]AllowedFlexVolumePatch)(nil)).Elem()
}

func (o AllowedFlexVolumePatchArrayOutput) ToAllowedFlexVolumePatchArrayOutput() AllowedFlexVolumePatchArrayOutput {
	return o
}

func (o AllowedFlexVolumePatchArrayOutput) ToAllowedFlexVolumePatchArrayOutputWithContext(ctx context.Context) AllowedFlexVolumePatchArrayOutput {
	return o
}

func (o AllowedFlexVolumePatchArrayOutput) Index(i pulumi.IntInput) AllowedFlexVolumePatchOutput {
	return pulumi.All(o, i).ApplyT(func(vs []interface{}) AllowedFlexVolumePatch {
		return vs[0].([]AllowedFlexVolumePatch)[vs[1].(int)]
	}).(AllowedFlexVolumePatchOutput)
}

// AllowedHostPath defines the host volume conditions that will be enabled by a policy for pods to use. It requires the path prefix to be defined.
type AllowedHostPath struct {
	// pathPrefix is the path prefix that the host volume must match. It does not support `*`. Trailing slashes are trimmed when validating the path prefix with a host path.
	//
	// Examples: `/foo` would allow `/foo`, `/foo/` and `/foo/bar` `/foo` would not allow `/food` or `/etc/foo`
	PathPrefix *string `pulumi:"pathPrefix"`
	// when set to true, will allow host volumes matching the pathPrefix only if all volume mounts are readOnly.
	ReadOnly *bool `pulumi:"readOnly"`
}

// AllowedHostPathInput is an input type that accepts AllowedHostPathArgs and AllowedHostPathOutput values.
// You can construct a concrete instance of `AllowedHostPathInput` via:
//
//	AllowedHostPathArgs{...}
type AllowedHostPathInput interface {
	pulumi.Input

	ToAllowedHostPathOutput() AllowedHostPathOutput
	ToAllowedHostPathOutputWithContext(context.Context) AllowedHostPathOutput
}

// AllowedHostPath defines the host volume conditions that will be enabled by a policy for pods to use. It requires the path prefix to be defined.
type AllowedHostPathArgs struct {
	// pathPrefix is the path prefix that the host volume must match. It does not support `*`. Trailing slashes are trimmed when validating the path prefix with a host path.
	//
	// Examples: `/foo` would allow `/foo`, `/foo/` and `/foo/bar` `/foo` would not allow `/food` or `/etc/foo`
	PathPrefix pulumi.StringPtrInput `pulumi:"pathPrefix"`
	// when set to true, will allow host volumes matching the pathPrefix only if all volume mounts are readOnly.
	ReadOnly pulumi.BoolPtrInput `pulumi:"readOnly"`
}

func (AllowedHostPathArgs) ElementType() reflect.Type {
	return reflect.TypeOf((*AllowedHostPath)(nil)).Elem()
}

func (i AllowedHostPathArgs) ToAllowedHostPathOutput() AllowedHostPathOutput {
	return i.ToAllowedHostPathOutputWithContext(context.Background())
}

func (i AllowedHostPathArgs) ToAllowedHostPathOutputWithContext(ctx context.Context) AllowedHostPathOutput {
	return pulumi.ToOutputWithContext(ctx, i).(AllowedHostPathOutput)
}

// AllowedHostPathArrayInput is an input type that accepts AllowedHostPathArray and AllowedHostPathArrayOutput values.
// You can construct a concrete instance of `AllowedHostPathArrayInput` via:
//
//	AllowedHostPathArray{ AllowedHostPathArgs{...} }
type AllowedHostPathArrayInput interface {
	pulumi.Input

	ToAllowedHostPathArrayOutput() AllowedHostPathArrayOutput
	ToAllowedHostPathArrayOutputWithContext(context.Context) AllowedHostPathArrayOutput
}

type AllowedHostPathArray []AllowedHostPathInput

func (AllowedHostPathArray) ElementType() reflect.Type {
	return reflect.TypeOf((*[]AllowedHostPath)(nil)).Elem()
}

func (i AllowedHostPathArray) ToAllowedHostPathArrayOutput() AllowedHostPathArrayOutput {
	return i.ToAllowedHostPathArrayOutputWithContext(context.Background())
}

func (i AllowedHostPathArray) ToAllowedHostPathArrayOutputWithContext(ctx context.Context) AllowedHostPathArrayOutput {
	return pulumi.ToOutputWithContext(ctx, i).(AllowedHostPathArrayOutput)
}

// AllowedHostPath defines the host volume conditions that will be enabled by a policy for pods to use. It requires the path prefix to be defined.
type AllowedHostPathOutput struct{ *pulumi.OutputState }

func (AllowedHostPathOutput) ElementType() reflect.Type {
	return reflect.TypeOf((*AllowedHostPath)(nil)).Elem()
}

func (o AllowedHostPathOutput) ToAllowedHostPathOutput() AllowedHostPathOutput {
	return o
}

func (o AllowedHostPathOutput) ToAllowedHostPathOutputWithContext(ctx context.Context) AllowedHostPathOutput {
	return o
}

// pathPrefix is the path prefix that the host volume must match. It does not support `*`. Trailing slashes are trimmed when validating the path prefix with a host path.
//
// Examples: `/foo` would allow `/foo`, `/foo/` and `/foo/bar` `/foo` would not allow `/food` or `/etc/foo`
func (o AllowedHostPathOutput) PathPrefix() pulumi.StringPtrOutput {
	return o.ApplyT(func(v AllowedHostPath) *string { return v.PathPrefix }).(pulumi.StringPtrOutput)
}

// when set to true, will allow host volumes matching the pathPrefix only if all volume mounts are readOnly.
func (o AllowedHostPathOutput) ReadOnly() pulumi.BoolPtrOutput {
	return o.ApplyT(func(v AllowedHostPath) *bool { return v.ReadOnly }).(pulumi.BoolPtrOutput)
}

type AllowedHostPathArrayOutput struct{ *pulumi.OutputState }

func (AllowedHostPathArrayOutput) ElementType() reflect.Type {
	return reflect.TypeOf((*[]AllowedHostPath)(nil)).Elem()
}

func (o AllowedHostPathArrayOutput) ToAllowedHostPathArrayOutput() AllowedHostPathArrayOutput {
	return o
}

func (o AllowedHostPathArrayOutput) ToAllowedHostPathArrayOutputWithContext(ctx context.Context) AllowedHostPathArrayOutput {
	return o
}

func (o AllowedHostPathArrayOutput) Index(i pulumi.IntInput) AllowedHostPathOutput {
	return pulumi.All(o, i).ApplyT(func(vs []interface{}) AllowedHostPath {
		return vs[0].([]AllowedHostPath)[vs[1].(int)]
	}).(AllowedHostPathOutput)
}

// AllowedHostPath defines the host volume conditions that will be enabled by a policy for pods to use. It requires the path prefix to be defined.
type AllowedHostPathPatch struct {
	// pathPrefix is the path prefix that the host volume must match. It does not support `*`. Trailing slashes are trimmed when validating the path prefix with a host path.
	//
	// Examples: `/foo` would allow `/foo`, `/foo/` and `/foo/bar` `/foo` would not allow `/food` or `/etc/foo`
	PathPrefix *string `pulumi:"pathPrefix"`
	// when set to true, will allow host volumes matching the pathPrefix only if all volume mounts are readOnly.
	ReadOnly *bool `pulumi:"readOnly"`
}

// AllowedHostPathPatchInput is an input type that accepts AllowedHostPathPatchArgs and AllowedHostPathPatchOutput values.
// You can construct a concrete instance of `AllowedHostPathPatchInput` via:
//
//	AllowedHostPathPatchArgs{...}
type AllowedHostPathPatchInput interface {
	pulumi.Input

	ToAllowedHostPathPatchOutput() AllowedHostPathPatchOutput
	ToAllowedHostPathPatchOutputWithContext(context.Context) AllowedHostPathPatchOutput
}

// AllowedHostPath defines the host volume conditions that will be enabled by a policy for pods to use. It requires the path prefix to be defined.
type AllowedHostPathPatchArgs struct {
	// pathPrefix is the path prefix that the host volume must match. It does not support `*`. Trailing slashes are trimmed when validating the path prefix with a host path.
	//
	// Examples: `/foo` would allow `/foo`, `/foo/` and `/foo/bar` `/foo` would not allow `/food` or `/etc/foo`
	PathPrefix pulumi.StringPtrInput `pulumi:"pathPrefix"`
	// when set to true, will allow host volumes matching the pathPrefix only if all volume mounts are readOnly.
	ReadOnly pulumi.BoolPtrInput `pulumi:"readOnly"`
}

func (AllowedHostPathPatchArgs) ElementType() reflect.Type {
	return reflect.TypeOf((*AllowedHostPathPatch)(nil)).Elem()
}

func (i AllowedHostPathPatchArgs) ToAllowedHostPathPatchOutput() AllowedHostPathPatchOutput {
	return i.ToAllowedHostPathPatchOutputWithContext(context.Background())
}

func (i AllowedHostPathPatchArgs) ToAllowedHostPathPatchOutputWithContext(ctx context.Context) AllowedHostPathPatchOutput {
	return pulumi.ToOutputWithContext(ctx, i).(AllowedHostPathPatchOutput)
}

// AllowedHostPathPatchArrayInput is an input type that accepts AllowedHostPathPatchArray and AllowedHostPathPatchArrayOutput values.
// You can construct a concrete instance of `AllowedHostPathPatchArrayInput` via:
//
//	AllowedHostPathPatchArray{ AllowedHostPathPatchArgs{...} }
type AllowedHostPathPatchArrayInput interface {
	pulumi.Input

	ToAllowedHostPathPatchArrayOutput() AllowedHostPathPatchArrayOutput
	ToAllowedHostPathPatchArrayOutputWithContext(context.Context) AllowedHostPathPatchArrayOutput
}

type AllowedHostPathPatchArray []AllowedHostPathPatchInput

func (AllowedHostPathPatchArray) ElementType() reflect.Type {
	return reflect.TypeOf((*[]AllowedHostPathPatch)(nil)).Elem()
}

func (i AllowedHostPathPatchArray) ToAllowedHostPathPatchArrayOutput() AllowedHostPathPatchArrayOutput {
	return i.ToAllowedHostPathPatchArrayOutputWithContext(context.Background())
}

func (i AllowedHostPathPatchArray) ToAllowedHostPathPatchArrayOutputWithContext(ctx context.Context) AllowedHostPathPatchArrayOutput {
	return pulumi.ToOutputWithContext(ctx, i).(AllowedHostPathPatchArrayOutput)
}

// AllowedHostPath defines the host volume conditions that will be enabled by a policy for pods to use. It requires the path prefix to be defined.
type AllowedHostPathPatchOutput struct{ *pulumi.OutputState }

func (AllowedHostPathPatchOutput) ElementType() reflect.Type {
	return reflect.TypeOf((*AllowedHostPathPatch)(nil)).Elem()
}

func (o AllowedHostPathPatchOutput) ToAllowedHostPathPatchOutput() AllowedHostPathPatchOutput {
	return o
}

func (o AllowedHostPathPatchOutput) ToAllowedHostPathPatchOutputWithContext(ctx context.Context) AllowedHostPathPatchOutput {
	return o
}

// pathPrefix is the path prefix that the host volume must match. It does not support `*`. Trailing slashes are trimmed when validating the path prefix with a host path.
//
// Examples: `/foo` would allow `/foo`, `/foo/` and `/foo/bar` `/foo` would not allow `/food` or `/etc/foo`
func (o AllowedHostPathPatchOutput) PathPrefix() pulumi.StringPtrOutput {
	return o.ApplyT(func(v AllowedHostPathPatch) *string { return v.PathPrefix }).(pulumi.StringPtrOutput)
}

// when set to true, will allow host volumes matching the pathPrefix only if all volume mounts are readOnly.
func (o AllowedHostPathPatchOutput) ReadOnly() pulumi.BoolPtrOutput {
	return o.ApplyT(func(v AllowedHostPathPatch) *bool { return v.ReadOnly }).(pulumi.BoolPtrOutput)
}

type AllowedHostPathPatchArrayOutput struct{ *pulumi.OutputState }

func (AllowedHostPathPatchArrayOutput) ElementType() reflect.Type {
	return reflect.TypeOf((*[]AllowedHostPathPatch)(nil)).Elem()
}

func (o AllowedHostPathPatchArrayOutput) ToAllowedHostPathPatchArrayOutput() AllowedHostPathPatchArrayOutput {
	return o
}

func (o AllowedHostPathPatchArrayOutput) ToAllowedHostPathPatchArrayOutputWithContext(ctx context.Context) AllowedHostPathPatchArrayOutput {
	return o
}

func (o AllowedHostPathPatchArrayOutput) Index(i pulumi.IntInput) AllowedHostPathPatchOutput {
	return pulumi.All(o, i).ApplyT(func(vs []interface{}) AllowedHostPathPatch {
		return vs[0].([]AllowedHostPathPatch)[vs[1].(int)]
	}).(AllowedHostPathPatchOutput)
}

// Eviction evicts a pod from its node subject to certain policies and safety constraints. This is a subresource of Pod.  A request to cause such an eviction is created by POSTing to .../pods/<pod name>/evictions.
type Eviction struct {
	// APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
	ApiVersion *string `pulumi:"apiVersion"`
	// DeleteOptions may be provided
	DeleteOptions *metav1.DeleteOptions `pulumi:"deleteOptions"`
	// Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
	Kind *string `pulumi:"kind"`
	// ObjectMeta describes the pod that is being evicted.
	Metadata *metav1.ObjectMeta `pulumi:"metadata"`
}

// EvictionInput is an input type that accepts EvictionArgs and EvictionOutput values.
// You can construct a concrete instance of `EvictionInput` via:
//
//	EvictionArgs{...}
type EvictionInput interface {
	pulumi.Input

	ToEvictionOutput() EvictionOutput
	ToEvictionOutputWithContext(context.Context) EvictionOutput
}

// Eviction evicts a pod from its node subject to certain policies and safety constraints. This is a subresource of Pod.  A request to cause such an eviction is created by POSTing to .../pods/<pod name>/evictions.
type EvictionArgs struct {
	// APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
	ApiVersion pulumi.StringPtrInput `pulumi:"apiVersion"`
	// DeleteOptions may be provided
	DeleteOptions metav1.DeleteOptionsPtrInput `pulumi:"deleteOptions"`
	// Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
	Kind pulumi.StringPtrInput `pulumi:"kind"`
	// ObjectMeta describes the pod that is being evicted.
	Metadata metav1.ObjectMetaPtrInput `pulumi:"metadata"`
}

func (EvictionArgs) ElementType() reflect.Type {
	return reflect.TypeOf((*Eviction)(nil)).Elem()
}

func (i EvictionArgs) ToEvictionOutput() EvictionOutput {
	return i.ToEvictionOutputWithContext(context.Background())
}

func (i EvictionArgs) ToEvictionOutputWithContext(ctx context.Context) EvictionOutput {
	return pulumi.ToOutputWithContext(ctx, i).(EvictionOutput)
}

// Eviction evicts a pod from its node subject to certain policies and safety constraints. This is a subresource of Pod.  A request to cause such an eviction is created by POSTing to .../pods/<pod name>/evictions.
type EvictionOutput struct{ *pulumi.OutputState }

func (EvictionOutput) ElementType() reflect.Type {
	return reflect.TypeOf((*Eviction)(nil)).Elem()
}

func (o EvictionOutput) ToEvictionOutput() EvictionOutput {
	return o
}

func (o EvictionOutput) ToEvictionOutputWithContext(ctx context.Context) EvictionOutput {
	return o
}

// APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
func (o EvictionOutput) ApiVersion() pulumi.StringPtrOutput {
	return o.ApplyT(func(v Eviction) *string { return v.ApiVersion }).(pulumi.StringPtrOutput)
}

// DeleteOptions may be provided
func (o EvictionOutput) DeleteOptions() metav1.DeleteOptionsPtrOutput {
	return o.ApplyT(func(v Eviction) *metav1.DeleteOptions { return v.DeleteOptions }).(metav1.DeleteOptionsPtrOutput)
}

// Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
func (o EvictionOutput) Kind() pulumi.StringPtrOutput {
	return o.ApplyT(func(v Eviction) *string { return v.Kind }).(pulumi.StringPtrOutput)
}

// ObjectMeta describes the pod that is being evicted.
func (o EvictionOutput) Metadata() metav1.ObjectMetaPtrOutput {
	return o.ApplyT(func(v Eviction) *metav1.ObjectMeta { return v.Metadata }).(metav1.ObjectMetaPtrOutput)
}

// Eviction evicts a pod from its node subject to certain policies and safety constraints. This is a subresource of Pod.  A request to cause such an eviction is created by POSTing to .../pods/<pod name>/evictions.
type EvictionPatch struct {
	// APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
	ApiVersion *string `pulumi:"apiVersion"`
	// DeleteOptions may be provided
	DeleteOptions *metav1.DeleteOptionsPatch `pulumi:"deleteOptions"`
	// Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
	Kind *string `pulumi:"kind"`
	// ObjectMeta describes the pod that is being evicted.
	Metadata *metav1.ObjectMetaPatch `pulumi:"metadata"`
}

// EvictionPatchInput is an input type that accepts EvictionPatchArgs and EvictionPatchOutput values.
// You can construct a concrete instance of `EvictionPatchInput` via:
//
//	EvictionPatchArgs{...}
type EvictionPatchInput interface {
	pulumi.Input

	ToEvictionPatchOutput() EvictionPatchOutput
	ToEvictionPatchOutputWithContext(context.Context) EvictionPatchOutput
}

// Eviction evicts a pod from its node subject to certain policies and safety constraints. This is a subresource of Pod.  A request to cause such an eviction is created by POSTing to .../pods/<pod name>/evictions.
type EvictionPatchArgs struct {
	// APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
	ApiVersion pulumi.StringPtrInput `pulumi:"apiVersion"`
	// DeleteOptions may be provided
	DeleteOptions metav1.DeleteOptionsPatchPtrInput `pulumi:"deleteOptions"`
	// Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
	Kind pulumi.StringPtrInput `pulumi:"kind"`
	// ObjectMeta describes the pod that is being evicted.
	Metadata metav1.ObjectMetaPatchPtrInput `pulumi:"metadata"`
}

func (EvictionPatchArgs) ElementType() reflect.Type {
	return reflect.TypeOf((*EvictionPatch)(nil)).Elem()
}

func (i EvictionPatchArgs) ToEvictionPatchOutput() EvictionPatchOutput {
	return i.ToEvictionPatchOutputWithContext(context.Background())
}

func (i EvictionPatchArgs) ToEvictionPatchOutputWithContext(ctx context.Context) EvictionPatchOutput {
	return pulumi.ToOutputWithContext(ctx, i).(EvictionPatchOutput)
}

// Eviction evicts a pod from its node subject to certain policies and safety constraints. This is a subresource of Pod.  A request to cause such an eviction is created by POSTing to .../pods/<pod name>/evictions.
type EvictionPatchOutput struct{ *pulumi.OutputState }

func (EvictionPatchOutput) ElementType() reflect.Type {
	return reflect.TypeOf((*EvictionPatch)(nil)).Elem()
}

func (o EvictionPatchOutput) ToEvictionPatchOutput() EvictionPatchOutput {
	return o
}

func (o EvictionPatchOutput) ToEvictionPatchOutputWithContext(ctx context.Context) EvictionPatchOutput {
	return o
}

// APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
func (o EvictionPatchOutput) ApiVersion() pulumi.StringPtrOutput {
	return o.ApplyT(func(v EvictionPatch) *string { return v.ApiVersion }).(pulumi.StringPtrOutput)
}

// DeleteOptions may be provided
func (o EvictionPatchOutput) DeleteOptions() metav1.DeleteOptionsPatchPtrOutput {
	return o.ApplyT(func(v EvictionPatch) *metav1.DeleteOptionsPatch { return v.DeleteOptions }).(metav1.DeleteOptionsPatchPtrOutput)
}

// Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
func (o EvictionPatchOutput) Kind() pulumi.StringPtrOutput {
	return o.ApplyT(func(v EvictionPatch) *string { return v.Kind }).(pulumi.StringPtrOutput)
}

// ObjectMeta describes the pod that is being evicted.
func (o EvictionPatchOutput) Metadata() metav1.ObjectMetaPatchPtrOutput {
	return o.ApplyT(func(v EvictionPatch) *metav1.ObjectMetaPatch { return v.Metadata }).(metav1.ObjectMetaPatchPtrOutput)
}

// FSGroupStrategyOptions defines the strategy type and options used to create the strategy.
type FSGroupStrategyOptions struct {
	// ranges are the allowed ranges of fs groups.  If you would like to force a single fs group then supply a single range with the same start and end. Required for MustRunAs.
	Ranges []IDRange `pulumi:"ranges"`
	// rule is the strategy that will dictate what FSGroup is used in the SecurityContext.
	Rule *string `pulumi:"rule"`
}

// FSGroupStrategyOptionsInput is an input type that accepts FSGroupStrategyOptionsArgs and FSGroupStrategyOptionsOutput values.
// You can construct a concrete instance of `FSGroupStrategyOptionsInput` via:
//
//	FSGroupStrategyOptionsArgs{...}
type FSGroupStrategyOptionsInput interface {
	pulumi.Input

	ToFSGroupStrategyOptionsOutput() FSGroupStrategyOptionsOutput
	ToFSGroupStrategyOptionsOutputWithContext(context.Context) FSGroupStrategyOptionsOutput
}

// FSGroupStrategyOptions defines the strategy type and options used to create the strategy.
type FSGroupStrategyOptionsArgs struct {
	// ranges are the allowed ranges of fs groups.  If you would like to force a single fs group then supply a single range with the same start and end. Required for MustRunAs.
	Ranges IDRangeArrayInput `pulumi:"ranges"`
	// rule is the strategy that will dictate what FSGroup is used in the SecurityContext.
	Rule pulumi.StringPtrInput `pulumi:"rule"`
}

func (FSGroupStrategyOptionsArgs) ElementType() reflect.Type {
	return reflect.TypeOf((*FSGroupStrategyOptions)(nil)).Elem()
}

func (i FSGroupStrategyOptionsArgs) ToFSGroupStrategyOptionsOutput() FSGroupStrategyOptionsOutput {
	return i.ToFSGroupStrategyOptionsOutputWithContext(context.Background())
}

func (i FSGroupStrategyOptionsArgs) ToFSGroupStrategyOptionsOutputWithContext(ctx context.Context) FSGroupStrategyOptionsOutput {
	return pulumi.ToOutputWithContext(ctx, i).(FSGroupStrategyOptionsOutput)
}

func (i FSGroupStrategyOptionsArgs) ToFSGroupStrategyOptionsPtrOutput() FSGroupStrategyOptionsPtrOutput {
	return i.ToFSGroupStrategyOptionsPtrOutputWithContext(context.Background())
}

func (i FSGroupStrategyOptionsArgs) ToFSGroupStrategyOptionsPtrOutputWithContext(ctx context.Context) FSGroupStrategyOptionsPtrOutput {
	return pulumi.ToOutputWithContext(ctx, i).(FSGroupStrategyOptionsOutput).ToFSGroupStrategyOptionsPtrOutputWithContext(ctx)
}

// FSGroupStrategyOptionsPtrInput is an input type that accepts FSGroupStrategyOptionsArgs, FSGroupStrategyOptionsPtr and FSGroupStrategyOptionsPtrOutput values.
// You can construct a concrete instance of `FSGroupStrategyOptionsPtrInput` via:
//
//	        FSGroupStrategyOptionsArgs{...}
//
//	or:
//
//	        nil
type FSGroupStrategyOptionsPtrInput interface {
	pulumi.Input

	ToFSGroupStrategyOptionsPtrOutput() FSGroupStrategyOptionsPtrOutput
	ToFSGroupStrategyOptionsPtrOutputWithContext(context.Context) FSGroupStrategyOptionsPtrOutput
}

type fsgroupStrategyOptionsPtrType FSGroupStrategyOptionsArgs

func FSGroupStrategyOptionsPtr(v *FSGroupStrategyOptionsArgs) FSGroupStrategyOptionsPtrInput {
	return (*fsgroupStrategyOptionsPtrType)(v)
}

func (*fsgroupStrategyOptionsPtrType) ElementType() reflect.Type {
	return reflect.TypeOf((**FSGroupStrategyOptions)(nil)).Elem()
}

func (i *fsgroupStrategyOptionsPtrType) ToFSGroupStrategyOptionsPtrOutput() FSGroupStrategyOptionsPtrOutput {
	return i.ToFSGroupStrategyOptionsPtrOutputWithContext(context.Background())
}

func (i *fsgroupStrategyOptionsPtrType) ToFSGroupStrategyOptionsPtrOutputWithContext(ctx context.Context) FSGroupStrategyOptionsPtrOutput {
	return pulumi.ToOutputWithContext(ctx, i).(FSGroupStrategyOptionsPtrOutput)
}

// FSGroupStrategyOptions defines the strategy type and options used to create the strategy.
type FSGroupStrategyOptionsOutput struct{ *pulumi.OutputState }

func (FSGroupStrategyOptionsOutput) ElementType() reflect.Type {
	return reflect.TypeOf((*FSGroupStrategyOptions)(nil)).Elem()
}

func (o FSGroupStrategyOptionsOutput) ToFSGroupStrategyOptionsOutput() FSGroupStrategyOptionsOutput {
	return o
}

func (o FSGroupStrategyOptionsOutput) ToFSGroupStrategyOptionsOutputWithContext(ctx context.Context) FSGroupStrategyOptionsOutput {
	return o
}

func (o FSGroupStrategyOptionsOutput) ToFSGroupStrategyOptionsPtrOutput() FSGroupStrategyOptionsPtrOutput {
	return o.ToFSGroupStrategyOptionsPtrOutputWithContext(context.Background())
}

func (o FSGroupStrategyOptionsOutput) ToFSGroupStrategyOptionsPtrOutputWithContext(ctx context.Context) FSGroupStrategyOptionsPtrOutput {
	return o.ApplyTWithContext(ctx, func(_ context.Context, v FSGroupStrategyOptions) *FSGroupStrategyOptions {
		return &v
	}).(FSGroupStrategyOptionsPtrOutput)
}

// ranges are the allowed ranges of fs groups.  If you would like to force a single fs group then supply a single range with the same start and end. Required for MustRunAs.
func (o FSGroupStrategyOptionsOutput) Ranges() IDRangeArrayOutput {
	return o.ApplyT(func(v FSGroupStrategyOptions) []IDRange { return v.Ranges }).(IDRangeArrayOutput)
}

// rule is the strategy that will dictate what FSGroup is used in the SecurityContext.
func (o FSGroupStrategyOptionsOutput) Rule() pulumi.StringPtrOutput {
	return o.ApplyT(func(v FSGroupStrategyOptions) *string { return v.Rule }).(pulumi.StringPtrOutput)
}

type FSGroupStrategyOptionsPtrOutput struct{ *pulumi.OutputState }

func (FSGroupStrategyOptionsPtrOutput) ElementType() reflect.Type {
	return reflect.TypeOf((**FSGroupStrategyOptions)(nil)).Elem()
}

func (o FSGroupStrategyOptionsPtrOutput) ToFSGroupStrategyOptionsPtrOutput() FSGroupStrategyOptionsPtrOutput {
	return o
}

func (o FSGroupStrategyOptionsPtrOutput) ToFSGroupStrategyOptionsPtrOutputWithContext(ctx context.Context) FSGroupStrategyOptionsPtrOutput {
	return o
}

func (o FSGroupStrategyOptionsPtrOutput) Elem() FSGroupStrategyOptionsOutput {
	return o.ApplyT(func(v *FSGroupStrategyOptions) FSGroupStrategyOptions {
		if v != nil {
			return *v
		}
		var ret FSGroupStrategyOptions
		return ret
	}).(FSGroupStrategyOptionsOutput)
}

// ranges are the allowed ranges of fs groups.  If you would like to force a single fs group then supply a single range with the same start and end. Required for MustRunAs.
func (o FSGroupStrategyOptionsPtrOutput) Ranges() IDRangeArrayOutput {
	return o.ApplyT(func(v *FSGroupStrategyOptions) []IDRange {
		if v == nil {
			return nil
		}
		return v.Ranges
	}).(IDRangeArrayOutput)
}

// rule is the strategy that will dictate what FSGroup is used in the SecurityContext.
func (o FSGroupStrategyOptionsPtrOutput) Rule() pulumi.StringPtrOutput {
	return o.ApplyT(func(v *FSGroupStrategyOptions) *string {
		if v == nil {
			return nil
		}
		return v.Rule
	}).(pulumi.StringPtrOutput)
}

// FSGroupStrategyOptions defines the strategy type and options used to create the strategy.
type FSGroupStrategyOptionsPatch struct {
	// ranges are the allowed ranges of fs groups.  If you would like to force a single fs group then supply a single range with the same start and end. Required for MustRunAs.
	Ranges []IDRangePatch `pulumi:"ranges"`
	// rule is the strategy that will dictate what FSGroup is used in the SecurityContext.
	Rule *string `pulumi:"rule"`
}

// FSGroupStrategyOptionsPatchInput is an input type that accepts FSGroupStrategyOptionsPatchArgs and FSGroupStrategyOptionsPatchOutput values.
// You can construct a concrete instance of `FSGroupStrategyOptionsPatchInput` via:
//
//	FSGroupStrategyOptionsPatchArgs{...}
type FSGroupStrategyOptionsPatchInput interface {
	pulumi.Input

	ToFSGroupStrategyOptionsPatchOutput() FSGroupStrategyOptionsPatchOutput
	ToFSGroupStrategyOptionsPatchOutputWithContext(context.Context) FSGroupStrategyOptionsPatchOutput
}

// FSGroupStrategyOptions defines the strategy type and options used to create the strategy.
type FSGroupStrategyOptionsPatchArgs struct {
	// ranges are the allowed ranges of fs groups.  If you would like to force a single fs group then supply a single range with the same start and end. Required for MustRunAs.
	Ranges IDRangePatchArrayInput `pulumi:"ranges"`
	// rule is the strategy that will dictate what FSGroup is used in the SecurityContext.
	Rule pulumi.StringPtrInput `pulumi:"rule"`
}

func (FSGroupStrategyOptionsPatchArgs) ElementType() reflect.Type {
	return reflect.TypeOf((*FSGroupStrategyOptionsPatch)(nil)).Elem()
}

func (i FSGroupStrategyOptionsPatchArgs) ToFSGroupStrategyOptionsPatchOutput() FSGroupStrategyOptionsPatchOutput {
	return i.ToFSGroupStrategyOptionsPatchOutputWithContext(context.Background())
}

func (i FSGroupStrategyOptionsPatchArgs) ToFSGroupStrategyOptionsPatchOutputWithContext(ctx context.Context) FSGroupStrategyOptionsPatchOutput {
	return pulumi.ToOutputWithContext(ctx, i).(FSGroupStrategyOptionsPatchOutput)
}

func (i FSGroupStrategyOptionsPatchArgs) ToFSGroupStrategyOptionsPatchPtrOutput() FSGroupStrategyOptionsPatchPtrOutput {
	return i.ToFSGroupStrategyOptionsPatchPtrOutputWithContext(context.Background())
}

func (i FSGroupStrategyOptionsPatchArgs) ToFSGroupStrategyOptionsPatchPtrOutputWithContext(ctx context.Context) FSGroupStrategyOptionsPatchPtrOutput {
	return pulumi.ToOutputWithContext(ctx, i).(FSGroupStrategyOptionsPatchOutput).ToFSGroupStrategyOptionsPatchPtrOutputWithContext(ctx)
}

// FSGroupStrategyOptionsPatchPtrInput is an input type that accepts FSGroupStrategyOptionsPatchArgs, FSGroupStrategyOptionsPatchPtr and FSGroupStrategyOptionsPatchPtrOutput values.
// You can construct a concrete instance of `FSGroupStrategyOptionsPatchPtrInput` via:
//
//	        FSGroupStrategyOptionsPatchArgs{...}
//
//	or:
//
//	        nil
type FSGroupStrategyOptionsPatchPtrInput interface {
	pulumi.Input

	ToFSGroupStrategyOptionsPatchPtrOutput() FSGroupStrategyOptionsPatchPtrOutput
	ToFSGroupStrategyOptionsPatchPtrOutputWithContext(context.Context) FSGroupStrategyOptionsPatchPtrOutput
}

type fsgroupStrategyOptionsPatchPtrType FSGroupStrategyOptionsPatchArgs

func FSGroupStrategyOptionsPatchPtr(v *FSGroupStrategyOptionsPatchArgs) FSGroupStrategyOptionsPatchPtrInput {
	return (*fsgroupStrategyOptionsPatchPtrType)(v)
}

func (*fsgroupStrategyOptionsPatchPtrType) ElementType() reflect.Type {
	return reflect.TypeOf((**FSGroupStrategyOptionsPatch)(nil)).Elem()
}

func (i *fsgroupStrategyOptionsPatchPtrType) ToFSGroupStrategyOptionsPatchPtrOutput() FSGroupStrategyOptionsPatchPtrOutput {
	return i.ToFSGroupStrategyOptionsPatchPtrOutputWithContext(context.Background())
}

func (i *fsgroupStrategyOptionsPatchPtrType) ToFSGroupStrategyOptionsPatchPtrOutputWithContext(ctx context.Context) FSGroupStrategyOptionsPatchPtrOutput {
	return pulumi.ToOutputWithContext(ctx, i).(FSGroupStrategyOptionsPatchPtrOutput)
}

// FSGroupStrategyOptions defines the strategy type and options used to create the strategy.
type FSGroupStrategyOptionsPatchOutput struct{ *pulumi.OutputState }

func (FSGroupStrategyOptionsPatchOutput) ElementType() reflect.Type {
	return reflect.TypeOf((*FSGroupStrategyOptionsPatch)(nil)).Elem()
}

func (o FSGroupStrategyOptionsPatchOutput) ToFSGroupStrategyOptionsPatchOutput() FSGroupStrategyOptionsPatchOutput {
	return o
}

func (o FSGroupStrategyOptionsPatchOutput) ToFSGroupStrategyOptionsPatchOutputWithContext(ctx context.Context) FSGroupStrategyOptionsPatchOutput {
	return o
}

func (o FSGroupStrategyOptionsPatchOutput) ToFSGroupStrategyOptionsPatchPtrOutput() FSGroupStrategyOptionsPatchPtrOutput {
	return o.ToFSGroupStrategyOptionsPatchPtrOutputWithContext(context.Background())
}

func (o FSGroupStrategyOptionsPatchOutput) ToFSGroupStrategyOptionsPatchPtrOutputWithContext(ctx context.Context) FSGroupStrategyOptionsPatchPtrOutput {
	return o.ApplyTWithContext(ctx, func(_ context.Context, v FSGroupStrategyOptionsPatch) *FSGroupStrategyOptionsPatch {
		return &v
	}).(FSGroupStrategyOptionsPatchPtrOutput)
}

// ranges are the allowed ranges of fs groups.  If you would like to force a single fs group then supply a single range with the same start and end. Required for MustRunAs.
func (o FSGroupStrategyOptionsPatchOutput) Ranges() IDRangePatchArrayOutput {
	return o.ApplyT(func(v FSGroupStrategyOptionsPatch) []IDRangePatch { return v.Ranges }).(IDRangePatchArrayOutput)
}

// rule is the strategy that will dictate what FSGroup is used in the SecurityContext.
func (o FSGroupStrategyOptionsPatchOutput) Rule() pulumi.StringPtrOutput {
	return o.ApplyT(func(v FSGroupStrategyOptionsPatch) *string { return v.Rule }).(pulumi.StringPtrOutput)
}

type FSGroupStrategyOptionsPatchPtrOutput struct{ *pulumi.OutputState }

func (FSGroupStrategyOptionsPatchPtrOutput) ElementType() reflect.Type {
	return reflect.TypeOf((**FSGroupStrategyOptionsPatch)(nil)).Elem()
}

func (o FSGroupStrategyOptionsPatchPtrOutput) ToFSGroupStrategyOptionsPatchPtrOutput() FSGroupStrategyOptionsPatchPtrOutput {
	return o
}

func (o FSGroupStrategyOptionsPatchPtrOutput) ToFSGroupStrategyOptionsPatchPtrOutputWithContext(ctx context.Context) FSGroupStrategyOptionsPatchPtrOutput {
	return o
}

func (o FSGroupStrategyOptionsPatchPtrOutput) Elem() FSGroupStrategyOptionsPatchOutput {
	return o.ApplyT(func(v *FSGroupStrategyOptionsPatch) FSGroupStrategyOptionsPatch {
		if v != nil {
			return *v
		}
		var ret FSGroupStrategyOptionsPatch
		return ret
	}).(FSGroupStrategyOptionsPatchOutput)
}

// ranges are the allowed ranges of fs groups.  If you would like to force a single fs group then supply a single range with the same start and end. Required for MustRunAs.
func (o FSGroupStrategyOptionsPatchPtrOutput) Ranges() IDRangePatchArrayOutput {
	return o.ApplyT(func(v *FSGroupStrategyOptionsPatch) []IDRangePatch {
		if v == nil {
			return nil
		}
		return v.Ranges
	}).(IDRangePatchArrayOutput)
}

// rule is the strategy that will dictate what FSGroup is used in the SecurityContext.
func (o FSGroupStrategyOptionsPatchPtrOutput) Rule() pulumi.StringPtrOutput {
	return o.ApplyT(func(v *FSGroupStrategyOptionsPatch) *string {
		if v == nil {
			return nil
		}
		return v.Rule
	}).(pulumi.StringPtrOutput)
}

// HostPortRange defines a range of host ports that will be enabled by a policy for pods to use.  It requires both the start and end to be defined.
type HostPortRange struct {
	// max is the end of the range, inclusive.
	Max int `pulumi:"max"`
	// min is the start of the range, inclusive.
	Min int `pulumi:"min"`
}

// HostPortRangeInput is an input type that accepts HostPortRangeArgs and HostPortRangeOutput values.
// You can construct a concrete instance of `HostPortRangeInput` via:
//
//	HostPortRangeArgs{...}
type HostPortRangeInput interface {
	pulumi.Input

	ToHostPortRangeOutput() HostPortRangeOutput
	ToHostPortRangeOutputWithContext(context.Context) HostPortRangeOutput
}

// HostPortRange defines a range of host ports that will be enabled by a policy for pods to use.  It requires both the start and end to be defined.
type HostPortRangeArgs struct {
	// max is the end of the range, inclusive.
	Max pulumi.IntInput `pulumi:"max"`
	// min is the start of the range, inclusive.
	Min pulumi.IntInput `pulumi:"min"`
}

func (HostPortRangeArgs) ElementType() reflect.Type {
	return reflect.TypeOf((*HostPortRange)(nil)).Elem()
}

func (i HostPortRangeArgs) ToHostPortRangeOutput() HostPortRangeOutput {
	return i.ToHostPortRangeOutputWithContext(context.Background())
}

func (i HostPortRangeArgs) ToHostPortRangeOutputWithContext(ctx context.Context) HostPortRangeOutput {
	return pulumi.ToOutputWithContext(ctx, i).(HostPortRangeOutput)
}

// HostPortRangeArrayInput is an input type that accepts HostPortRangeArray and HostPortRangeArrayOutput values.
// You can construct a concrete instance of `HostPortRangeArrayInput` via:
//
//	HostPortRangeArray{ HostPortRangeArgs{...} }
type HostPortRangeArrayInput interface {
	pulumi.Input

	ToHostPortRangeArrayOutput() HostPortRangeArrayOutput
	ToHostPortRangeArrayOutputWithContext(context.Context) HostPortRangeArrayOutput
}

type HostPortRangeArray []HostPortRangeInput

func (HostPortRangeArray) ElementType() reflect.Type {
	return reflect.TypeOf((*[]HostPortRange)(nil)).Elem()
}

func (i HostPortRangeArray) ToHostPortRangeArrayOutput() HostPortRangeArrayOutput {
	return i.ToHostPortRangeArrayOutputWithContext(context.Background())
}

func (i HostPortRangeArray) ToHostPortRangeArrayOutputWithContext(ctx context.Context) HostPortRangeArrayOutput {
	return pulumi.ToOutputWithContext(ctx, i).(HostPortRangeArrayOutput)
}

// HostPortRange defines a range of host ports that will be enabled by a policy for pods to use.  It requires both the start and end to be defined.
type HostPortRangeOutput struct{ *pulumi.OutputState }

func (HostPortRangeOutput) ElementType() reflect.Type {
	return reflect.TypeOf((*HostPortRange)(nil)).Elem()
}

func (o HostPortRangeOutput) ToHostPortRangeOutput() HostPortRangeOutput {
	return o
}

func (o HostPortRangeOutput) ToHostPortRangeOutputWithContext(ctx context.Context) HostPortRangeOutput {
	return o
}

// max is the end of the range, inclusive.
func (o HostPortRangeOutput) Max() pulumi.IntOutput {
	return o.ApplyT(func(v HostPortRange) int { return v.Max }).(pulumi.IntOutput)
}

