From 0af1b4c7060a101559f7d6f5a8fb1dc7f5d20506 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Sebastian=20Ho=C3=9F?= Date: Sun, 11 Feb 2024 10:27:17 +0100 Subject: [PATCH] add aws/karpenter-provider-aws MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Signed-off-by: Sebastian Hoß --- .reuse/dep5 | 4 + code-generator/src/catalog.rs | 9 + .../v1beta1/ec2nodeclasses.args | 1 + .../v1beta1/ec2nodeclasses.yaml | 377 ++++++++++++++ .../karpenter.sh/v1beta1/nodeclaims.args | 1 + .../karpenter.sh/v1beta1/nodeclaims.yaml | 365 ++++++++++++++ .../karpenter.sh/v1beta1/nodepools.args | 1 + .../karpenter.sh/v1beta1/nodepools.yaml | 414 ++++++++++++++++ kube-custom-resources-rs/Cargo.toml | 2 + .../src/karpenter_k8s_aws/mod.rs | 1 + .../v1beta1/ec2nodeclasses.rs | 459 ++++++++++++++++++ .../src/karpenter_k8s_aws/v1beta1/mod.rs | 1 + .../src/karpenter_sh/mod.rs | 1 + .../src/karpenter_sh/v1beta1/mod.rs | 2 + .../src/karpenter_sh/v1beta1/nodeclaims.rs | 250 ++++++++++ .../src/karpenter_sh/v1beta1/nodepools.rs | 319 ++++++++++++ kube-custom-resources-rs/src/lib.rs | 15 + 17 files changed, 2222 insertions(+) create mode 100644 crd-catalog/aws/karpenter-provider-aws/karpenter.k8s.aws/v1beta1/ec2nodeclasses.args create mode 100644 crd-catalog/aws/karpenter-provider-aws/karpenter.k8s.aws/v1beta1/ec2nodeclasses.yaml create mode 100644 crd-catalog/aws/karpenter-provider-aws/karpenter.sh/v1beta1/nodeclaims.args create mode 100644 crd-catalog/aws/karpenter-provider-aws/karpenter.sh/v1beta1/nodeclaims.yaml create mode 100644 crd-catalog/aws/karpenter-provider-aws/karpenter.sh/v1beta1/nodepools.args create mode 100644 crd-catalog/aws/karpenter-provider-aws/karpenter.sh/v1beta1/nodepools.yaml create mode 100644 kube-custom-resources-rs/src/karpenter_k8s_aws/mod.rs create mode 100644 kube-custom-resources-rs/src/karpenter_k8s_aws/v1beta1/ec2nodeclasses.rs create mode 100644 kube-custom-resources-rs/src/karpenter_k8s_aws/v1beta1/mod.rs create mode 100644 kube-custom-resources-rs/src/karpenter_sh/mod.rs create mode 100644 kube-custom-resources-rs/src/karpenter_sh/v1beta1/mod.rs create mode 100644 kube-custom-resources-rs/src/karpenter_sh/v1beta1/nodeclaims.rs create mode 100644 kube-custom-resources-rs/src/karpenter_sh/v1beta1/nodepools.rs diff --git a/.reuse/dep5 b/.reuse/dep5 index 87ee092b0..972753827 100644 --- a/.reuse/dep5 +++ b/.reuse/dep5 @@ -95,6 +95,10 @@ Files: crd-catalog/aws/aws-app-mesh-controller-for-k8/* Copyright: The aws/aws-app-mesh-controller-for-k8 Authors License: Apache-2.0 +Files: crd-catalog/aws/karpenter-provider-aws/* +Copyright: The aws/karpenter-provider-aws Authors +License: Apache-2.0 + Files: crd-catalog/aws/zone-aware-controllers-for-k8s/* Copyright: The aws/zone-aware-controllers-for-k8s Authors License: Apache-2.0 diff --git a/code-generator/src/catalog.rs b/code-generator/src/catalog.rs index 0ee7d76a8..0820e3b79 100644 --- a/code-generator/src/catalog.rs +++ b/code-generator/src/catalog.rs @@ -241,6 +241,15 @@ pub const CRD_V1_SOURCES: &'static [UpstreamSource] = &[ "https://github.com/aws/aws-app-mesh-controller-for-k8s/blob/master/config/crd/bases/appmesh.k8s.aws_virtualservices.yaml", ], }, + UpstreamSource { + project_name: "aws/karpenter-provider-aws", + license: APACHE_V2, + urls: &[ + "https://github.com/aws/karpenter-provider-aws/blob/main/pkg/apis/crds/karpenter.k8s.aws_ec2nodeclasses.yaml", + "https://github.com/aws/karpenter-provider-aws/blob/main/pkg/apis/crds/karpenter.sh_nodeclaims.yaml", + "https://github.com/aws/karpenter-provider-aws/blob/main/pkg/apis/crds/karpenter.sh_nodepools.yaml", + ], + }, UpstreamSource { project_name: "aws/zone-aware-controllers-for-k8s", license: APACHE_V2, diff --git a/crd-catalog/aws/karpenter-provider-aws/karpenter.k8s.aws/v1beta1/ec2nodeclasses.args b/crd-catalog/aws/karpenter-provider-aws/karpenter.k8s.aws/v1beta1/ec2nodeclasses.args new file mode 100644 index 000000000..7ab47510b --- /dev/null +++ b/crd-catalog/aws/karpenter-provider-aws/karpenter.k8s.aws/v1beta1/ec2nodeclasses.args @@ -0,0 +1 @@ +--derive=PartialEq diff --git a/crd-catalog/aws/karpenter-provider-aws/karpenter.k8s.aws/v1beta1/ec2nodeclasses.yaml b/crd-catalog/aws/karpenter-provider-aws/karpenter.k8s.aws/v1beta1/ec2nodeclasses.yaml new file mode 100644 index 000000000..51dbaa319 --- /dev/null +++ b/crd-catalog/aws/karpenter-provider-aws/karpenter.k8s.aws/v1beta1/ec2nodeclasses.yaml @@ -0,0 +1,377 @@ +apiVersion: "apiextensions.k8s.io/v1" +kind: "CustomResourceDefinition" +metadata: + annotations: + controller-gen.kubebuilder.io/version: "v0.14.0" + name: "ec2nodeclasses.karpenter.k8s.aws" +spec: + group: "karpenter.k8s.aws" + names: + categories: + - "karpenter" + kind: "EC2NodeClass" + listKind: "EC2NodeClassList" + plural: "ec2nodeclasses" + shortNames: + - "ec2nc" + - "ec2ncs" + singular: "ec2nodeclass" + scope: "Cluster" + versions: + - name: "v1beta1" + schema: + openAPIV3Schema: + description: "EC2NodeClass is the Schema for the EC2NodeClass API" + properties: + apiVersion: + description: "APIVersion defines the versioned schema of this representation of an object.\nServers should convert recognized schemas to the latest internal value, and\nmay reject unrecognized values.\nMore info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources" + type: "string" + kind: + description: "Kind is a string value representing the REST resource this object represents.\nServers may infer this from the endpoint the client submits requests to.\nCannot be updated.\nIn CamelCase.\nMore info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds" + type: "string" + metadata: + type: "object" + spec: + description: "EC2NodeClassSpec is the top level specification for the AWS Karpenter Provider.\nThis will contain configuration necessary to launch instances in AWS." + properties: + amiFamily: + description: "AMIFamily is the AMI family that instances use." + enum: + - "AL2" + - "Bottlerocket" + - "Ubuntu" + - "Custom" + - "Windows2019" + - "Windows2022" + type: "string" + amiSelectorTerms: + description: "AMISelectorTerms is a list of or ami selector terms. The terms are ORed." + items: + description: "AMISelectorTerm defines selection logic for an ami used by Karpenter to launch nodes.\nIf multiple fields are used for selection, the requirements are ANDed." + properties: + id: + description: "ID is the ami id in EC2" + pattern: "ami-[0-9a-z]+" + type: "string" + name: + description: "Name is the ami name in EC2.\nThis value is the name field, which is different from the name tag." + type: "string" + owner: + description: "Owner is the owner for the ami.\nYou can specify a combination of AWS account IDs, \"self\", \"amazon\", and \"aws-marketplace\"" + type: "string" + tags: + additionalProperties: + type: "string" + description: "Tags is a map of key/value tags used to select subnets\nSpecifying '*' for a value selects all values for a given tag key." + maxProperties: 20 + type: "object" + x-kubernetes-validations: + - message: "empty tag keys or values aren't supported" + rule: "self.all(k, k != '' && self[k] != '')" + type: "object" + maxItems: 30 + type: "array" + x-kubernetes-validations: + - message: "expected at least one, got none, ['tags', 'id', 'name']" + rule: "self.all(x, has(x.tags) || has(x.id) || has(x.name))" + - message: "'id' is mutually exclusive, cannot be set with a combination of other fields in amiSelectorTerms" + rule: "!self.all(x, has(x.id) && (has(x.tags) || has(x.name) || has(x.owner)))" + blockDeviceMappings: + description: "BlockDeviceMappings to be applied to provisioned nodes." + items: + properties: + deviceName: + description: "The device name (for example, /dev/sdh or xvdh)." + type: "string" + ebs: + description: "EBS contains parameters used to automatically set up EBS volumes when an instance is launched." + properties: + deleteOnTermination: + description: "DeleteOnTermination indicates whether the EBS volume is deleted on instance termination." + type: "boolean" + encrypted: + description: "Encrypted indicates whether the EBS volume is encrypted. Encrypted volumes can only\nbe attached to instances that support Amazon EBS encryption. If you are creating\na volume from a snapshot, you can't specify an encryption value." + type: "boolean" + iops: + description: "IOPS is the number of I/O operations per second (IOPS). For gp3, io1, and io2 volumes,\nthis represents the number of IOPS that are provisioned for the volume. For\ngp2 volumes, this represents the baseline performance of the volume and the\nrate at which the volume accumulates I/O credits for bursting.\n\n\nThe following are the supported values for each volume type:\n\n\n * gp3: 3,000-16,000 IOPS\n\n\n * io1: 100-64,000 IOPS\n\n\n * io2: 100-64,000 IOPS\n\n\nFor io1 and io2 volumes, we guarantee 64,000 IOPS only for Instances built\non the Nitro System (https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/instance-types.html#ec2-nitro-instances).\nOther instance families guarantee performance up to 32,000 IOPS.\n\n\nThis parameter is supported for io1, io2, and gp3 volumes only. This parameter\nis not supported for gp2, st1, sc1, or standard volumes." + format: "int64" + type: "integer" + kmsKeyID: + description: "KMSKeyID (ARN) of the symmetric Key Management Service (KMS) CMK used for encryption." + type: "string" + snapshotID: + description: "SnapshotID is the ID of an EBS snapshot" + type: "string" + throughput: + description: "Throughput to provision for a gp3 volume, with a maximum of 1,000 MiB/s.\nValid Range: Minimum value of 125. Maximum value of 1000." + format: "int64" + type: "integer" + volumeSize: + allOf: + - pattern: "^(\\+|-)?(([0-9]+(\\.[0-9]*)?)|(\\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\\+|-)?(([0-9]+(\\.[0-9]*)?)|(\\.[0-9]+))))?$" + - pattern: "^((?:[1-9][0-9]{0,3}|[1-4][0-9]{4}|[5][0-8][0-9]{3}|59000)Gi|(?:[1-9][0-9]{0,3}|[1-5][0-9]{4}|[6][0-3][0-9]{3}|64000)G|([1-9]||[1-5][0-7]|58)Ti|([1-9]||[1-5][0-9]|6[0-3]|64)T)$" + anyOf: + - type: "integer" + - type: "string" + description: "VolumeSize in `Gi`, `G`, `Ti`, or `T`. You must specify either a snapshot ID or\na volume size. The following are the supported volumes sizes for each volume\ntype:\n\n\n * gp2 and gp3: 1-16,384\n\n\n * io1 and io2: 4-16,384\n\n\n * st1 and sc1: 125-16,384\n\n\n * standard: 1-1,024" + x-kubernetes-int-or-string: true + volumeType: + description: "VolumeType of the block device.\nFor more information, see Amazon EBS volume types (https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/EBSVolumeTypes.html)\nin the Amazon Elastic Compute Cloud User Guide." + enum: + - "standard" + - "io1" + - "io2" + - "gp2" + - "sc1" + - "st1" + - "gp3" + type: "string" + type: "object" + x-kubernetes-validations: + - message: "snapshotID or volumeSize must be defined" + rule: "has(self.snapshotID) || has(self.volumeSize)" + rootVolume: + description: "RootVolume is a flag indicating if this device is mounted as kubelet root dir. You can\nconfigure at most one root volume in BlockDeviceMappings." + type: "boolean" + type: "object" + maxItems: 50 + type: "array" + x-kubernetes-validations: + - message: "must have only one blockDeviceMappings with rootVolume" + rule: "self.filter(x, has(x.rootVolume)?x.rootVolume==true:false).size() <= 1" + context: + description: "Context is a Reserved field in EC2 APIs\nhttps://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_CreateFleet.html" + type: "string" + detailedMonitoring: + description: "DetailedMonitoring controls if detailed monitoring is enabled for instances that are launched" + type: "boolean" + instanceProfile: + description: "InstanceProfile is the AWS entity that instances use.\nThis field is mutually exclusive from role.\nThe instance profile should already have a role assigned to it that Karpenter\n has PassRole permission on for instance launch using this instanceProfile to succeed." + type: "string" + x-kubernetes-validations: + - message: "instanceProfile cannot be empty" + rule: "self != ''" + instanceStorePolicy: + description: "InstanceStorePolicy specifies how to handle instance-store disks." + enum: + - "RAID0" + type: "string" + metadataOptions: + default: + httpEndpoint: "enabled" + httpProtocolIPv6: "disabled" + httpPutResponseHopLimit: 2 + httpTokens: "required" + description: "MetadataOptions for the generated launch template of provisioned nodes.\n\n\nThis specifies the exposure of the Instance Metadata Service to\nprovisioned EC2 nodes. For more information,\nsee Instance Metadata and User Data\n(https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-instance-metadata.html)\nin the Amazon Elastic Compute Cloud User Guide.\n\n\nRefer to recommended, security best practices\n(https://aws.github.io/aws-eks-best-practices/security/docs/iam/#restrict-access-to-the-instance-profile-assigned-to-the-worker-node)\nfor limiting exposure of Instance Metadata and User Data to pods.\nIf omitted, defaults to httpEndpoint enabled, with httpProtocolIPv6\ndisabled, with httpPutResponseLimit of 2, and with httpTokens\nrequired." + properties: + httpEndpoint: + default: "enabled" + description: "HTTPEndpoint enables or disables the HTTP metadata endpoint on provisioned\nnodes. If metadata options is non-nil, but this parameter is not specified,\nthe default state is \"enabled\".\n\n\nIf you specify a value of \"disabled\", instance metadata will not be accessible\non the node." + enum: + - "enabled" + - "disabled" + type: "string" + httpProtocolIPv6: + default: "disabled" + description: "HTTPProtocolIPv6 enables or disables the IPv6 endpoint for the instance metadata\nservice on provisioned nodes. If metadata options is non-nil, but this parameter\nis not specified, the default state is \"disabled\"." + enum: + - "enabled" + - "disabled" + type: "string" + httpPutResponseHopLimit: + default: 2 + description: "HTTPPutResponseHopLimit is the desired HTTP PUT response hop limit for\ninstance metadata requests. The larger the number, the further instance\nmetadata requests can travel. Possible values are integers from 1 to 64.\nIf metadata options is non-nil, but this parameter is not specified, the\ndefault value is 2." + format: "int64" + maximum: 64.0 + minimum: 1.0 + type: "integer" + httpTokens: + default: "required" + description: "HTTPTokens determines the state of token usage for instance metadata\nrequests. If metadata options is non-nil, but this parameter is not\nspecified, the default state is \"required\".\n\n\nIf the state is optional, one can choose to retrieve instance metadata with\nor without a signed token header on the request. If one retrieves the IAM\nrole credentials without a token, the version 1.0 role credentials are\nreturned. If one retrieves the IAM role credentials using a valid signed\ntoken, the version 2.0 role credentials are returned.\n\n\nIf the state is \"required\", one must send a signed token header with any\ninstance metadata retrieval requests. In this state, retrieving the IAM\nrole credentials always returns the version 2.0 credentials; the version\n1.0 credentials are not available." + enum: + - "required" + - "optional" + type: "string" + type: "object" + role: + description: "Role is the AWS identity that nodes use. This field is immutable.