Sync dependencies prior to release-0.10
This commit is contained in:
Philip Gough
@@ -1636,8 +1636,7 @@ spec:
|
||||
info: https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks'
|
||||
properties:
|
||||
exec:
|
||||
description: One and only one of the following should
|
||||
be specified. Exec specifies the action to take.
|
||||
description: Exec specifies the action to take.
|
||||
properties:
|
||||
command:
|
||||
description: Command is the command line to execute
|
||||
@@ -1698,9 +1697,10 @@ spec:
|
||||
- port
|
||||
type: object
|
||||
tcpSocket:
|
||||
description: 'TCPSocket specifies an action involving
|
||||
a TCP port. TCP hooks not yet supported TODO: implement
|
||||
a realistic TCP lifecycle hook'
|
||||
description: Deprecated. TCPSocket is NOT supported
|
||||
as a LifecycleHandler and kept for the backward compatibility.
|
||||
There are no validation of this field and lifecycle
|
||||
hooks will fail in runtime when tcp handler is specified.
|
||||
properties:
|
||||
host:
|
||||
description: 'Optional: Host name to connect to,
|
||||
@@ -1723,18 +1723,16 @@ spec:
|
||||
is terminated due to an API request or management event
|
||||
such as liveness/startup probe failure, preemption, resource
|
||||
contention, etc. The handler is not called if the container
|
||||
crashes or exits. The reason for termination is passed
|
||||
to the handler. The Pod''s termination grace period countdown
|
||||
begins before the PreStop hooked is executed. Regardless
|
||||
of the outcome of the handler, the container will eventually
|
||||
terminate within the Pod''s termination grace period.
|
||||
Other management of the container blocks until the hook
|
||||
completes or until the termination grace period is reached.
|
||||
More info: https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks'
|
||||
crashes or exits. The Pod''s termination grace period
|
||||
countdown begins before the PreStop hook is executed.
|
||||
Regardless of the outcome of the handler, the container
|
||||
will eventually terminate within the Pod''s termination
|
||||
grace period (unless delayed by finalizers). Other management
|
||||
of the container blocks until the hook completes or until
|
||||
the termination grace period is reached. More info: https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks'
|
||||
properties:
|
||||
exec:
|
||||
description: One and only one of the following should
|
||||
be specified. Exec specifies the action to take.
|
||||
description: Exec specifies the action to take.
|
||||
properties:
|
||||
command:
|
||||
description: Command is the command line to execute
|
||||
@@ -1795,9 +1793,10 @@ spec:
|
||||
- port
|
||||
type: object
|
||||
tcpSocket:
|
||||
description: 'TCPSocket specifies an action involving
|
||||
a TCP port. TCP hooks not yet supported TODO: implement
|
||||
a realistic TCP lifecycle hook'
|
||||
description: Deprecated. TCPSocket is NOT supported
|
||||
as a LifecycleHandler and kept for the backward compatibility.
|
||||
There are no validation of this field and lifecycle
|
||||
hooks will fail in runtime when tcp handler is specified.
|
||||
properties:
|
||||
host:
|
||||
description: 'Optional: Host name to connect to,
|
||||
@@ -1822,8 +1821,7 @@ spec:
|
||||
info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes'
|
||||
properties:
|
||||
exec:
|
||||
description: One and only one of the following should be
|
||||
specified. Exec specifies the action to take.
|
||||
description: Exec specifies the action to take.
|
||||
properties:
|
||||
command:
|
||||
description: Command is the command line to execute
|
||||
@@ -1844,6 +1842,25 @@ spec:
|
||||
to 3. Minimum value is 1.
|
||||
format: int32
|
||||
type: integer
|
||||
grpc:
|
||||
description: GRPC specifies an action involving a GRPC port.
|
||||
This is an alpha field and requires enabling GRPCContainerProbe
|
||||
feature gate.
|
||||
properties:
|
||||
port:
|
||||
description: Port number of the gRPC service. Number
|
||||
must be in the range 1 to 65535.
|
||||
format: int32
|
||||
type: integer
|
||||
service:
|
||||
description: "Service is the name of the service to
|
||||
place in the gRPC HealthCheckRequest (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).
|
||||
\n If this is not specified, the default behavior
|
||||
is defined by gRPC."
|
||||
type: string
|
||||
required:
|
||||
- port
|
||||
type: object
|
||||
httpGet:
|
||||
description: HTTPGet specifies the http request to perform.