// min is the start of the range, inclusive.
func (o HostPortRangeOutput) Min() pulumi.IntOutput {
	return o.ApplyT(func(v HostPortRange) int { return v.Min }).(pulumi.IntOutput)
}

type HostPortRangeArrayOutput struct{ *pulumi.OutputState }

func (HostPortRangeArrayOutput) ElementType() reflect.Type {
	return reflect.TypeOf((*[]HostPortRange)(nil)).Elem()
}

func (o HostPortRangeArrayOutput) ToHostPortRangeArrayOutput() HostPortRangeArrayOutput {
	return o
}

func (o HostPortRangeArrayOutput) ToHostPortRangeArrayOutputWithContext(ctx context.Context) HostPortRangeArrayOutput {
	return o
}

func (o HostPortRangeArrayOutput) Index(i pulumi.IntInput) HostPortRangeOutput {
	return pulumi.All(o, i).ApplyT(func(vs []interface{}) HostPortRange {
		return vs[0].([]HostPortRange)[vs[1].(int)]
	}).(HostPortRangeOutput)
}

// HostPortRange defines a range of host ports that will be enabled by a policy for pods to use.  It requires both the start and end to be defined.
type HostPortRangePatch struct {
	// max is the end of the range, inclusive.
	Max *int `pulumi:"max"`
	// min is the start of the range, inclusive.
	Min *int `pulumi:"min"`
}

// HostPortRangePatchInput is an input type that accepts HostPortRangePatchArgs and HostPortRangePatchOutput values.
// You can construct a concrete instance of `HostPortRangePatchInput` via:
//
//	HostPortRangePatchArgs{...}
type HostPortRangePatchInput interface {
	pulumi.Input

	ToHostPortRangePatchOutput() HostPortRangePatchOutput
	ToHostPortRangePatchOutputWithContext(context.Context) HostPortRangePatchOutput
}

// HostPortRange defines a range of host ports that will be enabled by a policy for pods to use.  It requires both the start and end to be defined.
type HostPortRangePatchArgs struct {
	// max is the end of the range, inclusive.
	Max pulumi.IntPtrInput `pulumi:"max"`
	// min is the start of the range, inclusive.
	Min pulumi.IntPtrInput `pulumi:"min"`
}

func (HostPortRangePatchArgs) ElementType() reflect.Type {
	return reflect.TypeOf((*HostPortRangePatch)(nil)).Elem()
}

func (i HostPortRangePatchArgs) ToHostPortRangePatchOutput() HostPortRangePatchOutput {
	return i.ToHostPortRangePatchOutputWithContext(context.Background())
}

func (i HostPortRangePatchArgs) ToHostPortRangePatchOutputWithContext(ctx context.Context) HostPortRangePatchOutput {
	return pulumi.ToOutputWithContext(ctx, i).(HostPortRangePatchOutput)
}

// HostPortRangePatchArrayInput is an input type that accepts HostPortRangePatchArray and HostPortRangePatchArrayOutput values.
// You can construct a concrete instance of `HostPortRangePatchArrayInput` via:
//
//	HostPortRangePatchArray{ HostPortRangePatchArgs{...} }
type HostPortRangePatchArrayInput interface {
	pulumi.Input

	ToHostPortRangePatchArrayOutput() HostPortRangePatchArrayOutput
	ToHostPortRangePatchArrayOutputWithContext(context.Context) HostPortRangePatchArrayOutput
}

type HostPortRangePatchArray []HostPortRangePatchInput

func (HostPortRangePatchArray) ElementType() reflect.Type {
	return reflect.TypeOf((*[]HostPortRangePatch)(nil)).Elem()
}

func (i HostPortRangePatchArray) ToHostPortRangePatchArrayOutput() HostPortRangePatchArrayOutput {
	return i.ToHostPortRangePatchArrayOutputWithContext(context.Background())
}

func (i HostPortRangePatchArray) ToHostPortRangePatchArrayOutputWithContext(ctx context.Context) HostPortRangePatchArrayOutput {
	return pulumi.ToOutputWithContext(ctx, i).(HostPortRangePatchArrayOutput)
}

// HostPortRange defines a range of host ports that will be enabled by a policy for pods to use.  It requires both the start and end to be defined.
type HostPortRangePatchOutput struct{ *pulumi.OutputState }

func (HostPortRangePatchOutput) ElementType() reflect.Type {
	return reflect.TypeOf((*HostPortRangePatch)(nil)).Elem()
}

func (o HostPortRangePatchOutput) ToHostPortRangePatchOutput() HostPortRangePatchOutput {
	return o
}

func (o HostPortRangePatchOutput) ToHostPortRangePatchOutputWithContext(ctx context.Context) HostPortRangePatchOutput {
	return o
}

// max is the end of the range, inclusive.
func (o HostPortRangePatchOutput) Max() pulumi.IntPtrOutput {
	return o.ApplyT(func(v HostPortRangePatch) *int { return v.Max }).(pulumi.IntPtrOutput)
}

// min is the start of the range, inclusive.
func (o HostPortRangePatchOutput) Min() pulumi.IntPtrOutput {
	return o.ApplyT(func(v HostPortRangePatch) *int { return v.Min }).(pulumi.IntPtrOutput)
}

type HostPortRangePatchArrayOutput struct{ *pulumi.OutputState }

func (HostPortRangePatchArrayOutput) ElementType() reflect.Type {
	return reflect.TypeOf((*[]HostPortRangePatch)(nil)).Elem()
}

func (o HostPortRangePatchArrayOutput) ToHostPortRangePatchArrayOutput() HostPortRangePatchArrayOutput {
	return o
}

func (o HostPortRangePatchArrayOutput) ToHostPortRangePatchArrayOutputWithContext(ctx context.Context) HostPortRangePatchArrayOutput {
	return o
}

func (o HostPortRangePatchArrayOutput) Index(i pulumi.IntInput) HostPortRangePatchOutput {
	return pulumi.All(o, i).ApplyT(func(vs []interface{}) HostPortRangePatch {
		return vs[0].([]HostPortRangePatch)[vs[1].(int)]
	}).(HostPortRangePatchOutput)
}

// IDRange provides a min/max of an allowed range of IDs.
type IDRange struct {
	// max is the end of the range, inclusive.
	Max int `pulumi:"max"`
	// min is the start of the range, inclusive.
	Min int `pulumi:"min"`
}

// IDRangeInput is an input type that accepts IDRangeArgs and IDRangeOutput values.
// You can construct a concrete instance of `IDRangeInput` via:
//
//	IDRangeArgs{...}
type IDRangeInput interface {
	pulumi.Input

	ToIDRangeOutput() IDRangeOutput
	ToIDRangeOutputWithContext(context.Context) IDRangeOutput
}

// IDRange provides a min/max of an allowed range of IDs.
type IDRangeArgs struct {
	// max is the end of the range, inclusive.
	Max pulumi.IntInput `pulumi:"max"`
	// min is the start of the range, inclusive.
	Min pulumi.IntInput `pulumi:"min"`
}

func (IDRangeArgs) ElementType() reflect.Type {
	return reflect.TypeOf((*IDRange)(nil)).Elem()
}

func (i IDRangeArgs) ToIDRangeOutput() IDRangeOutput {
	return i.ToIDRangeOutputWithContext(context.Background())
}

func (i IDRangeArgs) ToIDRangeOutputWithContext(ctx context.Context) IDRangeOutput {
	return pulumi.ToOutputWithContext(ctx, i).(IDRangeOutput)
}

// IDRangeArrayInput is an input type that accepts IDRangeArray and IDRangeArrayOutput values.
// You can construct a concrete instance of `IDRangeArrayInput` via:
//
//	IDRangeArray{ IDRangeArgs{...} }
type IDRangeArrayInput interface {
	pulumi.Input

	ToIDRangeArrayOutput() IDRangeArrayOutput
	ToIDRangeArrayOutputWithContext(context.Context) IDRangeArrayOutput
}

type IDRangeArray []IDRangeInput

func (IDRangeArray) ElementType() reflect.Type {
	return reflect.TypeOf((*[]IDRange)(nil)).Elem()
}

func (i IDRangeArray) ToIDRangeArrayOutput() IDRangeArrayOutput {
	return i.ToIDRangeArrayOutputWithContext(context.Background())
}

func (i IDRangeArray) ToIDRangeArrayOutputWithContext(ctx context.Context) IDRangeArrayOutput {
	return pulumi.ToOutputWithContext(ctx, i).(IDRangeArrayOutput)
}

// IDRange provides a min/max of an allowed range of IDs.
type IDRangeOutput struct{ *pulumi.OutputState }

func (IDRangeOutput) ElementType() reflect.Type {
	return reflect.TypeOf((*IDRange)(nil)).Elem()
}

func (o IDRangeOutput) ToIDRangeOutput() IDRangeOutput {
	return o
}

func (o IDRangeOutput) ToIDRangeOutputWithContext(ctx context.Context) IDRangeOutput {
	return o
}

// max is the end of the range, inclusive.
func (o IDRangeOutput) Max() pulumi.IntOutput {
	return o.ApplyT(func(v IDRange) int { return v.Max }).(pulumi.IntOutput)
}

// min is the start of the range, inclusive.
func (o IDRangeOutput) Min() pulumi.IntOutput {
	return o.ApplyT(func(v IDRange) int { return v.Min }).(pulumi.IntOutput)
}

type IDRangeArrayOutput struct{ *pulumi.OutputState }

func (IDRangeArrayOutput) ElementType() reflect.Type {
	return reflect.TypeOf((*[]IDRange)(nil)).Elem()
}

func (o IDRangeArrayOutput) ToIDRangeArrayOutput() IDRangeArrayOutput {
	return o
}

func (o IDRangeArrayOutput) ToIDRangeArrayOutputWithContext(ctx context.Context) IDRangeArrayOutput {
	return o
}

func (o IDRangeArrayOutput) Index(i pulumi.IntInput) IDRangeOutput {
	return pulumi.All(o, i).ApplyT(func(vs []interface{}) IDRange {
		return vs[0].([]IDRange)[vs[1].(int)]
	}).(IDRangeOutput)
}

// IDRange provides a min/max of an allowed range of IDs.
type IDRangePatch struct {
	// max is the end of the range, inclusive.
	Max *int `pulumi:"max"`
	// min is the start of the range, inclusive.
	Min *int `pulumi:"min"`
}

// IDRangePatchInput is an input type that accepts IDRangePatchArgs and IDRangePatchOutput values.
// You can construct a concrete instance of `IDRangePatchInput` via:
//
//	IDRangePatchArgs{...}
type IDRangePatchInput interface {
	pulumi.Input

	ToIDRangePatchOutput() IDRangePatchOutput
	ToIDRangePatchOutputWithContext(context.Context) IDRangePatchOutput
}

// IDRange provides a min/max of an allowed range of IDs.
type IDRangePatchArgs struct {
	// max is the end of the range, inclusive.
	Max pulumi.IntPtrInput `pulumi:"max"`
	// min is the start of the range, inclusive.
	Min pulumi.IntPtrInput `pulumi:"min"`
}

func (IDRangePatchArgs) ElementType() reflect.Type {
	return reflect.TypeOf((*IDRangePatch)(nil)).Elem()
}

func (i IDRangePatchArgs) ToIDRangePatchOutput() IDRangePatchOutput {
	return i.ToIDRangePatchOutputWithContext(context.Background())
}

func (i IDRangePatchArgs) ToIDRangePatchOutputWithContext(ctx context.Context) IDRangePatchOutput {
	return pulumi.ToOutputWithContext(ctx, i).(IDRangePatchOutput)
}

// IDRangePatchArrayInput is an input type that accepts IDRangePatchArray and IDRangePatchArrayOutput values.
// You can construct a concrete instance of `IDRangePatchArrayInput` via:
//
//	IDRangePatchArray{ IDRangePatchArgs{...} }
type IDRangePatchArrayInput interface {
	pulumi.Input

	ToIDRangePatchArrayOutput() IDRangePatchArrayOutput
	ToIDRangePatchArrayOutputWithContext(context.Context) IDRangePatchArrayOutput
}

type IDRangePatchArray []IDRangePatchInput

func (IDRangePatchArray) ElementType() reflect.Type {
	return reflect.TypeOf((*[]IDRangePatch)(nil)).Elem()
}

func (i IDRangePatchArray) ToIDRangePatchArrayOutput() IDRangePatchArrayOutput {
	return i.ToIDRangePatchArrayOutputWithContext(context.Background())
}

func (i IDRangePatchArray) ToIDRangePatchArrayOutputWithContext(ctx context.Context) IDRangePatchArrayOutput {
	return pulumi.ToOutputWithContext(ctx, i).(IDRangePatchArrayOutput)
}

// IDRange provides a min/max of an allowed range of IDs.
type IDRangePatchOutput struct{ *pulumi.OutputState }

func (IDRangePatchOutput) ElementType() reflect.Type {
	return reflect.TypeOf((*IDRangePatch)(nil)).Elem()
}

func (o IDRangePatchOutput) ToIDRangePatchOutput() IDRangePatchOutput {
	return o
}

func (o IDRangePatchOutput) ToIDRangePatchOutputWithContext(ctx context.Context) IDRangePatchOutput {
	return o
}

// max is the end of the range, inclusive.
func (o IDRangePatchOutput) Max() pulumi.IntPtrOutput {
	return o.ApplyT(func(v IDRangePatch) *int { return v.Max }).(pulumi.IntPtrOutput)
}

// min is the start of the range, inclusive.
func (o IDRangePatchOutput) Min() pulumi.IntPtrOutput {
	return o.ApplyT(func(v IDRangePatch) *int { return v.Min }).(pulumi.IntPtrOutput)
}

type IDRangePatchArrayOutput struct{ *pulumi.OutputState }

func (IDRangePatchArrayOutput) ElementType() reflect.Type {
	return reflect.TypeOf((*[]IDRangePatch)(nil)).Elem()
}

func (o IDRangePatchArrayOutput) ToIDRangePatchArrayOutput() IDRangePatchArrayOutput {
	return o
}

func (o IDRangePatchArrayOutput) ToIDRangePatchArrayOutputWithContext(ctx context.Context) IDRangePatchArrayOutput {
	return o
}

func (o IDRangePatchArrayOutput) Index(i pulumi.IntInput) IDRangePatchOutput {
	return pulumi.All(o, i).ApplyT(func(vs []interface{}) IDRangePatch {
		return vs[0].([]IDRangePatch)[vs[1].(int)]
	}).(IDRangePatchOutput)
}

// PodDisruptionBudget is an object to define the max disruption that can be caused to a collection of pods
type PodDisruptionBudgetType struct {
	// APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
	ApiVersion *string `pulumi:"apiVersion"`
	// Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
	Kind     *string            `pulumi:"kind"`
	Metadata *metav1.ObjectMeta `pulumi:"metadata"`
	// Specification of the desired behavior of the PodDisruptionBudget.
	Spec *PodDisruptionBudgetSpec `pulumi:"spec"`
	// Most recently observed status of the PodDisruptionBudget.
	Status *PodDisruptionBudgetStatus `pulumi:"status"`
}

// PodDisruptionBudgetTypeInput is an input type that accepts PodDisruptionBudgetTypeArgs and PodDisruptionBudgetTypeOutput values.
// You can construct a concrete instance of `PodDisruptionBudgetTypeInput` via:
//
//	PodDisruptionBudgetTypeArgs{...}
type PodDisruptionBudgetTypeInput interface {
	pulumi.Input

	ToPodDisruptionBudgetTypeOutput() PodDisruptionBudgetTypeOutput
	ToPodDisruptionBudgetTypeOutputWithContext(context.Context) PodDisruptionBudgetTypeOutput
}

// PodDisruptionBudget is an object to define the max disruption that can be caused to a collection of pods
type PodDisruptionBudgetTypeArgs struct {
	// APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
	ApiVersion pulumi.StringPtrInput `pulumi:"apiVersion"`
	// Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
	Kind     pulumi.StringPtrInput     `pulumi:"kind"`
	Metadata metav1.ObjectMetaPtrInput `pulumi:"metadata"`
	// Specification of the desired behavior of the PodDisruptionBudget.
	Spec PodDisruptionBudgetSpecPtrInput `pulumi:"spec"`
	// Most recently observed status of the PodDisruptionBudget.
	Status PodDisruptionBudgetStatusPtrInput `pulumi:"status"`
}

func (PodDisruptionBudgetTypeArgs) ElementType() reflect.Type {
	return reflect.TypeOf((*PodDisruptionBudgetType)(nil)).Elem()
}

func (i PodDisruptionBudgetTypeArgs) ToPodDisruptionBudgetTypeOutput() PodDisruptionBudgetTypeOutput {
	return i.ToPodDisruptionBudgetTypeOutputWithContext(context.Background())
}

func (i PodDisruptionBudgetTypeArgs) ToPodDisruptionBudgetTypeOutputWithContext(ctx context.Context) PodDisruptionBudgetTypeOutput {
	return pulumi.ToOutputWithContext(ctx, i).(PodDisruptionBudgetTypeOutput)
}

// PodDisruptionBudgetTypeArrayInput is an input type that accepts PodDisruptionBudgetTypeArray and PodDisruptionBudgetTypeArrayOutput values.
// You can construct a concrete instance of `PodDisruptionBudgetTypeArrayInput` via:
//
//	PodDisruptionBudgetTypeArray{ PodDisruptionBudgetTypeArgs{...} }
type PodDisruptionBudgetTypeArrayInput interface {
	pulumi.Input

	ToPodDisruptionBudgetTypeArrayOutput() PodDisruptionBudgetTypeArrayOutput
	ToPodDisruptionBudgetTypeArrayOutputWithContext(context.Context) PodDisruptionBudgetTypeArrayOutput
}

type PodDisruptionBudgetTypeArray []PodDisruptionBudgetTypeInput

func (PodDisruptionBudgetTypeArray) ElementType() reflect.Type {
	return reflect.TypeOf((*[]PodDisruptionBudgetType)(nil)).Elem()
}

func (i PodDisruptionBudgetTypeArray) ToPodDisruptionBudgetTypeArrayOutput() PodDisruptionBudgetTypeArrayOutput {
	return i.ToPodDisruptionBudgetTypeArrayOutputWithContext(context.Background())
}

func (i PodDisruptionBudgetTypeArray) ToPodDisruptionBudgetTypeArrayOutputWithContext(ctx context.Context) PodDisruptionBudgetTypeArrayOutput {
	return pulumi.ToOutputWithContext(ctx, i).(PodDisruptionBudgetTypeArrayOutput)
}

// PodDisruptionBudget is an object to define the max disruption that can be caused to a collection of pods
type PodDisruptionBudgetTypeOutput struct{ *pulumi.OutputState }

func (PodDisruptionBudgetTypeOutput) ElementType() reflect.Type {
	return reflect.TypeOf((*PodDisruptionBudgetType)(nil)).Elem()
}

func (o PodDisruptionBudgetTypeOutput) ToPodDisruptionBudgetTypeOutput() PodDisruptionBudgetTypeOutput {
	return o
}

func (o PodDisruptionBudgetTypeOutput) ToPodDisruptionBudgetTypeOutputWithContext(ctx context.Context) PodDisruptionBudgetTypeOutput {
	return o
}

// APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
func (o PodDisruptionBudgetTypeOutput) ApiVersion() pulumi.StringPtrOutput {
	return o.ApplyT(func(v PodDisruptionBudgetType) *string { return v.ApiVersion }).(pulumi.StringPtrOutput)
}

// Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
func (o PodDisruptionBudgetTypeOutput) Kind() pulumi.StringPtrOutput {
	return o.ApplyT(func(v PodDisruptionBudgetType) *string { return v.Kind }).(pulumi.StringPtrOutput)
}

func (o PodDisruptionBudgetTypeOutput) Metadata() metav1.ObjectMetaPtrOutput {
	return o.ApplyT(func(v PodDisruptionBudgetType) *metav1.ObjectMeta { return v.Metadata }).(metav1.ObjectMetaPtrOutput)
}

// Specification of the desired behavior of the PodDisruptionBudget.
func (o PodDisruptionBudgetTypeOutput) Spec() PodDisruptionBudgetSpecPtrOutput {
	return o.ApplyT(func(v PodDisruptionBudgetType) *PodDisruptionBudgetSpec { return v.Spec }).(PodDisruptionBudgetSpecPtrOutput)
}

// Most recently observed status of the PodDisruptionBudget.
func (o PodDisruptionBudgetTypeOutput) Status() PodDisruptionBudgetStatusPtrOutput {
	return o.ApplyT(func(v PodDisruptionBudgetType) *PodDisruptionBudgetStatus { return v.Status }).(PodDisruptionBudgetStatusPtrOutput)
}

type PodDisruptionBudgetTypeArrayOutput struct{ *pulumi.OutputState }

func (PodDisruptionBudgetTypeArrayOutput) ElementType() reflect.Type {
	return reflect.TypeOf((*[]PodDisruptionBudgetType)(nil)).Elem()
}

func (o PodDisruptionBudgetTypeArrayOutput) ToPodDisruptionBudgetTypeArrayOutput() PodDisruptionBudgetTypeArrayOutput {
	return o
}

func (o PodDisruptionBudgetTypeArrayOutput) ToPodDisruptionBudgetTypeArrayOutputWithContext(ctx context.Context) PodDisruptionBudgetTypeArrayOutput {
	return o
}

func (o PodDisruptionBudgetTypeArrayOutput) Index(i pulumi.IntInput) PodDisruptionBudgetTypeOutput {
	return pulumi.All(o, i).ApplyT(func(vs []interface{}) PodDisruptionBudgetType {
		return vs[0].([]PodDisruptionBudgetType)[vs[1].(int)]
	}).(PodDisruptionBudgetTypeOutput)
}

// PodDisruptionBudgetList is a collection of PodDisruptionBudgets.
type PodDisruptionBudgetListType struct {
	// APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
	ApiVersion *string                   `pulumi:"apiVersion"`
	Items      []PodDisruptionBudgetType `pulumi:"items"`
	// Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
	Kind     *string          `pulumi:"kind"`
	Metadata *metav1.ListMeta `pulumi:"metadata"`
}

// PodDisruptionBudgetListTypeInput is an input type that accepts PodDisruptionBudgetListTypeArgs and PodDisruptionBudgetListTypeOutput values.
// You can construct a concrete instance of `PodDisruptionBudgetListTypeInput` via:
//
//	PodDisruptionBudgetListTypeArgs{...}
type PodDisruptionBudgetListTypeInput interface {
	pulumi.Input

	ToPodDisruptionBudgetListTypeOutput() PodDisruptionBudgetListTypeOutput
	ToPodDisruptionBudgetListTypeOutputWithContext(context.Context) PodDisruptionBudgetListTypeOutput
}

// PodDisruptionBudgetList is a collection of PodDisruptionBudgets.
type PodDisruptionBudgetListTypeArgs struct {
	// APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
	ApiVersion pulumi.StringPtrInput             `pulumi:"apiVersion"`
	Items      PodDisruptionBudgetTypeArrayInput `pulumi:"items"`
	// Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
	Kind     pulumi.StringPtrInput   `pulumi:"kind"`
	Metadata metav1.ListMetaPtrInput `pulumi:"metadata"`
}

func (PodDisruptionBudgetListTypeArgs) ElementType() reflect.Type {
	return reflect.TypeOf((*PodDisruptionBudgetListType)(nil)).Elem()
}

func (i PodDisruptionBudgetListTypeArgs) ToPodDisruptionBudgetListTypeOutput() PodDisruptionBudgetListTypeOutput {
	return i.ToPodDisruptionBudgetListTypeOutputWithContext(context.Background())
}

func (i PodDisruptionBudgetListTypeArgs) ToPodDisruptionBudgetListTypeOutputWithContext(ctx context.Context) PodDisruptionBudgetListTypeOutput {
	return pulumi.ToOutputWithContext(ctx, i).(PodDisruptionBudgetListTypeOutput)
}

// PodDisruptionBudgetList is a collection of PodDisruptionBudgets.
type PodDisruptionBudgetListTypeOutput struct{ *pulumi.OutputState }

func (PodDisruptionBudgetListTypeOutput) ElementType() reflect.Type {
	return reflect.TypeOf((*PodDisruptionBudgetListType)(nil)).Elem()
}

func (o PodDisruptionBudgetListTypeOutput) ToPodDisruptionBudgetListTypeOutput() PodDisruptionBudgetListTypeOutput {
	return o
}

func (o PodDisruptionBudgetListTypeOutput) ToPodDisruptionBudgetListTypeOutputWithContext(ctx context.Context) PodDisruptionBudgetListTypeOutput {
	return o
}

// APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
func (o PodDisruptionBudgetListTypeOutput) ApiVersion() pulumi.StringPtrOutput {
	return o.ApplyT(func(v PodDisruptionBudgetListType) *string { return v.ApiVersion }).(pulumi.StringPtrOutput)
}

func (o PodDisruptionBudgetListTypeOutput) Items() PodDisruptionBudgetTypeArrayOutput {
	return o.ApplyT(func(v PodDisruptionBudgetListType) []PodDisruptionBudgetType { return v.Items }).(PodDisruptionBudgetTypeArrayOutput)
}

// Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
func (o PodDisruptionBudgetListTypeOutput) Kind() pulumi.StringPtrOutput {
	return o.ApplyT(func(v PodDisruptionBudgetListType) *string { return v.Kind }).(pulumi.StringPtrOutput)
}

func (o PodDisruptionBudgetListTypeOutput) Metadata() metav1.ListMetaPtrOutput {
	return o.ApplyT(func(v PodDisruptionBudgetListType) *metav1.ListMeta { return v.Metadata }).(metav1.ListMetaPtrOutput)
}

// PodDisruptionBudget is an object to define the max disruption that can be caused to a collection of pods
type PodDisruptionBudgetPatchType struct {
	// APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
	ApiVersion *string `pulumi:"apiVersion"`
	// Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
	Kind     *string                 `pulumi:"kind"`
	Metadata *metav1.ObjectMetaPatch `pulumi:"metadata"`
	// Specification of the desired behavior of the PodDisruptionBudget.
	Spec *PodDisruptionBudgetSpecPatch `pulumi:"spec"`
	// Most recently observed status of the PodDisruptionBudget.
	Status *PodDisruptionBudgetStatusPatch `pulumi:"status"`
}

// PodDisruptionBudgetPatchTypeInput is an input type that accepts PodDisruptionBudgetPatchTypeArgs and PodDisruptionBudgetPatchTypeOutput values.
// You can construct a concrete instance of `PodDisruptionBudgetPatchTypeInput` via:
//
//	PodDisruptionBudgetPatchTypeArgs{...}
type PodDisruptionBudgetPatchTypeInput interface {
	pulumi.Input

	ToPodDisruptionBudgetPatchTypeOutput() PodDisruptionBudgetPatchTypeOutput
	ToPodDisruptionBudgetPatchTypeOutputWithContext(context.Context) PodDisruptionBudgetPatchTypeOutput
}

// PodDisruptionBudget is an object to define the max disruption that can be caused to a collection of pods
type PodDisruptionBudgetPatchTypeArgs struct {
	// APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
	ApiVersion pulumi.StringPtrInput `pulumi:"apiVersion"`
	// Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
	Kind     pulumi.StringPtrInput          `pulumi:"kind"`
	Metadata metav1.ObjectMetaPatchPtrInput `pulumi:"metadata"`
	// Specification of the desired behavior of the PodDisruptionBudget.
	Spec PodDisruptionBudgetSpecPatchPtrInput `pulumi:"spec"`
	// Most recently observed status of the PodDisruptionBudget.
	Status PodDisruptionBudgetStatusPatchPtrInput `pulumi:"status"`
}

func (PodDisruptionBudgetPatchTypeArgs) ElementType() reflect.Type {
	return reflect.TypeOf((*PodDisruptionBudgetPatchType)(nil)).Elem()
}

func (i PodDisruptionBudgetPatchTypeArgs) ToPodDisruptionBudgetPatchTypeOutput() PodDisruptionBudgetPatchTypeOutput {
	return i.ToPodDisruptionBudgetPatchTypeOutputWithContext(context.Background())
}

func (i PodDisruptionBudgetPatchTypeArgs) ToPodDisruptionBudgetPatchTypeOutputWithContext(ctx context.Context) PodDisruptionBudgetPatchTypeOutput {
	return pulumi.ToOutputWithContext(ctx, i).(PodDisruptionBudgetPatchTypeOutput)
}

// PodDisruptionBudget is an object to define the max disruption that can be caused to a collection of pods
type PodDisruptionBudgetPatchTypeOutput struct{ *pulumi.OutputState }

func (PodDisruptionBudgetPatchTypeOutput) ElementType() reflect.Type {
	return reflect.TypeOf((*PodDisruptionBudgetPatchType)(nil)).Elem()
}

func (o PodDisruptionBudgetPatchTypeOutput) ToPodDisruptionBudgetPatchTypeOutput() PodDisruptionBudgetPatchTypeOutput {
	return o
}

func (o PodDisruptionBudgetPatchTypeOutput) ToPodDisruptionBudgetPatchTypeOutputWithContext(ctx context.Context) PodDisruptionBudgetPatchTypeOutput {
	return o
}

// APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
func (o PodDisruptionBudgetPatchTypeOutput) ApiVersion() pulumi.StringPtrOutput {
	return o.ApplyT(func(v PodDisruptionBudgetPatchType) *string { return v.ApiVersion }).(pulumi.StringPtrOutput)
}

// Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
func (o PodDisruptionBudgetPatchTypeOutput) Kind() pulumi.StringPtrOutput {
	return o.ApplyT(func(v PodDisruptionBudgetPatchType) *string { return v.Kind }).(pulumi.StringPtrOutput)
}

func (o PodDisruptionBudgetPatchTypeOutput) Metadata() metav1.ObjectMetaPatchPtrOutput {
	return o.ApplyT(func(v PodDisruptionBudgetPatchType) *metav1.ObjectMetaPatch { return v.Metadata }).(metav1.ObjectMetaPatchPtrOutput)
}

// Specification of the desired behavior of the PodDisruptionBudget.
func (o PodDisruptionBudgetPatchTypeOutput) Spec() PodDisruptionBudgetSpecPatchPtrOutput {
	return o.ApplyT(func(v PodDisruptionBudgetPatchType) *PodDisruptionBudgetSpecPatch { return v.Spec }).(PodDisruptionBudgetSpecPatchPtrOutput)
}

// Most recently observed status of the PodDisruptionBudget.
func (o PodDisruptionBudgetPatchTypeOutput) Status() PodDisruptionBudgetStatusPatchPtrOutput {
	return o.ApplyT(func(v PodDisruptionBudgetPatchType) *PodDisruptionBudgetStatusPatch { return v.Status }).(PodDisruptionBudgetStatusPatchPtrOutput)
}

// PodDisruptionBudgetSpec is a description of a PodDisruptionBudget.
type PodDisruptionBudgetSpec struct {
	// An eviction is allowed if at most "maxUnavailable" pods selected by "selector" are unavailable after the eviction, i.e. even in absence of the evicted pod. For example, one can prevent all voluntary evictions by specifying 0. This is a mutually exclusive setting with "minAvailable".
	MaxUnavailable interface{} `pulumi:"maxUnavailable"`
	// An eviction is allowed if at least "minAvailable" pods selected by "selector" will still be available after the eviction, i.e. even in the absence of the evicted pod.  So for example you can prevent all voluntary evictions by specifying "100%".
	MinAvailable interface{} `pulumi:"minAvailable"`
	// Label query over pods whose evictions are managed by the disruption budget.
	Selector *metav1.LabelSelector `pulumi:"selector"`
}

// PodDisruptionBudgetSpecInput is an input type that accepts PodDisruptionBudgetSpecArgs and PodDisruptionBudgetSpecOutput values.
// You can construct a concrete instance of `PodDisruptionBudgetSpecInput` via:
//
//	PodDisruptionBudgetSpecArgs{...}
type PodDisruptionBudgetSpecInput interface {
	pulumi.Input

	ToPodDisruptionBudgetSpecOutput() PodDisruptionBudgetSpecOutput
	ToPodDisruptionBudgetSpecOutputWithContext(context.Context) PodDisruptionBudgetSpecOutput
}

// PodDisruptionBudgetSpec is a description of a PodDisruptionBudget.
type PodDisruptionBudgetSpecArgs struct {
	// An eviction is allowed if at most "maxUnavailable" pods selected by "selector" are unavailable after the eviction, i.e. even in absence of the evicted pod. For example, one can prevent all voluntary evictions by specifying 0. This is a mutually exclusive setting with "minAvailable".
	MaxUnavailable pulumi.Input `pulumi:"maxUnavailable"`
	// An eviction is allowed if at least "minAvailable" pods selected by "selector" will still be available after the eviction, i.e. even in the absence of the evicted pod.  So for example you can prevent all voluntary evictions by specifying "100%".
	MinAvailable pulumi.Input `pulumi:"minAvailable"`
	// Label query over pods whose evictions are managed by the disruption budget.
	Selector metav1.LabelSelectorPtrInput `pulumi:"selector"`
}

func (PodDisruptionBudgetSpecArgs) ElementType() reflect.Type {
	return reflect.TypeOf((*PodDisruptionBudgetSpec)(nil)).Elem()
}

func (i PodDisruptionBudgetSpecArgs) ToPodDisruptionBudgetSpecOutput() PodDisruptionBudgetSpecOutput {
	return i.ToPodDisruptionBudgetSpecOutputWithContext(context.Background())
}

func (i PodDisruptionBudgetSpecArgs) ToPodDisruptionBudgetSpecOutputWithContext(ctx context.Context) PodDisruptionBudgetSpecOutput {
	return pulumi.ToOutputWithContext(ctx, i).(PodDisruptionBudgetSpecOutput)
}

func (i PodDisruptionBudgetSpecArgs) ToPodDisruptionBudgetSpecPtrOutput() PodDisruptionBudgetSpecPtrOutput {
	return i.ToPodDisruptionBudgetSpecPtrOutputWithContext(context.Background())
}

func (i PodDisruptionBudgetSpecArgs) ToPodDisruptionBudgetSpecPtrOutputWithContext(ctx context.Context) PodDisruptionBudgetSpecPtrOutput {
	return pulumi.ToOutputWithContext(ctx, i).(PodDisruptionBudgetSpecOutput).ToPodDisruptionBudgetSpecPtrOutputWithContext(ctx)
}

// PodDisruptionBudgetSpecPtrInput is an input type that accepts PodDisruptionBudgetSpecArgs, PodDisruptionBudgetSpecPtr and PodDisruptionBudgetSpecPtrOutput values.
// You can construct a concrete instance of `PodDisruptionBudgetSpecPtrInput` via:
//
//	        PodDisruptionBudgetSpecArgs{...}
//
//	or:
//
//	        nil
type PodDisruptionBudgetSpecPtrInput interface {
	pulumi.Input

	ToPodDisruptionBudgetSpecPtrOutput() PodDisruptionBudgetSpecPtrOutput
	ToPodDisruptionBudgetSpecPtrOutputWithContext(context.Context) PodDisruptionBudgetSpecPtrOutput
}

type podDisruptionBudgetSpecPtrType PodDisruptionBudgetSpecArgs

func PodDisruptionBudgetSpecPtr(v *PodDisruptionBudgetSpecArgs) PodDisruptionBudgetSpecPtrInput {
	return (*podDisruptionBudgetSpecPtrType)(v)
}

func (*podDisruptionBudgetSpecPtrType) ElementType() reflect.Type {
	return reflect.TypeOf((**PodDisruptionBudgetSpec)(nil)).Elem()
}

func (i *podDisruptionBudgetSpecPtrType) ToPodDisruptionBudgetSpecPtrOutput() PodDisruptionBudgetSpecPtrOutput {
	return i.ToPodDisruptionBudgetSpecPtrOutputWithContext(context.Background())
}

func (i *podDisruptionBudgetSpecPtrType) ToPodDisruptionBudgetSpecPtrOutputWithContext(ctx context.Context) PodDisruptionBudgetSpecPtrOutput {
	return pulumi.ToOutputWithContext(ctx, i).(PodDisruptionBudgetSpecPtrOutput)
}

// PodDisruptionBudgetSpec is a description of a PodDisruptionBudget.
type PodDisruptionBudgetSpecOutput struct{ *pulumi.OutputState }

func (PodDisruptionBudgetSpecOutput) ElementType() reflect.Type {
	return reflect.TypeOf((*PodDisruptionBudgetSpec)(nil)).Elem()
}

func (o PodDisruptionBudgetSpecOutput) ToPodDisruptionBudgetSpecOutput() PodDisruptionBudgetSpecOutput {
	return o
}

func (o PodDisruptionBudgetSpecOutput) ToPodDisruptionBudgetSpecOutputWithContext(ctx context.Context) PodDisruptionBudgetSpecOutput {
	return o
}

func (o PodDisruptionBudgetSpecOutput) ToPodDisruptionBudgetSpecPtrOutput() PodDisruptionBudgetSpecPtrOutput {
	return o.ToPodDisruptionBudgetSpecPtrOutputWithContext(context.Background())
}

func (o PodDisruptionBudgetSpecOutput) ToPodDisruptionBudgetSpecPtrOutputWithContext(ctx context.Context) PodDisruptionBudgetSpecPtrOutput {
	return o.ApplyTWithContext(ctx, func(_ context.Context, v PodDisruptionBudgetSpec) *PodDisruptionBudgetSpec {
		return &v
	}).(PodDisruptionBudgetSpecPtrOutput)
}

// An eviction is allowed if at most "maxUnavailable" pods selected by "selector" are unavailable after the eviction, i.e. even in absence of the evicted pod. For example, one can prevent all voluntary evictions by specifying 0. This is a mutually exclusive setting with "minAvailable".
func (o PodDisruptionBudgetSpecOutput) MaxUnavailable() pulumi.AnyOutput {
	return o.ApplyT(func(v PodDisruptionBudgetSpec) interface{} { return v.MaxUnavailable }).(pulumi.AnyOutput)
}

// An eviction is allowed if at least "minAvailable" pods selected by "selector" will still be available after the eviction, i.e. even in the absence of the evicted pod.  So for example you can prevent all voluntary evictions by specifying "100%".
func (o PodDisruptionBudgetSpecOutput) MinAvailable() pulumi.AnyOutput {
	return o.ApplyT(func(v PodDisruptionBudgetSpec) interface{} { return v.MinAvailable }).(pulumi.AnyOutput)
}

// Label query over pods whose evictions are managed by the disruption budget.
func (o PodDisruptionBudgetSpecOutput) Selector() metav1.LabelSelectorPtrOutput {
	return o.ApplyT(func(v PodDisruptionBudgetSpec) *metav1.LabelSelector { return v.Selector }).(metav1.LabelSelectorPtrOutput)
}

type PodDisruptionBudgetSpecPtrOutput struct{ *pulumi.OutputState }

func (PodDisruptionBudgetSpecPtrOutput) ElementType() reflect.Type {
	return reflect.TypeOf((**PodDisruptionBudgetSpec)(nil)).Elem()
}

func (o PodDisruptionBudgetSpecPtrOutput) ToPodDisruptionBudgetSpecPtrOutput() PodDisruptionBudgetSpecPtrOutput {
	return o
}

func (o PodDisruptionBudgetSpecPtrOutput) ToPodDisruptionBudgetSpecPtrOutputWithContext(ctx context.Context) PodDisruptionBudgetSpecPtrOutput {
	return o
}

func (o PodDisruptionBudgetSpecPtrOutput) Elem() PodDisruptionBudgetSpecOutput {
	return o.ApplyT(func(v *PodDisruptionBudgetSpec) PodDisruptionBudgetSpec {
		if v != nil {
			return *v
		}
		var ret PodDisruptionBudgetSpec
		return ret
	}).(PodDisruptionBudgetSpecOutput)
}

// An eviction is allowed if at most "maxUnavailable" pods selected by "selector" are unavailable after the eviction, i.e. even in absence of the evicted pod. For example, one can prevent all voluntary evictions by specifying 0. This is a mutually exclusive setting with "minAvailable".
func (o PodDisruptionBudgetSpecPtrOutput) MaxUnavailable() pulumi.AnyOutput {
	return o.ApplyT(func(v *PodDisruptionBudgetSpec) interface{} {
		if v == nil {
			return nil
		}
		return v.MaxUnavailable
	}).(pulumi.AnyOutput)
}

// An eviction is allowed if at least "minAvailable" pods selected by "selector" will still be available after the eviction, i.e. even in the absence of the evicted pod.  So for example you can prevent all voluntary evictions by specifying "100%".
func (o PodDisruptionBudgetSpecPtrOutput) MinAvailable() pulumi.AnyOutput {
	return o.ApplyT(func(v *PodDisruptionBudgetSpec) interface{} {
		if v == nil {
			return nil
		}
		return v.MinAvailable
	}).(pulumi.AnyOutput)
}

// Label query over pods whose evictions are managed by the disruption budget.
func (o PodDisruptionBudgetSpecPtrOutput) Selector() metav1.LabelSelectorPtrOutput {
	return o.ApplyT(func(v *PodDisruptionBudgetSpec) *metav1.LabelSelector {
		if v == nil {
			return nil
		}
		return v.Selector
	}).(metav1.LabelSelectorPtrOutput)
}