\nThis field is mutually exclusive from instanceProfile.\nMarking this field as immutable avoids concerns around terminating managed instance profiles from running instances.\nThis field may be made mutable in the future, assuming the correct garbage collection and drift handling is implemented\nfor the old instance profiles on an update." + type: "string" + x-kubernetes-validations: + - message: "role cannot be empty" + rule: "self != ''" + - message: "immutable field changed" + rule: "self == oldSelf" + securityGroupSelectorTerms: + description: "SecurityGroupSelectorTerms is a list of or security group selector terms. The terms are ORed." + items: + description: "SecurityGroupSelectorTerm defines selection logic for a security group used by Karpenter to launch nodes.\nIf multiple fields are used for selection, the requirements are ANDed." + properties: + id: + description: "ID is the security group id in EC2" + pattern: "sg-[0-9a-z]+" + type: "string" + name: + description: "Name is the security group name in EC2.\nThis value is the name field, which is different from the name tag." + type: "string" + tags: + additionalProperties: + type: "string" + description: "Tags is a map of key/value tags used to select subnets\nSpecifying '*' for a value selects all values for a given tag key." + maxProperties: 20 + type: "object" + x-kubernetes-validations: + - message: "empty tag keys or values aren't supported" + rule: "self.all(k, k != '' && self[k] != '')" + type: "object" + maxItems: 30 + type: "array" + x-kubernetes-validations: + - message: "securityGroupSelectorTerms cannot be empty" + rule: "self.size() != 0" + - message: "expected at least one, got none, ['tags', 'id', 'name']" + rule: "self.all(x, has(x.tags) || has(x.id) || has(x.name))" + - message: "'id' is mutually exclusive, cannot be set with a combination of other fields in securityGroupSelectorTerms" + rule: "!self.all(x, has(x.id) && (has(x.tags) || has(x.name)))" + - message: "'name' is mutually exclusive, cannot be set with a combination of other fields in securityGroupSelectorTerms" + rule: "!self.all(x, has(x.name) && (has(x.tags) || has(x.id)))" + subnetSelectorTerms: + description: "SubnetSelectorTerms is a list of or subnet selector terms. The terms are ORed." + items: + description: "SubnetSelectorTerm defines selection logic for a subnet used by Karpenter to launch nodes.\nIf multiple fields are used for selection, the requirements are ANDed." + properties: + id: + description: "ID is the subnet id in EC2" + pattern: "subnet-[0-9a-z]+" + type: "string" + tags: + additionalProperties: + type: "string" + description: "Tags is a map of key/value tags used to select subnets\nSpecifying '*' for a value selects all values for a given tag key." + maxProperties: 20 + type: "object" + x-kubernetes-validations: + - message: "empty tag keys or values aren't supported" + rule: "self.all(k, k != '' && self[k] != '')" + type: "object" + maxItems: 30 + type: "array" + x-kubernetes-validations: + - message: "subnetSelectorTerms cannot be empty" + rule: "self.size() != 0" + - message: "expected at least one, got none, ['tags', 'id']" + rule: "self.all(x, has(x.tags) || has(x.id))" + - message: "'id' is mutually exclusive, cannot be set with a combination of other fields in subnetSelectorTerms" + rule: "!self.all(x, has(x.id) && has(x.tags))" + tags: + additionalProperties: + type: "string" + description: "Tags to be applied on ec2 resources like instances and launch templates." + type: "object" + x-kubernetes-validations: + - message: "empty tag keys aren't supported" + rule: "self.all(k, k != '')" + - message: "tag contains a restricted tag matching kubernetes.io/cluster/" + rule: "self.all(k, !k.startsWith('kubernetes.io/cluster') )" + - message: "tag contains a restricted tag matching karpenter.sh/nodepool" + rule: "self.all(k, k != 'karpenter.sh/nodepool')" + - message: "tag contains a restricted tag matching karpenter.sh/managed-by" + rule: "self.all(k, k !='karpenter.sh/managed-by')" + - message: "tag contains a restricted tag matching karpenter.sh/nodeclaim" + rule: "self.all(k, k !='karpenter.sh/nodeclaim')" + - message: "tag contains a restricted tag matching karpenter.k8s.aws/ec2nodeclass" + rule: "self.all(k, k !='karpenter.k8s.aws/ec2nodeclass')" + userData: + description: "UserData to be applied to the provisioned nodes.\nIt must be in the appropriate format based on the AMIFamily in use. Karpenter will merge certain fields into\nthis UserData to ensure nodes are being provisioned with the correct configuration." + type: "string" + required: + - "amiFamily" + - "securityGroupSelectorTerms" + - "subnetSelectorTerms" + type: "object" + x-kubernetes-validations: + - message: "amiSelectorTerms is required when amiFamily == 'Custom'" + rule: "self.amiFamily == 'Custom' ? self.amiSelectorTerms.size() != 0 : true" + - message: "must specify exactly one of ['role', 'instanceProfile']" + rule: "(has(self.role) && !has(self.instanceProfile)) || (!has(self.role) && has(self.instanceProfile))" + - message: "changing from 'instanceProfile' to 'role' is not supported. You must delete and recreate this node class if you want to change this." + rule: "(has(oldSelf.role) && has(self.role)) || (has(oldSelf.instanceProfile) && has(self.instanceProfile))" + status: + description: "EC2NodeClassStatus contains the resolved state of the EC2NodeClass" + properties: + amis: + description: "AMI contains the current AMI values that are available to the\ncluster under the AMI selectors." + items: + description: "AMI contains resolved AMI selector values utilized for node launch" + properties: + id: + description: "ID of the AMI" + type: "string" + name: + description: "Name of the AMI" + type: "string" + requirements: + description: "Requirements of the AMI to be utilized on an instance type" + items: + description: "A node selector requirement is a selector that contains values, a key, and an operator\nthat relates the key and values." + properties: + key: + description: "The label key that the selector applies to." + type: "string" + operator: + description: "Represents a key's relationship to a set of values.\nValid operators are In, NotIn, Exists, DoesNotExist. Gt, and Lt." + type: "string" + values: + description: "An array of string values. If the operator is In or NotIn,\nthe values array must be non-empty. If the operator is Exists or DoesNotExist,\nthe values array must be empty. If the operator is Gt or Lt, the values\narray must have a single element, which will be interpreted as an integer.\nThis array is replaced during a strategic merge patch." + items: + type: "string" + type: "array" + required: + - "key" + - "operator" + type: "object" + type: "array" + required: + - "id" + - "requirements" + type: "object" + type: "array" + instanceProfile: + description: "InstanceProfile contains the resolved instance profile for the role" + type: "string" + securityGroups: + description: "SecurityGroups contains the current Security Groups values that are available to the\ncluster under the SecurityGroups selectors." + items: + description: "SecurityGroup contains resolved SecurityGroup selector values utilized for node launch" + properties: + id: + description: "ID of the security group" + type: "string" + name: + description: "Name of the security group" + type: "string" + required: + - "id" + type: "object" + type: "array" + subnets: + description: "Subnets contains the current Subnet values that are available to the\ncluster under the subnet selectors." + items: + description: "Subnet contains resolved Subnet selector values utilized for node launch" + properties: + id: + description: "ID of the subnet" + type: "string" + zone: + description: "The associated availability zone" + type: "string" + required: + - "id" + - "zone" + type: "object" + type: "array" + type: "object" + type: "object" + served: true + storage: true + subresources: + status: {} diff --git a/crd-catalog/aws/karpenter-provider-aws/karpenter.sh/v1beta1/nodeclaims.args b/crd-catalog/aws/karpenter-provider-aws/karpenter.sh/v1beta1/nodeclaims.args new file mode 100644 index 000000000..7ab47510b --- /dev/null +++ b/crd-catalog/aws/karpenter-provider-aws/karpenter.sh/v1beta1/nodeclaims.args @@ -0,0 +1 @@ +--derive=PartialEq diff --git a/crd-catalog/aws/karpenter-provider-aws/karpenter.sh/v1beta1/nodeclaims.yaml b/crd-catalog/aws/karpenter-provider-aws/karpenter.sh/v1beta1/nodeclaims.yaml new file mode 100644 index 000000000..3392b7402 --- /dev/null +++ b/crd-catalog/aws/karpenter-provider-aws/karpenter.sh/v1beta1/nodeclaims.yaml @@ -0,0 +1,365 @@ +apiVersion: "apiextensions.k8s.io/v1" +kind: "CustomResourceDefinition" +metadata: + annotations: + controller-gen.kubebuilder.io/version: "v0.14.0" + name: "nodeclaims.karpenter.sh" +spec: + group: "karpenter.sh" + names: + categories: + - "karpenter" + kind: "NodeClaim" + listKind: "NodeClaimList" + plural: "nodeclaims" + singular: "nodeclaim" + scope: "Cluster" + versions: + - additionalPrinterColumns: + - jsonPath: ".metadata.labels.node\\.kubernetes\\.io/instance-type" + name: "Type" + type: "string" + - jsonPath: ".metadata.labels.topology\\.kubernetes\\.io/zone" + name: "Zone" + type: "string" + - jsonPath: ".status.nodeName" + name: "Node" + type: "string" + - jsonPath: ".status.conditions[?(@.type==\"Ready\")].status" + name: "Ready" + type: "string" + - jsonPath: ".metadata.creationTimestamp" + name: "Age" + type: "date" + - jsonPath: ".metadata.labels.karpenter\\.sh/capacity-type" + name: "Capacity" + priority: 1 + type: "string" + - jsonPath: ".metadata.labels.karpenter\\.sh/nodepool" + name: "NodePool" + priority: 1 + type: "string" + - jsonPath: ".spec.nodeClassRef.name" + name: "NodeClass" + priority: 1 + type: "string" + name: "v1beta1" + schema: + openAPIV3Schema: + description: "NodeClaim is the Schema for the NodeClaims API" + properties: + apiVersion: + description: "APIVersion defines the versioned schema of this representation of an object.\nServers should convert recognized schemas to the latest internal value, and\nmay reject unrecognized values.\nMore info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources" + type: "string" + kind: + description: "Kind is a string value representing the REST resource this object represents.\nServers may infer this from the endpoint the client submits requests to.\nCannot be updated.\nIn CamelCase.\nMore info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds" + type: "string" + metadata: + type: "object" + spec: + description: "NodeClaimSpec describes the desired state of the NodeClaim" + properties: + kubelet: + description: "Kubelet defines args to be used when configuring kubelet on provisioned nodes.\nThey are a subset of the upstream types, recognizing not all options may be supported.\nWherever possible, the types and names should reflect the upstream kubelet types." + properties: + clusterDNS: + description: "clusterDNS is a list of IP addresses for the cluster DNS server.\nNote that not all providers may use all addresses." + items: + type: "string" + type: "array" + cpuCFSQuota: + description: "CPUCFSQuota enables CPU CFS quota enforcement for containers that specify CPU limits." + type: "boolean" + evictionHard: + additionalProperties: + pattern: "^((\\d{1,2}(\\.\\d{1,2})?|100(\\.0{1,2})?)%||(\\+|-)?(([0-9]+(\\.[0-9]*)?)|(\\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\\+|-)?(([0-9]+(\\.[0-9]*)?)|(\\.[0-9]+))))?)$" + type: "string" + description: "EvictionHard is the map of signal names to quantities that define hard eviction thresholds" + type: "object" + x-kubernetes-validations: + - message: "valid keys for evictionHard are ['memory.available','nodefs.available','nodefs.inodesFree','imagefs.available','imagefs.inodesFree','pid.available']" + rule: "self.all(x, x in ['memory.available','nodefs.available','nodefs.inodesFree','imagefs.available','imagefs.inodesFree','pid.available'])" + evictionMaxPodGracePeriod: + description: "EvictionMaxPodGracePeriod is the maximum allowed grace period (in seconds) to use when terminating pods in\nresponse to soft eviction thresholds being met." + format: "int32" + type: "integer" + evictionSoft: + additionalProperties: + pattern: "^((\\d{1,2}(\\.\\d{1,2})?|100(\\.0{1,2})?)%||(\\+|-)?(([0-9]+(\\.[0-9]*)?)|(\\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\\+|-)?(([0-9]+(\\.[0-9]*)?)|(\\.[0-9]+))))?)$" + type: "string" + description: "EvictionSoft is the map of signal names to quantities that define soft eviction thresholds" + type: "object" + x-kubernetes-validations: + - message: "valid keys for evictionSoft are ['memory.available','nodefs.available','nodefs.inodesFree','imagefs.available','imagefs.inodesFree','pid.available']" + rule: "self.all(x, x in ['memory.available','nodefs.available','nodefs.inodesFree','imagefs.available','imagefs.inodesFree','pid.available'])" + evictionSoftGracePeriod: + additionalProperties: + type: "string" + description: "EvictionSoftGracePeriod is the map of signal names to quantities that define grace periods for each eviction signal" + type: "object" + x-kubernetes-validations: + - message: "valid keys for evictionSoftGracePeriod are ['memory.available','nodefs.available','nodefs.inodesFree','imagefs.available','imagefs.inodesFree','pid.available']" + rule: "self.all(x, x in ['memory.available','nodefs.available','nodefs.inodesFree','imagefs.available','imagefs.inodesFree','pid.available'])" + imageGCHighThresholdPercent: + description: "ImageGCHighThresholdPercent is the percent of disk usage after which image\ngarbage collection is always run. The percent is calculated by dividing this\nfield value by 100, so this field must be between 0 and 100, inclusive.\nWhen specified, the value must be greater than ImageGCLowThresholdPercent." + format: "int32" + maximum: 100.0 + minimum: 0.0 + type: "integer" + imageGCLowThresholdPercent: + description: "ImageGCLowThresholdPercent is the percent of disk usage before which image\ngarbage collection is never run. Lowest disk usage to garbage collect to.\nThe percent is calculated by dividing this field value by 100,\nso the field value must be between 0 and 100, inclusive.\nWhen specified, the value must be less than imageGCHighThresholdPercent" + format: "int32" + maximum: 100.0 + minimum: 0.0 + type: "integer" + kubeReserved: + additionalProperties: + anyOf: + - type: "integer" + - type: "string" + pattern: "^(\\+|-)?(([0-9]+(\\.[0-9]*)?)|(\\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\\+|-)?(([0-9]+(\\.[0-9]*)?)|(\\.[0-9]+))))?