|
||||
properties:
|
||||
@@ -1907,9 +1924,8 @@ spec:
|
||||
format: int32
|
||||
type: integer
|
||||
tcpSocket:
|
||||
description: 'TCPSocket specifies an action involving a
|
||||
TCP port. TCP hooks not yet supported TODO: implement
|
||||
a realistic TCP lifecycle hook'
|
||||
description: TCPSocket specifies an action involving a TCP
|
||||
port.
|
||||
properties:
|
||||
host:
|
||||
description: 'Optional: Host name to connect to, defaults
|
||||
@@ -2007,8 +2023,7 @@ spec:
|
||||
fails. Cannot be updated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes'
|
||||
properties:
|
||||
exec:
|
||||
description: One and only one of the following should be
|
||||
specified. Exec specifies the action to take.
|
||||
description: Exec specifies the action to take.
|
||||
properties:
|
||||
command:
|
||||
description: Command is the command line to execute
|
||||
@@ -2029,6 +2044,25 @@ spec:
|
||||
to 3. Minimum value is 1.
|
||||
format: int32
|
||||
type: integer
|
||||
grpc:
|
||||
description: GRPC specifies an action involving a GRPC port.
|
||||
This is an alpha field and requires enabling GRPCContainerProbe
|
||||
feature gate.
|
||||
properties:
|
||||
port:
|
||||
description: Port number of the gRPC service. Number
|
||||
must be in the range 1 to 65535.
|
||||
format: int32
|
||||
type: integer
|
||||
service:
|
||||
description: "Service is the name of the service to
|
||||
place in the gRPC HealthCheckRequest (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).
|
||||
\n If this is not specified, the default behavior
|
||||
is defined by gRPC."
|
||||
type: string
|
||||
required:
|
||||
- port
|
||||
type: object
|
||||
httpGet:
|
||||
description: HTTPGet specifies the http request to perform.
|
||||
properties:
|
||||
@@ -2092,9 +2126,8 @@ spec:
|
||||
format: int32
|
||||
type: integer
|
||||
tcpSocket:
|
||||
description: 'TCPSocket specifies an action involving a
|
||||
TCP port. TCP hooks not yet supported TODO: implement
|
||||
a realistic TCP lifecycle hook'
|
||||
description: TCPSocket specifies an action involving a TCP
|
||||
port.
|
||||
properties:
|
||||
host:
|
||||
description: 'Optional: Host name to connect to, defaults
|
||||
@@ -2175,12 +2208,14 @@ spec:
|
||||
This bool directly controls if the no_new_privs flag will
|
||||
be set on the container process. AllowPrivilegeEscalation
|
||||
is true always when the container is: 1) run as Privileged
|
||||
2) has CAP_SYS_ADMIN'
|
||||
2) has CAP_SYS_ADMIN Note that this field cannot be set
|
||||
when spec.os.name is windows.'
|
||||
type: boolean
|
||||
capabilities:
|
||||
description: The capabilities to add/drop when running containers.
|
||||
Defaults to the default set of capabilities granted by
|
||||
the container runtime.
|
||||
the container runtime. Note that this field cannot be
|
||||
set when spec.os.name is windows.
|
||||
properties:
|
||||
add:
|
||||
description: Added capabilities
|
||||
@@ -2200,25 +2235,29 @@ spec:
|
||||
privileged:
|
||||
description: Run container in privileged mode. Processes
|
||||
in privileged containers are essentially equivalent to
|
||||
root on the host. Defaults to false.
|
||||
root on the host. Defaults to false. Note that this field
|
||||
cannot be set when spec.os.name is windows.
|
||||
type: boolean
|
||||
procMount:
|
||||
description: procMount denotes the type of proc mount to
|
||||
use for the containers. The default is DefaultProcMount
|
||||
which uses the container runtime defaults for readonly
|
||||
paths and masked paths. This requires the ProcMountType
|
||||
feature flag to be enabled.
|
||||
feature flag to be enabled. Note that this field cannot
|
||||
be set when spec.os.name is windows.
|
||||
type: string
|
||||
readOnlyRootFilesystem:
|
||||
description: Whether this container has a read-only root
|
||||
filesystem. Default is false.
|
||||
filesystem. Default is false. Note that this field cannot
|
||||
be set when spec.os.name is windows.