// PodDisruptionBudgetSpec is a description of a PodDisruptionBudget.
type PodDisruptionBudgetSpecPatch struct {
	// An eviction is allowed if at most "maxUnavailable" pods selected by "selector" are unavailable after the eviction, i.e. even in absence of the evicted pod. For example, one can prevent all voluntary evictions by specifying 0. This is a mutually exclusive setting with "minAvailable".
	MaxUnavailable interface{} `pulumi:"maxUnavailable"`
	// An eviction is allowed if at least "minAvailable" pods selected by "selector" will still be available after the eviction, i.e. even in the absence of the evicted pod.  So for example you can prevent all voluntary evictions by specifying "100%".
	MinAvailable interface{} `pulumi:"minAvailable"`
	// Label query over pods whose evictions are managed by the disruption budget.
	Selector *metav1.LabelSelectorPatch `pulumi:"selector"`
}

// PodDisruptionBudgetSpecPatchInput is an input type that accepts PodDisruptionBudgetSpecPatchArgs and PodDisruptionBudgetSpecPatchOutput values.
// You can construct a concrete instance of `PodDisruptionBudgetSpecPatchInput` via:
//
//	PodDisruptionBudgetSpecPatchArgs{...}
type PodDisruptionBudgetSpecPatchInput interface {
	pulumi.Input

	ToPodDisruptionBudgetSpecPatchOutput() PodDisruptionBudgetSpecPatchOutput
	ToPodDisruptionBudgetSpecPatchOutputWithContext(context.Context) PodDisruptionBudgetSpecPatchOutput
}

// PodDisruptionBudgetSpec is a description of a PodDisruptionBudget.
type PodDisruptionBudgetSpecPatchArgs struct {
	// An eviction is allowed if at most "maxUnavailable" pods selected by "selector" are unavailable after the eviction, i.e. even in absence of the evicted pod. For example, one can prevent all voluntary evictions by specifying 0. This is a mutually exclusive setting with "minAvailable".
	MaxUnavailable pulumi.Input `pulumi:"maxUnavailable"`
	// An eviction is allowed if at least "minAvailable" pods selected by "selector" will still be available after the eviction, i.e. even in the absence of the evicted pod.  So for example you can prevent all voluntary evictions by specifying "100%".
	MinAvailable pulumi.Input `pulumi:"minAvailable"`
	// Label query over pods whose evictions are managed by the disruption budget.
	Selector metav1.LabelSelectorPatchPtrInput `pulumi:"selector"`
}

func (PodDisruptionBudgetSpecPatchArgs) ElementType() reflect.Type {
	return reflect.TypeOf((*PodDisruptionBudgetSpecPatch)(nil)).Elem()
}

func (i PodDisruptionBudgetSpecPatchArgs) ToPodDisruptionBudgetSpecPatchOutput() PodDisruptionBudgetSpecPatchOutput {
	return i.ToPodDisruptionBudgetSpecPatchOutputWithContext(context.Background())
}

func (i PodDisruptionBudgetSpecPatchArgs) ToPodDisruptionBudgetSpecPatchOutputWithContext(ctx context.Context) PodDisruptionBudgetSpecPatchOutput {
	return pulumi.ToOutputWithContext(ctx, i).(PodDisruptionBudgetSpecPatchOutput)
}

func (i PodDisruptionBudgetSpecPatchArgs) ToPodDisruptionBudgetSpecPatchPtrOutput() PodDisruptionBudgetSpecPatchPtrOutput {
	return i.ToPodDisruptionBudgetSpecPatchPtrOutputWithContext(context.Background())
}

func (i PodDisruptionBudgetSpecPatchArgs) ToPodDisruptionBudgetSpecPatchPtrOutputWithContext(ctx context.Context) PodDisruptionBudgetSpecPatchPtrOutput {
	return pulumi.ToOutputWithContext(ctx, i).(PodDisruptionBudgetSpecPatchOutput).ToPodDisruptionBudgetSpecPatchPtrOutputWithContext(ctx)
}

// PodDisruptionBudgetSpecPatchPtrInput is an input type that accepts PodDisruptionBudgetSpecPatchArgs, PodDisruptionBudgetSpecPatchPtr and PodDisruptionBudgetSpecPatchPtrOutput values.
// You can construct a concrete instance of `PodDisruptionBudgetSpecPatchPtrInput` via:
//
//	        PodDisruptionBudgetSpecPatchArgs{...}
//
//	or:
//
//	        nil
type PodDisruptionBudgetSpecPatchPtrInput interface {
	pulumi.Input

	ToPodDisruptionBudgetSpecPatchPtrOutput() PodDisruptionBudgetSpecPatchPtrOutput
	ToPodDisruptionBudgetSpecPatchPtrOutputWithContext(context.Context) PodDisruptionBudgetSpecPatchPtrOutput
}

type podDisruptionBudgetSpecPatchPtrType PodDisruptionBudgetSpecPatchArgs

func PodDisruptionBudgetSpecPatchPtr(v *PodDisruptionBudgetSpecPatchArgs) PodDisruptionBudgetSpecPatchPtrInput {
	return (*podDisruptionBudgetSpecPatchPtrType)(v)
}

func (*podDisruptionBudgetSpecPatchPtrType) ElementType() reflect.Type {
	return reflect.TypeOf((**PodDisruptionBudgetSpecPatch)(nil)).Elem()
}

func (i *podDisruptionBudgetSpecPatchPtrType) ToPodDisruptionBudgetSpecPatchPtrOutput() PodDisruptionBudgetSpecPatchPtrOutput {
	return i.ToPodDisruptionBudgetSpecPatchPtrOutputWithContext(context.Background())
}

func (i *podDisruptionBudgetSpecPatchPtrType) ToPodDisruptionBudgetSpecPatchPtrOutputWithContext(ctx context.Context) PodDisruptionBudgetSpecPatchPtrOutput {
	return pulumi.ToOutputWithContext(ctx, i).(PodDisruptionBudgetSpecPatchPtrOutput)
}

// PodDisruptionBudgetSpec is a description of a PodDisruptionBudget.
type PodDisruptionBudgetSpecPatchOutput struct{ *pulumi.OutputState }

func (PodDisruptionBudgetSpecPatchOutput) ElementType() reflect.Type {
	return reflect.TypeOf((*PodDisruptionBudgetSpecPatch)(nil)).Elem()
}

func (o PodDisruptionBudgetSpecPatchOutput) ToPodDisruptionBudgetSpecPatchOutput() PodDisruptionBudgetSpecPatchOutput {
	return o
}

func (o PodDisruptionBudgetSpecPatchOutput) ToPodDisruptionBudgetSpecPatchOutputWithContext(ctx context.Context) PodDisruptionBudgetSpecPatchOutput {
	return o
}

func (o PodDisruptionBudgetSpecPatchOutput) ToPodDisruptionBudgetSpecPatchPtrOutput() PodDisruptionBudgetSpecPatchPtrOutput {
	return o.ToPodDisruptionBudgetSpecPatchPtrOutputWithContext(context.Background())
}

func (o PodDisruptionBudgetSpecPatchOutput) ToPodDisruptionBudgetSpecPatchPtrOutputWithContext(ctx context.Context) PodDisruptionBudgetSpecPatchPtrOutput {
	return o.ApplyTWithContext(ctx, func(_ context.Context, v PodDisruptionBudgetSpecPatch) *PodDisruptionBudgetSpecPatch {
		return &v
	}).(PodDisruptionBudgetSpecPatchPtrOutput)
}

// An eviction is allowed if at most "maxUnavailable" pods selected by "selector" are unavailable after the eviction, i.e. even in absence of the evicted pod. For example, one can prevent all voluntary evictions by specifying 0. This is a mutually exclusive setting with "minAvailable".
func (o PodDisruptionBudgetSpecPatchOutput) MaxUnavailable() pulumi.AnyOutput {
	return o.ApplyT(func(v PodDisruptionBudgetSpecPatch) interface{} { return v.MaxUnavailable }).(pulumi.AnyOutput)
}

// An eviction is allowed if at least "minAvailable" pods selected by "selector" will still be available after the eviction, i.e. even in the absence of the evicted pod.  So for example you can prevent all voluntary evictions by specifying "100%".
func (o PodDisruptionBudgetSpecPatchOutput) MinAvailable() pulumi.AnyOutput {
	return o.ApplyT(func(v PodDisruptionBudgetSpecPatch) interface{} { return v.MinAvailable }).(pulumi.AnyOutput)
}

// Label query over pods whose evictions are managed by the disruption budget.
func (o PodDisruptionBudgetSpecPatchOutput) Selector() metav1.LabelSelectorPatchPtrOutput {
	return o.ApplyT(func(v PodDisruptionBudgetSpecPatch) *metav1.LabelSelectorPatch { return v.Selector }).(metav1.LabelSelectorPatchPtrOutput)
}

type PodDisruptionBudgetSpecPatchPtrOutput struct{ *pulumi.OutputState }

func (PodDisruptionBudgetSpecPatchPtrOutput) ElementType() reflect.Type {
	return reflect.TypeOf((**PodDisruptionBudgetSpecPatch)(nil)).Elem()
}

func (o PodDisruptionBudgetSpecPatchPtrOutput) ToPodDisruptionBudgetSpecPatchPtrOutput() PodDisruptionBudgetSpecPatchPtrOutput {
	return o
}

func (o PodDisruptionBudgetSpecPatchPtrOutput) ToPodDisruptionBudgetSpecPatchPtrOutputWithContext(ctx context.Context) PodDisruptionBudgetSpecPatchPtrOutput {
	return o
}

func (o PodDisruptionBudgetSpecPatchPtrOutput) Elem() PodDisruptionBudgetSpecPatchOutput {
	return o.ApplyT(func(v *PodDisruptionBudgetSpecPatch) PodDisruptionBudgetSpecPatch {
		if v != nil {
			return *v
		}
		var ret PodDisruptionBudgetSpecPatch
		return ret
	}).(PodDisruptionBudgetSpecPatchOutput)
}

// An eviction is allowed if at most "maxUnavailable" pods selected by "selector" are unavailable after the eviction, i.e. even in absence of the evicted pod. For example, one can prevent all voluntary evictions by specifying 0. This is a mutually exclusive setting with "minAvailable".
func (o PodDisruptionBudgetSpecPatchPtrOutput) MaxUnavailable() pulumi.AnyOutput {
	return o.ApplyT(func(v *PodDisruptionBudgetSpecPatch) interface{} {
		if v == nil {
			return nil
		}
		return v.MaxUnavailable
	}).(pulumi.AnyOutput)
}

// An eviction is allowed if at least "minAvailable" pods selected by "selector" will still be available after the eviction, i.e. even in the absence of the evicted pod.  So for example you can prevent all voluntary evictions by specifying "100%".
func (o PodDisruptionBudgetSpecPatchPtrOutput) MinAvailable() pulumi.AnyOutput {
	return o.ApplyT(func(v *PodDisruptionBudgetSpecPatch) interface{} {
		if v == nil {
			return nil
		}
		return v.MinAvailable
	}).(pulumi.AnyOutput)
}

// Label query over pods whose evictions are managed by the disruption budget.
func (o PodDisruptionBudgetSpecPatchPtrOutput) Selector() metav1.LabelSelectorPatchPtrOutput {
	return o.ApplyT(func(v *PodDisruptionBudgetSpecPatch) *metav1.LabelSelectorPatch {
		if v == nil {
			return nil
		}
		return v.Selector
	}).(metav1.LabelSelectorPatchPtrOutput)
}

// PodDisruptionBudgetStatus represents information about the status of a PodDisruptionBudget. Status may trail the actual state of a system.
type PodDisruptionBudgetStatus struct {
	// current number of healthy pods
	CurrentHealthy int `pulumi:"currentHealthy"`
	// minimum desired number of healthy pods
	DesiredHealthy int `pulumi:"desiredHealthy"`
	// DisruptedPods contains information about pods whose eviction was processed by the API server eviction subresource handler but has not yet been observed by the PodDisruptionBudget controller. A pod will be in this map from the time when the API server processed the eviction request to the time when the pod is seen by PDB controller as having been marked for deletion (or after a timeout). The key in the map is the name of the pod and the value is the time when the API server processed the eviction request. If the deletion didn't occur and a pod is still there it will be removed from the list automatically by PodDisruptionBudget controller after some time. If everything goes smooth this map should be empty for the most of the time. Large number of entries in the map may indicate problems with pod deletions.
	DisruptedPods map[string]string `pulumi:"disruptedPods"`
	// Number of pod disruptions that are currently allowed.
	DisruptionsAllowed int `pulumi:"disruptionsAllowed"`
	// total number of pods counted by this disruption budget
	ExpectedPods int `pulumi:"expectedPods"`
	// Most recent generation observed when updating this PDB status. PodDisruptionsAllowed and other status information is valid only if observedGeneration equals to PDB's object generation.
	ObservedGeneration *int `pulumi:"observedGeneration"`
}

// PodDisruptionBudgetStatusInput is an input type that accepts PodDisruptionBudgetStatusArgs and PodDisruptionBudgetStatusOutput values.
// You can construct a concrete instance of `PodDisruptionBudgetStatusInput` via:
//
//	PodDisruptionBudgetStatusArgs{...}
type PodDisruptionBudgetStatusInput interface {
	pulumi.Input

	ToPodDisruptionBudgetStatusOutput() PodDisruptionBudgetStatusOutput
	ToPodDisruptionBudgetStatusOutputWithContext(context.Context) PodDisruptionBudgetStatusOutput
}

// PodDisruptionBudgetStatus represents information about the status of a PodDisruptionBudget. Status may trail the actual state of a system.
type PodDisruptionBudgetStatusArgs struct {
	// current number of healthy pods
	CurrentHealthy pulumi.IntInput `pulumi:"currentHealthy"`
	// minimum desired number of healthy pods
	DesiredHealthy pulumi.IntInput `pulumi:"desiredHealthy"`
	// DisruptedPods contains information about pods whose eviction was processed by the API server eviction subresource handler but has not yet been observed by the PodDisruptionBudget controller. A pod will be in this map from the time when the API server processed the eviction request to the time when the pod is seen by PDB controller as having been marked for deletion (or after a timeout). The key in the map is the name of the pod and the value is the time when the API server processed the eviction request. If the deletion didn't occur and a pod is still there it will be removed from the list automatically by PodDisruptionBudget controller after some time. If everything goes smooth this map should be empty for the most of the time. Large number of entries in the map may indicate problems with pod deletions.
	DisruptedPods pulumi.StringMapInput `pulumi:"disruptedPods"`
	// Number of pod disruptions that are currently allowed.
	DisruptionsAllowed pulumi.IntInput `pulumi:"disruptionsAllowed"`
	// total number of pods counted by this disruption budget
	ExpectedPods pulumi.IntInput `pulumi:"expectedPods"`
	// Most recent generation observed when updating this PDB status. PodDisruptionsAllowed and other status information is valid only if observedGeneration equals to PDB's object generation.
	ObservedGeneration pulumi.IntPtrInput `pulumi:"observedGeneration"`
}

func (PodDisruptionBudgetStatusArgs) ElementType() reflect.Type {
	return reflect.TypeOf((*PodDisruptionBudgetStatus)(nil)).Elem()
}

func (i PodDisruptionBudgetStatusArgs) ToPodDisruptionBudgetStatusOutput() PodDisruptionBudgetStatusOutput {
	return i.ToPodDisruptionBudgetStatusOutputWithContext(context.Background())
}

func (i PodDisruptionBudgetStatusArgs) ToPodDisruptionBudgetStatusOutputWithContext(ctx context.Context) PodDisruptionBudgetStatusOutput {
	return pulumi.ToOutputWithContext(ctx, i).(PodDisruptionBudgetStatusOutput)
}

func (i PodDisruptionBudgetStatusArgs) ToPodDisruptionBudgetStatusPtrOutput() PodDisruptionBudgetStatusPtrOutput {
	return i.ToPodDisruptionBudgetStatusPtrOutputWithContext(context.Background())
}

func (i PodDisruptionBudgetStatusArgs) ToPodDisruptionBudgetStatusPtrOutputWithContext(ctx context.Context) PodDisruptionBudgetStatusPtrOutput {
	return pulumi.ToOutputWithContext(ctx, i).(PodDisruptionBudgetStatusOutput).ToPodDisruptionBudgetStatusPtrOutputWithContext(ctx)
}

// PodDisruptionBudgetStatusPtrInput is an input type that accepts PodDisruptionBudgetStatusArgs, PodDisruptionBudgetStatusPtr and PodDisruptionBudgetStatusPtrOutput values.
// You can construct a concrete instance of `PodDisruptionBudgetStatusPtrInput` via:
//
//	        PodDisruptionBudgetStatusArgs{...}
//
//	or:
//
//	        nil
type PodDisruptionBudgetStatusPtrInput interface {
	pulumi.Input

	ToPodDisruptionBudgetStatusPtrOutput() PodDisruptionBudgetStatusPtrOutput
	ToPodDisruptionBudgetStatusPtrOutputWithContext(context.Context) PodDisruptionBudgetStatusPtrOutput
}

type podDisruptionBudgetStatusPtrType PodDisruptionBudgetStatusArgs

func PodDisruptionBudgetStatusPtr(v *PodDisruptionBudgetStatusArgs) PodDisruptionBudgetStatusPtrInput {
	return (*podDisruptionBudgetStatusPtrType)(v)
}

func (*podDisruptionBudgetStatusPtrType) ElementType() reflect.Type {
	return reflect.TypeOf((**PodDisruptionBudgetStatus)(nil)).Elem()
}

func (i *podDisruptionBudgetStatusPtrType) ToPodDisruptionBudgetStatusPtrOutput() PodDisruptionBudgetStatusPtrOutput {
	return i.ToPodDisruptionBudgetStatusPtrOutputWithContext(context.Background())
}

func (i *podDisruptionBudgetStatusPtrType) ToPodDisruptionBudgetStatusPtrOutputWithContext(ctx context.Context) PodDisruptionBudgetStatusPtrOutput {
	return pulumi.ToOutputWithContext(ctx, i).(PodDisruptionBudgetStatusPtrOutput)
}

// PodDisruptionBudgetStatus represents information about the status of a PodDisruptionBudget. Status may trail the actual state of a system.
type PodDisruptionBudgetStatusOutput struct{ *pulumi.OutputState }

func (PodDisruptionBudgetStatusOutput) ElementType() reflect.Type {
	return reflect.TypeOf((*PodDisruptionBudgetStatus)(nil)).Elem()
}

func (o PodDisruptionBudgetStatusOutput) ToPodDisruptionBudgetStatusOutput() PodDisruptionBudgetStatusOutput {
	return o
}

func (o PodDisruptionBudgetStatusOutput) ToPodDisruptionBudgetStatusOutputWithContext(ctx context.Context) PodDisruptionBudgetStatusOutput {
	return o
}

func (o PodDisruptionBudgetStatusOutput) ToPodDisruptionBudgetStatusPtrOutput() PodDisruptionBudgetStatusPtrOutput {
	return o.ToPodDisruptionBudgetStatusPtrOutputWithContext(context.Background())
}

func (o PodDisruptionBudgetStatusOutput) ToPodDisruptionBudgetStatusPtrOutputWithContext(ctx context.Context) PodDisruptionBudgetStatusPtrOutput {
	return o.ApplyTWithContext(ctx, func(_ context.Context, v PodDisruptionBudgetStatus) *PodDisruptionBudgetStatus {
		return &v
	}).(PodDisruptionBudgetStatusPtrOutput)
}

// current number of healthy pods
func (o PodDisruptionBudgetStatusOutput) CurrentHealthy() pulumi.IntOutput {
	return o.ApplyT(func(v PodDisruptionBudgetStatus) int { return v.CurrentHealthy }).(pulumi.IntOutput)
}

// minimum desired number of healthy pods
func (o PodDisruptionBudgetStatusOutput) DesiredHealthy() pulumi.IntOutput {
	return o.ApplyT(func(v PodDisruptionBudgetStatus) int { return v.DesiredHealthy }).(pulumi.IntOutput)
}

// DisruptedPods contains information about pods whose eviction was processed by the API server eviction subresource handler but has not yet been observed by the PodDisruptionBudget controller. A pod will be in this map from the time when the API server processed the eviction request to the time when the pod is seen by PDB controller as having been marked for deletion (or after a timeout). The key in the map is the name of the pod and the value is the time when the API server processed the eviction request. If the deletion didn't occur and a pod is still there it will be removed from the list automatically by PodDisruptionBudget controller after some time. If everything goes smooth this map should be empty for the most of the time. Large number of entries in the map may indicate problems with pod deletions.
func (o PodDisruptionBudgetStatusOutput) DisruptedPods() pulumi.StringMapOutput {
	return o.ApplyT(func(v PodDisruptionBudgetStatus) map[string]string { return v.DisruptedPods }).(pulumi.StringMapOutput)
}

// Number of pod disruptions that are currently allowed.
func (o PodDisruptionBudgetStatusOutput) DisruptionsAllowed() pulumi.IntOutput {
	return o.ApplyT(func(v PodDisruptionBudgetStatus) int { return v.DisruptionsAllowed }).(pulumi.IntOutput)
}

// total number of pods counted by this disruption budget
func (o PodDisruptionBudgetStatusOutput) ExpectedPods() pulumi.IntOutput {
	return o.ApplyT(func(v PodDisruptionBudgetStatus) int { return v.ExpectedPods }).(pulumi.IntOutput)
}

// Most recent generation observed when updating this PDB status. PodDisruptionsAllowed and other status information is valid only if observedGeneration equals to PDB's object generation.
func (o PodDisruptionBudgetStatusOutput) ObservedGeneration() pulumi.IntPtrOutput {
	return o.ApplyT(func(v PodDisruptionBudgetStatus) *int { return v.ObservedGeneration }).(pulumi.IntPtrOutput)
}

type PodDisruptionBudgetStatusPtrOutput struct{ *pulumi.OutputState }

func (PodDisruptionBudgetStatusPtrOutput) ElementType() reflect.Type {
	return reflect.TypeOf((**PodDisruptionBudgetStatus)(nil)).Elem()
}

func (o PodDisruptionBudgetStatusPtrOutput) ToPodDisruptionBudgetStatusPtrOutput() PodDisruptionBudgetStatusPtrOutput {
	return o
}

func (o PodDisruptionBudgetStatusPtrOutput) ToPodDisruptionBudgetStatusPtrOutputWithContext(ctx context.Context) PodDisruptionBudgetStatusPtrOutput {
	return o
}

func (o PodDisruptionBudgetStatusPtrOutput) Elem() PodDisruptionBudgetStatusOutput {
	return o.ApplyT(func(v *PodDisruptionBudgetStatus) PodDisruptionBudgetStatus {
		if v != nil {
			return *v
		}
		var ret PodDisruptionBudgetStatus
		return ret
	}).(PodDisruptionBudgetStatusOutput)
}

// current number of healthy pods
func (o PodDisruptionBudgetStatusPtrOutput) CurrentHealthy() pulumi.IntPtrOutput {
	return o.ApplyT(func(v *PodDisruptionBudgetStatus) *int {
		if v == nil {
			return nil
		}
		return &v.CurrentHealthy
	}).(pulumi.IntPtrOutput)
}

// minimum desired number of healthy pods
func (o PodDisruptionBudgetStatusPtrOutput) DesiredHealthy() pulumi.IntPtrOutput {
	return o.ApplyT(func(v *PodDisruptionBudgetStatus) *int {
		if v == nil {
			return nil
		}
		return &v.DesiredHealthy
	}).(pulumi.IntPtrOutput)
}

// DisruptedPods contains information about pods whose eviction was processed by the API server eviction subresource handler but has not yet been observed by the PodDisruptionBudget controller. A pod will be in this map from the time when the API server processed the eviction request to the time when the pod is seen by PDB controller as having been marked for deletion (or after a timeout). The key in the map is the name of the pod and the value is the time when the API server processed the eviction request. If the deletion didn't occur and a pod is still there it will be removed from the list automatically by PodDisruptionBudget controller after some time. If everything goes smooth this map should be empty for the most of the time. Large number of entries in the map may indicate problems with pod deletions.
func (o PodDisruptionBudgetStatusPtrOutput) DisruptedPods() pulumi.StringMapOutput {
	return o.ApplyT(func(v *PodDisruptionBudgetStatus) map[string]string {
		if v == nil {
			return nil
		}
		return v.DisruptedPods
	}).(pulumi.StringMapOutput)
}

// Number of pod disruptions that are currently allowed.
func (o PodDisruptionBudgetStatusPtrOutput) DisruptionsAllowed() pulumi.IntPtrOutput {
	return o.ApplyT(func(v *PodDisruptionBudgetStatus) *int {
		if v == nil {
			return nil
		}
		return &v.DisruptionsAllowed
	}).(pulumi.IntPtrOutput)
}

// total number of pods counted by this disruption budget
func (o PodDisruptionBudgetStatusPtrOutput) ExpectedPods() pulumi.IntPtrOutput {
	return o.ApplyT(func(v *PodDisruptionBudgetStatus) *int {
		if v == nil {
			return nil
		}
		return &v.ExpectedPods
	}).(pulumi.IntPtrOutput)
}

// Most recent generation observed when updating this PDB status. PodDisruptionsAllowed and other status information is valid only if observedGeneration equals to PDB's object generation.
func (o PodDisruptionBudgetStatusPtrOutput) ObservedGeneration() pulumi.IntPtrOutput {
	return o.ApplyT(func(v *PodDisruptionBudgetStatus) *int {
		if v == nil {
			return nil
		}
		return v.ObservedGeneration
	}).(pulumi.IntPtrOutput)
}

// PodDisruptionBudgetStatus represents information about the status of a PodDisruptionBudget. Status may trail the actual state of a system.
type PodDisruptionBudgetStatusPatch struct {
	// current number of healthy pods
	CurrentHealthy *int `pulumi:"currentHealthy"`
	// minimum desired number of healthy pods
	DesiredHealthy *int `pulumi:"desiredHealthy"`
	// DisruptedPods contains information about pods whose eviction was processed by the API server eviction subresource handler but has not yet been observed by the PodDisruptionBudget controller. A pod will be in this map from the time when the API server processed the eviction request to the time when the pod is seen by PDB controller as having been marked for deletion (or after a timeout). The key in the map is the name of the pod and the value is the time when the API server processed the eviction request. If the deletion didn't occur and a pod is still there it will be removed from the list automatically by PodDisruptionBudget controller after some time. If everything goes smooth this map should be empty for the most of the time. Large number of entries in the map may indicate problems with pod deletions.
	DisruptedPods map[string]string `pulumi:"disruptedPods"`
	// Number of pod disruptions that are currently allowed.
	DisruptionsAllowed *int `pulumi:"disruptionsAllowed"`
	// total number of pods counted by this disruption budget
	ExpectedPods *int `pulumi:"expectedPods"`
	// Most recent generation observed when updating this PDB status. PodDisruptionsAllowed and other status information is valid only if observedGeneration equals to PDB's object generation.
	ObservedGeneration *int `pulumi:"observedGeneration"`
}

// PodDisruptionBudgetStatusPatchInput is an input type that accepts PodDisruptionBudgetStatusPatchArgs and PodDisruptionBudgetStatusPatchOutput values.
// You can construct a concrete instance of `PodDisruptionBudgetStatusPatchInput` via:
//
//	PodDisruptionBudgetStatusPatchArgs{...}
type PodDisruptionBudgetStatusPatchInput interface {
	pulumi.Input

	ToPodDisruptionBudgetStatusPatchOutput() PodDisruptionBudgetStatusPatchOutput
	ToPodDisruptionBudgetStatusPatchOutputWithContext(context.Context) PodDisruptionBudgetStatusPatchOutput
}

// PodDisruptionBudgetStatus represents information about the status of a PodDisruptionBudget. Status may trail the actual state of a system.
type PodDisruptionBudgetStatusPatchArgs struct {
	// current number of healthy pods
	CurrentHealthy pulumi.IntPtrInput `pulumi:"currentHealthy"`
	// minimum desired number of healthy pods
	DesiredHealthy pulumi.IntPtrInput `pulumi:"desiredHealthy"`
	// DisruptedPods contains information about pods whose eviction was processed by the API server eviction subresource handler but has not yet been observed by the PodDisruptionBudget controller. A pod will be in this map from the time when the API server processed the eviction request to the time when the pod is seen by PDB controller as having been marked for deletion (or after a timeout). The key in the map is the name of the pod and the value is the time when the API server processed the eviction request. If the deletion didn't occur and a pod is still there it will be removed from the list automatically by PodDisruptionBudget controller after some time. If everything goes smooth this map should be empty for the most of the time. Large number of entries in the map may indicate problems with pod deletions.
	DisruptedPods pulumi.StringMapInput `pulumi:"disruptedPods"`
	// Number of pod disruptions that are currently allowed.
	DisruptionsAllowed pulumi.IntPtrInput `pulumi:"disruptionsAllowed"`
	// total number of pods counted by this disruption budget
	ExpectedPods pulumi.IntPtrInput `pulumi:"expectedPods"`
	// Most recent generation observed when updating this PDB status. PodDisruptionsAllowed and other status information is valid only if observedGeneration equals to PDB's object generation.
	ObservedGeneration pulumi.IntPtrInput `pulumi:"observedGeneration"`
}

func (PodDisruptionBudgetStatusPatchArgs) ElementType() reflect.Type {
	return reflect.TypeOf((*PodDisruptionBudgetStatusPatch)(nil)).Elem()
}

func (i PodDisruptionBudgetStatusPatchArgs) ToPodDisruptionBudgetStatusPatchOutput() PodDisruptionBudgetStatusPatchOutput {
	return i.ToPodDisruptionBudgetStatusPatchOutputWithContext(context.Background())
}

func (i PodDisruptionBudgetStatusPatchArgs) ToPodDisruptionBudgetStatusPatchOutputWithContext(ctx context.Context) PodDisruptionBudgetStatusPatchOutput {
	return pulumi.ToOutputWithContext(ctx, i).(PodDisruptionBudgetStatusPatchOutput)
}

func (i PodDisruptionBudgetStatusPatchArgs) ToPodDisruptionBudgetStatusPatchPtrOutput() PodDisruptionBudgetStatusPatchPtrOutput {
	return i.ToPodDisruptionBudgetStatusPatchPtrOutputWithContext(context.Background())
}

func (i PodDisruptionBudgetStatusPatchArgs) ToPodDisruptionBudgetStatusPatchPtrOutputWithContext(ctx context.Context) PodDisruptionBudgetStatusPatchPtrOutput {
	return pulumi.ToOutputWithContext(ctx, i).(PodDisruptionBudgetStatusPatchOutput).ToPodDisruptionBudgetStatusPatchPtrOutputWithContext(ctx)
}

// PodDisruptionBudgetStatusPatchPtrInput is an input type that accepts PodDisruptionBudgetStatusPatchArgs, PodDisruptionBudgetStatusPatchPtr and PodDisruptionBudgetStatusPatchPtrOutput values.
// You can construct a concrete instance of `PodDisruptionBudgetStatusPatchPtrInput` via:
//
//	        PodDisruptionBudgetStatusPatchArgs{...}
//
//	or:
//
//	        nil
type PodDisruptionBudgetStatusPatchPtrInput interface {
	pulumi.Input

	ToPodDisruptionBudgetStatusPatchPtrOutput() PodDisruptionBudgetStatusPatchPtrOutput
	ToPodDisruptionBudgetStatusPatchPtrOutputWithContext(context.Context) PodDisruptionBudgetStatusPatchPtrOutput
}

type podDisruptionBudgetStatusPatchPtrType PodDisruptionBudgetStatusPatchArgs

func PodDisruptionBudgetStatusPatchPtr(v *PodDisruptionBudgetStatusPatchArgs) PodDisruptionBudgetStatusPatchPtrInput {
	return (*podDisruptionBudgetStatusPatchPtrType)(v)
}

func (*podDisruptionBudgetStatusPatchPtrType) ElementType() reflect.Type {
	return reflect.TypeOf((**PodDisruptionBudgetStatusPatch)(nil)).Elem()
}

func (i *podDisruptionBudgetStatusPatchPtrType) ToPodDisruptionBudgetStatusPatchPtrOutput() PodDisruptionBudgetStatusPatchPtrOutput {
	return i.ToPodDisruptionBudgetStatusPatchPtrOutputWithContext(context.Background())
}

func (i *podDisruptionBudgetStatusPatchPtrType) ToPodDisruptionBudgetStatusPatchPtrOutputWithContext(ctx context.Context) PodDisruptionBudgetStatusPatchPtrOutput {
	return pulumi.ToOutputWithContext(ctx, i).(PodDisruptionBudgetStatusPatchPtrOutput)
}

// PodDisruptionBudgetStatus represents information about the status of a PodDisruptionBudget. Status may trail the actual state of a system.
type PodDisruptionBudgetStatusPatchOutput struct{ *pulumi.OutputState }

func (PodDisruptionBudgetStatusPatchOutput) ElementType() reflect.Type {
	return reflect.TypeOf((*PodDisruptionBudgetStatusPatch)(nil)).Elem()
}

func (o PodDisruptionBudgetStatusPatchOutput) ToPodDisruptionBudgetStatusPatchOutput() PodDisruptionBudgetStatusPatchOutput {
	return o
}

func (o PodDisruptionBudgetStatusPatchOutput) ToPodDisruptionBudgetStatusPatchOutputWithContext(ctx context.Context) PodDisruptionBudgetStatusPatchOutput {
	return o
}

func (o PodDisruptionBudgetStatusPatchOutput) ToPodDisruptionBudgetStatusPatchPtrOutput() PodDisruptionBudgetStatusPatchPtrOutput {
	return o.ToPodDisruptionBudgetStatusPatchPtrOutputWithContext(context.Background())
}

func (o PodDisruptionBudgetStatusPatchOutput) ToPodDisruptionBudgetStatusPatchPtrOutputWithContext(ctx context.Context) PodDisruptionBudgetStatusPatchPtrOutput {
	return o.ApplyTWithContext(ctx, func(_ context.Context, v PodDisruptionBudgetStatusPatch) *PodDisruptionBudgetStatusPatch {
		return &v
	}).(PodDisruptionBudgetStatusPatchPtrOutput)
}

// current number of healthy pods
func (o PodDisruptionBudgetStatusPatchOutput) CurrentHealthy() pulumi.IntPtrOutput {
	return o.ApplyT(func(v PodDisruptionBudgetStatusPatch) *int { return v.CurrentHealthy }).(pulumi.IntPtrOutput)
}

// minimum desired number of healthy pods
func (o PodDisruptionBudgetStatusPatchOutput) DesiredHealthy() pulumi.IntPtrOutput {
	return o.ApplyT(func(v PodDisruptionBudgetStatusPatch) *int { return v.DesiredHealthy }).(pulumi.IntPtrOutput)
}

// DisruptedPods contains information about pods whose eviction was processed by the API server eviction subresource handler but has not yet been observed by the PodDisruptionBudget controller. A pod will be in this map from the time when the API server processed the eviction request to the time when the pod is seen by PDB controller as having been marked for deletion (or after a timeout). The key in the map is the name of the pod and the value is the time when the API server processed the eviction request. If the deletion didn't occur and a pod is still there it will be removed from the list automatically by PodDisruptionBudget controller after some time. If everything goes smooth this map should be empty for the most of the time. Large number of entries in the map may indicate problems with pod deletions.
func (o PodDisruptionBudgetStatusPatchOutput) DisruptedPods() pulumi.StringMapOutput {
	return o.ApplyT(func(v PodDisruptionBudgetStatusPatch) map[string]string { return v.DisruptedPods }).(pulumi.StringMapOutput)
}

// Number of pod disruptions that are currently allowed.
func (o PodDisruptionBudgetStatusPatchOutput) DisruptionsAllowed() pulumi.IntPtrOutput {
	return o.ApplyT(func(v PodDisruptionBudgetStatusPatch) *int { return v.DisruptionsAllowed }).(pulumi.IntPtrOutput)
}

// total number of pods counted by this disruption budget
func (o PodDisruptionBudgetStatusPatchOutput) ExpectedPods() pulumi.IntPtrOutput {
	return o.ApplyT(func(v PodDisruptionBudgetStatusPatch) *int { return v.ExpectedPods }).(pulumi.IntPtrOutput)
}

// Most recent generation observed when updating this PDB status. PodDisruptionsAllowed and other status information is valid only if observedGeneration equals to PDB's object generation.
func (o PodDisruptionBudgetStatusPatchOutput) ObservedGeneration() pulumi.IntPtrOutput {
	return o.ApplyT(func(v PodDisruptionBudgetStatusPatch) *int { return v.ObservedGeneration }).(pulumi.IntPtrOutput)
}

type PodDisruptionBudgetStatusPatchPtrOutput struct{ *pulumi.OutputState }

func (PodDisruptionBudgetStatusPatchPtrOutput) ElementType() reflect.Type {
	return reflect.TypeOf((**PodDisruptionBudgetStatusPatch)(nil)).Elem()
}

func (o PodDisruptionBudgetStatusPatchPtrOutput) ToPodDisruptionBudgetStatusPatchPtrOutput() PodDisruptionBudgetStatusPatchPtrOutput {
	return o
}

func (o PodDisruptionBudgetStatusPatchPtrOutput) ToPodDisruptionBudgetStatusPatchPtrOutputWithContext(ctx context.Context) PodDisruptionBudgetStatusPatchPtrOutput {
	return o
}

func (o PodDisruptionBudgetStatusPatchPtrOutput) Elem() PodDisruptionBudgetStatusPatchOutput {
	return o.ApplyT(func(v *PodDisruptionBudgetStatusPatch) PodDisruptionBudgetStatusPatch {
		if v != nil {
			return *v
		}
		var ret PodDisruptionBudgetStatusPatch
		return ret
	}).(PodDisruptionBudgetStatusPatchOutput)
}

// current number of healthy pods
func (o PodDisruptionBudgetStatusPatchPtrOutput) CurrentHealthy() pulumi.IntPtrOutput {
	return o.ApplyT(func(v *PodDisruptionBudgetStatusPatch) *int {
		if v == nil {
			return nil
		}
		return v.CurrentHealthy
	}).(pulumi.IntPtrOutput)
}

// minimum desired number of healthy pods
func (o PodDisruptionBudgetStatusPatchPtrOutput) DesiredHealthy() pulumi.IntPtrOutput {
	return o.ApplyT(func(v *PodDisruptionBudgetStatusPatch) *int {
		if v == nil {
			return nil
		}
		return v.DesiredHealthy
	}).(pulumi.IntPtrOutput)
}

// DisruptedPods contains information about pods whose eviction was processed by the API server eviction subresource handler but has not yet been observed by the PodDisruptionBudget controller. A pod will be in this map from the time when the API server processed the eviction request to the time when the pod is seen by PDB controller as having been marked for deletion (or after a timeout). The key in the map is the name of the pod and the value is the time when the API server processed the eviction request. If the deletion didn't occur and a pod is still there it will be removed from the list automatically by PodDisruptionBudget controller after some time. If everything goes smooth this map should be empty for the most of the time. Large number of entries in the map may indicate problems with pod deletions.
func (o PodDisruptionBudgetStatusPatchPtrOutput) DisruptedPods() pulumi.StringMapOutput {
	return o.ApplyT(func(v *PodDisruptionBudgetStatusPatch) map[string]string {
		if v == nil {
			return nil
		}
		return v.DisruptedPods
	}).(pulumi.StringMapOutput)
}

// Number of pod disruptions that are currently allowed.
func (o PodDisruptionBudgetStatusPatchPtrOutput) DisruptionsAllowed() pulumi.IntPtrOutput {
	return o.ApplyT(func(v *PodDisruptionBudgetStatusPatch) *int {
		if v == nil {
			return nil
		}
		return v.DisruptionsAllowed
	}).(pulumi.IntPtrOutput)
}

// total number of pods counted by this disruption budget
func (o PodDisruptionBudgetStatusPatchPtrOutput) ExpectedPods() pulumi.IntPtrOutput {
	return o.ApplyT(func(v *PodDisruptionBudgetStatusPatch) *int {
		if v == nil {
			return nil
		}
		return v.ExpectedPods
	}).(pulumi.IntPtrOutput)
}

// Most recent generation observed when updating this PDB status. PodDisruptionsAllowed and other status information is valid only if observedGeneration equals to PDB's object generation.
func (o PodDisruptionBudgetStatusPatchPtrOutput) ObservedGeneration() pulumi.IntPtrOutput {
	return o.ApplyT(func(v *PodDisruptionBudgetStatusPatch) *int {
		if v == nil {
			return nil
		}
		return v.ObservedGeneration
	}).(pulumi.IntPtrOutput)
}

// PodSecurityPolicy governs the ability to make requests that affect the Security Context that will be applied to a pod and container.
type PodSecurityPolicyType struct {
	// APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
	ApiVersion *string `pulumi:"apiVersion"`
	// Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
	Kind *string `pulumi:"kind"`
	// Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
	Metadata *metav1.ObjectMeta `pulumi:"metadata"`
	// spec defines the policy enforced.
	Spec *PodSecurityPolicySpec `pulumi:"spec"`
}

// PodSecurityPolicyTypeInput is an input type that accepts PodSecurityPolicyTypeArgs and PodSecurityPolicyTypeOutput values.
// You can construct a concrete instance of `PodSecurityPolicyTypeInput` via:
//
//	PodSecurityPolicyTypeArgs{...}
type PodSecurityPolicyTypeInput interface {
	pulumi.Input