$" + x-kubernetes-int-or-string: true + description: "KubeReserved contains resources reserved for Kubernetes system components." + type: "object" + x-kubernetes-validations: + - message: "valid keys for kubeReserved are ['cpu','memory','ephemeral-storage','pid']" + rule: "self.all(x, x=='cpu' || x=='memory' || x=='ephemeral-storage' || x=='pid')" + - message: "kubeReserved value cannot be a negative resource quantity" + rule: "self.all(x, !self[x].startsWith('-'))" + maxPods: + description: "MaxPods is an override for the maximum number of pods that can run on\na worker node instance." + format: "int32" + minimum: 0.0 + type: "integer" + podsPerCore: + description: "PodsPerCore is an override for the number of pods that can run on a worker node\ninstance based on the number of cpu cores. This value cannot exceed MaxPods, so, if\nMaxPods is a lower value, that value will be used." + format: "int32" + minimum: 0.0 + type: "integer" + systemReserved: + additionalProperties: + anyOf: + - type: "integer" + - type: "string" + pattern: "^(\\+|-)?(([0-9]+(\\.[0-9]*)?)|(\\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\\+|-)?(([0-9]+(\\.[0-9]*)?)|(\\.[0-9]+))))?$" + x-kubernetes-int-or-string: true + description: "SystemReserved contains resources reserved for OS system daemons and kernel memory." + type: "object" + x-kubernetes-validations: + - message: "valid keys for systemReserved are ['cpu','memory','ephemeral-storage','pid']" + rule: "self.all(x, x=='cpu' || x=='memory' || x=='ephemeral-storage' || x=='pid')" + - message: "systemReserved value cannot be a negative resource quantity" + rule: "self.all(x, !self[x].startsWith('-'))" + type: "object" + x-kubernetes-validations: + - message: "imageGCHighThresholdPercent must be greater than imageGCLowThresholdPercent" + rule: "has(self.imageGCHighThresholdPercent) && has(self.imageGCLowThresholdPercent) ? self.imageGCHighThresholdPercent > self.imageGCLowThresholdPercent : true" + - message: "evictionSoft OwnerKey does not have a matching evictionSoftGracePeriod" + rule: "has(self.evictionSoft) ? self.evictionSoft.all(e, (e in self.evictionSoftGracePeriod)):true" + - message: "evictionSoftGracePeriod OwnerKey does not have a matching evictionSoft" + rule: "has(self.evictionSoftGracePeriod) ? self.evictionSoftGracePeriod.all(e, (e in self.evictionSoft)):true" + nodeClassRef: + description: "NodeClassRef is a reference to an object that defines provider specific configuration" + properties: + apiVersion: + description: "API version of the referent" + type: "string" + kind: + description: "Kind of the referent; More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds\"" + type: "string" + name: + description: "Name of the referent; More info: http://kubernetes.io/docs/user-guide/identifiers#names" + type: "string" + required: + - "name" + type: "object" + requirements: + description: "Requirements are layered with GetLabels and applied to every node." + items: + description: "A node selector requirement is a selector that contains values, a key, and an operator\nthat relates the key and values." + properties: + key: + description: "The label key that the selector applies to." + maxLength: 316 + pattern: "^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*(\\/))?([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9]$" + type: "string" + x-kubernetes-validations: + - message: "label domain \"kubernetes.io\" is restricted" + rule: "self in [\"beta.kubernetes.io/instance-type\", \"failure-domain.beta.kubernetes.io/region\", \"beta.kubernetes.io/os\", \"beta.kubernetes.io/arch\", \"failure-domain.beta.kubernetes.io/zone\", \"topology.kubernetes.io/zone\", \"topology.kubernetes.io/region\", \"node.kubernetes.io/instance-type\", \"kubernetes.io/arch\", \"kubernetes.io/os\", \"node.kubernetes.io/windows-build\"] || self.find(\"^([^/]+)\").endsWith(\"node.kubernetes.io\") || self.find(\"^([^/]+)\").endsWith(\"node-restriction.kubernetes.io\") || !self.find(\"^([^/]+)\").endsWith(\"kubernetes.io\")" + - message: "label domain \"k8s.io\" is restricted" + rule: "self.find(\"^([^/]+)\").endsWith(\"kops.k8s.io\") || !self.find(\"^([^/]+)\").endsWith(\"k8s.io\")" + - message: "label domain \"karpenter.sh\" is restricted" + rule: "self in [\"karpenter.sh/capacity-type\", \"karpenter.sh/nodepool\"] || !self.find(\"^([^/]+)\").endsWith(\"karpenter.sh\")" + - message: "label \"kubernetes.io/hostname\" is restricted" + rule: "self != \"kubernetes.io/hostname\"" + - message: "label domain \"karpenter.k8s.aws\" is restricted" + rule: "self in [\"karpenter.k8s.aws/instance-encryption-in-transit-supported\", \"karpenter.k8s.aws/instance-category\", \"karpenter.k8s.aws/instance-hypervisor\", \"karpenter.k8s.aws/instance-family\", \"karpenter.k8s.aws/instance-generation\", \"karpenter.k8s.aws/instance-local-nvme\", \"karpenter.k8s.aws/instance-size\", \"karpenter.k8s.aws/instance-cpu\",\"karpenter.k8s.aws/instance-memory\", \"karpenter.k8s.aws/instance-network-bandwidth\", \"karpenter.k8s.aws/instance-gpu-name\", \"karpenter.k8s.aws/instance-gpu-manufacturer\", \"karpenter.k8s.aws/instance-gpu-count\", \"karpenter.k8s.aws/instance-gpu-memory\", \"karpenter.k8s.aws/instance-accelerator-name\", \"karpenter.k8s.aws/instance-accelerator-manufacturer\", \"karpenter.k8s.aws/instance-accelerator-count\"] || !self.find(\"^([^/]+)\").endsWith(\"karpenter.k8s.aws\")" + operator: + description: "Represents a key's relationship to a set of values.\nValid operators are In, NotIn, Exists, DoesNotExist. Gt, and Lt." + enum: + - "In" + - "NotIn" + - "Exists" + - "DoesNotExist" + - "Gt" + - "Lt" + type: "string" + values: + description: "An array of string values. If the operator is In or NotIn,\nthe values array must be non-empty. If the operator is Exists or DoesNotExist,\nthe values array must be empty. If the operator is Gt or Lt, the values\narray must have a single element, which will be interpreted as an integer.\nThis array is replaced during a strategic merge patch." + items: + type: "string" + maxLength: 63 + pattern: "^(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])?$" + type: "array" + required: + - "key" + - "operator" + type: "object" + maxItems: 30 + type: "array" + x-kubernetes-validations: + - message: "requirements with operator 'In' must have a value defined" + rule: "self.all(x, x.operator == 'In' ? x.values.size() != 0 : true)" + - message: "requirements operator 'Gt' or 'Lt' must have a single positive integer value" + rule: "self.all(x, (x.operator == 'Gt' || x.operator == 'Lt') ? (x.values.size() == 1 && int(x.values[0]) >= 0) : true)" + resources: + description: "Resources models the resource requirements for the NodeClaim to launch" + properties: + requests: + additionalProperties: + anyOf: + - type: "integer" + - type: "string" + pattern: "^(\\+|-)?(([0-9]+(\\.[0-9]*)?)|(\\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\\+|-)?(([0-9]+(\\.[0-9]*)?)|(\\.[0-9]+))))?$" + x-kubernetes-int-or-string: true + description: "Requests describes the minimum required resources for the NodeClaim to launch" + type: "object" + type: "object" + startupTaints: + description: "StartupTaints are taints that are applied to nodes upon startup which are expected to be removed automatically\nwithin a short period of time, typically by a DaemonSet that tolerates the taint. These are commonly used by\ndaemonsets to allow initialization and enforce startup ordering. StartupTaints are ignored for provisioning\npurposes in that pods are not required to tolerate a StartupTaint in order to have nodes provisioned for them." + items: + description: "The node this Taint is attached to has the \"effect\" on\nany pod that does not tolerate the Taint." + properties: + effect: + description: "Required. The effect of the taint on pods\nthat do not tolerate the taint.\nValid effects are NoSchedule, PreferNoSchedule and NoExecute." + enum: + - "NoSchedule" + - "PreferNoSchedule" + - "NoExecute" + type: "string" + key: + description: "Required. The taint key to be applied to a node." + minLength: 1 + pattern: "^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*(\\/))?([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9]$" + type: "string" + timeAdded: + description: "TimeAdded represents the time at which the taint was added.\nIt is only written for NoExecute taints." + format: "date-time" + type: "string" + value: + description: "The taint value corresponding to the taint key." + pattern: "^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*(\\/))?([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9]$" + type: "string" + required: + - "effect" + - "key" + type: "object" + type: "array" + taints: + description: "Taints will be applied to the NodeClaim's node." + items: + description: "The node this Taint is attached to has the \"effect\" on\nany pod that does not tolerate the Taint." + properties: + effect: + description: "Required. The effect of the taint on pods\nthat do not tolerate the taint.\nValid effects are NoSchedule, PreferNoSchedule and NoExecute." + enum: + - "NoSchedule" + - "PreferNoSchedule" + - "NoExecute" + type: "string" + key: + description: "Required. The taint key to be applied to a node." + minLength: 1 + pattern: "^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*(\\/))?([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9]$" + type: "string" + timeAdded: + description: "TimeAdded represents the time at which the taint was added.\nIt is only written for NoExecute taints." + format: "date-time" + type: "string" + value: + description: "The taint value corresponding to the taint key." + pattern: "^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*(\\/))?([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9]$" + type: "string" + required: + - "effect" + - "key" + type: "object" + type: "array" + required: + - "nodeClassRef" + - "requirements" + type: "object" + status: + description: "NodeClaimStatus defines the observed state of NodeClaim" + properties: + allocatable: + additionalProperties: + anyOf: + - type: "integer" + - type: "string" + pattern: "^(\\+|-)?(([0-9]+(\\.[0-9]*)?)|(\\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\\+|-)?(([0-9]+(\\.[0-9]*)?)|(\\.[0-9]+))))?$" + x-kubernetes-int-or-string: true + description: "Allocatable is the estimated allocatable capacity of the node" + type: "object" + capacity: + additionalProperties: + anyOf: + - type: "integer" + - type: "string" + pattern: "^(\\+|-)?(([0-9]+(\\.[0-9]*)?)|(\\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\\+|-)?(([0-9]+(\\.[0-9]*)?)|(\\.[0-9]+))))?$" + x-kubernetes-int-or-string: true + description: "Capacity is the estimated full capacity of the node" + type: "object" + conditions: + description: "Conditions contains signals for health and readiness" + items: + description: "Condition defines a readiness condition for a Knative resource.\nSee: https://github.com/kubernetes/community/blob/master/contributors/devel/sig-architecture/api-conventions.md#typical-status-properties" + properties: + lastTransitionTime: + description: "LastTransitionTime is the last time the condition transitioned from one status to another.\nWe use VolatileTime in place of metav1.Time to exclude this from creating equality.Semantic\ndifferences (all other things held constant)." + type: "string" + message: + description: "A human readable message indicating details about the transition." + type: "string" + reason: + description: "The reason for the condition's last transition." + type: "string" + severity: + description: "Severity with which to treat failures of this type of condition.\nWhen this is not specified, it defaults to Error." + type: "string" + status: + description: "Status of the condition, one of True, False, Unknown." + type: "string" + type: + description: "Type of condition." + type: "string" + required: + - "status" + - "type" + type: "object" + type: "array" + imageID: + description: "ImageID is an identifier for the image that runs on the node" + type: "string" + nodeName: + description: "NodeName is the name of the corresponding node object" + type: "string" + providerID: + description: "ProviderID of the corresponding node object" + type: "string" + type: "object" + type: "object" + served: true + storage: true + subresources: + status: {} diff --git a/crd-catalog/aws/karpenter-provider-aws/karpenter.sh/v1beta1/nodepools.args b/crd-catalog/aws/karpenter-provider-aws/karpenter.sh/v1beta1/nodepools.args new file mode 100644 index 000000000..7ab47510b --- /dev/null +++ b/crd-catalog/aws/karpenter-provider-aws/karpenter.sh/v1beta1/nodepools.args @@ -0,0 +1 @@ +--derive=PartialEq diff --git a/crd-catalog/aws/karpenter-provider-aws/karpenter.sh/v1beta1/nodepools.yaml b/crd-catalog/aws/karpenter-provider-aws/karpenter.sh/v1beta1/nodepools.yaml new file mode 100644 index 000000000..586f396a2 --- /dev/null +++ b/crd-catalog/aws/karpenter-provider-aws/karpenter.sh/v1beta1/nodepools.yaml @@ -0,0 +1,414 @@ +apiVersion: "apiextensions.k8s.io/v1" +kind: "CustomResourceDefinition" +metadata: + annotations: + controller-gen.kubebuilder.io/version: "v0.14.0" + name: "nodepools.karpenter.sh" +spec: + group: "karpenter.sh" + names: + categories: + - "karpenter" + kind: "NodePool" + listKind: "NodePoolList" + plural: "nodepools" + singular: "nodepool" + scope: "Cluster" + versions: + - additionalPrinterColumns: + - jsonPath: ".spec.template.spec.nodeClassRef.name" + name: "NodeClass" + type: "string" + - jsonPath: ".spec.weight" + name: "Weight" + priority: 1 + type: "string" + name: "v1beta1" + schema: + openAPIV3Schema: + description: "NodePool is the Schema for the NodePools API" + properties: + apiVersion: + description: "APIVersion defines the versioned schema of this representation of an object.\nServers should convert recognized schemas to the latest internal value, and\nmay reject unrecognized values.\nMore info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources" + type: "string" + kind: + description: "Kind is a string value representing the REST resource this object represents.\nServers may infer this from the endpoint the client submits requests to.\nCannot be updated.\nIn CamelCase.\nMore info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds" + type: "string" + metadata: + type: "object" + spec: + description: "NodePoolSpec is the top level nodepool specification. Nodepools\nlaunch nodes in response to pods that are unschedulable. A single nodepool\nis capable of managing a diverse set of nodes. Node properties are determined\nfrom a combination of nodepool and pod scheduling constraints." + properties: + disruption: + default: + consolidationPolicy: "WhenUnderutilized" + expireAfter: "720h" + description: "Disruption contains the parameters that relate to Karpenter's disruption logic" + properties: + budgets: + default: + - nodes: "10%" + description: "Budgets is a list of Budgets.\nIf there are multiple active budgets, Karpenter uses\nthe most restrictive value. If left undefined,\nthis will default to one budget with a value to 10%." + items: + description: "Budget defines when Karpenter will restrict the\nnumber of Node Claims that can be terminating simultaneously." + properties: + duration: + description: "Duration determines how long a Budget is active since each Schedule hit.\nOnly minutes and hours are accepted, as cron does not work in seconds.\nIf omitted, the budget is always active.\nThis is required if Schedule is set.\nThis regex has an optional 0s at the end since the duration.String() always adds\na 0s at the end." + pattern: "^([0-9]+(m|h)+(0s)?)