|
||||
type: boolean
|
||||
runAsGroup:
|
||||
description: The GID to run the entrypoint of the container
|
||||
process. Uses runtime default if unset. May also be set
|
||||
in PodSecurityContext. If set in both SecurityContext
|
||||
and PodSecurityContext, the value specified in SecurityContext
|
||||
takes precedence.
|
||||
takes precedence. Note that this field cannot be set when
|
||||
spec.os.name is windows.
|
||||
format: int64
|
||||
type: integer
|
||||
runAsNonRoot:
|
||||
@@ -2236,7 +2275,8 @@ spec:
|
||||
process. Defaults to user specified in image metadata
|
||||
if unspecified. May also be set in PodSecurityContext. If
|
||||
set in both SecurityContext and PodSecurityContext, the
|
||||
value specified in SecurityContext takes precedence.
|
||||
value specified in SecurityContext takes precedence. Note
|
||||
that this field cannot be set when spec.os.name is windows.
|
||||
format: int64
|
||||
type: integer
|
||||
seLinuxOptions:
|
||||
@@ -2245,7 +2285,8 @@ spec:
|
||||
random SELinux context for each container. May also be
|
||||
set in PodSecurityContext. If set in both SecurityContext
|
||||
and PodSecurityContext, the value specified in SecurityContext
|
||||
takes precedence.
|
||||
takes precedence. Note that this field cannot be set when
|
||||
spec.os.name is windows.
|
||||
properties:
|
||||
level:
|
||||
description: Level is SELinux level label that applies
|
||||
@@ -2268,6 +2309,8 @@ spec:
|
||||
description: The seccomp options to use by this container.
|
||||
If seccomp options are provided at both the pod & container
|
||||
level, the container options override the pod options.
|
||||
Note that this field cannot be set when spec.os.name is
|
||||
windows.
|
||||
properties:
|
||||
localhostProfile:
|
||||
description: localhostProfile indicates a profile defined
|
||||
@@ -2293,6 +2336,8 @@ spec:
|
||||
containers. If unspecified, the options from the PodSecurityContext
|
||||
will be used. If set in both SecurityContext and PodSecurityContext,
|
||||
the value specified in SecurityContext takes precedence.
|
||||
Note that this field cannot be set when spec.os.name is
|
||||
linux.
|
||||
properties:
|
||||
gmsaCredentialSpec:
|
||||
description: GMSACredentialSpec is where the GMSA admission
|
||||
@@ -2338,8 +2383,7 @@ spec:
|
||||
This cannot be updated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes'
|
||||
properties:
|
||||
exec:
|
||||
description: One and only one of the following should be
|
||||
specified. Exec specifies the action to take.
|
||||
description: Exec specifies the action to take.
|
||||
properties:
|
||||
command:
|
||||
description: Command is the command line to execute
|
||||
@@ -2360,6 +2404,25 @@ spec:
|
||||
to 3. Minimum value is 1.
|
||||
format: int32
|
||||
type: integer
|
||||
grpc:
|
||||
description: GRPC specifies an action involving a GRPC port.
|
||||
This is an alpha field and requires enabling GRPCContainerProbe
|
||||
feature gate.
|
||||
properties:
|
||||
port:
|
||||
description: Port number of the gRPC service. Number
|
||||
must be in the range 1 to 65535.
|
||||
format: int32
|
||||
type: integer
|
||||
service:
|
||||
description: "Service is the name of the service to
|
||||
place in the gRPC HealthCheckRequest (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).
|
||||
\n If this is not specified, the default behavior
|
||||
is defined by gRPC."
|
||||
type: string
|
||||
required:
|
||||
- port
|
||||
type: object
|
||||
httpGet:
|
||||
description: HTTPGet specifies the http request to perform.
|
||||
properties:
|
||||
@@ -2423,9 +2486,8 @@ spec:
|
||||
format: int32
|
||||
type: integer
|
||||
tcpSocket:
|
||||
description: 'TCPSocket specifies an action involving a
|
||||
TCP port. TCP hooks not yet supported TODO: implement
|
||||
a realistic TCP lifecycle hook'
|
||||
description: TCPSocket specifies an action involving a TCP
|
||||
port.
|
||||
properties:
|
||||
host:
|
||||
description: 'Optional: Host name to connect to, defaults
|
||||
@@ -2921,8 +2983,7 @@ spec:
|
||||
info: https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks'
|
||||
properties:
|
||||
exec:
|
||||
description: One and only one of the following should
|
||||
be specified. Exec specifies the action to take.