	ToPodSecurityPolicyTypeOutput() PodSecurityPolicyTypeOutput
	ToPodSecurityPolicyTypeOutputWithContext(context.Context) PodSecurityPolicyTypeOutput
}

// PodSecurityPolicy governs the ability to make requests that affect the Security Context that will be applied to a pod and container.
type PodSecurityPolicyTypeArgs struct {
	// APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
	ApiVersion pulumi.StringPtrInput `pulumi:"apiVersion"`
	// Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
	Kind pulumi.StringPtrInput `pulumi:"kind"`
	// Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
	Metadata metav1.ObjectMetaPtrInput `pulumi:"metadata"`
	// spec defines the policy enforced.
	Spec PodSecurityPolicySpecPtrInput `pulumi:"spec"`
}

func (PodSecurityPolicyTypeArgs) ElementType() reflect.Type {
	return reflect.TypeOf((*PodSecurityPolicyType)(nil)).Elem()
}

func (i PodSecurityPolicyTypeArgs) ToPodSecurityPolicyTypeOutput() PodSecurityPolicyTypeOutput {
	return i.ToPodSecurityPolicyTypeOutputWithContext(context.Background())
}

func (i PodSecurityPolicyTypeArgs) ToPodSecurityPolicyTypeOutputWithContext(ctx context.Context) PodSecurityPolicyTypeOutput {
	return pulumi.ToOutputWithContext(ctx, i).(PodSecurityPolicyTypeOutput)
}

// PodSecurityPolicyTypeArrayInput is an input type that accepts PodSecurityPolicyTypeArray and PodSecurityPolicyTypeArrayOutput values.
// You can construct a concrete instance of `PodSecurityPolicyTypeArrayInput` via:
//
//	PodSecurityPolicyTypeArray{ PodSecurityPolicyTypeArgs{...} }
type PodSecurityPolicyTypeArrayInput interface {
	pulumi.Input

	ToPodSecurityPolicyTypeArrayOutput() PodSecurityPolicyTypeArrayOutput
	ToPodSecurityPolicyTypeArrayOutputWithContext(context.Context) PodSecurityPolicyTypeArrayOutput
}

type PodSecurityPolicyTypeArray []PodSecurityPolicyTypeInput

func (PodSecurityPolicyTypeArray) ElementType() reflect.Type {
	return reflect.TypeOf((*[]PodSecurityPolicyType)(nil)).Elem()
}

func (i PodSecurityPolicyTypeArray) ToPodSecurityPolicyTypeArrayOutput() PodSecurityPolicyTypeArrayOutput {
	return i.ToPodSecurityPolicyTypeArrayOutputWithContext(context.Background())
}

func (i PodSecurityPolicyTypeArray) ToPodSecurityPolicyTypeArrayOutputWithContext(ctx context.Context) PodSecurityPolicyTypeArrayOutput {
	return pulumi.ToOutputWithContext(ctx, i).(PodSecurityPolicyTypeArrayOutput)
}

// PodSecurityPolicy governs the ability to make requests that affect the Security Context that will be applied to a pod and container.
type PodSecurityPolicyTypeOutput struct{ *pulumi.OutputState }

func (PodSecurityPolicyTypeOutput) ElementType() reflect.Type {
	return reflect.TypeOf((*PodSecurityPolicyType)(nil)).Elem()
}

func (o PodSecurityPolicyTypeOutput) ToPodSecurityPolicyTypeOutput() PodSecurityPolicyTypeOutput {
	return o
}

func (o PodSecurityPolicyTypeOutput) ToPodSecurityPolicyTypeOutputWithContext(ctx context.Context) PodSecurityPolicyTypeOutput {
	return o
}

// APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
func (o PodSecurityPolicyTypeOutput) ApiVersion() pulumi.StringPtrOutput {
	return o.ApplyT(func(v PodSecurityPolicyType) *string { return v.ApiVersion }).(pulumi.StringPtrOutput)
}

// Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
func (o PodSecurityPolicyTypeOutput) Kind() pulumi.StringPtrOutput {
	return o.ApplyT(func(v PodSecurityPolicyType) *string { return v.Kind }).(pulumi.StringPtrOutput)
}

// Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
func (o PodSecurityPolicyTypeOutput) Metadata() metav1.ObjectMetaPtrOutput {
	return o.ApplyT(func(v PodSecurityPolicyType) *metav1.ObjectMeta { return v.Metadata }).(metav1.ObjectMetaPtrOutput)
}

// spec defines the policy enforced.
func (o PodSecurityPolicyTypeOutput) Spec() PodSecurityPolicySpecPtrOutput {
	return o.ApplyT(func(v PodSecurityPolicyType) *PodSecurityPolicySpec { return v.Spec }).(PodSecurityPolicySpecPtrOutput)
}

type PodSecurityPolicyTypeArrayOutput struct{ *pulumi.OutputState }

func (PodSecurityPolicyTypeArrayOutput) ElementType() reflect.Type {
	return reflect.TypeOf((*[]PodSecurityPolicyType)(nil)).Elem()
}

func (o PodSecurityPolicyTypeArrayOutput) ToPodSecurityPolicyTypeArrayOutput() PodSecurityPolicyTypeArrayOutput {
	return o
}

func (o PodSecurityPolicyTypeArrayOutput) ToPodSecurityPolicyTypeArrayOutputWithContext(ctx context.Context) PodSecurityPolicyTypeArrayOutput {
	return o
}

func (o PodSecurityPolicyTypeArrayOutput) Index(i pulumi.IntInput) PodSecurityPolicyTypeOutput {
	return pulumi.All(o, i).ApplyT(func(vs []interface{}) PodSecurityPolicyType {
		return vs[0].([]PodSecurityPolicyType)[vs[1].(int)]
	}).(PodSecurityPolicyTypeOutput)
}

// PodSecurityPolicyList is a list of PodSecurityPolicy objects.
type PodSecurityPolicyListType struct {
	// APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
	ApiVersion *string `pulumi:"apiVersion"`
	// items is a list of schema objects.
	Items []PodSecurityPolicyType `pulumi:"items"`
	// Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
	Kind *string `pulumi:"kind"`
	// Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
	Metadata *metav1.ListMeta `pulumi:"metadata"`
}

// PodSecurityPolicyListTypeInput is an input type that accepts PodSecurityPolicyListTypeArgs and PodSecurityPolicyListTypeOutput values.
// You can construct a concrete instance of `PodSecurityPolicyListTypeInput` via:
//
//	PodSecurityPolicyListTypeArgs{...}
type PodSecurityPolicyListTypeInput interface {
	pulumi.Input

	ToPodSecurityPolicyListTypeOutput() PodSecurityPolicyListTypeOutput
	ToPodSecurityPolicyListTypeOutputWithContext(context.Context) PodSecurityPolicyListTypeOutput
}

// PodSecurityPolicyList is a list of PodSecurityPolicy objects.
type PodSecurityPolicyListTypeArgs struct {
	// APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
	ApiVersion pulumi.StringPtrInput `pulumi:"apiVersion"`
	// items is a list of schema objects.
	Items PodSecurityPolicyTypeArrayInput `pulumi:"items"`
	// Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
	Kind pulumi.StringPtrInput `pulumi:"kind"`
	// Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
	Metadata metav1.ListMetaPtrInput `pulumi:"metadata"`
}

func (PodSecurityPolicyListTypeArgs) ElementType() reflect.Type {
	return reflect.TypeOf((*PodSecurityPolicyListType)(nil)).Elem()
}

func (i PodSecurityPolicyListTypeArgs) ToPodSecurityPolicyListTypeOutput() PodSecurityPolicyListTypeOutput {
	return i.ToPodSecurityPolicyListTypeOutputWithContext(context.Background())
}

func (i PodSecurityPolicyListTypeArgs) ToPodSecurityPolicyListTypeOutputWithContext(ctx context.Context) PodSecurityPolicyListTypeOutput {
	return pulumi.ToOutputWithContext(ctx, i).(PodSecurityPolicyListTypeOutput)
}

// PodSecurityPolicyList is a list of PodSecurityPolicy objects.
type PodSecurityPolicyListTypeOutput struct{ *pulumi.OutputState }

func (PodSecurityPolicyListTypeOutput) ElementType() reflect.Type {
	return reflect.TypeOf((*PodSecurityPolicyListType)(nil)).Elem()
}

func (o PodSecurityPolicyListTypeOutput) ToPodSecurityPolicyListTypeOutput() PodSecurityPolicyListTypeOutput {
	return o
}

func (o PodSecurityPolicyListTypeOutput) ToPodSecurityPolicyListTypeOutputWithContext(ctx context.Context) PodSecurityPolicyListTypeOutput {
	return o
}

// APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
func (o PodSecurityPolicyListTypeOutput) ApiVersion() pulumi.StringPtrOutput {
	return o.ApplyT(func(v PodSecurityPolicyListType) *string { return v.ApiVersion }).(pulumi.StringPtrOutput)
}

// items is a list of schema objects.
func (o PodSecurityPolicyListTypeOutput) Items() PodSecurityPolicyTypeArrayOutput {
	return o.ApplyT(func(v PodSecurityPolicyListType) []PodSecurityPolicyType { return v.Items }).(PodSecurityPolicyTypeArrayOutput)
}

// Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
func (o PodSecurityPolicyListTypeOutput) Kind() pulumi.StringPtrOutput {
	return o.ApplyT(func(v PodSecurityPolicyListType) *string { return v.Kind }).(pulumi.StringPtrOutput)
}

// Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
func (o PodSecurityPolicyListTypeOutput) Metadata() metav1.ListMetaPtrOutput {
	return o.ApplyT(func(v PodSecurityPolicyListType) *metav1.ListMeta { return v.Metadata }).(metav1.ListMetaPtrOutput)
}

// PodSecurityPolicy governs the ability to make requests that affect the Security Context that will be applied to a pod and container.
type PodSecurityPolicyPatchType struct {
	// APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
	ApiVersion *string `pulumi:"apiVersion"`
	// Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
	Kind *string `pulumi:"kind"`
	// Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
	Metadata *metav1.ObjectMetaPatch `pulumi:"metadata"`
	// spec defines the policy enforced.
	Spec *PodSecurityPolicySpecPatch `pulumi:"spec"`
}

// PodSecurityPolicyPatchTypeInput is an input type that accepts PodSecurityPolicyPatchTypeArgs and PodSecurityPolicyPatchTypeOutput values.
// You can construct a concrete instance of `PodSecurityPolicyPatchTypeInput` via:
//
//	PodSecurityPolicyPatchTypeArgs{...}
type PodSecurityPolicyPatchTypeInput interface {
	pulumi.Input

	ToPodSecurityPolicyPatchTypeOutput() PodSecurityPolicyPatchTypeOutput
	ToPodSecurityPolicyPatchTypeOutputWithContext(context.Context) PodSecurityPolicyPatchTypeOutput
}

// PodSecurityPolicy governs the ability to make requests that affect the Security Context that will be applied to a pod and container.
type PodSecurityPolicyPatchTypeArgs struct {
	// APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
	ApiVersion pulumi.StringPtrInput `pulumi:"apiVersion"`
	// Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
	Kind pulumi.StringPtrInput `pulumi:"kind"`
	// Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
	Metadata metav1.ObjectMetaPatchPtrInput `pulumi:"metadata"`
	// spec defines the policy enforced.
	Spec PodSecurityPolicySpecPatchPtrInput `pulumi:"spec"`
}

func (PodSecurityPolicyPatchTypeArgs) ElementType() reflect.Type {
	return reflect.TypeOf((*PodSecurityPolicyPatchType)(nil)).Elem()
}

func (i PodSecurityPolicyPatchTypeArgs) ToPodSecurityPolicyPatchTypeOutput() PodSecurityPolicyPatchTypeOutput {
	return i.ToPodSecurityPolicyPatchTypeOutputWithContext(context.Background())
}

func (i PodSecurityPolicyPatchTypeArgs) ToPodSecurityPolicyPatchTypeOutputWithContext(ctx context.Context) PodSecurityPolicyPatchTypeOutput {
	return pulumi.ToOutputWithContext(ctx, i).(PodSecurityPolicyPatchTypeOutput)
}

// PodSecurityPolicy governs the ability to make requests that affect the Security Context that will be applied to a pod and container.
type PodSecurityPolicyPatchTypeOutput struct{ *pulumi.OutputState }

func (PodSecurityPolicyPatchTypeOutput) ElementType() reflect.Type {
	return reflect.TypeOf((*PodSecurityPolicyPatchType)(nil)).Elem()
}

func (o PodSecurityPolicyPatchTypeOutput) ToPodSecurityPolicyPatchTypeOutput() PodSecurityPolicyPatchTypeOutput {
	return o
}

func (o PodSecurityPolicyPatchTypeOutput) ToPodSecurityPolicyPatchTypeOutputWithContext(ctx context.Context) PodSecurityPolicyPatchTypeOutput {
	return o
}

// APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
func (o PodSecurityPolicyPatchTypeOutput) ApiVersion() pulumi.StringPtrOutput {
	return o.ApplyT(func(v PodSecurityPolicyPatchType) *string { return v.ApiVersion }).(pulumi.StringPtrOutput)
}

// Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
func (o PodSecurityPolicyPatchTypeOutput) Kind() pulumi.StringPtrOutput {
	return o.ApplyT(func(v PodSecurityPolicyPatchType) *string { return v.Kind }).(pulumi.StringPtrOutput)
}

// Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
func (o PodSecurityPolicyPatchTypeOutput) Metadata() metav1.ObjectMetaPatchPtrOutput {
	return o.ApplyT(func(v PodSecurityPolicyPatchType) *metav1.ObjectMetaPatch { return v.Metadata }).(metav1.ObjectMetaPatchPtrOutput)
}

// spec defines the policy enforced.
func (o PodSecurityPolicyPatchTypeOutput) Spec() PodSecurityPolicySpecPatchPtrOutput {
	return o.ApplyT(func(v PodSecurityPolicyPatchType) *PodSecurityPolicySpecPatch { return v.Spec }).(PodSecurityPolicySpecPatchPtrOutput)
}

// PodSecurityPolicySpec defines the policy enforced.
type PodSecurityPolicySpec struct {
	// allowPrivilegeEscalation determines if a pod can request to allow privilege escalation. If unspecified, defaults to true.
	AllowPrivilegeEscalation *bool `pulumi:"allowPrivilegeEscalation"`
	// AllowedCSIDrivers is a whitelist of inline CSI drivers that must be explicitly set to be embedded within a pod spec. An empty value indicates that any CSI driver can be used for inline ephemeral volumes. This is an alpha field, and is only honored if the API server enables the CSIInlineVolume feature gate.
	AllowedCSIDrivers []AllowedCSIDriver `pulumi:"allowedCSIDrivers"`
	// allowedCapabilities is a list of capabilities that can be requested to add to the container. Capabilities in this field may be added at the pod author's discretion. You must not list a capability in both allowedCapabilities and requiredDropCapabilities.
	AllowedCapabilities []string `pulumi:"allowedCapabilities"`
	// allowedFlexVolumes is a whitelist of allowed Flexvolumes.  Empty or nil indicates that all Flexvolumes may be used.  This parameter is effective only when the usage of the Flexvolumes is allowed in the "volumes" field.
	AllowedFlexVolumes []AllowedFlexVolume `pulumi:"allowedFlexVolumes"`
	// allowedHostPaths is a white list of allowed host paths. Empty indicates that all host paths may be used.
	AllowedHostPaths []AllowedHostPath `pulumi:"allowedHostPaths"`
	// AllowedProcMountTypes is a whitelist of allowed ProcMountTypes. Empty or nil indicates that only the DefaultProcMountType may be used. This requires the ProcMountType feature flag to be enabled.
	AllowedProcMountTypes []string `pulumi:"allowedProcMountTypes"`
	// allowedUnsafeSysctls is a list of explicitly allowed unsafe sysctls, defaults to none. Each entry is either a plain sysctl name or ends in "*" in which case it is considered as a prefix of allowed sysctls. Single * means all unsafe sysctls are allowed. Kubelet has to whitelist all allowed unsafe sysctls explicitly to avoid rejection.
	//
	// Examples: e.g. "foo/*" allows "foo/bar", "foo/baz", etc. e.g. "foo.*" allows "foo.bar", "foo.baz", etc.
	AllowedUnsafeSysctls []string `pulumi:"allowedUnsafeSysctls"`
	// defaultAddCapabilities is the default set of capabilities that will be added to the container unless the pod spec specifically drops the capability.  You may not list a capability in both defaultAddCapabilities and requiredDropCapabilities. Capabilities added here are implicitly allowed, and need not be included in the allowedCapabilities list.
	DefaultAddCapabilities []string `pulumi:"defaultAddCapabilities"`
	// defaultAllowPrivilegeEscalation controls the default setting for whether a process can gain more privileges than its parent process.
	DefaultAllowPrivilegeEscalation *bool `pulumi:"defaultAllowPrivilegeEscalation"`
	// forbiddenSysctls is a list of explicitly forbidden sysctls, defaults to none. Each entry is either a plain sysctl name or ends in "*" in which case it is considered as a prefix of forbidden sysctls. Single * means all sysctls are forbidden.
	//
	// Examples: e.g. "foo/*" forbids "foo/bar", "foo/baz", etc. e.g. "foo.*" forbids "foo.bar", "foo.baz", etc.
	ForbiddenSysctls []string `pulumi:"forbiddenSysctls"`
	// fsGroup is the strategy that will dictate what fs group is used by the SecurityContext.
	FsGroup FSGroupStrategyOptions `pulumi:"fsGroup"`
	// hostIPC determines if the policy allows the use of HostIPC in the pod spec.
	HostIPC *bool `pulumi:"hostIPC"`
	// hostNetwork determines if the policy allows the use of HostNetwork in the pod spec.
	HostNetwork *bool `pulumi:"hostNetwork"`
	// hostPID determines if the policy allows the use of HostPID in the pod spec.
	HostPID *bool `pulumi:"hostPID"`
	// hostPorts determines which host port ranges are allowed to be exposed.
	HostPorts []HostPortRange `pulumi:"hostPorts"`
	// privileged determines if a pod can request to be run as privileged.
	Privileged *bool `pulumi:"privileged"`
	// readOnlyRootFilesystem when set to true will force containers to run with a read only root file system.  If the container specifically requests to run with a non-read only root file system the PSP should deny the pod. If set to false the container may run with a read only root file system if it wishes but it will not be forced to.
	ReadOnlyRootFilesystem *bool `pulumi:"readOnlyRootFilesystem"`
	// requiredDropCapabilities are the capabilities that will be dropped from the container.  These are required to be dropped and cannot be added.
	RequiredDropCapabilities []string `pulumi:"requiredDropCapabilities"`
	// RunAsGroup is the strategy that will dictate the allowable RunAsGroup values that may be set. If this field is omitted, the pod's RunAsGroup can take any value. This field requires the RunAsGroup feature gate to be enabled.
	RunAsGroup *RunAsGroupStrategyOptions `pulumi:"runAsGroup"`
	// runAsUser is the strategy that will dictate the allowable RunAsUser values that may be set.
	RunAsUser RunAsUserStrategyOptions `pulumi:"runAsUser"`
	// runtimeClass is the strategy that will dictate the allowable RuntimeClasses for a pod. If this field is omitted, the pod's runtimeClassName field is unrestricted. Enforcement of this field depends on the RuntimeClass feature gate being enabled.
	RuntimeClass *RuntimeClassStrategyOptions `pulumi:"runtimeClass"`
	// seLinux is the strategy that will dictate the allowable labels that may be set.
	SeLinux SELinuxStrategyOptions `pulumi:"seLinux"`
	// supplementalGroups is the strategy that will dictate what supplemental groups are used by the SecurityContext.
	SupplementalGroups SupplementalGroupsStrategyOptions `pulumi:"supplementalGroups"`
	// volumes is a white list of allowed volume plugins. Empty indicates that no volumes may be used. To allow all volumes you may use '*'.
	Volumes []string `pulumi:"volumes"`
}

// PodSecurityPolicySpecInput is an input type that accepts PodSecurityPolicySpecArgs and PodSecurityPolicySpecOutput values.
// You can construct a concrete instance of `PodSecurityPolicySpecInput` via:
//
//	PodSecurityPolicySpecArgs{...}
type PodSecurityPolicySpecInput interface {
	pulumi.Input

	ToPodSecurityPolicySpecOutput() PodSecurityPolicySpecOutput
	ToPodSecurityPolicySpecOutputWithContext(context.Context) PodSecurityPolicySpecOutput
}

// PodSecurityPolicySpec defines the policy enforced.
type PodSecurityPolicySpecArgs struct {
	// allowPrivilegeEscalation determines if a pod can request to allow privilege escalation. If unspecified, defaults to true.
	AllowPrivilegeEscalation pulumi.BoolPtrInput `pulumi:"allowPrivilegeEscalation"`
	// AllowedCSIDrivers is a whitelist of inline CSI drivers that must be explicitly set to be embedded within a pod spec. An empty value indicates that any CSI driver can be used for inline ephemeral volumes. This is an alpha field, and is only honored if the API server enables the CSIInlineVolume feature gate.
	AllowedCSIDrivers AllowedCSIDriverArrayInput `pulumi:"allowedCSIDrivers"`
	// allowedCapabilities is a list of capabilities that can be requested to add to the container. Capabilities in this field may be added at the pod author's discretion. You must not list a capability in both allowedCapabilities and requiredDropCapabilities.
	AllowedCapabilities pulumi.StringArrayInput `pulumi:"allowedCapabilities"`
	// allowedFlexVolumes is a whitelist of allowed Flexvolumes.  Empty or nil indicates that all Flexvolumes may be used.  This parameter is effective only when the usage of the Flexvolumes is allowed in the "volumes" field.
	AllowedFlexVolumes AllowedFlexVolumeArrayInput `pulumi:"allowedFlexVolumes"`
	// allowedHostPaths is a white list of allowed host paths. Empty indicates that all host paths may be used.
	AllowedHostPaths AllowedHostPathArrayInput `pulumi:"allowedHostPaths"`
	// AllowedProcMountTypes is a whitelist of allowed ProcMountTypes. Empty or nil indicates that only the DefaultProcMountType may be used. This requires the ProcMountType feature flag to be enabled.
	AllowedProcMountTypes pulumi.StringArrayInput `pulumi:"allowedProcMountTypes"`
	// allowedUnsafeSysctls is a list of explicitly allowed unsafe sysctls, defaults to none. Each entry is either a plain sysctl name or ends in "*" in which case it is considered as a prefix of allowed sysctls. Single * means all unsafe sysctls are allowed. Kubelet has to whitelist all allowed unsafe sysctls explicitly to avoid rejection.
	//
	// Examples: e.g. "foo/*" allows "foo/bar", "foo/baz", etc. e.g. "foo.*" allows "foo.bar", "foo.baz", etc.
	AllowedUnsafeSysctls pulumi.StringArrayInput `pulumi:"allowedUnsafeSysctls"`
	// defaultAddCapabilities is the default set of capabilities that will be added to the container unless the pod spec specifically drops the capability.  You may not list a capability in both defaultAddCapabilities and requiredDropCapabilities. Capabilities added here are implicitly allowed, and need not be included in the allowedCapabilities list.
	DefaultAddCapabilities pulumi.StringArrayInput `pulumi:"defaultAddCapabilities"`
	// defaultAllowPrivilegeEscalation controls the default setting for whether a process can gain more privileges than its parent process.
	DefaultAllowPrivilegeEscalation pulumi.BoolPtrInput `pulumi:"defaultAllowPrivilegeEscalation"`
	// forbiddenSysctls is a list of explicitly forbidden sysctls, defaults to none. Each entry is either a plain sysctl name or ends in "*" in which case it is considered as a prefix of forbidden sysctls. Single * means all sysctls are forbidden.
	//
	// Examples: e.g. "foo/*" forbids "foo/bar", "foo/baz", etc. e.g. "foo.*" forbids "foo.bar", "foo.baz", etc.
	ForbiddenSysctls pulumi.StringArrayInput `pulumi:"forbiddenSysctls"`
	// fsGroup is the strategy that will dictate what fs group is used by the SecurityContext.
	FsGroup FSGroupStrategyOptionsInput `pulumi:"fsGroup"`
	// hostIPC determines if the policy allows the use of HostIPC in the pod spec.
	HostIPC pulumi.BoolPtrInput `pulumi:"hostIPC"`
	// hostNetwork determines if the policy allows the use of HostNetwork in the pod spec.
	HostNetwork pulumi.BoolPtrInput `pulumi:"hostNetwork"`
	// hostPID determines if the policy allows the use of HostPID in the pod spec.
	HostPID pulumi.BoolPtrInput `pulumi:"hostPID"`
	// hostPorts determines which host port ranges are allowed to be exposed.
	HostPorts HostPortRangeArrayInput `pulumi:"hostPorts"`
	// privileged determines if a pod can request to be run as privileged.
	Privileged pulumi.BoolPtrInput `pulumi:"privileged"`
	// readOnlyRootFilesystem when set to true will force containers to run with a read only root file system.  If the container specifically requests to run with a non-read only root file system the PSP should deny the pod. If set to false the container may run with a read only root file system if it wishes but it will not be forced to.
	ReadOnlyRootFilesystem pulumi.BoolPtrInput `pulumi:"readOnlyRootFilesystem"`
	// requiredDropCapabilities are the capabilities that will be dropped from the container.  These are required to be dropped and cannot be added.
	RequiredDropCapabilities pulumi.StringArrayInput `pulumi:"requiredDropCapabilities"`
	// RunAsGroup is the strategy that will dictate the allowable RunAsGroup values that may be set. If this field is omitted, the pod's RunAsGroup can take any value. This field requires the RunAsGroup feature gate to be enabled.
	RunAsGroup RunAsGroupStrategyOptionsPtrInput `pulumi:"runAsGroup"`
	// runAsUser is the strategy that will dictate the allowable RunAsUser values that may be set.
	RunAsUser RunAsUserStrategyOptionsInput `pulumi:"runAsUser"`
	// runtimeClass is the strategy that will dictate the allowable RuntimeClasses for a pod. If this field is omitted, the pod's runtimeClassName field is unrestricted. Enforcement of this field depends on the RuntimeClass feature gate being enabled.
	RuntimeClass RuntimeClassStrategyOptionsPtrInput `pulumi:"runtimeClass"`
	// seLinux is the strategy that will dictate the allowable labels that may be set.
	SeLinux SELinuxStrategyOptionsInput `pulumi:"seLinux"`
	// supplementalGroups is the strategy that will dictate what supplemental groups are used by the SecurityContext.
	SupplementalGroups SupplementalGroupsStrategyOptionsInput `pulumi:"supplementalGroups"`
	// volumes is a white list of allowed volume plugins. Empty indicates that no volumes may be used. To allow all volumes you may use '*'.
	Volumes pulumi.StringArrayInput `pulumi:"volumes"`
}

func (PodSecurityPolicySpecArgs) ElementType() reflect.Type {
	return reflect.TypeOf((*PodSecurityPolicySpec)(nil)).Elem()
}

func (i PodSecurityPolicySpecArgs) ToPodSecurityPolicySpecOutput() PodSecurityPolicySpecOutput {
	return i.ToPodSecurityPolicySpecOutputWithContext(context.Background())
}

func (i PodSecurityPolicySpecArgs) ToPodSecurityPolicySpecOutputWithContext(ctx context.Context) PodSecurityPolicySpecOutput {
	return pulumi.ToOutputWithContext(ctx, i).(PodSecurityPolicySpecOutput)
}

func (i PodSecurityPolicySpecArgs) ToPodSecurityPolicySpecPtrOutput() PodSecurityPolicySpecPtrOutput {
	return i.ToPodSecurityPolicySpecPtrOutputWithContext(context.Background())
}

func (i PodSecurityPolicySpecArgs) ToPodSecurityPolicySpecPtrOutputWithContext(ctx context.Context) PodSecurityPolicySpecPtrOutput {
	return pulumi.ToOutputWithContext(ctx, i).(PodSecurityPolicySpecOutput).ToPodSecurityPolicySpecPtrOutputWithContext(ctx)
}

// PodSecurityPolicySpecPtrInput is an input type that accepts PodSecurityPolicySpecArgs, PodSecurityPolicySpecPtr and PodSecurityPolicySpecPtrOutput values.
// You can construct a concrete instance of `PodSecurityPolicySpecPtrInput` via:
//
//	        PodSecurityPolicySpecArgs{...}
//
//	or:
//
//	        nil
type PodSecurityPolicySpecPtrInput interface {
	pulumi.Input

	ToPodSecurityPolicySpecPtrOutput() PodSecurityPolicySpecPtrOutput
	ToPodSecurityPolicySpecPtrOutputWithContext(context.Context) PodSecurityPolicySpecPtrOutput
}

type podSecurityPolicySpecPtrType PodSecurityPolicySpecArgs

func PodSecurityPolicySpecPtr(v *PodSecurityPolicySpecArgs) PodSecurityPolicySpecPtrInput {
	return (*podSecurityPolicySpecPtrType)(v)
}

func (*podSecurityPolicySpecPtrType) ElementType() reflect.Type {
	return reflect.TypeOf((**PodSecurityPolicySpec)(nil)).Elem()
}

func (i *podSecurityPolicySpecPtrType) ToPodSecurityPolicySpecPtrOutput() PodSecurityPolicySpecPtrOutput {
	return i.ToPodSecurityPolicySpecPtrOutputWithContext(context.Background())
}

func (i *podSecurityPolicySpecPtrType) ToPodSecurityPolicySpecPtrOutputWithContext(ctx context.Context) PodSecurityPolicySpecPtrOutput {
	return pulumi.ToOutputWithContext(ctx, i).(PodSecurityPolicySpecPtrOutput)
}

// PodSecurityPolicySpec defines the policy enforced.
type PodSecurityPolicySpecOutput struct{ *pulumi.OutputState }

func (PodSecurityPolicySpecOutput) ElementType() reflect.Type {
	return reflect.TypeOf((*PodSecurityPolicySpec)(nil)).Elem()
}

func (o PodSecurityPolicySpecOutput) ToPodSecurityPolicySpecOutput() PodSecurityPolicySpecOutput {
	return o
}

func (o PodSecurityPolicySpecOutput) ToPodSecurityPolicySpecOutputWithContext(ctx context.Context) PodSecurityPolicySpecOutput {
	return o
}

func (o PodSecurityPolicySpecOutput) ToPodSecurityPolicySpecPtrOutput() PodSecurityPolicySpecPtrOutput {
	return o.ToPodSecurityPolicySpecPtrOutputWithContext(context.Background())
}

func (o PodSecurityPolicySpecOutput) ToPodSecurityPolicySpecPtrOutputWithContext(ctx context.Context) PodSecurityPolicySpecPtrOutput {
	return o.ApplyTWithContext(ctx, func(_ context.Context, v PodSecurityPolicySpec) *PodSecurityPolicySpec {
		return &v
	}).(PodSecurityPolicySpecPtrOutput)
}

// allowPrivilegeEscalation determines if a pod can request to allow privilege escalation. If unspecified, defaults to true.
func (o PodSecurityPolicySpecOutput) AllowPrivilegeEscalation() pulumi.BoolPtrOutput {
	return o.ApplyT(func(v PodSecurityPolicySpec) *bool { return v.AllowPrivilegeEscalation }).(pulumi.BoolPtrOutput)
}

// AllowedCSIDrivers is a whitelist of inline CSI drivers that must be explicitly set to be embedded within a pod spec. An empty value indicates that any CSI driver can be used for inline ephemeral volumes. This is an alpha field, and is only honored if the API server enables the CSIInlineVolume feature gate.
func (o PodSecurityPolicySpecOutput) AllowedCSIDrivers() AllowedCSIDriverArrayOutput {
	return o.ApplyT(func(v PodSecurityPolicySpec) []AllowedCSIDriver { return v.AllowedCSIDrivers }).(AllowedCSIDriverArrayOutput)
}

// allowedCapabilities is a list of capabilities that can be requested to add to the container. Capabilities in this field may be added at the pod author's discretion. You must not list a capability in both allowedCapabilities and requiredDropCapabilities.
func (o PodSecurityPolicySpecOutput) AllowedCapabilities() pulumi.StringArrayOutput {
	return o.ApplyT(func(v PodSecurityPolicySpec) []string { return v.AllowedCapabilities }).(pulumi.StringArrayOutput)
}

// allowedFlexVolumes is a whitelist of allowed Flexvolumes.  Empty or nil indicates that all Flexvolumes may be used.  This parameter is effective only when the usage of the Flexvolumes is allowed in the "volumes" field.
func (o PodSecurityPolicySpecOutput) AllowedFlexVolumes() AllowedFlexVolumeArrayOutput {
	return o.ApplyT(func(v PodSecurityPolicySpec) []AllowedFlexVolume { return v.AllowedFlexVolumes }).(AllowedFlexVolumeArrayOutput)
}

// allowedHostPaths is a white list of allowed host paths. Empty indicates that all host paths may be used.
func (o PodSecurityPolicySpecOutput) AllowedHostPaths() AllowedHostPathArrayOutput {
	return o.ApplyT(func(v PodSecurityPolicySpec) []AllowedHostPath { return v.AllowedHostPaths }).(AllowedHostPathArrayOutput)
}

// AllowedProcMountTypes is a whitelist of allowed ProcMountTypes. Empty or nil indicates that only the DefaultProcMountType may be used. This requires the ProcMountType feature flag to be enabled.
func (o PodSecurityPolicySpecOutput) AllowedProcMountTypes() pulumi.StringArrayOutput {
	return o.ApplyT(func(v PodSecurityPolicySpec) []string { return v.AllowedProcMountTypes }).(pulumi.StringArrayOutput)
}

// allowedUnsafeSysctls is a list of explicitly allowed unsafe sysctls, defaults to none. Each entry is either a plain sysctl name or ends in "*" in which case it is considered as a prefix of allowed sysctls. Single * means all unsafe sysctls are allowed. Kubelet has to whitelist all allowed unsafe sysctls explicitly to avoid rejection.
//
// Examples: e.g. "foo/*" allows "foo/bar", "foo/baz", etc. e.g. "foo.*" allows "foo.bar", "foo.baz", etc.
func (o PodSecurityPolicySpecOutput) AllowedUnsafeSysctls() pulumi.StringArrayOutput {
	return o.ApplyT(func(v PodSecurityPolicySpec) []string { return v.AllowedUnsafeSysctls }).(pulumi.StringArrayOutput)
}

// defaultAddCapabilities is the default set of capabilities that will be added to the container unless the pod spec specifically drops the capability.  You may not list a capability in both defaultAddCapabilities and requiredDropCapabilities. Capabilities added here are implicitly allowed, and need not be included in the allowedCapabilities list.
func (o PodSecurityPolicySpecOutput) DefaultAddCapabilities() pulumi.StringArrayOutput {
	return o.ApplyT(func(v PodSecurityPolicySpec) []string { return v.DefaultAddCapabilities }).(pulumi.StringArrayOutput)
}

// defaultAllowPrivilegeEscalation controls the default setting for whether a process can gain more privileges than its parent process.
func (o PodSecurityPolicySpecOutput) DefaultAllowPrivilegeEscalation() pulumi.BoolPtrOutput {
	return o.ApplyT(func(v PodSecurityPolicySpec) *bool { return v.DefaultAllowPrivilegeEscalation }).(pulumi.BoolPtrOutput)
}

// forbiddenSysctls is a list of explicitly forbidden sysctls, defaults to none. Each entry is either a plain sysctl name or ends in "*" in which case it is considered as a prefix of forbidden sysctls. Single * means all sysctls are forbidden.
//
// Examples: e.g. "foo/*" forbids "foo/bar", "foo/baz", etc. e.g. "foo.*" forbids "foo.bar", "foo.baz", etc.
func (o PodSecurityPolicySpecOutput) ForbiddenSysctls() pulumi.StringArrayOutput {
	return o.ApplyT(func(v PodSecurityPolicySpec) []string { return v.ForbiddenSysctls }).(pulumi.StringArrayOutput)
}

// fsGroup is the strategy that will dictate what fs group is used by the SecurityContext.
func (o PodSecurityPolicySpecOutput) FsGroup() FSGroupStrategyOptionsOutput {
	return o.ApplyT(func(v PodSecurityPolicySpec) FSGroupStrategyOptions { return v.FsGroup }).(FSGroupStrategyOptionsOutput)
}

// hostIPC determines if the policy allows the use of HostIPC in the pod spec.
func (o PodSecurityPolicySpecOutput) HostIPC() pulumi.BoolPtrOutput {
	return o.ApplyT(func(v PodSecurityPolicySpec) *bool { return v.HostIPC }).(pulumi.BoolPtrOutput)
}

// hostNetwork determines if the policy allows the use of HostNetwork in the pod spec.
func (o PodSecurityPolicySpecOutput) HostNetwork() pulumi.BoolPtrOutput {
	return o.ApplyT(func(v PodSecurityPolicySpec) *bool { return v.HostNetwork }).(pulumi.BoolPtrOutput)
}

// hostPID determines if the policy allows the use of HostPID in the pod spec.
func (o PodSecurityPolicySpecOutput) HostPID() pulumi.BoolPtrOutput {
	return o.ApplyT(func(v PodSecurityPolicySpec) *bool { return v.HostPID }).(pulumi.BoolPtrOutput)
}

// hostPorts determines which host port ranges are allowed to be exposed.
func (o PodSecurityPolicySpecOutput) HostPorts() HostPortRangeArrayOutput {
	return o.ApplyT(func(v PodSecurityPolicySpec) []HostPortRange { return v.HostPorts }).(HostPortRangeArrayOutput)
}

// privileged determines if a pod can request to be run as privileged.
func (o PodSecurityPolicySpecOutput) Privileged() pulumi.BoolPtrOutput {
	return o.ApplyT(func(v PodSecurityPolicySpec) *bool { return v.Privileged }).(pulumi.BoolPtrOutput)
}

// readOnlyRootFilesystem when set to true will force containers to run with a read only root file system.  If the container specifically requests to run with a non-read only root file system the PSP should deny the pod. If set to false the container may run with a read only root file system if it wishes but it will not be forced to.
func (o PodSecurityPolicySpecOutput) ReadOnlyRootFilesystem() pulumi.BoolPtrOutput {
	return o.ApplyT(func(v PodSecurityPolicySpec) *bool { return v.ReadOnlyRootFilesystem }).(pulumi.BoolPtrOutput)
}

// requiredDropCapabilities are the capabilities that will be dropped from the container.  These are required to be dropped and cannot be added.
func (o PodSecurityPolicySpecOutput) RequiredDropCapabilities() pulumi.StringArrayOutput {
	return o.ApplyT(func(v PodSecurityPolicySpec) []string { return v.RequiredDropCapabilities }).(pulumi.StringArrayOutput)
}

// RunAsGroup is the strategy that will dictate the allowable RunAsGroup values that may be set. If this field is omitted, the pod's RunAsGroup can take any value. This field requires the RunAsGroup feature gate to be enabled.
func (o PodSecurityPolicySpecOutput) RunAsGroup() RunAsGroupStrategyOptionsPtrOutput {
	return o.ApplyT(func(v PodSecurityPolicySpec) *RunAsGroupStrategyOptions { return v.RunAsGroup }).(RunAsGroupStrategyOptionsPtrOutput)
}

// runAsUser is the strategy that will dictate the allowable RunAsUser values that may be set.
func (o PodSecurityPolicySpecOutput) RunAsUser() RunAsUserStrategyOptionsOutput {
	return o.ApplyT(func(v PodSecurityPolicySpec) RunAsUserStrategyOptions { return v.RunAsUser }).(RunAsUserStrategyOptionsOutput)
}

// runtimeClass is the strategy that will dictate the allowable RuntimeClasses for a pod. If this field is omitted, the pod's runtimeClassName field is unrestricted. Enforcement of this field depends on the RuntimeClass feature gate being enabled.
func (o PodSecurityPolicySpecOutput) RuntimeClass() RuntimeClassStrategyOptionsPtrOutput {
	return o.ApplyT(func(v PodSecurityPolicySpec) *RuntimeClassStrategyOptions { return v.RuntimeClass }).(RuntimeClassStrategyOptionsPtrOutput)
}

// seLinux is the strategy that will dictate the allowable labels that may be set.
func (o PodSecurityPolicySpecOutput) SeLinux() SELinuxStrategyOptionsOutput {
	return o.ApplyT(func(v PodSecurityPolicySpec) SELinuxStrategyOptions { return v.SeLinux }).(SELinuxStrategyOptionsOutput)
}

// supplementalGroups is the strategy that will dictate what supplemental groups are used by the SecurityContext.
func (o PodSecurityPolicySpecOutput) SupplementalGroups() SupplementalGroupsStrategyOptionsOutput {
	return o.ApplyT(func(v PodSecurityPolicySpec) SupplementalGroupsStrategyOptions { return v.SupplementalGroups }).(SupplementalGroupsStrategyOptionsOutput)
}