$" + type: "string" + nodes: + default: "10%" + description: "Nodes dictates the maximum number of NodeClaims owned by this NodePool\nthat can be terminating at once. This is calculated by counting nodes that\nhave a deletion timestamp set, or are actively being deleted by Karpenter.\nThis field is required when specifying a budget.\nThis cannot be of type intstr.IntOrString since kubebuilder doesn't support pattern\nchecking for int nodes for IntOrString nodes.\nRef: https://github.com/kubernetes-sigs/controller-tools/blob/55efe4be40394a288216dab63156b0a64fb82929/pkg/crd/markers/validation.go#L379-L388" + pattern: "^((100|[0-9]{1,2})%|[0-9]+)$" + type: "string" + schedule: + description: "Schedule specifies when a budget begins being active, following\nthe upstream cronjob syntax. If omitted, the budget is always active.\nTimezones are not supported.\nThis field is required if Duration is set." + pattern: "^(@(annually|yearly|monthly|weekly|daily|midnight|hourly))|((.+)\\s(.+)\\s(.+)\\s(.+)\\s(.+))$" + type: "string" + required: + - "nodes" + type: "object" + maxItems: 50 + type: "array" + x-kubernetes-validations: + - message: "'schedule' must be set with 'duration'" + rule: "!self.all(x, (has(x.schedule) && !has(x.duration)) || (!has(x.schedule) && has(x.duration)))" + consolidateAfter: + description: "ConsolidateAfter is the duration the controller will wait\nbefore attempting to terminate nodes that are underutilized.\nRefer to ConsolidationPolicy for how underutilization is considered." + pattern: "^(([0-9]+(s|m|h))+)|(Never)$" + type: "string" + consolidationPolicy: + default: "WhenUnderutilized" + description: "ConsolidationPolicy describes which nodes Karpenter can disrupt through its consolidation\nalgorithm. This policy defaults to \"WhenUnderutilized\" if not specified" + enum: + - "WhenEmpty" + - "WhenUnderutilized" + type: "string" + expireAfter: + default: "720h" + description: "ExpireAfter is the duration the controller will wait\nbefore terminating a node, measured from when the node is created. This\nis useful to implement features like eventually consistent node upgrade,\nmemory leak protection, and disruption testing." + pattern: "^(([0-9]+(s|m|h))+)|(Never)$" + type: "string" + type: "object" + x-kubernetes-validations: + - message: "consolidateAfter cannot be combined with consolidationPolicy=WhenUnderutilized" + rule: "has(self.consolidateAfter) ? self.consolidationPolicy != 'WhenUnderutilized' || self.consolidateAfter == 'Never' : true" + - message: "consolidateAfter must be specified with consolidationPolicy=WhenEmpty" + rule: "self.consolidationPolicy == 'WhenEmpty' ? has(self.consolidateAfter) : true" + limits: + additionalProperties: + anyOf: + - type: "integer" + - type: "string" + pattern: "^(\\+|-)?(([0-9]+(\\.[0-9]*)?)|(\\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\\+|-)?(([0-9]+(\\.[0-9]*)?)|(\\.[0-9]+))))?$" + x-kubernetes-int-or-string: true + description: "Limits define a set of bounds for provisioning capacity." + type: "object" + template: + description: "Template contains the template of possibilities for the provisioning logic to launch a NodeClaim with.\nNodeClaims launched from this NodePool will often be further constrained than the template specifies." + properties: + metadata: + properties: + annotations: + additionalProperties: + type: "string" + description: "Annotations is an unstructured key value map stored with a resource that may be\nset by external tools to store and retrieve arbitrary metadata. They are not\nqueryable and should be preserved when modifying objects.\nMore info: https://kubernetes.io/docs/concepts/overview/working-with-objects/annotations" + type: "object" + labels: + additionalProperties: + maxLength: 63 + pattern: "^(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])?$" + type: "string" + description: "Map of string keys and values that can be used to organize and categorize\n(scope and select) objects. May match selectors of replication controllers\nand services.\nMore info: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels" + maxProperties: 100 + type: "object" + x-kubernetes-validations: + - message: "label domain \"kubernetes.io\" is restricted" + rule: "self.all(x, x in [\"beta.kubernetes.io/instance-type\", \"failure-domain.beta.kubernetes.io/region\", \"beta.kubernetes.io/os\", \"beta.kubernetes.io/arch\", \"failure-domain.beta.kubernetes.io/zone\", \"topology.kubernetes.io/zone\", \"topology.kubernetes.io/region\", \"kubernetes.io/arch\", \"kubernetes.io/os\", \"node.kubernetes.io/windows-build\"] || x.find(\"^([^/]+)\").endsWith(\"node.kubernetes.io\") || x.find(\"^([^/]+)\").endsWith(\"node-restriction.kubernetes.io\") || !x.find(\"^([^/]+)\").endsWith(\"kubernetes.io\"))" + - message: "label domain \"k8s.io\" is restricted" + rule: "self.all(x, x.find(\"^([^/]+)\").endsWith(\"kops.k8s.io\") || !x.find(\"^([^/]+)\").endsWith(\"k8s.io\"))" + - message: "label domain \"karpenter.sh\" is restricted" + rule: "self.all(x, x in [\"karpenter.sh/capacity-type\", \"karpenter.sh/nodepool\"] || !x.find(\"^([^/]+)\").endsWith(\"karpenter.sh\"))" + - message: "label \"karpenter.sh/nodepool\" is restricted" + rule: "self.all(x, x != \"karpenter.sh/nodepool\")" + - message: "label \"kubernetes.io/hostname\" is restricted" + rule: "self.all(x, x != \"kubernetes.io/hostname\")" + - message: "label domain \"karpenter.k8s.aws\" is restricted" + rule: "self.all(x, x in [\"karpenter.k8s.aws/instance-encryption-in-transit-supported\", \"karpenter.k8s.aws/instance-category\", \"karpenter.k8s.aws/instance-hypervisor\", \"karpenter.k8s.aws/instance-family\", \"karpenter.k8s.aws/instance-generation\", \"karpenter.k8s.aws/instance-local-nvme\", \"karpenter.k8s.aws/instance-size\", \"karpenter.k8s.aws/instance-cpu\",\"karpenter.k8s.aws/instance-memory\", \"karpenter.k8s.aws/instance-network-bandwidth\", \"karpenter.k8s.aws/instance-gpu-name\", \"karpenter.k8s.aws/instance-gpu-manufacturer\", \"karpenter.k8s.aws/instance-gpu-count\", \"karpenter.k8s.aws/instance-gpu-memory\", \"karpenter.k8s.aws/instance-accelerator-name\", \"karpenter.k8s.aws/instance-accelerator-manufacturer\", \"karpenter.k8s.aws/instance-accelerator-count\"] || !x.find(\"^([^/]+)\").endsWith(\"karpenter.k8s.aws\"))" + type: "object" + spec: + description: "NodeClaimSpec describes the desired state of the NodeClaim" + properties: + kubelet: + description: "Kubelet defines args to be used when configuring kubelet on provisioned nodes.\nThey are a subset of the upstream types, recognizing not all options may be supported.\nWherever possible, the types and names should reflect the upstream kubelet types." + properties: + clusterDNS: + description: "clusterDNS is a list of IP addresses for the cluster DNS server.\nNote that not all providers may use all addresses." + items: + type: "string" + type: "array" + cpuCFSQuota: + description: "CPUCFSQuota enables CPU CFS quota enforcement for containers that specify CPU limits." + type: "boolean" + evictionHard: + additionalProperties: + pattern: "^((\\d{1,2}(\\.\\d{1,2})?|100(\\.0{1,2})?)%||(\\+|-)?(([0-9]+(\\.[0-9]*)?)|(\\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\\+|-)?(([0-9]+(\\.[0-9]*)?)|(\\.[0-9]+))))?)$" + type: "string" + description: "EvictionHard is the map of signal names to quantities that define hard eviction thresholds" + type: "object" + x-kubernetes-validations: + - message: "valid keys for evictionHard are ['memory.available','nodefs.available','nodefs.inodesFree','imagefs.available','imagefs.inodesFree','pid.available']" + rule: "self.all(x, x in ['memory.available','nodefs.available','nodefs.inodesFree','imagefs.available','imagefs.inodesFree','pid.available'])" + evictionMaxPodGracePeriod: + description: "EvictionMaxPodGracePeriod is the maximum allowed grace period (in seconds) to use when terminating pods in\nresponse to soft eviction thresholds being met." + format: "int32" + type: "integer" + evictionSoft: + additionalProperties: + pattern: "^((\\d{1,2}(\\.\\d{1,2})?|100(\\.0{1,2})?)%||(\\+|-)?(([0-9]+(\\.[0-9]*)?)|(\\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\\+|-)?(([0-9]+(\\.[0-9]*)?)|(\\.[0-9]+))))?)$" + type: "string" + description: "EvictionSoft is the map of signal names to quantities that define soft eviction thresholds" + type: "object" + x-kubernetes-validations: + - message: "valid keys for evictionSoft are ['memory.available','nodefs.available','nodefs.inodesFree','imagefs.available','imagefs.inodesFree','pid.available']" + rule: "self.all(x, x in ['memory.available','nodefs.available','nodefs.inodesFree','imagefs.available','imagefs.inodesFree','pid.available'])" + evictionSoftGracePeriod: + additionalProperties: + type: "string" + description: "EvictionSoftGracePeriod is the map of signal names to quantities that define grace periods for each eviction signal" + type: "object" + x-kubernetes-validations: + - message: "valid keys for evictionSoftGracePeriod are ['memory.available','nodefs.available','nodefs.inodesFree','imagefs.available','imagefs.inodesFree','pid.available']" + rule: "self.all(x, x in ['memory.available','nodefs.available','nodefs.inodesFree','imagefs.available','imagefs.inodesFree','pid.available'])" + imageGCHighThresholdPercent: + description: "ImageGCHighThresholdPercent is the percent of disk usage after which image\ngarbage collection is always run. The percent is calculated by dividing this\nfield value by 100, so this field must be between 0 and 100, inclusive.\nWhen specified, the value must be greater than ImageGCLowThresholdPercent." + format: "int32" + maximum: 100.0 + minimum: 0.0 + type: "integer" + imageGCLowThresholdPercent: + description: "ImageGCLowThresholdPercent is the percent of disk usage before which image\ngarbage collection is never run. Lowest disk usage to garbage collect to.\nThe percent is calculated by dividing this field value by 100,\nso the field value must be between 0 and 100, inclusive.\nWhen specified, the value must be less than imageGCHighThresholdPercent" + format: "int32" + maximum: 100.0 + minimum: 0.0 + type: "integer" + kubeReserved: + additionalProperties: + anyOf: + - type: "integer" + - type: "string" + pattern: "^(\\+|-)?(([0-9]+(\\.[0-9]*)?)|(\\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\\+|-)?(([0-9]+(\\.[0-9]*)?)|(\\.[0-9]+))))?$" + x-kubernetes-int-or-string: true + description: "KubeReserved contains resources reserved for Kubernetes system components." + type: "object" + x-kubernetes-validations: + - message: "valid keys for kubeReserved are ['cpu','memory','ephemeral-storage','pid']" + rule: "self.all(x, x=='cpu' || x=='memory' || x=='ephemeral-storage' || x=='pid')" + - message: "kubeReserved value cannot be a negative resource quantity" + rule: "self.all(x, !self[x].startsWith('-'))" + maxPods: + description: "MaxPods is an override for the maximum number of pods that can run on\na worker node instance." + format: "int32" + minimum: 0.0 + type: "integer" + podsPerCore: + description: "PodsPerCore is an override for the number of pods that can run on a worker node\ninstance based on the number of cpu cores. This value cannot exceed MaxPods, so, if\nMaxPods is a lower value, that value will be used." + format: "int32" + minimum: 0.0 + type: "integer" + systemReserved: + additionalProperties: + anyOf: + - type: "integer" + - type: "string" + pattern: "^(\\+|-)?(([0-9]+(\\.[0-9]*)?)|(\\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\\+|-)?(([0-9]+(\\.[0-9]*)?)|(\\.[0-9]+))))?$" + x-kubernetes-int-or-string: true + description: "SystemReserved contains resources reserved for OS system daemons and kernel memory." + type: "object" + x-kubernetes-validations: + - message: "valid keys for systemReserved are ['cpu','memory','ephemeral-storage','pid']" + rule: "self.all(x, x=='cpu' || x=='memory' || x=='ephemeral-storage' || x=='pid')" + - message: "systemReserved value cannot be a negative resource quantity" + rule: "self.all(x, !self[x].startsWith('-'))" + type: "object" + x-kubernetes-validations: + - message: "imageGCHighThresholdPercent must be greater than imageGCLowThresholdPercent" + rule: "has(self.imageGCHighThresholdPercent) && has(self.imageGCLowThresholdPercent) ? self.imageGCHighThresholdPercent > self.imageGCLowThresholdPercent : true" + - message: "evictionSoft OwnerKey does not have a matching evictionSoftGracePeriod" + rule: "has(self.evictionSoft) ? self.evictionSoft.all(e, (e in self.evictionSoftGracePeriod)):true" + - message: "evictionSoftGracePeriod OwnerKey does not have a matching evictionSoft" + rule: "has(self.evictionSoftGracePeriod) ? self.evictionSoftGracePeriod.all(e, (e in self.evictionSoft)):true" + nodeClassRef: + description: "NodeClassRef is a reference to an object that defines provider specific configuration" + properties: + apiVersion: + description: "API version of the referent" + type: "string" + kind: + description: "Kind of the referent; More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds\"" + type: "string" + name: + description: "Name of the referent; More info: http://kubernetes.io/docs/user-guide/identifiers#names" + type: "string" + required: + - "name" + type: "object" + requirements: + description: "Requirements are layered with GetLabels and applied to every node." + items: + description: "A node selector requirement is a selector that contains values, a key, and an operator\nthat relates the key and values." + properties: + key: + description: "The label key that the selector applies to." + maxLength: 316 + pattern: "^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*(\\/))?([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9]$" + type: "string" + x-kubernetes-validations: + - message: "label domain \"kubernetes.io\" is restricted" + rule: "self in [\"beta.kubernetes.io/instance-type\", \"failure-domain.beta.kubernetes.io/region\", \"beta.kubernetes.io/os\", \"beta.kubernetes.io/arch\", \"failure-domain.beta.kubernetes.io/zone\", \"topology.kubernetes.io/zone\", \"topology.kubernetes.io/region\", \"node.kubernetes.io/instance-type\", \"kubernetes.io/arch\", \"kubernetes.io/os\", \"node.kubernetes.io/windows-build\"] || self.find(\"^([^/]+)\").endsWith(\"node.kubernetes.io\") || self.find(\"^([^/]+)\").endsWith(\"node-restriction.kubernetes.io\") || !self.find(\"^([^/]+)\").endsWith(\"kubernetes.io\")" + - message: "label domain \"k8s.io\" is restricted" + rule: "self.find(\"^([^/]+)\").endsWith(\"kops.k8s.io\") || !self.find(\"^([^/]+)\").endsWith(\"k8s.io\")" + - message: "label domain \"karpenter.sh\" is restricted" + rule: "self in [\"karpenter.sh/capacity-type\", \"karpenter.sh/nodepool\"] || !self.find(\"^([^/]+)\").endsWith(\"karpenter.sh\")" + - message: "label \"karpenter.sh/nodepool\" is restricted" + rule: "self != \"karpenter.sh/nodepool\"" + - message: "label \"kubernetes.io/hostname\" is restricted" + rule: "self != \"kubernetes.io/hostname\"" + - message: "label domain \"karpenter.k8s.aws\" is restricted" + rule: "self in [\"karpenter.k8s.aws/instance-encryption-in-transit-supported\", \"karpenter.k8s.aws/instance-category\", \"karpenter.k8s.aws/instance-hypervisor\", \"karpenter.k8s.aws/instance-family\", \"karpenter.k8s.aws/instance-generation\", \"karpenter.k8s.aws/instance-local-nvme\", \"karpenter.k8s.aws/instance-size\", \"karpenter.k8s.aws/instance-cpu\",\"karpenter.k8s.aws/instance-memory\", \"karpenter.k8s.aws/instance-network-bandwidth\", \"karpenter.k8s.aws/instance-gpu-name\", \"karpenter.k8s.aws/instance-gpu-manufacturer\", \"karpenter.k8s.aws/instance-gpu-count\", \"karpenter.k8s.aws/instance-gpu-memory\", \"karpenter.k8s.aws/instance-accelerator-name\", \"karpenter.k8s.aws/instance-accelerator-manufacturer\", \"karpenter.k8s.aws/instance-accelerator-count\"] || !self.find(\"^([^/]+)\").endsWith(\"karpenter.k8s.aws\")" + operator: + description: "Represents a key's relationship to a set of values.