|
||||
description: Exec specifies the action to take.
|
||||
properties:
|
||||
command:
|
||||
description: Command is the command line to execute
|
||||
@@ -2983,9 +3044,10 @@ spec:
|
||||
- port
|
||||
type: object
|
||||
tcpSocket:
|
||||
description: 'TCPSocket specifies an action involving
|
||||
a TCP port. TCP hooks not yet supported TODO: implement
|
||||
a realistic TCP lifecycle hook'
|
||||
description: Deprecated. TCPSocket is NOT supported
|
||||
as a LifecycleHandler and kept for the backward compatibility.
|
||||
There are no validation of this field and lifecycle
|
||||
hooks will fail in runtime when tcp handler is specified.
|
||||
properties:
|
||||
host:
|
||||
description: 'Optional: Host name to connect to,
|
||||
@@ -3008,18 +3070,16 @@ spec:
|
||||
is terminated due to an API request or management event
|
||||
such as liveness/startup probe failure, preemption, resource
|
||||
contention, etc. The handler is not called if the container
|
||||
crashes or exits. The reason for termination is passed
|
||||
to the handler. The Pod''s termination grace period countdown
|
||||
begins before the PreStop hooked is executed. Regardless
|
||||
of the outcome of the handler, the container will eventually
|
||||
terminate within the Pod''s termination grace period.
|
||||
Other management of the container blocks until the hook
|
||||
completes or until the termination grace period is reached.
|
||||
More info: https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks'
|
||||
crashes or exits. The Pod''s termination grace period
|
||||
countdown begins before the PreStop hook is executed.
|
||||
Regardless of the outcome of the handler, the container
|
||||
will eventually terminate within the Pod''s termination
|
||||
grace period (unless delayed by finalizers). Other management
|
||||
of the container blocks until the hook completes or until
|
||||
the termination grace period is reached. More info: https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks'
|
||||
properties:
|
||||
exec:
|
||||
description: One and only one of the following should
|
||||
be specified. Exec specifies the action to take.
|
||||
description: Exec specifies the action to take.
|
||||
properties:
|
||||
command:
|
||||
description: Command is the command line to execute
|
||||
@@ -3080,9 +3140,10 @@ spec:
|
||||
- port
|
||||
type: object
|
||||
tcpSocket:
|
||||
description: 'TCPSocket specifies an action involving
|
||||
a TCP port. TCP hooks not yet supported TODO: implement
|
||||
a realistic TCP lifecycle hook'
|
||||
description: Deprecated. TCPSocket is NOT supported
|
||||
as a LifecycleHandler and kept for the backward compatibility.
|
||||
There are no validation of this field and lifecycle
|
||||
hooks will fail in runtime when tcp handler is specified.
|
||||
properties:
|
||||
host:
|
||||
description: 'Optional: Host name to connect to,
|
||||
@@ -3107,8 +3168,7 @@ spec:
|
||||
info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes'
|
||||
properties:
|
||||
exec:
|
||||
description: One and only one of the following should be
|
||||
specified. Exec specifies the action to take.
|
||||
description: Exec specifies the action to take.
|
||||
properties:
|
||||
command:
|
||||
description: Command is the command line to execute
|
||||
@@ -3129,6 +3189,25 @@ spec:
|
||||
to 3. Minimum value is 1.
|
||||
format: int32
|
||||
type: integer
|
||||
grpc:
|
||||
description: GRPC specifies an action involving a GRPC port.
|
||||
This is an alpha field and requires enabling GRPCContainerProbe
|
||||
feature gate.
|
||||
properties:
|
||||
port:
|
||||
description: Port number of the gRPC service. Number
|
||||
must be in the range 1 to 65535.
|
||||
format: int32
|
||||
type: integer
|
||||
service:
|
||||
description: "Service is the name of the service to
|
||||
place in the gRPC HealthCheckRequest (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).
|
||||
\n If this is not specified, the default behavior
|
||||
is defined by gRPC."
|
||||
type: string
|
||||
required:
|
||||
- port
|
||||
type: object
|
||||
httpGet:
|
||||
description: HTTPGet specifies the http request to perform.