// volumes is a white list of allowed volume plugins. Empty indicates that no volumes may be used. To allow all volumes you may use '*'.
func (o PodSecurityPolicySpecOutput) Volumes() pulumi.StringArrayOutput {
	return o.ApplyT(func(v PodSecurityPolicySpec) []string { return v.Volumes }).(pulumi.StringArrayOutput)
}

type PodSecurityPolicySpecPtrOutput struct{ *pulumi.OutputState }

func (PodSecurityPolicySpecPtrOutput) ElementType() reflect.Type {
	return reflect.TypeOf((**PodSecurityPolicySpec)(nil)).Elem()
}

func (o PodSecurityPolicySpecPtrOutput) ToPodSecurityPolicySpecPtrOutput() PodSecurityPolicySpecPtrOutput {
	return o
}

func (o PodSecurityPolicySpecPtrOutput) ToPodSecurityPolicySpecPtrOutputWithContext(ctx context.Context) PodSecurityPolicySpecPtrOutput {
	return o
}

func (o PodSecurityPolicySpecPtrOutput) Elem() PodSecurityPolicySpecOutput {
	return o.ApplyT(func(v *PodSecurityPolicySpec) PodSecurityPolicySpec {
		if v != nil {
			return *v
		}
		var ret PodSecurityPolicySpec
		return ret
	}).(PodSecurityPolicySpecOutput)
}

// allowPrivilegeEscalation determines if a pod can request to allow privilege escalation. If unspecified, defaults to true.
func (o PodSecurityPolicySpecPtrOutput) AllowPrivilegeEscalation() pulumi.BoolPtrOutput {
	return o.ApplyT(func(v *PodSecurityPolicySpec) *bool {
		if v == nil {
			return nil
		}
		return v.AllowPrivilegeEscalation
	}).(pulumi.BoolPtrOutput)
}

// AllowedCSIDrivers is a whitelist of inline CSI drivers that must be explicitly set to be embedded within a pod spec. An empty value indicates that any CSI driver can be used for inline ephemeral volumes. This is an alpha field, and is only honored if the API server enables the CSIInlineVolume feature gate.
func (o PodSecurityPolicySpecPtrOutput) AllowedCSIDrivers() AllowedCSIDriverArrayOutput {
	return o.ApplyT(func(v *PodSecurityPolicySpec) []AllowedCSIDriver {
		if v == nil {
			return nil
		}
		return v.AllowedCSIDrivers
	}).(AllowedCSIDriverArrayOutput)
}

// allowedCapabilities is a list of capabilities that can be requested to add to the container. Capabilities in this field may be added at the pod author's discretion. You must not list a capability in both allowedCapabilities and requiredDropCapabilities.
func (o PodSecurityPolicySpecPtrOutput) AllowedCapabilities() pulumi.StringArrayOutput {
	return o.ApplyT(func(v *PodSecurityPolicySpec) []string {
		if v == nil {
			return nil
		}
		return v.AllowedCapabilities
	}).(pulumi.StringArrayOutput)
}

// allowedFlexVolumes is a whitelist of allowed Flexvolumes.  Empty or nil indicates that all Flexvolumes may be used.  This parameter is effective only when the usage of the Flexvolumes is allowed in the "volumes" field.
func (o PodSecurityPolicySpecPtrOutput) AllowedFlexVolumes() AllowedFlexVolumeArrayOutput {
	return o.ApplyT(func(v *PodSecurityPolicySpec) []AllowedFlexVolume {
		if v == nil {
			return nil
		}
		return v.AllowedFlexVolumes
	}).(AllowedFlexVolumeArrayOutput)
}

// allowedHostPaths is a white list of allowed host paths. Empty indicates that all host paths may be used.
func (o PodSecurityPolicySpecPtrOutput) AllowedHostPaths() AllowedHostPathArrayOutput {
	return o.ApplyT(func(v *PodSecurityPolicySpec) []AllowedHostPath {
		if v == nil {
			return nil
		}
		return v.AllowedHostPaths
	}).(AllowedHostPathArrayOutput)
}

// AllowedProcMountTypes is a whitelist of allowed ProcMountTypes. Empty or nil indicates that only the DefaultProcMountType may be used. This requires the ProcMountType feature flag to be enabled.
func (o PodSecurityPolicySpecPtrOutput) AllowedProcMountTypes() pulumi.StringArrayOutput {
	return o.ApplyT(func(v *PodSecurityPolicySpec) []string {
		if v == nil {
			return nil
		}
		return v.AllowedProcMountTypes
	}).(pulumi.StringArrayOutput)
}

// allowedUnsafeSysctls is a list of explicitly allowed unsafe sysctls, defaults to none. Each entry is either a plain sysctl name or ends in "*" in which case it is considered as a prefix of allowed sysctls. Single * means all unsafe sysctls are allowed. Kubelet has to whitelist all allowed unsafe sysctls explicitly to avoid rejection.
//
// Examples: e.g. "foo/*" allows "foo/bar", "foo/baz", etc. e.g. "foo.*" allows "foo.bar", "foo.baz", etc.
func (o PodSecurityPolicySpecPtrOutput) AllowedUnsafeSysctls() pulumi.StringArrayOutput {
	return o.ApplyT(func(v *PodSecurityPolicySpec) []string {
		if v == nil {
			return nil
		}
		return v.AllowedUnsafeSysctls
	}).(pulumi.StringArrayOutput)
}

// defaultAddCapabilities is the default set of capabilities that will be added to the container unless the pod spec specifically drops the capability.  You may not list a capability in both defaultAddCapabilities and requiredDropCapabilities. Capabilities added here are implicitly allowed, and need not be included in the allowedCapabilities list.
func (o PodSecurityPolicySpecPtrOutput) DefaultAddCapabilities() pulumi.StringArrayOutput {
	return o.ApplyT(func(v *PodSecurityPolicySpec) []string {
		if v == nil {
			return nil
		}
		return v.DefaultAddCapabilities
	}).(pulumi.StringArrayOutput)
}

// defaultAllowPrivilegeEscalation controls the default setting for whether a process can gain more privileges than its parent process.
func (o PodSecurityPolicySpecPtrOutput) DefaultAllowPrivilegeEscalation() pulumi.BoolPtrOutput {
	return o.ApplyT(func(v *PodSecurityPolicySpec) *bool {
		if v == nil {
			return nil
		}
		return v.DefaultAllowPrivilegeEscalation
	}).(pulumi.BoolPtrOutput)
}

// forbiddenSysctls is a list of explicitly forbidden sysctls, defaults to none. Each entry is either a plain sysctl name or ends in "*" in which case it is considered as a prefix of forbidden sysctls. Single * means all sysctls are forbidden.
//
// Examples: e.g. "foo/*" forbids "foo/bar", "foo/baz", etc. e.g. "foo.*" forbids "foo.bar", "foo.baz", etc.
func (o PodSecurityPolicySpecPtrOutput) ForbiddenSysctls() pulumi.StringArrayOutput {
	return o.ApplyT(func(v *PodSecurityPolicySpec) []string {
		if v == nil {
			return nil
		}
		return v.ForbiddenSysctls
	}).(pulumi.StringArrayOutput)
}

// fsGroup is the strategy that will dictate what fs group is used by the SecurityContext.
func (o PodSecurityPolicySpecPtrOutput) FsGroup() FSGroupStrategyOptionsPtrOutput {
	return o.ApplyT(func(v *PodSecurityPolicySpec) *FSGroupStrategyOptions {
		if v == nil {
			return nil
		}
		return &v.FsGroup
	}).(FSGroupStrategyOptionsPtrOutput)
}

// hostIPC determines if the policy allows the use of HostIPC in the pod spec.
func (o PodSecurityPolicySpecPtrOutput) HostIPC() pulumi.BoolPtrOutput {
	return o.ApplyT(func(v *PodSecurityPolicySpec) *bool {
		if v == nil {
			return nil
		}
		return v.HostIPC
	}).(pulumi.BoolPtrOutput)
}

// hostNetwork determines if the policy allows the use of HostNetwork in the pod spec.
func (o PodSecurityPolicySpecPtrOutput) HostNetwork() pulumi.BoolPtrOutput {
	return o.ApplyT(func(v *PodSecurityPolicySpec) *bool {
		if v == nil {
			return nil
		}
		return v.HostNetwork
	}).(pulumi.BoolPtrOutput)
}

// hostPID determines if the policy allows the use of HostPID in the pod spec.
func (o PodSecurityPolicySpecPtrOutput) HostPID() pulumi.BoolPtrOutput {
	return o.ApplyT(func(v *PodSecurityPolicySpec) *bool {
		if v == nil {
			return nil
		}
		return v.HostPID
	}).(pulumi.BoolPtrOutput)
}

// hostPorts determines which host port ranges are allowed to be exposed.
func (o PodSecurityPolicySpecPtrOutput) HostPorts() HostPortRangeArrayOutput {
	return o.ApplyT(func(v *PodSecurityPolicySpec) []HostPortRange {
		if v == nil {
			return nil
		}
		return v.HostPorts
	}).(HostPortRangeArrayOutput)
}

// privileged determines if a pod can request to be run as privileged.
func (o PodSecurityPolicySpecPtrOutput) Privileged() pulumi.BoolPtrOutput {
	return o.ApplyT(func(v *PodSecurityPolicySpec) *bool {
		if v == nil {
			return nil
		}
		return v.Privileged
	}).(pulumi.BoolPtrOutput)
}

// readOnlyRootFilesystem when set to true will force containers to run with a read only root file system.  If the container specifically requests to run with a non-read only root file system the PSP should deny the pod. If set to false the container may run with a read only root file system if it wishes but it will not be forced to.
func (o PodSecurityPolicySpecPtrOutput) ReadOnlyRootFilesystem() pulumi.BoolPtrOutput {
	return o.ApplyT(func(v *PodSecurityPolicySpec) *bool {
		if v == nil {
			return nil
		}
		return v.ReadOnlyRootFilesystem
	}).(pulumi.BoolPtrOutput)
}

// requiredDropCapabilities are the capabilities that will be dropped from the container.  These are required to be dropped and cannot be added.
func (o PodSecurityPolicySpecPtrOutput) RequiredDropCapabilities() pulumi.StringArrayOutput {
	return o.ApplyT(func(v *PodSecurityPolicySpec) []string {
		if v == nil {
			return nil
		}
		return v.RequiredDropCapabilities
	}).(pulumi.StringArrayOutput)
}

// RunAsGroup is the strategy that will dictate the allowable RunAsGroup values that may be set. If this field is omitted, the pod's RunAsGroup can take any value. This field requires the RunAsGroup feature gate to be enabled.
func (o PodSecurityPolicySpecPtrOutput) RunAsGroup() RunAsGroupStrategyOptionsPtrOutput {
	return o.ApplyT(func(v *PodSecurityPolicySpec) *RunAsGroupStrategyOptions {
		if v == nil {
			return nil
		}
		return v.RunAsGroup
	}).(RunAsGroupStrategyOptionsPtrOutput)
}

// runAsUser is the strategy that will dictate the allowable RunAsUser values that may be set.
func (o PodSecurityPolicySpecPtrOutput) RunAsUser() RunAsUserStrategyOptionsPtrOutput {
	return o.ApplyT(func(v *PodSecurityPolicySpec) *RunAsUserStrategyOptions {
		if v == nil {
			return nil
		}
		return &v.RunAsUser
	}).(RunAsUserStrategyOptionsPtrOutput)
}

// runtimeClass is the strategy that will dictate the allowable RuntimeClasses for a pod. If this field is omitted, the pod's runtimeClassName field is unrestricted. Enforcement of this field depends on the RuntimeClass feature gate being enabled.
func (o PodSecurityPolicySpecPtrOutput) RuntimeClass() RuntimeClassStrategyOptionsPtrOutput {
	return o.ApplyT(func(v *PodSecurityPolicySpec) *RuntimeClassStrategyOptions {
		if v == nil {
			return nil
		}
		return v.RuntimeClass
	}).(RuntimeClassStrategyOptionsPtrOutput)
}

// seLinux is the strategy that will dictate the allowable labels that may be set.
func (o PodSecurityPolicySpecPtrOutput) SeLinux() SELinuxStrategyOptionsPtrOutput {
	return o.ApplyT(func(v *PodSecurityPolicySpec) *SELinuxStrategyOptions {
		if v == nil {
			return nil
		}
		return &v.SeLinux
	}).(SELinuxStrategyOptionsPtrOutput)
}

// supplementalGroups is the strategy that will dictate what supplemental groups are used by the SecurityContext.
func (o PodSecurityPolicySpecPtrOutput) SupplementalGroups() SupplementalGroupsStrategyOptionsPtrOutput {
	return o.ApplyT(func(v *PodSecurityPolicySpec) *SupplementalGroupsStrategyOptions {
		if v == nil {
			return nil
		}
		return &v.SupplementalGroups
	}).(SupplementalGroupsStrategyOptionsPtrOutput)
}

// volumes is a white list of allowed volume plugins. Empty indicates that no volumes may be used. To allow all volumes you may use '*'.
func (o PodSecurityPolicySpecPtrOutput) Volumes() pulumi.StringArrayOutput {
	return o.ApplyT(func(v *PodSecurityPolicySpec) []string {
		if v == nil {
			return nil
		}
		return v.Volumes
	}).(pulumi.StringArrayOutput)
}

// PodSecurityPolicySpec defines the policy enforced.
type PodSecurityPolicySpecPatch struct {
	// allowPrivilegeEscalation determines if a pod can request to allow privilege escalation. If unspecified, defaults to true.
	AllowPrivilegeEscalation *bool `pulumi:"allowPrivilegeEscalation"`
	// AllowedCSIDrivers is a whitelist of inline CSI drivers that must be explicitly set to be embedded within a pod spec. An empty value indicates that any CSI driver can be used for inline ephemeral volumes. This is an alpha field, and is only honored if the API server enables the CSIInlineVolume feature gate.
	AllowedCSIDrivers []AllowedCSIDriverPatch `pulumi:"allowedCSIDrivers"`
	// allowedCapabilities is a list of capabilities that can be requested to add to the container. Capabilities in this field may be added at the pod author's discretion. You must not list a capability in both allowedCapabilities and requiredDropCapabilities.
	AllowedCapabilities []string `pulumi:"allowedCapabilities"`
	// allowedFlexVolumes is a whitelist of allowed Flexvolumes.  Empty or nil indicates that all Flexvolumes may be used.  This parameter is effective only when the usage of the Flexvolumes is allowed in the "volumes" field.
	AllowedFlexVolumes []AllowedFlexVolumePatch `pulumi:"allowedFlexVolumes"`
	// allowedHostPaths is a white list of allowed host paths. Empty indicates that all host paths may be used.
	AllowedHostPaths []AllowedHostPathPatch `pulumi:"allowedHostPaths"`
	// AllowedProcMountTypes is a whitelist of allowed ProcMountTypes. Empty or nil indicates that only the DefaultProcMountType may be used. This requires the ProcMountType feature flag to be enabled.
	AllowedProcMountTypes []string `pulumi:"allowedProcMountTypes"`
	// allowedUnsafeSysctls is a list of explicitly allowed unsafe sysctls, defaults to none. Each entry is either a plain sysctl name or ends in "*" in which case it is considered as a prefix of allowed sysctls. Single * means all unsafe sysctls are allowed. Kubelet has to whitelist all allowed unsafe sysctls explicitly to avoid rejection.
	//
	// Examples: e.g. "foo/*" allows "foo/bar", "foo/baz", etc. e.g. "foo.*" allows "foo.bar", "foo.baz", etc.
	AllowedUnsafeSysctls []string `pulumi:"allowedUnsafeSysctls"`
	// defaultAddCapabilities is the default set of capabilities that will be added to the container unless the pod spec specifically drops the capability.  You may not list a capability in both defaultAddCapabilities and requiredDropCapabilities. Capabilities added here are implicitly allowed, and need not be included in the allowedCapabilities list.
	DefaultAddCapabilities []string `pulumi:"defaultAddCapabilities"`
	// defaultAllowPrivilegeEscalation controls the default setting for whether a process can gain more privileges than its parent process.
	DefaultAllowPrivilegeEscalation *bool `pulumi:"defaultAllowPrivilegeEscalation"`
	// forbiddenSysctls is a list of explicitly forbidden sysctls, defaults to none. Each entry is either a plain sysctl name or ends in "*" in which case it is considered as a prefix of forbidden sysctls. Single * means all sysctls are forbidden.
	//
	// Examples: e.g. "foo/*" forbids "foo/bar", "foo/baz", etc. e.g. "foo.*" forbids "foo.bar", "foo.baz", etc.
	ForbiddenSysctls []string `pulumi:"forbiddenSysctls"`
	// fsGroup is the strategy that will dictate what fs group is used by the SecurityContext.
	FsGroup *FSGroupStrategyOptionsPatch `pulumi:"fsGroup"`
	// hostIPC determines if the policy allows the use of HostIPC in the pod spec.
	HostIPC *bool `pulumi:"hostIPC"`
	// hostNetwork determines if the policy allows the use of HostNetwork in the pod spec.
	HostNetwork *bool `pulumi:"hostNetwork"`
	// hostPID determines if the policy allows the use of HostPID in the pod spec.
	HostPID *bool `pulumi:"hostPID"`
	// hostPorts determines which host port ranges are allowed to be exposed.
	HostPorts []HostPortRangePatch `pulumi:"hostPorts"`
	// privileged determines if a pod can request to be run as privileged.
	Privileged *bool `pulumi:"privileged"`
	// readOnlyRootFilesystem when set to true will force containers to run with a read only root file system.  If the container specifically requests to run with a non-read only root file system the PSP should deny the pod. If set to false the container may run with a read only root file system if it wishes but it will not be forced to.
	ReadOnlyRootFilesystem *bool `pulumi:"readOnlyRootFilesystem"`
	// requiredDropCapabilities are the capabilities that will be dropped from the container.  These are required to be dropped and cannot be added.
	RequiredDropCapabilities []string `pulumi:"requiredDropCapabilities"`
	// RunAsGroup is the strategy that will dictate the allowable RunAsGroup values that may be set. If this field is omitted, the pod's RunAsGroup can take any value. This field requires the RunAsGroup feature gate to be enabled.
	RunAsGroup *RunAsGroupStrategyOptionsPatch `pulumi:"runAsGroup"`
	// runAsUser is the strategy that will dictate the allowable RunAsUser values that may be set.
	RunAsUser *RunAsUserStrategyOptionsPatch `pulumi:"runAsUser"`
	// runtimeClass is the strategy that will dictate the allowable RuntimeClasses for a pod. If this field is omitted, the pod's runtimeClassName field is unrestricted. Enforcement of this field depends on the RuntimeClass feature gate being enabled.
	RuntimeClass *RuntimeClassStrategyOptionsPatch `pulumi:"runtimeClass"`
	// seLinux is the strategy that will dictate the allowable labels that may be set.
	SeLinux *SELinuxStrategyOptionsPatch `pulumi:"seLinux"`
	// supplementalGroups is the strategy that will dictate what supplemental groups are used by the SecurityContext.
	SupplementalGroups *SupplementalGroupsStrategyOptionsPatch `pulumi:"supplementalGroups"`
	// volumes is a white list of allowed volume plugins. Empty indicates that no volumes may be used. To allow all volumes you may use '*'.
	Volumes []string `pulumi:"volumes"`
}

// PodSecurityPolicySpecPatchInput is an input type that accepts PodSecurityPolicySpecPatchArgs and PodSecurityPolicySpecPatchOutput values.
// You can construct a concrete instance of `PodSecurityPolicySpecPatchInput` via:
//
//	PodSecurityPolicySpecPatchArgs{...}
type PodSecurityPolicySpecPatchInput interface {
	pulumi.Input

	ToPodSecurityPolicySpecPatchOutput() PodSecurityPolicySpecPatchOutput
	ToPodSecurityPolicySpecPatchOutputWithContext(context.Context) PodSecurityPolicySpecPatchOutput
}

// PodSecurityPolicySpec defines the policy enforced.
type PodSecurityPolicySpecPatchArgs struct {
	// allowPrivilegeEscalation determines if a pod can request to allow privilege escalation. If unspecified, defaults to true.
	AllowPrivilegeEscalation pulumi.BoolPtrInput `pulumi:"allowPrivilegeEscalation"`
	// AllowedCSIDrivers is a whitelist of inline CSI drivers that must be explicitly set to be embedded within a pod spec. An empty value indicates that any CSI driver can be used for inline ephemeral volumes. This is an alpha field, and is only honored if the API server enables the CSIInlineVolume feature gate.
	AllowedCSIDrivers AllowedCSIDriverPatchArrayInput `pulumi:"allowedCSIDrivers"`
	// allowedCapabilities is a list of capabilities that can be requested to add to the container. Capabilities in this field may be added at the pod author's discretion. You must not list a capability in both allowedCapabilities and requiredDropCapabilities.
	AllowedCapabilities pulumi.StringArrayInput `pulumi:"allowedCapabilities"`
	// allowedFlexVolumes is a whitelist of allowed Flexvolumes.  Empty or nil indicates that all Flexvolumes may be used.  This parameter is effective only when the usage of the Flexvolumes is allowed in the "volumes" field.
	AllowedFlexVolumes AllowedFlexVolumePatchArrayInput `pulumi:"allowedFlexVolumes"`
	// allowedHostPaths is a white list of allowed host paths. Empty indicates that all host paths may be used.
	AllowedHostPaths AllowedHostPathPatchArrayInput `pulumi:"allowedHostPaths"`
	// AllowedProcMountTypes is a whitelist of allowed ProcMountTypes. Empty or nil indicates that only the DefaultProcMountType may be used. This requires the ProcMountType feature flag to be enabled.
	AllowedProcMountTypes pulumi.StringArrayInput `pulumi:"allowedProcMountTypes"`
	// allowedUnsafeSysctls is a list of explicitly allowed unsafe sysctls, defaults to none. Each entry is either a plain sysctl name or ends in "*" in which case it is considered as a prefix of allowed sysctls. Single * means all unsafe sysctls are allowed. Kubelet has to whitelist all allowed unsafe sysctls explicitly to avoid rejection.
	//
	// Examples: e.g. "foo/*" allows "foo/bar", "foo/baz", etc. e.g. "foo.*" allows "foo.bar", "foo.baz", etc.
	AllowedUnsafeSysctls pulumi.StringArrayInput `pulumi:"allowedUnsafeSysctls"`
	// defaultAddCapabilities is the default set of capabilities that will be added to the container unless the pod spec specifically drops the capability.  You may not list a capability in both defaultAddCapabilities and requiredDropCapabilities. Capabilities added here are implicitly allowed, and need not be included in the allowedCapabilities list.
	DefaultAddCapabilities pulumi.StringArrayInput `pulumi:"defaultAddCapabilities"`
	// defaultAllowPrivilegeEscalation controls the default setting for whether a process can gain more privileges than its parent process.
	DefaultAllowPrivilegeEscalation pulumi.BoolPtrInput `pulumi:"defaultAllowPrivilegeEscalation"`
	// forbiddenSysctls is a list of explicitly forbidden sysctls, defaults to none. Each entry is either a plain sysctl name or ends in "*" in which case it is considered as a prefix of forbidden sysctls. Single * means all sysctls are forbidden.
	//
	// Examples: e.g. "foo/*" forbids "foo/bar", "foo/baz", etc. e.g. "foo.*" forbids "foo.bar", "foo.baz", etc.
	ForbiddenSysctls pulumi.StringArrayInput `pulumi:"forbiddenSysctls"`
	// fsGroup is the strategy that will dictate what fs group is used by the SecurityContext.
	FsGroup FSGroupStrategyOptionsPatchPtrInput `pulumi:"fsGroup"`
	// hostIPC determines if the policy allows the use of HostIPC in the pod spec.
	HostIPC pulumi.BoolPtrInput `pulumi:"hostIPC"`
	// hostNetwork determines if the policy allows the use of HostNetwork in the pod spec.
	HostNetwork pulumi.BoolPtrInput `pulumi:"hostNetwork"`
	// hostPID determines if the policy allows the use of HostPID in the pod spec.
	HostPID pulumi.BoolPtrInput `pulumi:"hostPID"`
	// hostPorts determines which host port ranges are allowed to be exposed.
	HostPorts HostPortRangePatchArrayInput `pulumi:"hostPorts"`
	// privileged determines if a pod can request to be run as privileged.
	Privileged pulumi.BoolPtrInput `pulumi:"privileged"`
	// readOnlyRootFilesystem when set to true will force containers to run with a read only root file system.  If the container specifically requests to run with a non-read only root file system the PSP should deny the pod. If set to false the container may run with a read only root file system if it wishes but it will not be forced to.
	ReadOnlyRootFilesystem pulumi.BoolPtrInput `pulumi:"readOnlyRootFilesystem"`
	// requiredDropCapabilities are the capabilities that will be dropped from the container.  These are required to be dropped and cannot be added.
	RequiredDropCapabilities pulumi.StringArrayInput `pulumi:"requiredDropCapabilities"`
	// RunAsGroup is the strategy that will dictate the allowable RunAsGroup values that may be set. If this field is omitted, the pod's RunAsGroup can take any value. This field requires the RunAsGroup feature gate to be enabled.
	RunAsGroup RunAsGroupStrategyOptionsPatchPtrInput `pulumi:"runAsGroup"`
	// runAsUser is the strategy that will dictate the allowable RunAsUser values that may be set.
	RunAsUser RunAsUserStrategyOptionsPatchPtrInput `pulumi:"runAsUser"`
	// runtimeClass is the strategy that will dictate the allowable RuntimeClasses for a pod. If this field is omitted, the pod's runtimeClassName field is unrestricted. Enforcement of this field depends on the RuntimeClass feature gate being enabled.
	RuntimeClass RuntimeClassStrategyOptionsPatchPtrInput `pulumi:"runtimeClass"`
	// seLinux is the strategy that will dictate the allowable labels that may be set.
	SeLinux SELinuxStrategyOptionsPatchPtrInput `pulumi:"seLinux"`
	// supplementalGroups is the strategy that will dictate what supplemental groups are used by the SecurityContext.
	SupplementalGroups SupplementalGroupsStrategyOptionsPatchPtrInput `pulumi:"supplementalGroups"`
	// volumes is a white list of allowed volume plugins. Empty indicates that no volumes may be used. To allow all volumes you may use '*'.
	Volumes pulumi.StringArrayInput `pulumi:"volumes"`
}

func (PodSecurityPolicySpecPatchArgs) ElementType() reflect.Type {
	return reflect.TypeOf((*PodSecurityPolicySpecPatch)(nil)).Elem()
}

func (i PodSecurityPolicySpecPatchArgs) ToPodSecurityPolicySpecPatchOutput() PodSecurityPolicySpecPatchOutput {
	return i.ToPodSecurityPolicySpecPatchOutputWithContext(context.Background())
}

func (i PodSecurityPolicySpecPatchArgs) ToPodSecurityPolicySpecPatchOutputWithContext(ctx context.Context) PodSecurityPolicySpecPatchOutput {
	return pulumi.ToOutputWithContext(ctx, i).(PodSecurityPolicySpecPatchOutput)
}

func (i PodSecurityPolicySpecPatchArgs) ToPodSecurityPolicySpecPatchPtrOutput() PodSecurityPolicySpecPatchPtrOutput {
	return i.ToPodSecurityPolicySpecPatchPtrOutputWithContext(context.Background())
}

func (i PodSecurityPolicySpecPatchArgs) ToPodSecurityPolicySpecPatchPtrOutputWithContext(ctx context.Context) PodSecurityPolicySpecPatchPtrOutput {
	return pulumi.ToOutputWithContext(ctx, i).(PodSecurityPolicySpecPatchOutput).ToPodSecurityPolicySpecPatchPtrOutputWithContext(ctx)
}

// PodSecurityPolicySpecPatchPtrInput is an input type that accepts PodSecurityPolicySpecPatchArgs, PodSecurityPolicySpecPatchPtr and PodSecurityPolicySpecPatchPtrOutput values.
// You can construct a concrete instance of `PodSecurityPolicySpecPatchPtrInput` via:
//
//	        PodSecurityPolicySpecPatchArgs{...}
//
//	or:
//
//	        nil
type PodSecurityPolicySpecPatchPtrInput interface {
	pulumi.Input

	ToPodSecurityPolicySpecPatchPtrOutput() PodSecurityPolicySpecPatchPtrOutput
	ToPodSecurityPolicySpecPatchPtrOutputWithContext(context.Context) PodSecurityPolicySpecPatchPtrOutput
}

type podSecurityPolicySpecPatchPtrType PodSecurityPolicySpecPatchArgs

func PodSecurityPolicySpecPatchPtr(v *PodSecurityPolicySpecPatchArgs) PodSecurityPolicySpecPatchPtrInput {
	return (*podSecurityPolicySpecPatchPtrType)(v)
}

func (*podSecurityPolicySpecPatchPtrType) ElementType() reflect.Type {
	return reflect.TypeOf((**PodSecurityPolicySpecPatch)(nil)).Elem()
}

func (i *podSecurityPolicySpecPatchPtrType) ToPodSecurityPolicySpecPatchPtrOutput() PodSecurityPolicySpecPatchPtrOutput {
	return i.ToPodSecurityPolicySpecPatchPtrOutputWithContext(context.Background())
}

func (i *podSecurityPolicySpecPatchPtrType) ToPodSecurityPolicySpecPatchPtrOutputWithContext(ctx context.Context) PodSecurityPolicySpecPatchPtrOutput {
	return pulumi.ToOutputWithContext(ctx, i).(PodSecurityPolicySpecPatchPtrOutput)
}

// PodSecurityPolicySpec defines the policy enforced.
type PodSecurityPolicySpecPatchOutput struct{ *pulumi.OutputState }

func (PodSecurityPolicySpecPatchOutput) ElementType() reflect.Type {
	return reflect.TypeOf((*PodSecurityPolicySpecPatch)(nil)).Elem()
}

func (o PodSecurityPolicySpecPatchOutput) ToPodSecurityPolicySpecPatchOutput() PodSecurityPolicySpecPatchOutput {
	return o
}

func (o PodSecurityPolicySpecPatchOutput) ToPodSecurityPolicySpecPatchOutputWithContext(ctx context.Context) PodSecurityPolicySpecPatchOutput {
	return o
}

func (o PodSecurityPolicySpecPatchOutput) ToPodSecurityPolicySpecPatchPtrOutput() PodSecurityPolicySpecPatchPtrOutput {
	return o.ToPodSecurityPolicySpecPatchPtrOutputWithContext(context.Background())
}

func (o PodSecurityPolicySpecPatchOutput) ToPodSecurityPolicySpecPatchPtrOutputWithContext(ctx context.Context) PodSecurityPolicySpecPatchPtrOutput {
	return o.ApplyTWithContext(ctx, func(_ context.Context, v PodSecurityPolicySpecPatch) *PodSecurityPolicySpecPatch {
		return &v
	}).(PodSecurityPolicySpecPatchPtrOutput)
}

// allowPrivilegeEscalation determines if a pod can request to allow privilege escalation. If unspecified, defaults to true.
func (o PodSecurityPolicySpecPatchOutput) AllowPrivilegeEscalation() pulumi.BoolPtrOutput {
	return o.ApplyT(func(v PodSecurityPolicySpecPatch) *bool { return v.AllowPrivilegeEscalation }).(pulumi.BoolPtrOutput)
}

// AllowedCSIDrivers is a whitelist of inline CSI drivers that must be explicitly set to be embedded within a pod spec. An empty value indicates that any CSI driver can be used for inline ephemeral volumes. This is an alpha field, and is only honored if the API server enables the CSIInlineVolume feature gate.
func (o PodSecurityPolicySpecPatchOutput) AllowedCSIDrivers() AllowedCSIDriverPatchArrayOutput {
	return o.ApplyT(func(v PodSecurityPolicySpecPatch) []AllowedCSIDriverPatch { return v.AllowedCSIDrivers }).(AllowedCSIDriverPatchArrayOutput)
}

// allowedCapabilities is a list of capabilities that can be requested to add to the container. Capabilities in this field may be added at the pod author's discretion. You must not list a capability in both allowedCapabilities and requiredDropCapabilities.
func (o PodSecurityPolicySpecPatchOutput) AllowedCapabilities() pulumi.StringArrayOutput {
	return o.ApplyT(func(v PodSecurityPolicySpecPatch) []string { return v.AllowedCapabilities }).(pulumi.StringArrayOutput)
}

// allowedFlexVolumes is a whitelist of allowed Flexvolumes.  Empty or nil indicates that all Flexvolumes may be used.  This parameter is effective only when the usage of the Flexvolumes is allowed in the "volumes" field.
func (o PodSecurityPolicySpecPatchOutput) AllowedFlexVolumes() AllowedFlexVolumePatchArrayOutput {
	return o.ApplyT(func(v PodSecurityPolicySpecPatch) []AllowedFlexVolumePatch { return v.AllowedFlexVolumes }).(AllowedFlexVolumePatchArrayOutput)
}

// allowedHostPaths is a white list of allowed host paths. Empty indicates that all host paths may be used.
func (o PodSecurityPolicySpecPatchOutput) AllowedHostPaths() AllowedHostPathPatchArrayOutput {
	return o.ApplyT(func(v PodSecurityPolicySpecPatch) []AllowedHostPathPatch { return v.AllowedHostPaths }).(AllowedHostPathPatchArrayOutput)
}

// AllowedProcMountTypes is a whitelist of allowed ProcMountTypes. Empty or nil indicates that only the DefaultProcMountType may be used. This requires the ProcMountType feature flag to be enabled.
func (o PodSecurityPolicySpecPatchOutput) AllowedProcMountTypes() pulumi.StringArrayOutput {
	return o.ApplyT(func(v PodSecurityPolicySpecPatch) []string { return v.AllowedProcMountTypes }).(pulumi.StringArrayOutput)
}

// allowedUnsafeSysctls is a list of explicitly allowed unsafe sysctls, defaults to none. Each entry is either a plain sysctl name or ends in "*" in which case it is considered as a prefix of allowed sysctls. Single * means all unsafe sysctls are allowed. Kubelet has to whitelist all allowed unsafe sysctls explicitly to avoid rejection.
//
// Examples: e.g. "foo/*" allows "foo/bar", "foo/baz", etc. e.g. "foo.*" allows "foo.bar", "foo.baz", etc.
func (o PodSecurityPolicySpecPatchOutput) AllowedUnsafeSysctls() pulumi.StringArrayOutput {
	return o.ApplyT(func(v PodSecurityPolicySpecPatch) []string { return v.AllowedUnsafeSysctls }).(pulumi.StringArrayOutput)
}

// defaultAddCapabilities is the default set of capabilities that will be added to the container unless the pod spec specifically drops the capability.  You may not list a capability in both defaultAddCapabilities and requiredDropCapabilities. Capabilities added here are implicitly allowed, and need not be included in the allowedCapabilities list.
func (o PodSecurityPolicySpecPatchOutput) DefaultAddCapabilities() pulumi.StringArrayOutput {
	return o.ApplyT(func(v PodSecurityPolicySpecPatch) []string { return v.DefaultAddCapabilities }).(pulumi.StringArrayOutput)
}

// defaultAllowPrivilegeEscalation controls the default setting for whether a process can gain more privileges than its parent process.
func (o PodSecurityPolicySpecPatchOutput) DefaultAllowPrivilegeEscalation() pulumi.BoolPtrOutput {
	return o.ApplyT(func(v PodSecurityPolicySpecPatch) *bool { return v.DefaultAllowPrivilegeEscalation }).(pulumi.BoolPtrOutput)
}

// forbiddenSysctls is a list of explicitly forbidden sysctls, defaults to none. Each entry is either a plain sysctl name or ends in "*" in which case it is considered as a prefix of forbidden sysctls. Single * means all sysctls are forbidden.
//
// Examples: e.g. "foo/*" forbids "foo/bar", "foo/baz", etc. e.g. "foo.*" forbids "foo.bar", "foo.baz", etc.
func (o PodSecurityPolicySpecPatchOutput) ForbiddenSysctls() pulumi.StringArrayOutput {
	return o.ApplyT(func(v PodSecurityPolicySpecPatch) []string { return v.ForbiddenSysctls }).(pulumi.StringArrayOutput)
}

// fsGroup is the strategy that will dictate what fs group is used by the SecurityContext.
func (o PodSecurityPolicySpecPatchOutput) FsGroup() FSGroupStrategyOptionsPatchPtrOutput {
	return o.ApplyT(func(v PodSecurityPolicySpecPatch) *FSGroupStrategyOptionsPatch { return v.FsGroup }).(FSGroupStrategyOptionsPatchPtrOutput)
}

// hostIPC determines if the policy allows the use of HostIPC in the pod spec.
func (o PodSecurityPolicySpecPatchOutput) HostIPC() pulumi.BoolPtrOutput {
	return o.ApplyT(func(v PodSecurityPolicySpecPatch) *bool { return v.HostIPC }).(pulumi.BoolPtrOutput)
}

// hostNetwork determines if the policy allows the use of HostNetwork in the pod spec.
func (o PodSecurityPolicySpecPatchOutput) HostNetwork() pulumi.BoolPtrOutput {
	return o.ApplyT(func(v PodSecurityPolicySpecPatch) *bool { return v.HostNetwork }).(pulumi.BoolPtrOutput)
}

// hostPID determines if the policy allows the use of HostPID in the pod spec.
func (o PodSecurityPolicySpecPatchOutput) HostPID() pulumi.BoolPtrOutput {
	return o.ApplyT(func(v PodSecurityPolicySpecPatch) *bool { return v.HostPID }).(pulumi.BoolPtrOutput)
}

// hostPorts determines which host port ranges are allowed to be exposed.
func (o PodSecurityPolicySpecPatchOutput) HostPorts() HostPortRangePatchArrayOutput {
	return o.ApplyT(func(v PodSecurityPolicySpecPatch) []HostPortRangePatch { return v.HostPorts }).(HostPortRangePatchArrayOutput)
}

// privileged determines if a pod can request to be run as privileged.
func (o PodSecurityPolicySpecPatchOutput) Privileged() pulumi.BoolPtrOutput {
	return o.ApplyT(func(v PodSecurityPolicySpecPatch) *bool { return v.Privileged }).(pulumi.BoolPtrOutput)
}

// readOnlyRootFilesystem when set to true will force containers to run with a read only root file system.  If the container specifically requests to run with a non-read only root file system the PSP should deny the pod. If set to false the container may run with a read only root file system if it wishes but it will not be forced to.
func (o PodSecurityPolicySpecPatchOutput) ReadOnlyRootFilesystem() pulumi.BoolPtrOutput {
	return o.ApplyT(func(v PodSecurityPolicySpecPatch) *bool { return v.ReadOnlyRootFilesystem }).(pulumi.BoolPtrOutput)
}

// requiredDropCapabilities are the capabilities that will be dropped from the container.  These are required to be dropped and cannot be added.
func (o PodSecurityPolicySpecPatchOutput) RequiredDropCapabilities() pulumi.StringArrayOutput {
	return o.ApplyT(func(v PodSecurityPolicySpecPatch) []string { return v.RequiredDropCapabilities }).(pulumi.StringArrayOutput)
}

// RunAsGroup is the strategy that will dictate the allowable RunAsGroup values that may be set. If this field is omitted, the pod's RunAsGroup can take any value. This field requires the RunAsGroup feature gate to be enabled.
func (o PodSecurityPolicySpecPatchOutput) RunAsGroup() RunAsGroupStrategyOptionsPatchPtrOutput {
	return o.ApplyT(func(v PodSecurityPolicySpecPatch) *RunAsGroupStrategyOptionsPatch { return v.RunAsGroup }).(RunAsGroupStrategyOptionsPatchPtrOutput)
}

// runAsUser is the strategy that will dictate the allowable RunAsUser values that may be set.
func (o PodSecurityPolicySpecPatchOutput) RunAsUser() RunAsUserStrategyOptionsPatchPtrOutput {
	return o.ApplyT(func(v PodSecurityPolicySpecPatch) *RunAsUserStrategyOptionsPatch { return v.RunAsUser }).(RunAsUserStrategyOptionsPatchPtrOutput)
}

// runtimeClass is the strategy that will dictate the allowable RuntimeClasses for a pod. If this field is omitted, the pod's runtimeClassName field is unrestricted. Enforcement of this field depends on the RuntimeClass feature gate being enabled.
func (o PodSecurityPolicySpecPatchOutput) RuntimeClass() RuntimeClassStrategyOptionsPatchPtrOutput {
	return o.ApplyT(func(v PodSecurityPolicySpecPatch) *RuntimeClassStrategyOptionsPatch { return v.RuntimeClass }).(RuntimeClassStrategyOptionsPatchPtrOutput)
}

// seLinux is the strategy that will dictate the allowable labels that may be set.
func (o PodSecurityPolicySpecPatchOutput) SeLinux() SELinuxStrategyOptionsPatchPtrOutput {
	return o.ApplyT(func(v PodSecurityPolicySpecPatch) *SELinuxStrategyOptionsPatch { return v.SeLinux }).(SELinuxStrategyOptionsPatchPtrOutput)
}

// supplementalGroups is the strategy that will dictate what supplemental groups are used by the SecurityContext.
func (o PodSecurityPolicySpecPatchOutput) SupplementalGroups() SupplementalGroupsStrategyOptionsPatchPtrOutput {
	return o.ApplyT(func(v PodSecurityPolicySpecPatch) *SupplementalGroupsStrategyOptionsPatch {
		return v.SupplementalGroups
	}).(SupplementalGroupsStrategyOptionsPatchPtrOutput)
}