\nValid operators are In, NotIn, Exists, DoesNotExist. Gt, and Lt." + enum: + - "In" + - "NotIn" + - "Exists" + - "DoesNotExist" + - "Gt" + - "Lt" + type: "string" + values: + description: "An array of string values. If the operator is In or NotIn,\nthe values array must be non-empty. If the operator is Exists or DoesNotExist,\nthe values array must be empty. If the operator is Gt or Lt, the values\narray must have a single element, which will be interpreted as an integer.\nThis array is replaced during a strategic merge patch." + items: + type: "string" + maxLength: 63 + pattern: "^(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])?$" + type: "array" + required: + - "key" + - "operator" + type: "object" + maxItems: 30 + type: "array" + x-kubernetes-validations: + - message: "requirements with operator 'In' must have a value defined" + rule: "self.all(x, x.operator == 'In' ? x.values.size() != 0 : true)" + - message: "requirements operator 'Gt' or 'Lt' must have a single positive integer value" + rule: "self.all(x, (x.operator == 'Gt' || x.operator == 'Lt') ? (x.values.size() == 1 && int(x.values[0]) >= 0) : true)" + resources: + description: "Resources models the resource requirements for the NodeClaim to launch" + maxProperties: 0 + properties: + requests: + additionalProperties: + anyOf: + - type: "integer" + - type: "string" + pattern: "^(\\+|-)?(([0-9]+(\\.[0-9]*)?)|(\\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\\+|-)?(([0-9]+(\\.[0-9]*)?)|(\\.[0-9]+))))?$" + x-kubernetes-int-or-string: true + description: "Requests describes the minimum required resources for the NodeClaim to launch" + type: "object" + type: "object" + startupTaints: + description: "StartupTaints are taints that are applied to nodes upon startup which are expected to be removed automatically\nwithin a short period of time, typically by a DaemonSet that tolerates the taint. These are commonly used by\ndaemonsets to allow initialization and enforce startup ordering. StartupTaints are ignored for provisioning\npurposes in that pods are not required to tolerate a StartupTaint in order to have nodes provisioned for them." + items: + description: "The node this Taint is attached to has the \"effect\" on\nany pod that does not tolerate the Taint." + properties: + effect: + description: "Required. The effect of the taint on pods\nthat do not tolerate the taint.\nValid effects are NoSchedule, PreferNoSchedule and NoExecute." + enum: + - "NoSchedule" + - "PreferNoSchedule" + - "NoExecute" + type: "string" + key: + description: "Required. The taint key to be applied to a node." + minLength: 1 + pattern: "^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*(\\/))?([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9]$" + type: "string" + timeAdded: + description: "TimeAdded represents the time at which the taint was added.\nIt is only written for NoExecute taints." + format: "date-time" + type: "string" + value: + description: "The taint value corresponding to the taint key." + pattern: "^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*(\\/))?([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9]$" + type: "string" + required: + - "effect" + - "key" + type: "object" + type: "array" + taints: + description: "Taints will be applied to the NodeClaim's node." + items: + description: "The node this Taint is attached to has the \"effect\" on\nany pod that does not tolerate the Taint." + properties: + effect: + description: "Required. The effect of the taint on pods\nthat do not tolerate the taint.\nValid effects are NoSchedule, PreferNoSchedule and NoExecute." + enum: + - "NoSchedule" + - "PreferNoSchedule" + - "NoExecute" + type: "string" + key: + description: "Required. The taint key to be applied to a node." + minLength: 1 + pattern: "^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*(\\/))?([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9]$" + type: "string" + timeAdded: + description: "TimeAdded represents the time at which the taint was added.\nIt is only written for NoExecute taints." + format: "date-time" + type: "string" + value: + description: "The taint value corresponding to the taint key." + pattern: "^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*(\\/))?([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9]$" + type: "string" + required: + - "effect" + - "key" + type: "object" + type: "array" + required: + - "nodeClassRef" + - "requirements" + type: "object" + required: + - "spec" + type: "object" + weight: + description: "Weight is the priority given to the nodepool during scheduling. A higher\nnumerical weight indicates that this nodepool will be ordered\nahead of other nodepools with lower weights. A nodepool with no weight\nwill be treated as if it is a nodepool with a weight of 0." + format: "int32" + maximum: 100.0 + minimum: 1.0 + type: "integer" + required: + - "template" + type: "object" + status: + description: "NodePoolStatus defines the observed state of NodePool" + properties: + resources: + additionalProperties: + anyOf: + - type: "integer" + - type: "string" + pattern: "^(\\+|-)?(([0-9]+(\\.[0-9]*)?)|(\\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\\+|-)?(([0-9]+(\\.[0-9]*)?)|(\\.[0-9]+))))?$" + x-kubernetes-int-or-string: true + description: "Resources is the list of resources that have been provisioned." + type: "object" + type: "object" + type: "object" + served: true + storage: true + subresources: + status: {} diff --git a/kube-custom-resources-rs/Cargo.toml b/kube-custom-resources-rs/Cargo.toml index d60b8adc6..1a41eb830 100644 --- a/kube-custom-resources-rs/Cargo.toml +++ b/kube-custom-resources-rs/Cargo.toml @@ -167,6 +167,8 @@ k8s_otterize_com = [] k8up_io = [] kafka_strimzi_io = [] kamaji_clastix_io = [] +karpenter_k8s_aws = [] +karpenter_sh = [] keda_sh = [] keycloak_k8s_reddec_net = [] keycloak_org = [] diff --git a/kube-custom-resources-rs/src/karpenter_k8s_aws/mod.rs b/kube-custom-resources-rs/src/karpenter_k8s_aws/mod.rs new file mode 100644 index 000000000..9f64fc82d --- /dev/null +++ b/kube-custom-resources-rs/src/karpenter_k8s_aws/mod.rs @@ -0,0 +1 @@ +pub mod v1beta1; diff --git a/kube-custom-resources-rs/src/karpenter_k8s_aws/v1beta1/ec2nodeclasses.rs b/kube-custom-resources-rs/src/karpenter_k8s_aws/v1beta1/ec2nodeclasses.rs new file mode 100644 index 000000000..da4e75e78 --- /dev/null +++ b/kube-custom-resources-rs/src/karpenter_k8s_aws/v1beta1/ec2nodeclasses.rs @@ -0,0 +1,459 @@ +// WARNING: generated by kopium - manual changes will be overwritten +// kopium command: kopium --docs --filename=./crd-catalog/aws/karpenter-provider-aws/karpenter.k8s.aws/v1beta1/ec2nodeclasses.yaml --derive=PartialEq +// kopium version: 0.16.5 + +use kube::CustomResource; +use serde::{Serialize, Deserialize}; +use std::collections::BTreeMap; +use k8s_openapi::apimachinery::pkg::util::intstr::IntOrString; + +/// EC2NodeClassSpec is the top level specification for the AWS Karpenter Provider. +/// This will contain configuration necessary to launch instances in AWS. +#[derive(CustomResource, Serialize, Deserialize, Clone, Debug, PartialEq)] +#[kube(group = "karpenter.k8s.aws", version = "v1beta1", kind = "EC2NodeClass", plural = "ec2nodeclasses")] +#[kube(status = "EC2NodeClassStatus")] +#[kube(schema = "disabled")] +pub struct EC2NodeClassSpec { + /// AMIFamily is the AMI family that instances use. + #[serde(rename = "amiFamily")] + pub ami_family: EC2NodeClassAmiFamily, + /// AMISelectorTerms is a list of or ami selector terms. The terms are ORed. + #[serde(default, skip_serializing_if = "Option::is_none", rename = "amiSelectorTerms")] + pub ami_selector_terms: Option>, + /// BlockDeviceMappings to be applied to provisioned nodes. + #[serde(default, skip_serializing_if = "Option::is_none", rename = "blockDeviceMappings")] + pub block_device_mappings: Option>, + /// Context is a Reserved field in EC2 APIs + /// https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_CreateFleet.html + #[serde(default, skip_serializing_if = "Option::is_none")] + pub context: Option, + /// DetailedMonitoring controls if detailed monitoring is enabled for instances that are launched + #[serde(default, skip_serializing_if = "Option::is_none", rename = "detailedMonitoring")] + pub detailed_monitoring: Option, + /// InstanceProfile is the AWS entity that instances use. + /// This field is mutually exclusive from role. + /// The instance profile should already have a role assigned to it that Karpenter + /// has PassRole permission on for instance launch using this instanceProfile to succeed. + #[serde(default, skip_serializing_if = "Option::is_none", rename = "instanceProfile")] + pub instance_profile: Option, + /// InstanceStorePolicy specifies how to handle instance-store disks. + #[serde(default, skip_serializing_if = "Option::is_none", rename = "instanceStorePolicy")] + pub instance_store_policy: Option, + /// MetadataOptions for the generated launch template of provisioned nodes. + /// + /// + /// This specifies the exposure of the Instance Metadata Service to + /// provisioned EC2 nodes. For more information, + /// see Instance Metadata and User Data + /// (https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-instance-metadata.html) + /// in the Amazon Elastic Compute Cloud User Guide. + /// + /// + /// Refer to recommended, security best practices + /// (https://aws.github.io/aws-eks-best-practices/security/docs/iam/#restrict-access-to-the-instance-profile-assigned-to-the-worker-node) + /// for limiting exposure of Instance Metadata and User Data to pods. + /// If omitted, defaults to httpEndpoint enabled, with httpProtocolIPv6 + /// disabled, with httpPutResponseLimit of 2, and with httpTokens + /// required. + #[serde(default, skip_serializing_if = "Option::is_none", rename = "metadataOptions")] + pub metadata_options: Option, + /// Role is the AWS identity that nodes use. This field is immutable. + /// This field is mutually exclusive from instanceProfile. + /// Marking this field as immutable avoids concerns around terminating managed instance profiles from running instances. + /// This field may be made mutable in the future, assuming the correct garbage collection and drift handling is implemented + /// for the old instance profiles on an update. + #[serde(default, skip_serializing_if = "Option::is_none")] + pub role: Option, + /// SecurityGroupSelectorTerms is a list of or security group selector terms. The terms are ORed. + #[serde(rename = "securityGroupSelectorTerms")] + pub security_group_selector_terms: Vec, + /// SubnetSelectorTerms is a list of or subnet selector terms. The terms are ORed. + #[serde(rename = "subnetSelectorTerms")] + pub subnet_selector_terms: Vec, + /// Tags to be applied on ec2 resources like instances and launch templates. + #[serde(default, skip_serializing_if = "Option::is_none")] + pub tags: Option>, + /// UserData to be applied to the provisioned nodes. + /// It must be in the appropriate format based on the AMIFamily in use. Karpenter will merge certain fields into + /// this UserData to ensure nodes are being provisioned with the correct configuration. + #[serde(default, skip_serializing_if = "Option::is_none", rename = "userData")] + pub user_data: Option, +} + +/// EC2NodeClassSpec is the top level specification for the AWS Karpenter Provider. +/// This will contain configuration necessary to launch instances in AWS. +#[derive(Serialize, Deserialize, Clone, Debug, PartialEq)] +pub enum EC2NodeClassAmiFamily { + #[serde(rename = "AL2")] + Al2, + Bottlerocket, + Ubuntu, + Custom, + Windows2019, + Windows2022, +} + +/// AMISelectorTerm defines selection logic for an ami used by Karpenter to launch nodes. +/// If multiple fields are used for selection, the requirements are ANDed. +#[derive(Serialize, Deserialize, Clone, Debug, PartialEq)] +pub struct EC2NodeClassAmiSelectorTerms { + /// ID is the ami id in EC2 + #[serde(default, skip_serializing_if = "Option::is_none")] + pub id: Option, + /// Name is the ami name in EC2. + /// This value is the name field, which is different from the name tag. + #[serde(default, skip_serializing_if = "Option::is_none")] + pub name: Option, + /// Owner is the owner for the ami. + /// You can specify a combination of AWS account IDs, "self", "amazon", and "aws-marketplace" + #[serde(default, skip_serializing_if = "Option::is_none")] + pub owner: Option, + /// Tags is a map of key/value tags used to select subnets + /// Specifying '*' for a value selects all values for a given tag key. + #[serde(default, skip_serializing_if = "Option::is_none")] + pub tags: Option>, +} + +#[derive(Serialize, Deserialize, Clone, Debug, PartialEq)] +pub struct EC2NodeClassBlockDeviceMappings { + /// The device name (for example, /dev/sdh or xvdh). + #[serde(default, skip_serializing_if = "Option::is_none", rename = "deviceName")] + pub device_name: Option, + /// EBS contains parameters used to automatically set up EBS volumes when an instance is launched. + #[serde(default, skip_serializing_if = "Option::is_none")] + pub ebs: Option, + /// RootVolume is a flag indicating if this device is mounted as kubelet root dir. You can + /// configure at most one root volume in BlockDeviceMappings. + #[serde(default, skip_serializing_if = "Option::is_none", rename = "rootVolume")] + pub root_volume: Option, +} + +/// EBS contains parameters used to automatically set up EBS volumes when an instance is launched. +#[derive(Serialize, Deserialize, Clone, Debug, PartialEq)] +pub struct EC2NodeClassBlockDeviceMappingsEbs { + /// DeleteOnTermination indicates whether the EBS volume is deleted on instance termination. + #[serde(default, skip_serializing_if = "Option::is_none", rename = "deleteOnTermination")] + pub delete_on_termination: Option, + /// Encrypted indicates whether the EBS volume is encrypted. Encrypted volumes can only + /// be attached to instances that support Amazon EBS encryption. If you are creating + /// a volume from a snapshot, you can't specify an encryption value. + #[serde(default, skip_serializing_if = "Option::is_none")] + pub encrypted: Option, + /// IOPS is the number of I/O operations per second (IOPS). For gp3, io1, and io2 volumes, + /// this represents the number of IOPS that are provisioned for the volume. For + /// gp2 volumes, this represents the baseline performance of the volume and the + /// rate at which the volume accumulates I/O credits for bursting. + /// + /// + /// The