|
||||
properties:
|
||||
@@ -3192,9 +3271,8 @@ spec:
|
||||
format: int32
|
||||
type: integer
|
||||
tcpSocket:
|
||||
description: 'TCPSocket specifies an action involving a
|
||||
TCP port. TCP hooks not yet supported TODO: implement
|
||||
a realistic TCP lifecycle hook'
|
||||
description: TCPSocket specifies an action involving a TCP
|
||||
port.
|
||||
properties:
|
||||
host:
|
||||
description: 'Optional: Host name to connect to, defaults
|
||||
@@ -3292,8 +3370,7 @@ spec:
|
||||
fails. Cannot be updated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes'
|
||||
properties:
|
||||
exec:
|
||||
description: One and only one of the following should be
|
||||
specified. Exec specifies the action to take.
|
||||
description: Exec specifies the action to take.
|
||||
properties:
|
||||
command:
|
||||
description: Command is the command line to execute
|
||||
@@ -3314,6 +3391,25 @@ spec:
|
||||
to 3. Minimum value is 1.
|
||||
format: int32
|
||||
type: integer
|
||||
grpc:
|
||||
description: GRPC specifies an action involving a GRPC port.
|
||||
This is an alpha field and requires enabling GRPCContainerProbe
|
||||
feature gate.
|
||||
properties:
|
||||
port:
|
||||
description: Port number of the gRPC service. Number
|
||||
must be in the range 1 to 65535.
|
||||
format: int32
|
||||
type: integer
|
||||
service:
|
||||
description: "Service is the name of the service to
|
||||
place in the gRPC HealthCheckRequest (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).
|
||||
\n If this is not specified, the default behavior
|
||||
is defined by gRPC."
|
||||
type: string
|
||||
required:
|
||||
- port
|
||||
type: object
|
||||
httpGet:
|
||||
description: HTTPGet specifies the http request to perform.
|
||||
properties:
|
||||
@@ -3377,9 +3473,8 @@ spec:
|
||||
format: int32
|
||||
type: integer
|
||||
tcpSocket:
|
||||
description: 'TCPSocket specifies an action involving a
|
||||
TCP port. TCP hooks not yet supported TODO: implement
|
||||
a realistic TCP lifecycle hook'
|
||||
description: TCPSocket specifies an action involving a TCP
|
||||
port.
|
||||
properties:
|
||||
host:
|
||||
description: 'Optional: Host name to connect to, defaults
|
||||
@@ -3460,12 +3555,14 @@ spec:
|
||||
This bool directly controls if the no_new_privs flag will
|
||||
be set on the container process. AllowPrivilegeEscalation
|
||||
is true always when the container is: 1) run as Privileged
|
||||
2) has CAP_SYS_ADMIN'
|
||||
2) has CAP_SYS_ADMIN Note that this field cannot be set
|
||||
when spec.os.name is windows.'
|
||||
type: boolean
|
||||
capabilities:
|
||||
description: The capabilities to add/drop when running containers.
|
||||
Defaults to the default set of capabilities granted by
|
||||
the container runtime.
|
||||
the container runtime. Note that this field cannot be
|
||||
set when spec.os.name is windows.
|
||||
properties:
|
||||
add:
|
||||
description: Added capabilities
|
||||
@@ -3485,25 +3582,29 @@ spec:
|
||||
privileged:
|
||||
description: Run container in privileged mode. Processes
|
||||
in privileged containers are essentially equivalent to
|
||||
root on the host. Defaults to false.
|
||||
root on the host. Defaults to false. Note that this field
|
||||
cannot be set when spec.os.name is windows.
|
||||
type: boolean
|
||||
procMount:
|
||||
description: procMount denotes the type of proc mount to
|
||||
use for the containers. The default is DefaultProcMount
|
||||
which uses the container runtime defaults for readonly
|
||||
paths and masked paths. This requires the ProcMountType
|
||||
feature flag to be enabled.
|
||||
feature flag to be enabled. Note that this field cannot
|
||||
be set when spec.os.name is windows.
|
||||
type: string
|
||||
readOnlyRootFilesystem:
|
||||
description: Whether this container has a read-only root
|
||||
filesystem. Default is false.
|
||||
filesystem. Default is false. Note that this field cannot
|
||||
be set when spec.os.name is windows.