// volumes is a white list of allowed volume plugins. Empty indicates that no volumes may be used. To allow all volumes you may use '*'.
func (o PodSecurityPolicySpecPatchOutput) Volumes() pulumi.StringArrayOutput {
	return o.ApplyT(func(v PodSecurityPolicySpecPatch) []string { return v.Volumes }).(pulumi.StringArrayOutput)
}

type PodSecurityPolicySpecPatchPtrOutput struct{ *pulumi.OutputState }

func (PodSecurityPolicySpecPatchPtrOutput) ElementType() reflect.Type {
	return reflect.TypeOf((**PodSecurityPolicySpecPatch)(nil)).Elem()
}

func (o PodSecurityPolicySpecPatchPtrOutput) ToPodSecurityPolicySpecPatchPtrOutput() PodSecurityPolicySpecPatchPtrOutput {
	return o
}

func (o PodSecurityPolicySpecPatchPtrOutput) ToPodSecurityPolicySpecPatchPtrOutputWithContext(ctx context.Context) PodSecurityPolicySpecPatchPtrOutput {
	return o
}

func (o PodSecurityPolicySpecPatchPtrOutput) Elem() PodSecurityPolicySpecPatchOutput {
	return o.ApplyT(func(v *PodSecurityPolicySpecPatch) PodSecurityPolicySpecPatch {
		if v != nil {
			return *v
		}
		var ret PodSecurityPolicySpecPatch
		return ret
	}).(PodSecurityPolicySpecPatchOutput)
}

// allowPrivilegeEscalation determines if a pod can request to allow privilege escalation. If unspecified, defaults to true.
func (o PodSecurityPolicySpecPatchPtrOutput) AllowPrivilegeEscalation() pulumi.BoolPtrOutput {
	return o.ApplyT(func(v *PodSecurityPolicySpecPatch) *bool {
		if v == nil {
			return nil
		}
		return v.AllowPrivilegeEscalation
	}).(pulumi.BoolPtrOutput)
}

// AllowedCSIDrivers is a whitelist of inline CSI drivers that must be explicitly set to be embedded within a pod spec. An empty value indicates that any CSI driver can be used for inline ephemeral volumes. This is an alpha field, and is only honored if the API server enables the CSIInlineVolume feature gate.
func (o PodSecurityPolicySpecPatchPtrOutput) AllowedCSIDrivers() AllowedCSIDriverPatchArrayOutput {
	return o.ApplyT(func(v *PodSecurityPolicySpecPatch) []AllowedCSIDriverPatch {
		if v == nil {
			return nil
		}
		return v.AllowedCSIDrivers
	}).(AllowedCSIDriverPatchArrayOutput)
}

// allowedCapabilities is a list of capabilities that can be requested to add to the container. Capabilities in this field may be added at the pod author's discretion. You must not list a capability in both allowedCapabilities and requiredDropCapabilities.
func (o PodSecurityPolicySpecPatchPtrOutput) AllowedCapabilities() pulumi.StringArrayOutput {
	return o.ApplyT(func(v *PodSecurityPolicySpecPatch) []string {
		if v == nil {
			return nil
		}
		return v.AllowedCapabilities
	}).(pulumi.StringArrayOutput)
}

// allowedFlexVolumes is a whitelist of allowed Flexvolumes.  Empty or nil indicates that all Flexvolumes may be used.  This parameter is effective only when the usage of the Flexvolumes is allowed in the "volumes" field.
func (o PodSecurityPolicySpecPatchPtrOutput) AllowedFlexVolumes() AllowedFlexVolumePatchArrayOutput {
	return o.ApplyT(func(v *PodSecurityPolicySpecPatch) []AllowedFlexVolumePatch {
		if v == nil {
			return nil
		}
		return v.AllowedFlexVolumes
	}).(AllowedFlexVolumePatchArrayOutput)
}

// allowedHostPaths is a white list of allowed host paths. Empty indicates that all host paths may be used.
func (o PodSecurityPolicySpecPatchPtrOutput) AllowedHostPaths() AllowedHostPathPatchArrayOutput {
	return o.ApplyT(func(v *PodSecurityPolicySpecPatch) []AllowedHostPathPatch {
		if v == nil {
			return nil
		}
		return v.AllowedHostPaths
	}).(AllowedHostPathPatchArrayOutput)
}

// AllowedProcMountTypes is a whitelist of allowed ProcMountTypes. Empty or nil indicates that only the DefaultProcMountType may be used. This requires the ProcMountType feature flag to be enabled.
func (o PodSecurityPolicySpecPatchPtrOutput) AllowedProcMountTypes() pulumi.StringArrayOutput {
	return o.ApplyT(func(v *PodSecurityPolicySpecPatch) []string {
		if v == nil {
			return nil
		}
		return v.AllowedProcMountTypes
	}).(pulumi.StringArrayOutput)
}

// allowedUnsafeSysctls is a list of explicitly allowed unsafe sysctls, defaults to none. Each entry is either a plain sysctl name or ends in "*" in which case it is considered as a prefix of allowed sysctls. Single * means all unsafe sysctls are allowed. Kubelet has to whitelist all allowed unsafe sysctls explicitly to avoid rejection.
//
// Examples: e.g. "foo/*" allows "foo/bar", "foo/baz", etc. e.g. "foo.*" allows "foo.bar", "foo.baz", etc.
func (o PodSecurityPolicySpecPatchPtrOutput) AllowedUnsafeSysctls() pulumi.StringArrayOutput {
	return o.ApplyT(func(v *PodSecurityPolicySpecPatch) []string {
		if v == nil {
			return nil
		}
		return v.AllowedUnsafeSysctls
	}).(pulumi.StringArrayOutput)
}

// defaultAddCapabilities is the default set of capabilities that will be added to the container unless the pod spec specifically drops the capability.  You may not list a capability in both defaultAddCapabilities and requiredDropCapabilities. Capabilities added here are implicitly allowed, and need not be included in the allowedCapabilities list.
func (o PodSecurityPolicySpecPatchPtrOutput) DefaultAddCapabilities() pulumi.StringArrayOutput {
	return o.ApplyT(func(v *PodSecurityPolicySpecPatch) []string {
		if v == nil {
			return nil
		}
		return v.DefaultAddCapabilities
	}).(pulumi.StringArrayOutput)
}

// defaultAllowPrivilegeEscalation controls the default setting for whether a process can gain more privileges than its parent process.
func (o PodSecurityPolicySpecPatchPtrOutput) DefaultAllowPrivilegeEscalation() pulumi.BoolPtrOutput {
	return o.ApplyT(func(v *PodSecurityPolicySpecPatch) *bool {
		if v == nil {
			return nil
		}
		return v.DefaultAllowPrivilegeEscalation
	}).(pulumi.BoolPtrOutput)
}

// forbiddenSysctls is a list of explicitly forbidden sysctls, defaults to none. Each entry is either a plain sysctl name or ends in "*" in which case it is considered as a prefix of forbidden sysctls. Single * means all sysctls are forbidden.
//
// Examples: e.g. "foo/*" forbids "foo/bar", "foo/baz", etc. e.g. "foo.*" forbids "foo.bar", "foo.baz", etc.
func (o PodSecurityPolicySpecPatchPtrOutput) ForbiddenSysctls() pulumi.StringArrayOutput {
	return o.ApplyT(func(v *PodSecurityPolicySpecPatch) []string {
		if v == nil {
			return nil
		}
		return v.ForbiddenSysctls
	}).(pulumi.StringArrayOutput)
}

// fsGroup is the strategy that will dictate what fs group is used by the SecurityContext.
func (o PodSecurityPolicySpecPatchPtrOutput) FsGroup() FSGroupStrategyOptionsPatchPtrOutput {
	return o.ApplyT(func(v *PodSecurityPolicySpecPatch) *FSGroupStrategyOptionsPatch {
		if v == nil {
			return nil
		}
		return v.FsGroup
	}).(FSGroupStrategyOptionsPatchPtrOutput)
}

// hostIPC determines if the policy allows the use of HostIPC in the pod spec.
func (o PodSecurityPolicySpecPatchPtrOutput) HostIPC() pulumi.BoolPtrOutput {
	return o.ApplyT(func(v *PodSecurityPolicySpecPatch) *bool {
		if v == nil {
			return nil
		}
		return v.HostIPC
	}).(pulumi.BoolPtrOutput)
}

// hostNetwork determines if the policy allows the use of HostNetwork in the pod spec.
func (o PodSecurityPolicySpecPatchPtrOutput) HostNetwork() pulumi.BoolPtrOutput {
	return o.ApplyT(func(v *PodSecurityPolicySpecPatch) *bool {
		if v == nil {
			return nil
		}
		return v.HostNetwork
	}).(pulumi.BoolPtrOutput)
}

// hostPID determines if the policy allows the use of HostPID in the pod spec.
func (o PodSecurityPolicySpecPatchPtrOutput) HostPID() pulumi.BoolPtrOutput {
	return o.ApplyT(func(v *PodSecurityPolicySpecPatch) *bool {
		if v == nil {
			return nil
		}
		return v.HostPID
	}).(pulumi.BoolPtrOutput)
}

// hostPorts determines which host port ranges are allowed to be exposed.
func (o PodSecurityPolicySpecPatchPtrOutput) HostPorts() HostPortRangePatchArrayOutput {
	return o.ApplyT(func(v *PodSecurityPolicySpecPatch) []HostPortRangePatch {
		if v == nil {
			return nil
		}
		return v.HostPorts
	}).(HostPortRangePatchArrayOutput)
}

// privileged determines if a pod can request to be run as privileged.
func (o PodSecurityPolicySpecPatchPtrOutput) Privileged() pulumi.BoolPtrOutput {
	return o.ApplyT(func(v *PodSecurityPolicySpecPatch) *bool {
		if v == nil {
			return nil
		}
		return v.Privileged
	}).(pulumi.BoolPtrOutput)
}

// readOnlyRootFilesystem when set to true will force containers to run with a read only root file system.  If the container specifically requests to run with a non-read only root file system the PSP should deny the pod. If set to false the container may run with a read only root file system if it wishes but it will not be forced to.
func (o PodSecurityPolicySpecPatchPtrOutput) ReadOnlyRootFilesystem() pulumi.BoolPtrOutput {
	return o.ApplyT(func(v *PodSecurityPolicySpecPatch) *bool {
		if v == nil {
			return nil
		}
		return v.ReadOnlyRootFilesystem
	}).(pulumi.BoolPtrOutput)
}

// requiredDropCapabilities are the capabilities that will be dropped from the container.  These are required to be dropped and cannot be added.
func (o PodSecurityPolicySpecPatchPtrOutput) RequiredDropCapabilities() pulumi.StringArrayOutput {
	return o.ApplyT(func(v *PodSecurityPolicySpecPatch) []string {
		if v == nil {
			return nil
		}
		return v.RequiredDropCapabilities
	}).(pulumi.StringArrayOutput)
}

// RunAsGroup is the strategy that will dictate the allowable RunAsGroup values that may be set. If this field is omitted, the pod's RunAsGroup can take any value. This field requires the RunAsGroup feature gate to be enabled.
func (o PodSecurityPolicySpecPatchPtrOutput) RunAsGroup() RunAsGroupStrategyOptionsPatchPtrOutput {
	return o.ApplyT(func(v *PodSecurityPolicySpecPatch) *RunAsGroupStrategyOptionsPatch {
		if v == nil {
			return nil
		}
		return v.RunAsGroup
	}).(RunAsGroupStrategyOptionsPatchPtrOutput)
}

// runAsUser is the strategy that will dictate the allowable RunAsUser values that may be set.
func (o PodSecurityPolicySpecPatchPtrOutput) RunAsUser() RunAsUserStrategyOptionsPatchPtrOutput {
	return o.ApplyT(func(v *PodSecurityPolicySpecPatch) *RunAsUserStrategyOptionsPatch {
		if v == nil {
			return nil
		}
		return v.RunAsUser
	}).(RunAsUserStrategyOptionsPatchPtrOutput)
}

// runtimeClass is the strategy that will dictate the allowable RuntimeClasses for a pod. If this field is omitted, the pod's runtimeClassName field is unrestricted. Enforcement of this field depends on the RuntimeClass feature gate being enabled.
func (o PodSecurityPolicySpecPatchPtrOutput) RuntimeClass() RuntimeClassStrategyOptionsPatchPtrOutput {
	return o.ApplyT(func(v *PodSecurityPolicySpecPatch) *RuntimeClassStrategyOptionsPatch {
		if v == nil {
			return nil
		}
		return v.RuntimeClass
	}).(RuntimeClassStrategyOptionsPatchPtrOutput)
}

// seLinux is the strategy that will dictate the allowable labels that may be set.
func (o PodSecurityPolicySpecPatchPtrOutput) SeLinux() SELinuxStrategyOptionsPatchPtrOutput {
	return o.ApplyT(func(v *PodSecurityPolicySpecPatch) *SELinuxStrategyOptionsPatch {
		if v == nil {
			return nil
		}
		return v.SeLinux
	}).(SELinuxStrategyOptionsPatchPtrOutput)
}

// supplementalGroups is the strategy that will dictate what supplemental groups are used by the SecurityContext.
func (o PodSecurityPolicySpecPatchPtrOutput) SupplementalGroups() SupplementalGroupsStrategyOptionsPatchPtrOutput {
	return o.ApplyT(func(v *PodSecurityPolicySpecPatch) *SupplementalGroupsStrategyOptionsPatch {
		if v == nil {
			return nil
		}
		return v.SupplementalGroups
	}).(SupplementalGroupsStrategyOptionsPatchPtrOutput)
}

// volumes is a white list of allowed volume plugins. Empty indicates that no volumes may be used. To allow all volumes you may use '*'.
func (o PodSecurityPolicySpecPatchPtrOutput) Volumes() pulumi.StringArrayOutput {
	return o.ApplyT(func(v *PodSecurityPolicySpecPatch) []string {
		if v == nil {
			return nil
		}
		return v.Volumes
	}).(pulumi.StringArrayOutput)
}

// RunAsGroupStrategyOptions defines the strategy type and any options used to create the strategy.
type RunAsGroupStrategyOptions struct {
	// ranges are the allowed ranges of gids that may be used. If you would like to force a single gid then supply a single range with the same start and end. Required for MustRunAs.
	Ranges []IDRange `pulumi:"ranges"`
	// rule is the strategy that will dictate the allowable RunAsGroup values that may be set.
	Rule string `pulumi:"rule"`
}

// RunAsGroupStrategyOptionsInput is an input type that accepts RunAsGroupStrategyOptionsArgs and RunAsGroupStrategyOptionsOutput values.
// You can construct a concrete instance of `RunAsGroupStrategyOptionsInput` via:
//
//	RunAsGroupStrategyOptionsArgs{...}
type RunAsGroupStrategyOptionsInput interface {
	pulumi.Input

	ToRunAsGroupStrategyOptionsOutput() RunAsGroupStrategyOptionsOutput
	ToRunAsGroupStrategyOptionsOutputWithContext(context.Context) RunAsGroupStrategyOptionsOutput
}

// RunAsGroupStrategyOptions defines the strategy type and any options used to create the strategy.
type RunAsGroupStrategyOptionsArgs struct {
	// ranges are the allowed ranges of gids that may be used. If you would like to force a single gid then supply a single range with the same start and end. Required for MustRunAs.
	Ranges IDRangeArrayInput `pulumi:"ranges"`
	// rule is the strategy that will dictate the allowable RunAsGroup values that may be set.
	Rule pulumi.StringInput `pulumi:"rule"`
}

func (RunAsGroupStrategyOptionsArgs) ElementType() reflect.Type {
	return reflect.TypeOf((*RunAsGroupStrategyOptions)(nil)).Elem()
}

func (i RunAsGroupStrategyOptionsArgs) ToRunAsGroupStrategyOptionsOutput() RunAsGroupStrategyOptionsOutput {
	return i.ToRunAsGroupStrategyOptionsOutputWithContext(context.Background())
}

func (i RunAsGroupStrategyOptionsArgs) ToRunAsGroupStrategyOptionsOutputWithContext(ctx context.Context) RunAsGroupStrategyOptionsOutput {
	return pulumi.ToOutputWithContext(ctx, i).(RunAsGroupStrategyOptionsOutput)
}

func (i RunAsGroupStrategyOptionsArgs) ToRunAsGroupStrategyOptionsPtrOutput() RunAsGroupStrategyOptionsPtrOutput {
	return i.ToRunAsGroupStrategyOptionsPtrOutputWithContext(context.Background())
}

func (i RunAsGroupStrategyOptionsArgs) ToRunAsGroupStrategyOptionsPtrOutputWithContext(ctx context.Context) RunAsGroupStrategyOptionsPtrOutput {
	return pulumi.ToOutputWithContext(ctx, i).(RunAsGroupStrategyOptionsOutput).ToRunAsGroupStrategyOptionsPtrOutputWithContext(ctx)
}

// RunAsGroupStrategyOptionsPtrInput is an input type that accepts RunAsGroupStrategyOptionsArgs, RunAsGroupStrategyOptionsPtr and RunAsGroupStrategyOptionsPtrOutput values.
// You can construct a concrete instance of `RunAsGroupStrategyOptionsPtrInput` via:
//
//	        RunAsGroupStrategyOptionsArgs{...}
//
//	or:
//
//	        nil
type RunAsGroupStrategyOptionsPtrInput interface {
	pulumi.Input

	ToRunAsGroupStrategyOptionsPtrOutput() RunAsGroupStrategyOptionsPtrOutput
	ToRunAsGroupStrategyOptionsPtrOutputWithContext(context.Context) RunAsGroupStrategyOptionsPtrOutput
}

type runAsGroupStrategyOptionsPtrType RunAsGroupStrategyOptionsArgs

func RunAsGroupStrategyOptionsPtr(v *RunAsGroupStrategyOptionsArgs) RunAsGroupStrategyOptionsPtrInput {
	return (*runAsGroupStrategyOptionsPtrType)(v)
}

func (*runAsGroupStrategyOptionsPtrType) ElementType() reflect.Type {
	return reflect.TypeOf((**RunAsGroupStrategyOptions)(nil)).Elem()
}

func (i *runAsGroupStrategyOptionsPtrType) ToRunAsGroupStrategyOptionsPtrOutput() RunAsGroupStrategyOptionsPtrOutput {
	return i.ToRunAsGroupStrategyOptionsPtrOutputWithContext(context.Background())
}

func (i *runAsGroupStrategyOptionsPtrType) ToRunAsGroupStrategyOptionsPtrOutputWithContext(ctx context.Context) RunAsGroupStrategyOptionsPtrOutput {
	return pulumi.ToOutputWithContext(ctx, i).(RunAsGroupStrategyOptionsPtrOutput)
}

// RunAsGroupStrategyOptions defines the strategy type and any options used to create the strategy.
type RunAsGroupStrategyOptionsOutput struct{ *pulumi.OutputState }

func (RunAsGroupStrategyOptionsOutput) ElementType() reflect.Type {
	return reflect.TypeOf((*RunAsGroupStrategyOptions)(nil)).Elem()
}

func (o RunAsGroupStrategyOptionsOutput) ToRunAsGroupStrategyOptionsOutput() RunAsGroupStrategyOptionsOutput {
	return o
}

func (o RunAsGroupStrategyOptionsOutput) ToRunAsGroupStrategyOptionsOutputWithContext(ctx context.Context) RunAsGroupStrategyOptionsOutput {
	return o
}

func (o RunAsGroupStrategyOptionsOutput) ToRunAsGroupStrategyOptionsPtrOutput() RunAsGroupStrategyOptionsPtrOutput {
	return o.ToRunAsGroupStrategyOptionsPtrOutputWithContext(context.Background())
}

func (o RunAsGroupStrategyOptionsOutput) ToRunAsGroupStrategyOptionsPtrOutputWithContext(ctx context.Context) RunAsGroupStrategyOptionsPtrOutput {
	return o.ApplyTWithContext(ctx, func(_ context.Context, v RunAsGroupStrategyOptions) *RunAsGroupStrategyOptions {
		return &v
	}).(RunAsGroupStrategyOptionsPtrOutput)
}

// ranges are the allowed ranges of gids that may be used. If you would like to force a single gid then supply a single range with the same start and end. Required for MustRunAs.
func (o RunAsGroupStrategyOptionsOutput) Ranges() IDRangeArrayOutput {
	return o.ApplyT(func(v RunAsGroupStrategyOptions) []IDRange { return v.Ranges }).(IDRangeArrayOutput)
}

// rule is the strategy that will dictate the allowable RunAsGroup values that may be set.
func (o RunAsGroupStrategyOptionsOutput) Rule() pulumi.StringOutput {
	return o.ApplyT(func(v RunAsGroupStrategyOptions) string { return v.Rule }).(pulumi.StringOutput)
}

type RunAsGroupStrategyOptionsPtrOutput struct{ *pulumi.OutputState }

func (RunAsGroupStrategyOptionsPtrOutput) ElementType() reflect.Type {
	return reflect.TypeOf((**RunAsGroupStrategyOptions)(nil)).Elem()
}

func (o RunAsGroupStrategyOptionsPtrOutput) ToRunAsGroupStrategyOptionsPtrOutput() RunAsGroupStrategyOptionsPtrOutput {
	return o
}

func (o RunAsGroupStrategyOptionsPtrOutput) ToRunAsGroupStrategyOptionsPtrOutputWithContext(ctx context.Context) RunAsGroupStrategyOptionsPtrOutput {
	return o
}

func (o RunAsGroupStrategyOptionsPtrOutput) Elem() RunAsGroupStrategyOptionsOutput {
	return o.ApplyT(func(v *RunAsGroupStrategyOptions) RunAsGroupStrategyOptions {
		if v != nil {
			return *v
		}
		var ret RunAsGroupStrategyOptions
		return ret
	}).(RunAsGroupStrategyOptionsOutput)
}

// ranges are the allowed ranges of gids that may be used. If you would like to force a single gid then supply a single range with the same start and end. Required for MustRunAs.
func (o RunAsGroupStrategyOptionsPtrOutput) Ranges() IDRangeArrayOutput {
	return o.ApplyT(func(v *RunAsGroupStrategyOptions) []IDRange {
		if v == nil {
			return nil
		}
		return v.Ranges
	}).(IDRangeArrayOutput)
}

// rule is the strategy that will dictate the allowable RunAsGroup values that may be set.
func (o RunAsGroupStrategyOptionsPtrOutput) Rule() pulumi.StringPtrOutput {
	return o.ApplyT(func(v *RunAsGroupStrategyOptions) *string {
		if v == nil {
			return nil
		}
		return &v.Rule
	}).(pulumi.StringPtrOutput)
}

// RunAsGroupStrategyOptions defines the strategy type and any options used to create the strategy.
type RunAsGroupStrategyOptionsPatch struct {
	// ranges are the allowed ranges of gids that may be used. If you would like to force a single gid then supply a single range with the same start and end. Required for MustRunAs.
	Ranges []IDRangePatch `pulumi:"ranges"`
	// rule is the strategy that will dictate the allowable RunAsGroup values that may be set.
	Rule *string `pulumi:"rule"`
}

// RunAsGroupStrategyOptionsPatchInput is an input type that accepts RunAsGroupStrategyOptionsPatchArgs and RunAsGroupStrategyOptionsPatchOutput values.
// You can construct a concrete instance of `RunAsGroupStrategyOptionsPatchInput` via:
//
//	RunAsGroupStrategyOptionsPatchArgs{...}
type RunAsGroupStrategyOptionsPatchInput interface {
	pulumi.Input

	ToRunAsGroupStrategyOptionsPatchOutput() RunAsGroupStrategyOptionsPatchOutput
	ToRunAsGroupStrategyOptionsPatchOutputWithContext(context.Context) RunAsGroupStrategyOptionsPatchOutput
}

// RunAsGroupStrategyOptions defines the strategy type and any options used to create the strategy.
type RunAsGroupStrategyOptionsPatchArgs struct {
	// ranges are the allowed ranges of gids that may be used. If you would like to force a single gid then supply a single range with the same start and end. Required for MustRunAs.
	Ranges IDRangePatchArrayInput `pulumi:"ranges"`
	// rule is the strategy that will dictate the allowable RunAsGroup values that may be set.
	Rule pulumi.StringPtrInput `pulumi:"rule"`
}

func (RunAsGroupStrategyOptionsPatchArgs) ElementType() reflect.Type {
	return reflect.TypeOf((*RunAsGroupStrategyOptionsPatch)(nil)).Elem()
}

func (i RunAsGroupStrategyOptionsPatchArgs) ToRunAsGroupStrategyOptionsPatchOutput() RunAsGroupStrategyOptionsPatchOutput {
	return i.ToRunAsGroupStrategyOptionsPatchOutputWithContext(context.Background())
}

func (i RunAsGroupStrategyOptionsPatchArgs) ToRunAsGroupStrategyOptionsPatchOutputWithContext(ctx context.Context) RunAsGroupStrategyOptionsPatchOutput {
	return pulumi.ToOutputWithContext(ctx, i).(RunAsGroupStrategyOptionsPatchOutput)
}

func (i RunAsGroupStrategyOptionsPatchArgs) ToRunAsGroupStrategyOptionsPatchPtrOutput() RunAsGroupStrategyOptionsPatchPtrOutput {
	return i.ToRunAsGroupStrategyOptionsPatchPtrOutputWithContext(context.Background())
}

func (i RunAsGroupStrategyOptionsPatchArgs) ToRunAsGroupStrategyOptionsPatchPtrOutputWithContext(ctx context.Context) RunAsGroupStrategyOptionsPatchPtrOutput {
	return pulumi.ToOutputWithContext(ctx, i).(RunAsGroupStrategyOptionsPatchOutput).ToRunAsGroupStrategyOptionsPatchPtrOutputWithContext(ctx)
}

// RunAsGroupStrategyOptionsPatchPtrInput is an input type that accepts RunAsGroupStrategyOptionsPatchArgs, RunAsGroupStrategyOptionsPatchPtr and RunAsGroupStrategyOptionsPatchPtrOutput values.
// You can construct a concrete instance of `RunAsGroupStrategyOptionsPatchPtrInput` via:
//
//	        RunAsGroupStrategyOptionsPatchArgs{...}
//
//	or:
//
//	        nil
type RunAsGroupStrategyOptionsPatchPtrInput interface {
	pulumi.Input

	ToRunAsGroupStrategyOptionsPatchPtrOutput() RunAsGroupStrategyOptionsPatchPtrOutput
	ToRunAsGroupStrategyOptionsPatchPtrOutputWithContext(context.Context) RunAsGroupStrategyOptionsPatchPtrOutput
}

type runAsGroupStrategyOptionsPatchPtrType RunAsGroupStrategyOptionsPatchArgs

func RunAsGroupStrategyOptionsPatchPtr(v *RunAsGroupStrategyOptionsPatchArgs) RunAsGroupStrategyOptionsPatchPtrInput {
	return (*runAsGroupStrategyOptionsPatchPtrType)(v)
}

func (*runAsGroupStrategyOptionsPatchPtrType) ElementType() reflect.Type {
	return reflect.TypeOf((**RunAsGroupStrategyOptionsPatch)(nil)).Elem()
}

func (i *runAsGroupStrategyOptionsPatchPtrType) ToRunAsGroupStrategyOptionsPatchPtrOutput() RunAsGroupStrategyOptionsPatchPtrOutput {
	return i.ToRunAsGroupStrategyOptionsPatchPtrOutputWithContext(context.Background())
}

func (i *runAsGroupStrategyOptionsPatchPtrType) ToRunAsGroupStrategyOptionsPatchPtrOutputWithContext(ctx context.Context) RunAsGroupStrategyOptionsPatchPtrOutput {
	return pulumi.ToOutputWithContext(ctx, i).(RunAsGroupStrategyOptionsPatchPtrOutput)
}

// RunAsGroupStrategyOptions defines the strategy type and any options used to create the strategy.
type RunAsGroupStrategyOptionsPatchOutput struct{ *pulumi.OutputState }

func (RunAsGroupStrategyOptionsPatchOutput) ElementType() reflect.Type {
	return reflect.TypeOf((*RunAsGroupStrategyOptionsPatch)(nil)).Elem()
}

func (o RunAsGroupStrategyOptionsPatchOutput) ToRunAsGroupStrategyOptionsPatchOutput() RunAsGroupStrategyOptionsPatchOutput {
	return o
}

func (o RunAsGroupStrategyOptionsPatchOutput) ToRunAsGroupStrategyOptionsPatchOutputWithContext(ctx context.Context) RunAsGroupStrategyOptionsPatchOutput {
	return o
}

func (o RunAsGroupStrategyOptionsPatchOutput) ToRunAsGroupStrategyOptionsPatchPtrOutput() RunAsGroupStrategyOptionsPatchPtrOutput {
	return o.ToRunAsGroupStrategyOptionsPatchPtrOutputWithContext(context.Background())
}

func (o RunAsGroupStrategyOptionsPatchOutput) ToRunAsGroupStrategyOptionsPatchPtrOutputWithContext(ctx context.Context) RunAsGroupStrategyOptionsPatchPtrOutput {
	return o.ApplyTWithContext(ctx, func(_ context.Context, v RunAsGroupStrategyOptionsPatch) *RunAsGroupStrategyOptionsPatch {
		return &v
	}).(RunAsGroupStrategyOptionsPatchPtrOutput)
}

// ranges are the allowed ranges of gids that may be used. If you would like to force a single gid then supply a single range with the same start and end. Required for MustRunAs.
func (o RunAsGroupStrategyOptionsPatchOutput) Ranges() IDRangePatchArrayOutput {
	return o.ApplyT(func(v RunAsGroupStrategyOptionsPatch) []IDRangePatch { return v.Ranges }).(IDRangePatchArrayOutput)
}

// rule is the strategy that will dictate the allowable RunAsGroup values that may be set.
func (o RunAsGroupStrategyOptionsPatchOutput) Rule() pulumi.StringPtrOutput {
	return o.ApplyT(func(v RunAsGroupStrategyOptionsPatch) *string { return v.Rule }).(pulumi.StringPtrOutput)
}

type RunAsGroupStrategyOptionsPatchPtrOutput struct{ *pulumi.OutputState }

func (RunAsGroupStrategyOptionsPatchPtrOutput) ElementType() reflect.Type {
	return reflect.TypeOf((**RunAsGroupStrategyOptionsPatch)(nil)).Elem()
}

func (o RunAsGroupStrategyOptionsPatchPtrOutput) ToRunAsGroupStrategyOptionsPatchPtrOutput() RunAsGroupStrategyOptionsPatchPtrOutput {
	return o
}

func (o RunAsGroupStrategyOptionsPatchPtrOutput) ToRunAsGroupStrategyOptionsPatchPtrOutputWithContext(ctx context.Context) RunAsGroupStrategyOptionsPatchPtrOutput {
	return o
}

func (o RunAsGroupStrategyOptionsPatchPtrOutput) Elem() RunAsGroupStrategyOptionsPatchOutput {
	return o.ApplyT(func(v *RunAsGroupStrategyOptionsPatch) RunAsGroupStrategyOptionsPatch {
		if v != nil {
			return *v
		}
		var ret RunAsGroupStrategyOptionsPatch
		return ret
	}).(RunAsGroupStrategyOptionsPatchOutput)
}

// ranges are the allowed ranges of gids that may be used. If you would like to force a single gid then supply a single range with the same start and end. Required for MustRunAs.
func (o RunAsGroupStrategyOptionsPatchPtrOutput) Ranges() IDRangePatchArrayOutput {
	return o.ApplyT(func(v *RunAsGroupStrategyOptionsPatch) []IDRangePatch {
		if v == nil {
			return nil
		}
		return v.Ranges
	}).(IDRangePatchArrayOutput)
}

// rule is the strategy that will dictate the allowable RunAsGroup values that may be set.
func (o RunAsGroupStrategyOptionsPatchPtrOutput) Rule() pulumi.StringPtrOutput {
	return o.ApplyT(func(v *RunAsGroupStrategyOptionsPatch) *string {
		if v == nil {
			return nil
		}
		return v.Rule
	}).(pulumi.StringPtrOutput)
}

// RunAsUserStrategyOptions defines the strategy type and any options used to create the strategy.
type RunAsUserStrategyOptions struct {
	// ranges are the allowed ranges of uids that may be used. If you would like to force a single uid then supply a single range with the same start and end. Required for MustRunAs.
	Ranges []IDRange `pulumi:"ranges"`
	// rule is the strategy that will dictate the allowable RunAsUser values that may be set.
	Rule string `pulumi:"rule"`
}

// RunAsUserStrategyOptionsInput is an input type that accepts RunAsUserStrategyOptionsArgs and RunAsUserStrategyOptionsOutput values.
// You can construct a concrete instance of `RunAsUserStrategyOptionsInput` via:
//
//	RunAsUserStrategyOptionsArgs{...}
type RunAsUserStrategyOptionsInput interface {
	pulumi.Input

	ToRunAsUserStrategyOptionsOutput() RunAsUserStrategyOptionsOutput
	ToRunAsUserStrategyOptionsOutputWithContext(context.Context) RunAsUserStrategyOptionsOutput
}

// RunAsUserStrategyOptions defines the strategy type and any options used to create the strategy.
type RunAsUserStrategyOptionsArgs struct {
	// ranges are the allowed ranges of uids that may be used. If you would like to force a single uid then supply a single range with the same start and end. Required for MustRunAs.
	Ranges IDRangeArrayInput `pulumi:"ranges"`
	// rule is the strategy that will dictate the allowable RunAsUser values that may be set.
	Rule pulumi.StringInput `pulumi:"rule"`
}

func (RunAsUserStrategyOptionsArgs) ElementType() reflect.Type {
	return reflect.TypeOf((*RunAsUserStrategyOptions)(nil)).Elem()
}

func (i RunAsUserStrategyOptionsArgs) ToRunAsUserStrategyOptionsOutput() RunAsUserStrategyOptionsOutput {
	return i.ToRunAsUserStrategyOptionsOutputWithContext(context.Background())
}

func (i RunAsUserStrategyOptionsArgs) ToRunAsUserStrategyOptionsOutputWithContext(ctx context.Context) RunAsUserStrategyOptionsOutput {
	return pulumi.ToOutputWithContext(ctx, i).(RunAsUserStrategyOptionsOutput)
}

func (i RunAsUserStrategyOptionsArgs) ToRunAsUserStrategyOptionsPtrOutput() RunAsUserStrategyOptionsPtrOutput {
	return i.ToRunAsUserStrategyOptionsPtrOutputWithContext(context.Background())
}

func (i RunAsUserStrategyOptionsArgs) ToRunAsUserStrategyOptionsPtrOutputWithContext(ctx context.Context) RunAsUserStrategyOptionsPtrOutput {
	return pulumi.ToOutputWithContext(ctx, i).(RunAsUserStrategyOptionsOutput).ToRunAsUserStrategyOptionsPtrOutputWithContext(ctx)
}

// RunAsUserStrategyOptionsPtrInput is an input type that accepts RunAsUserStrategyOptionsArgs, RunAsUserStrategyOptionsPtr and RunAsUserStrategyOptionsPtrOutput values.
// You can construct a concrete instance of `RunAsUserStrategyOptionsPtrInput` via:
//
//	        RunAsUserStrategyOptionsArgs{...}
//
//	or:
//
//	        nil
type RunAsUserStrategyOptionsPtrInput interface {
	pulumi.Input

	ToRunAsUserStrategyOptionsPtrOutput() RunAsUserStrategyOptionsPtrOutput
	ToRunAsUserStrategyOptionsPtrOutputWithContext(context.Context) RunAsUserStrategyOptionsPtrOutput
}

type runAsUserStrategyOptionsPtrType RunAsUserStrategyOptionsArgs

func RunAsUserStrategyOptionsPtr(v *RunAsUserStrategyOptionsArgs) RunAsUserStrategyOptionsPtrInput {
	return (*runAsUserStrategyOptionsPtrType)(v)
}

func (*runAsUserStrategyOptionsPtrType) ElementType() reflect.Type {
	return reflect.TypeOf((**RunAsUserStrategyOptions)(nil)).Elem()
}

func (i *runAsUserStrategyOptionsPtrType) ToRunAsUserStrategyOptionsPtrOutput() RunAsUserStrategyOptionsPtrOutput {
	return i.ToRunAsUserStrategyOptionsPtrOutputWithContext(context.Background())
}

func (i *runAsUserStrategyOptionsPtrType) ToRunAsUserStrategyOptionsPtrOutputWithContext(ctx context.Context) RunAsUserStrategyOptionsPtrOutput {
	return pulumi.ToOutputWithContext(ctx, i).(RunAsUserStrategyOptionsPtrOutput)
}

// RunAsUserStrategyOptions defines the strategy type and any options used to create the strategy.
type RunAsUserStrategyOptionsOutput struct{ *pulumi.OutputState }

func (RunAsUserStrategyOptionsOutput) ElementType() reflect.Type {
	return reflect.TypeOf((*RunAsUserStrategyOptions)(nil)).Elem()
}

func (o RunAsUserStrategyOptionsOutput) ToRunAsUserStrategyOptionsOutput() RunAsUserStrategyOptionsOutput {
	return o
}

func (o RunAsUserStrategyOptionsOutput) ToRunAsUserStrategyOptionsOutputWithContext(ctx context.Context) RunAsUserStrategyOptionsOutput {
	return o
}

func (o RunAsUserStrategyOptionsOutput) ToRunAsUserStrategyOptionsPtrOutput() RunAsUserStrategyOptionsPtrOutput {
	return o.ToRunAsUserStrategyOptionsPtrOutputWithContext(context.Background())
}

func (o RunAsUserStrategyOptionsOutput) ToRunAsUserStrategyOptionsPtrOutputWithContext(ctx context.Context) RunAsUserStrategyOptionsPtrOutput {
	return o.ApplyTWithContext(ctx, func(_ context.Context, v RunAsUserStrategyOptions) *RunAsUserStrategyOptions {
		return &v
	}).(RunAsUserStrategyOptionsPtrOutput)
}

// ranges are the allowed ranges of uids that may be used. If you would like to force a single uid then supply a single range with the same start and end. Required for MustRunAs.
func (o RunAsUserStrategyOptionsOutput) Ranges() IDRangeArrayOutput {
	return o.ApplyT(func(v RunAsUserStrategyOptions) []IDRange { return v.Ranges }).(IDRangeArrayOutput)
}

// rule is the strategy that will dictate the allowable RunAsUser values that may be set.
func (o RunAsUserStrategyOptionsOutput) Rule() pulumi.StringOutput {
	return o.ApplyT(func(v RunAsUserStrategyOptions) string { return v.Rule }).(pulumi.StringOutput)
}

type RunAsUserStrategyOptionsPtrOutput struct{ *pulumi.OutputState }

func (RunAsUserStrategyOptionsPtrOutput) ElementType() reflect.Type {
	return reflect.TypeOf((**RunAsUserStrategyOptions)(nil)).Elem()
}

func (o RunAsUserStrategyOptionsPtrOutput) ToRunAsUserStrategyOptionsPtrOutput() RunAsUserStrategyOptionsPtrOutput {
	return o
}

func (o RunAsUserStrategyOptionsPtrOutput) ToRunAsUserStrategyOptionsPtrOutputWithContext(ctx context.Context) RunAsUserStrategyOptionsPtrOutput {
	return o
}

func (o RunAsUserStrategyOptionsPtrOutput) Elem() RunAsUserStrategyOptionsOutput {
	return o.ApplyT(func(v *RunAsUserStrategyOptions) RunAsUserStrategyOptions {
		if v != nil {
			return *v
		}
		var ret RunAsUserStrategyOptions
		return ret
	}).(RunAsUserStrategyOptionsOutput)
}

// ranges are the allowed ranges of uids that may be used. If you would like to force a single uid then supply a single range with the same start and end. Required for MustRunAs.
func (o RunAsUserStrategyOptionsPtrOutput) Ranges() IDRangeArrayOutput {
	return o.ApplyT(func(v *RunAsUserStrategyOptions) []IDRange {
		if v == nil {
			return nil
		}
		return v.Ranges
	}).(IDRangeArrayOutput)
}

// rule is the strategy that will dictate the allowable RunAsUser values that may be set.
func (o RunAsUserStrategyOptionsPtrOutput) Rule() pulumi.StringPtrOutput {
	return o.ApplyT(func(v *RunAsUserStrategyOptions) *string {
		if v == nil {
			return nil
		}
		return &v.Rule
	}).(pulumi.StringPtrOutput)
}

// RunAsUserStrategyOptions defines the strategy type and any options used to create the strategy.
type RunAsUserStrategyOptionsPatch struct {
	// ranges are the allowed ranges of uids that may be used. If you would like to force a single uid then supply a single range with the same start and end. Required for MustRunAs.
	Ranges []IDRangePatch `pulumi:"ranges"`
	// rule is the strategy that will dictate the allowable RunAsUser values that may be set.
	Rule *string `pulumi:"rule"`
}

// RunAsUserStrategyOptionsPatchInput is an input type that accepts RunAsUserStrategyOptionsPatchArgs and RunAsUserStrategyOptionsPatchOutput values.
// You can construct a concrete instance of `RunAsUserStrategyOptionsPatchInput` via:
//
//	RunAsUserStrategyOptionsPatchArgs{...}
type RunAsUserStrategyOptionsPatchInput interface {
	pulumi.Input