following are the supported values for each volume type: + /// + /// + /// * gp3: 3,000-16,000 IOPS + /// + /// + /// * io1: 100-64,000 IOPS + /// + /// + /// * io2: 100-64,000 IOPS + /// + /// + /// For io1 and io2 volumes, we guarantee 64,000 IOPS only for Instances built + /// on the Nitro System (https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/instance-types.html#ec2-nitro-instances). + /// Other instance families guarantee performance up to 32,000 IOPS. + /// + /// + /// This parameter is supported for io1, io2, and gp3 volumes only. This parameter + /// is not supported for gp2, st1, sc1, or standard volumes. + #[serde(default, skip_serializing_if = "Option::is_none")] + pub iops: Option, + /// KMSKeyID (ARN) of the symmetric Key Management Service (KMS) CMK used for encryption. + #[serde(default, skip_serializing_if = "Option::is_none", rename = "kmsKeyID")] + pub kms_key_id: Option, + /// SnapshotID is the ID of an EBS snapshot + #[serde(default, skip_serializing_if = "Option::is_none", rename = "snapshotID")] + pub snapshot_id: Option, + /// Throughput to provision for a gp3 volume, with a maximum of 1,000 MiB/s. + /// Valid Range: Minimum value of 125. Maximum value of 1000. + #[serde(default, skip_serializing_if = "Option::is_none")] + pub throughput: Option, + /// VolumeSize in `Gi`, `G`, `Ti`, or `T`. You must specify either a snapshot ID or + /// a volume size. The following are the supported volumes sizes for each volume + /// type: + /// + /// + /// * gp2 and gp3: 1-16,384 + /// + /// + /// * io1 and io2: 4-16,384 + /// + /// + /// * st1 and sc1: 125-16,384 + /// + /// + /// * standard: 1-1,024 + #[serde(default, skip_serializing_if = "Option::is_none", rename = "volumeSize")] + pub volume_size: Option, + /// VolumeType of the block device. + /// For more information, see Amazon EBS volume types (https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/EBSVolumeTypes.html) + /// in the Amazon Elastic Compute Cloud User Guide. + #[serde(default, skip_serializing_if = "Option::is_none", rename = "volumeType")] + pub volume_type: Option, +} + +/// EBS contains parameters used to automatically set up EBS volumes when an instance is launched. +#[derive(Serialize, Deserialize, Clone, Debug, PartialEq)] +pub enum EC2NodeClassBlockDeviceMappingsEbsVolumeType { + #[serde(rename = "standard")] + Standard, + #[serde(rename = "io1")] + Io1, + #[serde(rename = "io2")] + Io2, + #[serde(rename = "gp2")] + Gp2, + #[serde(rename = "sc1")] + Sc1, + #[serde(rename = "st1")] + St1, + #[serde(rename = "gp3")] + Gp3, +} + +/// EC2NodeClassSpec is the top level specification for the AWS Karpenter Provider. +/// This will contain configuration necessary to launch instances in AWS. +#[derive(Serialize, Deserialize, Clone, Debug, PartialEq)] +pub enum EC2NodeClassInstanceStorePolicy { + #[serde(rename = "RAID0")] + Raid0, +} + +/// MetadataOptions for the generated launch template of provisioned nodes. +/// +/// +/// This specifies the exposure of the Instance Metadata Service to +/// provisioned EC2 nodes. For more information, +/// see Instance Metadata and User Data +/// (https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-instance-metadata.html) +/// in the Amazon Elastic Compute Cloud User Guide. +/// +/// +/// Refer to recommended, security best practices +/// (https://aws.github.io/aws-eks-best-practices/security/docs/iam/#restrict-access-to-the-instance-profile-assigned-to-the-worker-node) +/// for limiting exposure of Instance Metadata and User Data to pods. +/// If omitted, defaults to httpEndpoint enabled, with httpProtocolIPv6 +/// disabled, with httpPutResponseLimit of 2, and with httpTokens +/// required. +#[derive(Serialize, Deserialize, Clone, Debug, PartialEq)] +pub struct EC2NodeClassMetadataOptions { + /// HTTPEndpoint enables or disables the HTTP metadata endpoint on provisioned + /// nodes. If metadata options is non-nil, but this parameter is not specified, + /// the default state is "enabled". + /// + /// + /// If you specify a value of "disabled", instance metadata will not be accessible + /// on the node. + #[serde(default, skip_serializing_if = "Option::is_none", rename = "httpEndpoint")] + pub http_endpoint: Option, + /// HTTPProtocolIPv6 enables or disables the IPv6 endpoint for the instance metadata + /// service on provisioned nodes. If metadata options is non-nil, but this parameter + /// is not specified, the default state is "disabled". + #[serde(default, skip_serializing_if = "Option::is_none", rename = "httpProtocolIPv6")] + pub http_protocol_i_pv6: Option, + /// HTTPPutResponseHopLimit is the desired HTTP PUT response hop limit for + /// instance metadata requests. The larger the number, the further instance + /// metadata requests can travel. Possible values are integers from 1 to 64. + /// If metadata options is non-nil, but this parameter is not specified, the + /// default value is 2. + #[serde(default, skip_serializing_if = "Option::is_none", rename = "httpPutResponseHopLimit")] + pub http_put_response_hop_limit: Option, + /// HTTPTokens determines the state of token usage for instance metadata + /// requests. If metadata options is non-nil, but this parameter is not + /// specified, the default state is "required". + /// + /// + /// If the state is optional, one can choose to retrieve instance metadata with + /// or without a signed token header on the request. If one retrieves the IAM + /// role credentials without a token, the version 1.0 role credentials are + /// returned. If one retrieves the IAM role credentials using a valid signed + /// token, the version 2.0 role credentials are returned. + /// + /// + /// If the state is "required", one must send a signed token header with any + /// instance metadata retrieval requests. In this state, retrieving the IAM + /// role credentials always returns the version 2.0 credentials; the version + /// 1.0 credentials are not available. + #[serde(default, skip_serializing_if = "Option::is_none", rename = "httpTokens")] + pub http_tokens: Option, +} + +/// MetadataOptions for the generated launch template of provisioned nodes. +/// +/// +/// This specifies the exposure of the Instance Metadata Service to +/// provisioned EC2 nodes. For more information, +/// see Instance Metadata and User Data +/// (https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-instance-metadata.html) +/// in the Amazon Elastic Compute Cloud User Guide. +/// +/// +/// Refer to recommended, security best practices +/// (https://aws.github.io/aws-eks-best-practices/security/docs/iam/#restrict-access-to-the-instance-profile-assigned-to-the-worker-node) +/// for limiting exposure of Instance Metadata and User Data to pods. +/// If omitted, defaults to httpEndpoint enabled, with httpProtocolIPv6 +/// disabled, with httpPutResponseLimit of 2, and with httpTokens +/// required. +#[derive(Serialize, Deserialize, Clone, Debug, PartialEq)] +pub enum EC2NodeClassMetadataOptionsHttpEndpoint { + #[serde(rename = "enabled")] + Enabled, + #[serde(rename = "disabled")] + Disabled, +} + +/// MetadataOptions for the generated launch template of provisioned nodes. +/// +/// +/// This specifies the exposure of the Instance Metadata Service to +/// provisioned EC2 nodes. For more information, +/// see Instance Metadata and User Data +/// (https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-instance-metadata.html) +/// in the Amazon Elastic Compute Cloud User Guide. +/// +/// +/// Refer to recommended, security best practices +/// (https://aws.github.io/aws-eks-best-practices/security/docs/iam/#restrict-access-to-the-instance-profile-assigned-to-the-worker-node) +/// for limiting exposure of Instance Metadata and User Data to pods. +/// If omitted, defaults to httpEndpoint enabled, with httpProtocolIPv6 +/// disabled, with httpPutResponseLimit of 2, and with httpTokens +/// required. +#[derive(Serialize, Deserialize, Clone, Debug, PartialEq)] +pub enum EC2NodeClassMetadataOptionsHttpProtocolIPv6 { + #[serde(rename = "enabled")] + Enabled, + #[serde(rename = "disabled")] + Disabled, +} + +/// MetadataOptions for the generated launch template of provisioned nodes. +/// +/// +/// This specifies the exposure of the Instance Metadata Service to +/// provisioned EC2 nodes. For more information, +/// see Instance Metadata and User Data +/// (https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-instance-metadata.html) +/// in the Amazon Elastic Compute Cloud User Guide. +/// +/// +/// Refer to recommended, security best practices +/// (https://aws.github.io/aws-eks-best-practices/security/docs/iam/#restrict-access-to-the-instance-profile-assigned-to-the-worker-node) +/// for limiting exposure of Instance Metadata and User Data to pods. +/// If omitted, defaults to httpEndpoint enabled, with httpProtocolIPv6 +/// disabled, with httpPutResponseLimit of 2, and with httpTokens +/// required. +#[derive(Serialize, Deserialize, Clone, Debug, PartialEq)] +pub enum EC2NodeClassMetadataOptionsHttpTokens { + #[serde(rename = "required")] + Required, + #[serde(rename = "optional")] + Optional, +} + +/// SecurityGroupSelectorTerm defines selection logic for a security group used by Karpenter to launch nodes. +/// If multiple fields are used for selection, the requirements are ANDed. +#[derive(Serialize, Deserialize, Clone, Debug, PartialEq)] +pub struct EC2NodeClassSecurityGroupSelectorTerms { + /// ID is the security group id in EC2 + #[serde(default, skip_serializing_if = "Option::is_none")] + pub id: Option, + /// Name is the security group name in EC2. + /// This value is the name field, which is different from the name tag. + #[serde(default, skip_serializing_if = "Option::is_none")] + pub name: Option, + /// Tags is a map of key/value tags used to select subnets + /// Specifying '*' for a value selects all values for a given tag key. + #[serde(default, skip_serializing_if = "Option::is_none")] + pub tags: Option>, +} + +/// SubnetSelectorTerm defines selection logic for a subnet used by Karpenter to launch nodes. +/// If multiple fields are used for selection, the requirements are ANDed. +#[derive(Serialize, Deserialize, Clone, Debug, PartialEq)] +pub struct EC2NodeClassSubnetSelectorTerms { + /// ID is the subnet id in EC2 + #[serde(default, skip_serializing_if = "Option::is_none")] + pub id: Option, + /// Tags is a map of key/value tags used to select subnets + /// Specifying '*' for a value selects all values for a given tag key. + #[serde(default, skip_serializing_if = "Option::is_none")] + pub tags: Option>, +} + +/// EC2NodeClassStatus contains the resolved state of the EC2NodeClass +#[derive(Serialize, Deserialize, Clone, Debug, PartialEq)] +pub struct EC2NodeClassStatus { + /// AMI contains the current AMI values that are available to the + /// cluster under the AMI selectors. + #[serde(default, skip_serializing_if = "Option::is_none")] + pub amis: Option>, + /// InstanceProfile contains the resolved instance profile for the role + #[serde(default, skip_serializing_if = "Option::is_none", rename = "instanceProfile")] + pub instance_profile: Option, + /// SecurityGroups contains the current Security Groups values that are available to the + /// cluster under the SecurityGroups selectors. + #[serde(default, skip_serializing_if = "Option::is_none", rename = "securityGroups")] + pub security_groups: Option>, + /// Subnets contains the current Subnet values that are available to the + /// cluster under the subnet selectors. + #[serde(default, skip_serializing_if = "Option::is_none")] + pub subnets: Option>, +} + +/// AMI contains resolved AMI selector values utilized for node launch +#[derive(Serialize, Deserialize, Clone, Debug, PartialEq)] +pub struct EC2NodeClassStatusAmis { + /// ID of the AMI + pub id: String, + /// Name of the AMI + #[serde(default, skip_serializing_if = "Option::is_none")] + pub name: Option, + /// Requirements of the AMI to be utilized on an instance type + pub requirements: Vec, +} + +/// A node selector requirement is a selector that contains values, a key, and an operator +/// that relates the key and values. +#[derive(Serialize, Deserialize, Clone, Debug, PartialEq)] +pub struct EC2NodeClassStatusAmisRequirements { + /// The label key that the selector applies to. + pub key: String, + /// Represents a key's relationship to a set of values. + /// Valid operators are In, NotIn, Exists, DoesNotExist. Gt, and Lt. + pub operator: String, + /// An array of string values. If the operator is In or NotIn, + /// the values array must be non-empty. If the operator is Exists or DoesNotExist, + /// the values array must be empty. If the operator is Gt or Lt, the values + /// array must have a single element, which will be interpreted as an integer. + /// This array is replaced during a strategic merge patch. + #[serde(default, skip_serializing_if = "Option::is_none")] + pub values: Option>, +} + +/// SecurityGroup contains resolved SecurityGroup selector values utilized for node launch +#[derive(Serialize, Deserialize, Clone, Debug, PartialEq)] +pub struct EC2NodeClassStatusSecurityGroups { + /// ID of the security group + pub id: String, + /// Name of the security group + #[serde(default, skip_serializing_if = "Option::is_none")] + pub name: Option, +} + +/// Subnet contains resolved Subnet selector values utilized for node launch +#[derive(Serialize, Deserialize, Clone, Debug, PartialEq)] +pub struct EC2NodeClassStatusSubnets { + /// ID of the subnet + pub id: String, + /// The associated availability zone + pub zone: String, +} + diff --git a/kube-custom-resources-rs/src/karpenter_k8s_aws/v1beta1/mod.rs b/kube-custom-resources-rs/src/karpenter_k8s_aws/v1beta1/mod.rs new file mode 100644 index 000000000..0640ba2df --- /dev/null +++ b/kube-custom-resources-rs/src/karpenter_k8s_aws/v1beta1/mod.rs @@ -0,0 +1 @@ +pub mod ec2nodeclasses; diff --git a/kube-custom-resources-rs/src/karpenter_sh/mod.rs b/kube-custom-resources-rs/src/karpenter_sh/mod.rs new file mode 100644 index 000000000..9f64fc82d --- /dev/null +++ b/kube-custom-resources-rs/src/karpenter_sh/mod.rs @@ -0,0 +1 @@ +pub mod v1beta1; diff --git a/kube-custom-resources-rs/src/karpenter_sh/v1beta1/mod.rs b/kube-custom-resources-rs/src/karpenter_sh/v1beta1/mod.rs new file mode 100644 index 000000000..35de437ca --- /dev/null +++ b/kube-custom-resources-rs/src/karpenter_sh/v1beta1/mod.rs @@ -0,0 +1,2 @@ +pub mod nodeclaims; +pub mod nodepools; diff --git a/kube-custom-resources-rs/src/karpenter_sh/v1beta1/nodeclaims.rs b/kube-custom-resources-rs/src/karpenter_sh/v1beta1/nodeclaims.rs new file mode 100644 index 000000000..11a7b1317 --- /dev/null +++ b/kube-custom-resources-rs/src/karpenter_sh/v1beta1/nodeclaims.rs @@ -0,0 +1,250 @@ +// WARNING: generated by kopium - manual changes will be overwritten +// kopium command: kopium --docs --filename=./crd-catalog/aws/karpenter-provider-aws/karpenter.sh/v1beta1/nodeclaims.yaml --derive=PartialEq +// kopium version: 0.16.5 + +use kube::CustomResource; +use serde::{Serialize, Deserialize}; +use std::collections::BTreeMap; +use k8s_openapi::apimachinery::pkg::util::intstr::IntOrString; + +/// NodeClaimSpec describes