|
||||
type: boolean
|
||||
runAsGroup:
|
||||
description: The GID to run the entrypoint of the container
|
||||
process. Uses runtime default if unset. May also be set
|
||||
in PodSecurityContext. If set in both SecurityContext
|
||||
and PodSecurityContext, the value specified in SecurityContext
|
||||
takes precedence.
|
||||
takes precedence. Note that this field cannot be set when
|
||||
spec.os.name is windows.
|
||||
format: int64
|
||||
type: integer
|
||||
runAsNonRoot:
|
||||
@@ -3521,7 +3622,8 @@ spec:
|
||||
process. Defaults to user specified in image metadata
|
||||
if unspecified. May also be set in PodSecurityContext. If
|
||||
set in both SecurityContext and PodSecurityContext, the
|
||||
value specified in SecurityContext takes precedence.
|
||||
value specified in SecurityContext takes precedence. Note
|
||||
that this field cannot be set when spec.os.name is windows.
|
||||
format: int64
|
||||
type: integer
|
||||
seLinuxOptions:
|
||||
@@ -3530,7 +3632,8 @@ spec:
|
||||
random SELinux context for each container. May also be
|
||||
set in PodSecurityContext. If set in both SecurityContext
|
||||
and PodSecurityContext, the value specified in SecurityContext
|
||||
takes precedence.
|
||||
takes precedence. Note that this field cannot be set when
|
||||
spec.os.name is windows.
|
||||
properties:
|
||||
level:
|
||||
description: Level is SELinux level label that applies
|
||||
@@ -3553,6 +3656,8 @@ spec:
|
||||
description: The seccomp options to use by this container.
|
||||
If seccomp options are provided at both the pod & container
|
||||
level, the container options override the pod options.
|
||||
Note that this field cannot be set when spec.os.name is
|
||||
windows.
|
||||
properties:
|
||||
localhostProfile:
|
||||
description: localhostProfile indicates a profile defined
|
||||
@@ -3578,6 +3683,8 @@ spec:
|
||||
containers. If unspecified, the options from the PodSecurityContext
|
||||
will be used. If set in both SecurityContext and PodSecurityContext,
|
||||
the value specified in SecurityContext takes precedence.
|
||||
Note that this field cannot be set when spec.os.name is
|
||||
linux.
|
||||
properties:
|
||||
gmsaCredentialSpec:
|
||||
description: GMSACredentialSpec is where the GMSA admission
|
||||
@@ -3623,8 +3730,7 @@ spec:
|
||||
This cannot be updated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes'
|
||||
properties:
|
||||
exec:
|
||||
description: One and only one of the following should be
|
||||
specified. Exec specifies the action to take.
|
||||
description: Exec specifies the action to take.
|
||||
properties:
|
||||
command:
|
||||
description: Command is the command line to execute
|
||||
@@ -3645,6 +3751,25 @@ spec:
|
||||
to 3. Minimum value is 1.
|
||||
format: int32
|
||||
type: integer
|
||||
grpc:
|
||||
description: GRPC specifies an action involving a GRPC port.
|
||||
This is an alpha field and requires enabling GRPCContainerProbe
|
||||
feature gate.
|
||||
properties:
|
||||
port:
|
||||
description: Port number of the gRPC service. Number
|
||||
must be in the range 1 to 65535.
|
||||
format: int32
|
||||
type: integer
|
||||
service:
|
||||
description: "Service is the name of the service to
|
||||
place in the gRPC HealthCheckRequest (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).
|
||||
\n If this is not specified, the default behavior
|
||||
is defined by gRPC."
|
||||
type: string
|
||||
required:
|
||||
- port
|
||||
type: object
|
||||
httpGet:
|
||||
description: HTTPGet specifies the http request to perform.
|
||||
properties:
|
||||
@@ -3708,9 +3833,8 @@ spec:
|
||||
format: int32
|
||||
type: integer
|
||||
tcpSocket:
|
||||
description: 'TCPSocket specifies an action involving a
|
||||
TCP port. TCP hooks not yet supported TODO: implement
|
||||
a realistic TCP lifecycle hook'
|
||||
description: TCPSocket specifies an action involving a TCP
|
||||
port.
|
||||
properties:
|
||||
host:
|
||||
description: 'Optional: Host name to connect to, defaults
|
||||
@@ -5182,7 +5306,8 @@ spec:
|
||||
set (new files created in the volume will be owned by FSGroup)
|
||||
3. The permission bits are OR'd with rw-rw---- \n If unset,
|
||||
the Kubelet will not modify the ownership and permissions of
|
||||
any volume."