	ToRunAsUserStrategyOptionsPatchOutput() RunAsUserStrategyOptionsPatchOutput
	ToRunAsUserStrategyOptionsPatchOutputWithContext(context.Context) RunAsUserStrategyOptionsPatchOutput
}

// RunAsUserStrategyOptions defines the strategy type and any options used to create the strategy.
type RunAsUserStrategyOptionsPatchArgs struct {
	// ranges are the allowed ranges of uids that may be used. If you would like to force a single uid then supply a single range with the same start and end. Required for MustRunAs.
	Ranges IDRangePatchArrayInput `pulumi:"ranges"`
	// rule is the strategy that will dictate the allowable RunAsUser values that may be set.
	Rule pulumi.StringPtrInput `pulumi:"rule"`
}

func (RunAsUserStrategyOptionsPatchArgs) ElementType() reflect.Type {
	return reflect.TypeOf((*RunAsUserStrategyOptionsPatch)(nil)).Elem()
}

func (i RunAsUserStrategyOptionsPatchArgs) ToRunAsUserStrategyOptionsPatchOutput() RunAsUserStrategyOptionsPatchOutput {
	return i.ToRunAsUserStrategyOptionsPatchOutputWithContext(context.Background())
}

func (i RunAsUserStrategyOptionsPatchArgs) ToRunAsUserStrategyOptionsPatchOutputWithContext(ctx context.Context) RunAsUserStrategyOptionsPatchOutput {
	return pulumi.ToOutputWithContext(ctx, i).(RunAsUserStrategyOptionsPatchOutput)
}

func (i RunAsUserStrategyOptionsPatchArgs) ToRunAsUserStrategyOptionsPatchPtrOutput() RunAsUserStrategyOptionsPatchPtrOutput {
	return i.ToRunAsUserStrategyOptionsPatchPtrOutputWithContext(context.Background())
}

func (i RunAsUserStrategyOptionsPatchArgs) ToRunAsUserStrategyOptionsPatchPtrOutputWithContext(ctx context.Context) RunAsUserStrategyOptionsPatchPtrOutput {
	return pulumi.ToOutputWithContext(ctx, i).(RunAsUserStrategyOptionsPatchOutput).ToRunAsUserStrategyOptionsPatchPtrOutputWithContext(ctx)
}

// RunAsUserStrategyOptionsPatchPtrInput is an input type that accepts RunAsUserStrategyOptionsPatchArgs, RunAsUserStrategyOptionsPatchPtr and RunAsUserStrategyOptionsPatchPtrOutput values.
// You can construct a concrete instance of `RunAsUserStrategyOptionsPatchPtrInput` via:
//
//	        RunAsUserStrategyOptionsPatchArgs{...}
//
//	or:
//
//	        nil
type RunAsUserStrategyOptionsPatchPtrInput interface {
	pulumi.Input

	ToRunAsUserStrategyOptionsPatchPtrOutput() RunAsUserStrategyOptionsPatchPtrOutput
	ToRunAsUserStrategyOptionsPatchPtrOutputWithContext(context.Context) RunAsUserStrategyOptionsPatchPtrOutput
}

type runAsUserStrategyOptionsPatchPtrType RunAsUserStrategyOptionsPatchArgs

func RunAsUserStrategyOptionsPatchPtr(v *RunAsUserStrategyOptionsPatchArgs) RunAsUserStrategyOptionsPatchPtrInput {
	return (*runAsUserStrategyOptionsPatchPtrType)(v)
}

func (*runAsUserStrategyOptionsPatchPtrType) ElementType() reflect.Type {
	return reflect.TypeOf((**RunAsUserStrategyOptionsPatch)(nil)).Elem()
}

func (i *runAsUserStrategyOptionsPatchPtrType) ToRunAsUserStrategyOptionsPatchPtrOutput() RunAsUserStrategyOptionsPatchPtrOutput {
	return i.ToRunAsUserStrategyOptionsPatchPtrOutputWithContext(context.Background())
}

func (i *runAsUserStrategyOptionsPatchPtrType) ToRunAsUserStrategyOptionsPatchPtrOutputWithContext(ctx context.Context) RunAsUserStrategyOptionsPatchPtrOutput {
	return pulumi.ToOutputWithContext(ctx, i).(RunAsUserStrategyOptionsPatchPtrOutput)
}

// RunAsUserStrategyOptions defines the strategy type and any options used to create the strategy.
type RunAsUserStrategyOptionsPatchOutput struct{ *pulumi.OutputState }

func (RunAsUserStrategyOptionsPatchOutput) ElementType() reflect.Type {
	return reflect.TypeOf((*RunAsUserStrategyOptionsPatch)(nil)).Elem()
}

func (o RunAsUserStrategyOptionsPatchOutput) ToRunAsUserStrategyOptionsPatchOutput() RunAsUserStrategyOptionsPatchOutput {
	return o
}

func (o RunAsUserStrategyOptionsPatchOutput) ToRunAsUserStrategyOptionsPatchOutputWithContext(ctx context.Context) RunAsUserStrategyOptionsPatchOutput {
	return o
}

func (o RunAsUserStrategyOptionsPatchOutput) ToRunAsUserStrategyOptionsPatchPtrOutput() RunAsUserStrategyOptionsPatchPtrOutput {
	return o.ToRunAsUserStrategyOptionsPatchPtrOutputWithContext(context.Background())
}

func (o RunAsUserStrategyOptionsPatchOutput) ToRunAsUserStrategyOptionsPatchPtrOutputWithContext(ctx context.Context) RunAsUserStrategyOptionsPatchPtrOutput {
	return o.ApplyTWithContext(ctx, func(_ context.Context, v RunAsUserStrategyOptionsPatch) *RunAsUserStrategyOptionsPatch {
		return &v
	}).(RunAsUserStrategyOptionsPatchPtrOutput)
}

// ranges are the allowed ranges of uids that may be used. If you would like to force a single uid then supply a single range with the same start and end. Required for MustRunAs.
func (o RunAsUserStrategyOptionsPatchOutput) Ranges() IDRangePatchArrayOutput {
	return o.ApplyT(func(v RunAsUserStrategyOptionsPatch) []IDRangePatch { return v.Ranges }).(IDRangePatchArrayOutput)
}

// rule is the strategy that will dictate the allowable RunAsUser values that may be set.
func (o RunAsUserStrategyOptionsPatchOutput) Rule() pulumi.StringPtrOutput {
	return o.ApplyT(func(v RunAsUserStrategyOptionsPatch) *string { return v.Rule }).(pulumi.StringPtrOutput)
}

type RunAsUserStrategyOptionsPatchPtrOutput struct{ *pulumi.OutputState }

func (RunAsUserStrategyOptionsPatchPtrOutput) ElementType() reflect.Type {
	return reflect.TypeOf((**RunAsUserStrategyOptionsPatch)(nil)).Elem()
}

func (o RunAsUserStrategyOptionsPatchPtrOutput) ToRunAsUserStrategyOptionsPatchPtrOutput() RunAsUserStrategyOptionsPatchPtrOutput {
	return o
}

func (o RunAsUserStrategyOptionsPatchPtrOutput) ToRunAsUserStrategyOptionsPatchPtrOutputWithContext(ctx context.Context) RunAsUserStrategyOptionsPatchPtrOutput {
	return o
}

func (o RunAsUserStrategyOptionsPatchPtrOutput) Elem() RunAsUserStrategyOptionsPatchOutput {
	return o.ApplyT(func(v *RunAsUserStrategyOptionsPatch) RunAsUserStrategyOptionsPatch {
		if v != nil {
			return *v
		}
		var ret RunAsUserStrategyOptionsPatch
		return ret
	}).(RunAsUserStrategyOptionsPatchOutput)
}

// ranges are the allowed ranges of uids that may be used. If you would like to force a single uid then supply a single range with the same start and end. Required for MustRunAs.
func (o RunAsUserStrategyOptionsPatchPtrOutput) Ranges() IDRangePatchArrayOutput {
	return o.ApplyT(func(v *RunAsUserStrategyOptionsPatch) []IDRangePatch {
		if v == nil {
			return nil
		}
		return v.Ranges
	}).(IDRangePatchArrayOutput)
}

// rule is the strategy that will dictate the allowable RunAsUser values that may be set.
func (o RunAsUserStrategyOptionsPatchPtrOutput) Rule() pulumi.StringPtrOutput {
	return o.ApplyT(func(v *RunAsUserStrategyOptionsPatch) *string {
		if v == nil {
			return nil
		}
		return v.Rule
	}).(pulumi.StringPtrOutput)
}

// RuntimeClassStrategyOptions define the strategy that will dictate the allowable RuntimeClasses for a pod.
type RuntimeClassStrategyOptions struct {
	// allowedRuntimeClassNames is a whitelist of RuntimeClass names that may be specified on a pod. A value of "*" means that any RuntimeClass name is allowed, and must be the only item in the list. An empty list requires the RuntimeClassName field to be unset.
	AllowedRuntimeClassNames []string `pulumi:"allowedRuntimeClassNames"`
	// defaultRuntimeClassName is the default RuntimeClassName to set on the pod. The default MUST be allowed by the allowedRuntimeClassNames list. A value of nil does not mutate the Pod.
	DefaultRuntimeClassName *string `pulumi:"defaultRuntimeClassName"`
}

// RuntimeClassStrategyOptionsInput is an input type that accepts RuntimeClassStrategyOptionsArgs and RuntimeClassStrategyOptionsOutput values.
// You can construct a concrete instance of `RuntimeClassStrategyOptionsInput` via:
//
//	RuntimeClassStrategyOptionsArgs{...}
type RuntimeClassStrategyOptionsInput interface {
	pulumi.Input

	ToRuntimeClassStrategyOptionsOutput() RuntimeClassStrategyOptionsOutput
	ToRuntimeClassStrategyOptionsOutputWithContext(context.Context) RuntimeClassStrategyOptionsOutput
}

// RuntimeClassStrategyOptions define the strategy that will dictate the allowable RuntimeClasses for a pod.
type RuntimeClassStrategyOptionsArgs struct {
	// allowedRuntimeClassNames is a whitelist of RuntimeClass names that may be specified on a pod. A value of "*" means that any RuntimeClass name is allowed, and must be the only item in the list. An empty list requires the RuntimeClassName field to be unset.
	AllowedRuntimeClassNames pulumi.StringArrayInput `pulumi:"allowedRuntimeClassNames"`
	// defaultRuntimeClassName is the default RuntimeClassName to set on the pod. The default MUST be allowed by the allowedRuntimeClassNames list. A value of nil does not mutate the Pod.
	DefaultRuntimeClassName pulumi.StringPtrInput `pulumi:"defaultRuntimeClassName"`
}

func (RuntimeClassStrategyOptionsArgs) ElementType() reflect.Type {
	return reflect.TypeOf((*RuntimeClassStrategyOptions)(nil)).Elem()
}

func (i RuntimeClassStrategyOptionsArgs) ToRuntimeClassStrategyOptionsOutput() RuntimeClassStrategyOptionsOutput {
	return i.ToRuntimeClassStrategyOptionsOutputWithContext(context.Background())
}

func (i RuntimeClassStrategyOptionsArgs) ToRuntimeClassStrategyOptionsOutputWithContext(ctx context.Context) RuntimeClassStrategyOptionsOutput {
	return pulumi.ToOutputWithContext(ctx, i).(RuntimeClassStrategyOptionsOutput)
}

func (i RuntimeClassStrategyOptionsArgs) ToRuntimeClassStrategyOptionsPtrOutput() RuntimeClassStrategyOptionsPtrOutput {
	return i.ToRuntimeClassStrategyOptionsPtrOutputWithContext(context.Background())
}

func (i RuntimeClassStrategyOptionsArgs) ToRuntimeClassStrategyOptionsPtrOutputWithContext(ctx context.Context) RuntimeClassStrategyOptionsPtrOutput {
	return pulumi.ToOutputWithContext(ctx, i).(RuntimeClassStrategyOptionsOutput).ToRuntimeClassStrategyOptionsPtrOutputWithContext(ctx)
}

// RuntimeClassStrategyOptionsPtrInput is an input type that accepts RuntimeClassStrategyOptionsArgs, RuntimeClassStrategyOptionsPtr and RuntimeClassStrategyOptionsPtrOutput values.
// You can construct a concrete instance of `RuntimeClassStrategyOptionsPtrInput` via:
//
//	        RuntimeClassStrategyOptionsArgs{...}
//
//	or:
//
//	        nil
type RuntimeClassStrategyOptionsPtrInput interface {
	pulumi.Input

	ToRuntimeClassStrategyOptionsPtrOutput() RuntimeClassStrategyOptionsPtrOutput
	ToRuntimeClassStrategyOptionsPtrOutputWithContext(context.Context) RuntimeClassStrategyOptionsPtrOutput
}

type runtimeClassStrategyOptionsPtrType RuntimeClassStrategyOptionsArgs

func RuntimeClassStrategyOptionsPtr(v *RuntimeClassStrategyOptionsArgs) RuntimeClassStrategyOptionsPtrInput {
	return (*runtimeClassStrategyOptionsPtrType)(v)
}

func (*runtimeClassStrategyOptionsPtrType) ElementType() reflect.Type {
	return reflect.TypeOf((**RuntimeClassStrategyOptions)(nil)).Elem()
}

func (i *runtimeClassStrategyOptionsPtrType) ToRuntimeClassStrategyOptionsPtrOutput() RuntimeClassStrategyOptionsPtrOutput {
	return i.ToRuntimeClassStrategyOptionsPtrOutputWithContext(context.Background())
}

func (i *runtimeClassStrategyOptionsPtrType) ToRuntimeClassStrategyOptionsPtrOutputWithContext(ctx context.Context) RuntimeClassStrategyOptionsPtrOutput {
	return pulumi.ToOutputWithContext(ctx, i).(RuntimeClassStrategyOptionsPtrOutput)
}

// RuntimeClassStrategyOptions define the strategy that will dictate the allowable RuntimeClasses for a pod.
type RuntimeClassStrategyOptionsOutput struct{ *pulumi.OutputState }

func (RuntimeClassStrategyOptionsOutput) ElementType() reflect.Type {
	return reflect.TypeOf((*RuntimeClassStrategyOptions)(nil)).Elem()
}

func (o RuntimeClassStrategyOptionsOutput) ToRuntimeClassStrategyOptionsOutput() RuntimeClassStrategyOptionsOutput {
	return o
}

func (o RuntimeClassStrategyOptionsOutput) ToRuntimeClassStrategyOptionsOutputWithContext(ctx context.Context) RuntimeClassStrategyOptionsOutput {
	return o
}

func (o RuntimeClassStrategyOptionsOutput) ToRuntimeClassStrategyOptionsPtrOutput() RuntimeClassStrategyOptionsPtrOutput {
	return o.ToRuntimeClassStrategyOptionsPtrOutputWithContext(context.Background())
}

func (o RuntimeClassStrategyOptionsOutput) ToRuntimeClassStrategyOptionsPtrOutputWithContext(ctx context.Context) RuntimeClassStrategyOptionsPtrOutput {
	return o.ApplyTWithContext(ctx, func(_ context.Context, v RuntimeClassStrategyOptions) *RuntimeClassStrategyOptions {
		return &v
	}).(RuntimeClassStrategyOptionsPtrOutput)
}

// allowedRuntimeClassNames is a whitelist of RuntimeClass names that may be specified on a pod. A value of "*" means that any RuntimeClass name is allowed, and must be the only item in the list. An empty list requires the RuntimeClassName field to be unset.
func (o RuntimeClassStrategyOptionsOutput) AllowedRuntimeClassNames() pulumi.StringArrayOutput {
	return o.ApplyT(func(v RuntimeClassStrategyOptions) []string { return v.AllowedRuntimeClassNames }).(pulumi.StringArrayOutput)
}

// defaultRuntimeClassName is the default RuntimeClassName to set on the pod. The default MUST be allowed by the allowedRuntimeClassNames list. A value of nil does not mutate the Pod.
func (o RuntimeClassStrategyOptionsOutput) DefaultRuntimeClassName() pulumi.StringPtrOutput {
	return o.ApplyT(func(v RuntimeClassStrategyOptions) *string { return v.DefaultRuntimeClassName }).(pulumi.StringPtrOutput)
}

type RuntimeClassStrategyOptionsPtrOutput struct{ *pulumi.OutputState }

func (RuntimeClassStrategyOptionsPtrOutput) ElementType() reflect.Type {
	return reflect.TypeOf((**RuntimeClassStrategyOptions)(nil)).Elem()
}

func (o RuntimeClassStrategyOptionsPtrOutput) ToRuntimeClassStrategyOptionsPtrOutput() RuntimeClassStrategyOptionsPtrOutput {
	return o
}

func (o RuntimeClassStrategyOptionsPtrOutput) ToRuntimeClassStrategyOptionsPtrOutputWithContext(ctx context.Context) RuntimeClassStrategyOptionsPtrOutput {
	return o
}

func (o RuntimeClassStrategyOptionsPtrOutput) Elem() RuntimeClassStrategyOptionsOutput {
	return o.ApplyT(func(v *RuntimeClassStrategyOptions) RuntimeClassStrategyOptions {
		if v != nil {
			return *v
		}
		var ret RuntimeClassStrategyOptions
		return ret
	}).(RuntimeClassStrategyOptionsOutput)
}

// allowedRuntimeClassNames is a whitelist of RuntimeClass names that may be specified on a pod. A value of "*" means that any RuntimeClass name is allowed, and must be the only item in the list. An empty list requires the RuntimeClassName field to be unset.
func (o RuntimeClassStrategyOptionsPtrOutput) AllowedRuntimeClassNames() pulumi.StringArrayOutput {
	return o.ApplyT(func(v *RuntimeClassStrategyOptions) []string {
		if v == nil {
			return nil
		}
		return v.AllowedRuntimeClassNames
	}).(pulumi.StringArrayOutput)
}

// defaultRuntimeClassName is the default RuntimeClassName to set on the pod. The default MUST be allowed by the allowedRuntimeClassNames list. A value of nil does not mutate the Pod.
func (o RuntimeClassStrategyOptionsPtrOutput) DefaultRuntimeClassName() pulumi.StringPtrOutput {
	return o.ApplyT(func(v *RuntimeClassStrategyOptions) *string {
		if v == nil {
			return nil
		}
		return v.DefaultRuntimeClassName
	}).(pulumi.StringPtrOutput)
}

// RuntimeClassStrategyOptions define the strategy that will dictate the allowable RuntimeClasses for a pod.
type RuntimeClassStrategyOptionsPatch struct {
	// allowedRuntimeClassNames is a whitelist of RuntimeClass names that may be specified on a pod. A value of "*" means that any RuntimeClass name is allowed, and must be the only item in the list. An empty list requires the RuntimeClassName field to be unset.
	AllowedRuntimeClassNames []string `pulumi:"allowedRuntimeClassNames"`
	// defaultRuntimeClassName is the default RuntimeClassName to set on the pod. The default MUST be allowed by the allowedRuntimeClassNames list. A value of nil does not mutate the Pod.
	DefaultRuntimeClassName *string `pulumi:"defaultRuntimeClassName"`
}

// RuntimeClassStrategyOptionsPatchInput is an input type that accepts RuntimeClassStrategyOptionsPatchArgs and RuntimeClassStrategyOptionsPatchOutput values.
// You can construct a concrete instance of `RuntimeClassStrategyOptionsPatchInput` via:
//
//	RuntimeClassStrategyOptionsPatchArgs{...}
type RuntimeClassStrategyOptionsPatchInput interface {
	pulumi.Input

	ToRuntimeClassStrategyOptionsPatchOutput() RuntimeClassStrategyOptionsPatchOutput
	ToRuntimeClassStrategyOptionsPatchOutputWithContext(context.Context) RuntimeClassStrategyOptionsPatchOutput
}

// RuntimeClassStrategyOptions define the strategy that will dictate the allowable RuntimeClasses for a pod.
type RuntimeClassStrategyOptionsPatchArgs struct {
	// allowedRuntimeClassNames is a whitelist of RuntimeClass names that may be specified on a pod. A value of "*" means that any RuntimeClass name is allowed, and must be the only item in the list. An empty list requires the RuntimeClassName field to be unset.
	AllowedRuntimeClassNames pulumi.StringArrayInput `pulumi:"allowedRuntimeClassNames"`
	// defaultRuntimeClassName is the default RuntimeClassName to set on the pod. The default MUST be allowed by the allowedRuntimeClassNames list. A value of nil does not mutate the Pod.
	DefaultRuntimeClassName pulumi.StringPtrInput `pulumi:"defaultRuntimeClassName"`
}

func (RuntimeClassStrategyOptionsPatchArgs) ElementType() reflect.Type {
	return reflect.TypeOf((*RuntimeClassStrategyOptionsPatch)(nil)).Elem()
}

func (i RuntimeClassStrategyOptionsPatchArgs) ToRuntimeClassStrategyOptionsPatchOutput() RuntimeClassStrategyOptionsPatchOutput {
	return i.ToRuntimeClassStrategyOptionsPatchOutputWithContext(context.Background())
}

func (i RuntimeClassStrategyOptionsPatchArgs) ToRuntimeClassStrategyOptionsPatchOutputWithContext(ctx context.Context) RuntimeClassStrategyOptionsPatchOutput {
	return pulumi.ToOutputWithContext(ctx, i).(RuntimeClassStrategyOptionsPatchOutput)
}

func (i RuntimeClassStrategyOptionsPatchArgs) ToRuntimeClassStrategyOptionsPatchPtrOutput() RuntimeClassStrategyOptionsPatchPtrOutput {
	return i.ToRuntimeClassStrategyOptionsPatchPtrOutputWithContext(context.Background())
}

func (i RuntimeClassStrategyOptionsPatchArgs) ToRuntimeClassStrategyOptionsPatchPtrOutputWithContext(ctx context.Context) RuntimeClassStrategyOptionsPatchPtrOutput {
	return pulumi.ToOutputWithContext(ctx, i).(RuntimeClassStrategyOptionsPatchOutput).ToRuntimeClassStrategyOptionsPatchPtrOutputWithContext(ctx)
}

// RuntimeClassStrategyOptionsPatchPtrInput is an input type that accepts RuntimeClassStrategyOptionsPatchArgs, RuntimeClassStrategyOptionsPatchPtr and RuntimeClassStrategyOptionsPatchPtrOutput values.
// You can construct a concrete instance of `RuntimeClassStrategyOptionsPatchPtrInput` via:
//
//	        RuntimeClassStrategyOptionsPatchArgs{...}
//
//	or:
//
//	        nil
type RuntimeClassStrategyOptionsPatchPtrInput interface {
	pulumi.Input

	ToRuntimeClassStrategyOptionsPatchPtrOutput() RuntimeClassStrategyOptionsPatchPtrOutput
	ToRuntimeClassStrategyOptionsPatchPtrOutputWithContext(context.Context) RuntimeClassStrategyOptionsPatchPtrOutput
}

type runtimeClassStrategyOptionsPatchPtrType RuntimeClassStrategyOptionsPatchArgs

func RuntimeClassStrategyOptionsPatchPtr(v *RuntimeClassStrategyOptionsPatchArgs) RuntimeClassStrategyOptionsPatchPtrInput {
	return (*runtimeClassStrategyOptionsPatchPtrType)(v)
}

func (*runtimeClassStrategyOptionsPatchPtrType) ElementType() reflect.Type {
	return reflect.TypeOf((**RuntimeClassStrategyOptionsPatch)(nil)).Elem()
}

func (i *runtimeClassStrategyOptionsPatchPtrType) ToRuntimeClassStrategyOptionsPatchPtrOutput() RuntimeClassStrategyOptionsPatchPtrOutput {
	return i.ToRuntimeClassStrategyOptionsPatchPtrOutputWithContext(context.Background())
}

func (i *runtimeClassStrategyOptionsPatchPtrType) ToRuntimeClassStrategyOptionsPatchPtrOutputWithContext(ctx context.Context) RuntimeClassStrategyOptionsPatchPtrOutput {
	return pulumi.ToOutputWithContext(ctx, i).(RuntimeClassStrategyOptionsPatchPtrOutput)
}

// RuntimeClassStrategyOptions define the strategy that will dictate the allowable RuntimeClasses for a pod.
type RuntimeClassStrategyOptionsPatchOutput struct{ *pulumi.OutputState }

func (RuntimeClassStrategyOptionsPatchOutput) ElementType() reflect.Type {
	return reflect.TypeOf((*RuntimeClassStrategyOptionsPatch)(nil)).Elem()
}

func (o RuntimeClassStrategyOptionsPatchOutput) ToRuntimeClassStrategyOptionsPatchOutput() RuntimeClassStrategyOptionsPatchOutput {
	return o
}

func (o RuntimeClassStrategyOptionsPatchOutput) ToRuntimeClassStrategyOptionsPatchOutputWithContext(ctx context.Context) RuntimeClassStrategyOptionsPatchOutput {
	return o
}

func (o RuntimeClassStrategyOptionsPatchOutput) ToRuntimeClassStrategyOptionsPatchPtrOutput() RuntimeClassStrategyOptionsPatchPtrOutput {
	return o.ToRuntimeClassStrategyOptionsPatchPtrOutputWithContext(context.Background())
}

func (o RuntimeClassStrategyOptionsPatchOutput) ToRuntimeClassStrategyOptionsPatchPtrOutputWithContext(ctx context.Context) RuntimeClassStrategyOptionsPatchPtrOutput {
	return o.ApplyTWithContext(ctx, func(_ context.Context, v RuntimeClassStrategyOptionsPatch) *RuntimeClassStrategyOptionsPatch {
		return &v
	}).(RuntimeClassStrategyOptionsPatchPtrOutput)
}

// allowedRuntimeClassNames is a whitelist of RuntimeClass names that may be specified on a pod. A value of "*" means that any RuntimeClass name is allowed, and must be the only item in the list. An empty list requires the RuntimeClassName field to be unset.
func (o RuntimeClassStrategyOptionsPatchOutput) AllowedRuntimeClassNames() pulumi.StringArrayOutput {
	return o.ApplyT(func(v RuntimeClassStrategyOptionsPatch) []string { return v.AllowedRuntimeClassNames }).(pulumi.StringArrayOutput)
}

// defaultRuntimeClassName is the default RuntimeClassName to set on the pod. The default MUST be allowed by the allowedRuntimeClassNames list. A value of nil does not mutate the Pod.
func (o RuntimeClassStrategyOptionsPatchOutput) DefaultRuntimeClassName() pulumi.StringPtrOutput {
	return o.ApplyT(func(v RuntimeClassStrategyOptionsPatch) *string { return v.DefaultRuntimeClassName }).(pulumi.StringPtrOutput)
}

type RuntimeClassStrategyOptionsPatchPtrOutput struct{ *pulumi.OutputState }

func (RuntimeClassStrategyOptionsPatchPtrOutput) ElementType() reflect.Type {
	return reflect.TypeOf((**RuntimeClassStrategyOptionsPatch)(nil)).Elem()
}

func (o RuntimeClassStrategyOptionsPatchPtrOutput) ToRuntimeClassStrategyOptionsPatchPtrOutput() RuntimeClassStrategyOptionsPatchPtrOutput {
	return o
}

func (o RuntimeClassStrategyOptionsPatchPtrOutput) ToRuntimeClassStrategyOptionsPatchPtrOutputWithContext(ctx context.Context) RuntimeClassStrategyOptionsPatchPtrOutput {
	return o
}

func (o RuntimeClassStrategyOptionsPatchPtrOutput) Elem() RuntimeClassStrategyOptionsPatchOutput {
	return o.ApplyT(func(v *RuntimeClassStrategyOptionsPatch) RuntimeClassStrategyOptionsPatch {
		if v != nil {
			return *v
		}
		var ret RuntimeClassStrategyOptionsPatch
		return ret
	}).(RuntimeClassStrategyOptionsPatchOutput)
}

// allowedRuntimeClassNames is a whitelist of RuntimeClass names that may be specified on a pod. A value of "*" means that any RuntimeClass name is allowed, and must be the only item in the list. An empty list requires the RuntimeClassName field to be unset.
func (o RuntimeClassStrategyOptionsPatchPtrOutput) AllowedRuntimeClassNames() pulumi.StringArrayOutput {
	return o.ApplyT(func(v *RuntimeClassStrategyOptionsPatch) []string {
		if v == nil {
			return nil
		}
		return v.AllowedRuntimeClassNames
	}).(pulumi.StringArrayOutput)
}

// defaultRuntimeClassName is the default RuntimeClassName to set on the pod. The default MUST be allowed by the allowedRuntimeClassNames list. A value of nil does not mutate the Pod.
func (o RuntimeClassStrategyOptionsPatchPtrOutput) DefaultRuntimeClassName() pulumi.StringPtrOutput {
	return o.ApplyT(func(v *RuntimeClassStrategyOptionsPatch) *string {
		if v == nil {
			return nil
		}
		return v.DefaultRuntimeClassName
	}).(pulumi.StringPtrOutput)
}

// SELinuxStrategyOptions defines the strategy type and any options used to create the strategy.
type SELinuxStrategyOptions struct {
	// rule is the strategy that will dictate the allowable labels that may be set.
	Rule string `pulumi:"rule"`
	// seLinuxOptions required to run as; required for MustRunAs More info: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/
	SeLinuxOptions *corev1.SELinuxOptions `pulumi:"seLinuxOptions"`
}

// SELinuxStrategyOptionsInput is an input type that accepts SELinuxStrategyOptionsArgs and SELinuxStrategyOptionsOutput values.
// You can construct a concrete instance of `SELinuxStrategyOptionsInput` via:
//
//	SELinuxStrategyOptionsArgs{...}
type SELinuxStrategyOptionsInput interface {
	pulumi.Input

	ToSELinuxStrategyOptionsOutput() SELinuxStrategyOptionsOutput
	ToSELinuxStrategyOptionsOutputWithContext(context.Context) SELinuxStrategyOptionsOutput
}

// SELinuxStrategyOptions defines the strategy type and any options used to create the strategy.
type SELinuxStrategyOptionsArgs struct {
	// rule is the strategy that will dictate the allowable labels that may be set.
	Rule pulumi.StringInput `pulumi:"rule"`
	// seLinuxOptions required to run as; required for MustRunAs More info: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/
	SeLinuxOptions corev1.SELinuxOptionsPtrInput `pulumi:"seLinuxOptions"`
}

func (SELinuxStrategyOptionsArgs) ElementType() reflect.Type {
	return reflect.TypeOf((*SELinuxStrategyOptions)(nil)).Elem()
}

func (i SELinuxStrategyOptionsArgs) ToSELinuxStrategyOptionsOutput() SELinuxStrategyOptionsOutput {
	return i.ToSELinuxStrategyOptionsOutputWithContext(context.Background())
}

func (i SELinuxStrategyOptionsArgs) ToSELinuxStrategyOptionsOutputWithContext(ctx context.Context) SELinuxStrategyOptionsOutput {
	return pulumi.ToOutputWithContext(ctx, i).(SELinuxStrategyOptionsOutput)
}

func (i SELinuxStrategyOptionsArgs) ToSELinuxStrategyOptionsPtrOutput() SELinuxStrategyOptionsPtrOutput {
	return i.ToSELinuxStrategyOptionsPtrOutputWithContext(context.Background())
}

func (i SELinuxStrategyOptionsArgs) ToSELinuxStrategyOptionsPtrOutputWithContext(ctx context.Context) SELinuxStrategyOptionsPtrOutput {
	return pulumi.ToOutputWithContext(ctx, i).(SELinuxStrategyOptionsOutput).ToSELinuxStrategyOptionsPtrOutputWithContext(ctx)
}

// SELinuxStrategyOptionsPtrInput is an input type that accepts SELinuxStrategyOptionsArgs, SELinuxStrategyOptionsPtr and SELinuxStrategyOptionsPtrOutput values.
// You can construct a concrete instance of `SELinuxStrategyOptionsPtrInput` via:
//
//	        SELinuxStrategyOptionsArgs{...}
//
//	or:
//
//	        nil
type SELinuxStrategyOptionsPtrInput interface {
	pulumi.Input

	ToSELinuxStrategyOptionsPtrOutput() SELinuxStrategyOptionsPtrOutput
	ToSELinuxStrategyOptionsPtrOutputWithContext(context.Context) SELinuxStrategyOptionsPtrOutput
}

type selinuxStrategyOptionsPtrType SELinuxStrategyOptionsArgs

func SELinuxStrategyOptionsPtr(v *SELinuxStrategyOptionsArgs) SELinuxStrategyOptionsPtrInput {
	return (*selinuxStrategyOptionsPtrType)(v)
}

func (*selinuxStrategyOptionsPtrType) ElementType() reflect.Type {
	return reflect.TypeOf((**SELinuxStrategyOptions)(nil)).Elem()
}

func (i *selinuxStrategyOptionsPtrType) ToSELinuxStrategyOptionsPtrOutput() SELinuxStrategyOptionsPtrOutput {
	return i.ToSELinuxStrategyOptionsPtrOutputWithContext(context.Background())
}

func (i *selinuxStrategyOptionsPtrType) ToSELinuxStrategyOptionsPtrOutputWithContext(ctx context.Context) SELinuxStrategyOptionsPtrOutput {
	return pulumi.ToOutputWithContext(ctx, i).(SELinuxStrategyOptionsPtrOutput)
}

// SELinuxStrategyOptions defines the strategy type and any options used to create the strategy.
type SELinuxStrategyOptionsOutput struct{ *pulumi.OutputState }

func (SELinuxStrategyOptionsOutput) ElementType() reflect.Type {
	return reflect.TypeOf((*SELinuxStrategyOptions)(nil)).Elem()
}

func (o SELinuxStrategyOptionsOutput) ToSELinuxStrategyOptionsOutput() SELinuxStrategyOptionsOutput {
	return o
}

func (o SELinuxStrategyOptionsOutput) ToSELinuxStrategyOptionsOutputWithContext(ctx context.Context) SELinuxStrategyOptionsOutput {
	return o
}

func (o SELinuxStrategyOptionsOutput) ToSELinuxStrategyOptionsPtrOutput() SELinuxStrategyOptionsPtrOutput {
	return o.ToSELinuxStrategyOptionsPtrOutputWithContext(context.Background())
}

func (o SELinuxStrategyOptionsOutput) ToSELinuxStrategyOptionsPtrOutputWithContext(ctx context.Context) SELinuxStrategyOptionsPtrOutput {
	return o.ApplyTWithContext(ctx, func(_ context.Context, v SELinuxStrategyOptions) *SELinuxStrategyOptions {
		return &v
	}).(SELinuxStrategyOptionsPtrOutput)
}

// rule is the strategy that will dictate the allowable labels that may be set.
func (o SELinuxStrategyOptionsOutput) Rule() pulumi.StringOutput {
	return o.ApplyT(func(v SELinuxStrategyOptions) string { return v.Rule }).(pulumi.StringOutput)
}

// seLinuxOptions required to run as; required for MustRunAs More info: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/
func (o SELinuxStrategyOptionsOutput) SeLinuxOptions() corev1.SELinuxOptionsPtrOutput {
	return o.ApplyT(func(v SELinuxStrategyOptions) *corev1.SELinuxOptions { return v.SeLinuxOptions }).(corev1.SELinuxOptionsPtrOutput)
}

type SELinuxStrategyOptionsPtrOutput struct{ *pulumi.OutputState }

func (SELinuxStrategyOptionsPtrOutput) ElementType() reflect.Type {
	return reflect.TypeOf((**SELinuxStrategyOptions)(nil)).Elem()
}

func (o SELinuxStrategyOptionsPtrOutput) ToSELinuxStrategyOptionsPtrOutput() SELinuxStrategyOptionsPtrOutput {
	return o
}

func (o SELinuxStrategyOptionsPtrOutput) ToSELinuxStrategyOptionsPtrOutputWithContext(ctx context.Context) SELinuxStrategyOptionsPtrOutput {
	return o
}

func (o SELinuxStrategyOptionsPtrOutput) Elem() SELinuxStrategyOptionsOutput {
	return o.ApplyT(func(v *SELinuxStrategyOptions) SELinuxStrategyOptions {
		if v != nil {
			return *v
		}
		var ret SELinuxStrategyOptions
		return ret
	}).(SELinuxStrategyOptionsOutput)
}

// rule is the strategy that will dictate the allowable labels that may be set.
func (o SELinuxStrategyOptionsPtrOutput) Rule() pulumi.StringPtrOutput {
	return o.ApplyT(func(v *SELinuxStrategyOptions) *string {
		if v == nil {
			return nil
		}
		return &v.Rule
	}).(pulumi.StringPtrOutput)
}

// seLinuxOptions required to run as; required for MustRunAs More info: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/
func (o SELinuxStrategyOptionsPtrOutput) SeLinuxOptions() corev1.SELinuxOptionsPtrOutput {
	return o.ApplyT(func(v *SELinuxStrategyOptions) *corev1.SELinuxOptions {
		if v == nil {
			return nil
		}
		return v.SeLinuxOptions
	}).(corev1.SELinuxOptionsPtrOutput)
}

// SELinuxStrategyOptions defines the strategy type and any options used to create the strategy.
type SELinuxStrategyOptionsPatch struct {
	// rule is the strategy that will dictate the allowable labels that may be set.
	Rule *string `pulumi:"rule"`
	// seLinuxOptions required to run as; required for MustRunAs More info: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/
	SeLinuxOptions *corev1.SELinuxOptionsPatch `pulumi:"seLinuxOptions"`
}

// SELinuxStrategyOptionsPatchInput is an input type that accepts SELinuxStrategyOptionsPatchArgs and SELinuxStrategyOptionsPatchOutput values.
// You can construct a concrete instance of `SELinuxStrategyOptionsPatchInput` via:
//
//	SELinuxStrategyOptionsPatchArgs{...}
type SELinuxStrategyOptionsPatchInput interface {
	pulumi.Input

	ToSELinuxStrategyOptionsPatchOutput() SELinuxStrategyOptionsPatchOutput
	ToSELinuxStrategyOptionsPatchOutputWithContext(context.Context) SELinuxStrategyOptionsPatchOutput
}

// SELinuxStrategyOptions defines the strategy type and any options used to create the strategy.
type SELinuxStrategyOptionsPatchArgs struct {
	// rule is the strategy that will dictate the allowable labels that may be set.
	Rule pulumi.StringPtrInput `pulumi:"rule"`
	// seLinuxOptions required to run as; required for MustRunAs More info: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/
	SeLinuxOptions corev1.SELinuxOptionsPatchPtrInput `pulumi:"seLinuxOptions"`
}

func (SELinuxStrategyOptionsPatchArgs) ElementType() reflect.Type {
	return reflect.TypeOf((*SELinuxStrategyOptionsPatch)(nil)).Elem()
}

func (i SELinuxStrategyOptionsPatchArgs) ToSELinuxStrategyOptionsPatchOutput() SELinuxStrategyOptionsPatchOutput {
	return i.ToSELinuxStrategyOptionsPatchOutputWithContext(context.Background())
}

func (i SELinuxStrategyOptionsPatchArgs) ToSELinuxStrategyOptionsPatchOutputWithContext(ctx context.Context) SELinuxStrategyOptionsPatchOutput {
	return pulumi.ToOutputWithContext(ctx, i).(SELinuxStrategyOptionsPatchOutput)
}

func (i SELinuxStrategyOptionsPatchArgs) ToSELinuxStrategyOptionsPatchPtrOutput() SELinuxStrategyOptionsPatchPtrOutput {
	return i.ToSELinuxStrategyOptionsPatchPtrOutputWithContext(context.Background())
}

func (i SELinuxStrategyOptionsPatchArgs) ToSELinuxStrategyOptionsPatchPtrOutputWithContext(ctx context.Context) SELinuxStrategyOptionsPatchPtrOutput {
	return pulumi.ToOutputWithContext(ctx, i).(SELinuxStrategyOptionsPatchOutput).ToSELinuxStrategyOptionsPatchPtrOutputWithContext(ctx)
}

// SELinuxStrategyOptionsPatchPtrInput is an input type that accepts SELinuxStrategyOptionsPatchArgs, SELinuxStrategyOptionsPatchPtr and SELinuxStrategyOptionsPatchPtrOutput values.
// You can construct a concrete instance of `SELinuxStrategyOptionsPatchPtrInput` via:
//
//	        SELinuxStrategyOptionsPatchArgs{...}
//
//	or:
//
//	        nil
type SELinuxStrategyOptionsPatchPtrInput interface {
	pulumi.Input

	ToSELinuxStrategyOptionsPatchPtrOutput() SELinuxStrategyOptionsPatchPtrOutput
	ToSELinuxStrategyOptionsPatchPtrOutputWithContext(context.Context) SELinuxStrategyOptionsPatchPtrOutput
}

type selinuxStrategyOptionsPatchPtrType SELinuxStrategyOptionsPatchArgs

func SELinuxStrategyOptionsPatchPtr(v *SELinuxStrategyOptionsPatchArgs) SELinuxStrategyOptionsPatchPtrInput {
	return (*selinuxStrategyOptionsPatchPtrType)(v)
}

func (*selinuxStrategyOptionsPatchPtrType) ElementType() reflect.Type {
	return reflect.TypeOf((**SELinuxStrategyOptionsPatch)(nil)).Elem()
}

func (i *selinuxStrategyOptionsPatchPtrType) ToSELinuxStrategyOptionsPatchPtrOutput() SELinuxStrategyOptionsPatchPtrOutput {
	return i.ToSELinuxStrategyOptionsPatchPtrOutputWithContext(context.Background())
}

func (i *selinuxStrategyOptionsPatchPtrType) ToSELinuxStrategyOptionsPatchPtrOutputWithContext(ctx context.Context) SELinuxStrategyOptionsPatchPtrOutput {
	return pulumi.ToOutputWithContext(ctx, i).(SELinuxStrategyOptionsPatchPtrOutput)
}