the desired state of the NodeClaim +#[derive(CustomResource, Serialize, Deserialize, Clone, Debug, PartialEq)] +#[kube(group = "karpenter.sh", version = "v1beta1", kind = "NodeClaim", plural = "nodeclaims")] +#[kube(status = "NodeClaimStatus")] +#[kube(schema = "disabled")] +pub struct NodeClaimSpec { + /// Kubelet defines args to be used when configuring kubelet on provisioned nodes. + /// They are a subset of the upstream types, recognizing not all options may be supported. + /// Wherever possible, the types and names should reflect the upstream kubelet types. + #[serde(default, skip_serializing_if = "Option::is_none")] + pub kubelet: Option, + /// NodeClassRef is a reference to an object that defines provider specific configuration + #[serde(rename = "nodeClassRef")] + pub node_class_ref: NodeClaimNodeClassRef, + /// Requirements are layered with GetLabels and applied to every node. + pub requirements: Vec, + /// Resources models the resource requirements for the NodeClaim to launch + #[serde(default, skip_serializing_if = "Option::is_none")] + pub resources: Option, + /// StartupTaints are taints that are applied to nodes upon startup which are expected to be removed automatically + /// within a short period of time, typically by a DaemonSet that tolerates the taint. These are commonly used by + /// daemonsets to allow initialization and enforce startup ordering. StartupTaints are ignored for provisioning + /// purposes in that pods are not required to tolerate a StartupTaint in order to have nodes provisioned for them. + #[serde(default, skip_serializing_if = "Option::is_none", rename = "startupTaints")] + pub startup_taints: Option>, + /// Taints will be applied to the NodeClaim's node. + #[serde(default, skip_serializing_if = "Option::is_none")] + pub taints: Option>, +} + +/// Kubelet defines args to be used when configuring kubelet on provisioned nodes. +/// They are a subset of the upstream types, recognizing not all options may be supported. +/// Wherever possible, the types and names should reflect the upstream kubelet types. +#[derive(Serialize, Deserialize, Clone, Debug, PartialEq)] +pub struct NodeClaimKubelet { + /// clusterDNS is a list of IP addresses for the cluster DNS server. + /// Note that not all providers may use all addresses. + #[serde(default, skip_serializing_if = "Option::is_none", rename = "clusterDNS")] + pub cluster_dns: Option>, + /// CPUCFSQuota enables CPU CFS quota enforcement for containers that specify CPU limits. + #[serde(default, skip_serializing_if = "Option::is_none", rename = "cpuCFSQuota")] + pub cpu_cfs_quota: Option, + /// EvictionHard is the map of signal names to quantities that define hard eviction thresholds + #[serde(default, skip_serializing_if = "Option::is_none", rename = "evictionHard")] + pub eviction_hard: Option>, + /// EvictionMaxPodGracePeriod is the maximum allowed grace period (in seconds) to use when terminating pods in + /// response to soft eviction thresholds being met. + #[serde(default, skip_serializing_if = "Option::is_none", rename = "evictionMaxPodGracePeriod")] + pub eviction_max_pod_grace_period: Option, + /// EvictionSoft is the map of signal names to quantities that define soft eviction thresholds + #[serde(default, skip_serializing_if = "Option::is_none", rename = "evictionSoft")] + pub eviction_soft: Option>, + /// EvictionSoftGracePeriod is the map of signal names to quantities that define grace periods for each eviction signal + #[serde(default, skip_serializing_if = "Option::is_none", rename = "evictionSoftGracePeriod")] + pub eviction_soft_grace_period: Option>, + /// ImageGCHighThresholdPercent is the percent of disk usage after which image + /// garbage collection is always run. The percent is calculated by dividing this + /// field value by 100, so this field must be between 0 and 100, inclusive. + /// When specified, the value must be greater than ImageGCLowThresholdPercent. + #[serde(default, skip_serializing_if = "Option::is_none", rename = "imageGCHighThresholdPercent")] + pub image_gc_high_threshold_percent: Option, + /// ImageGCLowThresholdPercent is the percent of disk usage before which image + /// garbage collection is never run. Lowest disk usage to garbage collect to. + /// The percent is calculated by dividing this field value by 100, + /// so the field value must be between 0 and 100, inclusive. + /// When specified, the value must be less than imageGCHighThresholdPercent + #[serde(default, skip_serializing_if = "Option::is_none", rename = "imageGCLowThresholdPercent")] + pub image_gc_low_threshold_percent: Option, + /// KubeReserved contains resources reserved for Kubernetes system components. + #[serde(default, skip_serializing_if = "Option::is_none", rename = "kubeReserved")] + pub kube_reserved: Option>, + /// MaxPods is an override for the maximum number of pods that can run on + /// a worker node instance. + #[serde(default, skip_serializing_if = "Option::is_none", rename = "maxPods")] + pub max_pods: Option, + /// PodsPerCore is an override for the number of pods that can run on a worker node + /// instance based on the number of cpu cores. This value cannot exceed MaxPods, so, if + /// MaxPods is a lower value, that value will be used. + #[serde(default, skip_serializing_if = "Option::is_none", rename = "podsPerCore")] + pub pods_per_core: Option, + /// SystemReserved contains resources reserved for OS system daemons and kernel memory. + #[serde(default, skip_serializing_if = "Option::is_none", rename = "systemReserved")] + pub system_reserved: Option>, +} + +/// NodeClassRef is a reference to an object that defines provider specific configuration +#[derive(Serialize, Deserialize, Clone, Debug, PartialEq)] +pub struct NodeClaimNodeClassRef { + /// API version of the referent + #[serde(default, skip_serializing_if = "Option::is_none", rename = "apiVersion")] + pub api_version: Option, + /// Kind of the referent; More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds" + #[serde(default, skip_serializing_if = "Option::is_none")] + pub kind: Option, + /// Name of the referent; More info: http://kubernetes.io/docs/user-guide/identifiers#names + pub name: String, +} + +/// A node selector requirement is a selector that contains values, a key, and an operator +/// that relates the key and values. +#[derive(Serialize, Deserialize, Clone, Debug, PartialEq)] +pub struct NodeClaimRequirements { + /// The label key that the selector applies to. + pub key: String, + /// Represents a key's relationship to a set of values. + /// Valid operators are In, NotIn, Exists, DoesNotExist. Gt, and Lt. + pub operator: NodeClaimRequirementsOperator, + /// An array of string values. If the operator is In or NotIn, + /// the values array must be non-empty. If the operator is Exists or DoesNotExist, + /// the values array must be empty. If the operator is Gt or Lt, the values + /// array must have a single element, which will be interpreted as an integer. + /// This array is replaced during a strategic merge patch. + #[serde(default, skip_serializing_if = "Option::is_none")] + pub values: Option>, +} + +/// A node selector requirement is a selector that contains values, a key, and an operator +/// that relates the key and values. +#[derive(Serialize, Deserialize, Clone, Debug, PartialEq)] +pub enum NodeClaimRequirementsOperator { + In, + NotIn, + Exists, + DoesNotExist, + Gt, + Lt, +} + +/// Resources models the resource requirements for the NodeClaim to launch +#[derive(Serialize, Deserialize, Clone, Debug, PartialEq)] +pub struct NodeClaimResources { + /// Requests describes the minimum required resources for the NodeClaim to launch + #[serde(default, skip_serializing_if = "Option::is_none")] + pub requests: Option>, +} + +/// The node this Taint is attached to has the "effect" on +/// any pod that does not tolerate the Taint. +#[derive(Serialize, Deserialize, Clone, Debug, PartialEq)] +pub struct NodeClaimStartupTaints { + /// Required. The effect of the taint on pods + /// that do not tolerate the taint. + /// Valid effects are NoSchedule, PreferNoSchedule and NoExecute. + pub effect: NodeClaimStartupTaintsEffect, + /// Required. The taint key to be applied to a node. + pub key: String, + /// TimeAdded represents the time at which the taint was added. + /// It is only written for NoExecute taints. + #[serde(default, skip_serializing_if = "Option::is_none", rename = "timeAdded")] + pub time_added: Option, + /// The taint value corresponding to the taint key. + #[serde(default, skip_serializing_if = "Option::is_none")] + pub value: Option, +} + +/// The node this Taint is attached to has the "effect" on +/// any pod that does not tolerate the Taint. +#[derive(Serialize, Deserialize, Clone, Debug, PartialEq)] +pub enum NodeClaimStartupTaintsEffect { + NoSchedule, + PreferNoSchedule, + NoExecute, +} + +/// The node this Taint is attached to has the "effect" on +/// any pod that does not tolerate the Taint. +#[derive(Serialize, Deserialize, Clone, Debug, PartialEq)] +pub struct NodeClaimTaints { + /// Required. The effect of the taint on pods + /// that do not tolerate the taint. + /// Valid effects are NoSchedule, PreferNoSchedule and NoExecute. + pub effect: NodeClaimTaintsEffect, + /// Required. The taint key to be applied to a node. + pub key: String, + /// TimeAdded represents the time at which the taint was added. + /// It is only written for NoExecute taints. + #[serde(default, skip_serializing_if = "Option::is_none", rename = "timeAdded")] + pub time_added: Option, + /// The taint value corresponding to the taint key. + #[serde(default, skip_serializing_if = "Option::is_none")] + pub value: Option, +} + +/// The node this Taint is attached to has the "effect" on +/// any pod that does not tolerate the Taint. +#[derive(Serialize, Deserialize, Clone, Debug, PartialEq)] +pub enum NodeClaimTaintsEffect { + NoSchedule, + PreferNoSchedule, + NoExecute, +} + +/// NodeClaimStatus defines the observed state of NodeClaim +#[derive(Serialize, Deserialize, Clone, Debug, PartialEq)] +pub struct NodeClaimStatus { + /// Allocatable is the estimated allocatable capacity of the node + #[serde(default, skip_serializing_if = "Option::is_none")] + pub allocatable: Option>, + /// Capacity is the estimated full capacity of the node + #[serde(default, skip_serializing_if = "Option::is_none")] + pub capacity: Option>, + /// Conditions contains signals for health and readiness + #[serde(default, skip_serializing_if = "Option::is_none")] + pub conditions: Option>, + /// ImageID is an identifier for the image that runs on the node + #[serde(default, skip_serializing_if = "Option::is_none", rename = "imageID")] + pub image_id: Option, + /// NodeName is the name of the corresponding node object + #[serde(default, skip_serializing_if = "Option::is_none", rename = "nodeName")] + pub node_name: Option, + /// ProviderID of the corresponding node object + #[serde(default, skip_serializing_if = "Option::is_none", rename = "providerID")] + pub provider_id: Option, +} + +/// Condition defines a readiness condition for a Knative resource. +/// See: https://github.com/kubernetes/community/blob/master/contributors/devel/sig-architecture/api-conventions.md#typical-status-properties +#[derive(Serialize, Deserialize, Clone, Debug, PartialEq)] +pub struct NodeClaimStatusConditions { + /// LastTransitionTime is the last time the condition transitioned from one status to another. + /// We use VolatileTime in place of metav1.Time to exclude this from creating equality.Semantic + /// differences (all other things held constant). + #[serde(default, skip_serializing_if = "Option::is_none", rename = "lastTransitionTime")] + pub last_transition_time: Option, + /// A human readable message indicating details about the transition. + #[serde(default, skip_serializing_if = "Option::is_none")] + pub message: Option, + /// The reason for the condition's last transition. + #[serde(default, skip_serializing_if = "Option::is_none")] + pub reason: Option, + /// Severity with which to treat failures of this type of condition. + /// When this is not specified, it defaults to Error. + #[serde(default, skip_serializing_if = "Option::is_none")] + pub severity: Option, + /// Status of the condition, one of True, False, Unknown. + pub status: String, + /// Type of condition. + #[serde(rename = "type")] + pub r#type: String, +} + diff --git a/kube-custom-resources-rs/src/karpenter_sh/v1beta1/nodepools.rs b/kube-custom-resources-rs/src/karpenter_sh/v1beta1/nodepools.rs new file mode 100644 index 000000000..d1100a214 --- /dev/null +++ b/kube-custom-resources-rs/src/karpenter_sh/v1beta1/nodepools.rs @@ -0,0 +1,319 @@ +// WARNING: generated by kopium - manual changes will be overwritten +// kopium command: kopium --docs --filename=./crd-catalog/aws/karpenter-provider-aws/karpenter.sh/v1beta1/nodepools.yaml --derive=PartialEq +// kopium version: 0.16.5 + +use kube::CustomResource; +use serde::{Serialize, Deserialize}; +use std::collections::BTreeMap; +use k8s_openapi::apimachinery::pkg::util::intstr::IntOrString; + +/// NodePoolSpec is the top level nodepool specification. Nodepools +/// launch nodes in response to pods that are unschedulable. A single nodepool +/// is capable of managing a diverse set of nodes. Node properties are determined +/// from a combination of nodepool and pod scheduling constraints. +#[derive(CustomResource, Serialize, Deserialize, Clone, Debug, PartialEq)] +#[kube(group = "karpenter.sh", version = "v1beta1", kind = "NodePool", plural = "nodepools")] +#[kube(status = "NodePoolStatus")] +#[kube(schema = "disabled")] +pub struct NodePoolSpec { + /// Disruption contains the parameters that relate to Karpenter's disruption logic + #[serde(default, skip_serializing_if = "Option::is_none")] + pub disruption: Option, + /// Limits define a set of bounds for provisioning capacity. + #[serde(default, skip_serializing_if = "Option::is_none")] + pub limits: Option>, + /// Template contains the template of possibilities for the provisioning logic to launch a NodeClaim with. + /// NodeClaims launched from this NodePool will often be further constrained than the template specifies. + pub template: NodePoolTemplate, + /// Weight is the priority given to the nodepool during scheduling. A higher + /// numerical weight indicates that this nodepool will be ordered + /// ahead of other nodepools with lower weights. A nodepool with no weight + /// will be treated as if it is a nodepool with a weight of 0. + #[serde(default, skip_serializing_if = "Option::is_none")] + pub weight: Option, +} + +/// Disruption contains the parameters that relate to Karpenter's disruption logic +#[derive(Serialize, Deserialize, Clone, Debug, PartialEq)] +pub struct NodePoolDisruption { + /// Budgets is a list of Budgets. + /// If there are multiple active budgets, Karpenter uses + /// the most restrictive value. If left undefined, + /// this will default to one budget with a value to 10%. + #[serde(default, skip_serializing_if = "Option::is_none")] + pub budgets: Option>, + /// ConsolidateAfter is the duration the controller will wait + /// before attempting to terminate