|
||||
any volume. Note that this field cannot be set when spec.os.name
|
||||
is windows."
|
||||
format: int64
|
||||
type: integer
|
||||
fsGroupChangePolicy:
|
||||
@@ -5192,13 +5317,15 @@ spec:
|
||||
support fsGroup based ownership(and permissions). It will have
|
||||
no effect on ephemeral volume types such as: secret, configmaps
|
||||
and emptydir. Valid values are "OnRootMismatch" and "Always".
|
||||
If not specified, "Always" is used.'
|
||||
If not specified, "Always" is used. Note that this field cannot
|
||||
be set when spec.os.name is windows.'
|
||||
type: string
|
||||
runAsGroup:
|
||||
description: The GID to run the entrypoint of the container process.
|
||||
Uses runtime default if unset. May also be set in SecurityContext. If
|
||||
set in both SecurityContext and PodSecurityContext, the value
|
||||
specified in SecurityContext takes precedence for that container.
|
||||
Note that this field cannot be set when spec.os.name is windows.
|
||||
format: int64
|
||||
type: integer
|
||||
runAsNonRoot:
|
||||
@@ -5215,7 +5342,8 @@ spec:
|
||||
Defaults to user specified in image metadata if unspecified.
|
||||
May also be set in SecurityContext. If set in both SecurityContext
|
||||
and PodSecurityContext, the value specified in SecurityContext
|
||||
takes precedence for that container.
|
||||
takes precedence for that container. Note that this field cannot
|
||||
be set when spec.os.name is windows.
|
||||
format: int64
|
||||
type: integer
|
||||
seLinuxOptions:
|
||||
@@ -5224,6 +5352,7 @@ spec:
|
||||
SELinux context for each container. May also be set in SecurityContext. If
|
||||
set in both SecurityContext and PodSecurityContext, the value
|
||||
specified in SecurityContext takes precedence for that container.
|
||||
Note that this field cannot be set when spec.os.name is windows.
|
||||
properties:
|
||||
level:
|
||||
description: Level is SELinux level label that applies to
|
||||
@@ -5244,7 +5373,8 @@ spec:
|
||||
type: object
|
||||
seccompProfile:
|
||||
description: The seccomp options to use by the containers in this
|
||||
pod.
|
||||
pod. Note that this field cannot be set when spec.os.name is
|
||||
windows.
|
||||
properties:
|
||||
localhostProfile:
|
||||
description: localhostProfile indicates a profile defined
|
||||
@@ -5266,7 +5396,8 @@ spec:
|
||||
supplementalGroups:
|
||||
description: A list of groups applied to the first process run
|
||||
in each container, in addition to the container's primary GID. If
|
||||
unspecified, no groups will be added to any container.
|
||||
unspecified, no groups will be added to any container. Note
|
||||
that this field cannot be set when spec.os.name is windows.
|
||||
items:
|
||||
format: int64
|
||||
type: integer
|
||||
@@ -5274,7 +5405,8 @@ spec:
|
||||
sysctls:
|
||||
description: Sysctls hold a list of namespaced sysctls used for
|
||||
the pod. Pods with unsupported sysctls (by the container runtime)
|
||||
might fail to launch.
|
||||
might fail to launch. Note that this field cannot be set when
|
||||
spec.os.name is windows.
|
||||
items:
|
||||
description: Sysctl defines a kernel parameter to be set
|
||||
properties:
|
||||
@@ -5293,7 +5425,8 @@ spec:
|
||||
description: The Windows specific settings applied to all containers.
|
||||
If unspecified, the options within a container's SecurityContext
|
||||
will be used. If set in both SecurityContext and PodSecurityContext,
|
||||
the value specified in SecurityContext takes precedence.
|
||||
the value specified in SecurityContext takes precedence. Note
|
||||
that this field cannot be set when spec.os.name is linux.