// SELinuxStrategyOptions defines the strategy type and any options used to create the strategy.
type SELinuxStrategyOptionsPatchOutput struct{ *pulumi.OutputState }

func (SELinuxStrategyOptionsPatchOutput) ElementType() reflect.Type {
	return reflect.TypeOf((*SELinuxStrategyOptionsPatch)(nil)).Elem()
}

func (o SELinuxStrategyOptionsPatchOutput) ToSELinuxStrategyOptionsPatchOutput() SELinuxStrategyOptionsPatchOutput {
	return o
}

func (o SELinuxStrategyOptionsPatchOutput) ToSELinuxStrategyOptionsPatchOutputWithContext(ctx context.Context) SELinuxStrategyOptionsPatchOutput {
	return o
}

func (o SELinuxStrategyOptionsPatchOutput) ToSELinuxStrategyOptionsPatchPtrOutput() SELinuxStrategyOptionsPatchPtrOutput {
	return o.ToSELinuxStrategyOptionsPatchPtrOutputWithContext(context.Background())
}

func (o SELinuxStrategyOptionsPatchOutput) ToSELinuxStrategyOptionsPatchPtrOutputWithContext(ctx context.Context) SELinuxStrategyOptionsPatchPtrOutput {
	return o.ApplyTWithContext(ctx, func(_ context.Context, v SELinuxStrategyOptionsPatch) *SELinuxStrategyOptionsPatch {
		return &v
	}).(SELinuxStrategyOptionsPatchPtrOutput)
}

// rule is the strategy that will dictate the allowable labels that may be set.
func (o SELinuxStrategyOptionsPatchOutput) Rule() pulumi.StringPtrOutput {
	return o.ApplyT(func(v SELinuxStrategyOptionsPatch) *string { return v.Rule }).(pulumi.StringPtrOutput)
}

// seLinuxOptions required to run as; required for MustRunAs More info: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/
func (o SELinuxStrategyOptionsPatchOutput) SeLinuxOptions() corev1.SELinuxOptionsPatchPtrOutput {
	return o.ApplyT(func(v SELinuxStrategyOptionsPatch) *corev1.SELinuxOptionsPatch { return v.SeLinuxOptions }).(corev1.SELinuxOptionsPatchPtrOutput)
}

type SELinuxStrategyOptionsPatchPtrOutput struct{ *pulumi.OutputState }

func (SELinuxStrategyOptionsPatchPtrOutput) ElementType() reflect.Type {
	return reflect.TypeOf((**SELinuxStrategyOptionsPatch)(nil)).Elem()
}

func (o SELinuxStrategyOptionsPatchPtrOutput) ToSELinuxStrategyOptionsPatchPtrOutput() SELinuxStrategyOptionsPatchPtrOutput {
	return o
}

func (o SELinuxStrategyOptionsPatchPtrOutput) ToSELinuxStrategyOptionsPatchPtrOutputWithContext(ctx context.Context) SELinuxStrategyOptionsPatchPtrOutput {
	return o
}

func (o SELinuxStrategyOptionsPatchPtrOutput) Elem() SELinuxStrategyOptionsPatchOutput {
	return o.ApplyT(func(v *SELinuxStrategyOptionsPatch) SELinuxStrategyOptionsPatch {
		if v != nil {
			return *v
		}
		var ret SELinuxStrategyOptionsPatch
		return ret
	}).(SELinuxStrategyOptionsPatchOutput)
}

// rule is the strategy that will dictate the allowable labels that may be set.
func (o SELinuxStrategyOptionsPatchPtrOutput) Rule() pulumi.StringPtrOutput {
	return o.ApplyT(func(v *SELinuxStrategyOptionsPatch) *string {
		if v == nil {
			return nil
		}
		return v.Rule
	}).(pulumi.StringPtrOutput)
}

// seLinuxOptions required to run as; required for MustRunAs More info: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/
func (o SELinuxStrategyOptionsPatchPtrOutput) SeLinuxOptions() corev1.SELinuxOptionsPatchPtrOutput {
	return o.ApplyT(func(v *SELinuxStrategyOptionsPatch) *corev1.SELinuxOptionsPatch {
		if v == nil {
			return nil
		}
		return v.SeLinuxOptions
	}).(corev1.SELinuxOptionsPatchPtrOutput)
}

// SupplementalGroupsStrategyOptions defines the strategy type and options used to create the strategy.
type SupplementalGroupsStrategyOptions struct {
	// ranges are the allowed ranges of supplemental groups.  If you would like to force a single supplemental group then supply a single range with the same start and end. Required for MustRunAs.
	Ranges []IDRange `pulumi:"ranges"`
	// rule is the strategy that will dictate what supplemental groups is used in the SecurityContext.
	Rule *string `pulumi:"rule"`
}

// SupplementalGroupsStrategyOptionsInput is an input type that accepts SupplementalGroupsStrategyOptionsArgs and SupplementalGroupsStrategyOptionsOutput values.
// You can construct a concrete instance of `SupplementalGroupsStrategyOptionsInput` via:
//
//	SupplementalGroupsStrategyOptionsArgs{...}
type SupplementalGroupsStrategyOptionsInput interface {
	pulumi.Input

	ToSupplementalGroupsStrategyOptionsOutput() SupplementalGroupsStrategyOptionsOutput
	ToSupplementalGroupsStrategyOptionsOutputWithContext(context.Context) SupplementalGroupsStrategyOptionsOutput
}

// SupplementalGroupsStrategyOptions defines the strategy type and options used to create the strategy.
type SupplementalGroupsStrategyOptionsArgs struct {
	// ranges are the allowed ranges of supplemental groups.  If you would like to force a single supplemental group then supply a single range with the same start and end. Required for MustRunAs.
	Ranges IDRangeArrayInput `pulumi:"ranges"`
	// rule is the strategy that will dictate what supplemental groups is used in the SecurityContext.
	Rule pulumi.StringPtrInput `pulumi:"rule"`
}

func (SupplementalGroupsStrategyOptionsArgs) ElementType() reflect.Type {
	return reflect.TypeOf((*SupplementalGroupsStrategyOptions)(nil)).Elem()
}

func (i SupplementalGroupsStrategyOptionsArgs) ToSupplementalGroupsStrategyOptionsOutput() SupplementalGroupsStrategyOptionsOutput {
	return i.ToSupplementalGroupsStrategyOptionsOutputWithContext(context.Background())
}

func (i SupplementalGroupsStrategyOptionsArgs) ToSupplementalGroupsStrategyOptionsOutputWithContext(ctx context.Context) SupplementalGroupsStrategyOptionsOutput {
	return pulumi.ToOutputWithContext(ctx, i).(SupplementalGroupsStrategyOptionsOutput)
}

func (i SupplementalGroupsStrategyOptionsArgs) ToSupplementalGroupsStrategyOptionsPtrOutput() SupplementalGroupsStrategyOptionsPtrOutput {
	return i.ToSupplementalGroupsStrategyOptionsPtrOutputWithContext(context.Background())
}

func (i SupplementalGroupsStrategyOptionsArgs) ToSupplementalGroupsStrategyOptionsPtrOutputWithContext(ctx context.Context) SupplementalGroupsStrategyOptionsPtrOutput {
	return pulumi.ToOutputWithContext(ctx, i).(SupplementalGroupsStrategyOptionsOutput).ToSupplementalGroupsStrategyOptionsPtrOutputWithContext(ctx)
}

// SupplementalGroupsStrategyOptionsPtrInput is an input type that accepts SupplementalGroupsStrategyOptionsArgs, SupplementalGroupsStrategyOptionsPtr and SupplementalGroupsStrategyOptionsPtrOutput values.
// You can construct a concrete instance of `SupplementalGroupsStrategyOptionsPtrInput` via:
//
//	        SupplementalGroupsStrategyOptionsArgs{...}
//
//	or:
//
//	        nil
type SupplementalGroupsStrategyOptionsPtrInput interface {
	pulumi.Input

	ToSupplementalGroupsStrategyOptionsPtrOutput() SupplementalGroupsStrategyOptionsPtrOutput
	ToSupplementalGroupsStrategyOptionsPtrOutputWithContext(context.Context) SupplementalGroupsStrategyOptionsPtrOutput
}

type supplementalGroupsStrategyOptionsPtrType SupplementalGroupsStrategyOptionsArgs

func SupplementalGroupsStrategyOptionsPtr(v *SupplementalGroupsStrategyOptionsArgs) SupplementalGroupsStrategyOptionsPtrInput {
	return (*supplementalGroupsStrategyOptionsPtrType)(v)
}

func (*supplementalGroupsStrategyOptionsPtrType) ElementType() reflect.Type {
	return reflect.TypeOf((**SupplementalGroupsStrategyOptions)(nil)).Elem()
}

func (i *supplementalGroupsStrategyOptionsPtrType) ToSupplementalGroupsStrategyOptionsPtrOutput() SupplementalGroupsStrategyOptionsPtrOutput {
	return i.ToSupplementalGroupsStrategyOptionsPtrOutputWithContext(context.Background())
}

func (i *supplementalGroupsStrategyOptionsPtrType) ToSupplementalGroupsStrategyOptionsPtrOutputWithContext(ctx context.Context) SupplementalGroupsStrategyOptionsPtrOutput {
	return pulumi.ToOutputWithContext(ctx, i).(SupplementalGroupsStrategyOptionsPtrOutput)
}

// SupplementalGroupsStrategyOptions defines the strategy type and options used to create the strategy.
type SupplementalGroupsStrategyOptionsOutput struct{ *pulumi.OutputState }

func (SupplementalGroupsStrategyOptionsOutput) ElementType() reflect.Type {
	return reflect.TypeOf((*SupplementalGroupsStrategyOptions)(nil)).Elem()
}

func (o SupplementalGroupsStrategyOptionsOutput) ToSupplementalGroupsStrategyOptionsOutput() SupplementalGroupsStrategyOptionsOutput {
	return o
}

func (o SupplementalGroupsStrategyOptionsOutput) ToSupplementalGroupsStrategyOptionsOutputWithContext(ctx context.Context) SupplementalGroupsStrategyOptionsOutput {
	return o
}

func (o SupplementalGroupsStrategyOptionsOutput) ToSupplementalGroupsStrategyOptionsPtrOutput() SupplementalGroupsStrategyOptionsPtrOutput {
	return o.ToSupplementalGroupsStrategyOptionsPtrOutputWithContext(context.Background())
}

func (o SupplementalGroupsStrategyOptionsOutput) ToSupplementalGroupsStrategyOptionsPtrOutputWithContext(ctx context.Context) SupplementalGroupsStrategyOptionsPtrOutput {
	return o.ApplyTWithContext(ctx, func(_ context.Context, v SupplementalGroupsStrategyOptions) *SupplementalGroupsStrategyOptions {
		return &v
	}).(SupplementalGroupsStrategyOptionsPtrOutput)
}

// ranges are the allowed ranges of supplemental groups.  If you would like to force a single supplemental group then supply a single range with the same start and end. Required for MustRunAs.
func (o SupplementalGroupsStrategyOptionsOutput) Ranges() IDRangeArrayOutput {
	return o.ApplyT(func(v SupplementalGroupsStrategyOptions) []IDRange { return v.Ranges }).(IDRangeArrayOutput)
}

// rule is the strategy that will dictate what supplemental groups is used in the SecurityContext.
func (o SupplementalGroupsStrategyOptionsOutput) Rule() pulumi.StringPtrOutput {
	return o.ApplyT(func(v SupplementalGroupsStrategyOptions) *string { return v.Rule }).(pulumi.StringPtrOutput)
}

type SupplementalGroupsStrategyOptionsPtrOutput struct{ *pulumi.OutputState }

func (SupplementalGroupsStrategyOptionsPtrOutput) ElementType() reflect.Type {
	return reflect.TypeOf((**SupplementalGroupsStrategyOptions)(nil)).Elem()
}

func (o SupplementalGroupsStrategyOptionsPtrOutput) ToSupplementalGroupsStrategyOptionsPtrOutput() SupplementalGroupsStrategyOptionsPtrOutput {
	return o
}

func (o SupplementalGroupsStrategyOptionsPtrOutput) ToSupplementalGroupsStrategyOptionsPtrOutputWithContext(ctx context.Context) SupplementalGroupsStrategyOptionsPtrOutput {
	return o
}

func (o SupplementalGroupsStrategyOptionsPtrOutput) Elem() SupplementalGroupsStrategyOptionsOutput {
	return o.ApplyT(func(v *SupplementalGroupsStrategyOptions) SupplementalGroupsStrategyOptions {
		if v != nil {
			return *v
		}
		var ret SupplementalGroupsStrategyOptions
		return ret
	}).(SupplementalGroupsStrategyOptionsOutput)
}

// ranges are the allowed ranges of supplemental groups.  If you would like to force a single supplemental group then supply a single range with the same start and end. Required for MustRunAs.
func (o SupplementalGroupsStrategyOptionsPtrOutput) Ranges() IDRangeArrayOutput {
	return o.ApplyT(func(v *SupplementalGroupsStrategyOptions) []IDRange {
		if v == nil {
			return nil
		}
		return v.Ranges
	}).(IDRangeArrayOutput)
}

// rule is the strategy that will dictate what supplemental groups is used in the SecurityContext.
func (o SupplementalGroupsStrategyOptionsPtrOutput) Rule() pulumi.StringPtrOutput {
	return o.ApplyT(func(v *SupplementalGroupsStrategyOptions) *string {
		if v == nil {
			return nil
		}
		return v.Rule
	}).(pulumi.StringPtrOutput)
}

// SupplementalGroupsStrategyOptions defines the strategy type and options used to create the strategy.
type SupplementalGroupsStrategyOptionsPatch struct {
	// ranges are the allowed ranges of supplemental groups.  If you would like to force a single supplemental group then supply a single range with the same start and end. Required for MustRunAs.
	Ranges []IDRangePatch `pulumi:"ranges"`
	// rule is the strategy that will dictate what supplemental groups is used in the SecurityContext.
	Rule *string `pulumi:"rule"`
}

// SupplementalGroupsStrategyOptionsPatchInput is an input type that accepts SupplementalGroupsStrategyOptionsPatchArgs and SupplementalGroupsStrategyOptionsPatchOutput values.
// You can construct a concrete instance of `SupplementalGroupsStrategyOptionsPatchInput` via:
//
//	SupplementalGroupsStrategyOptionsPatchArgs{...}
type SupplementalGroupsStrategyOptionsPatchInput interface {
	pulumi.Input

	ToSupplementalGroupsStrategyOptionsPatchOutput() SupplementalGroupsStrategyOptionsPatchOutput
	ToSupplementalGroupsStrategyOptionsPatchOutputWithContext(context.Context) SupplementalGroupsStrategyOptionsPatchOutput
}

// SupplementalGroupsStrategyOptions defines the strategy type and options used to create the strategy.
type SupplementalGroupsStrategyOptionsPatchArgs struct {
	// ranges are the allowed ranges of supplemental groups.  If you would like to force a single supplemental group then supply a single range with the same start and end. Required for MustRunAs.
	Ranges IDRangePatchArrayInput `pulumi:"ranges"`
	// rule is the strategy that will dictate what supplemental groups is used in the SecurityContext.
	Rule pulumi.StringPtrInput `pulumi:"rule"`
}

func (SupplementalGroupsStrategyOptionsPatchArgs) ElementType() reflect.Type {
	return reflect.TypeOf((*SupplementalGroupsStrategyOptionsPatch)(nil)).Elem()
}

func (i SupplementalGroupsStrategyOptionsPatchArgs) ToSupplementalGroupsStrategyOptionsPatchOutput() SupplementalGroupsStrategyOptionsPatchOutput {
	return i.ToSupplementalGroupsStrategyOptionsPatchOutputWithContext(context.Background())
}

func (i SupplementalGroupsStrategyOptionsPatchArgs) ToSupplementalGroupsStrategyOptionsPatchOutputWithContext(ctx context.Context) SupplementalGroupsStrategyOptionsPatchOutput {
	return pulumi.ToOutputWithContext(ctx, i).(SupplementalGroupsStrategyOptionsPatchOutput)
}

func (i SupplementalGroupsStrategyOptionsPatchArgs) ToSupplementalGroupsStrategyOptionsPatchPtrOutput() SupplementalGroupsStrategyOptionsPatchPtrOutput {
	return i.ToSupplementalGroupsStrategyOptionsPatchPtrOutputWithContext(context.Background())
}

func (i SupplementalGroupsStrategyOptionsPatchArgs) ToSupplementalGroupsStrategyOptionsPatchPtrOutputWithContext(ctx context.Context) SupplementalGroupsStrategyOptionsPatchPtrOutput {
	return pulumi.ToOutputWithContext(ctx, i).(SupplementalGroupsStrategyOptionsPatchOutput).ToSupplementalGroupsStrategyOptionsPatchPtrOutputWithContext(ctx)
}

// SupplementalGroupsStrategyOptionsPatchPtrInput is an input type that accepts SupplementalGroupsStrategyOptionsPatchArgs, SupplementalGroupsStrategyOptionsPatchPtr and SupplementalGroupsStrategyOptionsPatchPtrOutput values.
// You can construct a concrete instance of `SupplementalGroupsStrategyOptionsPatchPtrInput` via:
//
//	        SupplementalGroupsStrategyOptionsPatchArgs{...}
//
//	or:
//
//	        nil
type SupplementalGroupsStrategyOptionsPatchPtrInput interface {
	pulumi.Input

	ToSupplementalGroupsStrategyOptionsPatchPtrOutput() SupplementalGroupsStrategyOptionsPatchPtrOutput
	ToSupplementalGroupsStrategyOptionsPatchPtrOutputWithContext(context.Context) SupplementalGroupsStrategyOptionsPatchPtrOutput
}

type supplementalGroupsStrategyOptionsPatchPtrType SupplementalGroupsStrategyOptionsPatchArgs

func SupplementalGroupsStrategyOptionsPatchPtr(v *SupplementalGroupsStrategyOptionsPatchArgs) SupplementalGroupsStrategyOptionsPatchPtrInput {
	return (*supplementalGroupsStrategyOptionsPatchPtrType)(v)
}

func (*supplementalGroupsStrategyOptionsPatchPtrType) ElementType() reflect.Type {
	return reflect.TypeOf((**SupplementalGroupsStrategyOptionsPatch)(nil)).Elem()
}

func (i *supplementalGroupsStrategyOptionsPatchPtrType) ToSupplementalGroupsStrategyOptionsPatchPtrOutput() SupplementalGroupsStrategyOptionsPatchPtrOutput {
	return i.ToSupplementalGroupsStrategyOptionsPatchPtrOutputWithContext(context.Background())
}

func (i *supplementalGroupsStrategyOptionsPatchPtrType) ToSupplementalGroupsStrategyOptionsPatchPtrOutputWithContext(ctx context.Context) SupplementalGroupsStrategyOptionsPatchPtrOutput {
	return pulumi.ToOutputWithContext(ctx, i).(SupplementalGroupsStrategyOptionsPatchPtrOutput)
}

// SupplementalGroupsStrategyOptions defines the strategy type and options used to create the strategy.
type SupplementalGroupsStrategyOptionsPatchOutput struct{ *pulumi.OutputState }

func (SupplementalGroupsStrategyOptionsPatchOutput) ElementType() reflect.Type {
	return reflect.TypeOf((*SupplementalGroupsStrategyOptionsPatch)(nil)).Elem()
}

func (o SupplementalGroupsStrategyOptionsPatchOutput) ToSupplementalGroupsStrategyOptionsPatchOutput() SupplementalGroupsStrategyOptionsPatchOutput {
	return o
}

func (o SupplementalGroupsStrategyOptionsPatchOutput) ToSupplementalGroupsStrategyOptionsPatchOutputWithContext(ctx context.Context) SupplementalGroupsStrategyOptionsPatchOutput {
	return o
}

func (o SupplementalGroupsStrategyOptionsPatchOutput) ToSupplementalGroupsStrategyOptionsPatchPtrOutput() SupplementalGroupsStrategyOptionsPatchPtrOutput {
	return o.ToSupplementalGroupsStrategyOptionsPatchPtrOutputWithContext(context.Background())
}

func (o SupplementalGroupsStrategyOptionsPatchOutput) ToSupplementalGroupsStrategyOptionsPatchPtrOutputWithContext(ctx context.Context) SupplementalGroupsStrategyOptionsPatchPtrOutput {
	return o.ApplyTWithContext(ctx, func(_ context.Context, v SupplementalGroupsStrategyOptionsPatch) *SupplementalGroupsStrategyOptionsPatch {
		return &v
	}).(SupplementalGroupsStrategyOptionsPatchPtrOutput)
}

// ranges are the allowed ranges of supplemental groups.  If you would like to force a single supplemental group then supply a single range with the same start and end. Required for MustRunAs.
func (o SupplementalGroupsStrategyOptionsPatchOutput) Ranges() IDRangePatchArrayOutput {
	return o.ApplyT(func(v SupplementalGroupsStrategyOptionsPatch) []IDRangePatch { return v.Ranges }).(IDRangePatchArrayOutput)
}

// rule is the strategy that will dictate what supplemental groups is used in the SecurityContext.
func (o SupplementalGroupsStrategyOptionsPatchOutput) Rule() pulumi.StringPtrOutput {
	return o.ApplyT(func(v SupplementalGroupsStrategyOptionsPatch) *string { return v.Rule }).(pulumi.StringPtrOutput)
}

type SupplementalGroupsStrategyOptionsPatchPtrOutput struct{ *pulumi.OutputState }

func (SupplementalGroupsStrategyOptionsPatchPtrOutput) ElementType() reflect.Type {
	return reflect.TypeOf((**SupplementalGroupsStrategyOptionsPatch)(nil)).Elem()
}

func (o SupplementalGroupsStrategyOptionsPatchPtrOutput) ToSupplementalGroupsStrategyOptionsPatchPtrOutput() SupplementalGroupsStrategyOptionsPatchPtrOutput {
	return o
}

func (o SupplementalGroupsStrategyOptionsPatchPtrOutput) ToSupplementalGroupsStrategyOptionsPatchPtrOutputWithContext(ctx context.Context) SupplementalGroupsStrategyOptionsPatchPtrOutput {
	return o
}

func (o SupplementalGroupsStrategyOptionsPatchPtrOutput) Elem() SupplementalGroupsStrategyOptionsPatchOutput {
	return o.ApplyT(func(v *SupplementalGroupsStrategyOptionsPatch) SupplementalGroupsStrategyOptionsPatch {
		if v != nil {
			return *v
		}
		var ret SupplementalGroupsStrategyOptionsPatch
		return ret
	}).(SupplementalGroupsStrategyOptionsPatchOutput)
}

// ranges are the allowed ranges of supplemental groups.  If you would like to force a single supplemental group then supply a single range with the same start and end. Required for MustRunAs.
func (o SupplementalGroupsStrategyOptionsPatchPtrOutput) Ranges() IDRangePatchArrayOutput {
	return o.ApplyT(func(v *SupplementalGroupsStrategyOptionsPatch) []IDRangePatch {
		if v == nil {
			return nil
		}
		return v.Ranges
	}).(IDRangePatchArrayOutput)
}

// rule is the strategy that will dictate what supplemental groups is used in the SecurityContext.
func (o SupplementalGroupsStrategyOptionsPatchPtrOutput) Rule() pulumi.StringPtrOutput {
	return o.ApplyT(func(v *SupplementalGroupsStrategyOptionsPatch) *string {
		if v == nil {
			return nil
		}
		return v.Rule
	}).(pulumi.StringPtrOutput)
}

func init() {
	pulumi.RegisterInputType(reflect.TypeOf((*AllowedCSIDriverInput)(nil)).Elem(), AllowedCSIDriverArgs{})
	pulumi.RegisterInputType(reflect.TypeOf((*AllowedCSIDriverArrayInput)(nil)).Elem(), AllowedCSIDriverArray{})
	pulumi.RegisterInputType(reflect.TypeOf((*AllowedCSIDriverPatchInput)(nil)).Elem(), AllowedCSIDriverPatchArgs{})
	pulumi.RegisterInputType(reflect.TypeOf((*AllowedCSIDriverPatchArrayInput)(nil)).Elem(), AllowedCSIDriverPatchArray{})
	pulumi.RegisterInputType(reflect.TypeOf((*AllowedFlexVolumeInput)(nil)).Elem(), AllowedFlexVolumeArgs{})
	pulumi.RegisterInputType(reflect.TypeOf((*AllowedFlexVolumeArrayInput)(nil)).Elem(), AllowedFlexVolumeArray{})
	pulumi.RegisterInputType(reflect.TypeOf((*AllowedFlexVolumePatchInput)(nil)).Elem(), AllowedFlexVolumePatchArgs{})
	pulumi.RegisterInputType(reflect.TypeOf((*AllowedFlexVolumePatchArrayInput)(nil)).Elem(), AllowedFlexVolumePatchArray{})
	pulumi.RegisterInputType(reflect.TypeOf((*AllowedHostPathInput)(nil)).Elem(), AllowedHostPathArgs{})
	pulumi.RegisterInputType(reflect.TypeOf((*AllowedHostPathArrayInput)(nil)).Elem(), AllowedHostPathArray{})
	pulumi.RegisterInputType(reflect.TypeOf((*AllowedHostPathPatchInput)(nil)).Elem(), AllowedHostPathPatchArgs{})
	pulumi.RegisterInputType(reflect.TypeOf((*AllowedHostPathPatchArrayInput)(nil)).Elem(), AllowedHostPathPatchArray{})
	pulumi.RegisterInputType(reflect.TypeOf((*EvictionInput)(nil)).Elem(), EvictionArgs{})
	pulumi.RegisterInputType(reflect.TypeOf((*EvictionPatchInput)(nil)).Elem(), EvictionPatchArgs{})
	pulumi.RegisterInputType(reflect.TypeOf((*FSGroupStrategyOptionsInput)(nil)).Elem(), FSGroupStrategyOptionsArgs{})
	pulumi.RegisterInputType(reflect.TypeOf((*FSGroupStrategyOptionsPtrInput)(nil)).Elem(), FSGroupStrategyOptionsArgs{})
	pulumi.RegisterInputType(reflect.TypeOf((*FSGroupStrategyOptionsPatchInput)(nil)).Elem(), FSGroupStrategyOptionsPatchArgs{})
	pulumi.RegisterInputType(reflect.TypeOf((*FSGroupStrategyOptionsPatchPtrInput)(nil)).Elem(), FSGroupStrategyOptionsPatchArgs{})
	pulumi.RegisterInputType(reflect.TypeOf((*HostPortRangeInput)(nil)).Elem(), HostPortRangeArgs{})
	pulumi.RegisterInputType(reflect.TypeOf((*HostPortRangeArrayInput)(nil)).Elem(), HostPortRangeArray{})
	pulumi.RegisterInputType(reflect.TypeOf((*HostPortRangePatchInput)(nil)).Elem(), HostPortRangePatchArgs{})
	pulumi.RegisterInputType(reflect.TypeOf((*HostPortRangePatchArrayInput)(nil)).Elem(), HostPortRangePatchArray{})
	pulumi.RegisterInputType(reflect.TypeOf((*IDRangeInput)(nil)).Elem(), IDRangeArgs{})
	pulumi.RegisterInputType(reflect.TypeOf((*IDRangeArrayInput)(nil)).Elem(), IDRangeArray{})
	pulumi.RegisterInputType(reflect.TypeOf((*IDRangePatchInput)(nil)).Elem(), IDRangePatchArgs{})
	pulumi.RegisterInputType(reflect.TypeOf((*IDRangePatchArrayInput)(nil)).Elem(), IDRangePatchArray{})
	pulumi.RegisterInputType(reflect.TypeOf((*PodDisruptionBudgetTypeInput)(nil)).Elem(), PodDisruptionBudgetTypeArgs{})
	pulumi.RegisterInputType(reflect.TypeOf((*PodDisruptionBudgetTypeArrayInput)(nil)).Elem(), PodDisruptionBudgetTypeArray{})
	pulumi.RegisterInputType(reflect.TypeOf((*PodDisruptionBudgetListTypeInput)(nil)).Elem(), PodDisruptionBudgetListTypeArgs{})
	pulumi.RegisterInputType(reflect.TypeOf((*PodDisruptionBudgetPatchTypeInput)(nil)).Elem(), PodDisruptionBudgetPatchTypeArgs{})
	pulumi.RegisterInputType(reflect.TypeOf((*PodDisruptionBudgetSpecInput)(nil)).Elem(), PodDisruptionBudgetSpecArgs{})
	pulumi.RegisterInputType(reflect.TypeOf((*PodDisruptionBudgetSpecPtrInput)(nil)).Elem(), PodDisruptionBudgetSpecArgs{})
	pulumi.RegisterInputType(reflect.TypeOf((*PodDisruptionBudgetSpecPatchInput)(nil)).Elem(), PodDisruptionBudgetSpecPatchArgs{})
	pulumi.RegisterInputType(reflect.TypeOf((*PodDisruptionBudgetSpecPatchPtrInput)(nil)).Elem(), PodDisruptionBudgetSpecPatchArgs{})
	pulumi.RegisterInputType(reflect.TypeOf((*PodDisruptionBudgetStatusInput)(nil)).Elem(), PodDisruptionBudgetStatusArgs{})
	pulumi.RegisterInputType(reflect.TypeOf((*PodDisruptionBudgetStatusPtrInput)(nil)).Elem(), PodDisruptionBudgetStatusArgs{})
	pulumi.RegisterInputType(reflect.TypeOf((*PodDisruptionBudgetStatusPatchInput)(nil)).Elem(), PodDisruptionBudgetStatusPatchArgs{})
	pulumi.RegisterInputType(reflect.TypeOf((*PodDisruptionBudgetStatusPatchPtrInput)(nil)).Elem(), PodDisruptionBudgetStatusPatchArgs{})
	pulumi.RegisterInputType(reflect.TypeOf((*PodSecurityPolicyTypeInput)(nil)).Elem(), PodSecurityPolicyTypeArgs{})
	pulumi.RegisterInputType(reflect.TypeOf((*PodSecurityPolicyTypeArrayInput)(nil)).Elem(), PodSecurityPolicyTypeArray{})
	pulumi.RegisterInputType(reflect.TypeOf((*PodSecurityPolicyListTypeInput)(nil)).Elem(), PodSecurityPolicyListTypeArgs{})
	pulumi.RegisterInputType(reflect.TypeOf((*PodSecurityPolicyPatchTypeInput)(nil)).Elem(), PodSecurityPolicyPatchTypeArgs{})
	pulumi.RegisterInputType(reflect.TypeOf((*PodSecurityPolicySpecInput)(nil)).Elem(), PodSecurityPolicySpecArgs{})
	pulumi.RegisterInputType(reflect.TypeOf((*PodSecurityPolicySpecPtrInput)(nil)).Elem(), PodSecurityPolicySpecArgs{})
	pulumi.RegisterInputType(reflect.TypeOf((*PodSecurityPolicySpecPatchInput)(nil)).Elem(), PodSecurityPolicySpecPatchArgs{})
	pulumi.RegisterInputType(reflect.TypeOf((*PodSecurityPolicySpecPatchPtrInput)(nil)).Elem(), PodSecurityPolicySpecPatchArgs{})
	pulumi.RegisterInputType(reflect.TypeOf((*RunAsGroupStrategyOptionsInput)(nil)).Elem(), RunAsGroupStrategyOptionsArgs{})
	pulumi.RegisterInputType(reflect.TypeOf((*RunAsGroupStrategyOptionsPtrInput)(nil)).Elem(), RunAsGroupStrategyOptionsArgs{})
	pulumi.RegisterInputType(reflect.TypeOf((*RunAsGroupStrategyOptionsPatchInput)(nil)).Elem(), RunAsGroupStrategyOptionsPatchArgs{})
	pulumi.RegisterInputType(reflect.TypeOf((*RunAsGroupStrategyOptionsPatchPtrInput)(nil)).Elem(), RunAsGroupStrategyOptionsPatchArgs{})
	pulumi.RegisterInputType(reflect.TypeOf((*RunAsUserStrategyOptionsInput)(nil)).Elem(), RunAsUserStrategyOptionsArgs{})
	pulumi.RegisterInputType(reflect.TypeOf((*RunAsUserStrategyOptionsPtrInput)(nil)).Elem(), RunAsUserStrategyOptionsArgs{})
	pulumi.RegisterInputType(reflect.TypeOf((*RunAsUserStrategyOptionsPatchInput)(nil)).Elem(), RunAsUserStrategyOptionsPatchArgs{})
	pulumi.RegisterInputType(reflect.TypeOf((*RunAsUserStrategyOptionsPatchPtrInput)(nil)).Elem(), RunAsUserStrategyOptionsPatchArgs{})
	pulumi.RegisterInputType(reflect.TypeOf((*RuntimeClassStrategyOptionsInput)(nil)).Elem(), RuntimeClassStrategyOptionsArgs{})
	pulumi.RegisterInputType(reflect.TypeOf((*RuntimeClassStrategyOptionsPtrInput)(nil)).Elem(), RuntimeClassStrategyOptionsArgs{})
	pulumi.RegisterInputType(reflect.TypeOf((*RuntimeClassStrategyOptionsPatchInput)(nil)).Elem(), RuntimeClassStrategyOptionsPatchArgs{})
	pulumi.RegisterInputType(reflect.TypeOf((*RuntimeClassStrategyOptionsPatchPtrInput)(nil)).Elem(), RuntimeClassStrategyOptionsPatchArgs{})
	pulumi.RegisterInputType(reflect.TypeOf((*SELinuxStrategyOptionsInput)(nil)).Elem(), SELinuxStrategyOptionsArgs{})
	pulumi.RegisterInputType(reflect.TypeOf((*SELinuxStrategyOptionsPtrInput)(nil)).Elem(), SELinuxStrategyOptionsArgs{})
	pulumi.RegisterInputType(reflect.TypeOf((*SELinuxStrategyOptionsPatchInput)(nil)).Elem(), SELinuxStrategyOptionsPatchArgs{})
	pulumi.RegisterInputType(reflect.TypeOf((*SELinuxStrategyOptionsPatchPtrInput)(nil)).Elem(), SELinuxStrategyOptionsPatchArgs{})
	pulumi.RegisterInputType(reflect.TypeOf((*SupplementalGroupsStrategyOptionsInput)(nil)).Elem(), SupplementalGroupsStrategyOptionsArgs{})
	pulumi.RegisterInputType(reflect.TypeOf((*SupplementalGroupsStrategyOptionsPtrInput)(nil)).Elem(), SupplementalGroupsStrategyOptionsArgs{})
	pulumi.RegisterInputType(reflect.TypeOf((*SupplementalGroupsStrategyOptionsPatchInput)(nil)).Elem(), SupplementalGroupsStrategyOptionsPatchArgs{})
	pulumi.RegisterInputType(reflect.TypeOf((*SupplementalGroupsStrategyOptionsPatchPtrInput)(nil)).Elem(), SupplementalGroupsStrategyOptionsPatchArgs{})
	pulumi.RegisterOutputType(AllowedCSIDriverOutput{})
	pulumi.RegisterOutputType(AllowedCSIDriverArrayOutput{})
	pulumi.RegisterOutputType(AllowedCSIDriverPatchOutput{})
	pulumi.RegisterOutputType(AllowedCSIDriverPatchArrayOutput{})
	pulumi.RegisterOutputType(AllowedFlexVolumeOutput{})
	pulumi.RegisterOutputType(AllowedFlexVolumeArrayOutput{})
	pulumi.RegisterOutputType(AllowedFlexVolumePatchOutput{})
	pulumi.RegisterOutputType(AllowedFlexVolumePatchArrayOutput{})
	pulumi.RegisterOutputType(AllowedHostPathOutput{})
	pulumi.RegisterOutputType(AllowedHostPathArrayOutput{})
	pulumi.RegisterOutputType(AllowedHostPathPatchOutput{})
	pulumi.RegisterOutputType(AllowedHostPathPatchArrayOutput{})
	pulumi.RegisterOutputType(EvictionOutput{})
	pulumi.RegisterOutputType(EvictionPatchOutput{})
	pulumi.RegisterOutputType(FSGroupStrategyOptionsOutput{})
	pulumi.RegisterOutputType(FSGroupStrategyOptionsPtrOutput{})
	pulumi.RegisterOutputType(FSGroupStrategyOptionsPatchOutput{})
	pulumi.RegisterOutputType(FSGroupStrategyOptionsPatchPtrOutput{})
	pulumi.RegisterOutputType(HostPortRangeOutput{})
	pulumi.RegisterOutputType(HostPortRangeArrayOutput{})
	pulumi.RegisterOutputType(HostPortRangePatchOutput{})
	pulumi.RegisterOutputType(HostPortRangePatchArrayOutput{})
	pulumi.RegisterOutputType(IDRangeOutput{})
	pulumi.RegisterOutputType(IDRangeArrayOutput{})
	pulumi.RegisterOutputType(IDRangePatchOutput{})
	pulumi.RegisterOutputType(IDRangePatchArrayOutput{})
	pulumi.RegisterOutputType(PodDisruptionBudgetTypeOutput{})
	pulumi.RegisterOutputType(PodDisruptionBudgetTypeArrayOutput{})
	pulumi.RegisterOutputType(PodDisruptionBudgetListTypeOutput{})
	pulumi.RegisterOutputType(PodDisruptionBudgetPatchTypeOutput{})
	pulumi.RegisterOutputType(PodDisruptionBudgetSpecOutput{})
	pulumi.RegisterOutputType(PodDisruptionBudgetSpecPtrOutput{})
	pulumi.RegisterOutputType(PodDisruptionBudgetSpecPatchOutput{})
	pulumi.RegisterOutputType(PodDisruptionBudgetSpecPatchPtrOutput{})
	pulumi.RegisterOutputType(PodDisruptionBudgetStatusOutput{})
	pulumi.RegisterOutputType(PodDisruptionBudgetStatusPtrOutput{})
	pulumi.RegisterOutputType(PodDisruptionBudgetStatusPatchOutput{})
	pulumi.RegisterOutputType(PodDisruptionBudgetStatusPatchPtrOutput{})
	pulumi.RegisterOutputType(PodSecurityPolicyTypeOutput{})
	pulumi.RegisterOutputType(PodSecurityPolicyTypeArrayOutput{})
	pulumi.RegisterOutputType(PodSecurityPolicyListTypeOutput{})
	pulumi.RegisterOutputType(PodSecurityPolicyPatchTypeOutput{})
	pulumi.RegisterOutputType(PodSecurityPolicySpecOutput{})
	pulumi.RegisterOutputType(PodSecurityPolicySpecPtrOutput{})
	pulumi.RegisterOutputType(PodSecurityPolicySpecPatchOutput{})
	pulumi.RegisterOutputType(PodSecurityPolicySpecPatchPtrOutput{})
	pulumi.RegisterOutputType(RunAsGroupStrategyOptionsOutput{})
	pulumi.RegisterOutputType(RunAsGroupStrategyOptionsPtrOutput{})
	pulumi.RegisterOutputType(RunAsGroupStrategyOptionsPatchOutput{})
	pulumi.RegisterOutputType(RunAsGroupStrategyOptionsPatchPtrOutput{})
	pulumi.RegisterOutputType(RunAsUserStrategyOptionsOutput{})
	pulumi.RegisterOutputType(RunAsUserStrategyOptionsPtrOutput{})
	pulumi.RegisterOutputType(RunAsUserStrategyOptionsPatchOutput{})
	pulumi.RegisterOutputType(RunAsUserStrategyOptionsPatchPtrOutput{})
	pulumi.RegisterOutputType(RuntimeClassStrategyOptionsOutput{})
	pulumi.RegisterOutputType(RuntimeClassStrategyOptionsPtrOutput{})
	pulumi.RegisterOutputType(RuntimeClassStrategyOptionsPatchOutput{})
	pulumi.RegisterOutputType(RuntimeClassStrategyOptionsPatchPtrOutput{})
	pulumi.RegisterOutputType(SELinuxStrategyOptionsOutput{})
	pulumi.RegisterOutputType(SELinuxStrategyOptionsPtrOutput{})
	pulumi.RegisterOutputType(SELinuxStrategyOptionsPatchOutput{})
	pulumi.RegisterOutputType(SELinuxStrategyOptionsPatchPtrOutput{})
	pulumi.RegisterOutputType(SupplementalGroupsStrategyOptionsOutput{})
	pulumi.RegisterOutputType(SupplementalGroupsStrategyOptionsPtrOutput{})
	pulumi.RegisterOutputType(SupplementalGroupsStrategyOptionsPatchOutput{})
	pulumi.RegisterOutputType(SupplementalGroupsStrategyOptionsPatchPtrOutput{})
}