nodes that are underutilized. + /// Refer to ConsolidationPolicy for how underutilization is considered. + #[serde(default, skip_serializing_if = "Option::is_none", rename = "consolidateAfter")] + pub consolidate_after: Option, + /// ConsolidationPolicy describes which nodes Karpenter can disrupt through its consolidation + /// algorithm. This policy defaults to "WhenUnderutilized" if not specified + #[serde(default, skip_serializing_if = "Option::is_none", rename = "consolidationPolicy")] + pub consolidation_policy: Option, + /// ExpireAfter is the duration the controller will wait + /// before terminating a node, measured from when the node is created. This + /// is useful to implement features like eventually consistent node upgrade, + /// memory leak protection, and disruption testing. + #[serde(default, skip_serializing_if = "Option::is_none", rename = "expireAfter")] + pub expire_after: Option, +} + +/// Budget defines when Karpenter will restrict the +/// number of Node Claims that can be terminating simultaneously. +#[derive(Serialize, Deserialize, Clone, Debug, PartialEq)] +pub struct NodePoolDisruptionBudgets { + /// Duration determines how long a Budget is active since each Schedule hit. + /// Only minutes and hours are accepted, as cron does not work in seconds. + /// If omitted, the budget is always active. + /// This is required if Schedule is set. + /// This regex has an optional 0s at the end since the duration.String() always adds + /// a 0s at the end. + #[serde(default, skip_serializing_if = "Option::is_none")] + pub duration: Option, + /// Nodes dictates the maximum number of NodeClaims owned by this NodePool + /// that can be terminating at once. This is calculated by counting nodes that + /// have a deletion timestamp set, or are actively being deleted by Karpenter. + /// This field is required when specifying a budget. + /// This cannot be of type intstr.IntOrString since kubebuilder doesn't support pattern + /// checking for int nodes for IntOrString nodes. + /// Ref: https://github.com/kubernetes-sigs/controller-tools/blob/55efe4be40394a288216dab63156b0a64fb82929/pkg/crd/markers/validation.go#L379-L388 + pub nodes: String, + /// Schedule specifies when a budget begins being active, following + /// the upstream cronjob syntax. If omitted, the budget is always active. + /// Timezones are not supported. + /// This field is required if Duration is set. + #[serde(default, skip_serializing_if = "Option::is_none")] + pub schedule: Option, +} + +/// Disruption contains the parameters that relate to Karpenter's disruption logic +#[derive(Serialize, Deserialize, Clone, Debug, PartialEq)] +pub enum NodePoolDisruptionConsolidationPolicy { + WhenEmpty, + WhenUnderutilized, +} + +/// Template contains the template of possibilities for the provisioning logic to launch a NodeClaim with. +/// NodeClaims launched from this NodePool will often be further constrained than the template specifies. +#[derive(Serialize, Deserialize, Clone, Debug, PartialEq)] +pub struct NodePoolTemplate { + #[serde(default, skip_serializing_if = "Option::is_none")] + pub metadata: Option, + /// NodeClaimSpec describes the desired state of the NodeClaim + pub spec: NodePoolTemplateSpec, +} + +#[derive(Serialize, Deserialize, Clone, Debug, PartialEq)] +pub struct NodePoolTemplateMetadata { + /// Annotations is an unstructured key value map stored with a resource that may be + /// set by external tools to store and retrieve arbitrary metadata. They are not + /// queryable and should be preserved when modifying objects. + /// More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/annotations + #[serde(default, skip_serializing_if = "Option::is_none")] + pub annotations: Option>, + /// Map of string keys and values that can be used to organize and categorize + /// (scope and select) objects. May match selectors of replication controllers + /// and services. + /// More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels + #[serde(default, skip_serializing_if = "Option::is_none")] + pub labels: Option>, +} + +/// NodeClaimSpec describes the desired state of the NodeClaim +#[derive(Serialize, Deserialize, Clone, Debug, PartialEq)] +pub struct NodePoolTemplateSpec { + /// Kubelet defines args to be used when configuring kubelet on provisioned nodes. + /// They are a subset of the upstream types, recognizing not all options may be supported. + /// Wherever possible, the types and names should reflect the upstream kubelet types. + #[serde(default, skip_serializing_if = "Option::is_none")] + pub kubelet: Option, + /// NodeClassRef is a reference to an object that defines provider specific configuration + #[serde(rename = "nodeClassRef")] + pub node_class_ref: NodePoolTemplateSpecNodeClassRef, + /// Requirements are layered with GetLabels and applied to every node. + pub requirements: Vec, + /// Resources models the resource requirements for the NodeClaim to launch + #[serde(default, skip_serializing_if = "Option::is_none")] + pub resources: Option, + /// StartupTaints are taints that are applied to nodes upon startup which are expected to be removed automatically + /// within a short period of time, typically by a DaemonSet that tolerates the taint. These are commonly used by + /// daemonsets to allow initialization and enforce startup ordering. StartupTaints are ignored for provisioning + /// purposes in that pods are not required to tolerate a StartupTaint in order to have nodes provisioned for them. + #[serde(default, skip_serializing_if = "Option::is_none", rename = "startupTaints")] + pub startup_taints: Option>, + /// Taints will be applied to the NodeClaim's node. + #[serde(default, skip_serializing_if = "Option::is_none")] + pub taints: Option>, +} + +/// Kubelet defines args to be used when configuring kubelet on provisioned nodes. +/// They are a subset of the upstream types, recognizing not all options may be supported. +/// Wherever possible, the types and names should reflect the upstream kubelet types. +#[derive(Serialize, Deserialize, Clone, Debug, PartialEq)] +pub struct NodePoolTemplateSpecKubelet { + /// clusterDNS is a list of IP addresses for the cluster DNS server. + /// Note that not all providers may use all addresses. + #[serde(default, skip_serializing_if = "Option::is_none", rename = "clusterDNS")] + pub cluster_dns: Option>, + /// CPUCFSQuota enables CPU CFS quota enforcement for containers that specify CPU limits. + #[serde(default, skip_serializing_if = "Option::is_none", rename = "cpuCFSQuota")] + pub cpu_cfs_quota: Option, + /// EvictionHard is the map of signal names to quantities that define hard eviction thresholds + #[serde(default, skip_serializing_if = "Option::is_none", rename = "evictionHard")] + pub eviction_hard: Option>, + /// EvictionMaxPodGracePeriod is the maximum allowed grace period (in seconds) to use when terminating pods in + /// response to soft eviction thresholds being met. + #[serde(default, skip_serializing_if = "Option::is_none", rename = "evictionMaxPodGracePeriod")] + pub eviction_max_pod_grace_period: Option, + /// EvictionSoft is the map of signal names to quantities that define soft eviction thresholds + #[serde(default, skip_serializing_if = "Option::is_none", rename = "evictionSoft")] + pub eviction_soft: Option>, + /// EvictionSoftGracePeriod is the map of signal names to quantities that define grace periods for each eviction signal + #[serde(default, skip_serializing_if = "Option::is_none", rename = "evictionSoftGracePeriod")] + pub eviction_soft_grace_period: Option>, + /// ImageGCHighThresholdPercent is the percent of disk usage after which image + /// garbage collection is always run. The percent is calculated by dividing this + /// field value by 100, so this field must be between 0 and 100, inclusive. + /// When specified, the value must be greater than ImageGCLowThresholdPercent. + #[serde(default, skip_serializing_if = "Option::is_none", rename = "imageGCHighThresholdPercent")] + pub image_gc_high_threshold_percent: Option, + /// ImageGCLowThresholdPercent is the percent of disk usage before which image + /// garbage collection is never run. Lowest disk usage to garbage collect to. + /// The percent is calculated by dividing this field value by 100, + /// so the field value must be between 0 and 100, inclusive. + /// When specified, the value must be less than imageGCHighThresholdPercent + #[serde(default, skip_serializing_if = "Option::is_none", rename = "imageGCLowThresholdPercent")] + pub image_gc_low_threshold_percent: Option, + /// KubeReserved contains resources reserved for Kubernetes system components. + #[serde(default, skip_serializing_if = "Option::is_none", rename = "kubeReserved")] + pub kube_reserved: Option>, + /// MaxPods is an override for the maximum number of pods that can run on + /// a worker node instance. + #[serde(default, skip_serializing_if = "Option::is_none", rename = "maxPods")] + pub max_pods: Option, + /// PodsPerCore is an override for the number of pods that can run on a worker node + /// instance based on the number of cpu cores. This value cannot exceed MaxPods, so, if + /// MaxPods is a lower value, that value will be used. + #[serde(default, skip_serializing_if = "Option::is_none", rename = "podsPerCore")] + pub pods_per_core: Option, + /// SystemReserved contains resources reserved for OS system daemons and kernel memory. + #[serde(default, skip_serializing_if = "Option::is_none", rename = "systemReserved")] + pub system_reserved: Option>, +} + +/// NodeClassRef is a reference to an object that defines provider specific configuration +#[derive(Serialize, Deserialize, Clone, Debug, PartialEq)] +pub struct NodePoolTemplateSpecNodeClassRef { + /// API version of the referent + #[serde(default, skip_serializing_if = "Option::is_none", rename = "apiVersion")] + pub api_version: Option, + /// Kind of the referent; More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds" + #[serde(default, skip_serializing_if = "Option::is_none")] + pub kind: Option, + /// Name of the referent; More info: http://kubernetes.io/docs/user-guide/identifiers#names + pub name: String, +} + +/// A node selector requirement is a selector that contains values, a key, and an operator +/// that relates the key and values. +#[derive(Serialize, Deserialize, Clone, Debug, PartialEq)] +pub struct NodePoolTemplateSpecRequirements { + /// The label key that the selector applies to. + pub key: String, + /// Represents a key's relationship to a set of values. + /// Valid operators are In, NotIn, Exists, DoesNotExist. Gt, and Lt. + pub operator: NodePoolTemplateSpecRequirementsOperator, + /// An array of string values. If the operator is In or NotIn, + /// the values array must be non-empty. If the operator is Exists or DoesNotExist, + /// the values array must be empty. If the operator is Gt or Lt, the values + /// array must have a single element, which will be interpreted as an integer. + /// This array is replaced during a strategic merge patch. + #[serde(default, skip_serializing_if = "Option::is_none")] + pub values: Option>, +} + +/// A node selector requirement is a selector that contains values, a key, and an operator +/// that relates the key and values. +#[derive(Serialize, Deserialize, Clone, Debug, PartialEq)] +pub enum NodePoolTemplateSpecRequirementsOperator { + In, + NotIn, + Exists, + DoesNotExist, + Gt, + Lt, +} + +/// Resources models the resource requirements for the NodeClaim to launch +#[derive(Serialize, Deserialize, Clone, Debug, PartialEq)] +pub struct NodePoolTemplateSpecResources { + /// Requests describes the minimum required resources for the NodeClaim to launch + #[serde(default, skip_serializing_if = "Option::is_none")] + pub requests: Option>, +} + +/// The node this Taint is attached to has the "effect" on +/// any pod that does not tolerate the Taint. +#[derive(Serialize, Deserialize, Clone, Debug, PartialEq)] +pub struct NodePoolTemplateSpecStartupTaints { + /// Required. The effect of the taint on pods + /// that do not tolerate the taint. + /// Valid effects are NoSchedule, PreferNoSchedule and NoExecute. + pub effect: NodePoolTemplateSpecStartupTaintsEffect, + /// Required. The taint key to be applied to a node. + pub key: String, + /// TimeAdded represents the time at which the taint was added. + /// It is only written for NoExecute taints. + #[serde(default, skip_serializing_if = "Option::is_none", rename = "timeAdded")] + pub time_added: Option, + /// The taint value corresponding to the taint key. + #[serde(default, skip_serializing_if = "Option::is_none")] + pub value: Option, +} + +/// The node this Taint is attached to has the "effect" on +/// any pod that does not tolerate the Taint. +#[derive(Serialize, Deserialize, Clone, Debug, PartialEq)] +pub enum NodePoolTemplateSpecStartupTaintsEffect { + NoSchedule, + PreferNoSchedule, + NoExecute, +} + +/// The node this Taint is attached to has the "effect" on +/// any pod that does not tolerate the Taint. +#[derive(Serialize, Deserialize, Clone, Debug, PartialEq)] +pub struct NodePoolTemplateSpecTaints { + /// Required. The effect of the taint on pods + /// that do not tolerate the taint. + /// Valid effects are NoSchedule, PreferNoSchedule and NoExecute. + pub effect: NodePoolTemplateSpecTaintsEffect, + /// Required. The taint key to be applied to a node. + pub key: String, + /// TimeAdded represents the time at which the taint was added. + /// It is only written for NoExecute taints. + #[serde(default, skip_serializing_if = "Option::is_none", rename = "timeAdded")] + pub time_added: Option, + /// The taint value corresponding to the taint key. + #[serde(default, skip_serializing_if = "Option::is_none")] + pub value: Option, +} + +/// The node this Taint is attached to has the "effect" on +/// any pod that does not tolerate the Taint. +#[derive(Serialize, Deserialize, Clone, Debug, PartialEq)] +pub enum NodePoolTemplateSpecTaintsEffect { + NoSchedule, + PreferNoSchedule, + NoExecute, +} + +/// NodePoolStatus defines the observed state of NodePool +#[derive(Serialize, Deserialize, Clone, Debug, PartialEq)] +pub struct NodePoolStatus { + /// Resources is the list of resources that have been provisioned. + #[serde(default, skip_serializing_if = "Option::is_none")] + pub resources: Option>, +} + diff --git a/kube-custom-resources-rs/src/lib.rs b/kube-custom-resources-rs/src/lib.rs index 679f4ab23..ac29ce686 100644 --- a/kube-custom-resources-rs/src/lib.rs +++ b/kube-custom-resources-rs/src/lib.rs @@ -1280,6 +1280,17 @@ apiVersion `kamaji.clastix.io/v1alpha1`: - `DataStore` - `TenantControlPlane` +## karpenter_k8s_aws + +apiVersion `karpenter.k8s.aws/v1beta1`: +- `EC2NodeClass` + +## karpenter_sh + +apiVersion `karpenter.sh/v1beta1`: +- `NodeClaim` +- `NodePool` + ## keda_sh apiVersion `keda.sh/v1alpha1`: @@ -2694,6 +2705,10 @@ pub mod k8up_io; pub mod kafka_strimzi_io; #[cfg(feature = "kamaji_clastix_io")] pub mod kamaji_clastix_io; +#[cfg(feature = "karpenter_k8s_aws")] +pub mod karpenter_k8s_aws; +#[cfg(feature = "karpenter_sh")] +pub mod karpenter_sh; #[cfg(feature = "keda_sh")] pub mod keda_sh; #[cfg(feature = "keycloak_k8s_reddec_net")]