|
||||
properties:
|
||||
gmsaCredentialSpec:
|
||||
description: GMSACredentialSpec is where the GMSA admission
|
||||
@@ -5589,7 +5722,11 @@ spec:
|
||||
type: object
|
||||
resources:
|
||||
description: 'Resources represents the minimum resources
|
||||
the volume should have. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#resources'
|
||||
the volume should have. If RecoverVolumeExpansionFailure
|
||||
feature is enabled users are allowed to specify
|
||||
resource requirements that are lower than previous
|
||||
value but must still be higher than capacity recorded
|
||||
in the status field of the claim. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#resources'
|
||||
properties:
|
||||
limits:
|
||||
additionalProperties:
|
||||
@@ -5804,7 +5941,11 @@ spec:
|
||||
type: object
|
||||
resources:
|
||||
description: 'Resources represents the minimum resources
|
||||
the volume should have. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#resources'
|
||||
the volume should have. If RecoverVolumeExpansionFailure
|
||||
feature is enabled users are allowed to specify resource
|
||||
requirements that are lower than previous value but
|
||||
must still be higher than capacity recorded in the status
|
||||
field of the claim. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#resources'
|
||||
properties:
|
||||
limits:
|
||||
additionalProperties:
|
||||
@@ -5900,6 +6041,27 @@ spec:
|
||||
items:
|
||||
type: string
|
||||
type: array
|
||||
allocatedResources:
|
||||
additionalProperties:
|
||||
anyOf:
|
||||
- type: integer
|
||||
- type: string
|
||||
pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
|
||||
x-kubernetes-int-or-string: true
|
||||
description: The storage resource within AllocatedResources
|
||||
tracks the capacity allocated to a PVC. It may be larger
|
||||
than the actual capacity when a volume expansion operation
|
||||
is requested. For storage quota, the larger value from
|
||||
allocatedResources and PVC.spec.resources is used. If
|
||||
allocatedResources is not set, PVC.spec.resources alone
|
||||
is used for quota calculation. If a volume expansion
|
||||
capacity request is lowered, allocatedResources is only
|
||||
lowered if there are no expansion operations in progress
|
||||
and if the actual volume capacity is equal or lower
|
||||
than the requested capacity. This is an alpha field
|
||||
and requires enabling RecoverVolumeExpansionFailure
|
||||
feature.
|
||||
type: object
|
||||
capacity:
|
||||
additionalProperties:
|
||||
anyOf:
|
||||
@@ -5952,6 +6114,13 @@ spec:
|
||||
phase:
|
||||
description: Phase represents the current phase of PersistentVolumeClaim.
|
||||
type: string
|
||||
resizeStatus:
|
||||
description: ResizeStatus stores status of resize operation.
|
||||
ResizeStatus is not set by default but when expansion
|
||||
is complete resizeStatus is set to empty string by resize
|
||||
controller or kubelet. This is an alpha field and requires
|
||||
enabling RecoverVolumeExpansionFailure feature.
|
||||
type: string
|
||||
type: object
|
||||
type: object
|
||||
type: object
|
||||
@@ -6389,7 +6558,7 @@ spec:
|
||||
tells the scheduler to schedule the pod in any location, but
|
||||
giving higher precedence to topologies that would help reduce
|
||||
the skew. A constraint is considered "Unsatisfiable" for
|
||||
an incoming pod if and only if every possible node assigment
|
||||
an incoming pod if and only if every possible node assignment
|
||||
for that pod would violate "MaxSkew" on some topology. For
|
||||
example, in a 3-zone cluster, MaxSkew is set to 1, and pods
|
||||
with the same labelSelector spread as 3/1/1: | zone1 | zone2
|
||||
@@ -6852,9 +7021,7 @@ spec:
|
||||
volumes if the CSI driver is meant to be used that way - see
|
||||
the documentation of the driver for more information. \n A
|
||||
pod can use both types of ephemeral volumes and persistent
|
||||
volumes at the same time. \n This is a beta feature and only
|
||||
available when the GenericEphemeralVolume feature gate is
|
||||
enabled."
|
||||
volumes at the same time."
|
||||
properties:
|
||||
volumeClaimTemplate:
|
||||
description: "Will be used to create a stand-alone PVC to
|
||||
@@ -6971,7 +7138,11 @@ spec:
|
||||
type: object
|
||||
resources:
|
||||
description: 'Resources represents the minimum resources
|
||||
the volume should have. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#resources'
|
||||
the volume should have. If RecoverVolumeExpansionFailure
|
||||
feature is enabled users are allowed to specify
|
||||
resource requirements that are lower than previous
|
||||
value but must still be higher than capacity recorded
|
||||
in the status field of the claim. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#resources'
|
||||
properties:
|
||||
limits:
|
||||
additionalProperties:
|
||||
|
||||
Reference in New Issue
Block a user